last executing test programs: 2m10.390495138s ago: executing program 32 (id=2813): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x18}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa00000}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m38.263874925s ago: executing program 2 (id=3154): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) 1m36.716748356s ago: executing program 2 (id=3161): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000000), 0xffffff98) write$bt_hci(r0, 0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b700000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r5, 0x5020}], 0x2, 0x0, 0x0, 0x0) shutdown(r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1m35.749854438s ago: executing program 2 (id=3168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r8, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r5}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) 1m34.815867368s ago: executing program 2 (id=3173): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x2, 0x22, 0x0) socket(0x400000000010, 0x6, 0xdc1f) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x73, &(0x7f0000000080)=0xfffffffffc000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x42000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r7) socket(0x10, 0x3, 0x0) 1m33.91621077s ago: executing program 2 (id=3179): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400), 0x0) shutdown(r1, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x17, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0x8, 0xa, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb721704}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) socketpair(0x10, 0x80f, 0x9, &(0x7f0000000000)) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r7) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r5, 0x0, 0x1100000000f336, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) 1m32.979013005s ago: executing program 2 (id=3185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000885}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/123, 0x7b}, {0x0}], 0x8, &(0x7f0000000e00)=""/183, 0xb7}, 0x60) bind$bt_l2cap(r2, &(0x7f0000000ac0)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r3, 0x3f38e000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYRES16=r6], 0x290) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) 1m24.10816436s ago: executing program 3 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b4d6d275fd3a393110000000000000000000800010002000000"], 0x20}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0xffffff33}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea15"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000080)=0xffdffffe, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000200000004000000ffa93f5cf7bf2d0514c0de6e8851e9f0cd90e1ca4f050ff06a8eebb7639dc7b3d8464f36a654c3e8e5c40235c4f2e1dea05fa2b6121be3b92e3147702a2df422977e8c32a92414a745b18963d0aa79533a6c07febed0ea7e5482b33dd26673174572d22660e2d0566a2a341e5e7b8d2490b202f5df9edda70efbc40f849dfb43fb66f5045efb1bd4e3abc8a7d05e2db035387ca32c785ca85ed1ffb787d9f5bc10f3031dff90b33d5e520bc49c8ef70a09eeba6d95956a07c171c83fa16aa79434a54904"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m24.068531041s ago: executing program 3 (id=3223): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000400)=""/201, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000060000", @ANYBLOB, @ANYRESDEC=r3], 0x48}}, 0x20008001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX=r1, @ANYRESHEX=r5], 0x10) close(r2) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000091) 1m23.876568965s ago: executing program 3 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000100)='^'}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1], 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x110, r5, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc9, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xbc\xdb\x7f\x9a\xf2\xb7\xc5\xb7|\xca\x85\xfd\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\xd9\\\xbf\\s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xf1\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8f'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x110}}, 0x4904) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r7, &(0x7f00000005c0), 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) tee(r6, r8, 0xaf6, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 1m23.555442135s ago: executing program 3 (id=3227): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r9, 0x0, 0x7f}, 0x18) r10 = socket$inet6(0xa, 0x3, 0x3c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) sendmsg$nl_generic(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1m23.291699541s ago: executing program 3 (id=3229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r3, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x61d8, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r6, 0x400, 0x0, 0x25dfdbfe, {0x7}, [@L2TP_ATTR_IFNAME={0xfffffffffffffeb3}, @L2TP_ATTR_VLAN_ID={0x0, 0xe, 0x7}]}, 0x28}}, 0x0) 1m22.935409261s ago: executing program 3 (id=3231): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000040), &(0x7f0000000940)=r4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1m18.275832682s ago: executing program 33 (id=3181): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x21, 0xa, 0x10000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 1m17.881792012s ago: executing program 34 (id=3185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000885}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/123, 0x7b}, {0x0}], 0x8, &(0x7f0000000e00)=""/183, 0xb7}, 0x60) bind$bt_l2cap(r2, &(0x7f0000000ac0)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r3, 0x3f38e000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYRES16=r6], 0x290) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) 1m7.797266958s ago: executing program 35 (id=3231): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000040), &(0x7f0000000940)=r4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1m6.084254084s ago: executing program 7 (id=3295): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, 0xffffffffffffffff, 0x180000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYBLOB="010027bd7000fedbdf2527000000", @ANYRES32=r7, @ANYBLOB="b409487ef525fbcfadcc5eea02cf7053ffca6d0b788f0000ffdcb5bddba1caf6e7547dd20143faed9a762b945c6b30f0ff71ab764f6ddde4385c6244502a62c46193953d869a794ab13037599ed95cdf724cf8ec6127cda3c97e8e743a31d4da7405378fb6af04aa935dee085f984e74bbae0dbe0d024fd6483f3bf42fc593c0c72bf09b371a72c21092fbb2b52ec07d79087618"], 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003f80)={{0x1}, &(0x7f0000003f00), 0x0}, 0x20) sendmmsg$unix(r5, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)="46b5a705237b724832ff14bdb5c17c98268822317bc1b7b0ac52c18865add4673a2aa3fb3c3689d3ac187f89781c0a50440195b092", 0x35}, {&(0x7f0000003880)="e963adc386e86e097a97c5627b54847b0c31cacc9b", 0x15}, {0x0}, {&(0x7f0000003ac0)="e29b86bdbbf945bf07ef0578dd6d50312bfc0d077cbd", 0x16}, {&(0x7f0000003b00)="a6dcabcafe40aef371a75969b7d9e96404", 0x11}], 0x5, &(0x7f0000003bc0)=ANY=[@ANYBLOB="1c00000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32], 0x80, 0x20000000}}, {{&(0x7f0000004080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004100), 0x0, 0x0, 0x0, 0x880}}], 0x2, 0x40080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) socket$inet6(0xa, 0x2, 0x3a) 1m5.808743457s ago: executing program 7 (id=3297): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020600) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0xa, 0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r6}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1m5.364089795s ago: executing program 7 (id=3299): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000005000000000000000f00004000000000", @ANYRES32, @ANYBLOB="00000000d9824511b0c430c4ffffe2c879828e3e9ef371b798715e22c70dbe725d6d2946a99a98ecd008980ac8e57b6a030b64f53d88cd8791c048ed680543812a25779d36d11a7eaee0a9403b3785cc2459ca57f051579bec063d11385f91ee1411d8ff82e7ef8a0b09e38e17f84411c5c7f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/28], 0xac) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000001c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) close(r1) sendmsg$netlink(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 1m4.978679468s ago: executing program 7 (id=3302): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x800, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xffffff9b}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0xfffffffe) r7 = socket$inet(0xa, 0xcea3444113662a2d, 0x7bb1) listen(r7, 0x8) r8 = socket$inet(0xa, 0x80000, 0x84) listen(r8, 0x8) listen(0xffffffffffffffff, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}, {&(0x7f0000000200)="95cfdf9d76408ca77e218f97aabea8831db68862f7350000bbc2bf4ecd819782c8b4e8431250f56e7ba6027cad93ee2855d0e7ddd276b9fda1855a3279", 0x3d}], 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36e237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd00"/276], 0x114}], 0x1}, 0x0) 1m4.487442449s ago: executing program 7 (id=3304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @random="f826efffedcb"}, 0x8, {0x2, 0x4e23, @multicast2}, 'vlan1\x00'}) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r3, 0x0, 0x0}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf2506000000080004001d08982834000280080003000300000008000700f2ae000008000600060000000800090003000020080004000000000008000400c8cc0000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r5, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x0, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) 1m4.16566584s ago: executing program 7 (id=3306): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x21, 0xa, 0x10000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 58.471414616s ago: executing program 5 (id=3332): syz_emit_ethernet(0xda, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x6, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x6, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x2, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0xfffffffe, 0x0]}]}}}}}}}, 0x0) 58.240186689s ago: executing program 5 (id=3333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x500, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r8, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r5}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) 57.269775275s ago: executing program 5 (id=3335): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) 57.108269927s ago: executing program 5 (id=3337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xac}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 57.030678343s ago: executing program 5 (id=3338): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000b00)}}], 0x1, 0x24000045) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x0) 56.02590225s ago: executing program 5 (id=3343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0xe0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11000000050000", 0x28}], 0x1) 49.064816171s ago: executing program 36 (id=3306): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x21, 0xa, 0x10000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 41.991571481s ago: executing program 9 (id=3417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x500, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r8, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r5}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) 40.974701364s ago: executing program 37 (id=3343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0xe0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11000000050000", 0x28}], 0x1) 40.956848208s ago: executing program 9 (id=3430): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0) 40.857652331s ago: executing program 9 (id=3432): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x1) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x128}, 0x84) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r5, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x9, 0x6, @broadcast}, 0x14) 40.649650123s ago: executing program 9 (id=3433): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) 38.952274152s ago: executing program 9 (id=3451): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000500)="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", 0x17f}], 0x3}, 0x0) 38.540414414s ago: executing program 9 (id=3454): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x21, 0xa, 0x10000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 23.44858801s ago: executing program 38 (id=3454): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x21, 0xa, 0x10000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 11.110824287s ago: executing program 6 (id=3641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 10.900861867s ago: executing program 6 (id=3644): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x4, 0x6, 0xe, 0x13504, r7, 0x80, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, @void, @value, @value=r6}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$FICLONE(r11, 0x40049409, r7) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r3, 0x0, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r12, 0x11, 0xb, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x151}], 0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(0x0, r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000) 9.938425379s ago: executing program 6 (id=3653): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 9.536935466s ago: executing program 6 (id=3656): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000e40)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000880)="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", 0xfd}, {&(0x7f0000000980)}, {&(0x7f0000000a80)="2d3dc66de97ab9a3ab3b0df9042b7b297ecf453fdf0ca6b2c21d9ae7b9ca36ff07bacc23ebeb23c78a596a169fc257b06c14911d066e9800815e805ee55acc95aa3ee0fc6f9c5545d4633291e608aacfd986c724992feed8f57d6403e4fef0d64a6b03b68917c7106631756bcdcfff12ff3fcb2fc94648ca55ffa09f1a57e208d01306d655d4fed86527b803d049016b7c3804db052d884a5b889c0f712554", 0x9f}, {&(0x7f0000000e80)}, {&(0x7f0000000b40)="28fe17b14b3bfcebcf4f5eaaced21415708266bed2713280dd8420", 0x1b}, {&(0x7f0000000c40)="601bdf6c0f20cf2fa8d3249fcf9f1ae2f3c4d537ce71f9452f3830e404320c9bfea3a99da1b90d0732", 0x29}, {0x0}, {&(0x7f0000000cc0)="e6ea4658213d8e538219b1f3360efcb1b2473f2a5e63873d00480b969bc7d5e016536f72ae2529b0a840ddf30696ac7d20e660739c55ca217669e42b653371f0", 0x40}], 0x8, 0x0, 0x0, 0x4}, 0x2400c084) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmmsg$alg(r3, 0x0, 0x0, 0x4081) close(r3) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf2521000000080003", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 9.385688352s ago: executing program 6 (id=3659): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14) 9.247513393s ago: executing program 6 (id=3662): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r5}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8) unshare(0x6a040000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x12) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) 5.437809429s ago: executing program 4 (id=3695): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000680)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r3, 0x0, 0x10}, 0xc) close(r4) 5.214221751s ago: executing program 4 (id=3700): r0 = socket(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r2, 0x1) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) 5.003629865s ago: executing program 4 (id=3701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x500, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r8, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r5}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) 4.581641104s ago: executing program 1 (id=3704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x700, @private0, 0x599}}, [0xfffffffffffffffb, 0x8000000000000001, 0x8, 0x4, 0x1, 0xe, 0x9, 0xfffffffffffffaf0, 0x2, 0x8, 0x237, 0x51, 0x4, 0x3, 0x4]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r4, 0x3}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f0000000840), &(0x7f0000004880)=@udp=r5}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x22) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r9, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x10) socket$inet6(0xa, 0x4, 0x2a) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0xc21, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, 0x503}, [@IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) 4.095800309s ago: executing program 4 (id=3707): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x804) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.6385079s ago: executing program 1 (id=3711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4082, 0xff2}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 3.152426351s ago: executing program 4 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) readv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/231, 0xe7}], 0x1) 2.549107487s ago: executing program 8 (id=3716): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) 2.236222577s ago: executing program 4 (id=3717): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) write$bt_hci(r1, 0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b703000000000000250000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r6, 0x5020}], 0x2, 0x0, 0x0, 0x0) shutdown(r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1.449969491s ago: executing program 1 (id=3718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x500, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r8, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r5}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) 1.389924235s ago: executing program 0 (id=3719): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.216156828s ago: executing program 8 (id=3720): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000006340)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x8, 0x6, 0x900, 0x401}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2a00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x20008081) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000"], 0x6c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r8, &(0x7f0000000480)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@any, "3ef9709b32572c6e7bb0e862a395489c", "13bf5c597de9b089e5f5b5525def5e2f"}}}, 0x2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r11, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x34, r11, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r2, 0xd9, 0xca28, 0xc3, 0xfff, 0x2, 0x3, 0xffff2366, {r2, @in={{0x2, 0x4e23, @multicast1}}, 0xbc, 0x3, 0x2, 0xb67, 0x80000001}}, &(0x7f0000000400)=0xb0) socket$kcm(0x29, 0x0, 0x0) 998.105279ms ago: executing program 0 (id=3721): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48) r2 = socket(0x8, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384", 0x7}], 0x1}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x44005}, 0x8000) 987.474595ms ago: executing program 8 (id=3722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 813.296276ms ago: executing program 8 (id=3723): pipe(0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40048a4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 750.540542ms ago: executing program 8 (id=3724): socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0xff03}], 0x1, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400200100000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) 714.752301ms ago: executing program 0 (id=3725): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 590.294196ms ago: executing program 8 (id=3726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x500, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r8, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r5}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) 529.519015ms ago: executing program 1 (id=3727): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000066c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {0x10, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 408.431309ms ago: executing program 1 (id=3728): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/6, 0x6}, 0x42a}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$kcm(0x2, 0xa, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 406.500023ms ago: executing program 0 (id=3729): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r5}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8) unshare(0x6a040000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x12) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) 304.036063ms ago: executing program 1 (id=3730): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x4, 0x6, 0xe, 0x13504, r7, 0x80, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, @void, @value, @value=r6}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$FICLONE(r11, 0x40049409, r7) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r3, 0x0, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r12, 0x11, 0xb, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(0x0, r14) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000) 148.792309ms ago: executing program 0 (id=3731): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 0s ago: executing program 0 (id=3732): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 76.342705][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2495'. [ 576.457606][T17421] smc: net device bond0 applied user defined pnetid SYZ2 [ 576.466413][T17421] smc: net device bond0 erased user defined pnetid SYZ2 [ 576.750468][T17430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2497'. [ 576.855375][T17435] wg1 speed is unknown, defaulting to 1000 [ 576.867262][T17433] smc: net device bond0 applied user defined pnetid SYZ2 [ 576.878881][T17433] smc: net device bond0 erased user defined pnetid SYZ2 [ 576.920400][T17435] lo speed is unknown, defaulting to 1000 [ 577.433632][T17447] wg1 speed is unknown, defaulting to 1000 [ 577.442033][T17447] lo speed is unknown, defaulting to 1000 [ 577.745894][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 577.755707][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 577.766668][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 577.793709][T17462] wg1 speed is unknown, defaulting to 1000 [ 577.809971][T17462] lo speed is unknown, defaulting to 1000 [ 578.653383][T17501] wg1 speed is unknown, defaulting to 1000 [ 578.661885][T17501] lo speed is unknown, defaulting to 1000 [ 578.841232][T17507] netlink: 2308 bytes leftover after parsing attributes in process `syz.3.2520'. [ 579.336293][T17518] wg1 speed is unknown, defaulting to 1000 [ 579.345428][T17518] lo speed is unknown, defaulting to 1000 [ 579.363638][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 579.373397][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 579.392656][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 579.679335][T17524] syzkaller1: entered promiscuous mode [ 579.687511][T17524] syzkaller1: entered allmulticast mode [ 580.243888][T17544] wg1 speed is unknown, defaulting to 1000 [ 580.251843][T17544] lo speed is unknown, defaulting to 1000 [ 581.870609][T17581] tipc: Enabling of bearer rejected, already enabled [ 581.906775][T17567] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 582.032779][T17586] wg1 speed is unknown, defaulting to 1000 [ 582.052737][T17586] lo speed is unknown, defaulting to 1000 [ 582.720770][T17605] tipc: Enabled bearer , priority 0 [ 582.789395][T17595] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 582.892983][T17605] tipc: Resetting bearer [ 583.146682][T17591] tipc: Disabling bearer [ 583.417362][T17637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2561'. [ 583.500356][T17641] smc: net device bond0 applied user defined pnetid SYZ2 [ 583.523797][T17641] smc: net device bond0 erased user defined pnetid SYZ2 [ 583.900484][T17651] wg1 speed is unknown, defaulting to 1000 [ 583.932330][T17651] lo speed is unknown, defaulting to 1000 [ 584.445635][T17653] tipc: Enabling of bearer rejected, already enabled [ 584.476594][T17663] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2568'. [ 584.533883][T17653] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 584.793217][T17673] wg1 speed is unknown, defaulting to 1000 [ 585.016095][T17673] lo speed is unknown, defaulting to 1000 [ 585.734788][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 585.925235][T17701] wg1 speed is unknown, defaulting to 1000 [ 585.944698][T17701] lo speed is unknown, defaulting to 1000 [ 585.949619][T17699] wg1 speed is unknown, defaulting to 1000 [ 585.985173][T17699] lo speed is unknown, defaulting to 1000 [ 585.994642][T17707] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2580'. [ 586.574324][T17713] team0: Device ipip0 is up. Set it down before adding it as a team port [ 586.652829][T17720] syzkaller0: entered promiscuous mode [ 586.660938][T17720] syzkaller0: entered allmulticast mode [ 586.923267][T17730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2586'. [ 586.983529][T17733] wg1 speed is unknown, defaulting to 1000 [ 587.022185][T17735] smc: net device bond0 applied user defined pnetid SYZ2 [ 587.033928][T17733] lo speed is unknown, defaulting to 1000 [ 587.057170][T17735] smc: net device bond0 erased user defined pnetid SYZ2 [ 587.442534][T17745] wg1 speed is unknown, defaulting to 1000 [ 587.472634][T17745] lo speed is unknown, defaulting to 1000 [ 588.052752][T17766] wg1 speed is unknown, defaulting to 1000 [ 588.061330][T17766] lo speed is unknown, defaulting to 1000 [ 588.557466][T17792] wg1 speed is unknown, defaulting to 1000 [ 588.578871][T17792] lo speed is unknown, defaulting to 1000 [ 588.749564][T17794] netlink: 844 bytes leftover after parsing attributes in process `syz.2.2602'. [ 588.885947][T17799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2602'. [ 589.610299][T17819] netlink: 'syz.2.2609': attribute type 1 has an invalid length. [ 589.702293][T17819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 589.731837][T17821] bond4: (slave gretap2): making interface the new active one [ 589.742833][T17821] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 590.134294][T17839] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2614'. [ 590.358779][T17828] tipc: Enabling of bearer rejected, already enabled [ 590.364496][T17843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2615'. [ 590.399659][T17828] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 591.167257][T17862] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2621'. [ 591.572510][T17870] wg1 speed is unknown, defaulting to 1000 [ 591.580300][T17870] lo speed is unknown, defaulting to 1000 [ 591.812682][T17880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2626'. [ 591.925060][T17877] smc: net device bond0 applied user defined pnetid SYZ2 [ 591.937628][T17877] smc: net device bond0 erased user defined pnetid SYZ2 [ 593.173397][T17925] wg1 speed is unknown, defaulting to 1000 [ 593.182996][T17925] lo speed is unknown, defaulting to 1000 [ 593.297639][T17929] wg1 speed is unknown, defaulting to 1000 [ 593.317180][T17929] lo speed is unknown, defaulting to 1000 [ 593.553077][T17942] wg1 speed is unknown, defaulting to 1000 [ 593.570354][T17942] lo speed is unknown, defaulting to 1000 [ 593.838657][T17941] tipc: Enabling of bearer rejected, already enabled [ 593.866354][T17941] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 594.000604][T17952] wg1 speed is unknown, defaulting to 1000 [ 594.040054][T17952] lo speed is unknown, defaulting to 1000 [ 594.489993][T17972] team0: Device ipip0 is of different type [ 594.696826][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 594.717047][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'. [ 595.236743][T18004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2659'. [ 595.386022][T18011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2660'. [ 595.468121][T18015] smc: net device bond0 applied user defined pnetid SYZ2 [ 595.485038][T18015] smc: net device bond0 erased user defined pnetid SYZ2 [ 595.873880][T18032] team0: Device ipip0 is up. Set it down before adding it as a team port [ 596.023505][T18036] syzkaller0: entered promiscuous mode [ 596.071812][T18036] syzkaller0: entered allmulticast mode [ 596.266773][T18039] wg1 speed is unknown, defaulting to 1000 [ 596.276394][T18039] lo speed is unknown, defaulting to 1000 [ 596.746279][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'. [ 596.866112][T18061] wg1 speed is unknown, defaulting to 1000 [ 596.880570][T18061] lo speed is unknown, defaulting to 1000 [ 597.231277][T18078] wg1 speed is unknown, defaulting to 1000 [ 597.231577][T18084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2685'. [ 597.309558][T18078] lo speed is unknown, defaulting to 1000 [ 597.438536][T18075] tipc: Enabling of bearer rejected, already enabled [ 597.450150][T18075] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 597.534686][T18074] tipc: Enabling of bearer rejected, already enabled [ 597.548645][T18074] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 597.708377][T18093] wg1 speed is unknown, defaulting to 1000 [ 597.941855][T18105] Bluetooth: MGMT ver 1.23 [ 597.975325][T18093] lo speed is unknown, defaulting to 1000 [ 598.003946][T18098] wg1 speed is unknown, defaulting to 1000 [ 598.013474][T18098] lo speed is unknown, defaulting to 1000 [ 598.259386][T18112] syzkaller0: left promiscuous mode [ 598.264697][T18112] syzkaller0: left allmulticast mode [ 598.495788][ T1037] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 599.198609][T18143] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2697'. [ 599.384332][T18156] netlink: 'syz.4.2698': attribute type 8 has an invalid length. [ 599.414439][T18153] wg1 speed is unknown, defaulting to 1000 [ 599.431314][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'. [ 599.440389][T18153] lo speed is unknown, defaulting to 1000 [ 599.465560][T18159] netlink: 'syz.4.2698': attribute type 8 has an invalid length. [ 599.535343][T18159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'. [ 599.606735][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 599.783392][T18173] wg1 speed is unknown, defaulting to 1000 [ 599.796773][T18173] lo speed is unknown, defaulting to 1000 [ 600.020803][T18184] wg1 speed is unknown, defaulting to 1000 [ 600.033973][T18167] tipc: Enabling of bearer rejected, already enabled [ 600.123238][T18184] lo speed is unknown, defaulting to 1000 [ 600.161816][T18167] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 600.300070][T18191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2707'. [ 600.667307][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 601.161121][T18218] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2713'. [ 601.442021][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2715'. [ 601.483167][T18225] wg1 speed is unknown, defaulting to 1000 [ 601.500498][T18225] lo speed is unknown, defaulting to 1000 [ 601.611316][T18222] wg1 speed is unknown, defaulting to 1000 [ 601.709595][T18222] lo speed is unknown, defaulting to 1000 [ 602.009848][T18237] wg1 speed is unknown, defaulting to 1000 [ 602.031629][T18237] lo speed is unknown, defaulting to 1000 [ 602.047151][T18227] tipc: Enabled bearer , priority 0 [ 602.107474][T18227] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 602.133241][T18227] tipc: Resetting bearer [ 602.226589][T18233] tipc: Enabling of bearer rejected, already enabled [ 602.238353][T18233] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 602.368902][T18224] tipc: Disabling bearer [ 602.801878][T18251] bridge0: port 1(vlan1) entered blocking state [ 602.824965][T18251] bridge0: port 1(vlan1) entered disabled state [ 602.852023][T18251] vlan1: entered allmulticast mode [ 602.878683][T18251] bridge0: entered allmulticast mode [ 602.896518][T18251] vlan1: left allmulticast mode [ 602.948084][T18251] bridge0: left allmulticast mode [ 603.111026][T18247] tipc: Enabling of bearer rejected, already enabled [ 603.123336][T18247] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 603.354457][T18254] tipc: Enabling of bearer rejected, already enabled [ 603.367505][T18254] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 603.575012][T18273] bridge0: entered promiscuous mode [ 603.820407][T18275] wg1 speed is unknown, defaulting to 1000 [ 603.862843][T18275] lo speed is unknown, defaulting to 1000 [ 604.052998][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 604.219823][T18280] wg1 speed is unknown, defaulting to 1000 [ 604.247537][T18280] lo speed is unknown, defaulting to 1000 [ 604.465493][T18304] bridge0: entered allmulticast mode [ 604.522222][T18304] pim6reg: entered allmulticast mode [ 604.535529][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 604.674636][T18314] netlink: 'syz.3.2738': attribute type 1 has an invalid length. [ 604.684112][T18314] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2738'. [ 604.698702][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 604.754317][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 604.776408][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2738'. [ 604.946168][T18323] wg1 speed is unknown, defaulting to 1000 [ 604.954898][T18323] lo speed is unknown, defaulting to 1000 [ 605.209395][T18335] netlink: 'syz.3.2744': attribute type 10 has an invalid length. [ 605.333938][T18335] team0: Port device 0! added [ 605.437167][T18335] netlink: 'syz.3.2744': attribute type 10 has an invalid length. [ 605.465927][T18344] wg1 speed is unknown, defaulting to 1000 [ 605.659678][T18335] team0: Port device 0! removed [ 605.665870][T18344] lo speed is unknown, defaulting to 1000 [ 605.984336][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2750'. [ 606.019986][T18360] wg1 speed is unknown, defaulting to 1000 [ 606.027652][T18360] lo speed is unknown, defaulting to 1000 [ 606.241323][T18359] wg1 speed is unknown, defaulting to 1000 [ 606.311118][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2753'. [ 606.457532][T18359] lo speed is unknown, defaulting to 1000 [ 606.536094][T18374] macvlan1: entered promiscuous mode [ 606.588358][T18374] macvlan1: entered allmulticast mode [ 606.625920][T18374] bond5: (slave macvlan1): Opening slave failed [ 606.869866][T18386] tipc: Resetting bearer [ 606.890576][T18386] bond4: (slave gretap2): Releasing active interface [ 606.963074][T18386] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 607.287089][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'. [ 607.873537][T18412] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2763'. [ 608.005346][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2766'. [ 608.053885][T18403] tipc: Enabling of bearer rejected, already enabled [ 608.075865][T18426] dvmrp8: entered allmulticast mode [ 608.084929][T18428] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 608.185384][T18428] 8021q: adding VLAN 0 to HW filter on device bond10 [ 608.281792][T18434] bond10: (slave veth11): Enslaving as an active interface with a down link [ 608.315333][T18428] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 608.360415][T18428] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 608.493244][T18403] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 608.605683][T18442] wg1 speed is unknown, defaulting to 1000 [ 608.647035][T18442] lo speed is unknown, defaulting to 1000 [ 609.067515][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2774'. [ 609.166457][T18464] wg1 speed is unknown, defaulting to 1000 [ 609.187277][T18464] lo speed is unknown, defaulting to 1000 [ 609.209790][T18462] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 609.440405][T18456] wg1 speed is unknown, defaulting to 1000 [ 609.443955][ T5963] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 609.486705][T18456] lo speed is unknown, defaulting to 1000 [ 609.612153][T18483] wg1 speed is unknown, defaulting to 1000 [ 609.657591][T18483] lo speed is unknown, defaulting to 1000 [ 609.672393][T18494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.689096][T18494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.079128][T18522] bridge0: entered promiscuous mode [ 610.882287][T18545] wg1 speed is unknown, defaulting to 1000 [ 610.919927][T18545] lo speed is unknown, defaulting to 1000 [ 611.401173][T18560] wg1 speed is unknown, defaulting to 1000 [ 611.466362][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2800'. [ 611.475538][T18560] lo speed is unknown, defaulting to 1000 [ 611.757203][T18568] bond11 (unregistering): Released all slaves [ 611.864035][T18576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2804'. [ 611.891549][T18576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2804'. [ 611.921206][T18576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2804'. [ 611.935498][T18576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2804'. [ 612.263365][T18588] team0: Device ipip0 is of different type [ 612.344127][T18593] syzkaller0: entered promiscuous mode [ 612.353477][T18593] syzkaller0: entered allmulticast mode [ 612.408695][T18586] tipc: Enabling of bearer rejected, already enabled [ 612.422669][T18586] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 612.482835][T18596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2811'. [ 612.589567][T18600] smc: net device bond0 applied user defined pnetid SYZ2 [ 612.607283][T18600] smc: net device bond0 erased user defined pnetid SYZ2 [ 612.659273][T18603] lo speed is unknown, defaulting to 1000 [ 612.665462][T18603] lo speed is unknown, defaulting to 1000 [ 612.679455][T18603] lo speed is unknown, defaulting to 1000 [ 612.701550][T18603] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 612.786927][T18603] lo speed is unknown, defaulting to 1000 [ 612.820099][T18603] lo speed is unknown, defaulting to 1000 [ 612.850097][T18604] netlink: 'syz.1.2813': attribute type 4 has an invalid length. [ 612.859008][T18603] lo speed is unknown, defaulting to 1000 [ 612.867672][T18603] lo speed is unknown, defaulting to 1000 [ 612.876969][T18603] lo speed is unknown, defaulting to 1000 [ 613.077265][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'. [ 613.404499][T18611] tipc: Enabling of bearer rejected, already enabled [ 613.423671][T18611] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 613.720532][T18631] tipc: Enabling of bearer rejected, already enabled [ 613.743911][T18631] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 613.953185][T18642] netlink: 'syz.2.2826': attribute type 4 has an invalid length. [ 613.961585][T18640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2825'. [ 613.984911][T18642] netlink: 'syz.2.2826': attribute type 4 has an invalid length. [ 614.010308][ T5931] lo speed is unknown, defaulting to 1000 [ 614.024323][ T5931] syz1: Port: 1 Link ACTIVE [ 614.060888][T18644] smc: net device bond0 applied user defined pnetid SYZ2 [ 614.068499][T18644] smc: net device bond0 erased user defined pnetid SYZ2 [ 614.322182][T18649] bond0: (slave rose0): Enslaving as an active interface with an up link [ 614.760889][T18665] lo speed is unknown, defaulting to 1000 [ 614.768828][T18665] lo speed is unknown, defaulting to 1000 [ 615.154879][T18677] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2837'. [ 615.439561][T18688] netlink: 'syz.3.2841': attribute type 4 has an invalid length. [ 615.499308][T18690] tipc: Resetting bearer [ 615.620789][T18693] netlink: 'syz.3.2843': attribute type 1 has an invalid length. [ 615.640192][T18693] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2843'. [ 619.056198][T18726] lo speed is unknown, defaulting to 1000 [ 619.070709][T18726] lo speed is unknown, defaulting to 1000 [ 619.172442][T18740] netlink: 'syz.4.2861': attribute type 4 has an invalid length. [ 619.412484][T18751] tipc: Enabling of bearer rejected, failed to enable media [ 619.423033][T18752] tipc: Resetting bearer [ 619.710748][T18766] team0: Device ipip0 is up. Set it down before adding it as a team port [ 619.836302][T18770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.919473][T18780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 620.926406][T18797] lo speed is unknown, defaulting to 1000 [ 620.940133][T18797] lo speed is unknown, defaulting to 1000 [ 621.276404][T18818] __nla_validate_parse: 3 callbacks suppressed [ 621.276424][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 621.468175][T18826] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 621.566278][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2885'. [ 621.881872][T18826] bond6: (slave veth13): Enslaving as an active interface with a down link [ 621.951174][T18828] 8021q: adding VLAN 0 to HW filter on device bond6 [ 621.963183][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2886'. [ 622.115801][T18830] lo speed is unknown, defaulting to 1000 [ 622.130568][T18830] lo speed is unknown, defaulting to 1000 [ 622.265847][T18835] lo speed is unknown, defaulting to 1000 [ 622.282938][T18835] lo speed is unknown, defaulting to 1000 [ 622.575558][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2892'. [ 623.425769][T18866] netlink: 884 bytes leftover after parsing attributes in process `syz.3.2896'. [ 623.466864][T18866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2896'. [ 623.726543][T18878] siw: device registration error -23 [ 623.847546][T18881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2900'. [ 623.901678][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 623.956027][T18885] smc: net device bond0 applied user defined pnetid SYZ2 [ 623.970949][T18885] smc: net device bond0 erased user defined pnetid SYZ2 [ 624.097188][T18883] lo speed is unknown, defaulting to 1000 [ 624.106009][T18883] lo speed is unknown, defaulting to 1000 [ 624.212852][T18891] lo speed is unknown, defaulting to 1000 [ 624.221652][T18891] lo speed is unknown, defaulting to 1000 [ 624.463901][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.731048][T18911] netlink: 'syz.3.2908': attribute type 4 has an invalid length. [ 624.895005][T18913] lo speed is unknown, defaulting to 1000 [ 624.907201][T18913] lo speed is unknown, defaulting to 1000 [ 625.104233][T18919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2910'. [ 625.222122][T18922] smc: net device bond0 applied user defined pnetid SYZ2 [ 625.242864][T18922] smc: net device bond0 erased user defined pnetid SYZ2 [ 625.494907][T18926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2912'. [ 625.656197][T18930] smc: net device bond0 applied user defined pnetid SYZ2 [ 625.664180][T18932] smc: net device bond0 erased user defined pnetid SYZ2 [ 625.956697][T18940] lo speed is unknown, defaulting to 1000 [ 625.983919][T18940] lo speed is unknown, defaulting to 1000 [ 625.984019][T18942] lo speed is unknown, defaulting to 1000 [ 626.000899][T18942] lo speed is unknown, defaulting to 1000 [ 626.366497][T18963] pimreg: entered allmulticast mode [ 626.379691][T18963] pimreg: left allmulticast mode [ 626.449552][T18965] IPVS: stopping master sync thread 11895 ... [ 626.544521][T18961] tipc: Enabled bearer , priority 0 [ 626.559449][T18961] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 626.571005][T18961] tipc: Resetting bearer [ 626.920247][T18981] __nla_validate_parse: 1 callbacks suppressed [ 626.920267][T18981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2926'. [ 627.040862][T18987] smc: net device bond0 applied user defined pnetid SYZ2 [ 627.066098][T18987] smc: net device bond0 erased user defined pnetid SYZ2 [ 627.086941][T18957] tipc: Disabling bearer [ 627.246107][T18994] lo speed is unknown, defaulting to 1000 [ 627.255092][T18994] lo speed is unknown, defaulting to 1000 [ 627.284549][T18996] netlink: 'syz.4.2931': attribute type 12 has an invalid length. [ 627.303641][T18996] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2931'. [ 627.375830][T18997] lo speed is unknown, defaulting to 1000 [ 627.390042][T18997] lo speed is unknown, defaulting to 1000 [ 627.516391][T19001] tipc: Enabling of bearer rejected, failed to enable media [ 627.753844][T19010] lo speed is unknown, defaulting to 1000 [ 627.764993][T19010] lo speed is unknown, defaulting to 1000 [ 628.058312][T18947] Bluetooth: hci4: command 0x0406 tx timeout [ 628.274315][T19037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2939'. [ 628.336209][T18947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.346259][T18947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.355817][T18947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 628.356674][T19038] lo speed is unknown, defaulting to 1000 [ 628.379540][T18947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 628.390685][T18947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 628.392142][T19042] smc: net device bond0 applied user defined pnetid SYZ2 [ 628.408379][T19042] smc: net device bond0 erased user defined pnetid SYZ2 [ 628.419098][T19038] lo speed is unknown, defaulting to 1000 [ 628.654991][T19039] lo speed is unknown, defaulting to 1000 [ 628.681519][T19039] lo speed is unknown, defaulting to 1000 [ 628.924255][T19055] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2943'. [ 629.109982][T19039] chnl_net:caif_netlink_parms(): no params data found [ 629.274686][T19039] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.282490][T19039] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.291022][T19039] bridge_slave_0: entered allmulticast mode [ 629.299777][T19039] bridge_slave_0: entered promiscuous mode [ 629.309839][T19039] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.317196][T19039] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.326138][T19039] bridge_slave_1: entered allmulticast mode [ 629.334406][T19039] bridge_slave_1: entered promiscuous mode [ 629.387292][T19039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.404380][T19039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.501166][T19039] team0: Port device team_slave_0 added [ 629.512112][T19039] team0: Port device team_slave_1 added [ 629.592357][T19039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.606077][T19039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.632727][T19039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.656616][T19039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.674695][T19039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.715804][T19071] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 629.719334][T19039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.808575][T19075] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 629.821548][T19075] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 629.875336][T19071] bond7: (slave bridge1): Enslaving as an active interface with a down link [ 629.894858][T19039] hsr_slave_0: entered promiscuous mode [ 629.902812][T19039] hsr_slave_1: entered promiscuous mode [ 629.910936][T19039] debugfs: 'hsr0' already exists in 'hsr' [ 629.916819][T19039] Cannot create hsr debugfs directory [ 629.930820][T19071] macvlan1: entered promiscuous mode [ 629.936175][T19071] macvlan1: entered allmulticast mode [ 629.943565][T19071] bond7: entered promiscuous mode [ 629.949679][T19071] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 629.959219][T19071] bond7: left promiscuous mode [ 630.329446][T19039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 630.342662][T19039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 630.354749][T19039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 630.367266][T19039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 630.458659][T18947] Bluetooth: hci5: command tx timeout [ 630.503614][T19039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.534170][T19039] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.554108][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.561309][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.585605][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.592845][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.816552][T19104] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2954'. [ 631.090272][T19110] nbd: nbd0 already in use [ 631.096270][T19110] block nbd0: NBD_DISCONNECT [ 631.116080][T19110] block nbd0: Send disconnect failed -107 [ 631.165234][T19113] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 631.234393][T19115] bond3: entered promiscuous mode [ 631.240522][T19115] bond3: entered allmulticast mode [ 631.246446][T19115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 631.265876][T19116] lo speed is unknown, defaulting to 1000 [ 631.285369][T19116] lo speed is unknown, defaulting to 1000 [ 631.412551][T19039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.545102][T19127] lo speed is unknown, defaulting to 1000 [ 631.555377][T19127] lo speed is unknown, defaulting to 1000 [ 631.853711][T19039] veth0_vlan: entered promiscuous mode [ 631.881077][T19039] veth1_vlan: entered promiscuous mode [ 631.937555][T19039] veth0_macvtap: entered promiscuous mode [ 631.971435][T19039] veth1_macvtap: entered promiscuous mode [ 631.984178][T19141] tipc: Enabling of bearer rejected, already enabled [ 632.025334][T19039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.060681][T19039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.093786][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.113105][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2964'. [ 632.114778][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.156308][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.166050][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.274462][T19150] lo speed is unknown, defaulting to 1000 [ 632.293783][T19150] lo speed is unknown, defaulting to 1000 [ 632.334310][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.369783][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.464211][T19157] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 632.508071][T19157] team0: Failed to send options change via netlink (err -105) [ 632.534102][T19157] team0: Failed to send options change via netlink (err -105) [ 632.539341][T18947] Bluetooth: hci5: command tx timeout [ 632.548075][T19157] team0: Mode changed to "activebackup" [ 632.599999][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.623262][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.686081][T19162] tipc: Enabling of bearer rejected, already enabled [ 632.824563][T19168] tipc: Enabling of bearer rejected, already enabled [ 632.839090][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2970'. [ 633.017453][T19171] tipc: Enabling of bearer rejected, already enabled [ 633.186055][T19182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2974'. [ 633.268737][T19165] tipc: Enabling of bearer rejected, already enabled [ 633.333881][T19189] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2977'. [ 633.361384][T19184] smc: net device bond0 applied user defined pnetid SYZ2 [ 633.371081][T19165] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 633.405086][T19184] smc: net device bond0 erased user defined pnetid SYZ2 [ 633.647247][T19199] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2979'. [ 633.874211][T19203] tipc: Enabled bearer , priority 0 [ 633.917539][T19203] syzkaller0: entered promiscuous mode [ 633.933659][T19203] syzkaller0: entered allmulticast mode [ 633.945031][T19208] netlink: 884 bytes leftover after parsing attributes in process `syz.4.2983'. [ 633.974015][T19209] tipc: Enabling of bearer rejected, already enabled [ 633.998178][T19203] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 634.049790][T19211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2983'. [ 634.088709][T19203] tipc: Resetting bearer [ 634.122550][T19201] tipc: Resetting bearer [ 634.212830][T19201] tipc: Disabling bearer [ 634.482755][T19221] tipc: Enabling of bearer rejected, already enabled [ 634.619001][T18947] Bluetooth: hci5: command tx timeout [ 635.135027][T19242] lo speed is unknown, defaulting to 1000 [ 635.194250][T19242] lo speed is unknown, defaulting to 1000 [ 635.230727][T19243] lo speed is unknown, defaulting to 1000 [ 635.261219][T19243] lo speed is unknown, defaulting to 1000 [ 635.355292][T19240] lo speed is unknown, defaulting to 1000 [ 635.363598][T19240] lo speed is unknown, defaulting to 1000 [ 635.606758][T19248] tipc: Enabled bearer , priority 0 [ 635.644592][T19248] syzkaller0: entered promiscuous mode [ 635.694280][T19248] syzkaller0: entered allmulticast mode [ 635.835598][T19248] tipc: Resetting bearer [ 635.878804][T19247] tipc: Resetting bearer [ 635.884590][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 635.929616][T19247] tipc: Disabling bearer [ 635.966374][T19256] !: entered promiscuous mode [ 635.985418][T19256] !: left promiscuous mode [ 636.213802][T19263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2998'. [ 636.276154][T19263] netlink: 'syz.0.2998': attribute type 10 has an invalid length. [ 636.287179][T19263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2998'. [ 636.304212][T19259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.361233][T19259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.700794][T18947] Bluetooth: hci5: command tx timeout [ 637.387046][T19193] Set syz1 is full, maxelem 65536 reached [ 637.723932][T19294] team0: Device ipip0 is up. Set it down before adding it as a team port [ 637.724054][T19295] __nla_validate_parse: 2 callbacks suppressed [ 637.724071][T19295] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3008'. [ 637.789148][T19296] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 637.995287][T19305] lo speed is unknown, defaulting to 1000 [ 638.003982][T19305] lo speed is unknown, defaulting to 1000 [ 638.009066][T19308] 8021q: VLANs not supported on team0 [ 638.034700][T19311] ipvlan0: entered promiscuous mode [ 638.043759][T19311] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 638.136988][T19304] lo speed is unknown, defaulting to 1000 [ 638.177397][T19304] lo speed is unknown, defaulting to 1000 [ 638.359379][T19313] lo speed is unknown, defaulting to 1000 [ 638.369068][T19313] lo speed is unknown, defaulting to 1000 [ 638.444162][T19328] tipc: Enabling of bearer rejected, already enabled [ 638.458256][ T5952] IPVS: starting estimator thread 0... [ 638.555613][T19321] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3013'. [ 638.590580][T19329] IPVS: using max 35 ests per chain, 84000 per kthread [ 638.685873][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 638.808480][T19345] tipc: Enabled bearer , priority 0 [ 638.817264][T19345] syzkaller0: entered promiscuous mode [ 638.823716][T19345] syzkaller0: entered allmulticast mode [ 638.890345][T19345] tipc: Resetting bearer [ 638.913104][T19349] team0: Device ipip0 is of different type [ 638.963670][T19344] tipc: Resetting bearer [ 638.990333][T19344] tipc: Disabling bearer [ 639.014941][T19355] syzkaller0: entered promiscuous mode [ 639.021486][T19355] syzkaller0: entered allmulticast mode [ 639.088374][T19356] lo speed is unknown, defaulting to 1000 [ 639.097554][T19356] lo speed is unknown, defaulting to 1000 [ 639.201397][T19362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3023'. [ 639.282641][T19367] smc: net device bond0 applied user defined pnetid SYZ2 [ 639.302990][T19367] smc: net device bond0 erased user defined pnetid SYZ2 [ 639.598230][T19379] lo speed is unknown, defaulting to 1000 [ 639.610909][T19379] lo speed is unknown, defaulting to 1000 [ 639.754409][T19381] lo speed is unknown, defaulting to 1000 [ 639.825693][T19382] lo speed is unknown, defaulting to 1000 [ 639.857845][T19381] lo speed is unknown, defaulting to 1000 [ 639.872425][T19382] lo speed is unknown, defaulting to 1000 [ 640.023482][T19383] tipc: Enabling of bearer rejected, already enabled [ 640.076774][T19383] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 640.724282][T19402] netlink: 884 bytes leftover after parsing attributes in process `syz.4.3033'. [ 640.772339][T19402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3033'. [ 640.894467][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3036'. [ 640.942212][T19409] tipc: Started in network mode [ 640.958851][T19409] tipc: Node identity 5a17f154e37d, cluster identity 4711 [ 640.966238][T19409] tipc: Enabled bearer , priority 0 [ 640.983749][T19414] Bluetooth: MGMT ver 1.23 [ 641.011086][T19414] geneve2: entered promiscuous mode [ 641.029484][T19415] syzkaller0: entered promiscuous mode [ 641.037623][T19415] syzkaller0: entered allmulticast mode [ 641.079707][T19416] smc: net device bond0 applied user defined pnetid SYZ2 [ 641.086345][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.087651][T19418] smc: net device bond0 erased user defined pnetid SYZ2 [ 641.098713][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'. [ 641.115958][T19409] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 641.167177][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.206812][T19409] tipc: Resetting bearer [ 641.223607][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.328753][T19407] tipc: Resetting bearer [ 641.365014][T19407] tipc: Disabling bearer [ 641.396446][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.660974][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3041'. [ 641.679744][T19432] macvtap2: entered promiscuous mode [ 641.685249][T19432] !: entered promiscuous mode [ 641.691313][T19432] macvtap2: entered allmulticast mode [ 641.696869][T19432] !: entered allmulticast mode [ 641.707408][T19432] !: left allmulticast mode [ 641.713282][T19432] !: left promiscuous mode [ 641.992690][T19438] lo speed is unknown, defaulting to 1000 [ 641.994401][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3045'. [ 642.014882][T19438] lo speed is unknown, defaulting to 1000 [ 642.203005][T19446] lo speed is unknown, defaulting to 1000 [ 642.211386][T19446] lo speed is unknown, defaulting to 1000 [ 642.459949][T19460] team0: Device ipip0 is up. Set it down before adding it as a team port [ 642.525251][T19463] syzkaller0: entered promiscuous mode [ 642.535985][T19463] syzkaller0: entered allmulticast mode [ 643.021284][T19481] tipc: Enabling of bearer rejected, already enabled [ 643.031812][T19467] lo speed is unknown, defaulting to 1000 [ 643.111408][T19467] lo speed is unknown, defaulting to 1000 [ 643.297121][T19492] netlink: 'syz.3.3054': attribute type 1 has an invalid length. [ 643.317656][T19492] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3054'. [ 643.348542][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 643.415800][T19495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3054'. [ 643.781240][T19503] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.808242][T19504] netlink: 'syz.3.3055': attribute type 12 has an invalid length. [ 643.971420][T19503] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.232871][T19503] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.282077][T19516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 644.362973][T19503] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.450210][T19516] lo speed is unknown, defaulting to 1000 [ 644.458928][T19516] lo speed is unknown, defaulting to 1000 [ 644.459521][T19521] tipc: Enabling of bearer rejected, already enabled [ 644.563785][ T5963] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.634629][ T1037] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.667115][ T1037] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.736429][ T1037] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.971886][T19537] netlink: 'syz.3.3066': attribute type 1 has an invalid length. [ 644.985300][T19537] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3066'. [ 644.999577][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 645.062607][T19541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3066'. [ 645.095309][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3067'. [ 645.146142][T19545] tipc: Enabling of bearer rejected, already enabled [ 645.233347][T19547] netlink: 'syz.3.3069': attribute type 10 has an invalid length. [ 645.426966][T19553] ipvlan0: entered promiscuous mode [ 645.440078][T19553] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 645.595583][T19552] lo speed is unknown, defaulting to 1000 [ 645.621893][T19552] lo speed is unknown, defaulting to 1000 [ 645.794298][T19558] lo speed is unknown, defaulting to 1000 [ 645.828803][T19558] lo speed is unknown, defaulting to 1000 [ 645.846362][T19563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3074'. [ 645.876119][T19563] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 646.169359][T19570] team0: Device ipip0 is up. Set it down before adding it as a team port [ 646.264869][T19575] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.280578][T19575] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 646.356102][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'. [ 646.632878][T19590] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.770042][T19590] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.919098][T19590] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.017780][T19590] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.317350][ T5963] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.353014][ T5963] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.486577][ T5963] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.600779][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.117479][T19628] tipc: Enabled bearer , priority 0 [ 648.142168][T19628] syzkaller0: entered promiscuous mode [ 648.158959][T19628] syzkaller0: entered allmulticast mode [ 648.251441][T19628] tipc: Resetting bearer [ 648.299317][T19627] tipc: Resetting bearer [ 648.335614][T19627] tipc: Disabling bearer [ 648.469185][T19636] lo speed is unknown, defaulting to 1000 [ 648.476859][T19636] lo speed is unknown, defaulting to 1000 [ 648.515643][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 648.562367][T19638] lo speed is unknown, defaulting to 1000 [ 648.583319][T19638] lo speed is unknown, defaulting to 1000 [ 648.789846][T19650] tipc: Enabling of bearer rejected, already enabled [ 648.804464][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3102'. [ 648.819458][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'. [ 648.833504][T19651] netlink: 'syz.4.3102': attribute type 7 has an invalid length. [ 649.657468][T19665] tipc: Enabled bearer , priority 0 [ 649.666916][T19665] syzkaller0: entered promiscuous mode [ 649.672591][T19665] syzkaller0: entered allmulticast mode [ 649.709523][T19665] tipc: Resetting bearer [ 649.750201][T19664] tipc: Resetting bearer [ 649.790011][T19664] tipc: Disabling bearer [ 650.395569][T19680] lo speed is unknown, defaulting to 1000 [ 650.423737][T19680] lo speed is unknown, defaulting to 1000 [ 650.546725][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 650.711421][T19682] tipc: Resetting bearer [ 650.727666][T19682] tipc: Resetting bearer [ 650.790082][T19690] veth1_macvtap: left promiscuous mode [ 650.795619][T19690] macsec0: entered allmulticast mode [ 650.980048][T19695] netlink: 884 bytes leftover after parsing attributes in process `syz.2.3115'. [ 651.048747][T19695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3115'. [ 651.373568][T19699] bridge_slave_0: left allmulticast mode [ 651.421391][T19699] bridge_slave_0: left promiscuous mode [ 651.427258][T19699] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.475824][T19699] bridge_slave_1: left allmulticast mode [ 651.505418][T19699] bridge_slave_1: left promiscuous mode [ 651.525378][T19699] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.570122][T19699] bond0: (slave bond_slave_0): Releasing backup interface [ 651.602152][T19699] bond0: (slave bond_slave_1): Releasing backup interface [ 651.649723][T19699] team0: Port device team_slave_0 removed [ 651.679741][T19699] team0: Port device team_slave_1 removed [ 651.694600][T19699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.709622][T19699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.739937][T19699] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 651.842589][T19704] lo speed is unknown, defaulting to 1000 [ 651.850773][T19704] lo speed is unknown, defaulting to 1000 [ 652.230165][T19711] netlink: 'syz.2.3119': attribute type 10 has an invalid length. [ 652.573155][T19721] lo speed is unknown, defaulting to 1000 [ 652.621762][T19721] lo speed is unknown, defaulting to 1000 [ 653.145607][T19739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3124'. [ 653.243324][T19742] smc: net device bond0 applied user defined pnetid SYZ2 [ 653.281472][T19742] smc: net device bond0 erased user defined pnetid SYZ2 [ 654.471119][T19753] lo speed is unknown, defaulting to 1000 [ 654.479580][T19753] lo speed is unknown, defaulting to 1000 [ 655.079077][T19766] lo speed is unknown, defaulting to 1000 [ 655.088087][T19766] lo speed is unknown, defaulting to 1000 [ 655.458803][T19771] netlink: 'syz.5.3131': attribute type 10 has an invalid length. [ 655.484034][T19771] team0: Port device dummy0 added [ 655.884676][T19785] lo speed is unknown, defaulting to 1000 [ 655.901495][T19785] lo speed is unknown, defaulting to 1000 [ 656.131297][T19791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3136'. [ 656.244880][T19791] smc: net device bond0 applied user defined pnetid SYZ2 [ 656.257196][T19791] smc: net device bond0 erased user defined pnetid SYZ2 [ 656.328295][T19793] lo speed is unknown, defaulting to 1000 [ 656.336669][T19793] lo speed is unknown, defaulting to 1000 [ 656.640901][T19809] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 656.692585][T19809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3139'. [ 656.715504][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 656.793099][T19809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3139'. [ 657.818568][T19844] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3144'. [ 657.877163][T19843] lo speed is unknown, defaulting to 1000 [ 657.897685][T19843] lo speed is unknown, defaulting to 1000 [ 657.924994][T19848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3145'. [ 657.944023][T19848] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3145'. [ 658.009046][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3145'. [ 658.498421][T19854] lo speed is unknown, defaulting to 1000 [ 658.520680][T19854] lo speed is unknown, defaulting to 1000 [ 658.549931][T19859] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3148'. [ 658.876105][T19863] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3149'. [ 658.987368][T19869] smc: net device bond0 applied user defined pnetid SYZ2 [ 659.042160][T19868] lo speed is unknown, defaulting to 1000 [ 659.069847][T19869] smc: net device bond0 erased user defined pnetid SYZ2 [ 659.129761][T19868] lo speed is unknown, defaulting to 1000 [ 659.168438][T19865] lo speed is unknown, defaulting to 1000 [ 659.199357][T19865] lo speed is unknown, defaulting to 1000 [ 659.512890][T19878] lo speed is unknown, defaulting to 1000 [ 659.530471][T19878] lo speed is unknown, defaulting to 1000 [ 660.674578][T19890] tipc: Enabling of bearer rejected, already enabled [ 660.725659][T19890] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 661.294546][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3158'. [ 661.470749][T19910] veth0: entered promiscuous mode [ 661.533291][T19910] veth0: left promiscuous mode [ 661.636635][T19919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 661.692069][T19914] 8021q: adding VLAN 0 to HW filter on device bond5 [ 661.719419][T19915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 661.729150][T19915] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 661.738458][T19917] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3160'. [ 661.912471][T19929] lo speed is unknown, defaulting to 1000 [ 661.922545][T19929] lo speed is unknown, defaulting to 1000 [ 662.641596][T19956] lo speed is unknown, defaulting to 1000 [ 662.650255][T19956] lo speed is unknown, defaulting to 1000 [ 662.803683][T19962] lo speed is unknown, defaulting to 1000 [ 662.811150][T19962] lo speed is unknown, defaulting to 1000 [ 663.141626][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3170'. [ 663.686609][T19980] lo speed is unknown, defaulting to 1000 [ 663.697343][T19980] lo speed is unknown, defaulting to 1000 [ 664.174243][T19996] lo speed is unknown, defaulting to 1000 [ 664.192841][T19996] lo speed is unknown, defaulting to 1000 [ 664.423211][T20003] lo speed is unknown, defaulting to 1000 [ 664.437348][T20003] lo speed is unknown, defaulting to 1000 [ 664.749827][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'. [ 664.813350][T20019] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3180'. [ 665.084067][T20021] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 665.099409][T20025] lo speed is unknown, defaulting to 1000 [ 665.127610][T20025] lo speed is unknown, defaulting to 1000 [ 665.192045][T20024] IPVS: Scheduler module ip_vs_sip not found [ 665.228618][T20027] IPVS: length: 141 != 8 [ 665.285401][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.378848][T20021] lo speed is unknown, defaulting to 1000 [ 665.390852][T20021] lo speed is unknown, defaulting to 1000 [ 665.422611][T20039] netlink: 'syz.3.3186': attribute type 1 has an invalid length. [ 665.458152][T20039] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3186'. [ 665.498133][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 665.545280][T20042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3186'. [ 665.726963][T20037] lo speed is unknown, defaulting to 1000 [ 665.780705][T20047] tipc: Enabled bearer , priority 0 [ 665.866284][T20037] lo speed is unknown, defaulting to 1000 [ 665.884919][T20034] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 665.923776][T20052] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3187'. [ 666.178957][T20034] tipc: Resetting bearer [ 666.186552][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 666.344828][T20031] tipc: Disabling bearer [ 666.439234][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 666.552713][T20055] lo speed is unknown, defaulting to 1000 [ 666.560627][T20055] lo speed is unknown, defaulting to 1000 [ 666.835839][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3191'. [ 666.950671][T20075] lo speed is unknown, defaulting to 1000 [ 666.959598][T20075] lo speed is unknown, defaulting to 1000 [ 667.276708][T20083] lo speed is unknown, defaulting to 1000 [ 667.284114][T20083] lo speed is unknown, defaulting to 1000 [ 667.430992][ T30] audit: type=1800 audit(1758287015.096:15): pid=20083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3194" name="memory.events" dev="tmpfs" ino=3320 res=0 errno=0 [ 668.143989][T20095] lo speed is unknown, defaulting to 1000 [ 668.152468][T20095] lo speed is unknown, defaulting to 1000 [ 668.252892][T20095] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 668.745257][T20106] lo speed is unknown, defaulting to 1000 [ 668.753785][T20106] lo speed is unknown, defaulting to 1000 [ 668.793272][T20103] lo speed is unknown, defaulting to 1000 [ 668.815307][T20103] lo speed is unknown, defaulting to 1000 [ 669.170884][T20115] lo speed is unknown, defaulting to 1000 [ 669.181188][T20115] lo speed is unknown, defaulting to 1000 [ 669.517434][T20128] lo speed is unknown, defaulting to 1000 [ 669.525649][T20128] lo speed is unknown, defaulting to 1000 [ 669.795672][T20145] lo speed is unknown, defaulting to 1000 [ 669.804635][T20145] lo speed is unknown, defaulting to 1000 [ 669.912549][T20147] geneve3: entered promiscuous mode [ 669.921656][ T5963] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 669.934899][ T5963] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 669.950662][ T5963] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 669.968036][ T5963] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 669.997366][T20153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3208'. [ 670.041086][T20153] netlink: 'syz.5.3208': attribute type 1 has an invalid length. [ 673.152729][T20197] lo speed is unknown, defaulting to 1000 [ 673.163205][T20197] lo speed is unknown, defaulting to 1000 [ 673.513054][T20206] lo speed is unknown, defaulting to 1000 [ 673.521297][T20206] lo speed is unknown, defaulting to 1000 [ 673.945193][T20211] tipc: Enabled bearer , priority 0 [ 673.955218][T20211] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 673.965633][T20211] tipc: Resetting bearer [ 674.169413][T20225] IPVS: stopping backup sync thread 8750 ... [ 674.187479][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 674.293503][T20227] lo speed is unknown, defaulting to 1000 [ 674.301829][T20227] lo speed is unknown, defaulting to 1000 [ 674.346961][T20208] tipc: Disabling bearer [ 674.461832][T20232] : left promiscuous mode [ 674.800828][T20237] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.001161][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3228'. [ 675.124069][T20250] lo speed is unknown, defaulting to 1000 [ 675.132295][T20250] lo speed is unknown, defaulting to 1000 [ 675.941649][T20266] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3231'. [ 676.799238][T15706] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.814709][T15706] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.833783][T15706] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.872329][T15706] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.881676][T20262] lo speed is unknown, defaulting to 1000 [ 676.884157][T20285] tipc: Enabled bearer , priority 0 [ 676.895025][T20262] lo speed is unknown, defaulting to 1000 [ 676.902507][T20285] syzkaller0: entered promiscuous mode [ 676.908760][T20285] syzkaller0: entered allmulticast mode [ 676.925744][T20285] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 676.957043][T20284] tipc: Resetting bearer [ 676.993052][T20284] tipc: Disabling bearer [ 677.174102][T20289] tipc: Enabled bearer , priority 0 [ 677.183490][T20289] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 677.194144][T20289] tipc: Resetting bearer [ 677.709117][T20287] tipc: Disabling bearer [ 677.952075][T20293] team0: Device ipip0 is up. Set it down before adding it as a team port [ 678.000683][T20294] tipc: Enabled bearer , priority 0 [ 678.013159][T20294] tipc: Resetting bearer [ 678.032123][T20292] tipc: Disabling bearer [ 678.165514][T20296] team0: Device ipip0 is of different type [ 678.208728][T20299] tipc: Enabled bearer , priority 0 [ 678.216595][T20299] syzkaller0: entered promiscuous mode [ 678.222687][T20299] syzkaller0: entered allmulticast mode [ 678.245206][T20296] tipc: Resetting bearer [ 678.255818][T20295] tipc: Resetting bearer [ 678.274061][T20295] tipc: Disabling bearer [ 678.548535][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3240'. [ 679.122052][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3241'. [ 679.131725][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3241'. [ 679.140997][T20317] netlink: 'syz.0.3241': attribute type 4 has an invalid length. [ 679.156055][T20317] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3241'. [ 679.409198][T20319] lo speed is unknown, defaulting to 1000 [ 679.417622][T20319] lo speed is unknown, defaulting to 1000 [ 679.496108][T20321] lo speed is unknown, defaulting to 1000 [ 679.514694][T20321] lo speed is unknown, defaulting to 1000 [ 679.888761][T20336] lo speed is unknown, defaulting to 1000 [ 679.895877][T20336] lo speed is unknown, defaulting to 1000 [ 680.317440][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 680.328178][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 680.335914][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 680.345362][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 680.359817][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 680.532676][T20344] lo speed is unknown, defaulting to 1000 [ 680.541878][T20344] lo speed is unknown, defaulting to 1000 [ 680.577500][T20343] tipc: Enabled bearer , priority 0 [ 680.615312][T20343] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 680.634092][T20343] tipc: Resetting bearer [ 680.897176][T18947] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 680.909054][T18947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 680.918833][T18947] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 680.939622][T18947] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 680.947359][T18947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 680.960125][T20341] tipc: Disabling bearer [ 680.990337][T20344] chnl_net:caif_netlink_parms(): no params data found [ 681.105905][T20355] lo speed is unknown, defaulting to 1000 [ 681.156074][T20355] lo speed is unknown, defaulting to 1000 [ 681.163281][T20344] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.172592][T20344] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.180928][T20344] bridge_slave_0: entered allmulticast mode [ 681.191014][T20344] bridge_slave_0: entered promiscuous mode [ 681.228856][T20344] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.238610][T20344] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.245990][T20344] bridge_slave_1: entered allmulticast mode [ 681.262282][T20344] bridge_slave_1: entered promiscuous mode [ 681.360797][T20344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.390358][T20344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.476705][T20344] team0: Port device team_slave_0 added [ 681.486376][T20344] team0: Port device team_slave_1 added [ 681.535040][T20363] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3250'. [ 681.565148][T20344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.573618][T20344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.605415][T20344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.635503][T20344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.642884][T20344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.670114][T20344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.769272][T20344] hsr_slave_0: entered promiscuous mode [ 681.776306][T20344] hsr_slave_1: entered promiscuous mode [ 681.783502][T20344] debugfs: 'hsr0' already exists in 'hsr' [ 681.789715][T20344] Cannot create hsr debugfs directory [ 681.845933][T20369] lo speed is unknown, defaulting to 1000 [ 681.869162][T20369] lo speed is unknown, defaulting to 1000 [ 681.880698][T20355] chnl_net:caif_netlink_parms(): no params data found [ 682.109969][T20355] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.117447][T20355] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.125747][T20355] bridge_slave_0: entered allmulticast mode [ 682.134637][T20355] bridge_slave_0: entered promiscuous mode [ 682.153136][T20379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3253'. [ 682.154531][T20355] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.169807][T20355] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.178738][T20355] bridge_slave_1: entered allmulticast mode [ 682.188198][T20355] bridge_slave_1: entered promiscuous mode [ 682.220049][T20380] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3253'. [ 682.231791][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 682.300892][T20355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.332336][T20355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.454519][T20385] bridge0: entered promiscuous mode [ 682.468836][T18947] Bluetooth: hci6: command tx timeout [ 682.486685][T20355] team0: Port device team_slave_0 added [ 682.497445][T20355] team0: Port device team_slave_1 added [ 682.524362][T20344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 682.559390][T20344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 682.573061][T20355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.581656][T20355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.608264][T20355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.620032][T20344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 682.633522][T20355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.641727][T20355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.668367][T20355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.680159][T20344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 682.773636][T20355] hsr_slave_0: entered promiscuous mode [ 682.782971][T20355] hsr_slave_1: entered promiscuous mode [ 682.791266][T20355] debugfs: 'hsr0' already exists in 'hsr' [ 682.797108][T20355] Cannot create hsr debugfs directory [ 683.018420][T18947] Bluetooth: hci7: command tx timeout [ 683.154134][T20344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.220035][T20344] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.238487][T20355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 683.271817][T15706] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.279840][T15706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.302008][T20355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 683.316215][T20355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 683.333774][T15706] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.341007][T15706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.354392][T20355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 683.404154][T20407] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3257'. [ 683.442324][T20407] ..1·: renamed from ..0· [ 683.456638][T20407] ..1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 683.488115][T20407] ..1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.499252][T20407] ..1·: entered allmulticast mode [ 683.504318][T20407] hsr_slave_0: entered allmulticast mode [ 683.511480][T20407] hsr_slave_1: entered allmulticast mode [ 683.519177][T20407] A link change request failed with some changes committed already. Interface ..1· may have been left with an inconsistent configuration, please check. [ 683.676076][T20355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.706561][T20355] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.723486][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.730733][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.756629][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.763880][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.850986][T20344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.114994][T20355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.249493][T20344] veth0_vlan: entered promiscuous mode [ 684.278881][T20344] veth1_vlan: entered promiscuous mode [ 684.391992][T20344] veth0_macvtap: entered promiscuous mode [ 684.446182][T20344] veth1_macvtap: entered promiscuous mode [ 684.569206][T18947] Bluetooth: hci6: command tx timeout [ 684.751932][T20435] lo speed is unknown, defaulting to 1000 [ 684.756802][T20344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.783529][T20435] lo speed is unknown, defaulting to 1000 [ 684.807198][T20448] wg1: entered promiscuous mode [ 684.815927][T20448] wg1: entered allmulticast mode [ 684.831671][T20344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.916439][T15706] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.947443][T15706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.994905][T15706] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.014693][T15706] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.108016][T18947] Bluetooth: hci7: command tx timeout [ 685.159515][T20355] veth0_vlan: entered promiscuous mode [ 685.309349][T20355] veth1_vlan: entered promiscuous mode [ 685.524866][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.542308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.680899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.686012][T20355] veth0_macvtap: entered promiscuous mode [ 685.692100][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.717407][T20355] veth1_macvtap: entered promiscuous mode [ 685.790657][T20355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.854411][T20355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.926209][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.947496][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.983207][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.099104][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.169640][T20468] tipc: Resetting bearer [ 686.620796][T18947] Bluetooth: hci6: command tx timeout [ 686.632435][T15706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.642651][T15706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.765262][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.795250][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.960091][T20481] lo speed is unknown, defaulting to 1000 [ 686.972871][T20481] lo speed is unknown, defaulting to 1000 [ 687.178522][T18947] Bluetooth: hci7: command tx timeout [ 687.451206][T20495] lo speed is unknown, defaulting to 1000 [ 687.462273][T20495] lo speed is unknown, defaulting to 1000 [ 688.086361][T20502] team0: Device ipip0 is of different type [ 688.131013][T20492] tipc: Enabled bearer , priority 0 [ 688.139168][T20503] tipc: Enabled bearer , priority 0 [ 688.147532][T20503] syzkaller0: entered promiscuous mode [ 688.164677][T20503] syzkaller0: entered allmulticast mode [ 688.214325][T20502] tipc: Resetting bearer [ 688.240802][T20492] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 688.271647][T20500] tipc: Resetting bearer [ 688.291028][T20501] tipc: Resetting bearer [ 688.343060][T20501] tipc: Disabling bearer [ 688.550564][T20489] tipc: Disabling bearer [ 688.672832][T20511] lo speed is unknown, defaulting to 1000 [ 688.683012][T20511] lo speed is unknown, defaulting to 1000 [ 688.698999][ T5863] Bluetooth: hci6: command tx timeout [ 688.753725][T20517] netlink: 'syz.6.3272': attribute type 1 has an invalid length. [ 688.783702][T20517] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3272'. [ 688.815012][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3272'. [ 689.023897][T20517] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3272'. [ 689.276337][ T5863] Bluetooth: hci7: command tx timeout [ 689.332493][T20521] !: renamed from dummy0 (while UP) [ 689.483526][T20524] lo speed is unknown, defaulting to 1000 [ 689.491407][T20524] lo speed is unknown, defaulting to 1000 [ 689.864342][T20533] lo speed is unknown, defaulting to 1000 [ 689.956478][T20533] lo speed is unknown, defaulting to 1000 [ 690.158789][ T30] audit: type=1800 audit(1758287037.816:16): pid=20540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3276" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0 [ 690.372616][T20543] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.380220][T20543] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.403248][T20547] digital: digital_start_poll: Unknown protocol [ 690.592202][T20543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.613597][T20543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.908761][T15706] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.944056][T15706] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.984290][T15706] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.989959][T20560] siw: device registration error -23 [ 691.040808][T15706] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.142041][T20560] netlink: 'syz.5.3283': attribute type 4 has an invalid length. [ 691.233661][T20570] smc: net device bond0 applied user defined pnetid SYZ2 [ 691.265162][T20570] smc: net device bond0 erased user defined pnetid SYZ2 [ 691.535620][T20577] bridge0: entered promiscuous mode [ 691.592047][T18947] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 691.602808][T18947] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 691.611575][T18947] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 691.619868][T18947] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 691.657189][T18947] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 691.745529][T20581] lo speed is unknown, defaulting to 1000 [ 691.781283][T20589] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3289'. [ 691.817588][T20581] lo speed is unknown, defaulting to 1000 [ 691.821463][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3290'. [ 691.971367][T20594] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3291'. [ 692.032437][T20592] netlink: 'syz.6.3290': attribute type 1 has an invalid length. [ 692.040417][T20592] netlink: 5624 bytes leftover after parsing attributes in process `syz.6.3290'. [ 692.069990][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3291'. [ 692.090290][T20594] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3291'. [ 692.114390][T20596] team0: Device ipip0 is of different type [ 692.166989][T20603] tipc: Enabled bearer , priority 0 [ 692.211702][T20596] syzkaller0: entered promiscuous mode [ 692.231611][T20596] syzkaller0: entered allmulticast mode [ 692.241536][T20605] netlink: 'syz.0.3294': attribute type 1 has an invalid length. [ 692.250174][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3294'. [ 692.311413][T20596] tipc: Resetting bearer [ 692.322466][T20595] tipc: Resetting bearer [ 692.341780][T20595] tipc: Disabling bearer [ 692.360867][T20609] sch_fq: defrate 0 ignored. [ 692.534845][T20614] batadv1: entered promiscuous mode [ 692.541832][T20614] batadv1: entered allmulticast mode [ 692.582448][T20581] chnl_net:caif_netlink_parms(): no params data found [ 693.223788][T20581] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.234124][T20581] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.242124][T20581] bridge_slave_0: entered allmulticast mode [ 693.253746][T20581] bridge_slave_0: entered promiscuous mode [ 693.303268][T20581] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.353066][T20581] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.385794][T20581] bridge_slave_1: entered allmulticast mode [ 693.414051][T20581] bridge_slave_1: entered promiscuous mode [ 693.436050][T20278] IPVS: starting estimator thread 0... [ 693.458220][T20636] bridge0: entered promiscuous mode [ 693.508887][T20644] IPVS: lc: FWM 3 0x00000003 - no destination available [ 693.544486][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 693.561816][T20640] IPVS: using max 26 ests per chain, 62400 per kthread [ 693.665225][T20581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.690330][T20581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.738042][T18947] Bluetooth: hci8: command tx timeout [ 693.835398][T20581] team0: Port device team_slave_0 added [ 693.866185][T20581] team0: Port device team_slave_1 added [ 693.963670][T20581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.989281][T20581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.018911][T20581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.052024][T20581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.078977][T20581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.133965][T20581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.321418][T20665] gretap1: entered allmulticast mode [ 694.421130][T20581] hsr_slave_0: entered promiscuous mode [ 694.439828][T20581] hsr_slave_1: entered promiscuous mode [ 694.446933][T20581] debugfs: 'hsr0' already exists in 'hsr' [ 694.454484][T20581] Cannot create hsr debugfs directory [ 694.565685][T20663] lo speed is unknown, defaulting to 1000 [ 694.612623][T20666] lo speed is unknown, defaulting to 1000 [ 694.627614][T20663] lo speed is unknown, defaulting to 1000 [ 694.639451][T20666] lo speed is unknown, defaulting to 1000 [ 694.646725][T20669] lo speed is unknown, defaulting to 1000 [ 694.758399][T20669] lo speed is unknown, defaulting to 1000 [ 695.023219][T20678] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 695.043129][T20678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 695.106826][T20678] netlink: 'syz.0.3309': attribute type 10 has an invalid length. [ 695.126031][T20678] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 695.335059][T20581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 695.408716][T20581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 695.422791][T20581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 695.442305][T20581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 695.566203][T20696] lo speed is unknown, defaulting to 1000 [ 695.591217][T20696] lo speed is unknown, defaulting to 1000 [ 695.601010][T20682] __nla_validate_parse: 2 callbacks suppressed [ 695.601029][T20682] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3310'. [ 695.633201][T20682] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3310'. [ 695.830938][T18947] Bluetooth: hci8: command tx timeout [ 695.961762][T20581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.967663][T20702] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3313'. [ 695.986629][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3313'. [ 695.997479][T20581] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.025854][T15706] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.033114][T15706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.057076][T15706] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.064316][T15706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.291634][T20712] netlink: 'syz.5.3315': attribute type 1 has an invalid length. [ 696.324793][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'. [ 696.406753][T20716] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 696.442166][T20716] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 696.527573][T20712] gretap1: entered promiscuous mode [ 696.541116][T20712] bond1: (slave gretap1): making interface the new active one [ 696.550562][T20712] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 696.593070][T20581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.791159][T20720] lo speed is unknown, defaulting to 1000 [ 696.810006][T20720] lo speed is unknown, defaulting to 1000 [ 697.461975][T20735] tipc: Enabled bearer , priority 0 [ 697.472512][T20735] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 697.485577][T20735] tipc: Resetting bearer [ 697.492660][T20581] veth0_vlan: entered promiscuous mode [ 697.540189][T20581] veth1_vlan: entered promiscuous mode [ 697.598387][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3320'. [ 697.664353][T20581] veth0_macvtap: entered promiscuous mode [ 697.693465][T20581] veth1_macvtap: entered promiscuous mode [ 697.742491][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3320'. [ 697.779625][T20581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.811060][T20740] lo speed is unknown, defaulting to 1000 [ 697.825792][T20581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.850008][T20740] lo speed is unknown, defaulting to 1000 [ 697.883733][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.893130][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.909992][T18947] Bluetooth: hci8: command tx timeout [ 697.929354][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.950352][T20733] tipc: Disabling bearer [ 697.974057][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.997248][T20743] team0: Device ipip0 is up. Set it down before adding it as a team port [ 698.066695][T20744] tipc: Enabled bearer , priority 0 [ 698.091929][T20743] syzkaller0: entered promiscuous mode [ 698.102185][T20743] syzkaller0: entered allmulticast mode [ 698.278767][T20743] tipc: Resetting bearer [ 698.286994][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.300977][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.322211][T20742] tipc: Resetting bearer [ 698.356542][T20742] tipc: Disabling bearer [ 698.395701][T15706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.411646][T15706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.585794][T20750] lo speed is unknown, defaulting to 1000 [ 698.601098][T20750] lo speed is unknown, defaulting to 1000 [ 698.877341][T20768] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3326'. [ 698.953948][T20768] lo speed is unknown, defaulting to 1000 [ 698.976512][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3326'. [ 699.004284][T20768] lo speed is unknown, defaulting to 1000 [ 699.031886][T20770] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 699.570253][T20778] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3329'. [ 699.982482][T18947] Bluetooth: hci8: command tx timeout [ 700.115484][T20783] lo speed is unknown, defaulting to 1000 [ 700.152507][T20783] lo speed is unknown, defaulting to 1000 [ 701.212447][T20801] lo speed is unknown, defaulting to 1000 [ 701.232599][T20801] lo speed is unknown, defaulting to 1000 [ 701.865721][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3340'. [ 702.102119][T20813] syzkaller0: entered promiscuous mode [ 702.111086][T20813] syzkaller0: entered allmulticast mode [ 702.477991][T20819] lo speed is unknown, defaulting to 1000 [ 702.485860][T20819] lo speed is unknown, defaulting to 1000 [ 704.870955][T20841] tipc: Started in network mode [ 704.875913][T20841] tipc: Node identity 4e538c32fa2f, cluster identity 4711 [ 704.883828][T20841] tipc: Enabled bearer , priority 0 [ 704.895776][T20844] tipc: Resetting bearer [ 705.013124][T20852] netlink: 'syz.0.3350': attribute type 1 has an invalid length. [ 705.025516][T20844] tipc: Disabling bearer [ 705.159476][T20852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.205349][T20856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.219490][T20856] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 705.240515][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3351'. [ 705.252800][T20856] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 705.296036][T20859] veth15: entered promiscuous mode [ 705.309221][T20859] bond4: (slave veth15): Enslaving as an active interface with a down link [ 705.559168][T20862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.574152][T20862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.589309][T20862] bond0 (unregistering): Released all slaves [ 705.975733][T20886] lo speed is unknown, defaulting to 1000 [ 705.986532][T20886] lo speed is unknown, defaulting to 1000 [ 706.638349][T20898] lo speed is unknown, defaulting to 1000 [ 706.652845][T20898] lo speed is unknown, defaulting to 1000 [ 707.008718][T20904] tipc: Enabled bearer , priority 0 [ 707.022589][T20904] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 707.034901][T20904] tipc: Resetting bearer [ 707.380509][T20910] netlink: 'syz.8.3365': attribute type 4 has an invalid length. [ 707.518416][T20901] tipc: Disabling bearer [ 708.018889][T20921] lo speed is unknown, defaulting to 1000 [ 708.026528][T20921] lo speed is unknown, defaulting to 1000 [ 708.143495][T20917] tipc: Started in network mode [ 708.148747][T20917] tipc: Node identity d6185aca4239, cluster identity 4711 [ 708.156172][T20917] tipc: Enabled bearer , priority 0 [ 708.173097][T20917] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 708.192844][T20917] tipc: Resetting bearer [ 708.575702][T20937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3372'. [ 708.650127][T20915] tipc: Disabling bearer [ 709.388722][T20942] lo speed is unknown, defaulting to 1000 [ 709.396436][T20942] lo speed is unknown, defaulting to 1000 [ 709.409111][T20944] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3376'. [ 709.552781][T20944] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3376'. [ 709.580173][T20944] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3376'. [ 709.935233][ T5863] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 709.946306][ T5863] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 709.955132][ T5863] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 709.977259][ T5863] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 709.988798][ T5863] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 710.181698][T20953] lo speed is unknown, defaulting to 1000 [ 710.190178][T20953] lo speed is unknown, defaulting to 1000 [ 710.596476][T20953] chnl_net:caif_netlink_parms(): no params data found [ 710.811289][T20968] lo speed is unknown, defaulting to 1000 [ 710.854848][T20968] lo speed is unknown, defaulting to 1000 [ 710.907191][T20953] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.917418][T20953] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.926716][T20953] bridge_slave_0: entered allmulticast mode [ 710.935796][T20953] bridge_slave_0: entered promiscuous mode [ 710.949980][T20953] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.957442][T20953] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.960501][T20977] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3383'. [ 710.972077][T20953] bridge_slave_1: entered allmulticast mode [ 710.988949][T20953] bridge_slave_1: entered promiscuous mode [ 711.076350][T20977] nbd: socks must be embedded in a SOCK_ITEM attr [ 711.233443][T20953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.264762][ T5881] udevd[5881]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 711.312372][T20953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.484685][T20953] team0: Port device team_slave_0 added [ 711.516417][T20953] team0: Port device team_slave_1 added [ 711.606830][T20953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.614698][T20953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.644299][T20953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.665754][T20953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.673198][T20953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.702725][T20953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.779710][T20994] netlink: 'syz.6.3386': attribute type 1 has an invalid length. [ 711.788437][T20994] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3386'. [ 711.806672][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3386'. [ 711.867510][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3386'. [ 711.881040][T20953] hsr_slave_0: entered promiscuous mode [ 711.892558][T20953] hsr_slave_1: entered promiscuous mode [ 711.902343][T20953] debugfs: 'hsr0' already exists in 'hsr' [ 711.911145][T20953] Cannot create hsr debugfs directory [ 712.058395][ T5863] Bluetooth: hci9: command tx timeout [ 712.154121][T20997] lo speed is unknown, defaulting to 1000 [ 712.226293][T20997] lo speed is unknown, defaulting to 1000 [ 712.432803][T20953] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 712.452621][T20953] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 712.481245][T20953] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 712.501456][T20953] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 713.164485][T20953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.251800][T20953] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.282145][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.289472][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.363493][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.370719][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.650923][T21027] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3393'. [ 713.674546][T21027] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3393'. [ 714.140093][ T5863] Bluetooth: hci9: command tx timeout [ 714.237475][T20953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.947650][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 714.967594][T21072] IPVS: length: 125 != 24 [ 714.977397][T21070] IPVS: Error joining to the multicast group [ 715.001777][T20953] veth0_vlan: entered promiscuous mode [ 715.053801][T20953] veth1_vlan: entered promiscuous mode [ 715.148962][T21078] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3407'. [ 715.164962][T20953] veth0_macvtap: entered promiscuous mode [ 715.177917][T21078] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3407'. [ 715.203730][T20953] veth1_macvtap: entered promiscuous mode [ 715.226441][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3408'. [ 715.243462][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3408'. [ 715.285996][T20953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.319194][T20953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.396701][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.483262][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.498186][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.574984][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.663384][T21087] team0: Device ipip0 is up. Set it down before adding it as a team port [ 715.761626][T21087] syzkaller0: entered promiscuous mode [ 715.767157][T21087] syzkaller0: entered allmulticast mode [ 715.800716][T21089] lo speed is unknown, defaulting to 1000 [ 715.806646][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.818800][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.880044][T21089] lo speed is unknown, defaulting to 1000 [ 715.958613][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.972701][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.156613][T21101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3415'. [ 716.203964][T21101] IPVS: Error joining to the multicast group [ 716.218239][ T5863] Bluetooth: hci9: command tx timeout [ 716.374921][T21096] tipc: Enabled bearer , priority 0 [ 716.396579][T21096] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 716.409618][T21096] tipc: Resetting bearer [ 716.839022][T21093] tipc: Disabling bearer [ 717.429167][T20281] IPVS: starting estimator thread 0... [ 717.508670][T21145] netlink: 244 bytes leftover after parsing attributes in process `syz.8.3431'. [ 717.518467][T21144] IPVS: using max 24 ests per chain, 57600 per kthread [ 718.046200][T21163] lo speed is unknown, defaulting to 1000 [ 718.080827][T21163] lo speed is unknown, defaulting to 1000 [ 718.308489][ T5863] Bluetooth: hci9: command tx timeout [ 718.333740][T18947] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 718.349180][T18947] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 718.381195][T18947] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 718.392065][T18947] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 718.402665][T18947] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 718.437465][T21156] tipc: Started in network mode [ 718.443932][T21156] tipc: Node identity 867b6dd9d256, cluster identity 4711 [ 718.452791][T21156] tipc: Enabled bearer , priority 0 [ 718.465272][T21156] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 718.525528][T21156] tipc: Resetting bearer [ 718.538066][T21172] lo speed is unknown, defaulting to 1000 [ 718.554454][T21167] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3438'. [ 718.566885][T21172] lo speed is unknown, defaulting to 1000 [ 718.904706][T21152] tipc: Disabling bearer [ 719.118472][T21198] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 719.395403][T21172] chnl_net:caif_netlink_parms(): no params data found [ 719.499125][T21207] __nla_validate_parse: 1 callbacks suppressed [ 719.499145][T21207] netlink: 884 bytes leftover after parsing attributes in process `syz.0.3453'. [ 719.560129][T21207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3453'. [ 719.729173][T21194] tipc: Enabled bearer , priority 0 [ 719.752535][T21210] lo speed is unknown, defaulting to 1000 [ 719.804278][T21210] lo speed is unknown, defaulting to 1000 [ 719.816702][T21172] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.832292][T21172] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.840990][T21172] bridge_slave_0: entered allmulticast mode [ 719.850942][T21172] bridge_slave_0: entered promiscuous mode [ 719.869159][T21194] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 719.905405][T21213] tipc: Resetting bearer [ 719.930680][T21172] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.940397][T21172] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.951025][T21172] bridge_slave_1: entered allmulticast mode [ 719.960544][T21172] bridge_slave_1: entered promiscuous mode [ 720.055573][T21172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.102634][T21172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.142634][T21222] lo speed is unknown, defaulting to 1000 [ 720.183687][T21222] lo speed is unknown, defaulting to 1000 [ 720.188321][T21172] team0: Port device team_slave_0 added [ 720.221794][T21190] tipc: Disabling bearer [ 720.250411][T21218] lo speed is unknown, defaulting to 1000 [ 720.296969][T21172] team0: Port device team_slave_1 added [ 720.334192][T21218] lo speed is unknown, defaulting to 1000 [ 720.459273][T18947] Bluetooth: hci10: command tx timeout [ 720.487233][T21172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.510370][T21172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.537518][T21172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.592621][T21172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.610359][T21172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.664613][T21172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.847296][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3461'. [ 721.070194][T21172] hsr_slave_0: entered promiscuous mode [ 721.077473][T21172] hsr_slave_1: entered promiscuous mode [ 721.085262][T21172] debugfs: 'hsr0' already exists in 'hsr' [ 721.095779][T21172] Cannot create hsr debugfs directory [ 721.133523][T21247] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3464'. [ 721.138748][T21241] lo speed is unknown, defaulting to 1000 [ 721.145764][T21247] ..0·: renamed from hsr0 (while UP) [ 721.157257][T21247] ..0·: entered allmulticast mode [ 721.162734][T21247] hsr_slave_0: entered allmulticast mode [ 721.168633][T21247] hsr_slave_1: entered allmulticast mode [ 721.174871][T21247] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 721.350494][T21241] lo speed is unknown, defaulting to 1000 [ 721.550972][T21172] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.627237][T21172] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.720596][T21172] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.757066][T21252] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3465'. [ 721.767563][T21252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3465'. [ 721.786864][T21172] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.056739][T21172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.074362][T21172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.105311][T21172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.142755][T21172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.173467][T21255] tipc: Enabled bearer , priority 0 [ 722.204089][T21255] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 722.259399][T21255] tipc: Resetting bearer [ 722.394030][T21172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.538629][T18947] Bluetooth: hci10: command tx timeout [ 722.623004][T21253] tipc: Disabling bearer [ 722.802394][T21276] tipc: Enabled bearer , priority 0 [ 722.823433][T21172] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.834988][T21276] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 722.855707][T21276] tipc: Resetting bearer [ 722.864964][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.872204][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.904657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.911888][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.139294][T21266] tipc: Disabling bearer [ 723.216074][T21285] team0: Device ipip0 is of different type [ 723.313146][T21287] tipc: Enabled bearer , priority 0 [ 723.333719][T21292] syzkaller0: entered promiscuous mode [ 723.343311][T21292] syzkaller0: entered allmulticast mode [ 723.454049][T21285] tipc: Resetting bearer [ 723.476104][T21284] tipc: Resetting bearer [ 723.544120][T21284] tipc: Disabling bearer [ 723.571613][T21293] lo speed is unknown, defaulting to 1000 [ 723.581141][T21293] lo speed is unknown, defaulting to 1000 [ 723.676222][T21172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.779937][T21172] veth0_vlan: entered promiscuous mode [ 723.796414][T21172] veth1_vlan: entered promiscuous mode [ 723.841508][T21172] veth0_macvtap: entered promiscuous mode [ 723.867558][T21172] veth1_macvtap: entered promiscuous mode [ 723.917304][T21172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.951530][T21172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.004147][T21312] bridge0: entered promiscuous mode [ 724.012135][ T5963] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.023902][ T5963] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.049622][ T5963] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.078608][ T5963] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.131509][T21313] lo speed is unknown, defaulting to 1000 [ 724.150022][T21313] lo speed is unknown, defaulting to 1000 [ 724.266017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.281103][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.368072][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.393627][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.523188][T21322] smc: net device bond0 applied user defined pnetid SYZ2 [ 724.553606][T21317] tipc: Enabled bearer , priority 0 [ 724.564336][T21323] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3482'. [ 724.564732][T21317] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 724.592642][T21317] tipc: Resetting bearer [ 724.621823][T18947] Bluetooth: hci10: command tx timeout [ 724.857364][T20272] IPVS: starting estimator thread 0... [ 724.978784][T21333] IPVS: using max 25 ests per chain, 60000 per kthread [ 725.056749][ T30] audit: type=1800 audit(1758287072.716:17): pid=21328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3482" name="memory.events" dev="tmpfs" ino=3756 res=0 errno=0 [ 725.187630][T21315] tipc: Disabling bearer [ 726.373231][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 726.392637][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 726.698097][T18947] Bluetooth: hci10: command tx timeout [ 726.952141][T21380] tipc: Enabled bearer , priority 0 [ 726.969989][T21380] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 726.981178][T21380] tipc: Resetting bearer [ 727.239338][T21387] netlink: 'syz.1.3503': attribute type 4 has an invalid length. [ 727.353631][T21378] tipc: Disabling bearer [ 727.480045][T21385] tipc: Enabled bearer , priority 0 [ 727.528776][T21385] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 727.573436][T21385] tipc: Resetting bearer [ 727.708795][T21399] netlink: 'syz.1.3506': attribute type 12 has an invalid length. [ 727.980574][T21381] tipc: Disabling bearer [ 728.041573][T21396] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 728.677010][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'. [ 728.870545][T21426] team0: Device ipip0 is of different type [ 728.943436][T21432] tipc: Started in network mode [ 728.949768][T21432] tipc: Node identity 565adbed25a6, cluster identity 4711 [ 728.962237][T21432] tipc: Enabled bearer , priority 0 [ 728.970559][T21433] syzkaller0: entered promiscuous mode [ 728.977362][T21433] syzkaller0: entered allmulticast mode [ 729.001102][T21426] tipc: Resetting bearer [ 729.013289][T21425] tipc: Resetting bearer [ 729.042436][T21425] tipc: Disabling bearer [ 729.615328][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3519'. [ 729.654279][T21449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3520'. [ 729.771918][T21447] lo speed is unknown, defaulting to 1000 [ 729.781569][T21447] lo speed is unknown, defaulting to 1000 [ 729.830894][T21442] tipc: Enabled bearer , priority 0 [ 729.870975][T21442] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 729.891284][T21442] tipc: Resetting bearer [ 730.092519][T21437] tipc: Disabling bearer [ 730.126237][T21462] team0: Device ipip0 is up. Set it down before adding it as a team port [ 730.171821][T21465] tipc: Enabled bearer , priority 0 [ 730.181339][T21465] syzkaller0: entered promiscuous mode [ 730.186949][T21465] syzkaller0: entered allmulticast mode [ 730.221401][T21462] tipc: Resetting bearer [ 730.241937][T21461] tipc: Resetting bearer [ 730.273261][T21461] tipc: Disabling bearer [ 730.775423][T21479] team0: Device ipip0 is of different type [ 730.818491][T21481] tipc: Enabled bearer , priority 0 [ 730.826986][T21481] syzkaller0: entered promiscuous mode [ 730.833579][T21481] syzkaller0: entered allmulticast mode [ 730.862039][T21479] tipc: Resetting bearer [ 730.871543][T21478] tipc: Resetting bearer [ 730.905912][T21478] tipc: Disabling bearer [ 731.005458][T21486] lo speed is unknown, defaulting to 1000 [ 731.032800][T21486] lo speed is unknown, defaulting to 1000 [ 731.331404][T21486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'. [ 731.353278][T21486] vlan2: entered promiscuous mode [ 731.359092][T21486] erspan0: entered promiscuous mode [ 731.532067][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3535'. [ 731.532420][T21503] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3536'. [ 731.551593][T21503] IPVS: Error joining to the multicast group [ 731.695969][T21505] lo speed is unknown, defaulting to 1000 [ 731.704765][T21505] lo speed is unknown, defaulting to 1000 [ 732.790542][T21519] lo speed is unknown, defaulting to 1000 [ 732.908610][T21519] lo speed is unknown, defaulting to 1000 [ 733.102333][T21521] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3541'. [ 733.111889][T21521] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3541'. [ 733.230784][T21534] tipc: Enabled bearer , priority 10 [ 733.503191][T21548] netlink: 'syz.8.3550': attribute type 83 has an invalid length. [ 733.556199][T21548] lo speed is unknown, defaulting to 1000 [ 733.615715][T21548] lo speed is unknown, defaulting to 1000 [ 734.044680][T21536] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 734.217539][T21556] nbd: device at index 6 is going down [ 734.350312][T20281] tipc: Node number set to 3028061234 [ 734.649979][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3558'. [ 734.679442][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3558'. [ 734.810987][T21566] tipc: Enabled bearer , priority 0 [ 734.880649][T21570] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 734.920861][T21566] tipc: Resetting bearer [ 735.077296][T21574] tipc: Enabling of bearer rejected, failed to enable media [ 735.108990][T21565] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 735.335010][T21561] tipc: Disabling bearer [ 735.547346][T21578] lo speed is unknown, defaulting to 1000 [ 735.558463][T21578] lo speed is unknown, defaulting to 1000 [ 735.709715][ T5863] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 735.722033][ T5863] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 735.735393][ T5863] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 735.747154][ T5863] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 735.759512][ T5863] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 735.875785][T21582] lo speed is unknown, defaulting to 1000 [ 735.885668][T21582] lo speed is unknown, defaulting to 1000 [ 736.576033][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.594570][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.774977][T21582] chnl_net:caif_netlink_parms(): no params data found [ 737.042944][T21599] lo speed is unknown, defaulting to 1000 [ 737.051416][T21599] lo speed is unknown, defaulting to 1000 [ 737.255021][T21582] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.268449][T21582] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.280777][T21582] bridge_slave_0: entered allmulticast mode [ 737.292268][T21582] bridge_slave_0: entered promiscuous mode [ 737.304359][T21611] syzkaller1: entered promiscuous mode [ 737.317448][T21611] syzkaller1: entered allmulticast mode [ 737.344083][T21582] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.355914][T21582] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.368689][T21582] bridge_slave_1: entered allmulticast mode [ 737.388652][T21582] bridge_slave_1: entered promiscuous mode [ 737.558726][T21616] lo speed is unknown, defaulting to 1000 [ 737.566639][T21616] lo speed is unknown, defaulting to 1000 [ 737.683813][T21582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.743728][T21582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.822464][ T5863] Bluetooth: hci11: command tx timeout [ 737.923060][T21624] netlink: 'syz.6.3571': attribute type 19 has an invalid length. [ 737.938413][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3571'. [ 737.954197][T21582] team0: Port device team_slave_0 added [ 737.991467][ T5963] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.991545][T21624] netlink: 'syz.6.3571': attribute type 19 has an invalid length. [ 738.021886][T21582] team0: Port device team_slave_1 added [ 738.047571][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3571'. [ 738.092208][ T5963] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.107188][ T5963] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.152539][T21582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.164392][T21582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.200854][T21582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.214233][ T5963] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.234646][T21582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.241966][T21582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.270361][T21582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.292379][T21619] tipc: Enabled bearer , priority 0 [ 738.313941][T21619] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 738.406514][T21619] tipc: Resetting bearer [ 738.436841][T21582] hsr_slave_0: entered promiscuous mode [ 738.455052][T21582] hsr_slave_1: entered promiscuous mode [ 738.498087][T21582] debugfs: 'hsr0' already exists in 'hsr' [ 738.508264][T21582] Cannot create hsr debugfs directory [ 738.649565][T21617] tipc: Disabling bearer [ 738.679355][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.700943][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.822780][T21634] tipc: Enabled bearer , priority 0 [ 738.908629][T21628] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 738.929851][T21628] tipc: Resetting bearer [ 739.308975][T21625] tipc: Disabling bearer [ 739.900830][ T5863] Bluetooth: hci11: command tx timeout [ 739.906388][T21647] lo speed is unknown, defaulting to 1000 [ 739.909810][T21582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 740.113592][T21582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 740.157648][T21647] lo speed is unknown, defaulting to 1000 [ 740.165150][T21582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 740.219149][T21582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 740.268686][T21651] lo speed is unknown, defaulting to 1000 [ 740.340209][T21651] lo speed is unknown, defaulting to 1000 [ 740.963608][T21582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.990938][T21687] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 741.013714][T21687] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 741.068998][T21582] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.115004][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.122308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.173164][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.180432][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.981050][ T5863] Bluetooth: hci11: command tx timeout [ 742.074713][T21582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.108727][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3591'. [ 742.147029][T21719] IPVS: Error joining to the multicast group [ 742.311769][T21730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3595'. [ 742.334375][T21730] nbd: must specify at least one socket [ 742.440899][T21738] team0: Device ipip0 is of different type [ 742.522688][T21743] smc: net device bond0 erased user defined pnetid SYZ2 [ 742.568779][T21742] tipc: Enabled bearer , priority 0 [ 742.603922][T21738] syzkaller0: entered promiscuous mode [ 742.624396][T21738] syzkaller0: entered allmulticast mode [ 742.780677][T21738] tipc: Resetting bearer [ 742.812845][T21733] tipc: Resetting bearer [ 742.851524][T21733] tipc: Disabling bearer [ 742.878025][T21736] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3597'. [ 742.887267][T21736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3597'. [ 743.014121][T21582] veth0_vlan: entered promiscuous mode [ 743.036638][T21582] veth1_vlan: entered promiscuous mode [ 743.112889][T21582] veth0_macvtap: entered promiscuous mode [ 743.126630][T21762] bridge0: entered promiscuous mode [ 743.145132][T21582] veth1_macvtap: entered promiscuous mode [ 743.205871][T21582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.243259][T21582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.297326][ T1037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.307455][T21761] lo speed is unknown, defaulting to 1000 [ 743.313962][ T1037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.333394][ T1037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.352831][T21768] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3604'. [ 743.358268][T21761] lo speed is unknown, defaulting to 1000 [ 743.373206][ T1037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.690321][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.699086][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.821779][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.830850][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.983585][T21792] netlink: 5600 bytes leftover after parsing attributes in process `syz.8.3609'. [ 744.059101][T21724] Bluetooth: hci11: command tx timeout [ 744.239821][T21798] lo speed is unknown, defaulting to 1000 [ 744.265282][T21798] lo speed is unknown, defaulting to 1000 [ 744.300655][T21724] Bluetooth: hci4: command 0x0406 tx timeout [ 744.435687][T15706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.447900][T15706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.705812][T21814] netlink: 'syz.4.3618': attribute type 1 has an invalid length. [ 744.889161][T21816] lo speed is unknown, defaulting to 1000 [ 744.896719][T21816] lo speed is unknown, defaulting to 1000 [ 745.423323][T21838] lo speed is unknown, defaulting to 1000 [ 745.432670][T21838] lo speed is unknown, defaulting to 1000 [ 745.689274][T21855] lo speed is unknown, defaulting to 1000 [ 745.697424][T21855] lo speed is unknown, defaulting to 1000 [ 745.763053][T21858] syzkaller1: entered promiscuous mode [ 745.769212][T21858] syzkaller1: entered allmulticast mode [ 746.017056][T21866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3643'. [ 746.027424][T21866] nbd: must specify at least one socket [ 746.103470][T21873] smc: net device bond0 applied user defined pnetid SYZ2 [ 746.120369][T21873] smc: net device bond0 erased user defined pnetid SYZ2 [ 746.855238][T21878] lo speed is unknown, defaulting to 1000 [ 746.880786][T21878] lo speed is unknown, defaulting to 1000 [ 747.257159][T21898] lo speed is unknown, defaulting to 1000 [ 747.274428][T21898] lo speed is unknown, defaulting to 1000 [ 747.592090][T21917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3646'. [ 748.464999][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3653'. [ 748.690040][T21953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3655'. [ 748.729579][T21953] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 749.218705][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 749.280898][T21978] lo speed is unknown, defaulting to 1000 [ 749.297320][T21977] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.320722][T21978] lo speed is unknown, defaulting to 1000 [ 750.122565][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'. [ 750.680426][T21997] team0: Device ipip0 is of different type [ 750.732983][T22001] tipc: Enabled bearer , priority 0 [ 750.745377][T22001] syzkaller0: entered promiscuous mode [ 750.752061][T22001] syzkaller0: entered allmulticast mode [ 750.786341][T21996] lo speed is unknown, defaulting to 1000 [ 750.809060][T21996] lo speed is unknown, defaulting to 1000 [ 750.834022][T22006] netlink: 'syz.8.3675': attribute type 10 has an invalid length. [ 750.891607][T22006] team0: Port device dummy0 added [ 750.900924][T21997] tipc: Resetting bearer [ 750.905892][T22007] netlink: 'syz.8.3675': attribute type 10 has an invalid length. [ 750.949084][T21995] tipc: Resetting bearer [ 750.966562][T21995] tipc: Disabling bearer [ 750.993046][T22007] team0: Port device dummy0 removed [ 751.254741][T22018] lo speed is unknown, defaulting to 1000 [ 751.265217][T22018] lo speed is unknown, defaulting to 1000 [ 752.195310][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3684'. [ 752.500637][T22049] team0: Device ipip0 is of different type [ 752.530461][T22051] veth1_to_hsr: entered promiscuous mode [ 752.537336][T22051] macvtap1: entered promiscuous mode [ 752.547206][T22051] macvtap1: entered allmulticast mode [ 752.553179][T22051] veth1_to_hsr: entered allmulticast mode [ 752.564765][T22054] tipc: Started in network mode [ 752.570135][T22054] tipc: Node identity 0ac463a0031f, cluster identity 4711 [ 752.577474][T22054] tipc: Enabled bearer , priority 0 [ 752.592341][T22053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'. [ 752.601917][T22055] macvtap2: entered promiscuous mode [ 752.607232][T22055] macvtap2: entered allmulticast mode [ 752.621952][T22049] syzkaller0: entered promiscuous mode [ 752.627566][T22049] syzkaller0: entered allmulticast mode [ 752.636079][T22053] IPVS: Error joining to the multicast group [ 752.682828][T22049] tipc: Resetting bearer [ 752.707982][T22048] tipc: Resetting bearer [ 752.715776][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'. [ 752.745232][T22048] tipc: Disabling bearer [ 753.942039][T22096] bridge0: entered promiscuous mode [ 754.038745][T22098] team0: Device ipip0 is up. Set it down before adding it as a team port [ 754.091425][T22100] tipc: Enabled bearer , priority 0 [ 754.102149][T22100] syzkaller0: entered promiscuous mode [ 754.107885][T22100] syzkaller0: entered allmulticast mode [ 754.170129][T22098] tipc: Resetting bearer [ 754.202369][T22097] tipc: Resetting bearer [ 754.243879][T22097] tipc: Disabling bearer [ 754.454018][T22108] lo speed is unknown, defaulting to 1000 [ 754.464941][T22108] lo speed is unknown, defaulting to 1000 [ 754.744200][T22114] syzkaller0: entered promiscuous mode [ 754.750991][T22114] syzkaller0: entered allmulticast mode [ 756.772512][T22138] tipc: Enabled bearer , priority 0 [ 756.785978][T22149] tipc: Resetting bearer [ 756.880636][T22149] tipc: Disabling bearer [ 756.932950][T22155] team0: Device ipip0 is up. Set it down before adding it as a team port [ 756.981481][T22157] tipc: Enabled bearer , priority 0 [ 756.989933][T22157] syzkaller0: entered promiscuous mode [ 756.995435][T22157] syzkaller0: entered allmulticast mode [ 757.043284][T22155] tipc: Resetting bearer [ 757.066448][T22160] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3720'. [ 757.076777][T22160] nbd: must specify at least one socket [ 757.077067][T22154] tipc: Resetting bearer [ 757.159542][T22154] tipc: Disabling bearer [ 757.195480][T22164] smc: net device bond0 applied user defined pnetid SYZ2 [ 757.209797][T22164] smc: net device bond0 erased user defined pnetid SYZ2 [ 757.423109][T22169] lo speed is unknown, defaulting to 1000 [ 757.430841][T22169] lo speed is unknown, defaulting to 1000 [ 757.709414][T22179] lo speed is unknown, defaulting to 1000 [ 757.717199][T22179] lo speed is unknown, defaulting to 1000 [ 757.991060][T22192] lo speed is unknown, defaulting to 1000 [ 758.003586][T22192] lo speed is unknown, defaulting to 1000 [ 758.116433][T22206] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 758.228851][ T31] INFO: task syz.1.2813:18608 blocked for more than 143 seconds. [ 758.237466][ T31] Not tainted syzkaller #0 [ 758.242900][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.252337][ T31] task:syz.1.2813 state:D stack:24264 pid:18608 tgid:18602 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 758.264741][ T31] Call Trace: [ 758.268381][ T31] [ 758.271488][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 758.280263][ T31] ? do_syscall_64+0xfa/0x3b0 [ 758.300717][ T31] ? __lock_acquire+0xab9/0xd20 [ 758.302353][T22211] team0: Device ipip0 is up. Set it down before adding it as a team port [ 758.312025][ T31] ? __pfx___schedule+0x10/0x10 [ 758.328312][ T31] ? schedule+0x91/0x360 [ 758.338108][ T31] schedule+0x165/0x360 [ 758.342325][ T31] schedule_timeout+0x9a/0x270 [ 758.347309][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 758.353784][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.359427][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.364664][ T31] ? wait_for_completion+0x267/0x5d0 [ 758.370613][ T31] wait_for_completion+0x2bf/0x5d0 [ 758.375799][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 758.382816][ T31] ? up_write+0x1c4/0x420 [ 758.387235][ T31] ? remove_client_context+0xc0/0x1e0 [ 758.393102][ T31] disable_device+0x1c6/0x320 [ 758.398333][ T31] ? __pfx_disable_device+0x10/0x10 [ 758.403731][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 758.410131][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 758.416413][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 758.422624][ T31] nldev_dellink+0x2d1/0x320 [ 758.427430][ T31] ? __lock_acquire+0xab9/0xd20 [ 758.432868][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 758.438491][ T31] ? apparmor_capable+0x137/0x1b0 [ 758.443907][ T31] ? bpf_lsm_capable+0x9/0x20 [ 758.449211][ T31] ? security_capable+0x7e/0x2e0 [ 758.454215][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 758.462911][ T31] rdma_nl_rcv+0x6ab/0x980 [ 758.513822][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 758.524660][ T31] ? __lock_acquire+0xab9/0xd20 [ 758.589233][T22197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.608160][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.613445][ T31] netlink_unicast+0x82c/0x9e0 [ 758.630740][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 758.636097][ T31] ? netlink_sendmsg+0x642/0xb30 [ 758.652989][ T31] ? skb_put+0x11b/0x210 [ 758.657308][ T31] netlink_sendmsg+0x805/0xb30 [ 758.662239][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.669141][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 758.674135][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.679616][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.685134][ T31] __sock_sendmsg+0x219/0x270 [ 758.702136][ T31] ____sys_sendmsg+0x505/0x830 [ 758.706982][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.716268][ T31] ? import_iovec+0x74/0xa0 [ 758.720998][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 758.725721][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.739045][ T31] ? __fget_files+0x2a/0x420 [ 758.743697][ T31] ? __fget_files+0x3a0/0x420 [ 758.749028][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 758.754022][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 758.760140][ T31] ? rcu_is_watching+0x15/0xb0 [ 758.764947][ T31] ? do_syscall_64+0xbe/0x3b0 [ 758.770033][ T31] do_syscall_64+0xfa/0x3b0 [ 758.774548][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.782754][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.789964][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.794689][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.801329][ T31] RIP: 0033:0x7f9d1278ec29 [ 758.805779][ T31] RSP: 002b:00007f9d109d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.814806][ T31] RAX: ffffffffffffffda RBX: 00007f9d129d6180 RCX: 00007f9d1278ec29 [ 758.823285][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 758.831394][ T31] RBP: 00007f9d12811e41 R08: 0000000000000000 R09: 0000000000000000 [ 758.839622][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.847625][ T31] R13: 00007f9d129d6218 R14: 00007f9d129d6180 R15: 00007ffd246cd8e8 [ 758.856091][ T31] [ 758.860874][ T31] [ 758.860874][ T31] Showing all locks held in the system: [ 758.871521][ T31] 1 lock held by khungtaskd/31: [ 758.876428][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 758.893676][ T31] 4 locks held by kworker/u8:4/60: [ 758.899705][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 758.911122][ T31] #1: ffffc9000210fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 758.922119][ T31] #2: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 758.931953][ T31] #3: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 758.944287][ T31] 2 locks held by getty/5621: [ 758.949105][ T31] #0: ffff8880339ef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 758.959077][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 758.969687][ T31] 7 locks held by kworker/u8:8/7160: [ 758.974995][ T31] 2 locks held by syz.1.2813/18608: [ 758.980713][ T31] #0: ffffffff99e6f958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 758.991285][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 759.004438][ T31] 2 locks held by syz.4.3181/20021: [ 759.010335][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.020422][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.032271][ T31] 2 locks held by syz.2.3185/20037: [ 759.037545][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.047197][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.058888][ T31] 2 locks held by syz.3.3231/20262: [ 759.064092][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.073602][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.085017][ T31] 1 lock held by syz-executor/20581: [ 759.090606][ T31] #0: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 759.102910][ T31] 2 locks held by syz.7.3306/20669: [ 759.108668][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.118833][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.130366][ T31] 2 locks held by syz.5.3343/20819: [ 759.135592][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.145144][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.156705][ T31] 2 locks held by syz.9.3454/21218: [ 759.162037][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.171510][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.183770][ T31] 2 locks held by syz.9.3454/21222: [ 759.189064][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.199341][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.210907][ T31] 2 locks held by syz.6.3662/21978: [ 759.216122][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 759.225916][ T31] #1: ffff888031fa8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 759.237283][ T31] 3 locks held by syz.0.3732/22211: [ 759.242853][ T31] #0: ffffffff8fa52d88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 759.252560][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 759.262108][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 759.273314][ T31] 1 lock held by syz.0.3732/22213: [ 759.278578][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 759.287424][ T31] 2 locks held by syz.0.3732/22214: [ 759.292667][ T31] #0: ffffffff8fa52d88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 759.303124][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 759.312288][ T31] 1 lock held by syz.0.3732/22215: [ 759.317397][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 759.365428][T22213] syzkaller0: entered promiscuous mode [ 759.371097][ T31] [ 759.373448][ T31] ============================================= [ 759.373448][ T31] [ 759.403384][T22213] syzkaller0: entered allmulticast mode [ 759.422787][ T31] NMI backtrace for cpu 0 [ 759.422821][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 759.422845][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 759.422858][ T31] Call Trace: [ 759.422866][ T31] [ 759.422874][ T31] dump_stack_lvl+0x189/0x250 [ 759.422908][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.422933][ T31] ? __pfx__printk+0x10/0x10 [ 759.422976][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 759.423010][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 759.423044][ T31] ? __pfx__printk+0x10/0x10 [ 759.423078][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 759.423112][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 759.423146][ T31] watchdog+0xf93/0xfe0 [ 759.423181][ T31] ? watchdog+0x1de/0xfe0 [ 759.423216][ T31] kthread+0x70e/0x8a0 [ 759.423246][ T31] ? __pfx_watchdog+0x10/0x10 [ 759.423273][ T31] ? __pfx_kthread+0x10/0x10 [ 759.423301][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.423321][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.423339][ T31] ? __pfx_kthread+0x10/0x10 [ 759.423365][ T31] ret_from_fork+0x439/0x7d0 [ 759.423389][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 759.423416][ T31] ? __switch_to_asm+0x39/0x70 [ 759.423441][ T31] ? __switch_to_asm+0x33/0x70 [ 759.423465][ T31] ? __pfx_kthread+0x10/0x10 [ 759.423491][ T31] ret_from_fork_asm+0x1a/0x30 [ 759.423531][ T31] [ 759.423538][ T31] Sending NMI from CPU 0 to CPUs 1: [ 759.573380][ C1] NMI backtrace for cpu 1 [ 759.573398][ C1] CPU: 1 UID: 0 PID: 20581 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 759.573418][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 759.573430][ C1] RIP: 0010:debug_check_no_obj_freed+0x205/0x470 [ 759.573461][ C1] Code: 00 ff c3 48 8b 44 24 18 49 89 c7 48 85 c0 0f 84 45 02 00 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 <74> 08 4c 89 ff e8 61 63 52 fd 49 8b 07 48 89 44 24 18 4d 8d 67 18 [ 759.573476][ C1] RSP: 0018:ffffc90019647818 EFLAGS: 00000046 [ 759.573492][ C1] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: dffffc0000000001 [ 759.573505][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90019647700 [ 759.573516][ C1] RBP: ffff888028659378 R08: 0000000000000003 R09: 0000000000000004 [ 759.573533][ C1] R10: dffffc0000000000 R11: fffff520032c8ee0 R12: ffff88802812b4b0 [ 759.573546][ C1] R13: ffffc90026003000 R14: 1ffff11005022fce R15: ffff888028117e70 [ 759.573560][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 759.573574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.573598][ C1] CR2: 000055ab1fe58000 CR3: 000000003c4a0000 CR4: 00000000003526f0 [ 759.573612][ C1] Call Trace: [ 759.573619][ C1] [ 759.573636][ C1] remove_vm_area+0x1d3/0x300 [ 759.573661][ C1] ? __pfx_kcov_close+0x10/0x10 [ 759.573685][ C1] vfree+0x63/0x400 [ 759.573707][ C1] ? __pfx_kcov_close+0x10/0x10 [ 759.573729][ C1] kcov_close+0x28/0x50 [ 759.573749][ C1] __fput+0x44c/0xa70 [ 759.573773][ C1] task_work_run+0x1d1/0x260 [ 759.573798][ C1] ? __pfx_task_work_run+0x10/0x10 [ 759.573820][ C1] ? kmem_cache_free+0x18f/0x400 [ 759.573846][ C1] do_exit+0x6b5/0x2300 [ 759.573871][ C1] ? do_raw_spin_lock+0x121/0x290 [ 759.573892][ C1] ? __pfx_do_exit+0x10/0x10 [ 759.573922][ C1] do_group_exit+0x21c/0x2d0 [ 759.573942][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.573962][ C1] get_signal+0x1286/0x1340 [ 759.573989][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 759.574015][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 759.574041][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 759.574074][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 759.574100][ C1] exit_to_user_mode_loop+0x75/0x110 [ 759.574123][ C1] do_syscall_64+0x2bd/0x3b0 [ 759.574143][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.574158][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 759.574176][ C1] ? clear_bhb_loop+0x60/0xb0 [ 759.574195][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.574211][ C1] RIP: 0033:0x7f5452dc14e5 [ 759.574224][ C1] Code: Unable to access opcode bytes at 0x7f5452dc14bb. [ 759.574232][ C1] RSP: 002b:00007fff1fa270c0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 759.574248][ C1] RAX: fffffffffffffdfc RBX: 0000000000000150 RCX: 00007f5452dc14e5 [ 759.574260][ C1] RDX: 00007fff1fa27100 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.574270][ C1] RBP: 00007fff1fa2716c R08: 0000000000000000 R09: 0000000000000000 [ 759.574280][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 759.574290][ C1] R13: 00000000000927c0 R14: 00000000000b9078 R15: 00007fff1fa271c0 [ 759.574310][ C1] [ 760.022398][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 760.029327][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 760.038815][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 760.048899][ T31] Call Trace: [ 760.052200][ T31] [ 760.055152][ T31] dump_stack_lvl+0x99/0x250 [ 760.059783][ T31] ? __asan_memcpy+0x40/0x70 [ 760.064404][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.069634][ T31] ? __pfx__printk+0x10/0x10 [ 760.074271][ T31] vpanic+0x281/0x750 [ 760.078285][ T31] ? __pfx_vpanic+0x10/0x10 [ 760.082819][ T31] ? preempt_schedule+0xae/0xc0 [ 760.087698][ T31] ? preempt_schedule_common+0x83/0xd0 [ 760.093196][ T31] panic+0xb9/0xc0 [ 760.096950][ T31] ? __pfx_panic+0x10/0x10 [ 760.101399][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 760.106813][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 760.113004][ T31] watchdog+0xfd2/0xfe0 [ 760.117206][ T31] ? watchdog+0x1de/0xfe0 [ 760.121585][ T31] kthread+0x70e/0x8a0 [ 760.125699][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.130419][ T31] ? __pfx_kthread+0x10/0x10 [ 760.135053][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.140277][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.145509][ T31] ? __pfx_kthread+0x10/0x10 [ 760.150135][ T31] ret_from_fork+0x439/0x7d0 [ 760.154768][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.159917][ T31] ? __switch_to_asm+0x39/0x70 [ 760.164722][ T31] ? __switch_to_asm+0x33/0x70 [ 760.169537][ T31] ? __pfx_kthread+0x10/0x10 [ 760.174165][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.178993][ T31] [ 760.182202][ T31] Kernel Offset: disabled [ 760.186538][ T31] Rebooting in 86400 seconds..