last executing test programs: 1m59.223525503s ago: executing program 0 (id=3534): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m59.035026862s ago: executing program 0 (id=3536): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1fffffffffffff30, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000000240)=""/4103, 0x0, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1m58.839046696s ago: executing program 0 (id=3538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1a0000000400000005ffffe70400000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0xcdfbbdff48631df7}, 0x38) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x148, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xb4, 0x1, [@m_ctinfo={0xb0, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x82, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m58.619351919s ago: executing program 0 (id=3540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xba}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)=""/165, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8ce3}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x8}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380), 0x8) 1m53.731270642s ago: executing program 0 (id=3549): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000004840)=[@in6={0xa, 0x4e23, 0x8, @remote, 0x7fff}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x18) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64) sendmsg$802154_raw(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)="ebddfa", 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x4c880) 1m52.775329091s ago: executing program 0 (id=3552): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x68, 0x1, {{'rmd160\x00'}, 0x100, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmmsg$unix(r6, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) (async) sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f00000005c0), 0x2, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000340), 0x2, 0x0) close(r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000b0601080000000000008080050000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r11, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x28}}, 0x2000c050) 1m37.637492076s ago: executing program 32 (id=3552): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x68, 0x1, {{'rmd160\x00'}, 0x100, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmmsg$unix(r6, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) (async) sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f00000005c0), 0x2, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000340), 0x2, 0x0) close(r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000b0601080000000000008080050000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r11, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x28}}, 0x2000c050) 28.356665273s ago: executing program 3 (id=4176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x4084) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7fffffff, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x4084) (async) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7fffffff, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) (async) 26.451474205s ago: executing program 3 (id=4181): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000", @ANYBLOB="1c82daee675207d1d395d0db2a28d98b2a66d26defb3b4b34856", @ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc6, &(0x7f00000000c0)=""/198, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x2}) 26.449331504s ago: executing program 2 (id=4182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x1843}, 0x18) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 26.213428415s ago: executing program 2 (id=4186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x38, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc014}, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r7, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80, 0x800) 26.127376805s ago: executing program 3 (id=4189): syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa65c6aaaa00000000000008004500003c0000000000119078ac1e0001ac141444070000"], 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x2, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000001000000300000000000000000000000000009500"/43], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000800) recvmsg$unix(r3, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2102) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000008000007912"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800009500000000000000000000000000000800000000000fcc7d355e93e8268d1ad34d12f122b0679593dd05ff5a7b60ba1c2f7f826007e74eb27db9cdf810342ca270ce17ad5256ef64eb648089ee46e016266edc07b11b01004e03b7e76f896508514439e50d1d600ea5b665a455620a6a28fc33146bb9305971511a831d1967ec83b3a955ca323922e2e614157cd88983d0096e89993f08113a8055cb23a608509d912d397f805f0fda24b5705f556e1735114f64addf3f1610e9e7547483f6f9b74331b6e61eae9690f68271cdc9cc5ee1aadbcd04917ca31a33bc2318e1dd125fe766c8092e974c776bb737cbc8e9bcf77a5900"/267], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000500)="390000001300e502c24d4af2f381ffff013d00000000000000c000005600000025000000fdd411830800000000000000", 0x30}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) 25.989726446s ago: executing program 2 (id=4192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="6401274f7ce901e9fd9fd145c343bebd17325df5653b350be5a0ca3d3116b32b76a40da988b849f125f86b28c0edcd8d235b0c26a5d93fe955366b7dfda609ded332bf08f3a2ac6c7651131c05fe700792dbdb59983eb3abe32112f8e0e03a9f579f2b150879a0006351072c88dc38b410888b99e60a6cb67be8", @ANYRES16=r1, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0xc8d0}, 0x24000801) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x1d, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x140, 0x30, 0xb, 0x0, 0x0, {}, [{0x12c, 0x1, [@m_skbmod={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0x0, 0x3, @random="18156c60e65d"}, @TCA_SKBMOD_ETYPE={0x6}]}, {0xcf, 0x6, "417531ae5ebf68c42ec7fd9afdf2ec1621d2fe80b38fb3449ba0e3840bee3e11f942cb6f3689d4f2775c4b21d0f87f55bb95980acc072fc9cb8103ec78d5fe618ec588feff938a3f492146425b6a132c0022dbab766056b4c6ae27dcf083bb0ab8e5d6daf2e641f71e29708b1e227620396a22dc1e18a50bfd2ff5c2fd3ef8f6f205020000000080d44be348841c22dc8c4a3683297482d3a5a901006aa32800000f0000000002f1c979f302b3b79a27309476742dad2f0a3a0a80b9d46da2d25521087d7fdaae87b75a0490712fd200000000"}, {0xc}, {0xc}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) 25.899511159s ago: executing program 2 (id=4194): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x61, 0x2e]}}, 0x0, 0x40}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000001c0012800b00010062726964676500000cff028006002700010060883a518dac0000"], 0x3c}}, 0x0) 25.667332944s ago: executing program 2 (id=4196): epoll_create1(0x0) (async) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7, 0x7, 0xd1, 0x9, {{0xa, 0x4, 0x1, 0x11, 0x28, 0x68, 0x0, 0x10, 0x4, 0x0, @empty, @loopback, {[@noop, @generic={0x86, 0x3, 'E'}, @lsrr={0x83, 0xf, 0xca, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}]}}}}}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000000340)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x8, 0x7, 0x4, 0x0, 0x2, 0x3ff, 0x6, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x4b1, 0x1, 0x550, 0xb, 0x7fff}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000004c0)={r6}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x2, 0x10000, 0x0, r2, 0x3ff, '\x00', r3, r5, 0x2, 0x0, 0x2, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x2, 0x10000, 0x0, r2, 0x3ff, '\x00', r3, r5, 0x2, 0x0, 0x2, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYRES32=r7], 0x110}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb62d}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x1) 25.601366897s ago: executing program 2 (id=4198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x3, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000040)="9fedc562106a2793a1ac0269388aefe4de5712751534235ac0c7a0331ddf96d07670d46d723fb3f39c730fdf77e6", &(0x7f0000000280)=""/182, &(0x7f00000001c0)="2f8bb089b15c7a8400db4fe9d49909da4a1aa819605f5911b15ea90e81c90e782d6acc9713d3853daab9305fd51a9475027ade9ffe5b", &(0x7f0000000200)="cc4c8d6e7a226a0ef705a5e6358f4b7c6747ff5098d299359afcab75b316e59fe3dc497ef04b93c5738fb4", 0x7bd5, r3, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 25.548331115s ago: executing program 1 (id=4199): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x2400c804}, 0x4000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0xc8d1, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc0100001900010026bd7000000000000a010100000000000000000000000000ac14142600000000000000000000000000000003000000000a000020080000002ddc038ae3b216fee5942ec00a43403191d6fca0ab0085c0c3f038285ac07f5e4b914366bebc9bbec2a1197c8202de8a65eaa200dfc58160c3f1933c47acdf22bd4cbfeaef1754f3988651c3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x8000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r1, @ANYRES32=r9], &(0x7f0000000040)='GPL\x00', 0x7, 0xc6, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/9, 0x9, 0x21, &(0x7f0000000380)={0x2, 0x4e21, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000400)={0x4, &(0x7f00000004c0)=[{0xf7, 0x7, 0xff, 0x4}, {0xfffe, 0xc, 0x1}, {0x2, 0x0, 0x8, 0x5}, {0xce, 0x7f, 0x3, 0x8}]}, 0x10) 25.331376995s ago: executing program 4 (id=4200): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x900, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8016) 25.223368608s ago: executing program 4 (id=4201): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x89}, {0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x4, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d2, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x9, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 24.985608047s ago: executing program 3 (id=4202): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.827368463s ago: executing program 4 (id=4203): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x28, &(0x7f0000000980)=""/208, &(0x7f0000000640)=0xd0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'macvlan0\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x7, 0x5}, 0x0, 0x258, 0x278, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0xaf53, 0x5, 0x4, 0x0, 0x7, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@multicast1, [0x0, 0x0, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3500, 0x3a, 0x0, 0x13, 0xd}, {@ipv4=@local, [0xff000000, 0xff000000, 0xff], @ipv6=@private1, [0x100000100, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3507, 0xf6, 0x1, 0x6, 0x1b}, {@ipv6=@rand_addr=' \x01\x00', [0xffffff, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xffffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x6c, 0x1, 0xd, 0x15}, {@ipv4=@multicast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, [0x0, 0x0, 0xff000000], 0x4d6, 0x0, 0x6, 0x1, 0x6, 0xafcf8a57df96f1de}], 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c8) r5 = socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000001004740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r9, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r6}) bind$xdp(r7, &(0x7f0000000780)={0x2c, 0x9, r10, 0x18, r11}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, r13}, 0x40) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000700)=@raw=[@map_idx, @alu={0x4, 0x0, 0x4, 0xa, 0x4, 0x20, 0xfffffffffffffff0}], &(0x7f0000000800)='syzkaller\x00', 0x8e38, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x1, 0x11}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000008c0)=[r14, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000a80)=[{0x2, 0x4, 0x4, 0x6}, {0x3, 0x4, 0x6, 0xb}, {0x4, 0x5, 0xa, 0x2440f04395686643}, {0x4, 0x5, 0x3, 0xa}, {0x2, 0x2, 0x5, 0x3}, {0x0, 0x2, 0x8, 0x8}, {0x5, 0x4, 0x2, 0x9}, {0x4, 0x2, 0x7, 0x8}, {0x1, 0x2, 0x2, 0x9}, {0x2, 0x2, 0x0, 0x4}], 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r15, 0x0, 0xeb, 0xfe, &(0x7f0000000c00)="a7c9008074a3f1aa059c5ce142252371caa072db5e9b4d24ea2d0ddd4cc90f09db459f3525eaca83cc6d7320c45cfa79efbda2b4c61cb2eb635d43a0bdc3aa4b86dff589ddb257594252e27e613ce7d0882ab740189bf9c9ea5bd9369eb1f0f43209f04df196951eecf61e3792293be149202f20032edae578a1508fe03c55ece31e08c8a2fbd6fae2b21bbce8e8bc1d2d57ec4872642588e0aa7a855a4782f8250a6b5a23a458c1308fc18af3f9bf64a2cb36e64e185d4ca939c4cbb10e6294a774fba85e76bae17f99a81d81c6e0ece72518bc675de94900bee4c65bbf9379b2deda9a8bb5c3e6eeeab8", &(0x7f0000000d00)=""/254, 0x7, 0x0, 0x6d, 0x1a, &(0x7f0000000900)="50a5a68ba03e8ca556a823a2b0a4de84e36dceed0dfe86e2570a9fb64fec57a424aa0679c85ca0db1673e3def2eb89b78ace1d4e660270502999e18f7baad2e3aa98aa04d43ae693aad2c0bccb995d2548857aff083ef8c155f785896d71920fde238a03b902a4fcc44a99079e", &(0x7f0000000e00)="d4c406761d7c5975cc2f0495bf4312654394b16ee9723e06cc65", 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 24.763228697s ago: executing program 3 (id=4205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) 24.594223149s ago: executing program 4 (id=4206): socket$alg(0x26, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000d10000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000400)=""/199, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xa, 0xfffffffe}, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xdb, &(0x7f0000003e40)=""/219, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 24.469206937s ago: executing program 1 (id=4208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) listen(r3, 0x0) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000016c0)={0x40000001}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000040), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@fwd={0xf}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0x8, 0x8}]}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000400)=""/21, 0x64, 0x15, 0x1, 0x5, 0x10000}, 0x28) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r12, 0x1, 0x50bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x5, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c011}, 0x4) 24.387026663s ago: executing program 4 (id=4209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) sendto$inet6(r2, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 24.135285946s ago: executing program 5 (id=4210): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) (async) socket$key(0xf, 0x3, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r1 = socket(0x200000000000011, 0x2, 0xd) r2 = socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async) r6 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) (async) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x26, &(0x7f00000002c0)=0x20000001, 0x4) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r8, &(0x7f0000000040)="0d000000010001", 0x7) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) (async) close(0x3) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xf0, 0x8, 0x2}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1010000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r9, &(0x7f0000000380), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket(0xa, 0x3, 0x3a) (async) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 23.841041115s ago: executing program 5 (id=4211): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x188, 0x194, 0x194, 0x188, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0xf, {0x2}}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4, 0x3}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x5, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f00000003c0)="7ab155ff0cf95bc4e086d4e3a03c1eec70c0b50cc09e19ca281e74c27d0342168eadfcea2d361d5c994f126cf26d2d09f5d6653dd4a2a5c5a99342c6b025df48203493517db8b2e74c3ec157a9d75b5e764122f7d9d449233edf44cac6a25f9fc1d2623f4d15a690ec574b02482a5040bf48a6842fec1c37895e7d66d8ee95ecc3abaac6ac6c5e33d9de20cdf72f81489587187ecab379419403189ea98282753101b8858e26cac53438b3b199498104fa49f01542f24410e825347dda27f97c077cf40a0507f444ac047bd24d531e2f1aafa1802b4093", 0xd7, 0x8840, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000280)=0x400001, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) syz_emit_ethernet(0x0, 0x0, 0x0) accept(r4, &(0x7f0000000340)=@ethernet, &(0x7f00000000c0)=0x80) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="3b000000010006", 0x7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet_sctp(r1, 0x0, 0x6008045) 23.54700481s ago: executing program 4 (id=4212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x3f02) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000280)=0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8413}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, &(0x7f0000000200)) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 23.343304952s ago: executing program 5 (id=4213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r3, 0x8, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x90410000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffa8, 0x15}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4805) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x78bd25, 0x8004, {0x0, 0x0, 0x0, r12, {0xf, 0x7}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xffffffffffffffd1, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 23.342914968s ago: executing program 1 (id=4214): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=0x0], &(0x7f0000000340)=""/183, 0xa2, 0xb7, 0x1, 0x4}, 0x28) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='rpc_call_rpcerror\x00', 0xffffffffffffffff, 0x0, 0x2}, 0xffffffffffffff05) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macsec0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendfile(r2, r1, 0x0, 0x10000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, 0x0, 0x20000811) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) bind$l2tp6(r4, &(0x7f0000000180)={0xa, 0x0, 0x3978, @remote, 0x7, 0x1}, 0x20) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2c, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff8000"/28], 0x38}}, 0x0) close(r7) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r12, &(0x7f0000000d40), 0x0, 0x40001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) 21.208165553s ago: executing program 1 (id=4215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) close(0x3) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x70}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 21.088720026s ago: executing program 1 (id=4216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000240), &(0x7f0000000280)=@tcp, 0x3}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @mcast2, @remote, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001ac0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8097, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r6, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf252500000005002b000100000005002a004400000008000200", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 20.995028151s ago: executing program 5 (id=4217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x124, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x31}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x108}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x506}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x49}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_PROTOINFO={0x2c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x28, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1c}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_NAT_DST={0x84, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x471e}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_MARK_MASK={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x4091}, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20048040) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1ff, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004818}, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="61074a62bcb4"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="245747c691ea"}]}, 0x64}, 0x1, 0x0, 0x0, 0x60}, 0x40) r5 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000800)={'ip_vti0\x00', r6, 0x7800, 0x80, 0xf8, 0xb, {{0x10, 0x4, 0x2, 0x0, 0x40, 0x65, 0xff, 0x10, 0x4, 0x0, @private=0xa010100, @broadcast, {[@ssrr={0x89, 0x17, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x19, 0x3, 0x4}, @rr={0x7, 0xf, 0x54, [@private=0xa010101, @empty, @empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'nicvf0\x00'}) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2090000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$bt_l2cap(r1, &(0x7f0000000a00)={0x1f, 0x112f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffd, 0x2}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x1, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000a40)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000a80)=0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000b80)={r8, 0xa0, &(0x7f0000000ac0)=[@in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0xa, @empty, 0x3}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x6, @mcast2, 0x1}]}, &(0x7f0000000bc0)=0x10) write$rfkill(r1, &(0x7f0000000c00)={0x0, 0x2, 0x0, 0x1, 0x1}, 0x8) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x188, 0x12, 0x20, 0x70bd2c, 0x25dfdbfc, {0x3, 0xf4, 0x0, 0x9, {0x4e23, 0x4e23, [0xd, 0x2, 0x7, 0x9], [0x6a8c, 0x258a0, 0x7, 0x9], r6, [0x5, 0x3]}, 0xffff8d15, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "a6050ae7b931a3e63ce0376575ffae67e4d64aeb1cc3714bebea223c274716d43fdafb2cbdf628fd137f6f55cea877f692fdf6e7ff35e7fdc78630a66d4bff7a99ef4da55c41c144931769c12dcbdb69c13392bfce04550146af7f2c84bc00eb80b6c24218c5b12cb09326628b8a86c33d5e3725b60d4c39f9d6580ae572dc3bcb588ac863e68b3e48f23609d1a0507b60056545a1b1a42e5041c03e84342e08d7e45fb71b632b23cc66182268e82e9f6396d672a36c58303de1fc7e84209200417a"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "4334e5720ad149641920e35a7dcf637e9c2da25670ded1a0edf8ab273fd29ef25f2275099841e9e1a439eac76f97a4"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "6dd6a71b9424cdbe7ae42e3ccfa26da046caf40d856401b3ee403d6114"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "bd19711ff6bf0336145703bd2cbd433d4387688df10d"}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f00), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r9, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1ff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44004}, 0x41) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000010c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001100)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x54, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) 20.885022436s ago: executing program 1 (id=4218): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001600)={0x3, 0x0}, 0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ac000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300003dfc00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000001641bd807c10b47391"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x12, 0x2a, &(0x7f0000001440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x2, 0x5, 0x5, 0x100, 0xfffffffffffffff0}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x45, &(0x7f0000000240)=""/69, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x33, r4, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0xd, 0x3732, 0x4}, 0x10, r5, r1, 0x0, &(0x7f0000001640)=[r2, r2, r2, r3, r6, r3], 0x0, 0x10, 0x3}, 0x94) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 20.74032064s ago: executing program 5 (id=4219): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) sendmmsg$inet(r0, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000028c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002ac0)}}], 0x2, 0x4800) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) r5 = accept4$ax25(r1, &(0x7f0000000400)={{}, [@netrom, @null, @rose, @null, @remote, @rose, @netrom, @null]}, &(0x7f0000000180)=0x48, 0x80000) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000480)=r3, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1e8, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5df}, {0x6, 0x16, 0xfffb}, {0x5, 0x12, 0x3}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x309}, {0x8, 0xb, 0xf6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0xe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x829f}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x76}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7fff}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x478}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0xfffffff4}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f0000000100)=0x1, 0x4) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 20.567410338s ago: executing program 5 (id=4220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) sendmmsg$inet6(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)="2838f353786896fd288b396f689fad2306c43d14ca9a8689d16d539f914313b88187eec9e91aa76d8058d693b81e2da063c2f7d35735659a9f5448ee477118fe1d568922745ed5f408", 0x49}], 0x1}}], 0x1, 0x8004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000b00)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x9, 0x1, &(0x7f0000000100)='\x00', 0x9, 0x1, 0x15c2, 0x5505, 0x87, 0x1, 0x9, 'syz0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008840) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 20.389723365s ago: executing program 3 (id=4221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f642cbd70010080000034000000080073000000000008000300fdffffff0e00020000000000000002696d0011000f0002006e657464657673696d3000000016b28ff8d7ca76c6f0018bcac7f5cdcf2685ee2b7de79102147b5dcc4410041e0e51179043aac75d352a402a603743ba61a5043770bc1f599d9a767fa03e"], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x3) (async) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) (async) getsockname$packet(r7, 0x0, 0x0) connect$rose(r7, 0x0, 0x0) 9.479213173s ago: executing program 33 (id=4198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x3, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000040)="9fedc562106a2793a1ac0269388aefe4de5712751534235ac0c7a0331ddf96d07670d46d723fb3f39c730fdf77e6", &(0x7f0000000280)=""/182, &(0x7f00000001c0)="2f8bb089b15c7a8400db4fe9d49909da4a1aa819605f5911b15ea90e81c90e782d6acc9713d3853daab9305fd51a9475027ade9ffe5b", &(0x7f0000000200)="cc4c8d6e7a226a0ef705a5e6358f4b7c6747ff5098d299359afcab75b316e59fe3dc497ef04b93c5738fb4", 0x7bd5, r3, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.169239757s ago: executing program 34 (id=4212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x3f02) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000280)=0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8413}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, &(0x7f0000000200)) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.939284055s ago: executing program 35 (id=4218): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001600)={0x3, 0x0}, 0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ac000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300003dfc00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000001641bd807c10b47391"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x12, 0x2a, &(0x7f0000001440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x2, 0x5, 0x5, 0x100, 0xfffffffffffffff0}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x45, &(0x7f0000000240)=""/69, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x33, r4, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0xd, 0x3732, 0x4}, 0x10, r5, r1, 0x0, &(0x7f0000001640)=[r2, r2, r2, r3, r6, r3], 0x0, 0x10, 0x3}, 0x94) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1.470202345s ago: executing program 36 (id=4220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) sendmmsg$inet6(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)="2838f353786896fd288b396f689fad2306c43d14ca9a8689d16d539f914313b88187eec9e91aa76d8058d693b81e2da063c2f7d35735659a9f5448ee477118fe1d568922745ed5f408", 0x49}], 0x1}}], 0x1, 0x8004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000b00)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x9, 0x1, &(0x7f0000000100)='\x00', 0x9, 0x1, 0x15c2, 0x5505, 0x87, 0x1, 0x9, 'syz0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008840) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 0s ago: executing program 37 (id=4221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f642cbd70010080000034000000080073000000000008000300fdffffff0e00020000000000000002696d0011000f0002006e657464657673696d3000000016b28ff8d7ca76c6f0018bcac7f5cdcf2685ee2b7de79102147b5dcc4410041e0e51179043aac75d352a402a603743ba61a5043770bc1f599d9a767fa03e"], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x3) (async) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) (async) getsockname$packet(r7, 0x0, 0x0) connect$rose(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): : 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 493.969545][T17422] geneve4: entered promiscuous mode [ 493.976611][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.990605][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.036532][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.059116][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.932946][T17450] geneve5: entered promiscuous mode [ 494.952716][T17450] geneve5: entered allmulticast mode [ 495.016989][T10748] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 1024 - 0 [ 495.040932][T10748] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 1024 - 0 [ 495.076210][T10748] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 1024 - 0 [ 495.119361][T10748] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 1024 - 0 [ 495.203974][T17406] chnl_net:caif_netlink_parms(): no params data found [ 495.312860][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 495.469530][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.481195][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.503899][T17406] bridge_slave_0: entered allmulticast mode [ 495.513364][T17406] bridge_slave_0: entered promiscuous mode [ 495.525033][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.545967][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.560250][T17406] bridge_slave_1: entered allmulticast mode [ 495.574975][T17406] bridge_slave_1: entered promiscuous mode [ 495.609327][ T52] Bluetooth: hci3: command tx timeout [ 495.635814][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 495.653198][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.667360][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.729685][T17406] team0: Port device team_slave_0 added [ 495.751637][T17406] team0: Port device team_slave_1 added [ 495.770940][T17482] vxcan1: entered allmulticast mode [ 495.817447][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.826497][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.864452][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.899233][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.908510][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.947137][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.204510][T17406] hsr_slave_0: entered promiscuous mode [ 496.212571][T17406] hsr_slave_1: entered promiscuous mode [ 496.220074][T17406] debugfs: 'hsr0' already exists in 'hsr' [ 496.226030][T17406] Cannot create hsr debugfs directory [ 496.342869][T17494] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 496.419139][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 496.440686][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3019'. [ 496.475223][T17494] sch_fq: defrate 4294967293 ignored. [ 496.513803][T17494] vlan2: entered allmulticast mode [ 496.519356][T17494] bond8: entered allmulticast mode [ 496.557802][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 496.608801][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3019'. [ 496.876033][T17509] xt_TCPMSS: Only works on TCP SYN packets [ 496.896104][T17511] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 496.911835][T17508] lo speed is unknown, defaulting to 1000 [ 496.937410][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 496.943474][T17513] netlink: 'syz.0.3024': attribute type 11 has an invalid length. [ 496.983711][T17513] tipc: Enabling of bearer rejected, failed to enable media [ 497.019336][T17513] ipt_ECN: cannot use operation on non-tcp rule [ 497.537005][T17529] __nla_validate_parse: 2 callbacks suppressed [ 497.537025][T17529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3029'. [ 497.587242][T17531] netlink: 'syz.3.3030': attribute type 14 has an invalid length. [ 497.604791][T17534] netlink: 'syz.4.3031': attribute type 1 has an invalid length. [ 497.615641][T17534] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3031'. [ 497.653125][T17534] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3031'. [ 497.693342][ T52] Bluetooth: hci3: command tx timeout [ 497.739843][T17541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3029'. [ 497.876005][T17547] pim6reg1: entered promiscuous mode [ 497.884579][T17547] pim6reg1: entered allmulticast mode [ 497.964705][T17406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 498.024894][T17406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 498.089519][T17406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 498.131281][T17406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 498.403544][T17573] ip6gretap0: entered promiscuous mode [ 498.433941][T17573] macsec1: entered promiscuous mode [ 498.468399][T17573] ip6gretap0: left promiscuous mode [ 498.784258][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.851015][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.906849][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.914084][T10745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.012749][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.019978][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.112548][T17610] netlink: 'syz.0.3046': attribute type 1 has an invalid length. [ 499.336793][T17618] netlink: 'syz.0.3049': attribute type 29 has an invalid length. [ 499.347250][T17618] netlink: 'syz.0.3049': attribute type 29 has an invalid length. [ 499.357340][T17618] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3049'. [ 499.650526][T17637] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3052'. [ 499.681767][T17629] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 499.742555][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.771538][ T52] Bluetooth: hci3: command tx timeout [ 499.811414][T17406] veth0_vlan: entered promiscuous mode [ 499.853844][T17406] veth1_vlan: entered promiscuous mode [ 499.932891][T17406] veth0_macvtap: entered promiscuous mode [ 499.955327][T17406] veth1_macvtap: entered promiscuous mode [ 500.033526][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.109509][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.153912][T10748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.181767][T10748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.213359][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 500.244131][ T1104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.257672][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.500824][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.521386][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.587568][T13441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.601853][T13441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.612197][T17673] TCP: TCP_TX_DELAY enabled [ 500.791519][T17687] netlink: 'syz.3.3067': attribute type 1 has an invalid length. [ 501.030422][T17687] 8021q: adding VLAN 0 to HW filter on device bond7 [ 501.215454][T17694] veth3: entered promiscuous mode [ 501.258370][T17694] bond7: (slave veth3): Enslaving as an active interface with a down link [ 501.318391][T17701] tipc: Enabling of bearer rejected, failed to enable media [ 501.399189][T17689] lo speed is unknown, defaulting to 1000 [ 501.547471][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.624309][T17712] netlink: 'syz.0.3071': attribute type 1 has an invalid length. [ 501.731959][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 501.744058][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 501.753379][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 501.765204][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 501.774263][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.849496][ T52] Bluetooth: hci3: command tx timeout [ 501.965140][T17712] 8021q: adding VLAN 0 to HW filter on device bond9 [ 502.010812][T17715] bond9: (slave geneve6): making interface the new active one [ 502.024093][T17715] bond9: (slave geneve6): Enslaving as an active interface with an up link [ 502.098483][T10748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.245533][T10748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.302830][T17714] lo speed is unknown, defaulting to 1000 [ 502.515528][T10748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.561577][T17733] syzkaller1: entered promiscuous mode [ 502.567199][T17733] syzkaller1: entered allmulticast mode [ 502.618348][T10748] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.804176][T17732] lo speed is unknown, defaulting to 1000 [ 502.922260][T10748] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 503.279057][T17745] netlink: 'syz.4.3078': attribute type 1 has an invalid length. [ 503.287700][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3078'. [ 503.401161][T10748] bond10 (unregistering): (slave gretap1): Releasing active interface [ 503.410696][T10748] gretap1 (unregistering): left allmulticast mode [ 503.508370][T10748] bond6 (unregistering): (slave gre3): Releasing backup interface [ 503.516977][T10748] gre3 (unregistering): left promiscuous mode [ 503.854880][ T5148] Bluetooth: hci5: command tx timeout [ 504.014954][T10748] bond3 (unregistering): (slave macvlan3): Releasing active interface [ 504.033447][T10748] bond0 (unregistering): (slave 30): Releasing backup interface [ 504.044114][T10748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.058408][T10748] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 504.092704][T10748] bond0 (unregistering): Released all slaves [ 504.111257][T10748] bond1 (unregistering): Released all slaves [ 504.125362][T10748] bond2 (unregistering): Released all slaves [ 504.140672][T10748] bond3 (unregistering): Released all slaves [ 504.304296][T10748] bond4 (unregistering): (slave veth3): Releasing active interface [ 504.313588][T10748] bond4 (unregistering): Released all slaves [ 504.468091][T10748] bond5 (unregistering): Released all slaves [ 504.616974][T10748] bond6 (unregistering): Released all slaves [ 504.770486][T10748] bond7 (unregistering): Released all slaves [ 504.785956][T10748] bond8 (unregistering): Released all slaves [ 504.801467][T10748] bond9 (unregistering): Released all slaves [ 504.958198][T10748] bond10 (unregistering): Released all slaves [ 504.972648][T17740] lo speed is unknown, defaulting to 1000 [ 505.117020][T10748] tipc: Disabling bearer [ 505.148493][T10748] tipc: Left network mode [ 505.263803][T10748] IPVS: stopping backup sync thread 12446 ... [ 505.930841][ T5148] Bluetooth: hci5: command tx timeout [ 507.074334][T17771] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3084'. [ 507.089225][T17771] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 507.167176][T10748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.182744][T10748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.226127][T17776] netlink: 'syz.2.3086': attribute type 11 has an invalid length. [ 508.019264][ T5148] Bluetooth: hci5: command tx timeout [ 508.037196][T10748] team_slave_1 (unregistering): left promiscuous mode [ 508.046666][T10748] team0 (unregistering): Port device team_slave_1 removed [ 508.101840][T10748] team_slave_0 (unregistering): left promiscuous mode [ 508.110682][T10748] team0 (unregistering): Port device team_slave_0 removed [ 508.462241][T10748] vxcan1 (unregistering): left allmulticast mode [ 508.715977][T17714] chnl_net:caif_netlink_parms(): no params data found [ 508.795042][T17777] netlink: 'syz.2.3086': attribute type 11 has an invalid length. [ 509.111610][T17714] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.138001][T17714] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.162601][T17714] bridge_slave_0: entered allmulticast mode [ 509.183829][T17714] bridge_slave_0: entered promiscuous mode [ 509.202561][T17714] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.212761][T17714] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.221530][T17714] bridge_slave_1: entered allmulticast mode [ 509.241058][T17714] bridge_slave_1: entered promiscuous mode [ 509.419668][T17714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.453135][T17714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.632224][T17824] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3097'. [ 509.642371][T17824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3097'. [ 509.709592][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3097'. [ 509.794723][T17828] netlink: 'syz.4.3100': attribute type 4 has an invalid length. [ 509.900490][T17811] netlink: 'syz.2.3097': attribute type 4 has an invalid length. [ 509.930763][T10748] IPVS: stop unused estimator thread 0... [ 509.934694][T17830] vlan2: entered allmulticast mode [ 509.951535][T17820] netlink: 'syz.2.3097': attribute type 4 has an invalid length. [ 510.011394][T17714] team0: Port device team_slave_0 added [ 510.041379][T17714] team0: Port device team_slave_1 added [ 510.091096][ T5148] Bluetooth: hci5: command tx timeout [ 510.106220][T17835] bridge: RTM_NEWNEIGH with invalid ether address [ 510.113911][T17714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.152917][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.207077][T17714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.222108][T17714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.230205][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.257344][T17714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.315306][T17846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'. [ 510.348153][T17846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'. [ 510.431019][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 510.440437][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3106'. [ 510.517945][T17856] nbd: must specify at least one socket [ 510.587701][T17714] hsr_slave_0: entered promiscuous mode [ 510.619914][T17714] hsr_slave_1: entered promiscuous mode [ 510.647048][T17714] debugfs: 'hsr0' already exists in 'hsr' [ 510.655216][T17714] Cannot create hsr debugfs directory [ 510.669815][T17858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3107'. [ 510.682766][T17865] netlink: 'syz.3.3107': attribute type 23 has an invalid length. [ 510.879819][T17872] tipc: Started in network mode [ 510.885451][T17872] tipc: Node identity 2200cbf94b21, cluster identity 4711 [ 510.893846][T17872] tipc: Enabled bearer , priority 0 [ 510.962073][T17881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3112'. [ 511.013972][T17876] netlink: 'syz.0.3112': attribute type 1 has an invalid length. [ 512.018909][ T43] tipc: Node number set to 1763822585 [ 512.991978][T17869] syzkaller0: entered promiscuous mode [ 512.997691][T17869] syzkaller0: entered allmulticast mode [ 513.033149][T17887] tipc: Resetting bearer [ 513.043968][T17868] tipc: Resetting bearer [ 513.072989][T17868] tipc: Disabling bearer [ 513.093451][T17882] lo speed is unknown, defaulting to 1000 [ 513.146858][T17892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3115'. [ 513.333061][T17896] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 513.347050][T17896] bond10 (unregistering): Released all slaves [ 513.694175][T17912] sctp: [Deprecated]: syz.0.3121 (pid 17912) Use of int in max_burst socket option deprecated. [ 513.694175][T17912] Use struct sctp_assoc_value instead [ 513.996589][T17922] netlink: 'syz.2.3124': attribute type 27 has an invalid length. [ 514.202716][T17714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.385769][T17934] openvswitch: netlink: Tunnel attr 30 out of range max 16 [ 514.398492][T17935] openvswitch: netlink: Tunnel attr 30 out of range max 16 [ 514.416474][T17714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.460958][T17714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.521879][T17714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 514.718183][T17956] netlink: 'syz.4.3132': attribute type 13 has an invalid length. [ 514.730262][T17956] netlink: 14589 bytes leftover after parsing attributes in process `syz.4.3132'. [ 514.767007][T17952] lo speed is unknown, defaulting to 1000 [ 514.780902][T17957] x_tables: duplicate underflow at hook 1 [ 514.900624][T17714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.939822][T17714] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.021588][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.028881][T10745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.056511][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.064103][T10745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.563542][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3135'. [ 515.845092][T17714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.919120][T17993] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3137'. [ 516.248029][T17993] veth3: entered promiscuous mode [ 516.391848][T17714] veth0_vlan: entered promiscuous mode [ 516.445443][T17714] veth1_vlan: entered promiscuous mode [ 516.591211][T17714] veth0_macvtap: entered promiscuous mode [ 516.616165][T17714] veth1_macvtap: entered promiscuous mode [ 516.717929][T17714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.781464][T17714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.859069][ T1104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.881190][ T1104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.911898][ T1104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.932942][ T1104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.960316][T18013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3146'. [ 516.990244][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 517.001455][T18007] batadv0: entered allmulticast mode [ 517.011121][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 517.022700][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.079565][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 517.139687][T18017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3148'. [ 517.238943][T10748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.255265][T10748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.343462][T10748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.363014][T10748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.383654][T18031] openvswitch: netlink: Flow key attr not present in new flow. [ 517.550645][T18033] lo speed is unknown, defaulting to 1000 [ 518.314300][T18067] bond1: option miimon: invalid value (18446744073709551607) [ 518.361696][T18067] bond1: option miimon: allowed values 0 - 2147483647 [ 518.397612][T18067] bond1 (unregistering): Released all slaves [ 518.766963][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.783386][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.786649][T18081] tipc: Enabled bearer , priority 0 [ 518.815389][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.829352][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.836590][T18081] syzkaller0: entered promiscuous mode [ 518.836611][T18081] syzkaller0: entered allmulticast mode [ 518.838608][T18081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3164'. [ 518.873552][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 519.007620][T18081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3164'. [ 519.153911][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.161640][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.357837][T18081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.377509][T18081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.499491][T18081] tipc: Resetting bearer [ 519.515962][T18098] netlink: 'syz.1.3169': attribute type 2 has an invalid length. [ 519.549989][T18100] netlink: 'syz.1.3169': attribute type 2 has an invalid length. [ 519.576905][T10748] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.628670][T10748] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.638144][T10748] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.741352][T18085] tipc: Disabling bearer [ 519.815639][T10748] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.843409][T18114] __nla_validate_parse: 148 callbacks suppressed [ 519.843428][T18114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3173'. [ 519.861357][T18109] tipc: Started in network mode [ 519.868014][T18109] tipc: Node identity e24f384bd559, cluster identity 4711 [ 519.879604][T18109] tipc: Enabled bearer , priority 0 [ 519.973884][T18117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'. [ 519.976928][T18109] syzkaller0: entered promiscuous mode [ 519.984719][T18117] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3175'. [ 519.997432][T18109] syzkaller0: entered allmulticast mode [ 520.024128][T18078] lo speed is unknown, defaulting to 1000 [ 520.094185][T18109] tipc: Resetting bearer [ 520.116461][T18108] tipc: Resetting bearer [ 520.152774][T18108] tipc: Disabling bearer [ 520.219726][T18123] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3177'. [ 520.301576][T18123] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 520.310959][T18123] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3177'. [ 520.622785][T18078] chnl_net:caif_netlink_parms(): no params data found [ 520.655921][T18129] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 520.669490][ T43] IPVS: starting estimator thread 0... [ 520.682078][T18134] lo speed is unknown, defaulting to 1000 [ 520.758858][T18141] IPVS: using max 31 ests per chain, 74400 per kthread [ 520.903405][T18078] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.911954][T18078] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.920098][T18078] bridge_slave_0: entered allmulticast mode [ 520.929305][T18078] bridge_slave_0: entered promiscuous mode [ 520.948526][T18078] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.957483][T18078] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.967623][T18078] bridge_slave_1: entered allmulticast mode [ 520.973961][ T52] Bluetooth: hci4: command tx timeout [ 521.021208][T18078] bridge_slave_1: entered promiscuous mode [ 521.121778][T18078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.145281][T18136] lo speed is unknown, defaulting to 1000 [ 521.180655][T18078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.396248][T18078] team0: Port device team_slave_0 added [ 521.559893][T18078] team0: Port device team_slave_1 added [ 521.749279][T18078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.756526][T18078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.820026][T18078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.869027][T18165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3187'. [ 521.926882][T18078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.951640][T18078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.011612][T18078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.301182][T18078] hsr_slave_0: entered promiscuous mode [ 522.315323][T18078] hsr_slave_1: entered promiscuous mode [ 522.338496][T18078] debugfs: 'hsr0' already exists in 'hsr' [ 522.344747][T18078] Cannot create hsr debugfs directory [ 522.807647][T18193] bridge1: entered allmulticast mode [ 522.942448][T18199] bridge_slave_0: left promiscuous mode [ 522.948343][T18199] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.963542][T18199] bridge_slave_1: left allmulticast mode [ 522.978268][T18199] bridge_slave_1: left promiscuous mode [ 522.984779][T18199] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.030353][T18199] bond0: (slave bond_slave_0): Releasing backup interface [ 523.048455][T18205] netlink: 'syz.4.3198': attribute type 10 has an invalid length. [ 523.056817][ T52] Bluetooth: hci4: command tx timeout [ 523.086301][T18199] bond0: (slave bond_slave_1): Releasing backup interface [ 523.122985][T18199] team0: Port device team_slave_0 removed [ 523.142908][T18199] team0: Port device team_slave_1 removed [ 523.151302][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 523.161545][T18199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.171629][T18199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.180587][T18199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 523.329230][T18207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'. [ 523.340038][T18207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'. [ 523.356520][T18205] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 523.373837][T18207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'. [ 523.974940][T18078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.987755][T18078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 524.013681][T18078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 524.034567][T18078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 524.205611][T18078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.264261][T18078] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.293550][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.301138][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.335301][T18265] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 524.361847][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.369085][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.843951][T18279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.056176][T18078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.085281][T18298] __nla_validate_parse: 68 callbacks suppressed [ 525.085300][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'. [ 525.129897][ T5148] Bluetooth: hci4: command tx timeout [ 525.219557][T18308] geneve2: entered promiscuous mode [ 525.225596][T18308] geneve2: entered allmulticast mode [ 525.287898][T18298] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 525.320958][T18303] lo speed is unknown, defaulting to 1000 [ 525.355819][T18078] veth0_vlan: entered promiscuous mode [ 525.423858][T18078] veth1_vlan: entered promiscuous mode [ 525.607889][T18078] veth0_macvtap: entered promiscuous mode [ 525.636265][T18078] veth1_macvtap: entered promiscuous mode [ 525.691240][T18321] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3229'. [ 525.732970][T18326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.743376][T18326] bond0: (slave bond1): Enslaving as an active interface with an up link [ 525.767869][T18078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.781684][T18078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.031825][T18337] netlink: 'syz.4.3234': attribute type 39 has an invalid length. [ 526.111787][T18321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.123283][T18321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.135880][T18321] bond0 (unregistering): (slave bond1): Releasing backup interface [ 526.150654][T18321] bond0 (unregistering): Released all slaves [ 526.255731][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.272852][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.315829][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.438485][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.564332][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'. [ 526.577071][T18350] syzkaller1: entered promiscuous mode [ 526.588860][T18350] syzkaller1: entered allmulticast mode [ 526.601068][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 526.955864][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.974840][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.030230][T18373] netlink: 'syz.2.3242': attribute type 1 has an invalid length. [ 527.041684][T18371] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.3241'. [ 527.047342][T18368] netlink: 'syz.0.3240': attribute type 10 has an invalid length. [ 527.080244][T18373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.099313][T18368] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 527.147739][T18375] veth5: entered promiscuous mode [ 527.159845][T18375] bond0: (slave veth5): Enslaving as an active interface with a down link [ 527.203012][T13453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.218952][ T5148] Bluetooth: hci4: command tx timeout [ 527.242228][T13453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.584896][T18390] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3248'. [ 527.728378][T18398] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3250'. [ 527.859701][T18390] lo speed is unknown, defaulting to 1000 [ 528.359688][T18411] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 528.389954][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.398281][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.432401][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.446569][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.457448][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.478156][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.490196][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.690815][T18412] lo speed is unknown, defaulting to 1000 [ 528.703644][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 528.845158][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 529.225084][T18434] hsr_slave_0: left promiscuous mode [ 529.250179][T18434] hsr_slave_1: left promiscuous mode [ 529.615613][T18451] veth0_to_hsr: entered promiscuous mode [ 529.621860][T18451] veth0_to_hsr: entered allmulticast mode [ 529.637883][T18453] dvmrp1: entered allmulticast mode [ 529.728508][T18462] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3265'. [ 529.734179][T18460] tap0: tun_chr_ioctl cmd 1074025694 [ 529.856558][T18412] chnl_net:caif_netlink_parms(): no params data found [ 529.998117][T18465] lo speed is unknown, defaulting to 1000 [ 530.127591][T18478] __nla_validate_parse: 1 callbacks suppressed [ 530.127612][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 530.145227][T18478] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 530.154306][T18478] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3270'. [ 530.237198][T18483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3271'. [ 530.280822][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3271'. [ 530.293163][T18412] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.301183][T18412] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.311514][T18412] bridge_slave_0: entered allmulticast mode [ 530.321044][T18412] bridge_slave_0: entered promiscuous mode [ 530.340855][T18412] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.348308][T18412] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.356097][T18412] bridge_slave_1: entered allmulticast mode [ 530.365691][T18412] bridge_slave_1: entered promiscuous mode [ 530.466698][T18412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.498524][T18412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.563940][T18412] team0: Port device team_slave_0 added [ 530.579681][ T52] Bluetooth: hci0: command tx timeout [ 530.587418][T18412] team0: Port device team_slave_1 added [ 530.630538][T18493] netlink: 'syz.4.3274': attribute type 10 has an invalid length. [ 530.755025][T18498] atomic_op ffff888076ada998 conn xmit_atomic 0000000000000000 [ 530.793352][T18412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.804375][T18412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.836159][T18412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.854116][T18412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.862617][T18412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.896684][T18412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.050489][T18412] hsr_slave_0: entered promiscuous mode [ 531.069191][T18412] hsr_slave_1: entered promiscuous mode [ 531.075944][T18412] debugfs: 'hsr0' already exists in 'hsr' [ 531.106334][T18412] Cannot create hsr debugfs directory [ 531.466329][T18510] netlink: 'syz.4.3281': attribute type 10 has an invalid length. [ 531.480485][T18510] team0: Port device dummy0 added [ 531.595803][T18412] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.629145][T18412] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.650508][T18412] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 1024 - 0 [ 531.718829][T18526] netlink: 528 bytes leftover after parsing attributes in process `syz.4.3288'. [ 531.736218][T18523] !: renamed from dummy0 (while UP) [ 531.812059][T18412] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.840952][T18412] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.864484][T18412] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 1024 - 0 [ 532.093881][T18412] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.133249][T18412] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.154919][T18412] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 1024 - 0 [ 532.222654][T18529] lo speed is unknown, defaulting to 1000 [ 532.360756][T18412] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.378722][T18412] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.405071][T18412] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 1024 - 0 [ 532.412105][T18564] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.3295'. [ 532.439270][T18564] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 532.474865][T18566] tipc: Started in network mode [ 532.498956][T18566] tipc: Node identity eea7444658ff, cluster identity 4711 [ 532.526844][T18566] tipc: Enabled bearer , priority 0 [ 532.566420][T18569] syzkaller0: entered promiscuous mode [ 532.576566][T18569] syzkaller0: entered allmulticast mode [ 532.662899][ T52] Bluetooth: hci0: command tx timeout [ 532.750206][T18565] tipc: Resetting bearer [ 532.831551][T18565] tipc: Disabling bearer [ 533.121331][T18555] lo speed is unknown, defaulting to 1000 [ 533.121796][T18412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.150319][T18412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.192491][T18593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3300'. [ 533.239281][T18593] sch_fq: defrate 0 ignored. [ 533.259746][T18412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.301033][T18412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.399038][ T5910] IPVS: starting estimator thread 0... [ 533.489588][T18602] IPVS: using max 32 ests per chain, 76800 per kthread [ 533.519617][T18611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3302'. [ 533.545576][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3303'. [ 533.569532][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3302'. [ 533.631985][T18613] netlink: 'syz.3.3303': attribute type 1 has an invalid length. [ 533.810837][T18412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.084680][T18412] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.114200][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.121887][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.153815][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.161325][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.729165][ T52] Bluetooth: hci0: command tx timeout [ 534.766986][T18412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.845539][T18653] !: entered promiscuous mode [ 534.861653][T18653] vlan2: entered promiscuous mode [ 535.047895][T18412] veth0_vlan: entered promiscuous mode [ 535.065965][T18412] veth1_vlan: entered promiscuous mode [ 535.170742][T18412] veth0_macvtap: entered promiscuous mode [ 535.177498][T18674] __nla_validate_parse: 1 callbacks suppressed [ 535.177517][T18674] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3319'. [ 535.193255][T18412] veth1_macvtap: entered promiscuous mode [ 535.202499][T18669] netlink: 'syz.3.3317': attribute type 2 has an invalid length. [ 535.214725][T18669] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.3317'. [ 535.223127][T18674] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3319'. [ 535.242193][T18669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3317'. [ 535.287595][T18412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.357186][T18412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.420156][T13453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.451276][T13453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.499809][T13453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.525899][T13453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.744462][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3329'. [ 535.759756][T10748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.779706][T10748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.890907][T18697] bond1: entered promiscuous mode [ 535.898258][T18697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.900602][T18710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3326'. [ 535.941164][T18710] veth0_macvtap: left promiscuous mode [ 535.974902][T18715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3331'. [ 535.982175][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.995800][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.003725][T18695] lo speed is unknown, defaulting to 1000 [ 536.009603][T18704] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 536.434297][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 536.667423][T18709] lo speed is unknown, defaulting to 1000 [ 536.809350][ T52] Bluetooth: hci0: command tx timeout [ 536.932349][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 536.987456][T18741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3336'. [ 536.998426][T18741] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 537.122005][T18715] lo speed is unknown, defaulting to 1000 [ 537.534326][T18754] bridge_slave_1: left allmulticast mode [ 537.541349][T18754] bridge_slave_1: left promiscuous mode [ 537.548108][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.562262][T18754] bridge_slave_0: left allmulticast mode [ 537.568322][T18754] bridge_slave_0: left promiscuous mode [ 537.575315][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.691938][T18720] lo speed is unknown, defaulting to 1000 [ 538.797122][T18783] SET target dimension over the limit! [ 539.450651][T18804] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 539.536786][T18810] netlink: 'syz.1.3356': attribute type 30 has an invalid length. [ 540.011893][T18810] bond0: entered promiscuous mode [ 540.032821][T18810] bond_slave_0: entered promiscuous mode [ 540.043529][T18810] bond_slave_1: entered promiscuous mode [ 540.052776][T18810] dummy0: entered promiscuous mode [ 540.061985][T18810] hsr1: entered promiscuous mode [ 540.067556][T18810] hsr1: entered allmulticast mode [ 540.072862][T18810] bond0: entered allmulticast mode [ 540.078203][T18810] bond_slave_0: entered allmulticast mode [ 540.084817][T18810] bond_slave_1: entered allmulticast mode [ 540.091511][T18810] dummy0: entered allmulticast mode [ 540.107839][T18839] tipc: Enabled bearer , priority 31 [ 540.202434][T18843] syzkaller0: entered promiscuous mode [ 540.210145][T18843] syzkaller0: entered allmulticast mode [ 540.361005][T18860] netlink: 'syz.2.3366': attribute type 13 has an invalid length. [ 540.383549][T18860] netlink: 'syz.2.3366': attribute type 17 has an invalid length. [ 540.494859][T18860] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.503268][T18860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.511804][T18860] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.519212][T18860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.555794][T18860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.606318][T18868] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 540.624185][T18869] netlink: 'syz.1.3367': attribute type 23 has an invalid length. [ 540.730299][T18862] lo speed is unknown, defaulting to 1000 [ 541.004980][T18882] __nla_validate_parse: 15 callbacks suppressed [ 541.004999][T18882] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3370'. [ 541.101078][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.129718][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.315164][T18886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'. [ 541.397382][T18887] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3372'. [ 541.426541][T18886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3372'. [ 541.458751][T18886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3372'. [ 541.510204][T18887] netlink: 'syz.0.3372': attribute type 2 has an invalid length. [ 541.523667][T18887] netlink: 'syz.0.3372': attribute type 5 has an invalid length. [ 541.883043][T18897] lo speed is unknown, defaulting to 1000 [ 541.909976][T18893] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20001 [ 542.306256][T18905] lo speed is unknown, defaulting to 1000 [ 542.785445][T18937] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3382'. [ 542.795708][T18937] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3382'. [ 542.828676][T18937] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3382'. [ 542.957149][T18934] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3384'. [ 542.992868][T18934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3384'. [ 543.401919][T18947] lo speed is unknown, defaulting to 1000 [ 543.603279][T18948] pim6reg: entered allmulticast mode [ 543.617979][T18948] pim6reg: left allmulticast mode [ 543.950422][T18953] lo speed is unknown, defaulting to 1000 [ 544.098210][T18976] netlink: 'syz.2.3394': attribute type 3 has an invalid length. [ 544.321687][T18985] tipc: Started in network mode [ 544.327223][T18985] tipc: Node identity a610f4a31c2f, cluster identity 4711 [ 544.336844][T18985] tipc: Enabled bearer , priority 0 [ 544.350079][T18985] syzkaller0: entered promiscuous mode [ 544.355858][T18985] syzkaller0: entered allmulticast mode [ 544.369369][T18987] tipc: Resetting bearer [ 544.623549][T18982] tipc: Resetting bearer [ 544.654165][T18982] tipc: Disabling bearer [ 544.935079][T19007] Bluetooth: MGMT ver 1.23 [ 546.064510][T19051] __nla_validate_parse: 4 callbacks suppressed [ 546.064530][T19051] netlink: 532 bytes leftover after parsing attributes in process `syz.0.3414'. [ 546.139543][T19053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3415'. [ 546.335790][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3418'. [ 546.366859][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3418'. [ 546.572704][T19082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3421'. [ 547.043002][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 547.060323][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 547.097393][T19112] netlink: 'syz.4.3425': attribute type 21 has an invalid length. [ 547.166298][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3428'. [ 547.209695][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3429'. [ 547.228124][T19118] macsec0: entered promiscuous mode [ 547.234093][T19118] macsec0: entered allmulticast mode [ 547.246758][T19118] veth1_macvtap: entered allmulticast mode [ 547.256029][T19118] macsec0: left promiscuous mode [ 547.262311][T19118] macsec0: left allmulticast mode [ 547.268039][T19118] veth1_macvtap: left allmulticast mode [ 547.292563][T19125] tipc: Enabled bearer , priority 0 [ 547.301904][T19125] syzkaller0: entered promiscuous mode [ 547.315884][T19125] syzkaller0: entered allmulticast mode [ 547.379671][T19127] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 547.382572][T19125] tipc: Resetting bearer [ 547.485889][T19130] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 547.519780][T19131] lo speed is unknown, defaulting to 1000 [ 547.585481][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 547.659693][T19137] bridge_slave_1: left allmulticast mode [ 547.667610][T19137] bridge_slave_1: left promiscuous mode [ 547.674475][T19137] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.687052][T19137] bridge_slave_0: left allmulticast mode [ 547.693884][T19137] bridge_slave_0: left promiscuous mode [ 547.700406][T19137] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.712838][T19134] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 548.086465][T19120] tipc: Resetting bearer [ 548.134938][T19120] tipc: Disabling bearer [ 548.197434][T19152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.248067][T19160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.267079][T19160] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 548.282314][T19160] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 548.328959][T19168] lo speed is unknown, defaulting to 1000 [ 548.973611][T19184] vlan2: entered promiscuous mode [ 548.979936][T19184] bridge0: entered promiscuous mode [ 549.178047][T19210] netlink: 'syz.2.3454': attribute type 9 has an invalid length. [ 549.847921][T19245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.256886][T19225] netlink: 'syz.2.3458': attribute type 1 has an invalid length. [ 550.648109][T19288] syz.4.3472: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 550.726077][T19288] CPU: 0 UID: 0 PID: 19288 Comm: syz.4.3472 Not tainted syzkaller #0 PREEMPT(full) [ 550.726106][T19288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.726123][T19288] Call Trace: [ 550.726131][T19288] [ 550.726140][T19288] dump_stack_lvl+0x189/0x250 [ 550.726167][T19288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.726185][T19288] ? __pfx__printk+0x10/0x10 [ 550.726204][T19288] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 550.726228][T19288] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 550.726251][T19288] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 550.726275][T19288] warn_alloc+0x214/0x310 [ 550.726307][T19288] ? __pfx_warn_alloc+0x10/0x10 [ 550.726343][T19288] ? __get_vm_area_node+0x28f/0x300 [ 550.726370][T19288] ? xskq_create+0xbf/0x170 [ 550.726397][T19288] __vmalloc_node_range_noprof+0x690/0x12d0 [ 550.726455][T19288] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 550.726485][T19288] ? __kasan_kmalloc+0x93/0xb0 [ 550.726520][T19288] vmalloc_user_noprof+0xad/0xf0 [ 550.726546][T19288] ? xskq_create+0xbf/0x170 [ 550.726569][T19288] xskq_create+0xbf/0x170 [ 550.726595][T19288] xsk_init_queue+0xb0/0x110 [ 550.726619][T19288] xsk_setsockopt+0x57b/0x8d0 [ 550.726641][T19288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.726664][T19288] ? __pfx_aa_sk_perm+0x10/0x10 [ 550.726692][T19288] ? aa_sock_opt_perm+0xff/0x1b0 [ 550.726721][T19288] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 550.726749][T19288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.726771][T19288] do_sock_setsockopt+0x179/0x1b0 [ 550.726799][T19288] __x64_sys_setsockopt+0x13f/0x1b0 [ 550.726828][T19288] do_syscall_64+0xfa/0xfa0 [ 550.726849][T19288] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.726873][T19288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.726900][T19288] ? clear_bhb_loop+0x60/0xb0 [ 550.726923][T19288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.726947][T19288] RIP: 0033:0x7fa15e38eec9 [ 550.726965][T19288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.726983][T19288] RSP: 002b:00007fa15f1e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 550.727004][T19288] RAX: ffffffffffffffda RBX: 00007fa15e5e6180 RCX: 00007fa15e38eec9 [ 550.727019][T19288] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 550.727031][T19288] RBP: 00007fa15e411f91 R08: 0000000000000004 R09: 0000000000000000 [ 550.727043][T19288] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 550.727056][T19288] R13: 00007fa15e5e6218 R14: 00007fa15e5e6180 R15: 00007ffea4103858 [ 550.727088][T19288] [ 550.727101][T19288] Mem-Info: [ 551.031958][T19288] active_anon:3855 inactive_anon:0 isolated_anon:0 [ 551.031958][T19288] active_file:3277 inactive_file:40059 isolated_file:0 [ 551.031958][T19288] unevictable:3827 dirty:124 writeback:0 [ 551.031958][T19288] slab_reclaimable:12977 slab_unreclaimable:187046 [ 551.031958][T19288] mapped:32198 shmem:4434 pagetables:949 [ 551.031958][T19288] sec_pagetables:0 bounce:0 [ 551.031958][T19288] kernel_misc_reclaimable:0 [ 551.031958][T19288] free:1227699 free_pcp:12272 free_cma:0 [ 551.084744][T19288] Node 0 active_anon:15468kB inactive_anon:0kB active_file:13108kB inactive_file:160040kB unevictable:13772kB isolated(anon):0kB isolated(file):0kB mapped:128796kB dirty:496kB writeback:0kB shmem:16200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14920kB pagetables:3668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 551.130253][T19288] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 551.169458][T19288] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.207320][T19288] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 551.216229][T19288] Node 0 DMA32 free:1004716kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21468kB inactive_anon:0kB active_file:13108kB inactive_file:160040kB unevictable:7772kB writepending:496kB zspages:0kB present:3129332kB managed:2561672kB mlocked:6276kB bounce:0kB free_pcp:30856kB local_pcp:9764kB free_cma:0kB [ 551.303087][T19288] lowmem_reserve[]: 0 0 1 1 1 [ 551.309892][T19288] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.385927][T19288] lowmem_reserve[]: 0 0 0 0 0 [ 551.402665][T19288] Node 1 Normal free:3890720kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18944kB local_pcp:9088kB free_cma:0kB [ 551.445885][T19303] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 551.469278][T19303] bridge1: entered allmulticast mode [ 551.498878][T19288] lowmem_reserve[]: 0 0 0 0 0 [ 551.515079][T19288] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 551.531752][T19288] Node 0 DMA32: 147*4kB (UM) 267*8kB (UM) 256*16kB (UME) 195*32kB (UME) 69*64kB (UME) 38*128kB (UM) 30*256kB (UM) 41*512kB (UM) 19*1024kB (UME) 7*2048kB (UME) 227*4096kB (M) = 1014596kB [ 551.578891][T19288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 551.607401][T19288] Node 1 Normal: 206*4kB (UME) 47*8kB (UME) 49*16kB (UME) 163*32kB (UME) 44*64kB (UME) 10*128kB (UME) 4*256kB (UM) 7*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3890720kB [ 551.632231][T19288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.646684][T19288] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.676643][T19288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.718107][T19318] __nla_validate_parse: 11 callbacks suppressed [ 551.718132][T19318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3480'. [ 551.751689][T19288] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.783423][T19288] 44767 total pagecache pages [ 551.818816][T19288] 0 pages in swap cache [ 551.827031][T19288] Free swap = 124996kB [ 551.837275][T19288] Total swap = 124996kB [ 551.844808][T19288] 2097051 pages RAM [ 551.849911][T19288] 0 pages HighMem/MovableOnly [ 551.855502][T19288] 424543 pages reserved [ 551.860865][T19288] 0 pages cma reserved [ 552.022612][T19336] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 552.111778][T19335] bond2: option arp_all_targets: invalid value (3) [ 552.145093][T19335] bond2 (unregistering): Released all slaves [ 552.197744][T19347] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3487'. [ 552.231356][T19340] ip6gre1: entered promiscuous mode [ 552.468730][T19357] tipc: Started in network mode [ 552.489127][T19357] tipc: Node identity 663b780fc972, cluster identity 4711 [ 552.510598][T19357] tipc: Enabled bearer , priority 0 [ 552.539498][T19361] syzkaller0: entered promiscuous mode [ 552.575854][T19361] syzkaller0: entered allmulticast mode [ 552.605568][T19357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3490'. [ 552.729421][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 552.761082][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 553.628754][ T43] tipc: Node number set to 2940827663 [ 555.474260][T19372] tipc: Resetting bearer [ 555.483608][T19378] netlink: 'syz.3.3496': attribute type 11 has an invalid length. [ 555.510623][T19356] tipc: Resetting bearer [ 555.599605][T19356] tipc: Disabling bearer [ 555.984822][T19392] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3502'. [ 556.025344][T19395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3501'. [ 556.035619][T19392] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3502'. [ 556.043398][T19393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3503'. [ 556.069675][T19393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3503'. [ 556.096942][T19392] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3502'. [ 556.945067][T19422] syzkaller1: entered promiscuous mode [ 556.969698][T19422] syzkaller1: entered allmulticast mode [ 557.049099][T19422] __nla_validate_parse: 4 callbacks suppressed [ 557.049122][T19422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3508'. [ 557.079910][T19432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3509'. [ 557.331787][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 557.450812][T19444] x_tables: unsorted underflow at hook 3 [ 557.619788][T19453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3515'. [ 557.656382][T19453] 8021q: VLANs not supported on bond0 [ 557.677233][T19454] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3515'. [ 557.729756][T19434] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 557.943893][T19461] bridge2: entered allmulticast mode [ 558.025058][T19461] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3517'. [ 558.039187][T19461] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3517'. [ 558.081490][T19469] netlink: 'syz.1.3519': attribute type 3 has an invalid length. [ 558.313455][T19472] lo speed is unknown, defaulting to 1000 [ 558.566225][T19487] nbd: socks must be embedded in a SOCK_ITEM attr [ 558.797749][T19490] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3523'. [ 559.091415][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3527'. [ 559.572614][T19515] lo speed is unknown, defaulting to 1000 [ 559.632426][ T30] audit: type=1804 audit(1760282933.060:12): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3533" name="/newroot/104/cgroup.controllers" dev="tmpfs" ino=547 res=1 errno=0 [ 559.689108][ T30] audit: type=1800 audit(1760282933.060:13): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 559.717842][T19521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3531'. [ 559.778126][ T30] audit: type=1800 audit(1760282933.060:14): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 559.811158][T19521] syzkaller1: entered promiscuous mode [ 559.817545][T19521] syzkaller1: entered allmulticast mode [ 559.834615][T19521] netlink: 'syz.4.3531': attribute type 1 has an invalid length. [ 559.839933][ T30] audit: type=1800 audit(1760282933.080:15): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 559.872306][ T30] audit: type=1800 audit(1760282933.080:16): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 559.895461][T19521] bridge3: entered promiscuous mode [ 559.897969][ T30] audit: type=1800 audit(1760282933.080:17): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 559.972132][ T30] audit: type=1800 audit(1760282933.080:18): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 559.988682][T19521] bridge3: entered allmulticast mode [ 560.007811][ T30] audit: type=1800 audit(1760282933.100:19): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 560.037583][ T30] audit: type=1800 audit(1760282933.110:20): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 560.075689][ T30] audit: type=1800 audit(1760282933.110:21): pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 560.238448][T19516] lo speed is unknown, defaulting to 1000 [ 560.731033][ T5148] Bluetooth: hci0: command 0x0405 tx timeout [ 562.238783][T19548] lo speed is unknown, defaulting to 1000 [ 563.954832][T19567] netlink: 'syz.3.3546': attribute type 9 has an invalid length. [ 564.380909][T19557] lo speed is unknown, defaulting to 1000 [ 564.440536][T19580] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 565.398768][T19572] lo speed is unknown, defaulting to 1000 [ 565.829865][T19575] lo speed is unknown, defaulting to 1000 [ 565.839763][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3551'. [ 566.237871][T19594] lo speed is unknown, defaulting to 1000 [ 567.029103][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'. [ 567.888433][T19605] netlink: 'syz.2.3553': attribute type 16 has an invalid length. [ 568.480319][T19611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 569.097539][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 569.170402][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3557'. [ 569.172573][T19630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3557'. [ 569.240282][T19624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3557'. [ 569.318775][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3557'. [ 569.340135][T19622] lo speed is unknown, defaulting to 1000 [ 569.559919][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3560'. [ 569.800135][T19644] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 569.829147][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 569.899298][T19646] veth1_to_team: entered promiscuous mode [ 569.919820][T19646] veth1_to_team: left promiscuous mode [ 570.001753][T19644] sch_fq: defrate 0 ignored. [ 570.059908][T19640] lo speed is unknown, defaulting to 1000 [ 572.113518][T19692] __nla_validate_parse: 1 callbacks suppressed [ 572.113555][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 572.139025][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3577'. [ 572.164342][T19692] netlink: 'syz.2.3577': attribute type 20 has an invalid length. [ 572.214368][T19700] syzkaller1: entered promiscuous mode [ 572.240438][T19700] syzkaller1: entered allmulticast mode [ 572.503285][T19713] Bluetooth: MGMT ver 1.23 [ 572.635395][T19716] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3584'. [ 572.729608][T19717] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3584'. [ 572.811534][T19721] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3586'. [ 572.876151][T19721] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 573.001908][T19728] netlink: 'syz.4.3585': attribute type 10 has an invalid length. [ 573.078849][T19728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3585'. [ 573.087988][T19725] lo speed is unknown, defaulting to 1000 [ 573.199072][T19728] batadv0: entered promiscuous mode [ 573.216681][T19728] batadv0: entered allmulticast mode [ 573.252783][T19728] bridge0: port 1(batadv0) entered blocking state [ 573.309559][T19728] bridge0: port 1(batadv0) entered disabled state [ 573.391535][T19745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3591'. [ 573.798828][T10748] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 573.810412][T10748] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 573.824945][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3593'. [ 574.078817][T19755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3594'. [ 574.365096][T19762] vlan3: entered promiscuous mode [ 574.404326][T19762] bond0: entered promiscuous mode [ 574.410953][T19762] bond_slave_0: entered promiscuous mode [ 574.418934][T19762] bond_slave_1: entered promiscuous mode [ 575.626967][T19772] lo speed is unknown, defaulting to 1000 [ 575.639419][T19787] macvlan1: entered allmulticast mode [ 576.132106][T19794] tipc: Enabled bearer , priority 0 [ 576.142664][T19794] syzkaller0: entered promiscuous mode [ 576.150965][T19794] syzkaller0: entered allmulticast mode [ 576.256996][T19801] tipc: Resetting bearer [ 576.360765][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 577.256466][T19834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3613'. [ 577.269038][T19834] netlink: 'syz.4.3613': attribute type 10 has an invalid length. [ 577.279374][T19834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3613'. [ 577.336049][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 577.336273][T19837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 577.395901][T19834] team0: Port device geneve0 added [ 577.404318][T10748] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.672281][T19836] bond2: entered promiscuous mode [ 577.703734][T19836] bond2: entered allmulticast mode [ 577.761847][T19836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.780932][T10748] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.000718][T19837] bond3: entered promiscuous mode [ 578.020679][T19837] bond3: entered allmulticast mode [ 578.031106][T19837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 578.098844][T10748] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.121225][T10748] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.394916][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 578.421251][T19860] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3617'. [ 579.063129][T19858] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 579.583207][T19885] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 579.751830][T19893] lo speed is unknown, defaulting to 1000 [ 579.994506][T19901] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 580.184159][T19900] IPVS: Scheduler module ip_vs_sip not found [ 580.241114][T19909] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3633'. [ 580.408943][ T5148] Bluetooth: hci0: command 0x0405 tx timeout [ 580.509240][T19914] netlink: 'syz.2.3635': attribute type 101 has an invalid length. [ 580.548904][T19914] netlink: 'syz.2.3635': attribute type 7 has an invalid length. [ 581.902096][T19950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3648'. [ 581.965903][T19950] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3648'. [ 582.000090][T19950] netlink: 'syz.3.3648': attribute type 6 has an invalid length. [ 582.038765][T19950] netlink: 'syz.3.3648': attribute type 5 has an invalid length. [ 582.070522][T19957] netlink: 'syz.3.3648': attribute type 4 has an invalid length. [ 582.080479][T19950] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3648'. [ 582.147953][T19960] netlink: 'syz.3.3648': attribute type 4 has an invalid length. [ 582.278859][T19950] __nla_validate_parse: 1 callbacks suppressed [ 582.278880][T19950] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3648'. [ 582.363072][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.379385][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.394446][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.405207][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.416054][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 582.610238][T19972] vxcan1: entered allmulticast mode [ 582.621050][T19975] vxcan1: left allmulticast mode [ 582.742370][T19970] lo speed is unknown, defaulting to 1000 [ 583.228435][T19988] lo speed is unknown, defaulting to 1000 [ 583.391141][T20013] netlink: 'syz.2.3661': attribute type 12 has an invalid length. [ 583.400863][T20013] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 583.411221][T20013] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3661'. [ 583.423947][T20013] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 583.434162][T20013] netlink: 'syz.2.3661': attribute type 2 has an invalid length. [ 583.443860][T20013] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3661'. [ 583.461264][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3661'. [ 583.564133][T20021] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.3663'. [ 583.764034][T20026] lo speed is unknown, defaulting to 1000 [ 583.827286][T19970] chnl_net:caif_netlink_parms(): no params data found [ 584.263540][T19970] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.276587][T19970] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.292023][T19970] bridge_slave_0: entered allmulticast mode [ 584.302691][T19970] bridge_slave_0: entered promiscuous mode [ 584.365346][T19970] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.374838][T19970] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.402003][T19970] bridge_slave_1: entered allmulticast mode [ 584.417690][T19970] bridge_slave_1: entered promiscuous mode [ 584.497358][ T5148] Bluetooth: hci0: command tx timeout [ 584.645172][T19970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.663218][T19970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.718437][T19970] team0: Port device team_slave_0 added [ 584.736649][T19970] team0: Port device team_slave_1 added [ 584.942611][T19970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.987284][T19970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.037146][T19970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.062225][T19970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.070716][T19970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.099229][T19970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.250857][T19970] hsr_slave_0: entered promiscuous mode [ 585.270840][T19970] hsr_slave_1: entered promiscuous mode [ 585.283702][T20048] netlink: get zone limit has 4 unknown bytes [ 585.289183][T19970] debugfs: 'hsr0' already exists in 'hsr' [ 585.295555][T19970] Cannot create hsr debugfs directory [ 585.546549][T20062] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3670'. [ 585.996352][T20081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3674'. [ 586.040698][T20081] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3674'. [ 586.243552][T20081] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 586.272367][T20081] bond0 (unregistering): Released all slaves [ 586.324088][T19970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 586.360067][T19970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 586.381145][T19970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 586.440131][T19970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 586.568811][ T5148] Bluetooth: hci0: command tx timeout [ 586.658210][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3679'. [ 586.677225][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3678'. [ 586.798885][T19970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.845335][T19970] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.865374][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.872727][T10745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.922643][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.929926][T10745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.102562][T20133] IPv6: addrconf: prefix option has invalid lifetime [ 587.144481][T20133] bond0: entered promiscuous mode [ 587.169685][T20133] veth1_to_bridge: entered promiscuous mode [ 587.207038][T20133] debugfs: 'hsr0' already exists in 'hsr' [ 587.222041][T20133] Cannot create hsr debugfs directory [ 587.227800][T20133] hsr0: entered promiscuous mode [ 587.430638][T19970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.825617][T20165] netlink: 'syz.2.3695': attribute type 1 has an invalid length. [ 587.918438][T20165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.972054][T20167] veth7: entered promiscuous mode [ 587.984287][T20167] bond4: (slave veth7): Enslaving as an active interface with a down link [ 588.035953][T20173] macsec1: entered promiscuous mode [ 588.046351][T20173] ip6gretap0: entered promiscuous mode [ 588.063177][T20173] ip6gretap0: left promiscuous mode [ 588.226003][T19970] veth0_vlan: entered promiscuous mode [ 588.243333][T20177] __nla_validate_parse: 3 callbacks suppressed [ 588.243354][T20177] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3698'. [ 588.284791][T19970] veth1_vlan: entered promiscuous mode [ 588.352389][T19970] veth0_macvtap: entered promiscuous mode [ 588.377455][T19970] veth1_macvtap: entered promiscuous mode [ 588.427172][T19970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.452299][T20189] netlink: 'syz.3.3699': attribute type 1 has an invalid length. [ 588.505703][T19970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.525232][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.546080][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.585238][ T43] IPVS: starting estimator thread 0... [ 588.592158][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.601385][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.651418][ T5148] Bluetooth: hci0: command tx timeout [ 588.708710][T20195] IPVS: using max 31 ests per chain, 74400 per kthread [ 589.192410][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.216893][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.325799][T10748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.344400][T10748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.685900][T20225] lo speed is unknown, defaulting to 1000 [ 589.956816][T20230] lo speed is unknown, defaulting to 1000 [ 590.728134][T20255] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3716'. [ 590.729416][ T5148] Bluetooth: hci0: command tx timeout [ 591.185165][T20268] netlink: 'syz.3.3721': attribute type 1 has an invalid length. [ 591.195382][T20271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3723'. [ 591.219785][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3723'. [ 591.259584][T20268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.267130][T20278] netlink: 'syz.4.3724': attribute type 32 has an invalid length. [ 591.278343][T20273] bond3: (slave geneve0): making interface the new active one [ 591.289825][T20273] bond3: (slave geneve0): Enslaving as an active interface with an up link [ 591.299100][T20281] netlink: 'syz.3.3721': attribute type 1 has an invalid length. [ 591.310087][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 591.388272][T20278] bond0: Setting coupled_control to off (0) [ 591.415596][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3723'. [ 591.451102][T20296] tipc: Enabled bearer , priority 10 [ 591.739994][T20318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3731'. [ 591.869975][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3733'. [ 591.896243][T20324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3733'. [ 591.908265][T20327] lo speed is unknown, defaulting to 1000 [ 592.375567][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3742'. [ 592.429794][T16040] tipc: Node number set to 3059237958 [ 592.440471][T20348] vlan2: entered allmulticast mode [ 592.445646][T20348] bond0: entered allmulticast mode [ 593.433697][T20389] __nla_validate_parse: 3 callbacks suppressed [ 593.433720][T20389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3750'. [ 593.607483][T20388] syzkaller0: entered promiscuous mode [ 593.628699][T20388] syzkaller0: entered allmulticast mode [ 593.671846][T20395] netlink: 'syz.4.3753': attribute type 1 has an invalid length. [ 595.712140][T20395] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 595.736107][T20409] mac80211_hwsim hwsim48 syzkaller0: Caught tx_queue_len zero misconfig [ 595.867055][T20416] netlink: 'syz.5.3756': attribute type 5 has an invalid length. [ 596.156293][T20434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3760'. [ 596.341260][T20443] tipc: Invalid UDP bearer configuration [ 596.341324][T20443] tipc: Enabling of bearer rejected, failed to enable media [ 596.366529][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3764'. [ 596.742049][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 596.754964][T20463] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.035263][T20477] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3774'. [ 597.045999][T20477] hsr_slave_0: left promiscuous mode [ 597.053328][T20477] hsr_slave_1: left promiscuous mode [ 597.202735][T20482] lo speed is unknown, defaulting to 1000 [ 597.303753][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'. [ 597.397714][T20487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3776'. [ 597.668508][T20489] lo speed is unknown, defaulting to 1000 [ 597.898894][T20513] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3782'. [ 597.936367][T20513] pim6reg1: entered promiscuous mode [ 597.949273][T20513] pim6reg1: entered allmulticast mode [ 597.967704][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'. [ 598.129475][T20487] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 598.426588][T20530] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 598.436661][T20525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3786'. [ 598.678964][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3789'. [ 598.923087][T20541] bridge_slave_1: left allmulticast mode [ 598.930138][T20541] bridge_slave_1: left promiscuous mode [ 598.936384][T20541] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.955065][T20541] bridge_slave_0: left allmulticast mode [ 598.976936][T20541] bridge_slave_0: left promiscuous mode [ 598.985085][T20541] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.027129][T20552] netlink: 'syz.5.3791': attribute type 6 has an invalid length. [ 599.195087][T20546] lo speed is unknown, defaulting to 1000 [ 599.359423][T20559] netlink: 'syz.2.3793': attribute type 4 has an invalid length. [ 599.386172][T20560] netlink: 'syz.2.3793': attribute type 4 has an invalid length. [ 599.428136][T20563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3794'. [ 599.450539][ T5148] Bluetooth: hci2: command 0x041b tx timeout [ 599.470385][T20563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3794'. [ 599.593102][T20545] lo speed is unknown, defaulting to 1000 [ 599.771491][T20569] wg1: entered promiscuous mode [ 599.776644][T20569] wg1: entered allmulticast mode [ 600.040265][T20563] lo speed is unknown, defaulting to 1000 [ 600.574975][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 601.812092][T20619] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3807'. [ 602.007855][T20623] Bluetooth: MGMT ver 1.23 [ 602.167411][T20633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3810'. [ 602.303527][T20635] netem: change failed [ 602.322803][T20642] tipc: Enabling of bearer rejected, already enabled [ 602.353986][T20632] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3813'. [ 602.405382][T20630] lo speed is unknown, defaulting to 1000 [ 602.640207][T20661] netlink: 'syz.4.3819': attribute type 21 has an invalid length. [ 602.672774][T20661] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3819'. [ 602.714717][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3818'. [ 602.725239][T20663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.783223][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3818'. [ 602.817250][T20663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.158361][T20659] lo speed is unknown, defaulting to 1000 [ 603.229705][T20692] pim6reg: entered allmulticast mode [ 603.340827][T20691] pim6reg: left allmulticast mode [ 603.759232][T20700] __nla_validate_parse: 3 callbacks suppressed [ 603.759249][T20700] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3825'. [ 603.907940][T20709] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 604.073413][T20709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.142433][T20714] bond4: (slave gretap1): making interface the new active one [ 604.152970][T20714] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 604.699529][T20738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3832'. [ 604.784321][T20736] tipc: Started in network mode [ 604.794133][T20736] tipc: Node identity 4, cluster identity 4711 [ 604.808066][T20736] tipc: Node number set to 4 [ 605.077181][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3840'. [ 605.148740][T20761] netlink: 'syz.1.3839': attribute type 1 has an invalid length. [ 605.173751][T20757] syzkaller1: entered promiscuous mode [ 605.180800][T20757] syzkaller1: entered allmulticast mode [ 605.286319][T20766] netlink: 'syz.4.3842': attribute type 9 has an invalid length. [ 605.299852][T20766] netlink: 448 bytes leftover after parsing attributes in process `syz.4.3842'. [ 605.628108][T20785] lo speed is unknown, defaulting to 1000 [ 605.944836][T20780] lo speed is unknown, defaulting to 1000 [ 606.021957][ T52] Bluetooth: hci2: command 0x041b tx timeout [ 606.593116][T20799] SET target dimension over the limit! [ 606.604277][T20797] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3848'. [ 606.649951][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3849'. [ 606.651035][T20797] xt_TCPMSS: Only works on TCP SYN packets [ 606.833051][T20805] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3850'. [ 607.356466][T20778] infiniband syz!: set active [ 607.363618][T20818] netlink: 'syz.4.3854': attribute type 1 has an invalid length. [ 607.388761][T20778] infiniband syz!: added team_slave_0 [ 607.414480][T20778] syz!: rxe_create_cq: returned err = -12 [ 607.421689][T20818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.460356][T20778] infiniband syz!: Couldn't create ib_mad CQ [ 607.507615][T20778] infiniband syz!: Couldn't open port 1 [ 607.658442][T20812] lo speed is unknown, defaulting to 1000 [ 607.670345][T20778] RDS/IB: syz!: added [ 607.674436][T20778] smc: adding ib device syz! with port count 1 [ 607.708846][T20778] smc: ib device syz! port 1 has no pnetid [ 608.386773][T20838] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3859'. [ 608.400213][T20844] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3860'. [ 609.703377][T20889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.154755][T20901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 610.197055][T20901] bond0: (slave bond_slave_0): Releasing backup interface [ 610.207787][T20901] bond_slave_0: left promiscuous mode [ 610.240409][T20901] bond0: (slave bond_slave_1): Releasing backup interface [ 610.255813][T20901] bond_slave_1: left promiscuous mode [ 610.276088][T20901] team0: Port device team_slave_0 removed [ 610.287352][T20901] team0: Port device team_slave_1 removed [ 610.294460][T20901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.302173][T20901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.312613][T20901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.321217][T20901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.330832][T20901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.390384][T20911] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 611.728949][T20890] lo speed is unknown, defaulting to 1000 [ 612.414956][T20881] lo speed is unknown, defaulting to 1000 [ 612.601426][T20944] netlink: 'syz.3.3885': attribute type 16 has an invalid length. [ 612.774814][T20950] netlink: 'syz.1.3886': attribute type 10 has an invalid length. [ 612.802466][T20950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3886'. [ 612.821082][T20950] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 613.650266][T20981] syz_tun: entered allmulticast mode [ 613.839274][T20989] Àÿ: renamed from team_slave_1 [ 613.893703][T20987] syzkaller0: entered promiscuous mode [ 613.902881][T20987] syzkaller0: entered allmulticast mode [ 613.927101][T20989] ip6gretap0: entered promiscuous mode [ 613.933122][T20989] macsec1: entered promiscuous mode [ 613.945310][T20989] ip6gretap0: left promiscuous mode [ 613.970900][T20983] syz_tun: left allmulticast mode [ 613.985669][T20990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3899'. [ 613.995572][T20993] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3900'. [ 614.008507][T20990] netlink: 'syz.3.3899': attribute type 1 has an invalid length. [ 614.032726][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 614.204171][T21006] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3902'. [ 616.010573][T21015] lo speed is unknown, defaulting to 1000 [ 616.249799][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 616.322603][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3907'. [ 617.493533][T16042] IPVS: starting estimator thread 0... [ 617.557760][T21068] ip6gre1: entered allmulticast mode [ 617.618401][T21081] IPVS: using max 27 ests per chain, 64800 per kthread [ 617.822263][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3923'. [ 617.909418][T21084] syzkaller1: entered promiscuous mode [ 617.929592][T21084] syzkaller1: entered allmulticast mode [ 617.976593][T21088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3925'. [ 618.254034][T21090] bond5: option tlb_dynamic_lb: invalid value (71) [ 618.260018][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3928'. [ 618.284947][T21090] bond5 (unregistering): Released all slaves [ 618.297905][T21102] netlink: 'syz.1.3928': attribute type 3 has an invalid length. [ 618.307280][T21102] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3928'. [ 618.538810][T21111] netlink: 'syz.1.3932': attribute type 3 has an invalid length. [ 618.601650][T21115] lo speed is unknown, defaulting to 1000 [ 618.682698][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3933'. [ 619.094428][T21135] netlink: 'syz.4.3938': attribute type 28 has an invalid length. [ 619.144267][T21135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3938'. [ 619.155364][T21135] tipc: Enabling of bearer rejected, already enabled [ 619.884399][T21175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3946'. [ 620.678414][T21201] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 621.319855][T21233] netlink: 'syz.2.3961': attribute type 10 has an invalid length. [ 621.339147][T21233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.362284][T21233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.403998][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3961'. [ 621.702854][T21237] syzkaller0: entered promiscuous mode [ 621.724206][T21237] syzkaller0: entered allmulticast mode [ 622.946431][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'. [ 624.414111][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 625.017324][T21250] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 625.096904][T21262] delete_channel: no stack [ 625.109436][T21255] lo speed is unknown, defaulting to 1000 [ 625.205410][T21270] bridge0: port 2(macvlan2) entered blocking state [ 625.229769][T21270] bridge0: port 2(macvlan2) entered disabled state [ 625.247579][T21270] macvlan2: entered allmulticast mode [ 625.265117][T21270] bridge0: entered allmulticast mode [ 625.283353][T21270] macvlan2: left allmulticast mode [ 625.296633][T21270] bridge0: left allmulticast mode [ 625.389990][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3973'. [ 625.391942][T21277] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 625.418474][T21277] bridge1: entered allmulticast mode [ 625.447296][T21281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.517619][T21281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.871789][T21302] netlink: 'syz.4.3976': attribute type 4 has an invalid length. [ 626.059195][T21307] xt_l2tp: missing protocol rule (udp|l2tpip) [ 626.464441][T21321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3980'. [ 626.486597][T21321] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3980'. [ 626.712256][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 626.888244][T21339] lo speed is unknown, defaulting to 1000 [ 626.989135][T21345] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3985'. [ 627.086648][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3985'. [ 627.124808][T21345] veth1_macvtap: left promiscuous mode [ 627.432358][T21350] bond5: Removing last arp target with arp_interval on [ 627.443881][T21350] bond5: entered promiscuous mode [ 627.449002][T21350] bond5: entered allmulticast mode [ 627.454692][T21350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.521340][T21350] netlink: 'syz.2.3987': attribute type 16 has an invalid length. [ 627.531347][T21350] netlink: 'syz.2.3987': attribute type 17 has an invalid length. [ 627.599897][T21350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.737866][T21359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3989'. [ 628.096231][T21376] wg1: entered promiscuous mode [ 628.101870][T21376] wg1: entered allmulticast mode [ 628.748945][T21388] lo speed is unknown, defaulting to 1000 [ 628.805836][T21393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3999'. [ 629.141002][T21403] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 629.148082][T21403] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 629.413219][T21420] netlink: 'syz.4.4006': attribute type 1 has an invalid length. [ 629.442499][T21420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4006'. [ 629.583546][T21432] netlink: 'syz.3.4008': attribute type 1 has an invalid length. [ 629.654589][T21432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4008'. [ 629.734478][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4008'. [ 629.779437][T21440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4008'. [ 630.134698][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4015'. [ 630.156529][T21452] gretap0: entered promiscuous mode [ 630.471862][T21471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4019'. [ 631.020535][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 631.099332][T21499] lo speed is unknown, defaulting to 1000 [ 631.272152][T21510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4030'. [ 631.283927][T21510] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4030'. [ 631.295507][T21510] netlink: 'syz.3.4030': attribute type 5 has an invalid length. [ 631.443507][T21515] veth2: entered promiscuous mode [ 631.635451][ T1166] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 631.644723][ T1166] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 631.658934][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 631.699149][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 632.004904][T21539] netlink: 'syz.1.4037': attribute type 1 has an invalid length. [ 632.132345][T21539] lo speed is unknown, defaulting to 1000 [ 632.329047][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 633.995120][T21573] lo speed is unknown, defaulting to 1000 [ 634.154553][T21584] netlink: 'syz.4.4052': attribute type 10 has an invalid length. [ 634.176233][T21585] __nla_validate_parse: 2 callbacks suppressed [ 634.176253][T21585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4052'. [ 634.224069][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4052'. [ 634.466389][T21596] bridge0: entered allmulticast mode [ 634.618071][T21598] lo speed is unknown, defaulting to 1000 [ 635.043693][T21606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 635.056077][T21602] lo speed is unknown, defaulting to 1000 [ 635.058998][T21611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.200936][T21611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.322023][T21610] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 635.369404][ T1166] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 635.488745][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 635.560781][T21622] Bluetooth: MGMT ver 1.23 [ 635.810838][T21626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.849474][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 636.106920][T21626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.347757][T21626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.511689][T21626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.811733][T21630] lo speed is unknown, defaulting to 1000 [ 636.918712][ T1166] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.955123][ T1166] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.991373][ T1166] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.009086][ T1166] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.770892][T21666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4075'. [ 637.853683][T21669] netlink: 'syz.1.4076': attribute type 11 has an invalid length. [ 638.264241][T21684] netlink: 'syz.4.4080': attribute type 11 has an invalid length. [ 638.288739][T21677] lo speed is unknown, defaulting to 1000 [ 638.305285][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4079'. [ 638.317165][T21685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4079'. [ 638.587165][T21688] tipc: Enabling of bearer rejected, already enabled [ 638.710686][T21690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.844569][T21695] netlink: 'syz.2.4083': attribute type 10 has an invalid length. [ 639.013729][T21697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4084'. [ 639.090066][T21697] nbd: socks must be embedded in a SOCK_ITEM attr [ 639.119338][T21679] lo speed is unknown, defaulting to 1000 [ 639.199564][T21704] delete_channel: no stack [ 639.757163][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4090'. [ 639.844364][T21722] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 639.888380][T21721] lo speed is unknown, defaulting to 1000 [ 639.999522][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4091'. [ 640.075941][T21730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4092'. [ 641.080554][T21768] netlink: 6856 bytes leftover after parsing attributes in process `syz.4.4097'. [ 641.102429][T21772] syzkaller1: entered promiscuous mode [ 641.102434][T21768] netlink: 'syz.4.4097': attribute type 12 has an invalid length. [ 641.117569][T21772] syzkaller1: entered allmulticast mode [ 641.465054][T21777] syzkaller0: entered promiscuous mode [ 641.495794][T21777] syzkaller0: entered allmulticast mode [ 641.859560][T21723] Bluetooth: hci5: command 0x0406 tx timeout [ 641.865770][T21723] Bluetooth: hci4: command 0x0406 tx timeout [ 642.307408][T21783] lo speed is unknown, defaulting to 1000 [ 642.419964][T21803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4107'. [ 642.536169][T21808] netlink: 'syz.3.4108': attribute type 4 has an invalid length. [ 643.046801][T21832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4114'. [ 643.066085][T21832] netem: change failed [ 643.074297][T21833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4114'. [ 643.141622][T21833] netem: change failed [ 643.194357][T21837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 643.207006][T21811] lo speed is unknown, defaulting to 1000 [ 643.237528][T21837] gretap0: entered promiscuous mode [ 643.258363][T21837] macsec1: entered promiscuous mode [ 643.274326][T21837] macsec1: entered allmulticast mode [ 643.295944][T21837] gretap0: entered allmulticast mode [ 643.329502][T21837] gretap0: left allmulticast mode [ 643.334830][T21837] gretap0: left promiscuous mode [ 643.593791][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4121'. [ 643.957117][T21869] lo speed is unknown, defaulting to 1000 [ 644.723457][T21887] sctp: [Deprecated]: syz.3.4129 (pid 21887) Use of int in maxseg socket option. [ 644.723457][T21887] Use struct sctp_assoc_value instead [ 644.896601][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 644.920707][T21898] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4132'. [ 645.717174][T21931] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4140'. [ 645.764558][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4141'. [ 646.079480][T21937] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4143'. [ 646.267022][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4146'. [ 646.291870][T21950] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4146'. [ 646.376241][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4143'. [ 646.673830][T21963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4150'. [ 646.846550][T21969] lo speed is unknown, defaulting to 1000 [ 646.916805][T21974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4155'. [ 647.603641][T21981] lo speed is unknown, defaulting to 1000 [ 648.047407][T22003] netlink: 'syz.1.4161': attribute type 2 has an invalid length. [ 648.061637][T22003] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4161'. [ 648.080044][T21988] lo speed is unknown, defaulting to 1000 [ 649.753956][T22027] netlink: 'syz.1.4167': attribute type 1 has an invalid length. [ 649.784347][T22027] netlink: 'syz.1.4167': attribute type 1 has an invalid length. [ 649.969304][T22033] batadv1: entered promiscuous mode [ 649.974600][T22033] batadv1: entered allmulticast mode [ 649.986671][T22032] netlink: 'syz.2.4168': attribute type 6 has an invalid length. [ 650.007231][T22038] tipc: Enabled bearer , priority 0 [ 650.057158][T22038] tipc: Disabling bearer [ 650.101468][T22030] __nla_validate_parse: 5 callbacks suppressed [ 650.101487][T22030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4166'. [ 650.431483][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'. [ 650.441930][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'. [ 650.462788][T13461] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.474620][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'. [ 650.487592][T13461] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.497628][T13461] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.506316][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'. [ 650.516066][T13461] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.082651][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4179'. [ 651.252016][T22084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4180'. [ 652.467022][T22061] netlink: 'syz.3.4176': attribute type 4 has an invalid length. [ 652.670826][T22099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4182'. [ 652.720413][T22099] 8021q: VLANs not supported on caif0 [ 652.819213][T22104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4186'. [ 652.878841][T22106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4187'. [ 652.935347][T22106] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.077293][T22106] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.162809][T22106] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.264066][T22106] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.423257][T13458] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.470812][T13458] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.495088][T13458] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.539984][T13454] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.212263][T22166] netlink: 'syz.5.4204': attribute type 1 has an invalid length. [ 654.241115][T22163] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 654.304702][T22168] gretap1: entered promiscuous mode [ 654.380718][T22175] netlink: 'syz.3.4205': attribute type 13 has an invalid length. [ 654.410879][T22175] netlink: 'syz.3.4205': attribute type 17 has an invalid length. [ 655.222765][T22208] Cannot find set identified by id 3 to match [ 655.301005][T22175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.339295][T22173] lo speed is unknown, defaulting to 1000 [ 655.348769][T22188] __nla_validate_parse: 4 callbacks suppressed [ 655.348787][T22188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4209'. [ 655.792457][T22184] lo speed is unknown, defaulting to 1000 [ 655.919723][T22227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4214'. [ 655.997489][T22225] syzkaller0: entered promiscuous mode [ 656.003336][T22225] syzkaller0: entered allmulticast mode [ 657.750272][T22229] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4213'. [ 657.782005][T22216] lo speed is unknown, defaulting to 1000 [ 658.545072][ T43] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 658.600219][ T43] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 662.170539][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.714721][T22258] lo speed is unknown, defaulting to 1000 [ 685.868117][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 694.358255][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.447826][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.642421][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 695.187808][T20711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 695.515895][T20711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.013120][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 699.647423][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.756351][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 700.107624][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 700.745771][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 701.223180][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 701.607312][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 702.105999][ T52] Bluetooth: hci1: command tx timeout [ 704.175974][ T52] Bluetooth: hci1: command tx timeout [ 705.218477][T20711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 705.325420][T20711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 705.406008][T20711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 705.847574][T20711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 705.866111][ T5148] Bluetooth: hci6: command tx timeout [ 706.197379][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 706.266531][ T5148] Bluetooth: hci1: command tx timeout [ 707.617001][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 707.667835][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 707.895999][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 707.936914][ T52] Bluetooth: hci6: command tx timeout [ 708.374949][T20711] Bluetooth: hci1: command tx timeout [ 708.705208][T20711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 708.865433][T20711] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 709.157242][ T52] Bluetooth: hci0: command tx timeout [ 709.447419][ T5148] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 709.507525][ T5148] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 709.638145][ T5148] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 710.026371][T21723] Bluetooth: hci6: command tx timeout [ 710.357029][T22278] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 710.938433][T22278] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 711.215112][T22278] Bluetooth: hci0: command tx timeout [ 712.137894][T21723] Bluetooth: hci6: command tx timeout [ 712.745477][T20711] Bluetooth: hci7: command tx timeout [ 713.298374][T20711] Bluetooth: hci0: command tx timeout [ 714.177290][T20711] Bluetooth: hci8: command tx timeout [ 714.816599][T20711] Bluetooth: hci7: command tx timeout [ 715.388337][T20711] Bluetooth: hci0: command tx timeout [ 716.257507][T20711] Bluetooth: hci8: command tx timeout [ 716.897085][T20711] Bluetooth: hci7: command tx timeout [ 718.346091][T20711] Bluetooth: hci8: command tx timeout [ 718.976575][T20711] Bluetooth: hci7: command tx timeout [ 720.425151][T20711] Bluetooth: hci8: command tx timeout [ 747.305074][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 752.325580][T21723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 752.646355][T21723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 752.805900][T21723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.146099][T21723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.387071][T21723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 756.167925][T22278] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 756.276407][T22278] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 756.625342][T22278] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 756.916591][T22278] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 757.496312][T22278] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 759.544542][T22267] lo speed is unknown, defaulting to 1000 [ 760.185278][T22278] Bluetooth: hci9: command tx timeout [ 760.825361][T22278] Bluetooth: hci3: command tx timeout [ 762.254845][T22278] Bluetooth: hci9: command tx timeout [ 762.905791][T22278] Bluetooth: hci3: command tx timeout [ 763.306287][T20711] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 763.408363][T20711] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 763.665276][T20711] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 764.057037][T20711] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 764.344921][T20711] Bluetooth: hci9: command tx timeout [ 764.697274][T21723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 764.786289][T21723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 764.837620][T21723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 764.936841][T21723] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 764.986692][T21723] Bluetooth: hci3: command tx timeout [ 765.655394][T21723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 766.177630][T22278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 766.425109][T22278] Bluetooth: hci9: command tx timeout [ 766.506786][T22278] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 766.777692][T22278] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 766.916166][T22278] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 767.065375][T22278] Bluetooth: hci3: command tx timeout [ 767.417005][ T5148] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 767.865151][ T5148] Bluetooth: hci10: command tx timeout [ 767.915766][ T5148] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 769.936943][ T5148] Bluetooth: hci10: command tx timeout [ 771.294545][ T5148] Bluetooth: hci5: command tx timeout [ 771.777836][ T5148] Bluetooth: hci11: command tx timeout [ 772.016570][ T5148] Bluetooth: hci10: command tx timeout [ 772.891870][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 773.385402][ T5148] Bluetooth: hci5: command tx timeout [ 773.932109][ T5148] Bluetooth: hci11: command tx timeout [ 774.146576][ T5148] Bluetooth: hci10: command tx timeout [ 775.466166][ T5148] Bluetooth: hci5: command tx timeout [ 776.015945][ T5148] Bluetooth: hci11: command tx timeout [ 777.602329][ T5148] Bluetooth: hci5: command tx timeout [ 778.106089][ T5148] Bluetooth: hci11: command tx timeout [ 797.775219][T22275] lo speed is unknown, defaulting to 1000 [ 801.148347][T13453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.416664][T13453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.758295][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 811.755199][T21723] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 811.858469][T21723] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 811.965644][T21723] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 812.455322][T21723] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 812.615334][T21723] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 813.338358][T13453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.728381][ T5148] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 814.828293][ T5148] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 814.965161][T22273] lo speed is unknown, defaulting to 1000 [ 815.065729][ T5148] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 815.556922][ T5148] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 815.586674][T22278] Bluetooth: hci12: command tx timeout [ 815.838280][T22278] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 816.816774][T22278] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 816.956310][T22278] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 817.116454][T22278] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 817.346278][T22278] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 817.547318][T22278] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 817.695850][T21723] Bluetooth: hci12: command tx timeout [ 818.757412][T21723] Bluetooth: hci13: command tx timeout [ 818.808076][T21723] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 819.027307][T21723] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 819.216932][T21723] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 819.416060][T21723] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 819.507599][T13453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.567912][T21723] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 819.775527][T22278] Bluetooth: hci12: command tx timeout [ 820.266906][T21723] Bluetooth: hci14: command tx timeout [ 820.796404][T22278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.816619][T20711] Bluetooth: hci13: command tx timeout [ 820.996392][T20711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 821.215401][T20711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 821.615862][T20711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 821.815532][T20711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 821.900912][T20711] Bluetooth: hci12: command tx timeout [ 822.175469][T20711] Bluetooth: hci15: command tx timeout [ 822.345179][T20711] Bluetooth: hci14: command tx timeout [ 822.915184][T21723] Bluetooth: hci13: command tx timeout [ 824.257996][ T5148] Bluetooth: hci15: command tx timeout [ 824.415860][ T5148] Bluetooth: hci2: command tx timeout [ 824.435520][ T5148] Bluetooth: hci14: command tx timeout [ 824.987293][ T5148] Bluetooth: hci13: command tx timeout [ 826.278418][T22278] Bluetooth: hci6: command 0x0406 tx timeout [ 826.304999][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 826.335990][T22278] Bluetooth: hci15: command tx timeout [ 826.495860][T22278] Bluetooth: hci14: command tx timeout [ 826.514667][T22278] Bluetooth: hci2: command tx timeout [ 828.427989][T21723] Bluetooth: hci15: command tx timeout [ 828.575246][T21723] Bluetooth: hci2: command tx timeout [ 830.655276][T20711] Bluetooth: hci2: command tx timeout [ 831.215895][T22269] lo speed is unknown, defaulting to 1000 [ 831.297384][T20711] Bluetooth: hci0: command 0x0406 tx timeout [ 834.457786][T13453] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.415295][ T5148] Bluetooth: hci7: command 0x0406 tx timeout [ 836.417301][T22278] Bluetooth: hci8: command 0x0406 tx timeout [ 838.796373][T13453] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.387671][T13453] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.235214][T13453] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.286202][T22271] lo speed is unknown, defaulting to 1000 [ 853.187884][T13453] bridge_slave_1: left allmulticast mode [ 853.646270][T13453] bridge_slave_1: left promiscuous mode [ 853.732972][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.556083][T13453] bridge_slave_0: left allmulticast mode [ 854.764546][T13453] bridge_slave_0: left promiscuous mode [ 855.055119][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.205987][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 872.455996][T20711] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 872.807404][T20711] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 872.918495][T20711] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 873.196194][T20711] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 873.526966][T20711] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 874.726071][T20711] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 874.815305][T20711] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 875.047105][T20711] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 875.205343][T20711] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 875.355380][T20711] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 875.943615][T21723] Bluetooth: hci16: command tx timeout [ 877.296605][T20711] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 877.366748][T20711] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 877.445423][T20711] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 877.865556][T22278] Bluetooth: hci17: command tx timeout [ 877.997721][T22278] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 878.035885][T22278] Bluetooth: hci16: command tx timeout [ 878.178480][T22278] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 878.306310][T22278] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 878.565950][T21723] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 878.687611][T21723] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 879.007031][T21723] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 879.417741][ T5148] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 879.936846][ T5148] Bluetooth: hci17: command tx timeout [ 880.115195][T20711] Bluetooth: hci16: command tx timeout [ 881.068438][T21723] Bluetooth: hci18: command tx timeout [ 881.736131][T22278] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 881.807905][T22278] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 882.016451][T22278] Bluetooth: hci17: command tx timeout [ 882.064883][T22278] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 882.175621][T22278] Bluetooth: hci16: command tx timeout [ 882.526358][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 882.536059][T22325] Bluetooth: hci9: command 0x0406 tx timeout [ 882.575947][ T52] Bluetooth: hci19: command tx timeout [ 883.137638][T20711] Bluetooth: hci18: command tx timeout [ 883.205373][T20711] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 883.606192][ T5148] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 884.098273][T20711] Bluetooth: hci17: command tx timeout [ 884.655719][T20711] Bluetooth: hci19: command tx timeout [ 885.215058][T20711] Bluetooth: hci18: command tx timeout [ 886.195772][T20711] Bluetooth: hci20: command tx timeout [ 886.747794][T20711] Bluetooth: hci19: command tx timeout [ 887.295254][T20711] Bluetooth: hci18: command tx timeout [ 888.255649][T20711] Bluetooth: hci20: command tx timeout [ 888.815642][T20711] Bluetooth: hci19: command tx timeout [ 890.353198][T20711] Bluetooth: hci20: command tx timeout [ 892.415586][ T52] Bluetooth: hci20: command tx timeout [ 892.745063][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 892.747779][T22325] Bluetooth: hci11: command 0x0406 tx timeout [ 892.785857][T22325] Bluetooth: hci10: command 0x0406 tx timeout [ 914.167187][T13453] dvmrp1 (unregistering): left allmulticast mode [ 921.372750][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 929.715490][ T31] INFO: task syz.3.4221:22258 blocked for more than 143 seconds. [ 929.905789][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 930.116233][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 930.305279][ T31] task:syz.3.4221 state:D stack:24032 pid:22258 tgid:22256 ppid:18078 task_flags:0x400140 flags:0x00080003 [ 930.455113][ T31] Call Trace: [ 930.458446][ T31] [ 930.604489][ T31] __schedule+0x1798/0x4cc0 [ 930.708468][ T31] ? __lock_acquire+0xab9/0xd20 [ 930.936077][ T31] ? __lock_acquire+0xab9/0xd20 [ 931.145555][ T31] ? __pfx___schedule+0x10/0x10 [ 931.377115][ T31] ? schedule+0x91/0x360 [ 931.467753][ T31] schedule+0x165/0x360 [ 931.607792][ T5148] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 931.645371][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.686184][ T31] schedule_preempt_disabled+0x13/0x30 [ 931.705964][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 931.723946][ T31] ? preempt_schedule+0xae/0xc0 [ 931.732919][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 931.748179][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 931.778457][ T5148] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 931.836113][ T31] ? __lock_acquire+0xab9/0xd20 [ 931.868300][ T5148] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 932.045115][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 932.116106][ T31] down_write+0x1ab/0x1f0 [ 932.194671][ T31] ? __pfx_down_write+0x10/0x10 [ 932.285248][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 932.307098][ T5148] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 932.367186][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 932.416082][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 932.588457][ T5148] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 932.894823][ T31] rdma_dev_exit_net+0x8c/0x340 [ 933.127858][ T31] ? __pfx___might_resched+0x10/0x10 [ 933.304982][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 933.457294][ T31] ? net_generic+0x1e/0x240 [ 933.584645][ T31] ? mutex_is_locked+0x17/0x50 [ 933.766216][ T31] ? rtnl_is_locked+0x15/0x20 [ 933.877899][ T31] ops_undo_list+0x49a/0x990 [ 933.996882][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 934.314670][ T31] ? ops_init+0x469/0x5c0 [ 934.464567][ T31] setup_net+0x2d6/0x320 [ 934.625423][ T31] ? __pfx_setup_net+0x10/0x10 [ 934.715079][ T31] ? copy_net_ns+0x337/0x4e0 [ 934.975990][ T5148] Bluetooth: hci21: command tx timeout [ 935.145394][ T31] ? down_read_killable+0x1d1/0x350 [ 935.304942][ T31] ? preinit_net+0x47d/0x740 [ 935.384582][ T31] copy_net_ns+0x34e/0x4e0 [ 935.495868][ T31] create_new_namespaces+0x3f3/0x720 [ 935.658323][ T31] ? security_capable+0x7e/0x2e0 [ 935.788370][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 935.916430][ T31] ksys_unshare+0x4c8/0x8c0 [ 936.135994][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 936.275590][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 936.395411][ T31] __x64_sys_unshare+0x38/0x50 [ 936.488046][ T31] do_syscall_64+0xfa/0xfa0 [ 936.618464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 936.905744][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.016239][ T31] ? clear_bhb_loop+0x60/0xb0 [ 937.065365][T21723] Bluetooth: hci21: command tx timeout [ 937.277326][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.375778][ T31] RIP: 0033:0x7ff3b258eec9 [ 937.566550][ T31] RSP: 002b:00007ff3b07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 937.756314][ T31] RAX: ffffffffffffffda RBX: 00007ff3b27e6090 RCX: 00007ff3b258eec9 [ 937.904550][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 938.064907][ T31] RBP: 00007ff3b2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 938.236276][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.385014][ T31] R13: 00007ff3b27e6128 R14: 00007ff3b27e6090 R15: 00007ffd176ad2e8 [ 938.545137][ T31] [ 938.585489][ T31] INFO: task syz-executor:22284 blocked for more than 152 seconds. [ 938.737861][ T31] Not tainted syzkaller #0 [ 938.828487][T22326] Bluetooth: hci12: command 0x0406 tx timeout [ 938.846658][T21723] Bluetooth: hci13: command 0x0406 tx timeout [ 938.965095][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.115643][ T31] task:syz-executor state:D stack:25312 pid:22284 tgid:22284 ppid:1 task_flags:0x400140 flags:0x00080003 [ 939.138189][T21723] Bluetooth: hci21: command tx timeout [ 939.444800][ T31] Call Trace: [ 939.448134][ T31] [ 939.574567][ T31] __schedule+0x1798/0x4cc0