last executing test programs: 7m1.758463748s ago: executing program 1 (id=4720): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x30, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x40, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x1, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x4, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0xf, 0xfff1}, {0x0, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0x4004081) r8 = socket(0x2, 0x80805, 0x0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r9, &(0x7f0000001100)={0x11, 0x3, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4c22, 0x0, @loopback, 0x1}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000000800000000000000000000000000006763ee24e63b61893377efb09d6a1940519ea179aaa940e3406816f1a2cb07d0821533333a4d997120f6b94d837d671f625fdbc9548dcf4056e0077a7841e8d829b17ba356bc26bdc96d25a680e2ab7463de1d6dcd87e4dafd0ceae234ad18e4a3db3d32d40fd553042f21462dd0f04aacb6c63cde14b3e6f02e35ba5cf561a1c176b07da94ebb0dcfee25d19f9595427046a1feee36915aed7a5270f6eccfb86a248bd614d1f809b5af670a6c8f07491bd4ade369cb881d96cb8ecb324d1e2bdd06d46c13a12cb4", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 7m1.46642128s ago: executing program 1 (id=4723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8fb}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8fb}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2720}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c011) 7m1.378823158s ago: executing program 1 (id=4725): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) close(0x3) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r2, 0x89e0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d912519ac6ecf00bf0da3ff0e8b668a2ae756ad6b387be2a41b130c4d6d70eabe0a9e49da8c94e5dc89aea3369df62e05e6294053d110f4c806d0e5d396539f937881a51905e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) 7m1.251870746s ago: executing program 1 (id=4726): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"b3472eb9cd42d2030000002000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @private=0xa010102}, {0x306, @broadcast}, 0x48, {0x2, 0x4e24, @empty}, 'veth0_to_team\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f00000002c0), 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) 7m0.336044039s ago: executing program 1 (id=4738): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0xb2399000) 6m59.420095005s ago: executing program 1 (id=4748): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)="dcb1565ff746a6a5c577c1f3047493de2333a9a828ff28b41c6a34bccf1ef9d875c6e6437e52aa6af8c98c4b4e395ca35e8d7f96c4990f2216318c2f4fb2a5269c22381e6fec16cf0da896c3d0fb477b3e4e7161096719f654467d6191b258ec987867b27d334b36c1243406f14808de2f3c2464f502d2c3d02a8e5ff34684b40bdb7f4589477c4b46819d5cc8fb08bb2a", 0x91) bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x2}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x40000d0) r4 = socket(0x26, 0x4, 0x3fe00) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@polexpire={0x130, 0x1b, 0x200, 0x70bd2b, 0x25dfdbfc, {{{@in=@empty, @in=@broadcast, 0x4e23, 0x8c66, 0x4e20, 0x8, 0xa, 0x20, 0x20, 0x2c, 0x0, 0xee01}, {0x180000, 0xdbf, 0x7, 0xf, 0x0, 0x0, 0x5, 0x1}, {0x2, 0x5, 0x7fffffffffffffff, 0x3}, 0x4, 0x6e6bbe, 0x1, 0x0, 0x0, 0x886acde727eb61a4}, 0x2}, [@algo_auth={0x66, 0x1, {{'hmac(sha1)\x00'}, 0xf0, "83bb91782356b17f4bb0fd48c7ebc861a3e7e4e9334e5023a41ce040654b"}}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x130}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000540)=0x6, 0x4) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000580)={0x48, 0x3a4, 0xc, 0x5, 0x0, 0x81}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd8, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x0, 0xfffd, 0xf, 0x0, 0x101, 0x6c6f]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0xf11, 0x10, 0x7, 0x5]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5f, 0xbe, "b8a65d26385d910b894397cd3bb9e7fc5b38e16abc8239cd65d29b1cc8085a3f68b9600334e4ff149d6b5df7b22806c91602342f9162bb00fd5b4c4d6c7f0f271c8ae77908592fa6370729dafb9723e003387ee0fc7bbbbb4deb83"}]}, 0xd8}}, 0x4000841) r8 = socket(0x27, 0x5, 0x4) sendmsg$key(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0xc, 0x8c, 0x5, 0x5, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_address={0x3, 0x17, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x9, 0x0}}}]}, 0x28}}, 0xc0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x78, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x809b}]}, 0x78}}, 0x8000) unshare(0x20000) writev(r4, &(0x7f0000000cc0)=[{&(0x7f0000000a00)="01ead67e6ffeb4385312583e9356ef6a1ac3a6d3adfe4cbbef78e848445a831991578dd24fd1c29fcfd824df089fe4ac4e7e98d271d37ba93946ff7d1ee8521f9465aedf32d3a7d2f624543e1b184777947580391c71e3b1c80ee59a0e3a4c23ed8f110ea3e821c1029302333d3d2595dbf013a2c4e7c78485998a", 0x7b}, {&(0x7f0000000a80)="0c31a55cc3e0ec8fe54c9c1a7562390acce2266e88d4b2f097c8b5680ee2", 0x1e}, {&(0x7f0000000ac0)="3a7bb72efc3627913b9b101d6654f294bd8959c58305a6602de6e75f3fd9885f17ddfa60cb4a9b80e847d863f7ffb7eea35af4ccc34bd31859f2f2c3723fcb6273e6e1eddd979e62182b06a230c5f77112055ed2702ceb07debf1dfbd2dde5e03a1bb54a536fabdf1fdc92f187", 0x6d}, {&(0x7f0000000b40)="72c6ecd3ab0ff93b19f3be82f76eebcad743c979a6bc98dd8f8d3ddc2685d0c00476310f236f55281766f7b6544402f57f2c0ac6e6ea9d8b6b669a90c65893f6908cc819834d313485d3176dbdc346a0a28582cc093915192664e3dc1f66467f8d179918c331bc2d3df54fd98ee9e3f40c0cbf95cd871a77564e281b92ca79f57a14aae582f4c364f690a266eebb061f77f6d024c6e9ed2db60387f2ebcec2f78073f04add036b1dfd35d4381ec8ca9b5f61f6c46684ac51d95319068f0f767857bfc7f05b059e19967d30e13000ab53ebd0ed788efb3f8b526f3d0f2d391b1fe244510c8a", 0xe5}, {&(0x7f0000000c40)="377caa5f398ca1160e554f9513fdbeb52635a4b71a7894bfa6b6e7ea4967f9fb0559cec992734b6c47dbcf36a9681c9ec15d56d531d0fa58a46af1b9e000aae9e79a9922d05f19f5215b2ba2ae40ca180266ed59128b793e4ab0df3293300f5bed46e1ba39cfa70ef77a6247", 0x6c}], 0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0x5}, &(0x7f0000000d80)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000dc0)={r10, 0x2, 0x20}, &(0x7f0000000e00)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000fc0)={'sit0\x00', &(0x7f0000000f40)={'gretap0\x00', 0x0, 0x7, 0x8000, 0xfdd, 0xffffef97, {{0x12, 0x4, 0x0, 0x20, 0x48, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0xfffffff9}, {@local, 0x1}]}, @end, @lsrr={0x83, 0xb, 0x3a, [@multicast2, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendto$packet(r4, &(0x7f0000000e40)="0f85feedc5252c20913807755bed5f76507598884e4c31d772de2461ae1ba81eb482a8ddebeaeab5b1f2921b3bcd8e7a5a58c22b7f920740bb7e20b151a6569b9a724e43b2bc7708479a11b42c205f9f671bd39bb95eeb9c0e94e391a2d8ab9da117b234e5e8e143debcc5c94961eec73ba893817d817590b420c814fc336e3f8657cf517f63c215ee3dcae8c8d12cfb7f2d9bcf9948a8d81f62c037f76bb459fffb33a13f102e38803868967ab41ad5e34e0e5682bd1b5d451a24c4ecdf89f484dfd21211e5155d467b74b1f23aeed642f4c8dbbebd0bc2f4cb6e73e4234dbc4d518c7c", 0xe4, 0x4810, &(0x7f0000001000)={0x11, 0x7, r11, 0x1, 0x9, 0x6, @broadcast}, 0x14) r12 = openat$cgroup_procs(r5, &(0x7f0000001040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000010c0), 0x12) 6m44.304099146s ago: executing program 32 (id=4748): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)="dcb1565ff746a6a5c577c1f3047493de2333a9a828ff28b41c6a34bccf1ef9d875c6e6437e52aa6af8c98c4b4e395ca35e8d7f96c4990f2216318c2f4fb2a5269c22381e6fec16cf0da896c3d0fb477b3e4e7161096719f654467d6191b258ec987867b27d334b36c1243406f14808de2f3c2464f502d2c3d02a8e5ff34684b40bdb7f4589477c4b46819d5cc8fb08bb2a", 0x91) bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x2}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x40000d0) r4 = socket(0x26, 0x4, 0x3fe00) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@polexpire={0x130, 0x1b, 0x200, 0x70bd2b, 0x25dfdbfc, {{{@in=@empty, @in=@broadcast, 0x4e23, 0x8c66, 0x4e20, 0x8, 0xa, 0x20, 0x20, 0x2c, 0x0, 0xee01}, {0x180000, 0xdbf, 0x7, 0xf, 0x0, 0x0, 0x5, 0x1}, {0x2, 0x5, 0x7fffffffffffffff, 0x3}, 0x4, 0x6e6bbe, 0x1, 0x0, 0x0, 0x886acde727eb61a4}, 0x2}, [@algo_auth={0x66, 0x1, {{'hmac(sha1)\x00'}, 0xf0, "83bb91782356b17f4bb0fd48c7ebc861a3e7e4e9334e5023a41ce040654b"}}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x130}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000540)=0x6, 0x4) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000580)={0x48, 0x3a4, 0xc, 0x5, 0x0, 0x81}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd8, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x0, 0xfffd, 0xf, 0x0, 0x101, 0x6c6f]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0xf11, 0x10, 0x7, 0x5]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5f, 0xbe, "b8a65d26385d910b894397cd3bb9e7fc5b38e16abc8239cd65d29b1cc8085a3f68b9600334e4ff149d6b5df7b22806c91602342f9162bb00fd5b4c4d6c7f0f271c8ae77908592fa6370729dafb9723e003387ee0fc7bbbbb4deb83"}]}, 0xd8}}, 0x4000841) r8 = socket(0x27, 0x5, 0x4) sendmsg$key(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0xc, 0x8c, 0x5, 0x5, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_address={0x3, 0x17, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x9, 0x0}}}]}, 0x28}}, 0xc0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x78, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x809b}]}, 0x78}}, 0x8000) unshare(0x20000) writev(r4, &(0x7f0000000cc0)=[{&(0x7f0000000a00)="01ead67e6ffeb4385312583e9356ef6a1ac3a6d3adfe4cbbef78e848445a831991578dd24fd1c29fcfd824df089fe4ac4e7e98d271d37ba93946ff7d1ee8521f9465aedf32d3a7d2f624543e1b184777947580391c71e3b1c80ee59a0e3a4c23ed8f110ea3e821c1029302333d3d2595dbf013a2c4e7c78485998a", 0x7b}, {&(0x7f0000000a80)="0c31a55cc3e0ec8fe54c9c1a7562390acce2266e88d4b2f097c8b5680ee2", 0x1e}, {&(0x7f0000000ac0)="3a7bb72efc3627913b9b101d6654f294bd8959c58305a6602de6e75f3fd9885f17ddfa60cb4a9b80e847d863f7ffb7eea35af4ccc34bd31859f2f2c3723fcb6273e6e1eddd979e62182b06a230c5f77112055ed2702ceb07debf1dfbd2dde5e03a1bb54a536fabdf1fdc92f187", 0x6d}, {&(0x7f0000000b40)="72c6ecd3ab0ff93b19f3be82f76eebcad743c979a6bc98dd8f8d3ddc2685d0c00476310f236f55281766f7b6544402f57f2c0ac6e6ea9d8b6b669a90c65893f6908cc819834d313485d3176dbdc346a0a28582cc093915192664e3dc1f66467f8d179918c331bc2d3df54fd98ee9e3f40c0cbf95cd871a77564e281b92ca79f57a14aae582f4c364f690a266eebb061f77f6d024c6e9ed2db60387f2ebcec2f78073f04add036b1dfd35d4381ec8ca9b5f61f6c46684ac51d95319068f0f767857bfc7f05b059e19967d30e13000ab53ebd0ed788efb3f8b526f3d0f2d391b1fe244510c8a", 0xe5}, {&(0x7f0000000c40)="377caa5f398ca1160e554f9513fdbeb52635a4b71a7894bfa6b6e7ea4967f9fb0559cec992734b6c47dbcf36a9681c9ec15d56d531d0fa58a46af1b9e000aae9e79a9922d05f19f5215b2ba2ae40ca180266ed59128b793e4ab0df3293300f5bed46e1ba39cfa70ef77a6247", 0x6c}], 0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0x5}, &(0x7f0000000d80)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000dc0)={r10, 0x2, 0x20}, &(0x7f0000000e00)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000fc0)={'sit0\x00', &(0x7f0000000f40)={'gretap0\x00', 0x0, 0x7, 0x8000, 0xfdd, 0xffffef97, {{0x12, 0x4, 0x0, 0x20, 0x48, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0xfffffff9}, {@local, 0x1}]}, @end, @lsrr={0x83, 0xb, 0x3a, [@multicast2, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendto$packet(r4, &(0x7f0000000e40)="0f85feedc5252c20913807755bed5f76507598884e4c31d772de2461ae1ba81eb482a8ddebeaeab5b1f2921b3bcd8e7a5a58c22b7f920740bb7e20b151a6569b9a724e43b2bc7708479a11b42c205f9f671bd39bb95eeb9c0e94e391a2d8ab9da117b234e5e8e143debcc5c94961eec73ba893817d817590b420c814fc336e3f8657cf517f63c215ee3dcae8c8d12cfb7f2d9bcf9948a8d81f62c037f76bb459fffb33a13f102e38803868967ab41ad5e34e0e5682bd1b5d451a24c4ecdf89f484dfd21211e5155d467b74b1f23aeed642f4c8dbbebd0bc2f4cb6e73e4234dbc4d518c7c", 0xe4, 0x4810, &(0x7f0000001000)={0x11, 0x7, r11, 0x1, 0x9, 0x6, @broadcast}, 0x14) r12 = openat$cgroup_procs(r5, &(0x7f0000001040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000010c0), 0x12) 1m37.864486254s ago: executing program 4 (id=7634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f00000000c0)=0xfffffffc, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd700000dcdf250900000030000380140002"], 0x44}}, 0x48040) r2 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffc1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) 1m37.608863652s ago: executing program 4 (id=7638): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5f76ef82fc0ece5ee767b8e54000000", @ANYRES16=r4, @ANYBLOB="05000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f000000000000000000030090000000000000000000"], 0x54}}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) unshare(0x20000400) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000300)='GPL\x00', 0x7, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r10, 0x0, 0x20008004) socket$nl_netfilter(0x10, 0x3, 0xc) 1m37.222052081s ago: executing program 4 (id=7641): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x22, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1000, 0x11, &(0x7f0000000600)=""/17, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x5, 0xd}, {0x4, 0x1, 0x4, 0x2}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x1000, 0x88, &(0x7f0000001740)="c76d1b4e00f7e1bea50037d19013ce06c03569a0303cb067e2029d0259a494643715cc9036d13da1d1f0c6096e7e98a65419f8c5a5798e66cc09288358c18b57ccd9f7d9b806570c2dccb6522bf0f5b6b6ab861e5cf254f32f09fd5373aca28256cc80eebed6c0a2ba482da455905742c6c7ec3f7986d26c02d0de070690763dd09c9de5ad4cd6b0f5e0837352a88c2e10ce34a46161e76365696828f5d92d3d57247cc7fb2dc303c5b64954c431682ea2dc99f11498ec2b3f1bbac60ca0709273cb149096717317ad8519d1c21b51e9cfbf6730c130760bb1dfd107c8a7c497722ba2b59efea51ec1659b6a3e713369bec1eccd8a0f895c682d7c9e4df9b9b523a3f40839a779542cc813ace97d6e89f6bc2d44d85105f018bb734691fa991ba2b49146f7ccf56bfd9528b63ea1ccfc8df5aec59d6c2633fd3adf82c7604afc063b07e6dc4af515dd6aaf37b69a4fef26b9d3bc22fbe8c63256d675d25aafa157e980ea3d3ed07da74991a51cf7038314748acf0bd7d9062c50ac737865fb64b55b5594cab0459d7094ee4d4a233f4eaef6fc0a4fa977bcc512aac0c67156d94febdc5fd6d05957e7e2fc70295db563391b5ad2ef70054932f7cfe22380ec2e62b02ec15962be94680ef4aaf12c6b280a019b84d8959d84d047e74156569c62256d46b9bf2adf96c398b7ed9ea3d7f7a9b4ca3fde425fd61878d37858567152bb027e4cdfe4e3849bfc220e70a23fb1106839a6a43e969344960a745cd540274077ed2b006eb5737777511a268a1e50d12fbae4a9835b3de9deccb8d16573d2c54df9c60d07be19c92619a245d57dfc169275938ea08465ccbc54fc98185e165c4208d3b404b98dc669286788a16170d6c18ab127eea6b37f454beb49b05b3a98e105c1a04878aaf7f25a1af1110c4f7dae21fb0e591612a79918460fd57b0c28a5cfb510a7b5a4897c64d5b0bb270c85d60939512bc38961e436701ccbe00c30b90a18a9af12bf92609c25737ac2b3f64ef0a8472bcec0654716fa3a686a3bc5a8e648d1af45936454bb3aeae284ad315a12a81aa78d45002cc1acc7cce02e1b267bc56ca245248c61cc97a9c084132f54f393e4cc0f229f56c22eafe035b27d24f9d018175543195e67cc8fadbf10e6a8a7ae5c76796752487f19c2ea22917b73e458e24fa21da284490a2904cf3294b11b84d59664274745c4679bfe8ba1a00a9bae3a07f5b02de0693d7a06a154d38986e024b9f4d14939afb96122bc03246807817d1c59a348a7fb898d16ace83047a6a22dc77c75e5d674227b3c0d128a8595fd45036ef37c57d0cee15ec5a1c5fb62f2b0f96de8fb5ff13730605c7ff605c1477722a86bd2f3895267204ff581bb8815f082b63e103fd3158a6ede780f4ce2ba588dc93f555394601e7ab61832c2b336f1486c0ba50f1581ac40bcd4980dbae97874ff7427fc9dea0a7d2f194a75f86b3572ec771c5c44ef1796efe6c45e164df5a36178319301b45b1a093fb319a9d165b59b268b019fbd232c0fe57d2c6167d93c0d3c000a361dbc99e1cb4545b2c39a4225ba9576fca2619a578a3412fefa68b81a002369543509dab09b0ad9b13fedd09a3a463854c513bb2de2cbc1b5864eda2d6b499a54d64480728e33de4cb105d95a4382145fccef00e971352a0db3aaece1469cff78b9f7f93824a50019239ec9693bb0d15368e6407521e4cecf17f76a87345123c77ad892d0334080b6e8351dd527b01dded302c25be8d6867c295e692cad306b59c52696be5c263047f0146fa070d86d9aa4369986debe0277c3dea7edf5870ae5c63dd34d41aba2460c143cfe60595e6dbab6eb895fd3558ea11b48317ed8b981b86ada49e634b4065e79c463c6bf478e3c1cc656cfe79a617a81ab49007b473b8aa0a8d9404090d47c0e66810d69c2b6fde99dc8fdf1c10b1f65df67b21b610da662e5ae87df28a5e3c777dbba57e69804163e8c2ec003aac9564214b498ae05e372d2cb138a737011fdc8427fb4c8b416c06711ed0118372f00a7f6fdc7cb1f89d1be337d2250aee24a0f13288c616613b8839ad82f40af532a9379961b1a0fce6f879449ab6aaef3d0eb3bd06e01dd299c9595f59b470234048fc01dcfaba76be9afab8b2f7d28a9f0dbde1183a58dd50133a949e2bc2d8df482631dc8a93b7c03fb3b4bd920f528bd4b8fe95579411627995343466ce9be2ebda7d053e3b0d4da05e00a1a5b6b7e23d18642bdacce0b2749535832176f5fec4203b81953a8adb6d2de88919bd153c3edb6ee0f91c8e7cb5c7d714dfa794df10ddba90a06acc17a19b71372ea2c41915157840e5f51253c52cc72e5f5759a8628f00c4e599af31f1f7e404769d50f7ff269a0b6386b291082b84940ecdb494e0a054289eae671b0a2325732b4dbd27226628c73c46e80232949678f214b169b650f3692e0966fed691fa4b2e0809c24c5cec0cf70df23899c6a600a60f0fdcefd57846bc2d722a90e23c8d4e8f9080e5fd243312f78966cd221e1b53d31d396d1217b11fb5e84ce3a574e49fbdfcb565dbe13ee1b1221bc781d1f19a838ec934480e10c1cf319a8f8cd93c4fd541fdb04e557ee32b7b39736edb7909685c9e7507fb7ad1771f4a1e5a57a89790883ce8cb3db26b4f8de473cb19c8a095eaffbb0e33ef8f45706bb189e281494068e89ef6e350778c063ac04788a68008b4889c3d02f3d8f17bc0086380126ec54ee5eeaeeaf54dc95b7b975ef66dba9e356bbc8f2e5e7f1c20cd1e9c3f8d91468eab0cf186e0440e8d00e799f24183ed441b1d9d87dee816ad166d2b028903504128e771f671d2ae5adae7a98dfa85caad7de387a666ed45452f654b0f4d47a72eec6107d0b4d20d99889bbfc25e10b17f9b0045c9a0e51b94a559f4f4432641f7be2a9faaddd770f17086812868ff84e0a5fd0f4da2efeea81a951c2c88ac89c08d7cf15eee2ea4590ae3eed68dbc73158ae9c21b503959ea06243c21d34b94075a5c662025c3aed73274a2e8736b706fc0632a97b856130fbda82888bbd7f321cfb8a9939b7390a7fa00f5be594fd52354c30bfc218b74d9a698d0e93e5d37eaf1910068edb0b9b3e0553df6b19954c403162a30803fc8a4b8a98fe8001acfca64471b70276b0d98d684f5b11f2536159f88b782374b10263e9c58c110e457f6693095de7dd40a7a7233244961e05d08a3b7e836ec0b81e04cc2cbbdf487d6c29c948d9309fdafd64d5ae9df0e1b0c3c0f9cb5307f63391893abc122fdabcdd89201291d05e7dd1dc749e07df657d7abbe1f1df8c8e74e7fd81270dc567109473cf2d91c34a0e21731e14b2cc297ac66b062f5481b1ba0cef9ed206c151d4cf3fb881df53e57c2b0b738324785a668cd647c64273febbbfbbad7f99788315825d5ac44698979783ec74f7a2a234f56cc5617b6ba656ab53b3776da220e2e81c2e3a3187aef4cf6be4d157459f2a6a9d660099c8b3a64d003c24aacd68e521191acce53ec9bcfbdbd1883b35888a605cf75727b0aff6ceb695a607776fa5f9e2eb4966c0809b3414af67624ff5129a8d092a63389a77f5fca82d5c346a8372f42f75292dd84b556fd879bb9296882cd427f2bc2dc02261e7cf4d98a676044a9a739011395748df04a002dae02b6daefe8f63f88f7f52c94e37af24c79714699009320158fdb7732196771906b52211e773ab499400989e6117c7ce0886469b688d7b843ba1a18a5295aa9af7e8cd68ce7f44151beea49ec780aac3c757dc7ae16e7f41731fea0ed3c824c0062970d11fe22e4e9e749681192d3d36bf2c6bd1fe4394776a4e909b3b02f164d67ee71441cbcb5be78b439370ce28947479586ae0422d629c24ee93c128875232031fec1d1f4c7660c32bedf6b55310c7f308bc7c5782f16067e9014d56a402ec0b6df82f2e1b0928d938e8cf7e3c75f535c8914aa71930f214a6123401fb0cc74d00cfb32691183230d4d5a1f970773c934285d31899a9bea471fbef4f1ea9a999ca66a392ff0935ad094a42ed668fecef70ec159198c0e06dc0f970726af3bbe69de5f4cb87b66f18b5d577edc233f94f338e3bb1bc857933da960336c565beea37095c6258ce8b32d533148d51bccad2a4abf2ee91d6e5796b767b3b1fb2a32dd45735c3605fce0193d20b54ef32866d390544ef10bf12e882b7f43741ef02e9a7323c0573e8f81b089d8bd9d4f8262753b654f94cabafcc076f9ee4524d0ccedfe54127096fd69be0ae4f6fa721cab519a24978e3920ef85baeda6badf6b3fbe97482ddd3ee98b6133db4c4c34722cef489266960a3b71da9a3cda0d582151fa066f74b41e1e49862a64e58abc975ac6e1aea7f0bcfe1ef2cb0a62935a600c6f39f7c2a3f4959b5722891955795184f93ac51edf9c089d1e11ef9a94fb684fe89fef53ff5d15b5763bca19ece9e5e3f5892146af5b58eba6e24adf1a955c9827b07b62d6dea469b95c16550cf6cdcc334d17dec739126d311d9d4176732e83781a23a56e721553743baae2a60e64ab897656068c4b95c8575b468836ef6e8a87f2179f038a4bfab87e3cfbc064a76498410bfb789ae8a9aa65a333574cce0f3902236980e6799546acef049a81aa4e948c154c1697c8ec0a9b376732fae4a3b87398478c68207a47974db18a16d231ecde7b817543e3c29524e3fa6299ac609e33555f1c5482efab01971f63549fb6d8a80a924addd06d22c23cfd6abdecd95988c3937f56c930ddc2366fa3afd99098370f6ff1c9fb142b7c07e359743a18647c2db6df62299c1b9b09c361f45ec4d8fd4a60f6fe7e6026997bd9dab96ec5f0f0cb8a58227e5638f0f1e1e69e6e90c074e1f4fd62c8eb797841184fa7805a62ad8647cf5a93f301e54c63aa6542159239634d317c78f1531b42c191d1ccce89d8b30e71e34d2125aeda22bb667451b37bad23575b2d89a418a199521c534ad53e172178615e160cebae785f23e9e849e8210c86ef4e105cbe6090ffb4b4779407e85b421377e2293b40865a5b61c8440cc289537d96b895c6eac1c08a456cb5009ed2c004d5a44c6dd28139e4fc119c0372fa19c7514366a4ffdc3434217db53cba8b2938378e6807b9276f77694e737e2041dca0465eebbb68e13f0edf9827e054ecaedb456c47f6c84427db91296106d2c3c11ad404264875171b834648cb3871fe7f0538048a9b8f0696721425a79f98bc47564161213353854c46aacddab84795e992fe101df281a681a13c899537cc55e3d7e7a204e17fe16f12a52ab5719d629a4731ef2d2d352fab87c5b257ab1f6269cadee403608df4c807feac023eee83f1fbb4e6d5ca7dbe801fd89687fd0cde6a9ade8f239a2d14fb7da761f27d9d8f8e9c42c24bf79106af64503dedea1e6496d7ebcf4d6fb37775c8e5f9ba5b9bc6139f684f36c2c2bb2667eeddbdb0fc176db8ae8009ffa139cdf7e42513cf7d03e0936ca7f045a98a6dde82b609da78c122e2244219af6efc22542b21b20bc5acba0d1a8de6397cf3080140cc66a371ca20829dea813bf12aedc43c3f5cc655ff18440a8f15cd67d87bab4a2ee0d5caccdc4f726ac6b788e9c4735b6dbe7b33181310871f235792f73515d742f4da28395fe4b7298c15e5eb1acbc990f5b2feabb80d64034d1ea4e1e5bdd77e27ffe2845108a75888a8f71fe90a4db6a323356784d82117e4f552648326a8bf10f423ebe6bad73e6f26e2bd56107a4b340e44dc38fe8dd074700dd78a4d9339ab65cacefc079da5ed8ec922e86c32da1", &(0x7f0000000980)=""/136, 0x1, 0x0, 0x78, 0x3d, &(0x7f0000000a40)="26eddfa1a9965677ef32131291c57d86c14d789b2c40bc4e27488bbceab6bb877f05db7e03e1d44cbf3f33ea3c95650e6a94f125616cde225bae49ad44d7d6a35c947841c7f3e7485192a40b5b054d10b3d7d4d7df5ccf57631cf0636ea4863bd2b0fd9e5d842dfb06fc67997612405a9ac1c9d290f5bab6", &(0x7f0000000740)="dea627feef8613dc1ceebeecd1fb8596f72da9c38d20604ae0f2359b6c704a5510f20546610b7a8052a97d886bfb69c119a4bb235c0753c0692b6a9fe6", 0x5, 0x0, 0x1}, 0x50) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100085060000000000000000e3001300b226193c48276829be98f90c3654f55c69eebbbdf2cc635fe7eeee16a57b86779ea60f32428d63", @ANYRES16=r1, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40084) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x2, 0x9, 0xba, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213010e02000000000000009b8c7d57"], 0x10}}, 0x4000050) 1m36.676179036s ago: executing program 3 (id=7646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x22, 0x0, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0xff, 0x4, 0x0, 0x0, 0x3, 0xff, 0xfb, 0x45, [0xfffffffe, 0x89ff]}}) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000540)="5c7ae38848b21acb492d4d12ca94cd79bd775086e96c51e56c3139c40e9e9c8db62b33f32f23072287c8ec28c30408f1dfd4a88c93c4b8afef84830bd1b21cf9e95834ee1a3ee33fac7423a1cd10bfdbcb2d58b13f8a8f064ebac5754aeef6acddd739ac017a47e42fc5aae9a075ec9eae156cc46af900e1d8203d040bc2e2a0d5f0d14b", 0x84}, {&(0x7f00000007c0)="31bc6e2495829aa85e1ee22091406183de8fd1218dc01908d0a557c580cd362724ecfc72abb4fd087911816a4b6044b2810e0b0b691de414e8b00b0f037c4cddcd2c717af59a5c001fb0928aca3f13861a174c1134becec9fc7d812b9eeb760eac25abb53662cc652c7134061de92492880033bd75a61f00d8ca48b4fefeddb74be078ff79cc56", 0x87}], 0x3}}], 0x1, 0x44010) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000a00)='syz0\x00', 0x1ff) 1m36.311225228s ago: executing program 3 (id=7648): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0xfffffffffffffd56, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xabc1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10050}, 0xc4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, &(0x7f0000001180)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)=ANY=[], 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x3ff, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m36.30991226s ago: executing program 0 (id=7649): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4008004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept(0xffffffffffffffff, &(0x7f0000000280)=@llc, &(0x7f0000000100)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x80, {{0x26, 0x4, 0x0, 0x2, 0x98, 0x68, 0x0, 0xef, 0x0, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@end, @timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0xb, [{@multicast1, 0x70}, {@broadcast, 0x3d1}, {@private=0xa010101, 0xffffffff}, {@loopback, 0x6}, {@multicast2, 0x7}, {@broadcast, 0x4}]}, @noop, @cipso={0x86, 0x2c, 0x3, [{0x1, 0xb, "e9165c006da6a41357"}, {0x5, 0x7, "a63c4228c3"}, {0x2, 0x2}, {0x2, 0x12, "d93840ce28adef5516ca94f9cd046ab3"}]}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x9, [{@local, 0x1}, {@local, 0x3}]}, @ssrr={0x89, 0xb, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfff8) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, 0xffffffffffffffff, 0x0) 1m35.938891672s ago: executing program 3 (id=7653): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x8004, 0xb4f, 0x300, 0x4}, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x64, r4, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}, &(0x7f0000000140)=0x84) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf25030000000c0006000300000000000000280007800c0501800800feff", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="4ef3000000000180", @ANYRES32, @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8) 1m35.798531101s ago: executing program 3 (id=7656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r3 = socket(0x22, 0x2, 0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000fedbdf252a00000008002f00000000000a0001087770616e3100000086000400fdff0000"], 0x30}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x40) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESHEX=r3, @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES16=r6, @ANYRESDEC=r2], 0x0}, 0x94) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000006a0001002abd000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m35.679363479s ago: executing program 3 (id=7658): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r1, @ANYBLOB="2c9771240079259f41dff395ac73b99c74b2fa67b9d7835f67900dd918b2bfe78388b54c46a36947b80e567dc444a78c1f1d471d1a4fa3e22a1b6003f70eeb4fe1491a6d74eb61d4baa9fdcf31b911dbe914b74dcb69cbc835cdbdef54e7cfdf0283e7005088db3e185b0db17ff8d068a743ddb400c3d21dcf93", @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m35.60844942s ago: executing program 4 (id=7660): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) readv(r0, &(0x7f0000000600), 0x0) close(r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x5c) sendto(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) 1m35.467959103s ago: executing program 4 (id=7662): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb5cf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.450829854s ago: executing program 4 (id=7663): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000e9c056acadd8707b000000000007000000f2004ee2234eb9d44c01d045d0", @ANYRES32=0x0, @ANYBLOB="0000000004110200140035007767300000000000000000000000000008001d0006000000"], 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="4d7b0000c748aa0b1400350077673100000000000000000000000000300016802c000180280001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@delchain={0x74, 0x65, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0x3}, {0x3, 0x4}, {0xfff1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xa1}}, @TCA_CHAIN={0x8, 0xb, 0x87e}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xca}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_freezer_state(r10, &(0x7f00000003c0)='THAWED\x00', 0x7) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) 1m35.340001565s ago: executing program 5 (id=7665): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000002f9078ac1414bbffffffff248086dd0000000010000800000086dd080088be00000000100000000100000700000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m35.339318572s ago: executing program 3 (id=7666): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x44) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0160000000000000000000010000001c200180060001000200000008000300ac1414aa0800060001000000"], 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) close(r5) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 1m35.299562802s ago: executing program 0 (id=7667): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) 1m29.2204014s ago: executing program 0 (id=7668): r0 = epoll_create1(0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8}]}, 0x148}}, 0x0) 1m26.609711952s ago: executing program 5 (id=7669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000b00040000893d88ac5691e23d38748920000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300000000000500030080ff07000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1m18.837206228s ago: executing program 33 (id=7666): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x44) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0160000000000000000000010000001c200180060001000200000008000300ac1414aa0800060001000000"], 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) close(r5) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 1m16.87747515s ago: executing program 34 (id=7663): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000e9c056acadd8707b000000000007000000f2004ee2234eb9d44c01d045d0", @ANYRES32=0x0, @ANYBLOB="0000000004110200140035007767300000000000000000000000000008001d0006000000"], 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="4d7b0000c748aa0b1400350077673100000000000000000000000000300016802c000180280001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@delchain={0x74, 0x65, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0x3}, {0x3, 0x4}, {0xfff1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xa1}}, @TCA_CHAIN={0x8, 0xb, 0x87e}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xca}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_freezer_state(r10, &(0x7f00000003c0)='THAWED\x00', 0x7) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) 1m16.441095076s ago: executing program 0 (id=7673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x8}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async) sendmsg$xdp(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}, 0x4040) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0xfffffffd, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.4367783s ago: executing program 5 (id=7675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742bbd7000fbdbdf25150000004c0001"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) 1m4.704346009s ago: executing program 5 (id=7676): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x10000) (async, rerun: 32) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0150851af5c5c7dd1d6d9b", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) (async, rerun: 64) close(0x3) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ff03ffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000740)={0x0, 0xffffffff, 0x8001}) (rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000000b40)={r10, 0x8000000000000001, 0x23, 0x1}) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100137040200e02fda3afa55e38512d61fb27bffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83040500000000002c00128008000100736974002000028014000b00fe80000000000000000000000000003e08000300e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x4009004}, 0x0) (async) r12 = socket(0x22, 0x80002, 0x1) (async, rerun: 64) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) listen(r13, 0x0) (async) ioctl$SIOCX25SFACILITIES(r13, 0x89e3, &(0x7f0000000500)={0x36, 0x8001, 0xc, 0xa, 0x0, 0x81}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bind$inet(r12, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x4) (rerun: 32) 1m4.547254599s ago: executing program 2 (id=7677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "a0f3a80294cf58e1", "9d55fd4f13b813f2b6f897f600741d51", "2aa8d90a", "d16b00"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000580)='xprtrdma_mrs_zap\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711043000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 1m3.499583307s ago: executing program 0 (id=7678): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x10001) write(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r8, 0x0, &(0x7f0000000000), 0x80000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x3}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) 56.339414189s ago: executing program 2 (id=7679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24) 53.466298041s ago: executing program 5 (id=7680): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@mpls_delroute={0x30, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x5, 0x12, {0x29, "498eb9b3372d0000000000004000"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept(r1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket(0x14, 0x2, 0x4) recvfrom$ax25(r7, &(0x7f0000000480)=""/76, 0x4c, 0x40000000, &(0x7f0000000500)={{0x3, @null, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000440)={0x10, 0x7}) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x800b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$inet6(r7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0xb, 0x9, 0x1, 0x40, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x1, 0x35, 0xfff}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x20000005}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x99, &(0x7f00000000c0)=""/153, 0x41000, 0x42, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x20003, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=[{0x1, 0x2, 0x10, 0x3}, {0x2, 0xee0, 0x4, 0xc}, {0x3, 0x3, 0x9, 0x6}, {0x3, 0x1, 0xc, 0xc}, {0x5, 0x5, 0xd}, {0x2, 0x3, 0x2, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], 0x10, 0x3}, 0x94) 53.465723569s ago: executing program 0 (id=7681): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000002914000000240007800c"], 0x38}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7a4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r10 = socket(0x2, 0x3, 0x6) bind$inet(r10, 0x0, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 44.77576773s ago: executing program 2 (id=7682): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x8084) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xd0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x3, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x99}], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001b00)=""/4096, 0x40f00, 0x18, '\x00', r8, 0x1b, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000680)=[r1, r1, r1, 0xffffffffffffffff, r1], &(0x7f0000000780)=[{0x3, 0x1, 0xf, 0x2}, {0x1, 0x1, 0x5, 0x8}, {0x4, 0x3, 0x9, 0xc}, {0x3, 0x5, 0xf, 0x1}, {0x4, 0x2, 0x4, 0xb}], 0x10, 0xf3f}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 42.536612153s ago: executing program 5 (id=7683): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$netlink(0x10, 0x3, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4008004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept(0xffffffffffffffff, &(0x7f0000000280)=@llc, &(0x7f0000000100)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x80, {{0x26, 0x4, 0x0, 0x2, 0x98, 0x68, 0x0, 0xef, 0x0, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@end, @timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0xb, [{@multicast1, 0x70}, {@broadcast, 0x3d1}, {@private=0xa010101, 0xffffffff}, {@loopback, 0x6}, {@multicast2, 0x7}, {@broadcast, 0x4}]}, @noop, @cipso={0x86, 0x2c, 0x3, [{0x1, 0xb, "e9165c006da6a41357"}, {0x5, 0x7, "a63c4228c3"}, {0x2, 0x2}, {0x2, 0x12, "d93840ce28adef5516ca94f9cd046ab3"}]}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x9, [{@local, 0x1}, {@local, 0x3}]}, @ssrr={0x89, 0xb, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfff8) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, 0xffffffffffffffff, 0x0) 36.662293711s ago: executing program 35 (id=7681): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000002914000000240007800c"], 0x38}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7a4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r10 = socket(0x2, 0x3, 0x6) bind$inet(r10, 0x0, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 36.168102144s ago: executing program 2 (id=7685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xd}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x20c0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r7, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_NH_ID={0x8, 0x1e, 0x40}]}, 0x24}}, 0x0) recvmmsg(r5, &(0x7f00000007c0)=[{{&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000180)=""/49, 0x40}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4082, 0xff2}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f00000028c0)=""/153, 0x99}, {&(0x7f0000002980)=""/219, 0xdb}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000640)=""/141, 0x8d}], 0x51, &(0x7f0000003100)=""/4096, 0x1000}, 0x4}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) 25.236563997s ago: executing program 36 (id=7683): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$netlink(0x10, 0x3, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4008004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept(0xffffffffffffffff, &(0x7f0000000280)=@llc, &(0x7f0000000100)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x80, {{0x26, 0x4, 0x0, 0x2, 0x98, 0x68, 0x0, 0xef, 0x0, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@end, @timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0xb, [{@multicast1, 0x70}, {@broadcast, 0x3d1}, {@private=0xa010101, 0xffffffff}, {@loopback, 0x6}, {@multicast2, 0x7}, {@broadcast, 0x4}]}, @noop, @cipso={0x86, 0x2c, 0x3, [{0x1, 0xb, "e9165c006da6a41357"}, {0x5, 0x7, "a63c4228c3"}, {0x2, 0x2}, {0x2, 0x12, "d93840ce28adef5516ca94f9cd046ab3"}]}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x9, [{@local, 0x1}, {@local, 0x3}]}, @ssrr={0x89, 0xb, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfff8) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, 0xffffffffffffffff, 0x0) 24.362551349s ago: executing program 2 (id=7687): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 16.056132288s ago: executing program 2 (id=7688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000002000010000000000fbdbdf250a400000000000081a00030014000200fc02000000000000000000000000000014000188000000000000000000000000018114000300626f6e645f736c6176655f30000000000000"], 0x58}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 37 (id=7688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000002000010000000000fbdbdf250a400000000000081a00030014000200fc02000000000000000000000000000014000188000000000000000000000000018114000300626f6e645f736c6176655f30000000000000"], 0x58}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): dv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.055444][T29431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.095215][T29431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.106399][T29431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.133347][T29431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.163639][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 737.244670][T29556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6374'. [ 737.300719][ T4598] ` (unregistering): Port device wireguard1 removed [ 737.352343][ T4598] ` (unregistering): Port device wireguard0 removed [ 737.602319][ T5988] smc: removing ib device sy [ 737.814704][T29065] Bluetooth: hci4: command tx timeout [ 737.981539][T29558] pim6reg: entered allmulticast mode [ 738.248346][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 738.406031][T29575] ip6_vti0 speed is unknown, defaulting to 1000 [ 738.413608][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 738.468163][T29431] hsr_slave_0: entered promiscuous mode [ 738.482365][T29431] hsr_slave_1: entered promiscuous mode [ 738.489281][T29431] debugfs: 'hsr0' already exists in 'hsr' [ 738.495628][T29431] Cannot create hsr debugfs directory [ 738.723740][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 739.153512][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 739.231605][T29605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.290623][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 739.346387][T29431] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.434525][T29609] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 739.544342][T29609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6389'. [ 739.579211][T29431] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.804802][T29431] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.893785][T29065] Bluetooth: hci4: command tx timeout [ 739.898338][T29431] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.123684][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 740.393745][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 740.396668][ T4598] IPVS: stop unused estimator thread 0... [ 740.529783][T29431] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 740.552915][T29431] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 740.573737][T29431] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 740.597904][T29431] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 740.736524][T29431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.760445][T29431] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.773355][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.780503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.827538][T29452] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.834741][T29452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.961159][T29663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6403'. [ 740.970726][T29663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6403'. [ 740.981359][T29663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6403'. [ 740.991243][T29663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6403'. [ 741.023498][ T60] net_ratelimit: 2 callbacks suppressed [ 741.023514][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 741.156132][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 741.176192][T29677] netlink: 'syz.5.6405': attribute type 13 has an invalid length. [ 741.188556][T29677] netlink: 'syz.5.6405': attribute type 17 has an invalid length. [ 741.295549][T29677] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.324543][T29677] dummy0: left promiscuous mode [ 741.351036][T29065] block nbd0: Receive control failed (result -32) [ 741.365956][T29677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.395582][ T6253] ip6_vti0 speed is unknown, defaulting to 1000 [ 741.404516][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 741.414273][ T6253] syz2: Port: 1 Link ACTIVE [ 741.445576][ T6253] ip6_vti0 speed is unknown, defaulting to 1000 [ 741.494780][T29683] ip6_vti0 speed is unknown, defaulting to 1000 [ 741.508241][T29431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.593544][T29431] veth0_vlan: entered promiscuous mode [ 741.628022][T29431] veth1_vlan: entered promiscuous mode [ 741.693977][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 741.740405][T29431] veth0_macvtap: entered promiscuous mode [ 741.763055][T29431] veth1_macvtap: entered promiscuous mode [ 741.815570][T29431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.852891][T29431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.887175][ T4598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.926067][ T4598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.938112][ T4598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.951197][ T4598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.054752][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 742.191779][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.210053][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.278933][ T4598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.291081][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 742.301827][ T4598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.310581][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6415'. [ 742.324017][T29708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6415'. [ 742.423657][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 742.549297][T29713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6416'. [ 742.596263][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 742.681269][T29719] FAULT_INJECTION: forcing a failure. [ 742.681269][T29719] name failslab, interval 1, probability 0, space 0, times 0 [ 742.697047][T29719] CPU: 1 UID: 0 PID: 29719 Comm: syz.4.6419 Not tainted syzkaller #0 PREEMPT(full) [ 742.697072][T29719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.697085][T29719] Call Trace: [ 742.697094][T29719] [ 742.697103][T29719] dump_stack_lvl+0xe8/0x150 [ 742.697134][T29719] should_fail_ex+0x414/0x560 [ 742.697170][T29719] should_failslab+0xa8/0x100 [ 742.697196][T29719] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 742.697227][T29719] ? __alloc_skb+0x198/0x3a0 [ 742.697249][T29719] ? __alloc_skb+0x1dc/0x3a0 [ 742.697267][T29719] ? __local_bh_enable_ip+0xd0/0x130 [ 742.697290][T29719] ? __alloc_skb+0x198/0x3a0 [ 742.697312][T29719] __alloc_skb+0x1dc/0x3a0 [ 742.697337][T29719] alloc_skb_with_frags+0xca/0x890 [ 742.697363][T29719] ? __might_fault+0xb0/0x130 [ 742.697401][T29719] sock_alloc_send_pskb+0x84d/0x980 [ 742.697444][T29719] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 742.697470][T29719] ? __pfx__copy_from_iter+0x10/0x10 [ 742.697502][T29719] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 742.697529][T29719] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 742.697554][T29719] ? skb_put+0x11b/0x210 [ 742.697580][T29719] l2cap_chan_send+0xe65/0x2580 [ 742.697608][T29719] ? lockdep_hardirqs_on+0x7b/0x110 [ 742.697640][T29719] ? __pfx_l2cap_chan_send+0x10/0x10 [ 742.697673][T29719] ? l2cap_sock_sendmsg+0x2c2/0x4d0 [ 742.697691][T29719] ? __local_bh_enable_ip+0xd0/0x130 [ 742.697717][T29719] l2cap_sock_sendmsg+0x32e/0x4d0 [ 742.697739][T29719] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 742.697762][T29719] ? aa_sock_msg_perm+0xf1/0x1b0 [ 742.697789][T29719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 742.697808][T29719] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 742.697829][T29719] __sock_sendmsg+0x21c/0x270 [ 742.697860][T29719] ____sys_sendmsg+0x52d/0x820 [ 742.697890][T29719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.697923][T29719] ? import_iovec+0x74/0xa0 [ 742.697959][T29719] ___sys_sendmsg+0x21f/0x2a0 [ 742.697985][T29719] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.698013][T29719] ? kstrtouint+0x6e/0xe0 [ 742.698066][T29719] ? __fget_files+0x2a/0x420 [ 742.698090][T29719] ? __fget_files+0x3a0/0x420 [ 742.698125][T29719] __sys_sendmmsg+0x227/0x430 [ 742.698154][T29719] ? __pfx___sys_sendmmsg+0x10/0x10 [ 742.698188][T29719] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 742.698236][T29719] ? ksys_write+0x22a/0x250 [ 742.698258][T29719] ? __pfx_ksys_write+0x10/0x10 [ 742.698284][T29719] __x64_sys_sendmmsg+0xa0/0xc0 [ 742.698310][T29719] do_syscall_64+0xec/0xf80 [ 742.698332][T29719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.698351][T29719] ? trace_irq_disable+0x37/0x100 [ 742.698376][T29719] ? clear_bhb_loop+0x60/0xb0 [ 742.698401][T29719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.698421][T29719] RIP: 0033:0x7f1e2178f749 [ 742.698439][T29719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.698457][T29719] RSP: 002b:00007f1e1f9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 742.698479][T29719] RAX: ffffffffffffffda RBX: 00007f1e219e5fa0 RCX: 00007f1e2178f749 [ 742.698495][T29719] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000004 [ 742.698508][T29719] RBP: 00007f1e1f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 742.698521][T29719] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 742.698534][T29719] R13: 00007f1e219e6038 R14: 00007f1e219e5fa0 R15: 00007ffe91e86628 [ 742.698567][T29719] [ 743.041445][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 743.539097][T29754] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 743.760494][T29766] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6434'. [ 743.778243][T29766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6434'. [ 744.030766][T29775] syz2: rxe_newlink: already configured on ip6_vti0 [ 744.148426][ T6249] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.163472][ T6249] syz2: Port: 1 Link DOWN [ 744.167936][T20244] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.246301][T29782] tipc: Enabled bearer , priority 0 [ 744.286442][T29781] tipc: Disabling bearer [ 744.312063][T29784] netlink: 'syz.2.6440': attribute type 2 has an invalid length. [ 744.433040][T29788] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.671395][T29798] __nla_validate_parse: 3 callbacks suppressed [ 744.671412][T29798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6443'. [ 744.789301][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6447'. [ 744.956369][T28898] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.985330][T28898] syz2: Port: 1 Link ACTIVE [ 744.990139][T28898] ip6_vti0 speed is unknown, defaulting to 1000 [ 745.252810][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6451'. [ 745.326969][T29804] ip6_vti0 speed is unknown, defaulting to 1000 [ 745.336061][T29833] block nbd3: server does not support multiple connections per device. [ 745.373149][T29833] block nbd3: shutting down sockets [ 745.399837][T29840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6452'. [ 745.425490][T29841] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 745.496178][T29841] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 745.750322][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6456'. [ 745.776426][T29852] macvlan2: entered promiscuous mode [ 745.785738][T29852] bond0: entered promiscuous mode [ 745.790967][T29852] macvlan2: entered allmulticast mode [ 745.796567][T29852] bond0: entered allmulticast mode [ 745.802247][T29852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 745.810846][T29837] ip6_vti0 speed is unknown, defaulting to 1000 [ 745.822588][T29855] netlink: 'syz.5.6457': attribute type 13 has an invalid length. [ 746.225824][ T6241] ip6_vti0 speed is unknown, defaulting to 1000 [ 746.239898][ T6241] syz2: Port: 1 Link DOWN [ 746.299475][T28515] ip6_vti0 speed is unknown, defaulting to 1000 [ 746.315683][ T60] net_ratelimit: 19 callbacks suppressed [ 746.315700][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 746.454377][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 746.595856][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 746.679079][T29867] netlink: 'syz.0.6460': attribute type 13 has an invalid length. [ 746.687153][T29867] netlink: 'syz.0.6460': attribute type 17 has an invalid length. [ 746.744281][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.783090][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.794854][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.814510][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.823244][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.839791][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.849575][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.236577][T29894] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 748.109334][T29912] ip6_vti0 speed is unknown, defaulting to 1000 [ 748.586536][T29930] gre0: entered promiscuous mode [ 748.591523][T29930] gre0: entered allmulticast mode [ 748.879973][T29944] netlink: 'syz.3.6478': attribute type 3 has an invalid length. [ 748.988440][T29944] syz_tun: entered allmulticast mode [ 749.046150][T29944] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 749.208304][T29959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6481'. [ 749.617802][T29976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6486'. [ 749.668118][T29942] syz_tun: left allmulticast mode [ 749.696020][T29969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 749.917848][T29981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.938638][T29981] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 749.946882][T29981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6489'. [ 749.968366][T29989] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.6488'. [ 750.578938][T30006] gre0: left promiscuous mode [ 750.601078][T30006] gre0: left allmulticast mode [ 750.623806][T30011] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 750.722453][T30015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6498'. [ 751.308788][T30025] bond0: entered promiscuous mode [ 751.323461][T30025] bond_slave_0: entered promiscuous mode [ 751.331540][T30025] bond_slave_1: entered promiscuous mode [ 751.340605][T30025] batadv0: entered promiscuous mode [ 751.353688][T30025] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 751.373383][T30025] bond0: left promiscuous mode [ 751.389086][T30025] bond_slave_0: left promiscuous mode [ 751.395545][T30025] bond_slave_1: left promiscuous mode [ 751.402761][T30025] batadv0: left promiscuous mode [ 751.496793][ T4598] net_ratelimit: 2072 callbacks suppressed [ 751.496811][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 751.623885][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 751.661733][T30047] batadv0: entered promiscuous mode [ 751.684688][T30047] vlan2: entered promiscuous mode [ 751.763539][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 751.875161][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 751.952895][T30068] netlink: 'syz.2.6513': attribute type 11 has an invalid length. [ 751.980084][T30069] tipc: Started in network mode [ 751.987860][T30069] tipc: Node identity 12c8df4339a4, cluster identity 4711 [ 752.002095][T30069] tipc: Enabled bearer , priority 0 [ 752.009274][T30070] syzkaller0: entered promiscuous mode [ 752.009541][T30072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6514'. [ 752.022564][T30070] syzkaller0: entered allmulticast mode [ 752.084506][T30065] tipc: Resetting bearer [ 752.109953][T30065] tipc: Disabling bearer [ 752.124962][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 752.233540][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 752.343590][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 752.455478][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 752.583591][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 752.694638][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 752.833347][T30102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6520'. [ 753.005989][T30114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6525'. [ 753.032631][T30114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6525'. [ 753.088694][T30114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 753.331409][T30130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6530'. [ 753.864259][T28898] IPVS: starting estimator thread 0... [ 753.958062][T30152] IPVS: using max 32 ests per chain, 76800 per kthread [ 754.335184][T30168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6538'. [ 754.354636][T30168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6538'. [ 754.413013][T30160] ip6_vti0 speed is unknown, defaulting to 1000 [ 755.054770][T30204] __nla_validate_parse: 2 callbacks suppressed [ 755.054782][T30204] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6549'. [ 755.367204][T30213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6550'. [ 755.740684][T30233] netlink: 'syz.3.6554': attribute type 2 has an invalid length. [ 755.758176][T30233] !9: entered promiscuous mode [ 755.771543][T30233] netlink: 'syz.3.6554': attribute type 2 has an invalid length. [ 755.792787][T30233] !9: left promiscuous mode [ 755.825188][T30237] netlink: 'syz.3.6554': attribute type 2 has an invalid length. [ 755.888676][T30240] FAULT_INJECTION: forcing a failure. [ 755.888676][T30240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.926110][T30237] !9: entered promiscuous mode [ 755.933756][T30240] CPU: 1 UID: 0 PID: 30240 Comm: syz.0.6556 Not tainted syzkaller #0 PREEMPT(full) [ 755.933789][T30240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.933802][T30240] Call Trace: [ 755.933811][T30240] [ 755.933819][T30240] dump_stack_lvl+0xe8/0x150 [ 755.933848][T30240] should_fail_ex+0x414/0x560 [ 755.933883][T30240] _copy_from_user+0x2d/0xb0 [ 755.933909][T30240] ___sys_recvmsg+0x12e/0x510 [ 755.933939][T30240] ? __pfx____sys_recvmsg+0x10/0x10 [ 755.933969][T30240] ? __fget_files+0x2a/0x420 [ 755.934010][T30240] ? __fget_files+0x3a0/0x420 [ 755.934044][T30240] do_recvmmsg+0x307/0x770 [ 755.934076][T30240] ? __pfx_do_recvmmsg+0x10/0x10 [ 755.934110][T30240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 755.934149][T30240] __x64_sys_recvmmsg+0x190/0x240 [ 755.934177][T30240] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 755.934215][T30240] do_syscall_64+0xec/0xf80 [ 755.934235][T30240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.934253][T30240] ? trace_irq_disable+0x37/0x100 [ 755.934279][T30240] ? clear_bhb_loop+0x60/0xb0 [ 755.934302][T30240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.934322][T30240] RIP: 0033:0x7f4dcff8f749 [ 755.934339][T30240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.934357][T30240] RSP: 002b:00007f4dd0da5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 755.934387][T30240] RAX: ffffffffffffffda RBX: 00007f4dd01e5fa0 RCX: 00007f4dcff8f749 [ 755.934402][T30240] RDX: 0000000000000001 RSI: 0000200000006000 RDI: 0000000000000004 [ 755.934416][T30240] RBP: 00007f4dd0da5090 R08: 0000000000000000 R09: 0000000000000000 [ 755.934428][T30240] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 755.934441][T30240] R13: 00007f4dd01e6038 R14: 00007f4dd01e5fa0 R15: 00007ffd74658988 [ 755.934475][T30240] [ 755.947704][T30242] xt_bpf: check failed: parse error [ 756.023569][T30243] xt_bpf: check failed: parse error [ 756.386850][T30254] batadv0: entered allmulticast mode [ 756.422429][T30255] netlink: 'syz.3.6562': attribute type 10 has an invalid length. [ 756.438645][T30255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.448017][T30255] team0: Port device bond0 added [ 756.573765][ T12] net_ratelimit: 212 callbacks suppressed [ 756.574705][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 756.705220][T30261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6564'. [ 756.716110][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6564'. [ 756.928585][T30270] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6566'. [ 756.953879][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 757.011032][T30270] gre1: entered allmulticast mode [ 757.019930][T30266] ip6_vti0 speed is unknown, defaulting to 1000 [ 757.020245][T30271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6566'. [ 757.041953][T30273] netem: change failed [ 757.048145][T30270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6566'. [ 757.173248][T30271] team1: entered promiscuous mode [ 757.194967][T30271] team1: entered allmulticast mode [ 757.291173][T30270] team2: entered promiscuous mode [ 757.299576][T30270] team2: entered allmulticast mode [ 757.312765][T30281] tipc: Started in network mode [ 757.317788][T30281] tipc: Node identity c6bb564cd1e3, cluster identity 4711 [ 757.355672][T30281] tipc: Enabled bearer , priority 0 [ 757.375201][T30282] tipc: Enabling of bearer rejected, already enabled [ 757.523474][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 757.533797][T30284] syzkaller0: entered promiscuous mode [ 757.571855][T30284] syzkaller0: entered allmulticast mode [ 757.660303][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 757.724683][T30284] tipc: Resetting bearer [ 757.800750][T30284] tipc: Disabling bearer [ 757.833914][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 757.878109][T30312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6578'. [ 757.983725][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 757.993700][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6578'. [ 758.109191][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 758.127264][T30322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6581'. [ 758.168609][T30324] netlink: 'syz.0.6583': attribute type 2 has an invalid length. [ 758.205682][T30324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.223771][T30324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.240380][T30324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.375103][T30339] x_tables: duplicate underflow at hook 2 [ 761.541090][T30355] netlink: 'syz.3.6588': attribute type 12 has an invalid length. [ 761.686503][ T60] net_ratelimit: 116 callbacks suppressed [ 761.686522][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 761.806948][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 761.925728][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 761.960908][T30370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.971586][T30370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.001620][T30370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.009924][T30370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.018277][T30370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.026546][T30370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.034750][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 762.280206][T30373] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 762.465639][T29065] block nbd3: Receive control failed (result -32) [ 762.631378][T30399] netlink: 'syz.3.6601': attribute type 3 has an invalid length. [ 762.901754][T30405] ip6_vti0 speed is unknown, defaulting to 1000 [ 763.488643][T30428] ip6_vti0 speed is unknown, defaulting to 1000 [ 763.684019][T30438] __nla_validate_parse: 2 callbacks suppressed [ 763.684036][T30438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6611'. [ 763.909262][T30435] netlink: 'syz.4.6611': attribute type 10 has an invalid length. [ 763.977124][T30435] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 765.031677][T30465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6616'. [ 765.294865][T30474] netlink: 'syz.4.6618': attribute type 1 has an invalid length. [ 765.418233][T30475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.661897][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6626'. [ 766.738003][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6626'. [ 766.783529][T12339] net_ratelimit: 220 callbacks suppressed [ 766.783546][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 766.914184][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 766.929850][T30524] tipc: Enabled bearer , priority 0 [ 766.942795][T30526] can: request_module (can-proto-0) failed. [ 766.958358][T30524] syzkaller0: entered promiscuous mode [ 766.965439][T30524] syzkaller0: entered allmulticast mode [ 767.024094][T30524] tipc: Resetting bearer [ 767.032832][T30523] tipc: Resetting bearer [ 767.065137][T30523] tipc: Disabling bearer [ 767.094048][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 767.213670][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 767.471563][T30566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6640'. [ 767.484320][T30557] netlink: 'syz.5.6640': attribute type 1 has an invalid length. [ 767.597055][T30573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6640'. [ 767.751121][T30557] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 767.799835][T30557] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 767.852544][T30573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 767.889305][T30558] ip6_vti0 speed is unknown, defaulting to 1000 [ 767.904957][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 768.047168][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 768.116501][T30601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6645'. [ 768.135815][T30602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6647'. [ 768.154184][T30604] geneve3: entered promiscuous mode [ 768.164539][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 768.189733][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 768.207092][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 768.236756][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 768.283684][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 768.392284][T30614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6651'. [ 768.399619][T30613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6650'. [ 768.514384][T30616] syzkaller0: entered promiscuous mode [ 768.520042][T30616] syzkaller0: entered allmulticast mode [ 768.654059][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 768.763660][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 768.888431][T30629] __nla_validate_parse: 1 callbacks suppressed [ 768.888448][T30629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6655'. [ 768.919617][T30630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6655'. [ 768.928797][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 769.237992][T30645] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6658'. [ 769.668170][T29065] Bluetooth: hci3: command 0x0406 tx timeout [ 769.804835][T30664] tipc: Enabled bearer , priority 0 [ 769.867316][T30664] syzkaller0: entered promiscuous mode [ 769.892879][T30664] syzkaller0: entered allmulticast mode [ 769.967974][T30660] tipc: Resetting bearer [ 770.248630][T30667] syzkaller0: entered promiscuous mode [ 770.263509][T30667] syzkaller0: entered allmulticast mode [ 770.282920][T30667] netlink: 'syz.2.6665': attribute type 1 has an invalid length. [ 770.334784][T30669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6665'. [ 770.355558][T30669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6665'. [ 770.375423][T30667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 770.465777][T30652] tipc: Resetting bearer [ 770.593882][T30652] tipc: Disabling bearer [ 770.844733][T30679] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6668'. [ 770.881486][T30679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6668'. [ 771.008819][T30685] xt_bpf: check failed: parse error [ 771.206782][T30695] gtp0: entered promiscuous mode [ 771.211763][T30695] gtp0: entered allmulticast mode [ 771.274194][T30702] batadv_slave_0: entered promiscuous mode [ 771.305763][T30699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6673'. [ 771.398487][T30709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6675'. [ 771.833529][ T13] net_ratelimit: 23 callbacks suppressed [ 771.833548][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 771.846692][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6677'. [ 771.942202][T30716] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 771.973828][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 772.083884][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 772.101006][T30701] batadv_slave_0: left promiscuous mode [ 772.194664][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 772.304031][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 772.359715][T30739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.382081][T30739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.392437][T30739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.407411][T30739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.476120][T30748] netlink: 'syz.5.6687': attribute type 1 has an invalid length. [ 772.846159][T30761] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.155904][T30779] syzkaller1: entered promiscuous mode [ 773.172907][T30779] syzkaller1: entered allmulticast mode [ 773.291274][T30783] netlink: 'syz.0.6697': attribute type 5 has an invalid length. [ 773.427539][T30795] x_tables: unsorted entry at hook 2 [ 773.433340][T30794] x_tables: unsorted entry at hook 2 [ 773.499575][T30761] netlink: 'syz.5.6690': attribute type 4 has an invalid length. [ 774.002971][T30812] ip6_vti0 speed is unknown, defaulting to 1000 [ 774.204659][T30827] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 774.371089][T30835] bridge_slave_0: left allmulticast mode [ 774.429264][T30835] bridge_slave_0: left promiscuous mode [ 774.446226][T30835] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.495613][T30835] bridge_slave_1: left allmulticast mode [ 774.501274][T30835] bridge_slave_1: left promiscuous mode [ 774.525163][T30835] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.538227][T30841] __nla_validate_parse: 15 callbacks suppressed [ 774.538244][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6706'. [ 774.554441][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6706'. [ 774.582307][T30835] bond0: (slave bond_slave_0): Releasing backup interface [ 774.612136][T30835] bond0: (slave bond_slave_1): Releasing backup interface [ 774.661478][T30835] team0: Port device team_slave_0 removed [ 774.703056][T30835] team0: Port device team_slave_1 removed [ 774.718725][T30835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.727911][T30835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.737567][T30835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.752685][T30835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.811252][T30849] macvlan1: entered promiscuous mode [ 774.816723][T30849] bond0: entered promiscuous mode [ 774.821883][T30849] macvlan1: entered allmulticast mode [ 774.828276][T30849] bond0: entered allmulticast mode [ 774.838032][T30849] bond0: left allmulticast mode [ 774.842906][T30849] bond0: left promiscuous mode [ 774.994705][T30857] ip6_vti0 speed is unknown, defaulting to 1000 [ 775.015677][T30869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6718'. [ 775.096593][T30872] xt_ecn: cannot match TCP bits for non-tcp packets [ 775.266051][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6721'. [ 775.356862][T30882] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 775.424782][T30882] macvlan2: entered promiscuous mode [ 775.443575][T30882] macvlan2: entered allmulticast mode [ 775.449757][T30882] bond2: entered promiscuous mode [ 775.464435][T30882] bridge1: entered promiscuous mode [ 775.470518][T30882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 775.481148][T30882] bond2: left promiscuous mode [ 775.487299][T30882] bridge1: left promiscuous mode [ 775.838220][T30907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6726'. [ 775.909586][T30909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6727'. [ 776.338488][T30923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6731'. [ 776.411474][T30923] bond2: entered promiscuous mode [ 776.417186][T30923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 776.682638][T30923] bond2 (unregistering): Released all slaves [ 776.753011][T30935] syzkaller0: entered promiscuous mode [ 776.771362][T30935] syzkaller0: entered allmulticast mode [ 776.853505][ T2915] net_ratelimit: 26 callbacks suppressed [ 776.853522][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 776.928806][T30959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6737'. [ 776.983505][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 777.014895][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6739'. [ 777.103626][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 777.243718][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 777.386905][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 777.455352][T30974] ip6_vti0 speed is unknown, defaulting to 1000 [ 777.504920][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 777.633511][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 777.803610][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 777.819617][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.828357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.964787][T30993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6746'. [ 778.172910][T30996] ip6_vti0 speed is unknown, defaulting to 1000 [ 778.231857][T31005] netlink: 'syz.5.6749': attribute type 1 has an invalid length. [ 778.368791][T31005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 778.418437][T31008] gretap1: entered promiscuous mode [ 778.450631][T31008] bond8: (slave gretap1): making interface the new active one [ 778.462890][T31008] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 778.538684][T31005] macvlan1: entered promiscuous mode [ 778.567880][T31005] macvlan1: entered allmulticast mode [ 778.574328][T31007] x_tables: duplicate underflow at hook 1 [ 778.574622][T31005] bond8: entered promiscuous mode [ 778.589472][T31005] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 778.601295][T31005] bond8: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 778.620869][T31005] bond8: left promiscuous mode [ 781.884273][ T1056] net_ratelimit: 32 callbacks suppressed [ 781.884295][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 782.003955][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 782.114643][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 782.224487][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 782.333702][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 782.443698][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 782.553868][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 782.664076][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 782.773881][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 782.884604][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 784.128603][T31023] __nla_validate_parse: 3 callbacks suppressed [ 784.128621][T31023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6753'. [ 784.129015][T31026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6755'. [ 784.153705][T31028] netlink: 'syz.2.6754': attribute type 1 has an invalid length. [ 784.261154][T31034] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 784.279248][T31034] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 784.300531][T31034] bond3: (slave xfrm1): making interface the new active one [ 784.308342][T31034] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 784.354435][T31038] bond9: invalid ARP target 0.0.0.0 specified for addition [ 784.361730][T31038] bond9: option arp_ip_target: invalid value (0) [ 784.376602][T31038] bond9 (unregistering): Released all slaves [ 784.426172][T31043] bridge0: entered promiscuous mode [ 784.432262][T31043] bridge0: port 1(vlan2) entered blocking state [ 784.439828][T31043] bridge0: port 1(vlan2) entered disabled state [ 784.446621][T31043] vlan2: entered allmulticast mode [ 784.451743][T31043] bridge0: entered allmulticast mode [ 784.465703][T31043] vlan2: left allmulticast mode [ 784.480939][T31043] bridge0: left allmulticast mode [ 784.496249][T31043] bridge0: left promiscuous mode [ 784.532317][T31044] sch_fq: defrate 4294967293 ignored. [ 784.558697][T31039] ip6_vti0 speed is unknown, defaulting to 1000 [ 784.616869][T31047] syzkaller0: entered promiscuous mode [ 784.638210][T31047] syzkaller0: entered allmulticast mode [ 785.064504][T31071] netlink: 'syz.5.6766': attribute type 1 has an invalid length. [ 785.191655][T31081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6769'. [ 785.787078][T31099] syzkaller0: entered promiscuous mode [ 785.794212][T31099] syzkaller0: entered allmulticast mode [ 785.992088][T31109] dvmrp0: entered allmulticast mode [ 786.055849][T31124] : entered promiscuous mode [ 786.106644][T31128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6778'. [ 786.376115][T31134] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6780'. [ 787.277278][T31141] netlink: 'syz.4.6782': attribute type 10 has an invalid length. [ 787.846712][T31141] veth0_macvtap: left promiscuous mode [ 787.867959][T31141] batman_adv: batadv0: Adding interface: macvtap0 [ 787.878580][T31141] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.906980][T31141] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 787.953602][T12339] net_ratelimit: 25 callbacks suppressed [ 787.953619][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 788.099414][T31153] netlink: 'syz.0.6786': attribute type 13 has an invalid length. [ 788.112080][T31153] netlink: 'syz.0.6786': attribute type 17 has an invalid length. [ 788.113744][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 788.223744][T31164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6789'. [ 788.363986][T31175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6790'. [ 788.407217][T31176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6793'. [ 788.443523][T31176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6793'. [ 788.515333][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 788.634170][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 788.763506][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 788.819942][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6796'. [ 788.869808][T31190] netlink: 'syz.0.6796': attribute type 30 has an invalid length. [ 788.893615][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 788.951941][T31192] netlink: 'syz.5.6797': attribute type 83 has an invalid length. [ 788.965932][T12339] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.966083][T31190] netlink: 'syz.0.6796': attribute type 30 has an invalid length. [ 788.986554][T12339] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.037089][T12339] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.089190][T12339] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.183483][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 789.302047][T31202] ip6_vti0 speed is unknown, defaulting to 1000 [ 789.313525][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 789.383733][T31215] __nla_validate_parse: 3 callbacks suppressed [ 789.383750][T31215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6804'. [ 789.443728][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 789.563661][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 789.587931][T31223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6805'. [ 789.710548][T31228] syzkaller1: entered promiscuous mode [ 789.728831][T31228] syzkaller1: entered allmulticast mode [ 789.811290][T31235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6809'. [ 789.838277][T31235] netlink: 'syz.2.6809': attribute type 1 has an invalid length. [ 789.912707][T31235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 789.936603][T31232] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 789.960769][T31232] bond4: (slave batadv1): making interface the new active one [ 789.972590][T31232] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 790.145527][T31245] rdma_rxe: rxe_newlink: failed to add lo [ 790.175346][T31249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6813'. [ 790.511330][T31260] netlink: 1228 bytes leftover after parsing attributes in process `syz.0.6817'. [ 790.531398][T31261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6818'. [ 790.711474][T31256] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.790254][T31271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6822'. [ 790.907382][T31271] mac80211_hwsim hwsim101 wlan1: entered allmulticast mode [ 791.103368][T31284] pim6reg: entered allmulticast mode [ 791.126566][T31284] pim6reg: left allmulticast mode [ 791.343041][T31297] ip6_vti0 speed is unknown, defaulting to 1000 [ 791.980401][T31321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6832'. [ 792.067981][T31323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6835'. [ 792.590529][T31335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6839'. [ 792.599816][T31337] ip6_vti0 speed is unknown, defaulting to 1000 [ 792.809860][T31346] bond5: entered promiscuous mode [ 792.891277][T31347] vcan1: entered promiscuous mode [ 792.915497][T31347] vcan1: entered allmulticast mode [ 792.922206][T31347] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 792.933375][T31347] bond5: (slave vcan1): Error -95 calling set_mac_address [ 792.973544][ T1056] net_ratelimit: 24 callbacks suppressed [ 792.973560][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 793.103594][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 793.243548][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 793.401915][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 793.543936][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 793.814561][T28898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.823197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.863620][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 793.985931][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 794.075004][T31420] netlink: 'syz.0.6862': attribute type 3 has an invalid length. [ 794.109735][T31406] netlink: 'syz.3.6857': attribute type 10 has an invalid length. [ 794.125627][T31406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.146246][T31406] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 794.163689][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 794.258402][T31427] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 794.278779][T31427] bond3: (slave lo): speed changed to 0 on port 1 [ 794.289779][T31427] bond3: (slave lo): Enslaving as a backup interface with an up link [ 794.431773][T31439] __nla_validate_parse: 10 callbacks suppressed [ 794.431791][T31439] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6868'. [ 794.447639][T31439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6868'. [ 794.692629][T31450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6872'. [ 794.726533][T31445] ip6_vti0 speed is unknown, defaulting to 1000 [ 794.862499][T31457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6873'. [ 795.008471][T31450] ip6_vti0 speed is unknown, defaulting to 1000 [ 795.097497][T31470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6878'. [ 795.230174][T31470] nbd: socks must be embedded in a SOCK_ITEM attr [ 795.364800][T31479] netlink: 'syz.0.6880': attribute type 10 has an invalid length. [ 795.378666][T31479] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6880'. [ 795.441296][T31479] bridge0: port 1(bond0) entered blocking state [ 795.451837][T31479] bridge0: port 1(bond0) entered disabled state [ 795.483146][T31459] ip6_vti0 speed is unknown, defaulting to 1000 [ 796.506039][T31514] netlink: 'syz.5.6888': attribute type 8 has an invalid length. [ 796.516390][T31514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6888'. [ 796.882641][T22430] Bluetooth: hci0: command 0x0405 tx timeout [ 796.953043][T31532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6893'. [ 797.444788][T31554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6898'. [ 797.496440][T31560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6898'. [ 797.560875][T31554] team3: entered promiscuous mode [ 797.594598][T31554] team3: entered allmulticast mode [ 797.600486][T31554] 8021q: adding VLAN 0 to HW filter on device team3 [ 797.656847][T31560] team4: entered promiscuous mode [ 797.662081][T31560] team4: entered allmulticast mode [ 797.668275][T31560] 8021q: adding VLAN 0 to HW filter on device team4 [ 797.675765][T31562] team0: No ports can be present during mode change [ 797.793318][T31575] netlink: 'syz.3.6902': attribute type 6 has an invalid length. [ 798.034166][ T13] net_ratelimit: 22 callbacks suppressed [ 798.034186][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 798.163946][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 798.243261][T31604] openvswitch: netlink: Flow actions attr not present in new flow. [ 798.273731][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 798.411506][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 798.479458][T31590] netlink: 'syz.0.6906': attribute type 9 has an invalid length. [ 798.495983][T31590] netlink: 'syz.0.6906': attribute type 10 has an invalid length. [ 798.523881][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 798.792430][T31623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 798.823485][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 798.944007][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 798.951547][T28898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.443274][T31649] __nla_validate_parse: 5 callbacks suppressed [ 799.443292][T31649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6924'. [ 799.505590][T31649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 799.589162][T31657] netlink: 'syz.3.6928': attribute type 10 has an invalid length. [ 799.598000][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6924'. [ 799.615833][T31653] macsec1: entered promiscuous mode [ 799.621054][T31653] bond4: entered promiscuous mode [ 799.697619][T31653] macsec1: entered allmulticast mode [ 799.717963][T31653] bond4: entered allmulticast mode [ 799.739471][T31653] bond4: left allmulticast mode [ 799.756216][T31653] bond4: left promiscuous mode [ 799.779133][T31665] netlink: 356 bytes leftover after parsing attributes in process `syz.5.6930'. [ 799.792905][T31657] bridge0: port 3(macsec0) entered blocking state [ 799.799610][T31657] bridge0: port 3(macsec0) entered disabled state [ 799.806329][T31657] macsec0: entered allmulticast mode [ 799.811622][T31657] veth1_macvtap: entered allmulticast mode [ 799.818782][T31657] macsec0: entered promiscuous mode [ 799.825079][T31657] bridge0: port 3(macsec0) entered blocking state [ 799.831601][T31657] bridge0: port 3(macsec0) entered forwarding state [ 800.121145][T31681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6936'. [ 800.201335][T31687] netlink: 'syz.2.6932': attribute type 10 has an invalid length. [ 800.212139][T31684] tun0: tun_chr_ioctl cmd 1074025672 [ 800.227055][T31684] tun0: ignored: set checksum disabled [ 800.257342][T31687] team0: Device ipvlan1 failed to register rx_handler [ 800.266193][T31685] netlink: 'syz.3.6937': attribute type 7 has an invalid length. [ 800.283868][T31685] netlink: 'syz.3.6937': attribute type 8 has an invalid length. [ 800.318303][T31689] syzkaller0: entered promiscuous mode [ 800.327386][T31693] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6939'. [ 800.343461][T31689] syzkaller0: entered allmulticast mode [ 800.355762][T31694] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6939'. [ 800.382079][T31693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6939'. [ 800.422774][T31696] netlink: 'syz.4.6940': attribute type 6 has an invalid length. [ 800.503802][T31700] netlink: 'syz.5.6941': attribute type 2 has an invalid length. [ 800.540935][T31700] !9: entered promiscuous mode [ 800.549792][ T2901] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.573749][T31703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6944'. [ 800.660254][T31708] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.6943'. [ 800.675042][T31710] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6945'. [ 800.894067][T31732] netlink: 'syz.3.6950': attribute type 13 has an invalid length. [ 801.006964][T31732] bridge0: port 3(macsec0) entered disabled state [ 801.013641][T31732] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.021420][T31732] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.190455][T31732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.208148][T31732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.355589][T31732] veth1_macvtap: left allmulticast mode [ 801.459049][ T6253] syz0: Port: 1 Link DOWN [ 801.591742][T31742] syzkaller0: entered promiscuous mode [ 801.597377][T31742] syzkaller0: entered allmulticast mode [ 801.606279][ T2901] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.615583][ T2901] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.128660][ T2901] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.153498][ T13] net_ratelimit: 52 callbacks suppressed [ 803.153516][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 803.174936][ T2901] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.191428][T31760] ip6_vti0 speed is unknown, defaulting to 1000 [ 803.283947][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 803.418399][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 803.574370][T14175] bond8: (slave bridge1): failed to get link speed/duplex [ 803.725324][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 803.919041][T31801] netlink: 'syz.5.6967': attribute type 5 has an invalid length. [ 804.479086][T31805] sit1: entered promiscuous mode [ 804.537546][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 804.665606][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 804.811643][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 804.879591][T31821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.918823][T31820] __nla_validate_parse: 6 callbacks suppressed [ 804.918847][T31820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6972'. [ 804.993916][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 805.114229][ T4598] bond8: (slave bridge1): failed to get link speed/duplex [ 805.276460][T31846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6976'. [ 805.319641][T31846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6976'. [ 805.335768][T31848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6977'. [ 805.510021][T31857] ip6_vti0 speed is unknown, defaulting to 1000 [ 805.784785][T31866] netlink: 'syz.3.6982': attribute type 1 has an invalid length. [ 805.792648][T31866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6982'. [ 805.810581][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6982'. [ 806.933894][T31879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6986'. [ 807.007070][ T2211] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 807.212636][T31892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6991'. [ 807.344736][T31902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6995'. [ 807.355502][T31899] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6991'. [ 807.373189][T31897] tipc: Failed to remove unknown binding: 66,1,1/0:1881424123/1881424125 [ 807.382901][T31897] tipc: Failed to remove unknown binding: 66,1,1/0:1881424123/1881424125 [ 807.440130][T31899] nbd: device at index 64 is going down [ 807.526297][T31899] batadv3: entered promiscuous mode [ 807.843276][T31927] veth4: entered allmulticast mode [ 808.233569][ T5988] net_ratelimit: 24 callbacks suppressed [ 808.233587][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 808.383758][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 808.425777][T31940] ip6_vti0 speed is unknown, defaulting to 1000 [ 808.478903][T31947] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 808.520005][T14175] bond8: (slave bridge1): failed to get link speed/duplex [ 808.538094][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.633528][T14175] bond8: (slave bridge1): failed to get link speed/duplex [ 808.753707][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 808.806158][T31952] ipvlan2: entered promiscuous mode [ 808.844574][T31952] bridge0: port 1(ipvlan2) entered blocking state [ 808.851959][T31952] bridge0: port 1(ipvlan2) entered disabled state [ 808.867929][T31952] ipvlan2: entered allmulticast mode [ 808.874756][T31952] bridge0: entered allmulticast mode [ 808.882529][T31952] ipvlan2: left allmulticast mode [ 808.887684][T31952] bridge0: left allmulticast mode [ 809.003476][T14175] bond8: (slave bridge1): failed to get link speed/duplex [ 809.113632][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 809.264850][T31958] syzkaller0: entered promiscuous mode [ 809.271482][T31958] syzkaller0: entered allmulticast mode [ 809.312016][T31960] ip6_vti0 speed is unknown, defaulting to 1000 [ 809.323563][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 809.473989][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 809.658773][T31962] ip6_vti0 speed is unknown, defaulting to 1000 [ 810.317511][T31971] ip6_vti0 speed is unknown, defaulting to 1000 [ 810.341765][T31989] __nla_validate_parse: 4 callbacks suppressed [ 810.341777][T31989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7016'. [ 810.452449][T31992] vlan4: entered allmulticast mode [ 810.460492][T31992] dummy0: entered allmulticast mode [ 811.222529][T32006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7021'. [ 811.531930][T32016] bond2: Removing last ns target with arp_interval on [ 811.641829][T32020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.877032][T32025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7026'. [ 812.668904][T32061] SET target dimension over the limit! [ 812.681412][T32055] syz2: rxe_newlink: already configured on ip6_vti0 [ 812.692419][T32061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7036'. [ 812.947800][T32074] ip6_vti0 speed is unknown, defaulting to 1000 [ 813.237484][T32079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7041'. [ 813.282940][T32079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7041'. [ 813.294557][T12339] net_ratelimit: 23 callbacks suppressed [ 813.294573][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 813.420631][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 813.470210][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7044'. [ 813.482712][T32092] netlink: 'syz.4.7044': attribute type 30 has an invalid length. [ 813.543833][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 813.556275][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'. [ 813.606182][T32099] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 813.663842][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 813.805637][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 813.980039][T32116] syzkaller0: entered allmulticast mode [ 814.027821][T32108] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7050'. [ 814.037501][T32106] syzkaller0: left allmulticast mode [ 814.054154][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 814.196870][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 814.313169][T32120] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 814.333840][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 814.443631][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 814.971326][T32137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7057'. [ 815.657699][T32173] __nla_validate_parse: 1 callbacks suppressed [ 815.657929][T32173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7067'. [ 815.708258][T32173] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.716610][T32173] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.740008][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 815.985366][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 816.167556][T32188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.818678][T32214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7077'. [ 816.946736][T32218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7078'. [ 816.957381][T32218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7078'. [ 817.397637][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7084'. [ 817.424011][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7084'. [ 817.554967][T32242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7086'. [ 817.656684][T32244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7088'. [ 817.667196][T32244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7088'. [ 817.734129][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7089'. [ 818.333920][ T12] net_ratelimit: 34 callbacks suppressed [ 818.333939][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 818.442452][T32274] veth1_vlan: left promiscuous mode [ 818.493482][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 818.606298][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 818.727504][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 818.854366][T14175] bond8: (slave bridge1): failed to get link speed/duplex [ 818.973520][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 819.082199][T32320] netlink: 'syz.0.7110': attribute type 62 has an invalid length. [ 819.104250][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 819.455440][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 819.577019][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 819.665691][T32340] pim6reg1: entered promiscuous mode [ 819.671022][T32340] pim6reg1: entered allmulticast mode [ 819.678650][T32340] netlink: 'syz.0.7115': attribute type 10 has an invalid length. [ 819.773738][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 820.114545][T32375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 820.126044][T32375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 820.139473][T32375] hsr0: entered promiscuous mode [ 820.144851][T32375] hsr0: entered allmulticast mode [ 820.150192][T32375] hsr_slave_0: entered allmulticast mode [ 820.156852][T32375] hsr_slave_1: entered allmulticast mode [ 820.227477][T32375] netlink: 'syz.3.7128': attribute type 13 has an invalid length. [ 820.363107][T32389] netlink: 'syz.4.7131': attribute type 1 has an invalid length. [ 820.430895][T32389] bond5: (slave gretap1): making interface the new active one [ 820.432645][T32393] sctp: [Deprecated]: syz.0.7132 (pid 32393) Use of int in max_burst socket option. [ 820.432645][T32393] Use struct sctp_assoc_value instead [ 820.440218][T32389] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 820.677340][T32408] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 820.855094][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 820.940113][T32430] __nla_validate_parse: 17 callbacks suppressed [ 820.940130][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7141'. [ 821.137644][T32438] netlink: 'syz.4.7143': attribute type 11 has an invalid length. [ 821.162517][T32438] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7143'. [ 821.285698][T32442] netlink: 'syz.2.7144': attribute type 6 has an invalid length. [ 821.407596][T32446] ip6_vti0 speed is unknown, defaulting to 1000 [ 821.759803][T32473] syzkaller0: entered promiscuous mode [ 821.765565][T32473] syzkaller0: entered allmulticast mode [ 821.802245][T32450] ip6_vti0 speed is unknown, defaulting to 1000 [ 822.051773][T32480] syzkaller1: entered allmulticast mode [ 822.064488][T32473] tipc: Enabled bearer , priority 0 [ 822.066703][T32480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7153'. [ 822.107413][T32472] tipc: Resetting bearer [ 822.128236][T32472] tipc: Disabling bearer [ 822.137465][T32462] ip6_vti0 speed is unknown, defaulting to 1000 [ 822.439214][T32475] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 822.505205][T32491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 822.512431][T32491] IPv6: NLM_F_CREATE should be set when creating new route [ 822.519681][T32491] IPv6: NLM_F_CREATE should be set when creating new route [ 822.712910][T32495] ip6_vti0 speed is unknown, defaulting to 1000 [ 822.846932][T32504] netlink: 'syz.0.7161': attribute type 1 has an invalid length. [ 822.970573][T32505] bond4: entered promiscuous mode [ 822.983117][T32505] bond4: entered allmulticast mode [ 823.011445][T32505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 823.371668][T32530] net_ratelimit: 21 callbacks suppressed [ 823.371687][T32530] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 823.406936][T32534] syz2: rxe_newlink: already configured on ip6_vti0 [ 823.415009][T32522] ip6_vti0 speed is unknown, defaulting to 1000 [ 823.499416][T32535] netlink: 'syz.4.7166': attribute type 1 has an invalid length. [ 823.513501][T32535] netlink: 'syz.4.7166': attribute type 1 has an invalid length. [ 823.587065][T32540] netem: incorrect ge model size [ 823.592992][T32540] netem: change failed [ 823.763847][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 823.843232][T32523] ip6_vti0 speed is unknown, defaulting to 1000 [ 823.873810][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 823.983815][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 824.041861][T32554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.093884][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 824.557478][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7174'. [ 824.569395][T32557] ksmbd: Unknown IPC event: 0, ignore. [ 824.633867][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 824.743715][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 824.862714][T32573] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 824.880206][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 825.013470][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 825.097541][T32581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7182'. [ 825.120032][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7180'. [ 825.500144][T32592] vlan0: entered promiscuous mode [ 825.505341][T32592] bridge0: entered promiscuous mode [ 825.550057][T32595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7185'. [ 825.751443][T32599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7186'. [ 825.794458][T32598] bond3: (slave lo): Releasing backup interface [ 825.812711][T32598] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 825.889681][T32598] bond0: (slave dummy0): Releasing backup interface [ 825.939293][T32598] bridge_slave_0: left allmulticast mode [ 825.948550][T32598] bridge_slave_0: left promiscuous mode [ 825.954862][T32598] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.985244][T32598] bridge_slave_1: left allmulticast mode [ 825.990907][T32598] bridge_slave_1: left promiscuous mode [ 826.006914][T32598] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.034380][T32598] bond0: (slave bond_slave_0): Releasing backup interface [ 826.046554][T32598] bond0: (slave bond_slave_1): Releasing backup interface [ 826.070953][T32598] team0: Failed to send options change via netlink (err -105) [ 826.080295][T32598] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 826.089961][T32598] team0: Port device team_slave_0 removed [ 826.100617][T32598] team0: Failed to send options change via netlink (err -105) [ 826.109712][T32598] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 826.120249][T32598] team0: Port device team_slave_1 removed [ 826.128088][T32598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.137653][T32598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.147854][T32598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.155770][T32598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.172484][T32624] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7192'. [ 826.331118][T32629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7194'. [ 828.760827][ T3555] net_ratelimit: 5 callbacks suppressed [ 828.760846][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 829.750734][T32615] ip6_vti0 speed is unknown, defaulting to 1000 [ 829.760462][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 829.882887][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 830.181627][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 830.743259][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 831.030336][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 831.372658][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 831.662508][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 831.894250][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 831.942202][T32641] netlink: 'syz.0.7196': attribute type 1 has an invalid length. [ 831.975433][T32643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7197'. [ 832.033477][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 832.138758][T32649] gretap1: entered promiscuous mode [ 832.308022][T32647] ip6_vti0 speed is unknown, defaulting to 1000 [ 832.326147][T32664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7204'. [ 832.376519][T32655] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 832.404763][T32667] netlink: 'syz.4.7206': attribute type 2 has an invalid length. [ 832.414099][T32664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7204'. [ 832.649966][T32678] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7208'. [ 832.659534][T32678] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7208'. [ 832.673094][T32678] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7208'. [ 832.748260][T32682] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 833.115368][T32698] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7214'. [ 833.142014][ T6253] IPVS: starting estimator thread 0... [ 833.237243][T32700] IPVS: using max 27 ests per chain, 64800 per kthread [ 833.287992][T32706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7216'. [ 833.696715][T32722] Bluetooth: MGMT ver 1.23 [ 833.744284][T32724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7219'. [ 833.798853][T32718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7219'. [ 833.869632][T32723] syzkaller0: entered promiscuous mode [ 833.896876][T32723] syzkaller0: entered allmulticast mode [ 833.933568][T12339] net_ratelimit: 11 callbacks suppressed [ 833.933585][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 834.061287][T32747] openvswitch: netlink: Missing key (keys=40, expected=80) [ 834.194340][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 834.478432][T32761] netlink: 'syz.5.7230': attribute type 1 has an invalid length. [ 835.841591][T32761] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 835.893715][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 836.015264][ T312] "syz.3.7234" (312) uses obsolete ecb(arc4) skcipher [ 836.034944][ T312] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 836.044910][ T312] netlink: 'syz.3.7234': attribute type 4 has an invalid length. [ 836.055787][ T312] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 836.064112][ T312] netlink: 'syz.3.7234': attribute type 4 has an invalid length. [ 836.103497][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 836.181011][ T320] gretap1: entered promiscuous mode [ 836.244649][ T325] syz2: rxe_newlink: already configured on ip6_vti0 [ 836.276518][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 836.393747][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 836.491872][ T343] netem: change failed [ 836.525452][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 836.654493][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 836.892775][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 837.002140][ T360] __nla_validate_parse: 11 callbacks suppressed [ 837.002159][ T360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7253'. [ 837.164825][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7254'. [ 837.178473][ T371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7255'. [ 837.227789][ T374] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7257'. [ 837.291243][ T371] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.7255'. [ 837.500077][ T398] syzkaller0: entered promiscuous mode [ 837.513753][ T398] syzkaller0: entered allmulticast mode [ 837.551477][ T402] netlink: 'syz.5.7264': attribute type 1 has an invalid length. [ 837.721729][ T415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7264'. [ 837.851801][ T403] wg1: entered promiscuous mode [ 837.857609][ T403] wg1: entered allmulticast mode [ 837.895467][ T407] bond10: (slave veth13): Enslaving as an active interface with a down link [ 837.934302][ T411] bond10: (slave veth15): Enslaving as an active interface with a down link [ 837.960553][ T415] 8021q: adding VLAN 0 to HW filter on device bond10 [ 837.974184][ T419] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 838.079162][ T428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7270'. [ 838.104057][ T428] netlink: 'syz.3.7270': attribute type 1 has an invalid length. [ 838.111811][ T428] netlink: 'syz.3.7270': attribute type 3 has an invalid length. [ 838.120078][ T428] netlink: 'syz.3.7270': attribute type 2 has an invalid length. [ 838.128294][ T428] netlink: 'syz.3.7270': attribute type 3 has an invalid length. [ 838.137715][ T428] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7270'. [ 838.273214][ T436] mac80211_hwsim hwsim99 wlan1: entered allmulticast mode [ 838.282572][ T432] ip6_vti0 speed is unknown, defaulting to 1000 [ 838.335158][ T438] netem: change failed [ 838.476123][ T438] xt_CT: No such helper "netbios-ns" [ 838.520422][ T450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7276'. [ 838.548280][ T454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7274'. [ 838.641033][ T456] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 838.659922][ T435] ip6_vti0 speed is unknown, defaulting to 1000 [ 838.946918][T29452] net_ratelimit: 12 callbacks suppressed [ 838.946937][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 839.245593][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 839.324510][ T480] IPVS: Error connecting to the multicast addr [ 839.718055][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 839.854509][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 840.134236][ T492] ip6_vti0 speed is unknown, defaulting to 1000 [ 840.143887][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 840.263982][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 840.393778][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 840.524832][ T507] bond2: option ad_user_port_key: invalid value (65535) [ 840.537079][ T507] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 840.574161][ T507] bond2 (unregistering): Released all slaves [ 840.665073][ T516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.758055][ T520] syzkaller0: entered promiscuous mode [ 840.770242][ T520] syzkaller0: entered allmulticast mode [ 840.953749][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 841.225899][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 841.250857][ T539] netlink: 'syz.5.7303': attribute type 1 has an invalid length. [ 841.377621][ T539] bond11: entered promiscuous mode [ 841.392865][ T539] bond11: entered allmulticast mode [ 841.419280][ T540] bond11: (slave ip6gretap1): making interface the new active one [ 841.427521][ T540] ip6gretap1: entered promiscuous mode [ 841.433187][ T540] ip6gretap1: entered allmulticast mode [ 841.440134][ T540] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 841.451892][ T542] bond11: left promiscuous mode [ 841.475297][ T542] ip6gretap1: left promiscuous mode [ 841.481264][ T542] bond11: left allmulticast mode [ 841.486446][ T542] ip6gretap1: left allmulticast mode [ 841.492434][ T542] 8021q: adding VLAN 0 to HW filter on device bond11 [ 841.624463][ T546] ip6_vti0 speed is unknown, defaulting to 1000 [ 842.127244][ T577] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 842.341528][ T593] __nla_validate_parse: 17 callbacks suppressed [ 842.341548][ T593] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7318'. [ 842.393346][ T595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7320'. [ 842.405598][ T595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7320'. [ 842.499610][ T597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7321'. [ 842.527894][ T593] vlan3: entered allmulticast mode [ 842.563576][ T593] erspan0: entered allmulticast mode [ 842.736964][ T600] ip6_vti0 speed is unknown, defaulting to 1000 [ 842.843047][ T621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7325'. [ 843.036954][ T625] syzkaller0: entered promiscuous mode [ 843.051242][ T625] syzkaller0: entered allmulticast mode [ 843.125757][ T625] tipc: Enabled bearer , priority 0 [ 843.135877][ T624] tipc: Resetting bearer [ 843.167278][ T624] tipc: Disabling bearer [ 843.192651][ T631] netlink: 'syz.5.7330': attribute type 8 has an invalid length. [ 843.210356][ T631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7330'. [ 843.222643][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.291434][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.301460][ T631] bond0: entered promiscuous mode [ 843.312845][ T631] bond0: left promiscuous mode [ 843.337259][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.361645][ T613] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 843.492549][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7331'. [ 843.512049][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.596385][ T639] bond12: Unable to set down delay as MII monitoring is disabled [ 843.616165][ T639] bond12 (unregistering): Released all slaves [ 843.682483][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.697911][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.701368][ T647] IPv6: NLM_F_REPLACE set, but no existing node found! [ 843.727882][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.748938][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.757992][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.766451][ T613] wg1 speed is unknown, defaulting to 1000 [ 843.823910][ T654] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 843.888151][ T657] syzkaller0: entered promiscuous mode [ 843.904230][ T657] syzkaller0: entered allmulticast mode [ 843.912929][ T659] syzkaller0: entered promiscuous mode [ 843.918941][ T659] syzkaller0: entered allmulticast mode [ 843.989863][ T659] tipc: Enabled bearer , priority 0 [ 844.001406][ T658] tipc: Resetting bearer [ 844.050956][ T658] tipc: Disabling bearer [ 844.083761][ T2211] net_ratelimit: 17 callbacks suppressed [ 844.083777][ T2211] bond8: (slave bridge1): failed to get link speed/duplex [ 844.233461][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 844.343529][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 844.503495][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 844.623673][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 844.732638][ T702] pim6reg1: entered promiscuous mode [ 844.742960][ T702] pim6reg1: entered allmulticast mode [ 844.774032][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 844.786942][ T702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7347'. [ 844.875092][ T705] netlink: 'syz.5.7349': attribute type 15 has an invalid length. [ 844.883127][ T705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7349'. [ 844.893519][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 844.901445][ T705] netlink: 'syz.5.7349': attribute type 15 has an invalid length. [ 844.924190][ T705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7349'. [ 844.952296][ T708] netlink: 'syz.5.7349': attribute type 15 has an invalid length. [ 845.023487][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 845.059768][ T712] netlink: 'syz.5.7351': attribute type 21 has an invalid length. [ 845.071033][ T712] netlink: 'syz.5.7351': attribute type 4 has an invalid length. [ 845.078992][ T712] netlink: 'syz.5.7351': attribute type 5 has an invalid length. [ 845.134034][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 845.185683][ T722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.262291][ T725] ip6_vti0 speed is unknown, defaulting to 1000 [ 845.663595][ T733] ip6_vti0 speed is unknown, defaulting to 1000 [ 845.696525][ T725] wg1 speed is unknown, defaulting to 1000 [ 846.037546][ T733] wg1 speed is unknown, defaulting to 1000 [ 846.187371][ T758] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 846.244042][ T758] bond12 (unregistering): Released all slaves [ 846.449308][ T770] syzkaller0: entered promiscuous mode [ 846.463186][ T770] syzkaller0: entered allmulticast mode [ 846.811132][ T779] ip6_vti0 speed is unknown, defaulting to 1000 [ 846.878323][ T788] netlink: 'syz.2.7373': attribute type 1 has an invalid length. [ 847.022634][ T788] veth5: entered promiscuous mode [ 847.253319][ T779] wg1 speed is unknown, defaulting to 1000 [ 847.432470][ T806] __nla_validate_parse: 8 callbacks suppressed [ 847.432489][ T806] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7375'. [ 847.465541][ T803] netlink: 'syz.2.7375': attribute type 10 has an invalid length. [ 847.578378][ T803] veth0_vlan: left promiscuous mode [ 847.588445][ T803] veth0_vlan: entered promiscuous mode [ 847.597556][ T803] team0: Device veth0_vlan failed to register rx_handler [ 847.645046][ T790] netlink: 'syz.4.7370': attribute type 6 has an invalid length. [ 848.486140][ T842] ip6_vti0 speed is unknown, defaulting to 1000 [ 848.520638][ T845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7386'. [ 848.971488][ T842] wg1 speed is unknown, defaulting to 1000 [ 849.176371][ T881] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 849.213195][ T883] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 849.219669][ T5988] net_ratelimit: 23 callbacks suppressed [ 849.219686][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 849.344243][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 849.453887][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 849.564846][ T2915] bond8: (slave bridge1): failed to get link speed/duplex [ 849.677672][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 849.796082][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 849.914368][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 849.957517][ T920] ip6_vti0 speed is unknown, defaulting to 1000 [ 849.996803][ T923] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7405'. [ 850.073744][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 850.203783][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 850.313750][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 850.355692][ T920] wg1 speed is unknown, defaulting to 1000 [ 850.726913][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7408'. [ 850.936270][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7411'. [ 851.165085][ T968] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.7414'. [ 851.293235][ T964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7413'. [ 851.453808][ T964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.481441][ T974] ip6_vti0 speed is unknown, defaulting to 1000 [ 851.569717][ T988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.589953][ T988] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 851.604954][ T996] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20000 [ 851.676805][ T988] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 851.933912][ T993] syzkaller1: entered promiscuous mode [ 851.939428][ T993] syzkaller1: entered allmulticast mode [ 852.029031][ T974] wg1 speed is unknown, defaulting to 1000 [ 852.180397][ T1019] xt_cgroup: invalid path, errno=-2 [ 852.254980][ T1027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7426'. [ 852.390741][ T1026] ip6_vti0 speed is unknown, defaulting to 1000 [ 852.536637][ T1035] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7426'. [ 852.574772][T12339] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.594568][T12339] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.603280][T12339] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.612966][ T1039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7429'. [ 852.909032][ T1026] wg1 speed is unknown, defaulting to 1000 [ 853.499485][ T1073] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7436'. [ 853.698647][ T1087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7439'. [ 853.749416][ T1087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7439'. [ 853.958776][ T6234] IPVS: starting estimator thread 0... [ 854.194816][ T1097] IPVS: using max 26 ests per chain, 62400 per kthread [ 854.281228][T12339] net_ratelimit: 26 callbacks suppressed [ 854.281247][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 854.406284][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 854.564076][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 854.602630][ T1116] validate_nla: 1 callbacks suppressed [ 854.602647][ T1116] netlink: 'syz.0.7446': attribute type 1 has an invalid length. [ 854.684111][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 854.803776][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 854.871027][ T1144] bridge: RTM_NEWNEIGH with invalid ether address [ 854.913864][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 855.025057][T20646] bond8: (slave bridge1): failed to get link speed/duplex [ 855.094052][ T1161] : renamed from veth0_to_bond [ 855.143467][T20646] bond8: (slave bridge1): failed to get link speed/duplex [ 855.266163][ T1166] ip6_vti0 speed is unknown, defaulting to 1000 [ 855.274411][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 855.453713][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 855.475600][ T1173] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7459'. [ 855.552658][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7461'. [ 855.584286][ T1166] wg1 speed is unknown, defaulting to 1000 [ 856.172274][ T1203] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 856.196218][ T1203] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 856.228139][ T1203] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 856.546907][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7475'. [ 856.703750][ T5825] Bluetooth: hci0: command 0x0405 tx timeout [ 856.729393][T29065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 856.740484][T29065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 856.748412][T29065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 856.759847][T29065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 856.767999][T29065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 856.813183][ T1233] ip6_vti0 speed is unknown, defaulting to 1000 [ 857.037505][ T1233] wg1 speed is unknown, defaulting to 1000 [ 857.311759][ T1248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.323983][ T1248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.503259][ T1248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.514808][ T1248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.688406][ T1257] netlink: 'syz.0.7481': attribute type 12 has an invalid length. [ 857.879077][ T1248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.899270][ T1248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.950149][ T1233] chnl_net:caif_netlink_parms(): no params data found [ 858.066401][ T1265] No such timeout policy "syz1" [ 858.080509][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7483'. [ 858.203045][ T1056] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.220461][ T1056] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.249866][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.272136][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.294127][ T1233] bridge_slave_0: entered allmulticast mode [ 858.301768][ T1233] bridge_slave_0: entered promiscuous mode [ 858.336492][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.344923][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.352069][ T1233] bridge_slave_1: entered allmulticast mode [ 858.359036][ T1233] bridge_slave_1: entered promiscuous mode [ 858.366600][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.375045][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.385866][ T1271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7484'. [ 858.410690][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.413846][ T1277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7487'. [ 858.428274][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.459760][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.477085][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.498064][ T1233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.518234][ T1233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.599471][ T1233] team0: Port device team_slave_0 added [ 858.614775][ T1233] team0: Port device team_slave_1 added [ 858.630943][ T1291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7490'. [ 858.657341][ T1233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.665690][ T1233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.695195][ T1233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.712007][ T1293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7491'. [ 858.732157][ T1233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.742096][ T1233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.802719][ T1233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.854049][ T5825] Bluetooth: hci2: command tx timeout [ 858.871645][ T1233] hsr_slave_0: entered promiscuous mode [ 858.879798][ T1233] hsr_slave_1: entered promiscuous mode [ 858.888597][ T1233] debugfs: 'hsr0' already exists in 'hsr' [ 858.895593][ T1233] Cannot create hsr debugfs directory [ 858.943596][ T1303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7494'. [ 858.991640][ T1303] 8021q: VLANs not supported on vcan0 [ 859.027118][ T1304] mac80211_hwsim hwsim94 wlan0: entered allmulticast mode [ 859.128788][ T1233] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 859.259014][ T1233] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 859.303464][ T2901] net_ratelimit: 17 callbacks suppressed [ 859.303482][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 859.359998][ T1233] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 859.399613][ T1322] netlink: 'syz.4.7499': attribute type 1 has an invalid length. [ 859.491309][ T1322] bond6: (slave veth7): Enslaving as an active interface with a down link [ 859.552721][ T1329] netlink: 'syz.3.7501': attribute type 39 has an invalid length. [ 859.564161][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 859.590599][ T1322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7499'. [ 859.611450][ T1329] hsr_slave_1 (unregistering): left promiscuous mode [ 859.619072][ T1331] netlink: 508 bytes leftover after parsing attributes in process `syz.2.7502'. [ 859.671577][ T1322] bond6 (unregistering): (slave veth7): Releasing active interface [ 859.698720][ T1322] bond6 (unregistering): Released all slaves [ 859.779370][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 859.900036][ T1346] C: renamed from team_slave_0 [ 859.915562][ T1346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7505'. [ 859.954622][ T1233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 859.974357][ T1233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 859.987938][ T1233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 860.016646][ T1233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 860.072002][ T1360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7509'. [ 860.095511][ T1360] bridge0: entered promiscuous mode [ 860.100969][ T1360] macsec1: entered promiscuous mode [ 860.107544][ T1360] bridge0: port 1(macsec1) entered blocking state [ 860.114724][ T1360] bridge0: port 1(macsec1) entered disabled state [ 860.121440][ T1360] macsec1: entered allmulticast mode [ 860.126969][ T1360] bridge0: entered allmulticast mode [ 860.135328][ T1360] macsec1: left allmulticast mode [ 860.140837][ T1360] bridge0: left allmulticast mode [ 860.148828][ T1360] bridge0: left promiscuous mode [ 860.184127][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 860.274210][ T1233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.295293][ T1233] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.314650][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.321820][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.339066][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.346227][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.455807][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 860.573562][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 860.697921][ T1233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.744015][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 860.863983][ T50] bond8: (slave bridge1): failed to get link speed/duplex [ 860.892976][ T1396] netlink: 'syz.4.7516': attribute type 30 has an invalid length. [ 860.938693][ T5825] Bluetooth: hci2: command tx timeout [ 860.983480][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 861.058308][ T1401] netlink: 'syz.4.7518': attribute type 22 has an invalid length. [ 861.116503][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 861.555464][ T1233] veth0_vlan: entered promiscuous mode [ 861.569147][ T1233] veth1_vlan: entered promiscuous mode [ 861.613936][ T1233] veth0_macvtap: entered promiscuous mode [ 861.628183][ T1233] veth1_macvtap: entered promiscuous mode [ 861.863570][ T1233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.874831][ T1423] bridge: RTM_NEWNEIGH with invalid ether address [ 861.900476][ T1233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.918481][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.936307][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.975297][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.989147][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.225852][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.234078][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.301659][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.316209][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.511655][ T1446] macvlan2: entered promiscuous mode [ 862.523668][ T1446] macvlan2: entered allmulticast mode [ 862.530258][ T1446] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode [ 862.690765][ T1455] vlan0: entered promiscuous mode [ 862.894387][ T1477] syzkaller1: entered promiscuous mode [ 862.903446][ T1477] syzkaller1: entered allmulticast mode [ 863.014494][ T5825] Bluetooth: hci2: command tx timeout [ 863.260366][ T1494] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.292106][ T1496] Bluetooth: hci1: too big key_count value 29096 [ 863.365448][ T1498] __nla_validate_parse: 11 callbacks suppressed [ 863.365466][ T1498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7542'. [ 863.431856][ T1494] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.567377][ T1494] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.675466][ T1494] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.715969][ T1515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7544'. [ 863.906813][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7548'. [ 864.313833][T20646] net_ratelimit: 21 callbacks suppressed [ 864.313853][T20646] bond8: (slave bridge1): failed to get link speed/duplex [ 864.359754][ T1550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.473477][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 864.499963][ T1561] netlink: 'syz.0.7562': attribute type 1 has an invalid length. [ 864.510783][ T1561] sctp: [Deprecated]: syz.0.7562 (pid 1561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 864.510783][ T1561] Use struct sctp_sack_info instead [ 864.583445][T20646] bond8: (slave bridge1): failed to get link speed/duplex [ 864.694535][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 864.803745][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 864.816795][ T1583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7570'. [ 864.913563][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 864.931027][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.941407][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.023896][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 865.041025][ T1593] tipc: Enabling of bearer rejected, failed to enable media [ 865.103741][ T5825] Bluetooth: hci2: command tx timeout [ 865.133566][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 865.146205][ T1593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7574'. [ 865.232737][ T1602] netlink: 'syz.0.7575': attribute type 21 has an invalid length. [ 865.240838][ T1602] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7575'. [ 865.249986][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 865.311661][ T1603] sctp: [Deprecated]: syz.0.7575 (pid 1603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 865.311661][ T1603] Use struct sctp_sack_info instead [ 865.330085][ T1603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7575'. [ 865.363539][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 865.860543][ T1615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7579'. [ 866.010678][ T1623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7581'. [ 866.119844][ T1625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.136667][ T1625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.187081][ T1629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7584'. [ 866.771164][ T1647] ip6_vti0 speed is unknown, defaulting to 1000 [ 867.370340][ T1649] ip6_vti0 speed is unknown, defaulting to 1000 [ 867.386404][ T1647] wg1 speed is unknown, defaulting to 1000 [ 867.659333][ T2901] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.719852][ T2901] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.760024][ T2901] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.794540][ T2901] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.848545][ T1649] wg1 speed is unknown, defaulting to 1000 [ 868.105457][ T1680] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 868.573832][ T1698] __nla_validate_parse: 3 callbacks suppressed [ 868.573851][ T1698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7606'. [ 868.646784][ T1701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7608'. [ 868.648174][ T1698] netlink: 'syz.5.7606': attribute type 1 has an invalid length. [ 868.671828][ T1698] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7606'. [ 868.686736][ T1709] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7609'. [ 868.696230][ T5988] wlan0: Trigger new scan to find an IBSS to join [ 868.860725][ T1713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7611'. [ 868.919585][ T1717] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7611'. [ 868.932484][ T1718] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 869.014634][ T1720] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.7613'. [ 869.190337][ T1729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7616'. [ 869.193503][ T1727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7615'. [ 869.240110][ T1727] netlink: 'syz.4.7615': attribute type 30 has an invalid length. [ 869.373144][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.409677][ T60] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.443768][T29452] net_ratelimit: 32 callbacks suppressed [ 869.443785][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 869.475536][ T60] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.497247][ T60] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.626512][ T1744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7620'. [ 869.656813][ T1744] netlink: 'syz.5.7620': attribute type 7 has an invalid length. [ 869.675671][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 869.687021][ T1750] netlink: 'syz.0.7622': attribute type 16 has an invalid length. [ 869.696818][ T1744] netlink: 'syz.5.7620': attribute type 8 has an invalid length. [ 869.804781][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 869.923540][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 869.942344][ T1768] : renamed from vxcan1 [ 869.979550][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.123544][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 870.243821][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 870.383676][ T1056] bond8: (slave bridge1): failed to get link speed/duplex [ 870.493611][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 870.605006][T29452] bond8: (slave bridge1): failed to get link speed/duplex [ 870.733277][ T1803] ip6_vti0 speed is unknown, defaulting to 1000 [ 871.171737][ T1817] tipc: Enabled bearer , priority 0 [ 871.200339][ T1818] tipc: Enabling of bearer rejected, already enabled [ 871.228336][ T1817] syzkaller0: entered promiscuous mode [ 871.234207][ T1817] syzkaller0: entered allmulticast mode [ 871.241153][ T1803] wg1 speed is unknown, defaulting to 1000 [ 871.282112][ T1817] tipc: Resetting bearer [ 871.303766][ T1814] tipc: Resetting bearer [ 871.328341][ T1814] tipc: Disabling bearer [ 871.389640][ T1821] ip6_vti0 speed is unknown, defaulting to 1000 [ 871.607770][ T1834] netlink: 'syz.5.7643': attribute type 39 has an invalid length. [ 871.705739][T28898] wg1 speed is unknown, defaulting to 1000 [ 871.734563][ T3555] wlan0: Trigger new scan to find an IBSS to join [ 871.756997][ T1821] wg1 speed is unknown, defaulting to 1000 [ 872.385408][ T1866] netlink: 'syz.2.7651': attribute type 1 has an invalid length. [ 872.435766][ T1868] netlink: 'syz.2.7651': attribute type 1 has an invalid length. [ 872.512536][ T1872] nbd: must specify a device to reconfigure [ 874.802346][ T5988] wlan0: Trigger new scan to find an IBSS to join [ 876.902763][ T1907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 878.601818][ T1916] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 878.651067][ T13] net_ratelimit: 18 callbacks suppressed [ 878.651088][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 878.681371][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.293139][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 881.060753][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 881.371103][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 881.972295][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 884.772225][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 885.242981][ T1914] ip6_vti0 speed is unknown, defaulting to 1000 [ 885.303132][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 890.980944][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 891.891427][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 892.301171][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 892.712984][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 893.250686][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 893.772964][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 894.402701][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 894.982434][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 895.469986][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 895.990736][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 896.360939][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 896.771773][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 897.133128][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 897.573164][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 897.641237][ T1943] __nla_validate_parse: 18 callbacks suppressed [ 897.641255][ T1943] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7675'. [ 898.102197][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 898.841070][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 899.252493][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 899.743207][ T6038] bond8: (slave bridge1): failed to get link speed/duplex [ 900.182003][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 900.892899][T29065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 901.102668][ T3555] net_ratelimit: 2 callbacks suppressed [ 901.102687][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 901.272150][T29065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 901.381931][T29065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 901.511523][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 901.811219][T29065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 902.010477][ T12] bond8: (slave bridge1): failed to get link speed/duplex [ 902.311126][T29065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 902.391322][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 902.743154][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 903.163255][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 903.539938][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 903.921048][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 904.370306][ T5825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 904.711530][ T5825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 904.803135][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 904.840222][ T5825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 905.200765][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 905.323158][ T5825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 905.611731][ T5825] Bluetooth: hci3: command tx timeout [ 905.800794][ T5825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 906.712391][ T5988] net_ratelimit: 2 callbacks suppressed [ 906.712411][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 907.540929][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 907.691192][T22430] Bluetooth: hci3: command tx timeout [ 907.951066][ T2901] bond8: (slave bridge1): failed to get link speed/duplex [ 908.380414][T22430] Bluetooth: hci7: command tx timeout [ 908.460362][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 908.712962][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 909.771363][T22430] Bluetooth: hci3: command tx timeout [ 910.111167][ T1955] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 910.150844][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 910.460502][T22430] Bluetooth: hci7: command tx timeout [ 910.671706][ T1914] wg1 speed is unknown, defaulting to 1000 [ 910.712752][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 910.952213][ T2901] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 911.132169][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 911.141831][ T1947] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.850412][T22430] Bluetooth: hci3: command tx timeout [ 912.551360][T22430] Bluetooth: hci7: command tx timeout [ 914.621259][T22430] Bluetooth: hci7: command tx timeout [ 914.753070][ T60] bond8: (slave bridge1): failed to get link speed/duplex [ 925.221699][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 926.281105][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 926.712153][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 927.041826][ T6038] bond8: (slave bridge1): failed to get link speed/duplex [ 927.400895][ T1947] wg1 speed is unknown, defaulting to 1000 [ 927.481627][ T6038] bond8: (slave bridge1): failed to get link speed/duplex [ 927.851208][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 928.301245][ T6038] bond8: (slave bridge1): failed to get link speed/duplex [ 928.301342][ T1949] ip6_vti0 speed is unknown, defaulting to 1000 [ 929.340355][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 931.430284][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 935.260742][ T13] bond8: (slave bridge1): failed to get link speed/duplex [ 937.062428][ T6038] bond8: (slave bridge1): failed to get link speed/duplex [ 938.632884][T29065] Bluetooth: hci4: command 0x0405 tx timeout [ 940.773250][ T5988] bond8: (slave bridge1): failed to get link speed/duplex [ 943.392584][T12339] bond8: (slave bridge1): failed to get link speed/duplex [ 943.761822][T29065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 943.861330][T29065] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 944.351525][T29065] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 944.662693][T29065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 944.912657][ T6038] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 944.962737][T29065] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 945.620962][ T3555] bond8: (slave bridge1): failed to get link speed/duplex [ 948.382503][T29065] Bluetooth: hci1: command tx timeout [ 950.490982][T29065] Bluetooth: hci1: command tx timeout [ 952.551654][T29065] Bluetooth: hci1: command tx timeout [ 954.622048][T29065] Bluetooth: hci1: command tx timeout [ 955.460727][ T2001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7688'. [ 957.433058][T22430] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 957.811617][T22430] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 958.030406][T22430] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 959.201028][T22430] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 959.522736][T22430] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 962.962898][T22430] Bluetooth: hci6: command tx timeout [ 964.931965][T29065] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 965.022113][T29065] Bluetooth: hci6: command tx timeout [ 965.060110][T29065] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 965.171625][T29065] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 965.760531][T29065] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 966.097512][T29065] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 966.832164][T22430] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 967.111613][ T53] Bluetooth: hci6: command tx timeout [ 967.301693][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 967.670717][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 968.090414][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 968.692373][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 969.183116][T29065] Bluetooth: hci6: command tx timeout [ 969.582367][T29065] Bluetooth: hci8: command tx timeout [ 971.591384][T29065] Bluetooth: hci9: command tx timeout [ 971.670328][T29065] Bluetooth: hci8: command tx timeout [ 973.670039][T29065] Bluetooth: hci9: command tx timeout [ 973.750644][T29065] Bluetooth: hci8: command tx timeout [ 975.752076][ T53] Bluetooth: hci9: command tx timeout [ 975.829839][ T53] Bluetooth: hci8: command tx timeout [ 976.051365][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.221541][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.311890][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.770516][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 977.243206][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 977.822170][ T53] Bluetooth: hci9: command tx timeout [ 978.211601][T29452] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 979.822087][ T53] Bluetooth: hci2: command tx timeout [ 981.899710][ T53] Bluetooth: hci2: command tx timeout [ 983.990240][ T53] Bluetooth: hci2: command tx timeout [ 984.922642][ T2901] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 986.070425][ T53] Bluetooth: hci2: command tx timeout [ 992.882514][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 999.651986][ T2901] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1002.522894][T29065] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1002.980163][T29065] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1003.241667][T29065] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1003.782479][T29065] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1004.250678][T29065] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1007.441371][T29065] Bluetooth: hci10: command tx timeout [ 1009.512776][T29065] Bluetooth: hci10: command tx timeout [ 1010.842475][ T5988] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1011.582359][T29065] Bluetooth: hci10: command tx timeout [ 1013.690176][ T53] Bluetooth: hci10: command tx timeout [ 1013.840670][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1014.080600][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1014.557561][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1014.930428][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1015.240652][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1018.322713][ T53] Bluetooth: hci11: command tx timeout [ 1020.390760][ T53] Bluetooth: hci11: command tx timeout [ 1022.462740][ T53] Bluetooth: hci11: command tx timeout [ 1022.660422][T29065] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1022.962644][T29065] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1023.050860][T29065] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1023.853137][T29065] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1024.160561][ T5825] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1024.420726][ T5825] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1024.540010][ T5825] Bluetooth: hci11: command tx timeout [ 1024.561041][ T5825] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1024.831813][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1025.461029][ T2024] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1025.812113][ T2024] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1027.512516][ T2024] Bluetooth: hci12: command tx timeout [ 1028.870440][T29065] Bluetooth: hci13: command tx timeout [ 1029.600412][T29065] Bluetooth: hci12: command tx timeout [ 1030.840334][T29065] Bluetooth: hci3: command 0x0406 tx timeout [ 1030.842129][ T53] Bluetooth: hci7: command 0x0406 tx timeout [ 1030.972672][ T53] Bluetooth: hci13: command tx timeout [ 1031.661156][ T2024] Bluetooth: hci12: command tx timeout [ 1033.021159][T22430] Bluetooth: hci13: command tx timeout [ 1033.741574][T22430] Bluetooth: hci12: command tx timeout [ 1035.101201][T22430] Bluetooth: hci13: command tx timeout [ 1038.891562][ T2024] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1038.991725][ T2901] bond0 (unregistering): Released all slaves [ 1039.002609][ T2024] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1039.252649][ T2024] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1039.452289][ T2024] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1039.907843][ T2024] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1043.271300][T22430] Bluetooth: hci14: command tx timeout [ 1045.359921][T29452] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1045.369956][T22430] Bluetooth: hci14: command tx timeout [ 1047.428140][T22430] Bluetooth: hci14: command tx timeout [ 1049.512651][T22430] Bluetooth: hci14: command tx timeout [ 1049.642175][ T2901] bond1 (unregistering): Released all slaves [ 1050.362697][ T2901] bond2 (unregistering): Released all slaves [ 1051.323040][ T2901] bond3 (unregistering): Released all slaves [ 1052.642330][ T2901] bond4 (unregistering): Released all slaves [ 1054.320527][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1063.232726][ T2901] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1064.072623][ T2901] bond5 (unregistering): Released all slaves [ 1064.181760][ T2024] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1064.430074][ T2024] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1065.032393][ T2024] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1065.293058][ T2024] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1065.440782][ T2024] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1069.111908][ T2024] Bluetooth: hci15: command tx timeout [ 1071.180790][ T2024] Bluetooth: hci15: command tx timeout [ 1071.761061][ T2024] Bluetooth: hci1: command 0x0406 tx timeout [ 1073.261926][T22430] Bluetooth: hci15: command tx timeout [ 1075.339976][T22430] Bluetooth: hci15: command tx timeout [ 1076.712866][ T2024] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1076.870422][ T2024] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1076.981514][ T2024] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1077.288628][ T2901] bond6 (unregistering): Released all slaves [ 1077.882102][ T2024] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1078.322577][ T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1079.300774][ T3555] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1081.582506][ T53] Bluetooth: hci16: command tx timeout [ 1083.660902][ T53] Bluetooth: hci16: command tx timeout [ 1085.112227][ T2024] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1085.331873][ T2024] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1085.491629][ T2024] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1085.762219][ T2024] Bluetooth: hci16: command tx timeout [ 1086.121856][T29065] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1086.381616][T29065] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1086.410356][T29065] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1086.482398][T29065] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1087.060598][ T2040] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1087.093110][ T5825] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1087.131956][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 1087.591514][ T53] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1087.831619][ T2024] Bluetooth: hci16: command tx timeout [ 1089.900763][T22430] Bluetooth: hci17: command tx timeout [ 1090.470211][T29065] Bluetooth: hci18: command tx timeout [ 1091.451515][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 1091.609638][ T31] Not tainted syzkaller #0 [ 1091.711090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1091.851835][ T31] task:kworker/u8:0 state:D stack:22264 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1091.992046][T29065] Bluetooth: hci17: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1092.090788][ T31] Workqueue: events_unbound linkwatch_event [ 1092.220477][T29065] Bluetooth: hci9: command 0x0406 tx timeout [ 1092.240815][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 1092.269950][ T31] Call Trace: [ 1092.490035][ T31] [ 1092.493010][ T31] __schedule+0x149b/0x4fd0 [ 1092.542100][ T53] Bluetooth: hci18: command tx timeout [ 1092.603105][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1092.611063][ T31] ? __pfx___schedule+0x10/0x10 [ 1092.619300][ T31] ? schedule+0x91/0x360 [ 1092.627790][ T31] schedule+0x165/0x360 [ 1092.631955][ T31] schedule_preempt_disabled+0x13/0x30 [ 1092.639897][ T31] __mutex_lock+0x7e6/0x1350 [ 1092.662608][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1092.692937][ T31] ? linkwatch_event+0xe/0x60 [ 1092.802541][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1093.001646][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1093.292053][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1093.562290][ T31] linkwatch_event+0xe/0x60 [ 1093.711176][ T31] process_scheduled_works+0xad1/0x1770 [ 1093.819924][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1094.050116][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1094.061717][ T53] Bluetooth: hci17: command tx timeout [ 1094.181377][ T31] worker_thread+0x8a0/0xda0 [ 1094.402290][ T31] kthread+0x711/0x8a0 [ 1094.473190][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1094.541858][ T31] ? __pfx_kthread+0x10/0x10 [ 1094.631149][ T53] Bluetooth: hci18: command tx timeout [ 1094.702575][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1094.869936][ T31] ? __pfx_kthread+0x10/0x10 [ 1095.000774][ T31] ret_from_fork+0x510/0xa50 [ 1095.100594][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1095.220498][ T31] ? __switch_to+0xc9e/0x1480 [ 1095.500914][ T31] ? __pfx_kthread+0x10/0x10 [ 1095.739975][ T31] ret_from_fork_asm+0x1a/0x30 [ 1095.900589][ T31] [ 1095.970373][ T31] INFO: task syz-executor:1949 blocked for more than 147 seconds. [ 1096.151531][ T53] Bluetooth: hci17: command tx timeout [ 1096.271200][ T31] Not tainted syzkaller #0 [ 1096.443223][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1096.642491][ T31] task:syz-executor state:D stack:22304 pid:1949 tgid:1949 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1096.701331][ T53] Bluetooth: hci18: command tx timeout [ 1096.960774][ T31] Call Trace: [ 1097.070070][ T31] [ 1097.073053][ T31] __schedule+0x149b/0x4fd0 [ 1097.252613][ T31] ? try_to_wake_up+0x7f5/0x12b0 [ 1097.392123][ T31] ? __pfx___schedule+0x10/0x10 [ 1097.491731][ T31] ? schedule+0x91/0x360 [ 1097.572090][ T31] schedule+0x165/0x360 [ 1097.662480][ T31] schedule_preempt_disabled+0x13/0x30 [ 1097.792068][ T31] __mutex_lock+0x7e6/0x1350 [ 1097.891803][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1097.931447][ T31] ? ib_get_eth_speed+0x151/0x7b0 [ 1098.022039][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1098.172156][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1098.293022][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1098.420782][ T31] ? ib_device_get_netdev+0x220/0x2f0 [ 1098.540714][ T31] ib_get_eth_speed+0x151/0x7b0 [ 1098.671315][ T31] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1098.791097][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1098.901285][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1098.991513][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1099.130941][ T31] siw_query_port+0x3c/0x4a0 [ 1099.219912][ T31] ib_setup_port_attrs+0x24e/0x2070 [ 1099.330586][ T31] ? rcu_is_watching+0x15/0xb0 [ 1099.400367][ T31] ? trace_contention_end+0x39/0x100 [ 1099.482807][ T31] ? device_add+0x9bb/0xb80 [ 1099.642462][ T31] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1099.731050][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1099.812434][ T31] ? device_add+0x70b/0xb80 [ 1099.952987][ T31] add_one_compat_dev+0x449/0x650 [ 1100.020708][ T31] ? down_read+0x274/0x2e0 [ 1100.119689][ T31] rdma_dev_init_net+0x238/0x2f0 [ 1100.282640][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1100.402023][T29065] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1100.530440][ T31] ? trace_kmalloc+0x1f/0xb0 [ 1100.661630][ T31] ? __kmalloc_noprof+0x43e/0x800 [ 1100.691962][ T2044] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1100.841195][ T31] ops_init+0x35c/0x5c0 [ 1100.892249][ T2044] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1100.942637][ T31] setup_net+0x110/0x330 [ 1101.243194][ T31] ? __pfx_setup_net+0x10/0x10 [ 1101.282204][ T2044] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1101.422141][ T31] ? preinit_net+0x47d/0x780