last executing test programs: 7m48.246941605s ago: executing program 32 (id=17710): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="f6", 0xfffffe42}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) recvmmsg(r1, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1}, 0xfffffff7}], 0x1, 0x40004023, 0x0) 2m14.388343957s ago: executing program 33 (id=21515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r3, 0xffffffffffffffff, 0x17, 0x1, r4, @void, @value=r4, @void, @void, r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x34, 0x0, @val=@tcx={@void, @value=r7, @void, @void, r6}}, 0x1c) 1m53.075340639s ago: executing program 34 (id=21694): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m44.777746128s ago: executing program 35 (id=21716): syz_emit_ethernet(0x46, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x400261f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00R\x00', @ANYRES32=r3], 0x24}}, 0x0) 1m42.528581483s ago: executing program 7 (id=21751): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x20, 0x4) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x4040000) 1m42.276864426s ago: executing program 7 (id=21793): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fc0f0000011200007d0000089500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m41.69098768s ago: executing program 7 (id=21796): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1m41.154049555s ago: executing program 7 (id=21800): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) listen(r1, 0x5) 1m39.924064916s ago: executing program 7 (id=21805): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xb0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6674}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x7a05, 0x1700) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000580)={'filter\x00', 0x0, [0x5, 0xfffffff7, 0x7e, 0x101, 0xc]}, &(0x7f0000000600)=0x54) 1m39.851606426s ago: executing program 4 (id=21806): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m39.021999826s ago: executing program 4 (id=21807): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='cdg', 0x3) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) close(0x4) 1m38.729968101s ago: executing program 4 (id=21808): r0 = socket$inet6(0xa, 0x3, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000280)={0x6, 'veth0_macvtap\x00', {0x3}, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100009308000000ffffffff070000000605db947c"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000500000000edff000000a88e3eea8d7c5e07000000"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) close(r5) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) 1m38.467080698s ago: executing program 4 (id=21809): socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x40c4) epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x400002, 0x80000001, 0x4, 0x7a}, 0x0, &(0x7f0000000200)={0x3fc, 0x0, 0x0, 0x1, 0x200, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 1m37.532809812s ago: executing program 4 (id=21811): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 1m36.949655607s ago: executing program 4 (id=21812): unshare(0x6a040000) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) unshare(0x42000000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1m26.016608105s ago: executing program 36 (id=21799): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket(0x8, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket(0x2b, 0x80801, 0x1) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0) 1m24.854277255s ago: executing program 37 (id=21805): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xb0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6674}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x7a05, 0x1700) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000580)={'filter\x00', 0x0, [0x5, 0xfffffff7, 0x7e, 0x101, 0xc]}, &(0x7f0000000600)=0x54) 1m21.780606214s ago: executing program 38 (id=21812): unshare(0x6a040000) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) unshare(0x42000000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1m11.931667222s ago: executing program 8 (id=21915): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) 1m11.804898969s ago: executing program 8 (id=21917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffd, 0xffffffff, 0x7fff, 0x0, 0xba71, 0x80, 0x1, 0x5, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0xffffffee, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x51, 0x2, {0x35d, 0xfff, 0x1}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m11.286681407s ago: executing program 8 (id=21923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20004010) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005800500"], 0x80}}, 0x4) 1m10.742979742s ago: executing program 9 (id=21924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m8.031292861s ago: executing program 8 (id=21926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m7.841140607s ago: executing program 9 (id=21928): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1m7.533800203s ago: executing program 9 (id=21929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088f9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m7.381125491s ago: executing program 8 (id=21930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x2, 0x0, 0x5, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m7.233600788s ago: executing program 9 (id=21932): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000340)=0x7, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m6.978322818s ago: executing program 9 (id=21935): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00f90000853c30060000000000d6ecc9568b00000000019078ac1e0001ac1414aa05009078e00000e04500002000000000"], 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000d80)={0x0, 0x1039000, 0x800, 0xb0, 0xed75d9a3c528c222}, 0x20) getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000001280)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x4000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @empty=0xac14140a}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1m6.785284613s ago: executing program 8 (id=21936): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)='\r', 0x1}], 0x1, 0x0, 0x0, 0x88010}], 0x1, 0x20000010) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) 1m6.576155077s ago: executing program 9 (id=21937): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c8d0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0xfdef) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xfffffff7, 0x4) r4 = socket$inet6(0xa, 0x3, 0x12) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x1}) 51.703191021s ago: executing program 39 (id=21936): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)='\r', 0x1}], 0x1, 0x0, 0x0, 0x88010}], 0x1, 0x20000010) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) 51.378047183s ago: executing program 40 (id=21937): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c8d0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0xfdef) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xfffffff7, 0x4) r4 = socket$inet6(0xa, 0x3, 0x12) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x1}) 44.059436762s ago: executing program 6 (id=22040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 42.714053627s ago: executing program 6 (id=22044): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xfff, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x7, 0x5, 0x8, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x2, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xffffffff, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x40008001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x2, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x80, 0xc, 0x7, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x20002, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0xfffff2e9, 0x2, 0x42d2, 0x6, 0x5678f281, 0xfc, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x2, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe61, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x3, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x4, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0xb, 0x0, 0x9, 0x5, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000003, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4000804) 38.826393017s ago: executing program 6 (id=22050): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000000000000000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164001c0006fae533002351800800044000000056080081b6a6c51f0340000000b9083bdb690c87040ec9213c7e000240000000000900010900000000000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x48) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 38.563364491s ago: executing program 6 (id=22054): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0xd8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "704faa5e7be059e74ac09f2b6e2c5b55fd60ea749e8c275577d5e08ebf2ed723b5c6fbe29934cf82166c5a88b7fed33bf3896dbc207bcc66ae503f6d9da8e3c389d152cb331c05b693b4ddb2dc752a8872abe8b2f5c7fa055544625013f8b1fd121c857063a33aa5d0daf21be5c84a09abf5e24b792b5c5bf6f2e7958bb1509e34469247ea1e5758ce57f01e3eed922aa97c0d3157bc40d663c9e62a87363f01188d59b121cd7d16ea87cbd8a4f1811a972fad"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x100}}, 0x200508d4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0xfffe, 0x0, 0x8000, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) 38.350943941s ago: executing program 6 (id=22057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x48, 0x32, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0x240040c4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) listen(r0, 0x7) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0xfffffffc}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) 38.163979678s ago: executing program 6 (id=22058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000180)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 27.122077974s ago: executing program 3 (id=22132): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r5, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000340)=r6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @rand_addr=0x64010101, 0x0, 0x1, [@broadcast]}, 0x14) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 26.835526642s ago: executing program 3 (id=22135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 26.627212017s ago: executing program 3 (id=22137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000440)=""/222, 0x4000, 0x0, 0x8, 0x1}, 0x20) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 26.183638722s ago: executing program 3 (id=22139): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 24.602583623s ago: executing program 3 (id=22146): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) 23.655182328s ago: executing program 3 (id=22150): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000040)="76ea09000000", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x40}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 23.113264016s ago: executing program 41 (id=22058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000180)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 10.037847842s ago: executing program 2 (id=22219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x1}, 0x3}], 0x4000169, 0x40000142, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000019, 0x200000006c832, 0xffffffffffffffff, 0x1da98000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) close(0xffffffffffffffff) 8.522354197s ago: executing program 42 (id=22150): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000040)="76ea09000000", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x40}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "9595f429ae08a5654664601e3b70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0) 8.501738593s ago: executing program 5 (id=22227): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x96, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x60, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x18, 0x10, 0x7, 0x0, 0x3, {[@md5sig={0x13, 0x12, "d3df6e648319d1cc42dba2ddf395853d"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @remote, 0x8}, @timestamp={0x8, 0xa, 0x57c, 0x1}, @exp_fastopen={0xfe, 0x11, 0xf989, "fe0df31472a5b1eda37a74146d"}, @md5sig={0x13, 0x12, "00ab2e7baa5598bf75aae4632e6313d3"}]}}}}}}}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0xc8040) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000000c0)={0x2, 'geneve0\x00', {0xffffffff}, 0xa}) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) splice(r5, 0x0, r0, 0x0, 0x7ffff000, 0x6) recvfrom$phonet(r0, &(0x7f0000000200)=""/236, 0xec, 0x11001, &(0x7f0000000040)={0x23, 0xc, 0x8}, 0x10) 8.412633736s ago: executing program 2 (id=22228): r0 = socket(0x28, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13022cbd7000fbdbdf25010000000000000009410000004c00180000008662726f6164636173742d6c696e6b"], 0x68}}, 0x4000080) listen(r0, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x200440d4) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 7.439644834s ago: executing program 5 (id=22230): bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) socket$caif_seqpacket(0x25, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x60}}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x804) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x3}, {0x19}, {0x21}, {}]}}}}}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4048884) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.322863418s ago: executing program 2 (id=22231): unshare(0x20000400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8ae257a062cc3564) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x311}]}, 0x1c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0], 0x33) sendfile(r4, r1, 0x0, 0x10000) unshare(0x12040500) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000007}, 0x20008801) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB], 0xa0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 6.519981868s ago: executing program 2 (id=22232): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r4 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r4, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r2, 0x2, 0x1, 0x8000ff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 6.509364533s ago: executing program 1 (id=22233): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x18, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 6.355235672s ago: executing program 5 (id=22234): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x6b3c0fe, '\x00', 0x0, r4, 0x1, 0x0, 0x4}, 0x50) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0xb, 0x9}}}, 0x24}}, 0x20040054) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 5.546018756s ago: executing program 2 (id=22236): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd2d, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000f40)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x2}, @device_a, @broadcast, @from_mac=@device_b, {0x2, 0x8ed}, @device_b}, @random="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"}, 0x320) r7 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x48800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8000, 0x1a1, 0xd, 0xd, {{0xd, 0x4, 0x0, 0x14, 0x34, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @local, {[@lsrr={0x83, 0x1f, 0x11, [@local, @private=0xa010102, @broadcast, @empty, @private=0xa010102, @rand_addr=0x64010100, @remote]}]}}}}}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, &(0x7f0000000580)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r8, 0x29, 0x9, 0x2, 0x9, 0x2e, @mcast1, @private2, 0x80, 0x40, 0x2, 0x9}}) 4.573724978s ago: executing program 5 (id=22237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5e4717c082340b68, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_audit(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000010280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 4.32235094s ago: executing program 1 (id=22239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x1}, 0x3}], 0x4000169, 0x40000142, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000019, 0x200000006c832, 0xffffffffffffffff, 0x1da98000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) close(0xffffffffffffffff) 4.240299518s ago: executing program 5 (id=22240): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a00800000020008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x6, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 4.130279231s ago: executing program 2 (id=22241): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50003}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16, @ANYBLOB="24042dbd7000fcdbdf250200000008000a01050000002c002580050005000a0000000600040009000000050005000900000005000100ef00000005000500"], 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x40050) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) close(r4) 2.803157448s ago: executing program 0 (id=22242): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x409}, 0x20}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000580)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.495322241s ago: executing program 0 (id=22243): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9, 0xffff}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xf2}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6f}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket(0x38, 0x4, 0xd1a7904e) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x2a, "a211084912266798f75fa304ee75dad47b3fe2a2edab4bba803e9c40fe7798cd888e5723612a7c34d4f6"}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 2.274149743s ago: executing program 1 (id=22244): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x48051) epoll_create1(0x80000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000000) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x11, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.494665351s ago: executing program 0 (id=22245): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 1.285866677s ago: executing program 1 (id=22246): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[], 0x48}}, 0x24000004) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000007000000324900000000000001000000", @ANYRES32=0x1, @ANYBLOB="208be65d2fc69d7734cdfbc2", @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0xffff, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.129267967s ago: executing program 1 (id=22247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc120000004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 501.108933ms ago: executing program 0 (id=22248): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)='\r', 0x1}], 0x1, 0x0, 0x0, 0x88010}], 0x1, 0x20000010) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 381.295063ms ago: executing program 5 (id=22249): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x504) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 317.52313ms ago: executing program 0 (id=22250): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 41.719997ms ago: executing program 1 (id=22251): socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in6=@empty, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be0044112f"], 0xfdef) 0s ago: executing program 0 (id=22252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r1, 0x0, 0x0, 0xee) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r2 = socket$inet6(0xa, 0x80002, 0x0) listen(r2, 0xc98e) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) kernel console output (not intermixed with test programs): 085.205303][T22140] netlink: 'syz.2.21530': attribute type 8 has an invalid length. [ 1085.214103][T22140] __nla_validate_parse: 3 callbacks suppressed [ 1085.214122][T22140] netlink: 64 bytes leftover after parsing attributes in process `syz.2.21530'. [ 1085.230240][T22140] nbd: couldn't find a device at index 0 [ 1085.859568][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21533'. [ 1085.924377][T22147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.975449][T22150] lo speed is unknown, defaulting to 1000 [ 1086.229478][T22165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21541'. [ 1086.295571][T22150] lo speed is unknown, defaulting to 1000 [ 1086.327114][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21541'. [ 1086.523039][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21543'. [ 1086.877518][T22181] syzkaller1: entered promiscuous mode [ 1086.884114][T22181] syzkaller1: entered allmulticast mode [ 1086.902993][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21548'. [ 1086.959730][T22183] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 1087.001447][T22183] macvlan0: entered promiscuous mode [ 1087.006851][T22183] macvlan0: entered allmulticast mode [ 1087.014166][T22183] bond5: entered promiscuous mode [ 1087.039371][T22183] bridge9: entered promiscuous mode [ 1087.049556][T22183] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1087.060297][T22183] bond5: left promiscuous mode [ 1087.065113][T22183] bridge9: left promiscuous mode [ 1087.629482][T22201] lo speed is unknown, defaulting to 1000 [ 1087.806131][T22207] netlink: 88 bytes leftover after parsing attributes in process `syz.4.21555'. [ 1087.815654][T22207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21555'. [ 1087.916858][T22201] lo speed is unknown, defaulting to 1000 [ 1088.132992][T22217] sctp: [Deprecated]: syz.2.21557 (pid 22217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1088.132992][T22217] Use struct sctp_sack_info instead [ 1088.344511][T22227] lo speed is unknown, defaulting to 1000 [ 1088.588345][T22227] lo speed is unknown, defaulting to 1000 [ 1089.034565][T22248] lo: Caught tx_queue_len zero misconfig [ 1089.041126][T22248] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1089.149399][T22251] tipc: Resetting bearer [ 1089.393418][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.409969][ T36] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1089.419384][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.427849][ T36] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1089.437247][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.445949][ T36] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1089.454748][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.463414][ T36] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1089.477339][T22253] lo speed is unknown, defaulting to 1000 [ 1089.684179][T22253] lo speed is unknown, defaulting to 1000 [ 1089.840390][T22263] lo speed is unknown, defaulting to 1000 [ 1089.934886][T22265] geneve5: entered promiscuous mode [ 1089.942307][T19997] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.959581][T19997] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.982946][T19997] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.999963][T19997] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.047569][T22268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21573'. [ 1090.245942][T22263] lo speed is unknown, defaulting to 1000 [ 1090.596072][T22288] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1091.235237][T22310] team0: left allmulticast mode [ 1091.241861][T22310] bridge5: left allmulticast mode [ 1091.247658][T22310] bridge0: port 1(team0) entered disabled state [ 1091.267567][T22310] team0: Port device bridge5 removed [ 1091.281269][T22310] bond21: left allmulticast mode [ 1091.286399][T22310] bond21: left promiscuous mode [ 1091.309303][T22310] team0: Port device macvlan0 removed [ 1091.326353][T22310] bond22: (slave veth9): Releasing backup interface [ 1091.498098][T22317] lo speed is unknown, defaulting to 1000 [ 1091.906226][T22317] lo speed is unknown, defaulting to 1000 [ 1092.263166][T22340] netlink: 72 bytes leftover after parsing attributes in process `syz.3.21597'. [ 1092.892727][T22351] tipc: Enabled bearer , priority 0 [ 1092.925588][T22351] syzkaller0: entered promiscuous mode [ 1092.935967][T22351] syzkaller0: entered allmulticast mode [ 1093.029332][T22351] tipc: Resetting bearer [ 1093.068028][T22349] tipc: Resetting bearer [ 1093.138258][T22349] tipc: Disabling bearer [ 1093.309969][T22364] geneve8: entered promiscuous mode [ 1093.320359][ T1326] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.365667][ T1326] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.384545][ T1326] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.677452][T22373] team0: left promiscuous mode [ 1093.683199][T22373] veth0_macvtap: left promiscuous mode [ 1093.689116][T22373] dummy0: left promiscuous mode [ 1093.694555][T22373] team0: left allmulticast mode [ 1093.701006][T22373] veth0_macvtap: left allmulticast mode [ 1093.707497][T22373] dummy0: left allmulticast mode [ 1093.713893][T22373] batadv0: left promiscuous mode [ 1093.719615][T22373] wg1: left promiscuous mode [ 1093.724500][T22373] wg1: left allmulticast mode [ 1093.735923][T22373] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1093.743764][T22373] bond1: left allmulticast mode [ 1093.748946][T22373] bridge1: left promiscuous mode [ 1093.753986][T22373] bridge1: left allmulticast mode [ 1093.761476][T22373] tipc: Resetting bearer [ 1093.768927][T22373] syzkaller0: left promiscuous mode [ 1093.774163][T22373] syzkaller0: left allmulticast mode [ 1093.786350][T22373] bond6: left promiscuous mode [ 1093.791541][T22373] bond6: left allmulticast mode [ 1093.797008][T22373] vlan2: left promiscuous mode [ 1093.802060][T22373] geneve1: left promiscuous mode [ 1093.807278][T22373] vlan2: left allmulticast mode [ 1093.812456][T22373] geneve1: left allmulticast mode [ 1093.818299][T22373] macvlan4: left promiscuous mode [ 1093.823554][T22373] macvlan4: left allmulticast mode [ 1093.829873][T22373] macvlan7: left promiscuous mode [ 1093.835142][T22373] ip6gre1: left promiscuous mode [ 1093.840257][T22373] ip6gre1: left allmulticast mode [ 1093.845505][T22373] vxcan1: left allmulticast mode [ 1093.851274][T22373] vlan4: left allmulticast mode [ 1093.856164][T22373] bridge_slave_0: left allmulticast mode [ 1093.862570][T22373] geneve3: left promiscuous mode [ 1093.867709][T22373] gretap2: left promiscuous mode [ 1093.873201][T22373] geneve4: left promiscuous mode [ 1093.878268][T22373] geneve4: left allmulticast mode [ 1093.885295][T22373] gtp3: left promiscuous mode [ 1093.890056][T22373] gtp3: left allmulticast mode [ 1093.896298][T22373] bond14: left allmulticast mode [ 1093.902181][T22373] veth13: left promiscuous mode [ 1093.908633][T22373] geneve5: left promiscuous mode [ 1093.920584][ T3461] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.947162][ T3461] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.957046][T22375] lo speed is unknown, defaulting to 1000 [ 1093.963927][ T3461] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.979400][ T3461] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.046043][T22379] syzkaller0: entered promiscuous mode [ 1094.051938][T22379] syzkaller0: entered allmulticast mode [ 1094.183110][T22375] lo speed is unknown, defaulting to 1000 [ 1094.915367][T22364] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.954190][T22364] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.013244][T22364] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.066393][ T3461] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.085201][ T3461] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.102280][ T3518] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.117749][ T3518] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.212740][T22400] lo speed is unknown, defaulting to 1000 [ 1095.310199][T22405] syzkaller0: entered promiscuous mode [ 1095.315855][T22405] syzkaller0: entered allmulticast mode [ 1095.423228][T22400] lo speed is unknown, defaulting to 1000 [ 1095.663385][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21623'. [ 1095.819213][ T4281] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1096.020424][T22433] lo speed is unknown, defaulting to 1000 [ 1096.201670][T22435] tipc: Enabling of bearer rejected, already enabled [ 1096.220444][T22435] syzkaller0: entered promiscuous mode [ 1096.225974][T22435] syzkaller0: entered allmulticast mode [ 1096.417730][T22433] lo speed is unknown, defaulting to 1000 [ 1096.720923][T22451] tipc: Enabled bearer , priority 0 [ 1096.733819][T22451] syzkaller0: entered promiscuous mode [ 1096.745632][T22451] syzkaller0: entered allmulticast mode [ 1096.777683][T22451] tipc: Resetting bearer [ 1096.839894][T22450] tipc: Resetting bearer [ 1096.869740][T22450] tipc: Disabling bearer [ 1097.329105][T22466] netlink: 'syz.4.21642': attribute type 3 has an invalid length. [ 1097.337510][T22466] netlink: 'syz.4.21642': attribute type 3 has an invalid length. [ 1097.378810][T22468] lo speed is unknown, defaulting to 1000 [ 1097.566588][T22475] netlink: 'syz.4.21645': attribute type 12 has an invalid length. [ 1097.588945][T22468] lo speed is unknown, defaulting to 1000 [ 1097.885396][T22483] netlink: 'syz.1.21649': attribute type 1 has an invalid length. [ 1097.933186][T22483] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1097.950747][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21649'. [ 1097.980909][T22483] bond6 (unregistering): (slave veth7): Releasing active interface [ 1097.995471][T22483] bond6 (unregistering): Released all slaves [ 1098.080729][T22489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21650'. [ 1098.122924][ T5833] block nbd7: Receive control failed (result -1) [ 1099.418818][ T4281] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1099.604540][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21655'. [ 1099.686312][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1099.699390][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1099.718851][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1099.765529][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1099.771921][T22513] netlink: 63 bytes leftover after parsing attributes in process `syz.2.21655'. [ 1099.791795][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1100.699530][T22501] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1100.734973][T22506] lo speed is unknown, defaulting to 1000 [ 1100.950051][T22526] syzkaller0: entered promiscuous mode [ 1100.955736][T22526] syzkaller0: entered allmulticast mode [ 1101.232364][T22531] netlink: 'syz.4.21661': attribute type 1 has an invalid length. [ 1101.460499][T22533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1101.508239][T22506] lo speed is unknown, defaulting to 1000 [ 1101.613344][T22531] veth21: entered promiscuous mode [ 1101.660323][T22531] bond6: (slave veth21): Enslaving as a backup interface with a down link [ 1101.733498][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21663'. [ 1101.892066][T22544] netlink: 88 bytes leftover after parsing attributes in process `syz.4.21664'. [ 1101.904115][ T4281] Bluetooth: hci5: command tx timeout [ 1101.938258][T22544] gre0: left promiscuous mode [ 1101.955935][T22544] gre0: left allmulticast mode [ 1101.969321][T22544] 0ªî{X¹¦: left allmulticast mode [ 1101.974621][T22544] erspan0: left promiscuous mode [ 1102.010112][T22544] team0: left promiscuous mode [ 1102.028883][T22544] team_slave_0: left promiscuous mode [ 1102.045081][T22544] team_slave_1: left promiscuous mode [ 1102.068873][T22544] team0: left allmulticast mode [ 1102.078479][T22544] team_slave_0: left allmulticast mode [ 1102.089257][T22544] team_slave_1: left allmulticast mode [ 1102.095336][T22544] wg1: left promiscuous mode [ 1102.121230][T22544] geneve2: left promiscuous mode [ 1102.128157][T22544] geneve4: left promiscuous mode [ 1102.134516][T22544] veth2: left promiscuous mode [ 1102.140783][T22544] gtp1: left promiscuous mode [ 1102.145850][T22544] gtp1: left allmulticast mode [ 1102.151550][T22544] vlan2: left promiscuous mode [ 1102.166796][T22544] bond0: left promiscuous mode [ 1102.171972][T22544] bond_slave_0: left promiscuous mode [ 1102.188829][T22544] bridge0: left promiscuous mode [ 1102.194584][T22544] vlan2: left allmulticast mode [ 1102.229332][T22544] bond0: left allmulticast mode [ 1102.234969][T22544] bond_slave_0: left allmulticast mode [ 1102.259046][T22544] bridge0: left allmulticast mode [ 1102.264890][T22544] macvlan6: left promiscuous mode [ 1102.301398][T22544] geneve5: left promiscuous mode [ 1102.306454][T22544] geneve5: left allmulticast mode [ 1102.314985][T22544] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1102.336972][T22544] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1102.371616][T22544] ip6gre1: left promiscuous mode [ 1102.381246][T22544] ip6gre1: left allmulticast mode [ 1102.410188][T22544] bond2: left promiscuous mode [ 1102.426604][T22544] bond2: left allmulticast mode [ 1102.449989][T22544] bond3: left promiscuous mode [ 1102.459467][T22544] bond3: left allmulticast mode [ 1102.510546][T22544] bond4: left promiscuous mode [ 1102.517422][T22544] wireguard0: left promiscuous mode [ 1102.669068][T22544] veth21: left promiscuous mode [ 1102.716697][T22549] syzkaller0: entered promiscuous mode [ 1102.728920][T22549] syzkaller0: entered allmulticast mode [ 1102.890035][T22563] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1102.897826][T22563] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1102.995941][T22506] chnl_net:caif_netlink_parms(): no params data found [ 1103.150267][T22571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21668'. [ 1103.383249][T22506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.406074][T22506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.413563][T22506] bridge_slave_0: entered allmulticast mode [ 1103.425475][T22506] bridge_slave_0: entered promiscuous mode [ 1103.442975][T22580] syzkaller0: entered promiscuous mode [ 1103.450488][T22580] syzkaller0: entered allmulticast mode [ 1103.461973][T22506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.473491][T22506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.482869][T22506] bridge_slave_1: entered allmulticast mode [ 1103.497590][T22506] bridge_slave_1: entered promiscuous mode [ 1103.736257][T22506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.772171][T22506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.789193][T22588] syzkaller1: entered promiscuous mode [ 1103.794908][T22588] syzkaller1: entered allmulticast mode [ 1103.880750][T22594] lec0: mtu less than device minimum [ 1103.889330][T22594] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 1103.904057][T22506] team0: Port device team_slave_0 added [ 1103.915533][T22581] lec:lec_atm_close: lec0: Shut down! [ 1103.918102][T22506] team0: Port device team_slave_1 added [ 1103.976823][T22506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.985967][T22506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.990624][ T4281] Bluetooth: hci5: command tx timeout [ 1104.055596][T22506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.079793][T22506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.086800][T22506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.113376][T22506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.135971][ T30] audit: type=1804 audit(1767669287.965:15): pid=22600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.21675" name="/newroot/1434/cgroup.controllers" dev="tmpfs" ino=7292 res=1 errno=0 [ 1104.175158][ T30] audit: type=1800 audit(1767669287.965:16): pid=22600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21675" name="cgroup.controllers" dev="tmpfs" ino=7292 res=0 errno=0 [ 1104.241957][ T30] audit: type=1800 audit(1767669287.975:17): pid=22600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21675" name="cgroup.controllers" dev="tmpfs" ino=7292 res=0 errno=0 [ 1104.282414][T22506] hsr_slave_0: entered promiscuous mode [ 1104.295998][T22506] hsr_slave_1: entered promiscuous mode [ 1104.310030][T22506] debugfs: 'hsr0' already exists in 'hsr' [ 1104.336240][T22506] Cannot create hsr debugfs directory [ 1104.642843][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21681'. [ 1104.734383][T22614] bridge12: port 1(ip6gretap6) entered blocking state [ 1104.746267][T22614] bridge12: port 1(ip6gretap6) entered disabled state [ 1104.757963][T22614] ip6gretap6: entered allmulticast mode [ 1104.771973][T22614] ip6gretap6: entered promiscuous mode [ 1104.849329][T22617] bridge12: port 2(veth15) entered blocking state [ 1104.856681][T22617] bridge12: port 2(veth15) entered disabled state [ 1104.870436][T22617] veth15: entered allmulticast mode [ 1104.880508][T22617] veth15: entered promiscuous mode [ 1104.890601][T22617] bridge12: port 2(veth15) entered blocking state [ 1104.897564][T22617] bridge12: port 2(veth15) entered forwarding state [ 1104.982269][ T3518] bridge12: port 2(veth15) entered disabled state [ 1105.136031][T22506] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1105.169726][T22506] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1105.202303][T22506] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1105.250496][T22506] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1105.282934][T22631] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1105.329090][T22635] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 1105.433905][T22635] mac80211_hwsim hwsim49 wlan1: left allmulticast mode [ 1105.641555][T22506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.686542][T22506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.738950][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.746132][ T7709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.781118][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.788345][ T7709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.962817][T22660] lo speed is unknown, defaulting to 1000 [ 1106.059816][T22663] IPVS: Scheduler module ip_vs_sip not found [ 1106.075590][ T4281] Bluetooth: hci5: command tx timeout [ 1106.090434][T22665] IPVS: length: 8 != 418683829520 [ 1106.210341][T22668] netlink: 'syz.3.21697': attribute type 3 has an invalid length. [ 1106.252295][T22668] netlink: 104 bytes leftover after parsing attributes in process `syz.3.21697'. [ 1106.485281][T22673] tipc: Enabled bearer , priority 0 [ 1106.509139][T22676] tipc: Enabling of bearer rejected, already enabled [ 1106.520616][T22673] syzkaller0: entered promiscuous mode [ 1106.528536][T22673] syzkaller0: entered allmulticast mode [ 1106.587070][T22660] lo speed is unknown, defaulting to 1000 [ 1106.605862][T22673] tipc: Resetting bearer [ 1106.654258][T22671] tipc: Resetting bearer [ 1106.695896][T22671] tipc: Disabling bearer [ 1106.754506][T22506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.913453][T22685] dvmrp8: entered allmulticast mode [ 1106.988336][T22687] syzkaller0: entered promiscuous mode [ 1106.997908][T22687] syzkaller0: entered allmulticast mode [ 1108.149521][ T4281] Bluetooth: hci5: command tx timeout [ 1110.229708][ T4281] Bluetooth: hci5: command tx timeout [ 1110.770797][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21708'. [ 1113.335250][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21709'. [ 1113.351274][T22506] veth0_vlan: entered promiscuous mode [ 1113.409567][T22727] ip6gretap0: entered promiscuous mode [ 1113.429651][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21709'. [ 1113.440592][T22506] veth1_vlan: entered promiscuous mode [ 1113.456509][T22724] bond23 (unregistering): Released all slaves [ 1113.564800][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21711'. [ 1113.605943][T22506] veth0_macvtap: entered promiscuous mode [ 1113.626342][T22506] veth1_macvtap: entered promiscuous mode [ 1113.676816][T22506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.701851][T22506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.721082][T20009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.732484][T20009] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.744510][T20009] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.759742][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21713'. [ 1113.789809][T20009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.811082][T22742] IPVS: Unknown mcast interface: vlan1 [ 1114.027197][T22754] lo speed is unknown, defaulting to 1000 [ 1114.057550][T19997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.099247][T19997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.149661][ T9260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.157524][ T9260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.530604][T22754] lo speed is unknown, defaulting to 1000 [ 1114.603306][T22765] netlink: 156 bytes leftover after parsing attributes in process `syz.6.21719'. [ 1114.625518][T22764] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.747707][T22764] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.842133][T22764] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.913372][T22764] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.070035][ T9260] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.105839][ T148] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.114488][ T148] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.125184][ T148] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.227596][T22775] syzkaller0: entered promiscuous mode [ 1115.234135][T22775] syzkaller0: entered allmulticast mode [ 1116.040118][T22785] lo speed is unknown, defaulting to 1000 [ 1116.096600][T22783] netlink: 'syz.1.21726': attribute type 4 has an invalid length. [ 1116.260480][T22785] lo speed is unknown, defaulting to 1000 [ 1116.344566][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21728'. [ 1116.556715][ T30] audit: type=1800 audit(1767669300.385:18): pid=22797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.21730" name="memory.events" dev="tmpfs" ino=22389 res=0 errno=0 [ 1117.112015][T22805] lo speed is unknown, defaulting to 1000 [ 1117.240006][T22805] lo speed is unknown, defaulting to 1000 [ 1117.418228][T22810] lo speed is unknown, defaulting to 1000 [ 1117.421753][T22813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21734'. [ 1117.606397][T22810] lo speed is unknown, defaulting to 1000 [ 1118.516052][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21742'. [ 1118.528218][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21742'. [ 1118.734521][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21742'. [ 1118.735713][T19997] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.759491][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21742'. [ 1118.839155][T19997] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.849271][T19997] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.857697][T19997] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1119.811028][T22857] pimreg: entered allmulticast mode [ 1119.823096][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21746'. [ 1119.929340][T22862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1120.687527][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21749'. [ 1120.701805][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21749'. [ 1120.711363][T22866] netlink: 'syz.1.21749': attribute type 1 has an invalid length. [ 1120.720888][T22866] netlink: 10 bytes leftover after parsing attributes in process `syz.1.21749'. [ 1120.731842][T22866] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1121.102641][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1121.114089][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1121.123835][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1121.132167][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1121.140783][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1121.220301][T22879] lo speed is unknown, defaulting to 1000 [ 1121.300091][T22885] syzkaller0: entered promiscuous mode [ 1121.308634][T22885] syzkaller0: entered allmulticast mode [ 1121.373438][T22885] tipc: Started in network mode [ 1121.378367][T22885] tipc: Node identity 5685a6831ca7, cluster identity 4711 [ 1121.394175][T22885] tipc: Enabled bearer , priority 0 [ 1121.406874][T22884] tipc: Resetting bearer [ 1121.436095][T22884] tipc: Disabling bearer [ 1121.486935][T22879] lo speed is unknown, defaulting to 1000 [ 1121.614921][T22891] tipc: Enabled bearer , priority 0 [ 1121.660164][T22891] syzkaller0: entered promiscuous mode [ 1121.665666][T22891] syzkaller0: entered allmulticast mode [ 1121.736920][T22891] tipc: Resetting bearer [ 1121.779301][T22890] tipc: Resetting bearer [ 1121.836532][T22890] tipc: Disabling bearer [ 1121.877859][T22879] chnl_net:caif_netlink_parms(): no params data found [ 1122.056693][T22898] syzkaller0: entered promiscuous mode [ 1122.079205][T22898] syzkaller0: entered allmulticast mode [ 1122.148105][T22879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.156481][T22879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.166758][T22879] bridge_slave_0: entered allmulticast mode [ 1122.180576][T22879] bridge_slave_0: entered promiscuous mode [ 1122.225550][T22879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.233864][T22879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.242119][T22879] bridge_slave_1: entered allmulticast mode [ 1122.251438][T22879] bridge_slave_1: entered promiscuous mode [ 1122.358291][T22879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.371723][T22913] netlink: 'syz.1.21763': attribute type 1 has an invalid length. [ 1122.433322][T22913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1122.443395][T22879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.475884][T22917] ipvlan0: entered allmulticast mode [ 1122.482910][T22917] bond6: entered allmulticast mode [ 1122.610749][T22913] bond6: (slave gretap5): making interface the new active one [ 1122.635324][T22913] gretap5: entered allmulticast mode [ 1122.658136][T22913] bond6: (slave gretap5): Enslaving as an active interface with an up link [ 1122.712899][T22879] team0: Port device team_slave_0 added [ 1122.752371][T22879] team0: Port device team_slave_1 added [ 1122.761243][T22920] syzkaller0: entered promiscuous mode [ 1122.766855][T22920] syzkaller0: entered allmulticast mode [ 1122.872528][T22879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.884322][T22879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.944281][T22879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.970988][T22879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.987025][T22879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.044239][T22879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.067897][T22927] syzkaller0: entered promiscuous mode [ 1123.078866][T22927] syzkaller0: entered allmulticast mode [ 1123.189098][ T5833] Bluetooth: hci6: command tx timeout [ 1123.300588][T22879] hsr_slave_0: entered promiscuous mode [ 1123.310484][T22879] hsr_slave_1: entered promiscuous mode [ 1123.327499][T22879] debugfs: 'hsr0' already exists in 'hsr' [ 1123.338879][T22879] Cannot create hsr debugfs directory [ 1123.454490][T22931] netlink: 52 bytes leftover after parsing attributes in process `syz.6.21767'. [ 1123.471944][T22931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.481235][T22931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.699656][T22940] netlink: 2 bytes leftover after parsing attributes in process `syz.4.21771'. [ 1123.754447][T22942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21770'. [ 1123.899278][T22879] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1123.913969][T22879] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1123.951439][T22879] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1123.964825][T22946] tipc: Resetting bearer [ 1123.972398][T22879] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1124.205092][T22957] lo speed is unknown, defaulting to 1000 [ 1124.284888][T22879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.343926][T22879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.385557][T19997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.392792][T19997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.504824][T19997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.512121][T19997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.552194][T19997] tipc: Resetting bearer [ 1124.640509][T22957] lo speed is unknown, defaulting to 1000 [ 1124.994677][T22962] tipc: Enabled bearer , priority 0 [ 1125.016517][T22962] syzkaller0: entered promiscuous mode [ 1125.034322][T22962] syzkaller0: entered allmulticast mode [ 1125.121080][T22962] tipc: Resetting bearer [ 1125.148973][T22961] tipc: Resetting bearer [ 1125.212913][T22961] tipc: Disabling bearer [ 1125.272613][ T5833] Bluetooth: hci6: command tx timeout [ 1125.320963][T22879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.823987][T22979] syzkaller0: entered promiscuous mode [ 1125.830243][T22979] syzkaller0: entered allmulticast mode [ 1126.720872][T22990] netlink: 'syz.6.21782': attribute type 1 has an invalid length. [ 1127.349242][ T5833] Bluetooth: hci6: command tx timeout [ 1129.364098][ T4281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1129.412981][ T4281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1129.433873][ T4281] Bluetooth: hci6: command tx timeout [ 1129.435032][T22997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1129.472450][T22997] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1129.495063][T22997] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1129.876657][T22995] lo speed is unknown, defaulting to 1000 [ 1129.934025][T22879] veth0_vlan: entered promiscuous mode [ 1129.972714][T22879] veth1_vlan: entered promiscuous mode [ 1130.032634][T23006] tipc: Enabled bearer , priority 0 [ 1130.053874][T23006] syzkaller0: entered promiscuous mode [ 1130.061505][T23006] syzkaller0: entered allmulticast mode [ 1130.132273][T23006] tipc: Resetting bearer [ 1130.147779][T22879] veth0_macvtap: entered promiscuous mode [ 1130.179417][T23004] tipc: Resetting bearer [ 1130.216957][T23004] tipc: Disabling bearer [ 1130.261483][T22879] veth1_macvtap: entered promiscuous mode [ 1130.332318][T22995] lo speed is unknown, defaulting to 1000 [ 1130.343836][T22879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.401820][T22879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.465702][ T7709] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.487667][ T7709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.529024][ T7709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.567887][ T7709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.963178][T20069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.991067][T20069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.075188][T22995] chnl_net:caif_netlink_parms(): no params data found [ 1131.125470][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.144448][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.429822][T22995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.445190][T23020] lec:lec_atm_close: lec0: Shut down! [ 1131.451304][T22995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.469253][T22995] bridge_slave_0: entered allmulticast mode [ 1131.485689][T22995] bridge_slave_0: entered promiscuous mode [ 1131.500387][T23031] syzkaller0: entered promiscuous mode [ 1131.509511][T23031] syzkaller0: entered allmulticast mode [ 1131.559431][T22995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.570784][T22995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.579379][T22997] Bluetooth: hci7: command tx timeout [ 1131.588817][T22995] bridge_slave_1: entered allmulticast mode [ 1131.612409][T22995] bridge_slave_1: entered promiscuous mode [ 1131.647097][T23032] tipc: Enabled bearer , priority 0 [ 1131.717305][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21793'. [ 1131.740966][T23029] tipc: Resetting bearer [ 1131.791250][T23029] tipc: Disabling bearer [ 1131.824604][T23037] team0: entered promiscuous mode [ 1131.831799][T23037] team_slave_0: entered promiscuous mode [ 1131.838120][T23037] team_slave_1: entered promiscuous mode [ 1131.852250][T23037] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1131.863484][T23037] team0: left promiscuous mode [ 1131.871694][T23037] team_slave_0: left promiscuous mode [ 1131.878127][T23037] team_slave_1: left promiscuous mode [ 1132.003522][T22995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.041340][T22995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.206370][T22995] team0: Port device team_slave_0 added [ 1132.230431][T22995] team0: Port device team_slave_1 added [ 1132.281984][T23046] netlink: 'syz.7.21796': attribute type 1 has an invalid length. [ 1132.429805][T22995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.468601][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.519089][T22995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.575535][T23050] gretap1: entered promiscuous mode [ 1132.611513][T22995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.621838][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.649828][T22995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.870841][T23066] netlink: 'syz.4.21801': attribute type 9 has an invalid length. [ 1132.904423][T22995] hsr_slave_0: entered promiscuous mode [ 1132.910562][T23066] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.21801'. [ 1132.911711][T22995] hsr_slave_1: entered promiscuous mode [ 1132.926874][T22995] debugfs: 'hsr0' already exists in 'hsr' [ 1132.933093][T22995] Cannot create hsr debugfs directory [ 1132.973286][T23063] lo speed is unknown, defaulting to 1000 [ 1133.658754][T22997] Bluetooth: hci7: command tx timeout [ 1133.687360][T23063] lo speed is unknown, defaulting to 1000 [ 1133.768891][T22995] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1133.782673][T22995] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1133.861181][T22995] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1133.885006][T23078] tipc: Resetting bearer [ 1133.899080][T22995] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1134.104378][T23088] lo speed is unknown, defaulting to 1000 [ 1134.262443][T22995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.314588][T22995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.334288][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.341546][ T7709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.381915][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.389299][ T7709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.791944][T23088] lo speed is unknown, defaulting to 1000 [ 1134.999040][T22995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.308954][T23103] block nbd8: server does not support multiple connections per device. [ 1135.317472][T23103] block nbd8: shutting down sockets [ 1135.440491][T22995] veth0_vlan: entered promiscuous mode [ 1135.474947][T22995] veth1_vlan: entered promiscuous mode [ 1135.539482][T22995] veth0_macvtap: entered promiscuous mode [ 1135.569588][T22995] veth1_macvtap: entered promiscuous mode [ 1135.615523][T22995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.652000][T22995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.686020][ T9260] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.697409][ T9260] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.708342][ T9260] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.730039][ T9260] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.739419][T22997] Bluetooth: hci7: command tx timeout [ 1135.917692][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.938851][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.994282][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.002319][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.466146][T23122] lo speed is unknown, defaulting to 1000 [ 1136.727879][T23122] lo speed is unknown, defaulting to 1000 [ 1137.130754][T23128] lo speed is unknown, defaulting to 1000 [ 1137.331812][T23134] syzkaller0: entered promiscuous mode [ 1137.337336][T23134] syzkaller0: entered allmulticast mode [ 1137.512704][T23128] lo speed is unknown, defaulting to 1000 [ 1137.521899][T23129] lo speed is unknown, defaulting to 1000 [ 1137.611868][T23140] bond_slave_0: entered promiscuous mode [ 1137.618197][T23140] bond_slave_1: entered promiscuous mode [ 1137.624893][T23140] vlan2: entered promiscuous mode [ 1137.631116][T23140] bond0: entered promiscuous mode [ 1137.818536][ T5833] Bluetooth: hci7: command tx timeout [ 1137.847318][T23129] lo speed is unknown, defaulting to 1000 [ 1137.894039][T23145] syzkaller0: entered promiscuous mode [ 1137.901773][T23145] syzkaller0: entered allmulticast mode [ 1138.012314][T23147] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 1138.261029][T23150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21820'. [ 1138.277301][ T50] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.277400][T23150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21820'. [ 1138.289426][ T50] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.311732][ T50] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.322236][ T50] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.372645][T23152] netlink: 52 bytes leftover after parsing attributes in process `syz.8.21821'. [ 1138.384632][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.392082][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.409128][T23152] netlink: 76 bytes leftover after parsing attributes in process `syz.8.21821'. [ 1138.419043][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.426252][T23152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.433922][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.441128][T23152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.451286][T23152] netlink: 52 bytes leftover after parsing attributes in process `syz.8.21821'. [ 1138.461736][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.468982][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.524624][T23154] xt_hashlimit: size too large, truncated to 1048576 [ 1139.071319][T23163] syzkaller0: entered promiscuous mode [ 1139.076909][T23163] syzkaller0: entered allmulticast mode [ 1139.102517][T23163] tipc: Enabled bearer , priority 0 [ 1139.111177][T23162] tipc: Resetting bearer [ 1139.132169][T23162] tipc: Disabling bearer [ 1139.215771][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21826'. [ 1139.247457][T23165] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21826'. [ 1139.258697][T23165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1139.275067][T23165] vlan2: entered promiscuous mode [ 1139.280272][T23165] bond1: entered promiscuous mode [ 1141.580560][T23170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.587759][T23170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.595337][T23170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.602857][T23170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.623897][T23170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1141.650876][T23172] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 1141.663421][T23169] lo speed is unknown, defaulting to 1000 [ 1141.813350][T23176] bond_slave_0: entered promiscuous mode [ 1141.819409][T23176] bond_slave_1: entered promiscuous mode [ 1141.829463][T23176] vlan2: entered promiscuous mode [ 1141.834547][T23176] bond0: entered promiscuous mode [ 1141.933369][T23169] lo speed is unknown, defaulting to 1000 [ 1142.213608][T23186] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21832'. [ 1142.229494][T23186] netlink: 'syz.8.21832': attribute type 3 has an invalid length. [ 1143.146479][T23198] lo speed is unknown, defaulting to 1000 [ 1143.401556][T23198] lo speed is unknown, defaulting to 1000 [ 1143.611425][T23209] vlan2: entered promiscuous mode [ 1143.617925][T23209] vlan2: entered allmulticast mode [ 1143.625622][T23209] hsr_slave_1: entered allmulticast mode [ 1143.681643][T23209] lo speed is unknown, defaulting to 1000 [ 1143.921078][T23209] lo speed is unknown, defaulting to 1000 [ 1144.954962][T23220] nbd: nbd6 already in use [ 1144.964768][T23220] block nbd6: NBD_DISCONNECT [ 1144.970466][T23220] block nbd6: Send disconnect failed -32 [ 1144.981319][T23220] block nbd6: shutting down sockets [ 1145.089517][T23224] syzkaller0: entered promiscuous mode [ 1145.095036][T23224] syzkaller0: entered allmulticast mode [ 1145.471482][T23234] NFSD: Failed to start, no listeners configured. [ 1145.805567][T23248] netlink: 24 bytes leftover after parsing attributes in process `syz.8.21851'. [ 1145.945219][T23252] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21853'. [ 1146.004407][T23257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21853'. [ 1146.021298][T23257] nbd: device at index 64 is going down [ 1146.036855][T23259] tipc: Started in network mode [ 1146.042041][T23259] tipc: Node identity 166c06a43a9, cluster identity 4711 [ 1146.049635][T23259] tipc: Enabled bearer , priority 0 [ 1146.064634][T23259] syzkaller0: entered promiscuous mode [ 1146.071289][T23259] syzkaller0: entered allmulticast mode [ 1146.133037][T23259] tipc: Resetting bearer [ 1146.143372][T23258] tipc: Resetting bearer [ 1146.175865][T23258] tipc: Disabling bearer [ 1146.224429][T23261] lo speed is unknown, defaulting to 1000 [ 1146.443794][T23261] lo speed is unknown, defaulting to 1000 [ 1146.698142][T23271] lo speed is unknown, defaulting to 1000 [ 1146.752212][T23277] tipc: Enabled bearer , priority 0 [ 1146.761794][T23277] syzkaller0: entered promiscuous mode [ 1146.767438][T23277] syzkaller0: entered allmulticast mode [ 1146.798989][T23277] tipc: Resetting bearer [ 1146.808664][T23275] tipc: Resetting bearer [ 1146.830527][T23275] tipc: Disabling bearer [ 1146.875100][T23271] lo speed is unknown, defaulting to 1000 [ 1147.054950][T23282] NFSD: Failed to start, no listeners configured. [ 1147.964437][T23296] syzkaller0: entered promiscuous mode [ 1147.970854][T23296] syzkaller0: entered allmulticast mode [ 1148.040817][T22997] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1148.054811][T22997] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1148.065350][T22997] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1148.073696][T22997] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1148.081654][T22997] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1148.143717][T23299] lo speed is unknown, defaulting to 1000 [ 1148.283052][T23303] syzkaller0: entered promiscuous mode [ 1148.302421][T23303] syzkaller0: entered allmulticast mode [ 1148.537550][T23299] lo speed is unknown, defaulting to 1000 [ 1148.770985][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21871'. [ 1148.797172][T23299] chnl_net:caif_netlink_parms(): no params data found [ 1148.999269][T23299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.006531][T23299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.014345][T23299] bridge_slave_0: entered allmulticast mode [ 1149.033500][T23299] bridge_slave_0: entered promiscuous mode [ 1149.049861][T23320] tipc: Enabled bearer , priority 0 [ 1149.063608][T23320] tipc: Resetting bearer [ 1149.079011][T23299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.086242][T23299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.096737][T23299] bridge_slave_1: entered allmulticast mode [ 1149.104875][T23299] bridge_slave_1: entered promiscuous mode [ 1149.149401][T23319] tipc: Disabling bearer [ 1149.246195][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1149.262541][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1149.263854][T23323] syzkaller0: entered promiscuous mode [ 1149.275486][T23323] syzkaller0: entered allmulticast mode [ 1149.275528][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1149.287433][T23299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.307670][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1149.313000][T23299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.330060][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1149.390103][T23299] team0: Port device team_slave_0 added [ 1149.399957][T23299] team0: Port device team_slave_1 added [ 1149.449810][T23299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.456897][T23299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.498662][T23299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.525375][T23299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.538999][T23299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.568674][T23299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.592075][T23324] lo speed is unknown, defaulting to 1000 [ 1149.709617][T23299] hsr_slave_0: entered promiscuous mode [ 1149.716568][T23299] hsr_slave_1: entered promiscuous mode [ 1149.729626][T23299] debugfs: 'hsr0' already exists in 'hsr' [ 1149.735480][T23299] Cannot create hsr debugfs directory [ 1149.748902][T23331] tipc: Enabled bearer , priority 0 [ 1149.762042][T23332] syzkaller0: entered promiscuous mode [ 1149.771299][T23332] syzkaller0: entered allmulticast mode [ 1149.893198][T23324] lo speed is unknown, defaulting to 1000 [ 1149.903001][T23331] tipc: Resetting bearer [ 1149.929910][T23330] tipc: Resetting bearer [ 1149.951333][T23330] tipc: Disabling bearer [ 1150.139919][ T5833] Bluetooth: hci8: command tx timeout [ 1150.170949][T23338] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21878'. [ 1150.827992][T23324] chnl_net:caif_netlink_parms(): no params data found [ 1150.911060][T23299] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1150.950103][T23299] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1150.982061][T23299] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1151.014910][T23353] siw: device registration error -23 [ 1151.017987][T23299] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1151.038971][T23349] tipc: Enabled bearer , priority 0 [ 1151.082910][T23349] syzkaller0: entered promiscuous mode [ 1151.089165][T23349] syzkaller0: entered allmulticast mode [ 1151.103193][T23324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.111814][T23324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.119471][T23324] bridge_slave_0: entered allmulticast mode [ 1151.126980][T23324] bridge_slave_0: entered promiscuous mode [ 1151.153510][T23324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.162681][T23324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.170954][T23324] bridge_slave_1: entered allmulticast mode [ 1151.179061][T23324] bridge_slave_1: entered promiscuous mode [ 1151.214035][T23349] tipc: Resetting bearer [ 1151.234763][T23348] tipc: Resetting bearer [ 1151.262875][T23348] tipc: Disabling bearer [ 1151.280086][T23324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.296847][T23324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.353805][T23353] tipc: Resetting bearer [ 1151.393561][T23324] team0: Port device team_slave_0 added [ 1151.413512][T23324] team0: Port device team_slave_1 added [ 1151.419442][ T5833] Bluetooth: hci9: command tx timeout [ 1151.446256][T23364] tipc: Enabled bearer , priority 0 [ 1151.467163][T23364] syzkaller0: entered promiscuous mode [ 1151.473373][T23364] syzkaller0: entered allmulticast mode [ 1151.501666][T23324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.510424][T23324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.537845][T23324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.558262][T23324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.565371][T23324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.592551][T23324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.609554][T23365] tipc: Resetting bearer [ 1151.634932][T23363] tipc: Resetting bearer [ 1151.657823][T23363] tipc: Disabling bearer [ 1151.736907][T23324] hsr_slave_0: entered promiscuous mode [ 1151.752770][T23324] hsr_slave_1: entered promiscuous mode [ 1151.760389][T23324] debugfs: 'hsr0' already exists in 'hsr' [ 1151.766790][T23324] Cannot create hsr debugfs directory [ 1151.970900][T23370] syzkaller0: entered promiscuous mode [ 1151.976411][T23370] syzkaller0: entered allmulticast mode [ 1152.065461][T23299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.224863][ T5833] Bluetooth: hci8: command tx timeout [ 1152.270122][T23324] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1152.307763][T23299] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.334624][T22997] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1152.350353][T23377] dummy0: entered promiscuous mode [ 1152.365200][T23377] hsr1: entered allmulticast mode [ 1152.365222][T22997] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1152.375264][T23377] dummy0: entered allmulticast mode [ 1152.385333][T22997] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1152.393798][T22997] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1152.398315][T23377] bond0: entered allmulticast mode [ 1152.406705][T23377] bond_slave_0: entered allmulticast mode [ 1152.413220][T23377] bond_slave_1: entered allmulticast mode [ 1152.420199][T22997] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1152.432825][T19997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.440074][T19997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.475678][T23324] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1152.503057][ T9260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.510366][ T9260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.544751][T23324] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1152.610039][T23378] lo speed is unknown, defaulting to 1000 [ 1152.642849][T23324] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1152.691975][T23385] tipc: Enabled bearer , priority 0 [ 1152.721841][T23385] syzkaller0: entered promiscuous mode [ 1152.732195][T23385] syzkaller0: entered allmulticast mode [ 1152.849563][T23385] tipc: Resetting bearer [ 1152.880998][T23384] tipc: Resetting bearer [ 1152.920687][T23384] tipc: Disabling bearer [ 1152.993229][T23378] lo speed is unknown, defaulting to 1000 [ 1153.031193][T23324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1153.062931][T23324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1153.108210][T23324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1153.154517][T23324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1153.245351][T23391] tipc: Enabled bearer , priority 0 [ 1153.289841][T23391] syzkaller0: entered promiscuous mode [ 1153.295359][T23391] syzkaller0: entered allmulticast mode [ 1153.323674][T23299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.479394][T23394] tipc: Resetting bearer [ 1153.499645][ T5833] Bluetooth: hci9: command tx timeout [ 1153.540477][T23390] tipc: Resetting bearer [ 1153.586028][T23390] tipc: Disabling bearer [ 1153.746701][T23324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.791164][T23324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.839609][T23378] chnl_net:caif_netlink_parms(): no params data found [ 1153.877985][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.885436][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.944680][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.952114][ T7709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.024259][T23413] tipc: Enabled bearer , priority 0 [ 1154.126511][T23413] tipc: Resetting bearer [ 1154.224242][T23418] syzkaller0: entered promiscuous mode [ 1154.272095][T23412] tipc: Resetting bearer [ 1154.321690][ T5833] Bluetooth: hci8: command tx timeout [ 1154.330710][T23412] tipc: Disabling bearer [ 1154.359257][T23378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.367270][T23378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.375369][T23378] bridge_slave_0: entered allmulticast mode [ 1154.384040][T23378] bridge_slave_0: entered promiscuous mode [ 1154.429419][T23378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.458759][ T5833] Bluetooth: hci10: command tx timeout [ 1154.459867][T23378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.472670][T23378] bridge_slave_1: entered allmulticast mode [ 1154.489809][T23378] bridge_slave_1: entered promiscuous mode [ 1154.615418][T23378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.633652][T23299] veth0_vlan: entered promiscuous mode [ 1154.642174][T23422] tipc: Enabled bearer , priority 0 [ 1154.656040][T23422] syzkaller0: entered promiscuous mode [ 1154.662825][T23422] syzkaller0: entered allmulticast mode [ 1154.673678][T23378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.764746][T23422] tipc: Resetting bearer [ 1154.775962][T23299] veth1_vlan: entered promiscuous mode [ 1154.792541][T23378] team0: Port device team_slave_0 added [ 1154.798881][T23421] tipc: Resetting bearer [ 1154.830684][T23421] tipc: Disabling bearer [ 1154.884702][T23425] syzkaller0: entered promiscuous mode [ 1154.892116][T23425] syzkaller0: entered allmulticast mode [ 1154.920655][T23378] team0: Port device team_slave_1 added [ 1155.589450][ T5833] Bluetooth: hci9: command tx timeout [ 1156.397815][ T5833] Bluetooth: hci8: command tx timeout [ 1156.548711][ T5833] Bluetooth: hci10: command tx timeout [ 1157.556643][T23378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.563770][T23378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.590164][T23378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.605093][T23431] netlink: 'syz.8.21896': attribute type 12 has an invalid length. [ 1157.630968][T23378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.637964][T23378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.669311][ T5833] Bluetooth: hci9: command tx timeout [ 1157.670119][T23378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.752139][T23299] veth0_macvtap: entered promiscuous mode [ 1157.791945][T23378] hsr_slave_0: entered promiscuous mode [ 1157.798975][T23378] hsr_slave_1: entered promiscuous mode [ 1157.805311][T23378] debugfs: 'hsr0' already exists in 'hsr' [ 1157.811899][T23378] Cannot create hsr debugfs directory [ 1157.821336][T23434] tipc: Enabled bearer , priority 0 [ 1157.832756][T23324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.841928][T23434] syzkaller0: entered promiscuous mode [ 1157.847442][T23434] syzkaller0: entered allmulticast mode [ 1157.855028][T23435] tipc: Enabled bearer , priority 0 [ 1157.865140][T23299] veth1_macvtap: entered promiscuous mode [ 1157.887888][T23435] syzkaller0: entered promiscuous mode [ 1157.893810][T23435] syzkaller0: entered allmulticast mode [ 1157.962754][T23434] tipc: Resetting bearer [ 1157.991448][T23432] tipc: Resetting bearer [ 1158.013876][T23432] tipc: Disabling bearer [ 1158.029126][T23435] tipc: Resetting bearer [ 1158.058065][T23433] tipc: Resetting bearer [ 1158.092255][T23433] tipc: Disabling bearer [ 1158.115363][T23299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.173122][T23299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.205161][T23438] netlink: 60 bytes leftover after parsing attributes in process `syz.6.21899'. [ 1158.256284][ T5325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.291077][ T5325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.321134][ T5325] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.357594][ T5325] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.393106][T23324] veth0_vlan: entered promiscuous mode [ 1158.483722][T23378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.503265][T23378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1158.523562][T23440] syzkaller0: entered promiscuous mode [ 1158.529366][T23440] syzkaller0: entered allmulticast mode [ 1158.626657][T23324] veth1_vlan: entered promiscuous mode [ 1158.628928][ T5833] Bluetooth: hci10: command tx timeout [ 1158.656050][T23378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.666775][T23378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1158.772644][T23378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.785513][T23378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1158.835779][T23324] veth0_macvtap: entered promiscuous mode [ 1158.864055][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.873722][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.927312][T23378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.938142][T23378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1158.967436][T23324] veth1_macvtap: entered promiscuous mode [ 1159.058042][T19997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.067496][T19997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.166558][T23324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.214780][T23324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.224452][T23454] netlink: 24 bytes leftover after parsing attributes in process `syz.8.21904'. [ 1159.317187][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.418206][T23455] vlan2: left promiscuous mode [ 1159.434217][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.451883][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.612053][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.044724][T23378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1160.071679][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.087582][T23378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1160.109539][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.129862][T23378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1160.183844][T23378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1160.279082][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.290011][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.377194][T23474] tipc: Started in network mode [ 1160.421292][T23474] tipc: Node identity f268985b7e73, cluster identity 4711 [ 1160.458150][T23474] tipc: Enabled bearer , priority 0 [ 1160.476473][T23476] syzkaller0: entered promiscuous mode [ 1160.495093][T23476] syzkaller0: entered allmulticast mode [ 1160.615947][T23474] tipc: Resetting bearer [ 1160.674355][T23465] tipc: Resetting bearer [ 1160.699342][ T5833] Bluetooth: hci10: command tx timeout [ 1160.853806][T23465] tipc: Disabling bearer [ 1160.945700][T23487] tipc: Enabled bearer , priority 0 [ 1161.037084][T23484] tipc: Resetting bearer [ 1161.165947][T23488] syzkaller0: entered promiscuous mode [ 1161.191154][T23488] syzkaller0: entered allmulticast mode [ 1161.229303][T23483] tipc: Resetting bearer [ 1161.311809][T23483] tipc: Disabling bearer [ 1161.356673][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21910'. [ 1161.472266][T23495] tipc: Enabled bearer , priority 0 [ 1161.494084][T23497] syzkaller0: entered promiscuous mode [ 1161.509432][T23497] syzkaller0: entered allmulticast mode [ 1161.581736][T23495] tipc: Resetting bearer [ 1161.594696][T23499] netlink: 120 bytes leftover after parsing attributes in process `syz.6.21912'. [ 1161.604224][T23499] netlink: 'syz.6.21912': attribute type 1 has an invalid length. [ 1161.612248][T23499] netlink: 64 bytes leftover after parsing attributes in process `syz.6.21912'. [ 1161.627302][T23494] tipc: Resetting bearer [ 1161.759544][T23494] tipc: Disabling bearer [ 1161.839480][T23505] tipc: Enabled bearer , priority 0 [ 1161.853281][T23378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.919437][T23505] syzkaller0: entered promiscuous mode [ 1161.924973][T23505] syzkaller0: entered allmulticast mode [ 1162.022541][T23505] tipc: Resetting bearer [ 1162.047732][T23504] tipc: Resetting bearer [ 1162.107987][T23504] tipc: Disabling bearer [ 1162.136960][T23378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.165841][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.173086][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.205333][T23515] tipc: Enabled bearer , priority 0 [ 1162.252214][T23515] syzkaller0: entered promiscuous mode [ 1162.257730][T23515] syzkaller0: entered allmulticast mode [ 1162.267944][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.275273][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.346314][T23518] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21919'. [ 1162.359427][T23515] tipc: Resetting bearer [ 1162.403727][T23514] tipc: Resetting bearer [ 1162.457403][T23514] tipc: Disabling bearer [ 1162.639849][T23520] syzkaller0: entered promiscuous mode [ 1162.645599][T23520] syzkaller0: entered allmulticast mode [ 1162.654085][T23524] tipc: Enabled bearer , priority 0 [ 1162.662903][T23530] syzkaller0: entered promiscuous mode [ 1162.674476][T23530] syzkaller0: entered allmulticast mode [ 1162.726460][T23533] pimreg: entered allmulticast mode [ 1162.869562][T23535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21923'. [ 1165.754926][T23533] pimreg: left allmulticast mode [ 1165.786859][T23524] tipc: Resetting bearer [ 1165.805701][T23378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1165.872564][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21925'. [ 1165.886182][T23523] tipc: Resetting bearer [ 1165.909016][T23523] tipc: Disabling bearer [ 1165.917616][T23540] tipc: Enabling of bearer rejected, failed to enable media [ 1165.930286][ T5271] tipc: Node number set to 1243784835 [ 1165.998020][T23555] tipc: Enabled bearer , priority 0 [ 1166.034674][T23555] syzkaller0: entered promiscuous mode [ 1166.060947][T23555] syzkaller0: entered allmulticast mode [ 1166.154896][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21928'. [ 1166.217945][T23563] team1: entered promiscuous mode [ 1166.223788][T23563] team1: entered allmulticast mode [ 1166.237081][T23563] 8021q: adding VLAN 0 to HW filter on device team1 [ 1166.261922][T23555] tipc: Resetting bearer [ 1166.276626][T23561] tipc: Enabled bearer , priority 0 [ 1166.292570][T23554] tipc: Resetting bearer [ 1166.362239][T23554] tipc: Disabling bearer [ 1166.389895][T23561] syzkaller0: entered promiscuous mode [ 1166.395422][T23561] syzkaller0: entered allmulticast mode [ 1166.421635][T23569] tipc: Enabled bearer , priority 0 [ 1166.431549][T23569] syzkaller0: entered promiscuous mode [ 1166.437055][T23569] syzkaller0: entered allmulticast mode [ 1166.509147][T23561] netlink: 44 bytes leftover after parsing attributes in process `syz.6.21927'. [ 1166.538265][T23569] tipc: Resetting bearer [ 1166.550539][T23561] tipc: Resetting bearer [ 1166.565287][T23568] tipc: Resetting bearer [ 1166.591624][T23568] tipc: Disabling bearer [ 1166.612028][T23559] tipc: Resetting bearer [ 1166.650044][T23559] tipc: Disabling bearer [ 1166.680872][T23575] tipc: Enabled bearer , priority 0 [ 1166.719053][T23378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.729818][T23572] syzkaller0: entered promiscuous mode [ 1166.736944][T23572] syzkaller0: entered allmulticast mode [ 1166.863212][T23572] tipc: Resetting bearer [ 1166.894860][T23584] tipc: Enabled bearer , priority 0 [ 1166.904531][T23584] syzkaller0: entered promiscuous mode [ 1166.931138][T23584] syzkaller0: entered allmulticast mode [ 1166.945705][T23571] tipc: Resetting bearer [ 1167.000143][T23571] tipc: Disabling bearer [ 1167.056416][T23584] tipc: Resetting bearer [ 1167.080923][T23583] tipc: Resetting bearer [ 1167.137864][T23583] tipc: Disabling bearer [ 1167.193839][T23591] lo speed is unknown, defaulting to 1000 [ 1167.430010][T23591] lo speed is unknown, defaulting to 1000 [ 1167.431682][T23378] veth0_vlan: entered promiscuous mode [ 1167.442401][T23601] lo speed is unknown, defaulting to 1000 [ 1167.521953][T23378] veth1_vlan: entered promiscuous mode [ 1167.780390][T23378] veth0_macvtap: entered promiscuous mode [ 1167.809499][T23378] veth1_macvtap: entered promiscuous mode [ 1167.817034][T23614] tipc: Failed to remove unknown binding: 66,0,0/0:3972504721/3972504722 [ 1167.828784][T23609] lo speed is unknown, defaulting to 1000 [ 1167.834872][T23601] lo speed is unknown, defaulting to 1000 [ 1167.886210][T23614] tipc: Failed to remove unknown binding: 66,0,0/0:3972504721/3972504722 [ 1168.011387][T23378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.026363][T23616] netlink: 'syz.0.21941': attribute type 1 has an invalid length. [ 1168.035714][T23378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.098166][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.147974][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.167556][T23616] gretap1: entered promiscuous mode [ 1168.190056][T23609] lo speed is unknown, defaulting to 1000 [ 1168.196522][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.206415][T23618] tipc: Enabled bearer , priority 0 [ 1168.222788][T23619] macvlan2: entered promiscuous mode [ 1168.228187][T23619] macvlan2: entered allmulticast mode [ 1168.238336][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.250166][T23618] syzkaller0: entered promiscuous mode [ 1168.255770][T23618] syzkaller0: entered allmulticast mode [ 1168.357370][T23618] tipc: Resetting bearer [ 1168.410550][T23617] tipc: Resetting bearer [ 1168.446095][T23617] tipc: Disabling bearer [ 1168.554735][T23130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.566874][T23130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.624342][T23130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.632849][T23130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.064398][T23646] syzkaller0: entered promiscuous mode [ 1169.070295][T23646] syzkaller0: entered allmulticast mode [ 1169.241803][T23650] tipc: Started in network mode [ 1169.246740][T23650] tipc: Node identity f24fa9a88382, cluster identity 4711 [ 1169.255634][T23650] tipc: Enabled bearer , priority 0 [ 1169.266209][T23650] syzkaller0: entered promiscuous mode [ 1169.273218][T23650] syzkaller0: entered allmulticast mode [ 1169.300798][T23650] tipc: Resetting bearer [ 1169.311898][T23649] tipc: Resetting bearer [ 1169.335048][T23649] tipc: Disabling bearer [ 1169.444928][T23652] tipc: Enabled bearer , priority 0 [ 1169.453534][T23652] syzkaller0: entered promiscuous mode [ 1169.461274][T23652] syzkaller0: entered allmulticast mode [ 1169.488939][T23652] tipc: Resetting bearer [ 1169.502637][T23651] tipc: Resetting bearer [ 1169.523007][T23651] tipc: Disabling bearer [ 1169.625406][T23654] syzkaller0: entered promiscuous mode [ 1169.631999][T23654] syzkaller0: entered allmulticast mode [ 1169.704725][T23656] netlink: 'syz.0.21955': attribute type 1 has an invalid length. [ 1169.725536][T23656] vlan2: entered promiscuous mode [ 1169.732408][T23656] vlan2: entered allmulticast mode [ 1169.739427][T23656] hsr_slave_0: entered allmulticast mode [ 1169.775695][T23660] lo: entered promiscuous mode [ 1169.782149][T23660] tunl0: entered promiscuous mode [ 1169.788292][T23660] gre0: entered promiscuous mode [ 1169.794961][T23660] gretap0: entered promiscuous mode [ 1169.803042][T23660] erspan0: entered promiscuous mode [ 1169.810155][T23660] ip_vti0: entered promiscuous mode [ 1169.827841][T23660] ip6_vti0: entered promiscuous mode [ 1169.846629][T23660] sit0: entered promiscuous mode [ 1169.854007][T23660] ip6tnl0: entered promiscuous mode [ 1169.861202][T23660] ip6gre0: entered promiscuous mode [ 1169.867458][T23660] syz_tun: entered promiscuous mode [ 1169.874453][T23660] ip6gretap0: entered promiscuous mode [ 1169.883877][T23660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.891045][T23660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.898566][T23660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.905684][T23660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.917019][T23660] bridge0: entered promiscuous mode [ 1169.924193][T23660] vcan0: entered promiscuous mode [ 1169.934040][T23660] team0: entered promiscuous mode [ 1169.941026][T23660] team_slave_0: entered promiscuous mode [ 1169.948979][T23660] team_slave_1: entered promiscuous mode [ 1169.960489][T23660] nlmon0: entered promiscuous mode [ 1169.967537][T23660] caif0: entered promiscuous mode [ 1169.976657][T23660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1170.468241][T23679] lo speed is unknown, defaulting to 1000 [ 1170.692737][T23679] lo speed is unknown, defaulting to 1000 [ 1170.991969][T23683] lo speed is unknown, defaulting to 1000 [ 1171.029412][T23684] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci10/hci10:200/input8 [ 1171.230190][T23683] lo speed is unknown, defaulting to 1000 [ 1171.269026][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21964'. [ 1171.906395][T23703] syzkaller0: entered promiscuous mode [ 1171.912017][T23703] syzkaller0: entered allmulticast mode [ 1175.120829][T23709] smc: net device geneve0 applied user defined pnetid SYZ0 [ 1175.128322][T23709] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 1175.189254][T23712] syzkaller0: entered promiscuous mode [ 1175.194794][T23712] syzkaller0: entered allmulticast mode [ 1175.962450][T23729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21977'. [ 1175.975465][T23729] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1175.985171][T23729] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1176.530235][T23741] tc_dump_action: action bad kind [ 1176.544324][T23740] netlink: 'syz.5.21982': attribute type 1 has an invalid length. [ 1176.564627][T23740] vlan2: entered allmulticast mode [ 1176.572824][T23740] veth1_to_bridge: entered allmulticast mode [ 1176.819663][T23747] syzkaller0: entered promiscuous mode [ 1176.825304][T23747] syzkaller0: entered allmulticast mode [ 1176.870543][T23749] syzkaller0: entered promiscuous mode [ 1176.876036][T23749] syzkaller0: entered allmulticast mode [ 1177.001486][T23753] netlink: 'syz.5.21987': attribute type 1 has an invalid length. [ 1177.035241][T23753] bond1 (unregistering): Released all slaves [ 1177.106627][T23756] syzkaller0: entered promiscuous mode [ 1177.112432][T23756] syzkaller0: entered allmulticast mode [ 1177.152870][T23753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21987'. [ 1177.170390][T23753] vlan3: entered promiscuous mode [ 1177.175448][T23753] veth0_to_team: entered promiscuous mode [ 1177.492774][T23767] tipc: Started in network mode [ 1177.498056][T23767] tipc: Node identity 065b393ec48e, cluster identity 4711 [ 1177.507727][T23767] tipc: Enabled bearer , priority 0 [ 1177.522632][T23767] syzkaller0: entered promiscuous mode [ 1177.529217][T23767] syzkaller0: entered allmulticast mode [ 1177.581379][T23767] tipc: Resetting bearer [ 1177.598169][T23766] tipc: Resetting bearer [ 1177.625408][T23766] tipc: Disabling bearer [ 1177.761156][T23769] syzkaller0: entered promiscuous mode [ 1177.766965][T23769] syzkaller0: entered allmulticast mode [ 1178.054104][T23774] netlink: 'syz.6.21992': attribute type 13 has an invalid length. [ 1181.465313][T23774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.472551][T23774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.854051][T23774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.889775][T23774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.341314][T22997] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1182.355888][T22997] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1182.365770][T22997] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1182.375886][T22997] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1182.386092][T22997] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1182.433157][T23787] veth0_to_team: entered promiscuous mode [ 1182.444212][ T9260] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.490931][ T9260] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.510218][ T9260] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.559047][ T9260] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.627522][T23798] lo speed is unknown, defaulting to 1000 [ 1182.645680][T23804] syzkaller0: entered promiscuous mode [ 1182.654541][T23804] syzkaller0: entered allmulticast mode [ 1182.751189][ T5833] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1182.766693][ T5833] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1182.775830][ T5833] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1182.791345][ T5833] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1182.796755][T23807] netlink: 'syz.0.22001': attribute type 10 has an invalid length. [ 1182.807200][ T5833] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1182.886076][T23807] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1183.025357][T23798] lo speed is unknown, defaulting to 1000 [ 1183.033497][T23808] lo speed is unknown, defaulting to 1000 [ 1183.229967][T23816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.286187][T23819] netlink: 'syz.0.22003': attribute type 4 has an invalid length. [ 1183.334238][T23819] netlink: 'syz.0.22003': attribute type 4 has an invalid length. [ 1183.406962][T23808] lo speed is unknown, defaulting to 1000 [ 1183.525083][T23798] chnl_net:caif_netlink_parms(): no params data found [ 1183.790244][T23798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.797607][T23798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.805394][T23798] bridge_slave_0: entered allmulticast mode [ 1183.813748][T23798] bridge_slave_0: entered promiscuous mode [ 1183.827556][T23798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.835136][T23798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.843979][T23798] bridge_slave_1: entered allmulticast mode [ 1183.859436][T23798] bridge_slave_1: entered promiscuous mode [ 1183.872200][T23808] chnl_net:caif_netlink_parms(): no params data found [ 1184.030048][T23798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.082257][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22006'. [ 1184.088136][T23798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.251791][T23798] team0: Port device team_slave_0 added [ 1184.280038][T23798] team0: Port device team_slave_1 added [ 1184.360605][T23808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.367811][T23808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.382323][T23808] bridge_slave_0: entered allmulticast mode [ 1184.395398][T23808] bridge_slave_0: entered promiscuous mode [ 1184.418889][T23798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.425897][T23798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.460569][T22997] Bluetooth: hci11: command tx timeout [ 1184.464886][T23798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.517538][T23808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.536355][T23808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.552834][T23808] bridge_slave_1: entered allmulticast mode [ 1184.575381][T23808] bridge_slave_1: entered promiscuous mode [ 1184.649004][T23798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.661061][T23798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.818946][T23798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.858895][T22997] Bluetooth: hci12: command tx timeout [ 1184.933488][T23808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.955001][T23808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.011137][T23798] hsr_slave_0: entered promiscuous mode [ 1185.019370][T23798] hsr_slave_1: entered promiscuous mode [ 1185.026484][T23798] debugfs: 'hsr0' already exists in 'hsr' [ 1185.033139][T23798] Cannot create hsr debugfs directory [ 1185.085981][T23808] team0: Port device team_slave_0 added [ 1185.134066][T23808] team0: Port device team_slave_1 added [ 1185.199409][T23808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.211843][T23808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.242419][T23808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.293675][T23808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.301084][T23808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.327840][T23808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.473017][T23808] hsr_slave_0: entered promiscuous mode [ 1185.488191][T23808] hsr_slave_1: entered promiscuous mode [ 1185.500325][T23808] debugfs: 'hsr0' already exists in 'hsr' [ 1185.510751][T23808] Cannot create hsr debugfs directory [ 1185.884609][T23881] syzkaller0: entered promiscuous mode [ 1185.890984][T23881] syzkaller0: entered allmulticast mode [ 1186.094406][ T9] IPVS: starting estimator thread 0... [ 1186.137518][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22018'. [ 1186.209355][T23884] IPVS: using max 31 ests per chain, 74400 per kthread [ 1186.434021][T23808] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.538692][T22997] Bluetooth: hci11: command tx timeout [ 1186.942326][T22997] Bluetooth: hci12: command tx timeout [ 1187.030701][T23798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1187.053573][T23798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1187.086244][T23808] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.135750][T23798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1187.174661][T23798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1187.239689][T23808] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.312620][T23895] lo speed is unknown, defaulting to 1000 [ 1187.380699][T23808] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.454764][T23899] syzkaller1: entered promiscuous mode [ 1187.461522][T23899] syzkaller1: entered allmulticast mode [ 1187.514143][T23909] syzkaller0: entered promiscuous mode [ 1187.522230][T23909] syzkaller0: entered allmulticast mode [ 1187.643100][T23895] lo speed is unknown, defaulting to 1000 [ 1188.007245][T23808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1188.069314][T23808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1188.150469][T23808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1188.191673][T23798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.202171][T23808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1188.364666][T23798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.379506][T23929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22029'. [ 1188.420431][T23930] netlink: 124 bytes leftover after parsing attributes in process `syz.5.22030'. [ 1188.431927][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.439159][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.452289][T23930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22030'. [ 1188.474483][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.481406][T23929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22029'. [ 1188.481754][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.505030][T23929] netlink: 'syz.0.22029': attribute type 4 has an invalid length. [ 1188.618813][T22997] Bluetooth: hci11: command tx timeout [ 1188.743586][T23937] Bluetooth: MGMT ver 1.23 [ 1188.794657][T23937] geneve2: entered promiscuous mode [ 1188.832813][T23937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22033'. [ 1188.885535][T23938] lo speed is unknown, defaulting to 1000 [ 1188.952465][T23808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.007973][T23808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.020300][T22997] Bluetooth: hci12: command tx timeout [ 1189.050548][T20069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.057760][T20069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.106192][T20069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.113527][T20069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.266776][T23938] lo speed is unknown, defaulting to 1000 [ 1189.482667][T23951] tipc: Enabled bearer , priority 0 [ 1189.501849][T23951] syzkaller0: entered promiscuous mode [ 1189.507568][T23951] syzkaller0: entered allmulticast mode [ 1189.533133][T23798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.597088][T23951] tipc: Resetting bearer [ 1189.638182][T23950] tipc: Resetting bearer [ 1189.713143][T23950] tipc: Disabling bearer [ 1189.848765][T23798] veth0_vlan: entered promiscuous mode [ 1189.930465][T23808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.956412][T23798] veth1_vlan: entered promiscuous mode [ 1189.999497][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22041'. [ 1190.143089][T23798] veth0_macvtap: entered promiscuous mode [ 1190.150545][T23967] netlink: 'syz.5.22041': attribute type 1 has an invalid length. [ 1190.172268][T23967] netlink: 224 bytes leftover after parsing attributes in process `syz.5.22041'. [ 1190.194568][T23798] veth1_macvtap: entered promiscuous mode [ 1190.262189][T23972] netlink: 56 bytes leftover after parsing attributes in process `syz.5.22041'. [ 1190.501223][T23972] bond1 (unregistering): Released all slaves [ 1190.629185][T23808] veth0_vlan: entered promiscuous mode [ 1190.683746][T23808] veth1_vlan: entered promiscuous mode [ 1190.700575][T22997] Bluetooth: hci11: command tx timeout [ 1190.712713][T23798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.773374][T23798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.823241][ T7709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.863282][ T7709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.937353][T23980] netlink: 'syz.5.22043': attribute type 39 has an invalid length. [ 1190.951747][ T7709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.997612][ T7709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.091512][T23808] veth0_macvtap: entered promiscuous mode [ 1191.114045][T22997] Bluetooth: hci12: command tx timeout [ 1191.156130][T23808] veth1_macvtap: entered promiscuous mode [ 1191.269256][T23808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.304364][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.330273][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.386737][T23808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.480654][T20009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.513222][T20009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.589640][T23983] syzkaller0: entered promiscuous mode [ 1191.595983][T23983] syzkaller0: entered allmulticast mode [ 1191.607726][T20009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.607806][T23130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.625232][T20009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.635529][T23130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.135659][ T7709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.150722][T24026] Cannot find set identified by id 65534 to match [ 1195.159728][ T7709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.288912][ T7709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.296874][ T7709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.485440][T24039] syzkaller0: entered promiscuous mode [ 1195.491618][T24039] syzkaller0: entered allmulticast mode [ 1195.591729][T24042] netlink: 'syz.6.22057': attribute type 10 has an invalid length. [ 1195.596018][T24044] netlink: 'syz.0.22056': attribute type 33 has an invalid length. [ 1195.600230][T24042] syz_tun: left promiscuous mode [ 1195.608221][T24044] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22056'. [ 1195.619846][T24042] syz_tun: entered promiscuous mode [ 1195.631078][T24042] syz_tun: entered allmulticast mode [ 1195.637213][T24042] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1195.673960][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22056'. [ 1195.810822][T24048] lo speed is unknown, defaulting to 1000 [ 1195.914095][T24049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci12/hci12:200/input9 [ 1196.430683][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22061'. [ 1196.462835][T24048] lo speed is unknown, defaulting to 1000 [ 1196.552056][T24066] netlink: 244 bytes leftover after parsing attributes in process `syz.2.22063'. [ 1196.826651][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22064'. [ 1197.204312][T24073] nbd: nbd2 already in use [ 1197.229519][T24073] block nbd2: NBD_DISCONNECT [ 1197.234244][T24073] block nbd2: Send disconnect failed -32 [ 1197.258788][T24073] block nbd2: shutting down sockets [ 1197.310620][T24081] syzkaller0: entered promiscuous mode [ 1197.316136][T24081] syzkaller0: entered allmulticast mode [ 1197.519621][T24084] syzkaller0: entered promiscuous mode [ 1197.534120][T24084] syzkaller0: entered allmulticast mode [ 1197.759737][T24091] netlink: 'syz.0.22071': attribute type 1 has an invalid length. [ 1197.793255][T24090] syzkaller0: entered promiscuous mode [ 1197.799006][T24090] syzkaller0: entered allmulticast mode [ 1197.811861][T24090] 0: reclassify loop, rule prio 0, protocol 800 [ 1197.894075][T24093] syzkaller0: entered promiscuous mode [ 1197.906278][T24093] syzkaller0: entered allmulticast mode [ 1198.094647][T24095] syzkaller0: entered promiscuous mode [ 1198.101304][T24095] syzkaller0: entered allmulticast mode [ 1198.507364][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22078'. [ 1198.749542][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22081'. [ 1198.769841][T24112] hsr_slave_0: left promiscuous mode [ 1198.790224][T24112] hsr_slave_1: left promiscuous mode [ 1199.121653][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22082'. [ 1199.168755][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22082'. [ 1199.326617][T24126] team0: Port device bridge1 added [ 1199.352382][T24128] netlink: 244 bytes leftover after parsing attributes in process `syz.3.22084'. [ 1199.739219][T24135] syzkaller0: entered promiscuous mode [ 1199.750923][T24135] syzkaller0: entered allmulticast mode [ 1199.937503][T22997] block nbd2: Receive control failed (result -1) [ 1200.218679][T22997] Bluetooth: hci12: command tx timeout [ 1200.455721][T24153] syzkaller0: entered promiscuous mode [ 1200.462095][T24153] syzkaller0: entered allmulticast mode [ 1200.554441][T24155] syzkaller0: entered promiscuous mode [ 1200.561618][T24155] syzkaller0: entered allmulticast mode [ 1200.655345][T24157] syzkaller0: entered promiscuous mode [ 1200.668732][T24157] syzkaller0: entered allmulticast mode [ 1200.730737][T24157] tipc: Enabled bearer , priority 0 [ 1200.743223][T24156] tipc: Resetting bearer [ 1200.809645][T24156] tipc: Disabling bearer [ 1200.846805][T24167] tipc: Started in network mode [ 1200.888596][T24167] tipc: Node identity 321fd83b2986, cluster identity 4711 [ 1200.895958][T24167] tipc: Enabled bearer , priority 0 [ 1200.931110][T24169] syzkaller0: entered promiscuous mode [ 1200.957018][T24169] syzkaller0: entered allmulticast mode [ 1200.984053][T24167] tipc: Resetting bearer [ 1201.039527][T24166] tipc: Resetting bearer [ 1201.176547][T24166] tipc: Disabling bearer [ 1201.189923][T24174] __nla_validate_parse: 3 callbacks suppressed [ 1201.189946][T24174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22098'. [ 1201.235990][T24174] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22098'. [ 1201.245537][T24174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22098'. [ 1201.256140][T24174] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22098'. [ 1201.415603][T24178] tipc: Enabled bearer , priority 0 [ 1201.424452][T24178] syzkaller0: entered promiscuous mode [ 1201.431380][T24178] syzkaller0: entered allmulticast mode [ 1201.447705][T24178] tipc: Resetting bearer [ 1201.459081][T24175] tipc: Resetting bearer [ 1201.509901][T24175] tipc: Disabling bearer [ 1201.612766][T24183] lo speed is unknown, defaulting to 1000 [ 1202.117249][T24183] lo speed is unknown, defaulting to 1000 [ 1202.680919][T24201] netlink: 'syz.2.22105': attribute type 1 has an invalid length. [ 1202.728558][T24201] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1202.907646][T24207] tipc: Enabled bearer , priority 0 [ 1202.916269][T24207] syzkaller0: entered promiscuous mode [ 1202.921953][T24207] syzkaller0: entered allmulticast mode [ 1202.934161][T24207] tipc: Resetting bearer [ 1203.037089][T24206] tipc: Resetting bearer [ 1203.089533][T24206] tipc: Disabling bearer [ 1203.102434][T24214] netlink: 'syz.2.22109': attribute type 1 has an invalid length. [ 1203.116084][T24212] tipc: Failed to obtain node identity [ 1203.123851][T24212] tipc: Enabling of bearer rejected, failed to enable media [ 1203.144561][T24215] bridge1: entered allmulticast mode [ 1203.284874][T24214] gretap1: entered promiscuous mode [ 1203.331391][T24217] macvlan2: entered promiscuous mode [ 1203.337096][T24217] macvlan2: entered allmulticast mode [ 1203.370787][T24214] x_tables: duplicate underflow at hook 1 [ 1203.416968][T24219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22110'. [ 1203.576183][T24222] lo speed is unknown, defaulting to 1000 [ 1203.842768][T24228] tipc: Started in network mode [ 1203.847923][T24228] tipc: Node identity f2c0a2f48623, cluster identity 4711 [ 1203.855682][T24228] tipc: Enabled bearer , priority 0 [ 1203.875590][T24228] syzkaller0: entered promiscuous mode [ 1203.881305][T24228] syzkaller0: entered allmulticast mode [ 1203.895714][T24225] lo speed is unknown, defaulting to 1000 [ 1203.899822][T24222] lo speed is unknown, defaulting to 1000 [ 1204.084678][T24232] tipc: Resetting bearer [ 1204.116646][T24227] tipc: Resetting bearer [ 1204.138688][T24227] tipc: Disabling bearer [ 1204.150986][T24225] lo speed is unknown, defaulting to 1000 [ 1204.164024][T24231] syzkaller0: entered promiscuous mode [ 1204.172662][T24231] syzkaller0: entered allmulticast mode [ 1204.614631][T24243] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22118'. [ 1204.796132][T24250] netlink: 44 bytes leftover after parsing attributes in process `syz.5.22120'. [ 1204.806652][T24250] netlink: 35 bytes leftover after parsing attributes in process `syz.5.22120'. [ 1204.818116][T24249] syzkaller0: entered promiscuous mode [ 1204.824306][T24249] syzkaller0: entered allmulticast mode [ 1204.835987][T24250] netlink: 'syz.5.22120': attribute type 6 has an invalid length. [ 1204.870073][T24250] netlink: 'syz.5.22120': attribute type 5 has an invalid length. [ 1204.890435][T24250] netlink: 35 bytes leftover after parsing attributes in process `syz.5.22120'. [ 1205.084013][T24254] tipc: Enabled bearer , priority 0 [ 1205.094717][T24250] netlink: 'syz.5.22120': attribute type 4 has an invalid length. [ 1205.124428][T24247] tipc: Resetting bearer [ 1205.135024][T24250] netlink: 'syz.5.22120': attribute type 4 has an invalid length. [ 1205.164596][T24247] tipc: Disabling bearer [ 1205.786921][T24268] lo speed is unknown, defaulting to 1000 [ 1206.054264][T24268] lo speed is unknown, defaulting to 1000 [ 1206.341842][T24274] syzkaller0: entered promiscuous mode [ 1206.347710][T24274] syzkaller0: entered allmulticast mode [ 1206.564480][T24280] netlink: 'syz.2.22130': attribute type 1 has an invalid length. [ 1206.671190][T24283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22130'. [ 1206.676913][T24282] syzkaller0: entered promiscuous mode [ 1206.686417][T24282] syzkaller0: entered allmulticast mode [ 1206.895470][T24283] macvlan2: entered promiscuous mode [ 1206.902364][T24283] macvlan2: entered allmulticast mode [ 1206.944858][T24287] netlink: 'syz.3.22132': attribute type 10 has an invalid length. [ 1206.959822][T24287] team0: Device ipvlan1 failed to register rx_handler [ 1207.090737][T24295] tipc: Enabled bearer , priority 0 [ 1207.112702][T24295] syzkaller0: entered promiscuous mode [ 1207.118222][T24295] syzkaller0: entered allmulticast mode [ 1207.134120][T24295] tipc: Resetting bearer [ 1207.142037][T24294] tipc: Resetting bearer [ 1207.174301][T24294] tipc: Disabling bearer [ 1207.382216][T24303] netlink: 104 bytes leftover after parsing attributes in process `syz.3.22137'. [ 1207.506578][T24306] tipc: Enabled bearer , priority 0 [ 1207.507159][T24303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22137'. [ 1207.515344][T24306] syzkaller0: entered promiscuous mode [ 1207.538454][T24306] syzkaller0: entered allmulticast mode [ 1207.585553][T24306] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1207.644523][T24306] tipc: Resetting bearer [ 1207.680898][T24304] tipc: Resetting bearer [ 1207.765716][T24304] tipc: Disabling bearer [ 1208.019087][T24316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22139'. [ 1208.062198][T24313] netlink: 'syz.5.22140': attribute type 9 has an invalid length. [ 1208.084234][T24313] netlink: 'syz.5.22140': attribute type 6 has an invalid length. [ 1208.729485][T24325] syzkaller0: entered promiscuous mode [ 1208.749024][T24325] syzkaller0: entered allmulticast mode [ 1208.836689][T24327] netlink: 'syz.0.22144': attribute type 39 has an invalid length. [ 1209.521207][T24339] netlink: 584 bytes leftover after parsing attributes in process `syz.2.22145'. [ 1209.878787][T24343] tipc: Enabled bearer , priority 0 [ 1209.895734][T24343] syzkaller0: entered promiscuous mode [ 1209.912115][T24343] syzkaller0: entered allmulticast mode [ 1209.944084][T24343] tipc: Resetting bearer [ 1210.009468][T24342] tipc: Resetting bearer [ 1210.084218][T24342] tipc: Disabling bearer [ 1210.241289][T24345] netlink: 'syz.0.22149': attribute type 1 has an invalid length. [ 1210.359506][T24345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22149'. [ 1210.462221][T24351] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1210.509687][T24351] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1210.523804][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22151'. [ 1210.552668][T24345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1210.653827][T24352] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 1210.687021][T24357] macvlan0: entered promiscuous mode [ 1210.695115][T24357] macvlan0: entered allmulticast mode [ 1210.710256][T24357] bond2: entered promiscuous mode [ 1210.715916][T24357] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1210.745508][T24357] bond2: left promiscuous mode [ 1210.807152][T24350] lo speed is unknown, defaulting to 1000 [ 1211.159772][ T5833] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1211.171199][ T5833] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1211.182899][ T5833] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1211.196391][ T5833] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1211.206115][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1211.385330][T24350] lo speed is unknown, defaulting to 1000 [ 1211.385632][T24371] lo speed is unknown, defaulting to 1000 [ 1211.445078][T24376] tipc: Enabled bearer , priority 0 [ 1211.540272][T24376] syzkaller0: entered promiscuous mode [ 1211.548129][T24376] syzkaller0: entered allmulticast mode [ 1211.585842][T24376] tipc: Resetting bearer [ 1211.613738][T24375] tipc: Resetting bearer [ 1211.672516][T24375] tipc: Disabling bearer [ 1211.704635][T24371] lo speed is unknown, defaulting to 1000 [ 1211.813937][T24384] tipc: Enabled bearer , priority 0 [ 1211.836745][T24384] syzkaller0: entered promiscuous mode [ 1211.842774][T24384] syzkaller0: entered allmulticast mode [ 1211.898154][T24383] tipc: Resetting bearer [ 1211.924491][T24383] tipc: Disabling bearer [ 1211.968007][T24387] tipc: Enabled bearer , priority 0 [ 1211.997608][T24387] syzkaller0: entered promiscuous mode [ 1212.003984][T24387] syzkaller0: entered allmulticast mode [ 1212.040703][T24386] tipc: Resetting bearer [ 1212.095452][T24386] tipc: Disabling bearer [ 1212.110732][T24371] chnl_net:caif_netlink_parms(): no params data found [ 1212.166772][T24392] netlink: 'syz.0.22161': attribute type 13 has an invalid length. [ 1212.177102][T24392] netlink: 'syz.0.22161': attribute type 17 has an invalid length. [ 1212.792806][T24409] tipc: Enabled bearer , priority 0 [ 1212.811263][T24371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.819454][T24371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.828828][T24371] bridge_slave_0: entered allmulticast mode [ 1212.837119][T24371] bridge_slave_0: entered promiscuous mode [ 1212.860327][T24410] syzkaller0: entered promiscuous mode [ 1212.867417][T24410] syzkaller0: entered allmulticast mode [ 1212.880718][T24371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.888142][T24371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.896194][T24371] bridge_slave_1: entered allmulticast mode [ 1212.909804][T24371] bridge_slave_1: entered promiscuous mode [ 1212.942602][T24410] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1213.017937][T24414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22165'. [ 1213.023037][T24371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.041147][T24409] tipc: Resetting bearer [ 1213.085051][T24371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.096153][T24408] tipc: Resetting bearer [ 1213.119425][T24408] tipc: Disabling bearer [ 1213.258887][ T5833] Bluetooth: hci13: command tx timeout [ 1213.284618][T24371] team0: Port device team_slave_0 added [ 1213.298964][T24371] team0: Port device team_slave_1 added [ 1213.320858][T24419] netlink: 'syz.5.22168': attribute type 2 has an invalid length. [ 1213.391867][T24419] : entered promiscuous mode [ 1213.398330][T24371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.407516][T24371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.447558][T24371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.462885][T24371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.470020][T24371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.527816][T24371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.591051][T24426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22168'. [ 1213.767748][T24371] hsr_slave_0: entered promiscuous mode [ 1213.777439][T24371] hsr_slave_1: entered promiscuous mode [ 1213.785000][T24371] debugfs: 'hsr0' already exists in 'hsr' [ 1213.791281][T24371] Cannot create hsr debugfs directory [ 1213.799634][T24429] tipc: Enabled bearer , priority 0 [ 1213.816934][T24432] syzkaller0: entered promiscuous mode [ 1213.860041][T24432] syzkaller0: entered allmulticast mode [ 1213.941514][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22171'. [ 1214.071412][T24427] tipc: Resetting bearer [ 1214.100833][T24427] tipc: Disabling bearer [ 1214.358253][T24371] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.500917][T24371] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.581927][T24371] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.630067][T24371] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.711084][T24447] tipc: Enabled bearer , priority 0 [ 1214.719605][T24447] syzkaller0: entered promiscuous mode [ 1214.725167][T24447] syzkaller0: entered allmulticast mode [ 1214.740912][T24447] tipc: Resetting bearer [ 1214.756094][T24446] tipc: Resetting bearer [ 1214.780380][T24446] tipc: Disabling bearer [ 1214.836104][T24371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1214.848818][T24371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1214.862950][T24371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1214.876677][T24371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1214.955818][T24451] syzkaller0: entered promiscuous mode [ 1214.961707][T24451] syzkaller0: entered allmulticast mode [ 1215.180744][T24371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.231510][T24371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.274098][T20069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.281348][T20069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.312155][T20069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.319367][T20069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.339480][T22997] Bluetooth: hci13: command tx timeout [ 1215.387108][T24468] netlink: 'syz.5.22182': attribute type 1 has an invalid length. [ 1215.464865][T24468] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1215.490410][T24468] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1215.500752][T24470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.22182'. [ 1215.539698][T24464] lo speed is unknown, defaulting to 1000 [ 1215.551378][T24470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1215.673165][T24468] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 1215.713827][T24470] macvlan2: entered promiscuous mode [ 1215.719288][T24470] macvlan2: entered allmulticast mode [ 1215.734333][T24470] bond1: entered promiscuous mode [ 1215.744060][T24470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1215.761242][T24470] bond1: left promiscuous mode [ 1215.890275][T24464] lo speed is unknown, defaulting to 1000 [ 1216.030452][T24371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.096203][T24371] veth0_vlan: entered promiscuous mode [ 1216.123007][T24371] veth1_vlan: entered promiscuous mode [ 1216.177295][T24371] veth0_macvtap: entered promiscuous mode [ 1216.190520][T24371] veth1_macvtap: entered promiscuous mode [ 1216.233228][T24371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.254470][T24482] tipc: Enabled bearer , priority 0 [ 1216.266024][T24371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.298394][T24324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.312547][T24484] tipc: Enabled bearer , priority 0 [ 1216.329044][T24482] tipc: Resetting bearer [ 1216.335221][T24484] syzkaller0: entered promiscuous mode [ 1216.358518][T24484] syzkaller0: entered allmulticast mode [ 1216.366050][T24324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.418206][T24481] tipc: Disabling bearer [ 1216.434307][T24324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.443365][T24324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.454296][T24483] tipc: Resetting bearer [ 1216.479936][T24483] tipc: Disabling bearer [ 1216.675556][T24489] tipc: Enabled bearer , priority 0 [ 1216.684015][T24491] netlink: 'syz.2.22188': attribute type 1 has an invalid length. [ 1216.696841][T24489] syzkaller0: entered promiscuous mode [ 1216.704436][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.713108][T24489] syzkaller0: entered allmulticast mode [ 1216.719706][T24488] tipc: Resetting bearer [ 1216.733938][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.750281][T24488] tipc: Disabling bearer [ 1216.775964][T24493] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1216.906502][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.926531][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.043745][T24502] netlink: 'syz.5.22193': attribute type 1 has an invalid length. [ 1217.062300][T24504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1217.064890][T24502] netlink: 224 bytes leftover after parsing attributes in process `syz.5.22193'. [ 1217.148170][T24510] vxcan2: entered allmulticast mode [ 1217.153714][T24507] netlink: 'syz.1.22152': attribute type 9 has an invalid length. [ 1217.163125][T24507] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.22152'. [ 1217.267165][T24512] netlink: 220 bytes leftover after parsing attributes in process `syz.2.22195'. [ 1217.393256][T24514] syzkaller0: entered promiscuous mode [ 1217.402978][T24514] syzkaller0: entered allmulticast mode [ 1217.412919][T24516] syzkaller0: entered promiscuous mode [ 1217.419891][T22997] Bluetooth: hci13: command 0x040f tx timeout [ 1217.429304][T24516] syzkaller0: entered allmulticast mode [ 1217.465314][T24520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.482014][T24520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.490262][T24514] netlink: 'syz.1.22196': attribute type 16 has an invalid length. [ 1217.514884][T24514] netlink: 'syz.1.22196': attribute type 17 has an invalid length. [ 1217.620979][T24514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1217.641757][T24522] syzkaller0: entered promiscuous mode [ 1217.680631][T24522] syzkaller0: entered allmulticast mode [ 1219.517767][ T5833] Bluetooth: hci13: command 0x040f tx timeout [ 1220.507450][T24529] tipc: Enabling of bearer rejected, failed to enable media [ 1220.682506][T24542] syzkaller0: entered promiscuous mode [ 1220.688024][T24542] syzkaller0: entered allmulticast mode [ 1220.707930][T24542] TC_ACT_REPEAT abuse ? [ 1220.709955][T24546] macsec1: entered promiscuous mode [ 1220.718029][T24546] macsec1: entered allmulticast mode [ 1220.975899][T24552] netlink: 'syz.5.22207': attribute type 10 has an invalid length. [ 1220.993282][T24552] team0: Port device dummy0 added [ 1221.005306][T24552] netlink: 'syz.5.22207': attribute type 10 has an invalid length. [ 1221.017880][T24552] team0: Port device dummy0 removed [ 1221.027486][T24552] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1221.578561][ T5833] Bluetooth: hci13: command 0x040f tx timeout [ 1221.662445][T24561] netlink: 2 bytes leftover after parsing attributes in process `syz.1.22209'. [ 1221.720846][T24564] netlink: 256 bytes leftover after parsing attributes in process `syz.2.22210'. [ 1221.854304][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1221.886862][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1221.917483][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1221.937759][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1221.973610][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1222.031295][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1222.048915][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1222.236281][T24570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22213'. [ 1223.180196][T24570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.225058][T24570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.733218][ T5325] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.764979][ T5325] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.808457][ T5325] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.839522][ T5325] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.117310][T24618] netlink: 'syz.1.22221': attribute type 13 has an invalid length. [ 1225.694756][T22997] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1225.731355][T22997] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1225.768729][T22997] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1225.777268][T22997] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1225.795094][T22997] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1226.004303][T24651] lo speed is unknown, defaulting to 1000 [ 1226.374880][T24651] lo speed is unknown, defaulting to 1000 [ 1226.847091][T24663] __nla_validate_parse: 142 callbacks suppressed [ 1226.847117][T24663] netlink: 128 bytes leftover after parsing attributes in process `syz.2.22231'. [ 1227.237986][T24651] chnl_net:caif_netlink_parms(): no params data found [ 1227.545062][T24675] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.22232'. [ 1227.566970][T24651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.574606][T24651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.585336][T24651] bridge_slave_0: entered allmulticast mode [ 1227.595219][T24651] bridge_slave_0: entered promiscuous mode [ 1227.899439][ T5833] Bluetooth: hci14: command tx timeout [ 1227.997933][T24677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.005888][T24677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.396259][T24697] xt_bpf: check failed: parse error [ 1228.697529][T24677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.737881][T24677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.152097][T24677] vlan2: left allmulticast mode [ 1229.156998][T24677] veth1_to_bridge: left allmulticast mode [ 1229.184694][T24677] geneve2: left promiscuous mode [ 1229.243142][T24651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.251163][T24651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.261558][T24651] bridge_slave_1: entered allmulticast mode [ 1229.269017][T24651] bridge_slave_1: entered promiscuous mode [ 1229.291669][T24694] tipc: Enabling of bearer rejected, failed to enable media [ 1229.304210][ T1156] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.355783][ T1156] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.379834][T20069] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.424609][T20069] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.441352][T24651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.484469][T24651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.593823][T24651] team0: Port device team_slave_0 added [ 1229.623221][T24651] team0: Port device team_slave_1 added [ 1229.744557][T24651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.752757][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22238'. [ 1229.752840][T24651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.762917][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22240'. [ 1229.840855][T24651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.861007][T24651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.878558][T24651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.895209][T24723] IPv6: Can't replace route, no match found [ 1229.925595][T24651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.978826][T22997] Bluetooth: hci14: command tx timeout [ 1230.116620][T24725] lo speed is unknown, defaulting to 1000 [ 1230.620265][T22997] Bluetooth: hci5: command 0x0406 tx timeout [ 1230.646089][T24651] hsr_slave_0: entered promiscuous mode [ 1230.675144][T24651] hsr_slave_1: entered promiscuous mode [ 1230.718885][T24651] debugfs: 'hsr0' already exists in 'hsr' [ 1230.748973][T24651] Cannot create hsr debugfs directory [ 1230.919796][T24725] lo speed is unknown, defaulting to 1000 [ 1231.461105][T24651] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.614517][T24651] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.717348][T24651] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.825473][T24651] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.059080][ T5833] Bluetooth: hci14: command tx timeout [ 1232.153054][T24651] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1232.172813][T24651] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1232.190544][T24651] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1232.207677][T24651] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1232.349840][T24651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.435499][T24651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.477715][T24747] lo speed is unknown, defaulting to 1000 [ 1232.494924][T24324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.502151][T24324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.572800][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.580028][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.965973][T24747] lo speed is unknown, defaulting to 1000 [ 1233.066112][T24754] lo speed is unknown, defaulting to 1000 [ 1233.247784][T24754] lo speed is unknown, defaulting to 1000 [ 1233.465904][T24651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.986023][T24779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22251'. [ 1234.097432][T24786] siw: device registration error -23 [ 1234.138935][ T5833] Bluetooth: hci14: command tx timeout [ 1234.196214][T24651] veth0_vlan: entered promiscuous mode [ 1234.211618][T24651] veth1_vlan: entered promiscuous mode [ 1234.308869][ T31] INFO: task kworker/u8:6:591 blocked for more than 143 seconds. [ 1234.321321][T24651] veth0_macvtap: entered promiscuous mode [ 1234.328563][ T31] Not tainted syzkaller #0 [ 1234.333539][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1234.346883][T24651] veth1_macvtap: entered promiscuous mode SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 1234.356270][ T31] task:kworker/u8:6 state:D stack:22264 pid:591 tgid:591 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1234.386188][ T31] Workqueue: netns cleanup_net [ 1234.393783][T24651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.401115][ T31] Call Trace: [ 1234.404417][ T31] [ 1234.407375][ T31] __schedule+0x149b/0x4fd0 [ 1234.413407][ T31] ? __pfx___schedule+0x10/0x10 [ 1234.419203][ T31] ? schedule+0x91/0x360 [ 1234.423505][ T31] schedule+0x165/0x360 [ 1234.427759][ T31] schedule_preempt_disabled+0x13/0x30 [ 1234.433506][ T31] __mutex_lock+0x7e6/0x1350 [ 1234.438215][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1234.443276][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 1234.467810][T24651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.485450][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1234.493878][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1234.505188][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1234.512628][T20009] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.515326][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1234.526715][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1234.531905][ T31] rdma_dev_change_netns+0x39/0x300 [ 1234.537257][ T31] rdma_dev_exit_net+0x203/0x340 [ 1234.539464][T20009] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.551127][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1234.556578][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1234.562500][ T31] ? rtnl_is_locked+0x15/0x20 [ 1234.567312][ T31] ops_undo_list+0x49a/0x990 [ 1234.574022][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1234.580334][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1234.580535][T20009] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.588395][ T31] cleanup_net+0x4d8/0x7a0 [ 1234.608697][T20009] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.627317][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1234.638671][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1234.654718][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1234.664849][ T31] process_scheduled_works+0xad1/0x1770 [ 1234.675019][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1234.688459][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1234.693644][ T31] worker_thread+0x8a0/0xda0 [ 1234.698285][ T31] kthread+0x711/0x8a0 [ 1234.714042][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1234.719989][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.724748][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.730288][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.735003][ T31] ret_from_fork+0x510/0xa50 [ 1234.739913][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.745144][ T31] ? __switch_to+0xc9e/0x1480 [ 1234.750755][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.755480][ T31] ret_from_fork_asm+0x1a/0x30 [ 1234.760619][ T31] [ 1234.768768][ T31] INFO: task syz.5.21515:22098 blocked for more than 143 seconds. [ 1234.794254][ T31] Not tainted syzkaller #0 [ 1234.804958][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1234.828576][ T31] task:syz.5.21515 state:D stack:22976 pid:22098 tgid:22096 ppid:11895 task_flags:0x400140 flags:0x00080002 [ 1234.897717][ T31] Call Trace: [ 1234.904793][ T31] [ 1234.907776][ T31] __schedule+0x149b/0x4fd0 [ 1234.912730][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1234.917715][ T31] ? stack_trace_save+0x9c/0xe0 [ 1234.922712][ T31] ? __pfx___schedule+0x10/0x10 [ 1234.927620][ T31] ? schedule+0x91/0x360 [ 1234.940159][ T31] schedule+0x165/0x360 [ 1234.944512][ T31] schedule_timeout+0x9a/0x270 [ 1234.969238][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1234.974719][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1234.988628][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.993898][ T31] ? wait_for_completion+0x267/0x5d0 [ 1235.000396][ T31] wait_for_completion+0x2bf/0x5d0 [ 1235.005660][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1235.012759][ T31] ? remove_client_context+0x19c/0x1e0 [ 1235.018939][ T31] disable_device+0x1c6/0x320 [ 1235.023942][ T31] ? __pfx_disable_device+0x10/0x10 [ 1235.029534][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 1235.034948][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1235.041072][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 1235.046838][ T31] nldev_dellink+0x2d1/0x320 [ 1235.051871][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1235.057120][ T31] ? apparmor_capable+0x137/0x1a0 [ 1235.062363][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1235.067074][ T31] ? security_capable+0x7e/0x2e0 [ 1235.072376][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1235.077544][ T31] rdma_nl_rcv+0x6ae/0x980 [ 1235.082119][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1235.087120][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1235.092936][ T31] netlink_unicast+0x82f/0x9e0 [ 1235.097750][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1235.103342][ T31] ? __alloc_skb+0x198/0x3a0 [ 1235.107955][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1235.113333][ T31] ? skb_put+0x11b/0x210 [ 1235.117640][ T31] netlink_sendmsg+0x805/0xb30 [ 1235.123605][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1235.130155][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1235.135146][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1235.140690][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1235.146018][ T31] __sock_sendmsg+0x21c/0x270 [ 1235.150996][ T31] ____sys_sendmsg+0x505/0x820 [ 1235.155799][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1235.161803][ T31] ? import_iovec+0x74/0xa0 [ 1235.166394][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1235.171427][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.176654][ T31] ? futex_wait+0x285/0x360 [ 1235.182779][ T31] ? __fget_files+0x2a/0x420 [ 1235.187605][ T31] ? __fget_files+0x3a0/0x420 [ 1235.193108][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1235.198091][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1235.203779][ T31] ? rcu_is_watching+0x15/0xb0 [ 1235.209103][ T31] do_syscall_64+0xec/0xf80 [ 1235.213879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.220121][ T31] ? trace_irq_disable+0x37/0x100 [ 1235.225259][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1235.230195][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.236099][ T31] RIP: 0033:0x7f896f18f749 [ 1235.240959][ T31] RSP: 002b:00007f8970026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.249455][ T31] RAX: ffffffffffffffda RBX: 00007f896f3e5fa0 RCX: 00007f896f18f749 [ 1235.257424][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1235.265946][ T31] RBP: 00007f896f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1235.274056][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.282107][ T31] R13: 00007f896f3e6038 R14: 00007f896f3e5fa0 R15: 00007fffccd76858 [ 1235.290188][ T31] [ 1235.329781][ T31] [ 1235.329781][ T31] Showing all locks held in the system: [ 1235.358513][ T31] 1 lock held by khungtaskd/31: [ 1235.370860][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1235.398650][ T31] 4 locks held by kworker/u8:6/591: [ 1235.404670][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1235.428553][ T31] #1: ffffc90003a67bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1235.449157][ T31] #2: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1235.468561][ T31] #3: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.488782][ T31] 2 locks held by getty/5593: [ 1235.493533][ T31] #0: ffff88814d6750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1235.518583][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1235.549713][ T31] 2 locks held by syz.5.21515/22098: [ 1235.555055][ T31] #0: ffffffff99c82df8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 1235.579445][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1235.598525][ T31] 2 locks held by syz.2.21694/22660: [ 1235.603882][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.628488][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.648954][ T31] 2 locks held by syz.3.21716/22754: [ 1235.654299][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.664265][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.675666][ T31] 2 locks held by syz.1.21799/23063: [ 1235.681163][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.691047][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.703110][ T31] 2 locks held by syz.7.21805/23088: [ 1235.708626][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.718089][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.729659][ T31] 2 locks held by syz.4.21812/23129: [ 1235.735134][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.744843][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.756158][ T31] 4 locks held by syz-executor/23324: [ 1235.761605][ T31] #0: ffff8880370d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 1235.771974][ T31] #1: ffff8880370d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 1235.781810][ T31] #2: ffffffff8f483948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1235.791903][ T31] #3: ffff8880aadf4b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 1235.801353][ T31] 3 locks held by syz-executor/23378: [ 1235.806743][ T31] #0: ffff8880764a8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 1235.816946][ T31] #1: ffff8880764a80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 1235.826955][ T31] #2: ffffffff8f483948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1235.837180][ T31] 2 locks held by syz.8.21936/23601: [ 1235.843339][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.852850][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.864270][ T31] 2 locks held by syz.9.21937/23609: [ 1235.869620][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.879238][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.890603][ T31] 2 locks held by syz.6.22058/24048: [ 1235.895897][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.905960][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.917448][ T31] 2 locks held by syz.3.22150/24350: [ 1235.922791][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1235.932356][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1235.943725][ T31] 3 locks held by syz-executor/24371: [ 1235.949202][ T31] #0: ffff8880321f0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 1235.959567][ T31] #1: ffff8880321f00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 1235.969530][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 1235.981135][ T31] 3 locks held by kworker/0:6/24690: [ 1235.986426][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1235.998042][ T31] #1: ffffc9000f76fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1236.008820][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 1236.020057][ T31] 2 locks held by syz.2.22241/24725: [ 1236.025399][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1236.036571][ T31] #1: ffff88803024c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1236.049454][ T31] [ 1236.051851][ T31] ============================================= [ 1236.051851][ T31] [ 1236.060776][ T31] NMI backtrace for cpu 1 [ 1236.060797][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1236.060820][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.060833][ T31] Call Trace: [ 1236.060842][ T31] [ 1236.060851][ T31] dump_stack_lvl+0xe8/0x150 [ 1236.060883][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1236.060912][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1236.060961][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1236.060988][ T31] sys_info+0x135/0x170 [ 1236.061009][ T31] watchdog+0xf95/0xfe0 [ 1236.061040][ T31] ? watchdog+0x20a/0xfe0 [ 1236.061075][ T31] kthread+0x711/0x8a0 [ 1236.061103][ T31] ? __pfx_watchdog+0x10/0x10 [ 1236.061144][ T31] ? __pfx_kthread+0x10/0x10 [ 1236.061172][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1236.061200][ T31] ? __pfx_kthread+0x10/0x10 [ 1236.061226][ T31] ret_from_fork+0x510/0xa50 [ 1236.061248][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1236.061266][ T31] ? __switch_to+0xc9e/0x1480 [ 1236.061298][ T31] ? __pfx_kthread+0x10/0x10 [ 1236.061325][ T31] ret_from_fork_asm+0x1a/0x30 [ 1236.061369][ T31] [ 1236.061377][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1236.183970][ C0] NMI backtrace for cpu 0 [ 1236.183991][ C0] CPU: 0 UID: 0 PID: 24690 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 1236.184012][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.184025][ C0] Workqueue: events drain_vmap_area_work [ 1236.184050][ C0] RIP: 0010:unwind_next_frame+0xd50/0x23d0 [ 1236.184071][ C0] Code: 06 0e b3 00 48 89 5c 24 60 4c 89 64 24 18 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 <84> c0 0f 85 58 11 00 00 41 83 3e 00 0f 95 c0 49 39 df 0f 96 c1 20 [ 1236.184083][ C0] RSP: 0018:ffffc9000f76f2f8 EFLAGS: 00000246 [ 1236.184097][ C0] RAX: 0000000000000000 RBX: ffffc9000f76f8b8 RCX: 1ffff92001eede79 [ 1236.184270][ C0] RDX: ffffffff9023b18a RSI: 0000000000000002 RDI: ffffffff8bc08380 [ 1236.184283][ C0] RBP: 1ffff92001eede7a R08: 0000000000000016 R09: ffffffff8df41aa0 [ 1236.184301][ C0] R10: ffffc9000f76f418 R11: ffffffff81acf3d0 R12: ffffc9000f770000 [ 1236.184315][ C0] R13: 1ffff92001eede7b R14: ffffc9000f76f3c8 R15: ffffc9000f768000 [ 1236.184328][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 1236.184343][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1236.184356][ C0] CR2: 000055844a07f000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1236.184371][ C0] Call Trace: [ 1236.184382][ C0] [ 1236.184395][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1236.184419][ C0] ? __kasan_release_vmalloc+0xa2/0xd0 [ 1236.184439][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1236.184467][ C0] arch_stack_walk+0x11c/0x150 [ 1236.184491][ C0] ? __kasan_release_vmalloc+0xa2/0xd0 [ 1236.184510][ C0] stack_trace_save+0x9c/0xe0 [ 1236.184535][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1236.184566][ C0] save_stack+0xf5/0x1f0 [ 1236.184581][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1236.184602][ C0] ? __pfx_save_stack+0x10/0x10 [ 1236.184618][ C0] ? __free_frozen_pages+0xbc8/0xd30 [ 1236.184661][ C0] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1236.184678][ C0] ? __apply_to_page_range+0xb66/0x13d0 [ 1236.184702][ C0] ? __kasan_release_vmalloc+0xa2/0xd0 [ 1236.184727][ C0] ? page_ext_put+0x97/0xc0 [ 1236.184747][ C0] __reset_page_owner+0x71/0x1f0 [ 1236.184767][ C0] __free_frozen_pages+0xbc8/0xd30 [ 1236.184792][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1236.184810][ C0] __apply_to_page_range+0xb66/0x13d0 [ 1236.184841][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 1236.184863][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 1236.184887][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 1236.184911][ C0] ? smp_call_function_many_cond+0xdca/0x1260 [ 1236.184943][ C0] __kasan_release_vmalloc+0xa2/0xd0 [ 1236.184960][ C0] purge_vmap_node+0x214/0x8d0 [ 1236.184989][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 1236.185012][ C0] ? flush_tlb_kernel_range+0x358/0x470 [ 1236.185040][ C0] __purge_vmap_area_lazy+0x77a/0xb00 [ 1236.185063][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1236.185082][ C0] drain_vmap_area_work+0x27/0x40 [ 1236.185100][ C0] process_scheduled_works+0xad1/0x1770 [ 1236.185135][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1236.185152][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1236.185186][ C0] worker_thread+0x8a0/0xda0 [ 1236.185213][ C0] ? __kthread_parkme+0x7b/0x200 [ 1236.185239][ C0] kthread+0x711/0x8a0 [ 1236.185262][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1236.185279][ C0] ? __pfx_kthread+0x10/0x10 [ 1236.185304][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1236.185330][ C0] ? __pfx_kthread+0x10/0x10 [ 1236.185352][ C0] ret_from_fork+0x510/0xa50 [ 1236.185372][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1236.185388][ C0] ? __switch_to+0xc9e/0x1480 [ 1236.185415][ C0] ? __pfx_kthread+0x10/0x10 [ 1236.185438][ C0] ret_from_fork_asm+0x1a/0x30 [ 1236.185472][ C0] [ 1236.561072][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1236.567953][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1236.577055][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.587114][ T31] Call Trace: [ 1236.590388][ T31] [ 1236.593313][ T31] vpanic+0x1e0/0x670 [ 1236.597294][ T31] panic+0xb9/0xc0 [ 1236.601002][ T31] ? __pfx_panic+0x10/0x10 [ 1236.605405][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1236.610762][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1236.616906][ T31] watchdog+0xfdf/0xfe0 [ 1236.621069][ T31] ? watchdog+0x20a/0xfe0 [ 1236.625442][ T31] kthread+0x711/0x8a0 [ 1236.629542][ T31] ? __pfx_watchdog+0x10/0x10 [ 1236.634312][ T31] ? __pfx_kthread+0x10/0x10 [ 1236.638924][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1236.644113][ T31] ? __pfx_kthread+0x10/0x10 [ 1236.648689][ T31] ret_from_fork+0x510/0xa50 [ 1236.653289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1236.658449][ T31] ? __switch_to+0xc9e/0x1480 [ 1236.663128][ T31] ? __pfx_kthread+0x10/0x10 [ 1236.667818][ T31] ret_from_fork_asm+0x1a/0x30 [ 1236.672597][ T31] [ 1236.676047][ T31] Kernel Offset: disabled [ 1236.680374][ T31] Rebooting in 86400 seconds..