last executing test programs: 3m33.669413647s ago: executing program 0 (id=5810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800070000000000000000950000000000000036300059e483ebeb0fd68b58183ff00c339b8b7038ca2b3ab0920d995c3c2dfbba9fbb2ab2895956c49f4311fd1a66f63723235c208df99e85b336a9710f49557fc5602520158c134b53851b12b7180f05a8120c2882778e462bb1afeed2ab55b33cd743e3b13beab039af11e0005760aed5863b21af104008a81ff6ac5d2c06b649446f6a3a1063f689699ed7c9a2a6040000001b4454e7ae029817c97413df9717b91d5e5f5d982ad0a7003d5491127f12"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket(0x6, 0x80000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$6lowpan_control(r1, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0x1, 0xf}}}, 0x24}}, 0x20040054) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/97, 0x61}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) 3m32.998630959s ago: executing program 0 (id=5814): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 3m32.575947561s ago: executing program 0 (id=5817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m31.759406696s ago: executing program 0 (id=5826): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x44004) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000780)="4410039122de0ef56543f52a313e5145843cedb1ec860c2f8dd7f683d24d616d1b067b1660f5133b3d0f93595fbe8804bab1f55f8dc19871b8a3caf2170df94922f1930f5f44b6c7850647f05781108b47304d85340524bbdf", 0x0}, 0x20) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) 3m31.243657827s ago: executing program 0 (id=5829): r0 = socket(0x28, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13022cbd7000fbdbdf25010000000000000009410000004c00180000008662726f6164636173742d6c696e6b"], 0x68}}, 0x4000080) listen(r0, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x200440d4) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 3m30.68910683s ago: executing program 0 (id=5833): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0xffffd000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, r1}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x12, @dev, @mcast2, 0x10, 0x0, 0x0, 0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f00000008c0)=""/4096, &(0x7f0000000140)=0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 3m15.51287577s ago: executing program 32 (id=5833): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0xffffd000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, r1}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x12, @dev, @mcast2, 0x10, 0x0, 0x0, 0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f00000008c0)=""/4096, &(0x7f0000000140)=0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 34.505999714s ago: executing program 1 (id=7384): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 34.013864962s ago: executing program 1 (id=7386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, 0x0, 0x0, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 33.054012923s ago: executing program 1 (id=7392): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100000008000100000000000400048004000c80080002000100000018000880140007800800050008000600"], 0x44}}, 0x0) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r14, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r14, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xfffffffffffffcec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 32.730003578s ago: executing program 1 (id=7395): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000006000000000000000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x2000200b}) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xbf, @empty, 0xfff}}, 0x24) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf6, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x10}, {0x0, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xf9, &(0x7f0000000280)={@multicast, @local, @void, {@x25={0x805, {0x3, 0xa, 0x17, "a775918e71307b3051a984c981eabf81277be0a8222211753a4efa643ffaad73e76d7f60969d3e871751672af2732aef676ba092c3e0078c876bdf61ffa72d18335e6cea095ef499edca4f61897662772fc6838132f134368aa13d6ef9513fd0103ff02c00eea7ba793f891797e8537fca0f5b59df484437e33159b7e97bca37c62efb6cc0dae613123cf46f6ed24464556e7de307a9724f7af86509f0cff07788bb4ce49870a74266e0016d8ad4d397d603108ed6da7eee94d84d0641cc7a6de6f517fe6a5ac47a09c98e1308d1eb16017ba7b6c0c1e69eda6f73cffef3ccde687bd5e0134b549b"}}}}, &(0x7f0000000180)={0x0, 0x1, [0x8f, 0xa43, 0xc39, 0xd1]}) 31.72727752s ago: executing program 1 (id=7401): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x5, 0x8, 0x8, 0xd056}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r3, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7, 0x2, 0xf9, 0x7, 0x41, 0x1}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r4, 0x5}, 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0xfff9, 0x8006, 0x7, 0x0, r4}, &(0x7f0000000600)=0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="555cee0ca7047befc28441c5f1450ef7d298df78d9cfe90f2fcacd0af0d68f9f5ee10f4ec436e0a31da2f2bf54d8b9c9c2fac80ab70460521a5ddb278eba23f04b2ad69e0f9ca281a9c0cd27882abf58b2a2db9c61cd12f5832c1da73782ec024e3128b132b632aa706822cb11278e2c7ddb29926d2c3a872f86fcfc437bfc14570e79d65086135210c9f9631f9a127e", 0x90}], 0x2, 0x0, 0x0, 0x8040}, 0x4000040) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x68, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}, {"83c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445f44c1e54"}}}}}}, 0x0) 30.788460135s ago: executing program 1 (id=7408): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0xffffd000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, r1}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x12, @dev, @mcast2, 0x10, 0x0, 0x0, 0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f00000008c0)=""/4096, &(0x7f0000000140)=0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 15.702171689s ago: executing program 33 (id=7408): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0xffffd000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, r1}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x12, @dev, @mcast2, 0x10, 0x0, 0x0, 0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$bt_hci(r7, 0x0, 0x0, &(0x7f00000008c0)=""/4096, &(0x7f0000000140)=0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 4.07745337s ago: executing program 5 (id=7587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) ioctl(r5, 0x8b1b, &(0x7f0000000040)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000580)=0x6) write(r7, &(0x7f00000005c0)="0a00dc", 0x3) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000001080)=0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, 0x0, 0x0) 3.919930187s ago: executing program 5 (id=7589): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e20, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000002326b3bfc9885f55000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0xc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x48, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 3.159721858s ago: executing program 2 (id=7602): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e20, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000002326b3bfc9885f55000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0xc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x48, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 2.968334883s ago: executing program 5 (id=7603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.349693923s ago: executing program 3 (id=7608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200, 0x0, 0x4, 0x0, &(0x7f0000000380)="e3d9613f", 0x0}, 0x50) 2.316964706s ago: executing program 3 (id=7609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r5, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r7, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 2.227962347s ago: executing program 2 (id=7610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.223715772s ago: executing program 4 (id=7611): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a848e0050000000000008477fbac141516e00000014408", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.077403633s ago: executing program 2 (id=7612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.070500929s ago: executing program 4 (id=7613): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e20, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000002326b3bfc9885f55000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0xc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x48, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 2.017143639s ago: executing program 5 (id=7614): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x2000200b}) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xbf, @empty, 0xfff}}, 0x24) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf6, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x10}, {0x0, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xf9, &(0x7f0000000280)={@multicast, @local, @void, {@x25={0x805, {0x3, 0xa, 0x17, "a775918e71307b3051a984c981eabf81277be0a8222211753a4efa643ffaad73e76d7f60969d3e871751672af2732aef676ba092c3e0078c876bdf61ffa72d18335e6cea095ef499edca4f61897662772fc6838132f134368aa13d6ef9513fd0103ff02c00eea7ba793f891797e8537fca0f5b59df484437e33159b7e97bca37c62efb6cc0dae613123cf46f6ed24464556e7de307a9724f7af86509f0cff07788bb4ce49870a74266e0016d8ad4d397d603108ed6da7eee94d84d0641cc7a6de6f517fe6a5ac47a09c98e1308d1eb16017ba7b6c0c1e69eda6f73cffef3ccde687bd5e0134b549b"}}}}, &(0x7f0000000180)={0x0, 0x1, [0x8f, 0xa43, 0xc39, 0xd1]}) 1.424997706s ago: executing program 6 (id=7615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.309683063s ago: executing program 6 (id=7616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x84000) 1.28640349s ago: executing program 6 (id=7617): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x2c060000) unshare(0x24020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffb}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x34}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffa"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r8) sendmsg$inet_sctp(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="2ee6f5f8f58ff27ab238a6ba7ce9bc97c895dabe737604169d055b58", 0x1c}, {&(0x7f0000000540)="0dd25261cdcae75ca3adcbf00b8774b8037e57713c9dabba92cdb1c1e77312738c310a451e3d2d84a63a4252c310e5e005e1bb3dce3519986319104676b52b6a69e5ef061d0a93b05f0613b6e6a892e81120ebd10e863bab7771cc2ecb34465aac9519cd481be214f16a4120af7cc0b80129ce50d1fb0ed5413e4f4c9baad3d2408e4f6b6c3b9c489cb01a03", 0x8c}, {&(0x7f0000002140)="89fda95a7f0c6595e182022a83031e048c69261dfaeb2eb7452f00b4b6d01f08bb500d541fc916834180fce88b75fb31a1b4c17b70797b5f1a25e1f550865fbc6c49116ba2b2afc1e88a815b838cc064e5f318893231753f5a1fce0fab2425d0c2085be298efc2555866cb53b4ec1fc250dd17774a2755ef8fe4f4f0f3c50d6d86a2354833c32b7333e6273a1718fab7bdb12f31287248a5be7a7b66acff2025cb2e136ccedf943ea10fa9646201d16487a0c069b987f30d6f4aa7f7142da47dbf23e5eb035a730b1ff30d030e6130733fc0a299aa06fca8a974de4e58e09afe0920933bd127c2b8c336cbff103ff2982ffb6f9da8bb1954eefbd9fe4e4575a0772b45fe08e8ae27752ecd518dd16c3c856b611d0332c8cd42010f2c50ffd95ec2122b75b295dad84bc421185eb2157af22ea5be5a981deadfbc77a947f22a805038e0410a8a22d18722c3fefc826930525faf71d3ec92d54a11f5694ff981ae3ea8baed044d3b56e34e22a829f6a47339afc9b2924da2ae733834a7810c830142b1f3c221068a6cc344ad056a06e27063d0fbb9a6c4e3df95c7723f017ad6d1ef170a0e6bb6d46dd4a470735b3bf19ad804d5cee8b79c2c0636e968d7d805e8018dfb1925fa26089b55f8e4ca37d6308a927547b8cd42d0aeccbffe0f95d6e977be1813d648b2b73b7626a035cbf30e8b3b2ad8590f54465ffd791dc32025d39d11b6ad6bddd4b1b7080b20740470df0a5d1b4c1b137c5f877c4183373563554ea657332c896e7445b4ce3df88446330b572bf8becd78efc9b60542c7db72cd7c1bfdf59056a6f32c1d0cc344f1c5fcc0df884cad45266b6d373dc7b26b21f22dfcba2f7d388274584d3b786d6dfd0d1764c6b4d932058186e402d87848ff60c34603e87ca8d0e42e7020c01d7d3d24b5032d633b9d66a491a43afd8cc9c34fba753c9d6c5585cc6a1623f5ccc1debbc508a13d3fe1f52f8da2b41b97810bb4a333e66dbdab0df492d18a9e54f69b55c6180546407be9b5ed9045eca9d7a55dd2bfdaa90ae44075b7d607d6160a4d939ba7ef40861eed7031b6dcd29f56f1bf3c9fa7f8b8ee4ef6550961db1e9485ac735e7a70345eea43fc5e00204e18813002f0491ea78f1e9b52957f50e568a9a315f0400139283217e82402261e928350539e92fd1f80863b2694b51581ba73a2c8ebb8a5b1a9aa95ef061b5a08b9923d2706dd90345c6d9c9a3a88ca981fa8a65e8e19bd624606c475677a8c7846ccbf1f42da784ab30b5145a7fd618b8dc3f18e69055e819a93b0a1a61968b348fd8e5d964437ed5e6eedc755a23680f5f915ae6ae6108afe2bd0dd5f8072ee4d6f1d647ff5a58b7b37d97daf4add123cf445636de679bb605a812cc7790baad8f8dd06b9da264ccbe7acfa9a95b0f28c48092ecd79806deec3d63d29160951ecdb3caaa5b55bf75b8cc215a12a380d90f1c9c3116d90b0541a542c3f7139b3247d863a6f77a06a5a678698f442ca5824490cc2773702ece95fcd6811948fe6bb5120612d04164aecdf6d8d0ec438f211a00f8b7d77ec0d74c6e5399fb27936a68d11b37f982483865b619efb26905e79999d9b4353f9a3b0bbf518dbbec0fffc74f64db5c14547d0ba4b7943a57311be7ad7164b3b9945c2a2d4084be9c43cfd5b3f0d8b5e95b4278ec0cdad6a5e5a7844be6de5e2f27c14cadc24041c55a1a1e82611699964490d73831e19d8eee0eb5b87822a33cfd890fcbdbd8088c326129cb78b665563228b4589f24d889789e8fdade1341d16c3b26f795034982279b5db027e6a6be5d5f3ba2ded601fe2ca2fa8a1444ce3f43dec8a1a64c9bdc2b9194594fdaa7f2b3bbe49ad26b6dec6304f7a439e3fb6b81b53105416dee1eca2fd811ccc9c2142e62d5f16a370e8aa99334eecc7516e8b35385c10246ae0638fe3d0ddae32762fda5b6a1cee9a7bd10dbc5301702eefcd826dca57c09e1b75a8e0aa9b8ee461fb88c24c0e8a982ba329a89f89e78db7fb6e7ae7a26f7c69c306950ece75a9495b1accfdc969be616b7eb09f232bc531103f5ebc7dc6e9077318ecb66cc54b76174eeab16516adceb5744a4846b52a27fbaa4fd2e8eb99a55035acab7bc95ca27d82e3e24265bbe11351e9032b2190c5d7fdb63be62f0bb53bdf86765a44256b0b75329f37cef36b181872cb8a6d657bf6e401c4988d6ed30e303a4c0d203af16e7074c508c9afa7cffead5ea801e4233a8c963f76759fc2889e282c81fd7966028303000befac8fd378ea06b0ea451d8e30aa049d40ba793997756ff9927cac65e6c2fa72b24ea2eef480ac94ef1cc32684f5b0975c60d42ff58a428e71e7cf5a27eaf4624c02687499f2ec6c13c6e64ee5e88fb4201e28115e7ac900b7eba402e74de875b134b55bd5a7a4994cec9556d0e1b237681c3798120cc153a2c4eab4969ac05a78ed7966edb18a51af18441ac80adfca40d56eceb1e84095fc77706ecc649a4b2c900cb70faf83c1c705f6e84025b8ea8e4e7f1e11ac2911b77f267afe8b7609939a6a0fb42345e4402617e820400ec43beb480dba0199dcf306c9c4035784e2b1655cb3fa8bc1ce375409c9ff6c3283895273cde19b65ea0f574746c6d11f32c3fd374b719bd60db51a8f29b5f37c503f88cf088953ed851a562af382ead8f1fd609c44694016b4457571e95171dc5e3b6f105c083915aa3e6f48ffe5cda3d64e3a26", 0x78b}], 0x3, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 1.263744032s ago: executing program 3 (id=7618): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x28, 0x1, 0x1ff, 0x8, @empty, @empty, 0x8, 0x10, 0x3, 0x5c8}}) 1.149549078s ago: executing program 3 (id=7619): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x8c, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1cb}, @DEVLINK_ATTR_RATE_NODE_NAME={0x27, 0xa8, @random="c77d2c90dbbff8e82c8a64a98a4baec9f57c120d7f7b9e897f14b976b9fa66be6ff032"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8008040}, 0x4000) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000a95989d00000000030d2000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083001000bf0900000000000055090100000500000000000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="9b", 0x34000}], 0x1}, 0x4) 1.127071075s ago: executing program 2 (id=7620): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 1.126628019s ago: executing program 3 (id=7621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r4, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r6, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 1.043927568s ago: executing program 5 (id=7622): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x3, 0x20e, 0x1, 0xd, 0x2, 0x6, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}], 0x48}], 0x1, 0x0) 1.02901834s ago: executing program 4 (id=7623): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x5e21, 0x7, @loopback, 0xd987}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x84}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x30}}], 0x2, 0x4004000) 993.338055ms ago: executing program 2 (id=7624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 869.616082ms ago: executing program 5 (id=7625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000480)=0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r8, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 869.338698ms ago: executing program 4 (id=7626): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x8c, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1cb}, @DEVLINK_ATTR_RATE_NODE_NAME={0x27, 0xa8, @random="c77d2c90dbbff8e82c8a64a98a4baec9f57c120d7f7b9e897f14b976b9fa66be6ff032"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8008040}, 0x4000) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000a95989d00000000030d2000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083001000bf0900000000000055090100000500000000000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x4) 777.548027ms ago: executing program 4 (id=7627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 642.272592ms ago: executing program 4 (id=7628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r5, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r7, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 292.957055ms ago: executing program 6 (id=7629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc01, {0x0, 0x0, 0x3, 0x0, 0x1020, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xfffffff9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 189.644255ms ago: executing program 6 (id=7630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 161.87933ms ago: executing program 6 (id=7631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 36.55337ms ago: executing program 3 (id=7632): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x2000200b}) r3 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r3, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xbf, @empty, 0xfff}}, 0x24) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf6, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x10}, {0x0, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xf9, &(0x7f0000000280)={@multicast, @local, @void, {@x25={0x805, {0x3, 0xa, 0x17, "a775918e71307b3051a984c981eabf81277be0a8222211753a4efa643ffaad73e76d7f60969d3e871751672af2732aef676ba092c3e0078c876bdf61ffa72d18335e6cea095ef499edca4f61897662772fc6838132f134368aa13d6ef9513fd0103ff02c00eea7ba793f891797e8537fca0f5b59df484437e33159b7e97bca37c62efb6cc0dae613123cf46f6ed24464556e7de307a9724f7af86509f0cff07788bb4ce49870a74266e0016d8ad4d397d603108ed6da7eee94d84d0641cc7a6de6f517fe6a5ac47a09c98e1308d1eb16017ba7b6c0c1e69eda6f73cffef3ccde687bd5e0134b549b"}}}}, &(0x7f0000000180)={0x0, 0x1, [0x8f, 0xa43, 0xc39, 0xd1]}) 0s ago: executing program 2 (id=7633): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): er0: entered promiscuous mode [ 809.882548][T25975] syzkaller0: entered allmulticast mode [ 810.111977][T25984] tipc: Enabling of bearer rejected, already enabled [ 810.129060][T25970] syzkaller0 speed is unknown, defaulting to 1000 [ 810.139559][T25984] batadv0: mtu less than device minimum [ 810.182044][T25970] lo speed is unknown, defaulting to 1000 [ 810.369841][T25990] syzkaller0 speed is unknown, defaulting to 1000 [ 810.394464][T25988] syzkaller0 speed is unknown, defaulting to 1000 [ 810.402521][T25990] lo speed is unknown, defaulting to 1000 [ 810.409340][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 810.414718][T25988] lo speed is unknown, defaulting to 1000 [ 810.428678][T25995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5647'. [ 810.439985][T25997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5646'. [ 810.462785][T25997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5646'. [ 811.039720][T26011] syzkaller0 speed is unknown, defaulting to 1000 [ 811.051312][T26011] lo speed is unknown, defaulting to 1000 [ 811.071008][T26008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5649'. [ 811.100608][T26008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5649'. [ 811.308774][T26016] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5652'. [ 811.455237][T26024] tipc: Enabled bearer , priority 0 [ 811.790049][T26040] rdma_rxe: rxe_newlink: failed to add lo [ 811.812022][T26024] tipc: Disabling bearer [ 811.861523][T26040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 812.148520][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5662'. [ 812.215557][T26052] syzkaller0 speed is unknown, defaulting to 1000 [ 812.230009][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5662'. [ 812.259750][T26052] lo speed is unknown, defaulting to 1000 [ 812.351959][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 812.823020][T26079] geneve6: entered promiscuous mode [ 813.136210][T26089] tipc: Enabled bearer , priority 0 [ 813.199004][T26089] tipc: Disabling bearer [ 813.290600][T26101] rdma_rxe: rxe_newlink: failed to add lo [ 813.363473][T26098] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.389043][T26098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 814.914236][T26144] tipc: Enabled bearer , priority 0 [ 814.977238][T26147] tipc: Enabled bearer , priority 0 [ 814.989732][T26147] syzkaller0: entered promiscuous mode [ 814.995842][T26147] syzkaller0: entered allmulticast mode [ 815.062088][T26147] tipc: Resetting bearer [ 815.083843][T26139] netlink: 'syz.3.5684': attribute type 1 has an invalid length. [ 815.093352][T26145] tipc: Resetting bearer [ 815.094326][T26139] netlink: 'syz.3.5684': attribute type 4 has an invalid length. [ 815.118603][T26139] netlink: 'syz.3.5684': attribute type 1 has an invalid length. [ 815.126526][T26139] netlink: 'syz.3.5684': attribute type 4 has an invalid length. [ 815.149790][T26145] tipc: Disabling bearer [ 815.321661][T26144] tipc: Disabling bearer [ 815.371237][T26155] rdma_rxe: rxe_newlink: failed to add lo [ 815.384014][T26155] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 815.421000][T26157] __nla_validate_parse: 2 callbacks suppressed [ 815.421018][T26157] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5689'. [ 815.732190][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 816.151328][T26186] syzkaller0 speed is unknown, defaulting to 1000 [ 816.186553][T26186] lo speed is unknown, defaulting to 1000 [ 816.349062][T26193] tipc: Enabling of bearer rejected, already enabled [ 816.443875][T26196] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5699'. [ 816.608602][T26201] tipc: Enabling of bearer rejected, already enabled [ 816.784893][T26208] syzkaller0 speed is unknown, defaulting to 1000 [ 816.810625][T26208] lo speed is unknown, defaulting to 1000 [ 816.895720][T26211] tipc: Enabling of bearer rejected, failed to enable media [ 816.919155][T26213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5704'. [ 816.937744][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5704'. [ 817.298231][T26229] netlink: 'syz.3.5707': attribute type 16 has an invalid length. [ 817.307214][T26229] netlink: 'syz.3.5707': attribute type 17 has an invalid length. [ 817.316424][T26221] syzkaller0: entered promiscuous mode [ 817.326655][T26221] syzkaller0: entered allmulticast mode [ 817.576024][T26229] tipc: Resetting bearer [ 817.600104][T26229] hsr0: left allmulticast mode [ 817.605724][T26229] hsr_slave_0: left allmulticast mode [ 817.613300][T26229] hsr_slave_1: left allmulticast mode [ 817.795225][T26240] tipc: Enabled bearer , priority 0 [ 817.808432][T26240] syzkaller0: entered promiscuous mode [ 817.815101][T26240] syzkaller0: entered allmulticast mode [ 817.856138][T26243] tipc: Enabled bearer , priority 0 [ 817.876753][T26240] tipc: Resetting bearer [ 817.891418][T26243] syzkaller0: entered promiscuous mode [ 817.903532][T26243] syzkaller0: entered allmulticast mode [ 817.921138][T26239] tipc: Resetting bearer [ 817.953817][T26239] tipc: Disabling bearer [ 817.982759][T26243] tipc: Resetting bearer [ 818.025438][T26241] tipc: Resetting bearer [ 818.089798][T26241] tipc: Disabling bearer [ 818.124307][T26255] bridge0: entered allmulticast mode [ 818.217115][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.234591][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.248937][T26260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5716'. [ 818.323855][T26262] syzkaller0 speed is unknown, defaulting to 1000 [ 818.335242][T26262] lo speed is unknown, defaulting to 1000 [ 818.390885][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 818.405839][T26267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5717'. [ 818.454166][T26266] syzkaller0 speed is unknown, defaulting to 1000 [ 818.496718][T26272] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5719'. [ 818.511109][T26268] syzkaller0 speed is unknown, defaulting to 1000 [ 818.511121][T26266] lo speed is unknown, defaulting to 1000 [ 818.531882][T26268] lo speed is unknown, defaulting to 1000 [ 818.548529][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5718'. [ 818.578575][T26274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5718'. [ 819.610573][T26307] macvtap1: entered promiscuous mode [ 819.627762][T26307] bond0: entered promiscuous mode [ 819.633735][T26307] macvtap1: entered allmulticast mode [ 819.655011][T26307] bond0: entered allmulticast mode [ 819.713848][T26307] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 819.805973][T26310] bond0: left allmulticast mode [ 819.812106][T26310] bond0: left promiscuous mode [ 820.385188][T26333] tipc: Enabled bearer , priority 0 [ 820.416048][T26333] syzkaller0: entered promiscuous mode [ 820.422119][T26333] syzkaller0: entered allmulticast mode [ 820.452225][T26335] tipc: Enabling of bearer rejected, already enabled [ 820.466738][T26333] tipc: Resetting bearer [ 820.482235][T26335] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 820.492543][T26335] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 820.503136][T26332] tipc: Resetting bearer [ 820.532013][T26332] tipc: Disabling bearer [ 820.747483][T26341] syzkaller0 speed is unknown, defaulting to 1000 [ 820.759307][T26337] __nla_validate_parse: 1 callbacks suppressed [ 820.759326][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5738'. [ 820.785786][T26341] lo speed is unknown, defaulting to 1000 [ 820.969962][T26344] tipc: Enabled bearer , priority 0 [ 821.109127][T26344] syzkaller0: entered promiscuous mode [ 821.116095][T26344] syzkaller0: entered allmulticast mode [ 821.242321][T26344] tipc: Resetting bearer [ 821.273446][T26360] tipc: Enabling of bearer rejected, already enabled [ 821.295619][T26343] tipc: Resetting bearer [ 821.362293][T26343] tipc: Disabling bearer [ 821.450972][T26374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5749'. [ 821.546664][T26375] syzkaller0 speed is unknown, defaulting to 1000 [ 821.556865][T26375] lo speed is unknown, defaulting to 1000 [ 821.912185][T26395] tipc: Resetting bearer [ 822.181645][ T6038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.191262][ T6038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.359094][T26409] tipc: Enabled bearer , priority 0 [ 822.368045][T26409] syzkaller0: entered promiscuous mode [ 822.374076][T26409] syzkaller0: entered allmulticast mode [ 822.413403][T26409] tipc: Resetting bearer [ 822.449844][T26408] tipc: Resetting bearer [ 822.475908][T26408] tipc: Disabling bearer [ 823.161050][T26421] tipc: Enabling of bearer rejected, already enabled [ 823.175358][T26421] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5761'. [ 823.311691][T26426] syzkaller0 speed is unknown, defaulting to 1000 [ 823.334550][T26426] lo speed is unknown, defaulting to 1000 [ 823.778695][T26440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5766'. [ 823.858057][T26440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5766'. [ 823.897408][T26435] syzkaller0 speed is unknown, defaulting to 1000 [ 823.961767][T26435] lo speed is unknown, defaulting to 1000 [ 824.156848][T26453] tipc: Resetting bearer [ 824.873595][T26466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5773'. [ 825.520890][T26490] vlan4: entered promiscuous mode [ 825.858197][T26502] tipc: Enabling of bearer rejected, already enabled [ 825.885808][T26502] batadv0: mtu less than device minimum [ 826.088392][T26508] sctp: [Deprecated]: syz.0.5785 (pid 26508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.088392][T26508] Use struct sctp_sack_info instead [ 826.234987][T26508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5785'. [ 826.269590][T26508] netlink: 'syz.0.5785': attribute type 3 has an invalid length. [ 826.435110][T26514] tipc: Enabled bearer , priority 0 [ 826.509287][T26516] batadv0: mtu less than device minimum [ 826.606136][T26514] tipc: Disabling bearer [ 826.932641][T26530] netlink: 'syz.4.5789': attribute type 13 has an invalid length. [ 826.942840][T26530] netlink: 'syz.4.5789': attribute type 17 has an invalid length. [ 827.205232][T26530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 827.257323][T26533] tipc: Enabled bearer , priority 0 [ 827.291923][T26533] batadv0: mtu less than device minimum [ 827.351107][T26533] tipc: Disabling bearer [ 827.381835][T26531] syzkaller0 speed is unknown, defaulting to 1000 [ 827.404176][T26531] lo speed is unknown, defaulting to 1000 [ 827.604605][T26540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5794'. [ 827.645353][T26548] netlink: 'syz.0.5795': attribute type 15 has an invalid length. [ 828.592487][T26557] netlink: 'syz.3.5798': attribute type 12 has an invalid length. [ 828.867074][T26565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5800'. [ 829.061166][T26572] tipc: Enabling of bearer rejected, already enabled [ 829.128296][T26572] batadv0: mtu less than device minimum [ 830.014218][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 830.023717][T26594] netlink: 'syz.1.5807': attribute type 5 has an invalid length. [ 830.032826][T26594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5807'. [ 830.053293][T26594] geneve2: entered promiscuous mode [ 830.058968][T26594] geneve2: entered allmulticast mode [ 830.071325][ T6038] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 830.080841][ T6038] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 830.089944][ T6038] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 830.102079][ T6038] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 830.935912][T26606] syzkaller0 speed is unknown, defaulting to 1000 [ 830.944364][T26608] tipc: Enabled bearer , priority 0 [ 830.975055][T26606] lo speed is unknown, defaulting to 1000 [ 830.977896][T26608] batadv0: mtu less than device minimum [ 831.212407][T26608] tipc: Disabling bearer [ 831.231134][T26612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5814'. [ 831.364736][T26614] syzkaller0 speed is unknown, defaulting to 1000 [ 831.371139][T26616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5815'. [ 831.386877][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5815'. [ 831.403167][T26614] lo speed is unknown, defaulting to 1000 [ 831.478801][T26618] syzkaller0 speed is unknown, defaulting to 1000 [ 831.530211][T26618] lo speed is unknown, defaulting to 1000 [ 831.621515][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5817'. [ 831.662426][T26624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5817'. [ 831.742405][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5818'. [ 831.809859][T26626] dummy0: entered promiscuous mode [ 831.815555][T26626] macvtap2: entered promiscuous mode [ 831.822466][T26626] macvtap2: entered allmulticast mode [ 831.857400][T26626] dummy0: entered allmulticast mode [ 831.884507][T26630] macvtap2: left promiscuous mode [ 831.910761][T26630] macvtap2: left allmulticast mode [ 831.957951][T26630] dummy0: left allmulticast mode [ 832.522089][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5827'. [ 832.550746][T26647] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 832.609318][T26652] batadv_slave_1: entered promiscuous mode [ 833.090139][T26668] netlink: 'syz.4.5830': attribute type 1 has an invalid length. [ 833.118711][T26650] batadv_slave_1: left promiscuous mode [ 833.230860][T26668] 8021q: adding VLAN 0 to HW filter on device bond16 [ 833.322099][T26666] vlan0: entered allmulticast mode [ 833.327360][T26666] veth1: entered allmulticast mode [ 833.348399][T26666] bond16: (slave vlan0): Opening slave failed [ 833.371366][T26676] rdma_rxe: rxe_newlink: failed to add lo [ 833.379308][T26674] syzkaller0: entered promiscuous mode [ 833.386434][T26674] syzkaller0: entered allmulticast mode [ 833.430369][T26676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 833.452325][T26677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 833.460517][T26677] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 833.491453][T26677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 833.497468][T26677] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 833.562607][T26677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 833.568978][T26677] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 833.582366][T26677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 833.594030][T26677] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 833.628796][T26687] syzkaller0 speed is unknown, defaulting to 1000 [ 833.637461][T26687] lo speed is unknown, defaulting to 1000 [ 833.747392][T26694] tipc: Enabled bearer , priority 0 [ 833.764735][T26694] batadv0: mtu less than device minimum [ 833.776713][T26687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5836'. [ 833.818406][T26687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5836'. [ 833.902312][T26694] tipc: Disabling bearer [ 834.262959][T26712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5841'. [ 834.377221][T26713] syzkaller0 speed is unknown, defaulting to 1000 [ 834.561159][T26713] lo speed is unknown, defaulting to 1000 [ 835.136379][T26752] syzkaller0 speed is unknown, defaulting to 1000 [ 835.146274][T26752] lo speed is unknown, defaulting to 1000 [ 835.160919][T26754] tipc: Enabled bearer , priority 0 [ 835.233637][T26754] batadv0: mtu less than device minimum [ 835.280431][T26756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5849'. [ 835.395236][T26754] tipc: Disabling bearer [ 835.541988][T26769] syzkaller0 speed is unknown, defaulting to 1000 [ 835.550879][T26769] lo speed is unknown, defaulting to 1000 [ 835.572616][T26777] netlink: 'syz.4.5853': attribute type 1 has an invalid length. [ 835.603220][T26777] bond17: entered promiscuous mode [ 835.611127][T26777] 8021q: adding VLAN 0 to HW filter on device bond17 [ 835.611323][T26747] mpoa:mpoad_close: () going down [ 836.317355][T26797] syzkaller0 speed is unknown, defaulting to 1000 [ 836.363216][T26797] lo speed is unknown, defaulting to 1000 [ 837.365426][T26812] netlink: 'syz.4.5863': attribute type 13 has an invalid length. [ 837.381852][T26812] netlink: 'syz.4.5863': attribute type 17 has an invalid length. [ 837.412808][T26812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 837.510055][T26809] syzkaller0 speed is unknown, defaulting to 1000 [ 837.568727][T26809] lo speed is unknown, defaulting to 1000 [ 837.684926][T26821] netlink: 'syz.2.5865': attribute type 10 has an invalid length. [ 837.706924][T26812] syzkaller0 speed is unknown, defaulting to 1000 [ 837.754773][T26812] lo speed is unknown, defaulting to 1000 [ 838.168506][T26831] syzkaller0 speed is unknown, defaulting to 1000 [ 838.178423][T26831] lo speed is unknown, defaulting to 1000 [ 838.272656][T26832] syzkaller0 speed is unknown, defaulting to 1000 [ 838.369540][T26832] lo speed is unknown, defaulting to 1000 [ 838.812748][T26848] netlink: 'syz.4.5870': attribute type 10 has an invalid length. [ 838.829038][T26848] !: entered promiscuous mode [ 838.835516][T26848] bond0: (slave 0!): Enslaving as an active interface with an up link [ 838.848652][ T6040] bond0: (slave 0!): interface is now down [ 838.859138][ T6040] bond0: now running without any active interface! [ 839.152467][T26854] siw: device registration error -23 [ 839.579542][T26869] tipc: Enabled bearer , priority 0 [ 839.590856][T26869] syzkaller0: entered promiscuous mode [ 839.596343][T26869] syzkaller0: entered allmulticast mode [ 839.633848][T26869] tipc: Resetting bearer [ 839.653102][T26868] tipc: Resetting bearer [ 839.689624][T26868] tipc: Disabling bearer [ 839.718618][T26872] syzkaller0 speed is unknown, defaulting to 1000 [ 839.727411][T26872] lo speed is unknown, defaulting to 1000 [ 839.836289][T26876] __nla_validate_parse: 2 callbacks suppressed [ 839.836308][T26876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 839.858414][T26876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5878'. [ 840.062987][T26884] syzkaller0 speed is unknown, defaulting to 1000 [ 840.100953][T26884] lo speed is unknown, defaulting to 1000 [ 840.152064][T26889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5882'. [ 840.162105][T26889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5882'. [ 840.171343][T26889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5882'. [ 840.181178][T26889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5882'. [ 840.357002][T26895] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5884'. [ 840.599545][T26907] tipc: Enabling of bearer rejected, already enabled [ 840.632805][T26907] batadv0: mtu less than device minimum [ 840.833163][T26914] syzkaller0 speed is unknown, defaulting to 1000 [ 840.842233][T26914] lo speed is unknown, defaulting to 1000 [ 841.032687][T26918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5889'. [ 841.043812][T26918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5889'. [ 842.326637][T26950] tipc: Enabled bearer , priority 0 [ 842.373122][T26951] syzkaller0 speed is unknown, defaulting to 1000 [ 842.389440][T26951] lo speed is unknown, defaulting to 1000 [ 842.440883][T26950] tipc: Disabling bearer [ 843.680593][T26975] tipc: Enabled bearer , priority 0 [ 843.928691][T26975] tipc: Disabling bearer [ 844.112243][T26993] tipc: Enabled bearer , priority 0 [ 844.144813][T26993] syzkaller0: entered promiscuous mode [ 844.153132][T26993] syzkaller0: entered allmulticast mode [ 844.177242][T26993] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5908'. [ 844.201405][T26993] tipc: Resetting bearer [ 844.241254][T26989] tipc: Resetting bearer [ 844.274820][T26989] tipc: Disabling bearer [ 844.601419][T27007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.014418][T27020] syzkaller0 speed is unknown, defaulting to 1000 [ 845.024639][T27020] lo speed is unknown, defaulting to 1000 [ 845.578358][T27025] syzkaller0 speed is unknown, defaulting to 1000 [ 845.619140][T27025] lo speed is unknown, defaulting to 1000 [ 845.630153][T27027] netlink: 'syz.1.5915': attribute type 10 has an invalid length. [ 846.960372][T27053] tipc: Enabled bearer , priority 0 [ 847.373482][T27053] tipc: Disabling bearer [ 847.402898][T27063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5923'. [ 847.436664][T27063] macvtap3: entered promiscuous mode [ 847.452796][T27063] batadv0: entered promiscuous mode [ 847.463183][T27063] macvtap3: entered allmulticast mode [ 847.471393][T27063] batadv0: entered allmulticast mode [ 847.480325][T27063] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 847.967170][T27077] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5926'. [ 848.093552][T27081] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5927'. [ 848.224111][T27083] syzkaller0 speed is unknown, defaulting to 1000 [ 848.236565][T27083] lo speed is unknown, defaulting to 1000 [ 849.038262][T27100] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5934'. [ 849.185941][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 849.200143][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 849.268370][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 849.276576][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 849.285921][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 849.422219][T27102] syzkaller0 speed is unknown, defaulting to 1000 [ 849.472214][T27102] lo speed is unknown, defaulting to 1000 [ 849.563790][T27113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5937'. [ 849.576027][T27111] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 849.959481][T27125] syzkaller0 speed is unknown, defaulting to 1000 [ 849.970405][T27125] lo speed is unknown, defaulting to 1000 [ 850.164560][T27102] chnl_net:caif_netlink_parms(): no params data found [ 850.333964][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5945'. [ 850.468124][T27145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5945'. [ 850.560859][T27102] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.578868][T27102] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.588418][T27102] bridge_slave_0: entered allmulticast mode [ 850.605625][T27154] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5946'. [ 850.619028][T27102] bridge_slave_0: entered promiscuous mode [ 850.775350][T27102] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.785177][T27102] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.796410][T27102] bridge_slave_1: entered allmulticast mode [ 850.805785][T27102] bridge_slave_1: entered promiscuous mode [ 850.869294][T27158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5946'. [ 851.011153][T27102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.032931][T27154] syzkaller0 speed is unknown, defaulting to 1000 [ 851.047165][T27154] lo speed is unknown, defaulting to 1000 [ 851.170198][T27102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.327758][ T50] Bluetooth: hci5: command tx timeout [ 851.353997][T27102] team0: Port device team_slave_0 added [ 851.370060][T27102] team0: Port device team_slave_1 added [ 851.386624][T27173] rdma_rxe: rxe_newlink: failed to add lo [ 851.415488][T27173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.455663][T27102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.462819][T27102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.489759][T27102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.559948][T27102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.566934][T27102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.623157][T27102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.698849][T27182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 851.836931][T27187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5951'. [ 851.861964][T27102] hsr_slave_0: entered promiscuous mode [ 851.869322][T27102] hsr_slave_1: entered promiscuous mode [ 851.875879][T27102] debugfs: 'hsr0' already exists in 'hsr' [ 851.884634][T27102] Cannot create hsr debugfs directory [ 851.964396][T27185] syzkaller0 speed is unknown, defaulting to 1000 [ 851.973426][T27185] lo speed is unknown, defaulting to 1000 [ 852.048038][T27182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 852.387876][T27182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 852.539163][T27182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 852.727079][T27200] syzkaller0 speed is unknown, defaulting to 1000 [ 852.728357][T27102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 852.802783][T27203] netlink: 'syz.4.5956': attribute type 16 has an invalid length. [ 852.816580][T27102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 852.834781][T27102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 852.854141][T27203] netlink: 'syz.4.5956': attribute type 17 has an invalid length. [ 852.870553][T27102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 852.878445][T27200] lo speed is unknown, defaulting to 1000 [ 853.066955][T27203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 853.251097][T27222] syzkaller0 speed is unknown, defaulting to 1000 [ 853.326906][T27222] lo speed is unknown, defaulting to 1000 [ 853.409442][ T50] Bluetooth: hci5: command tx timeout [ 853.792567][T27102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.825719][T27102] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.841848][T26657] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.849491][T26657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.886248][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.893500][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.188652][T27251] netlink: 'syz.1.5963': attribute type 12 has an invalid length. [ 854.380692][T27254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5964'. [ 854.669984][T27102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.167073][T27268] bond15: option packets_per_slave: invalid value (1802723700) [ 855.176582][T27268] bond15: option packets_per_slave: allowed values 0 - 65535 [ 855.219957][T27268] bond15 (unregistering): Released all slaves [ 855.265862][T27271] netlink: 'syz.1.5967': attribute type 15 has an invalid length. [ 855.475136][T27280] syzkaller0 speed is unknown, defaulting to 1000 [ 855.492803][ T50] Bluetooth: hci5: command tx timeout [ 855.510223][T27280] lo speed is unknown, defaulting to 1000 [ 855.536053][T27285] netlink: 'syz.1.5969': attribute type 13 has an invalid length. [ 855.564489][T27285] netlink: 'syz.1.5969': attribute type 17 has an invalid length. [ 855.595138][T27102] veth0_vlan: entered promiscuous mode [ 855.686664][T27285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 855.864235][T27102] veth1_vlan: entered promiscuous mode [ 855.925893][T27102] veth0_macvtap: entered promiscuous mode [ 855.941680][T27102] veth1_macvtap: entered promiscuous mode [ 855.973603][T27102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.989880][T27102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.017429][T27266] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 856.064407][T27283] syzkaller0 speed is unknown, defaulting to 1000 [ 856.092257][ T6038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.140342][T27283] lo speed is unknown, defaulting to 1000 [ 856.140831][ T6038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.170109][ T6038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.201973][ T6038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.738718][ T6038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.761797][ T6038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.863154][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.910106][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.232087][T27312] erspan0: entered promiscuous mode [ 857.354750][T27312] erspan0: left promiscuous mode [ 857.567671][ T50] Bluetooth: hci5: command tx timeout [ 857.579465][T27310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5974'. [ 858.054022][ T7116] IPVS: starting estimator thread 0... [ 858.157722][T27339] IPVS: using max 27 ests per chain, 64800 per kthread [ 858.173731][T27346] IPVS: lc: FWM 3 0x00000003 - no destination available [ 858.206056][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 858.281096][T27351] pim6reg99999999: entered allmulticast mode [ 858.830333][T27367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5983'. [ 858.905257][T27371] netlink: 'syz.3.5984': attribute type 13 has an invalid length. [ 858.913372][T27371] netlink: 'syz.3.5984': attribute type 17 has an invalid length. [ 858.980089][T27371] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.015413][T27371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.105607][T27377] tipc: Enabled bearer , priority 0 [ 859.143627][T27379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5986'. [ 859.144577][T27377] batadv0: mtu less than device minimum [ 859.241815][T27377] tipc: Disabling bearer [ 859.620919][T27394] netlink: 788 bytes leftover after parsing attributes in process `syz.5.5991'. [ 860.462643][T27404] syzkaller0 speed is unknown, defaulting to 1000 [ 860.504205][T27404] lo speed is unknown, defaulting to 1000 [ 860.684929][T27411] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5993'. [ 861.711872][T27431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5998'. [ 864.543595][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 864.661040][T27477] hsr0: entered promiscuous mode [ 864.666826][T27477] macsec1: entered allmulticast mode [ 864.689115][T27477] hsr0: entered allmulticast mode [ 864.694200][T27477] hsr_slave_0: entered allmulticast mode [ 864.741324][T27477] hsr_slave_1: entered allmulticast mode [ 865.164375][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6009'. [ 865.293867][T27483] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.295411][T27490] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6010'. [ 865.522645][T27483] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.579248][T27498] syzkaller0 speed is unknown, defaulting to 1000 [ 865.606423][T27483] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.626404][T27498] lo speed is unknown, defaulting to 1000 [ 865.661256][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6012'. [ 865.677868][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6012'. [ 865.729594][T27483] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.905515][ T6043] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.960975][ T55] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.008774][ T55] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.059688][ T6043] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.176795][T27509] syzkaller0 speed is unknown, defaulting to 1000 [ 866.196011][T27515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6014'. [ 866.203224][T27509] lo speed is unknown, defaulting to 1000 [ 866.207040][T27515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6014'. [ 866.239830][T27514] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6016'. [ 866.274521][T27512] syzkaller0 speed is unknown, defaulting to 1000 [ 866.304660][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'. [ 866.394613][T27519] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6016'. [ 866.417492][T27518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6015'. [ 866.503696][T27512] lo speed is unknown, defaulting to 1000 [ 866.580638][T27525] rdma_rxe: rxe_newlink: failed to add lo [ 866.606570][T27525] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.631117][T27525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 867.172960][T27535] syzkaller0 speed is unknown, defaulting to 1000 [ 867.195120][T27535] lo speed is unknown, defaulting to 1000 [ 867.202285][T27542] syzkaller0 speed is unknown, defaulting to 1000 [ 867.345464][T27542] lo speed is unknown, defaulting to 1000 [ 869.039402][T27582] syzkaller0 speed is unknown, defaulting to 1000 [ 869.049349][T27582] lo speed is unknown, defaulting to 1000 [ 869.411165][T27596] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.475527][T27596] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.536173][T27596] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.656009][T27596] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.823763][ T6038] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.852967][ T6038] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.885015][ T6038] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.914231][ T6038] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.294821][T27614] __nla_validate_parse: 6 callbacks suppressed [ 870.294844][T27614] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6034'. [ 870.516001][T27617] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6035'. [ 871.012570][T27632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6038'. [ 871.070470][T27633] netlink: 'syz.3.6038': attribute type 1 has an invalid length. [ 871.079677][T27633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6038'. [ 871.335587][T27625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6037'. [ 871.338975][T27639] rdma_rxe: rxe_newlink: failed to add lo [ 871.353115][T27625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6037'. [ 871.412099][T27639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.667047][T27644] netlink: 'syz.5.6043': attribute type 13 has an invalid length. [ 871.686059][T27644] netlink: 'syz.5.6043': attribute type 17 has an invalid length. [ 871.917241][T27644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 872.024472][T27647] syzkaller0 speed is unknown, defaulting to 1000 [ 872.034131][T27647] lo speed is unknown, defaulting to 1000 [ 872.121505][T27661] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6046'. [ 873.203640][T27678] syzkaller0 speed is unknown, defaulting to 1000 [ 873.262553][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6051'. [ 873.356735][T27678] lo speed is unknown, defaulting to 1000 [ 873.358722][T27684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6051'. [ 873.380289][T27681] syzkaller0 speed is unknown, defaulting to 1000 [ 873.532207][T27681] lo speed is unknown, defaulting to 1000 [ 873.556229][T27689] netlink: 'syz.2.6052': attribute type 16 has an invalid length. [ 873.565179][T27689] netlink: 'syz.2.6052': attribute type 17 has an invalid length. [ 873.621710][T27690] IPv6: NLM_F_REPLACE set, but no existing node found! [ 874.277304][T27696] tipc: Enabling of bearer rejected, already enabled [ 874.289231][T27697] rdma_rxe: rxe_newlink: failed to add lo [ 874.305038][T27699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.467351][T27711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6056'. [ 874.480617][T27706] syzkaller0 speed is unknown, defaulting to 1000 [ 874.528390][T27706] lo speed is unknown, defaulting to 1000 [ 874.539888][T27708] syzkaller0 speed is unknown, defaulting to 1000 [ 874.550662][T27708] lo speed is unknown, defaulting to 1000 [ 875.564249][T27741] netlink: 'syz.5.6062': attribute type 1 has an invalid length. [ 875.896062][ T30] audit: type=1800 audit(1760074323.272:13): pid=27734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6059" name="memory.events" dev="tmpfs" ino=6330 res=0 errno=0 [ 875.979128][T27747] netlink: 'syz.3.6063': attribute type 10 has an invalid length. [ 876.020946][T27747] bond0: (slave 0!): Enslaving as an active interface with an up link [ 876.166545][T27752] __nla_validate_parse: 4 callbacks suppressed [ 876.166567][T27752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6064'. [ 876.369607][T27758] syzkaller0 speed is unknown, defaulting to 1000 [ 876.423021][T27758] lo speed is unknown, defaulting to 1000 [ 876.424850][T27762] tipc: Enabling of bearer rejected, already enabled [ 876.442889][T27762] batadv0: mtu less than device minimum [ 876.509914][T27763] syzkaller0 speed is unknown, defaulting to 1000 [ 876.560354][T27763] lo speed is unknown, defaulting to 1000 [ 876.715604][T27769] syzkaller0 speed is unknown, defaulting to 1000 [ 876.756543][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6070'. [ 876.798893][T27779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6070'. [ 876.837149][T27769] lo speed is unknown, defaulting to 1000 [ 877.388137][T27786] syzkaller0 speed is unknown, defaulting to 1000 [ 877.436282][T27786] lo speed is unknown, defaulting to 1000 [ 877.468389][T27789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6071'. [ 877.491311][T27790] geneve0: left allmulticast mode [ 877.528496][T27789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6071'. [ 877.542351][ T1011] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.553128][ T1011] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.589347][ T1011] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.627181][ T1011] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.945423][T27821] netlink: 'syz.3.6076': attribute type 13 has an invalid length. [ 877.969234][T27821] netlink: 'syz.3.6076': attribute type 17 has an invalid length. [ 878.190354][T27821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.391439][T27822] syzkaller0 speed is unknown, defaulting to 1000 [ 878.564925][T27822] lo speed is unknown, defaulting to 1000 [ 878.587206][T27832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6077'. [ 879.371528][T27839] tipc: Resetting bearer [ 879.459860][T27843] tipc: Enabling of bearer rejected, already enabled [ 879.694351][T27839] : renamed from bond_slave_0 [ 879.808461][ T5824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 881.002772][T27868] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6084'. [ 881.075380][T27868] veth19: entered promiscuous mode [ 881.391780][T27877] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6087'. [ 881.433524][T27877] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6087'. [ 881.995004][T27886] syzkaller0 speed is unknown, defaulting to 1000 [ 882.028360][T27891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6089'. [ 882.044941][T27893] vxcan1: entered allmulticast mode [ 882.074405][T27886] lo speed is unknown, defaulting to 1000 [ 882.099233][T27891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6089'. [ 882.250334][T27897] tipc: Enabling of bearer rejected, already enabled [ 882.274261][T27897] batadv0: mtu less than device minimum [ 883.063924][T27918] syzkaller0 speed is unknown, defaulting to 1000 [ 883.086753][T27918] lo speed is unknown, defaulting to 1000 [ 883.126221][T27922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6097'. [ 883.171452][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6097'. [ 883.928401][T27943] netlink: 'syz.5.6102': attribute type 1 has an invalid length. [ 883.995044][T27943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 884.039047][T27939] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 884.058983][T27949] tipc: Enabling of bearer rejected, already enabled [ 884.075516][T27939] vlan2: entered allmulticast mode [ 884.081099][T27939] veth1: entered allmulticast mode [ 884.087400][T27939] veth1: entered promiscuous mode [ 884.093823][T27939] veth1: left promiscuous mode [ 884.101314][T27939] bond2: (slave vlan2): making interface the new active one [ 884.109650][T27939] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 884.130020][T27939] veth1: entered promiscuous mode [ 884.135960][T27939] vlan2: entered promiscuous mode [ 884.142688][T27939] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 884.663870][T27968] syzkaller0 speed is unknown, defaulting to 1000 [ 884.674336][T27968] lo speed is unknown, defaulting to 1000 [ 885.327292][T27979] syzkaller0 speed is unknown, defaulting to 1000 [ 885.476231][T27983] syzkaller0 speed is unknown, defaulting to 1000 [ 885.485658][T27979] lo speed is unknown, defaulting to 1000 [ 885.505023][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6111'. [ 885.527834][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6111'. [ 885.643035][T27983] lo speed is unknown, defaulting to 1000 [ 886.241318][T28000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6114'. [ 886.605039][T28000] bond15: Unable to set up delay as MII monitoring is disabled [ 886.660400][T28000] bond15 (unregistering): Released all slaves [ 886.778981][T28017] tipc: Enabled bearer , priority 0 [ 886.994073][T28024] netlink: 'syz.5.6118': attribute type 15 has an invalid length. [ 887.190318][T28012] tipc: Disabling bearer [ 887.390617][T28035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6121'. [ 887.548437][T28032] syzkaller0 speed is unknown, defaulting to 1000 [ 887.562053][T28032] lo speed is unknown, defaulting to 1000 [ 888.428568][T28056] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6124'. [ 888.652202][T28055] syzkaller0 speed is unknown, defaulting to 1000 [ 888.739405][T28055] lo speed is unknown, defaulting to 1000 [ 889.019206][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6125'. [ 889.038343][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6125'. [ 889.049711][T28063] syzkaller0 speed is unknown, defaulting to 1000 [ 889.083398][T28063] lo speed is unknown, defaulting to 1000 [ 889.796748][T28080] netlink: 'syz.3.6130': attribute type 15 has an invalid length. [ 890.084605][T28092] syzkaller1: entered promiscuous mode [ 890.109576][T28092] syzkaller1: entered allmulticast mode [ 890.142641][T28094] netlink: 'syz.3.6132': attribute type 16 has an invalid length. [ 890.152842][T28094] netlink: 'syz.3.6132': attribute type 17 has an invalid length. [ 890.199178][T28096] IPv6: NLM_F_REPLACE set, but no existing node found! [ 890.259962][T28094] tipc: Resetting bearer [ 890.285483][T28098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6131'. [ 890.411722][T28095] syzkaller0 speed is unknown, defaulting to 1000 [ 890.425354][T28095] lo speed is unknown, defaulting to 1000 [ 890.494089][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.560717][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.582374][T28104] netlink: 'syz.3.6134': attribute type 1 has an invalid length. [ 890.603523][T28104] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6134'. [ 890.622451][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.646860][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.134373][T28121] syzkaller0 speed is unknown, defaulting to 1000 [ 891.160393][T28121] lo speed is unknown, defaulting to 1000 [ 891.265186][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6138'. [ 891.307077][T28128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6138'. [ 891.774922][T28145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6141'. [ 891.797501][T28151] netlink: 'syz.5.6142': attribute type 15 has an invalid length. [ 891.896393][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6141'. [ 892.052910][T28149] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 892.192397][T28167] netlink: 'syz.2.6146': attribute type 21 has an invalid length. [ 892.206477][T28149] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 892.264676][T28167] netlink: 'syz.2.6146': attribute type 21 has an invalid length. [ 892.310074][T28149] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 892.405146][T28149] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 892.593651][ T6040] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 892.624198][ T1011] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 892.648776][ T1011] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 892.700726][ T1011] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 893.590569][T28205] __nla_validate_parse: 4 callbacks suppressed [ 893.590588][T28205] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6149'. [ 893.850288][T28211] netlink: 'syz.4.6156': attribute type 15 has an invalid length. [ 893.853347][T28185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6149'. [ 893.930867][T28212] syzkaller0 speed is unknown, defaulting to 1000 [ 893.957019][T28212] lo speed is unknown, defaulting to 1000 [ 893.981479][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6155'. [ 893.999578][T28216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6155'. [ 894.055689][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6154'. [ 894.071734][T28220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6154'. [ 894.363631][T28231] tipc: Enabled bearer , priority 0 [ 894.750465][T28231] tipc: Disabling bearer [ 894.794950][T28243] netlink: 'syz.1.6162': attribute type 13 has an invalid length. [ 894.807190][T28243] netlink: 'syz.1.6162': attribute type 17 has an invalid length. [ 894.925651][T28243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.065818][T28246] syzkaller0 speed is unknown, defaulting to 1000 [ 895.143169][T28246] lo speed is unknown, defaulting to 1000 [ 895.618914][ T6040] vlan2: left promiscuous mode [ 895.769444][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6168'. [ 896.033104][T28275] syzkaller0 speed is unknown, defaulting to 1000 [ 896.080808][T28275] lo speed is unknown, defaulting to 1000 [ 896.119947][T28282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6169'. [ 896.158483][T28282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6169'. [ 896.468668][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6172'. [ 897.088607][T28311] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 898.198517][T28351] netlink: 'syz.2.6187': attribute type 13 has an invalid length. [ 898.208492][T28351] netlink: 'syz.2.6187': attribute type 17 has an invalid length. [ 898.331187][T28351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.353264][T28351] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.378535][T28351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 898.430447][T28354] syzkaller0 speed is unknown, defaulting to 1000 [ 898.710122][T28354] lo speed is unknown, defaulting to 1000 [ 898.731294][T28357] syzkaller0 speed is unknown, defaulting to 1000 [ 898.763926][T28357] lo speed is unknown, defaulting to 1000 [ 899.420956][T28392] tipc: Enabling of bearer rejected, already enabled [ 899.439529][T28392] batadv0: mtu less than device minimum [ 900.201491][T28413] tipc: Started in network mode [ 900.209062][T28413] tipc: Node identity eec08166aa41, cluster identity 4711 [ 900.221660][T28413] tipc: Enabled bearer , priority 0 [ 900.236633][T28413] batadv0: mtu less than device minimum [ 900.291824][T28413] tipc: Disabling bearer [ 900.315402][T28417] __nla_validate_parse: 3 callbacks suppressed [ 900.315422][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6208'. [ 900.532343][T28424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.592217][T28427] tipc: Enabling of bearer rejected, already enabled [ 900.604435][T28427] batadv0: mtu less than device minimum [ 900.738181][T28433] tipc: Enabled bearer , priority 0 [ 900.748746][T28433] batadv0: mtu less than device minimum [ 900.810372][T28433] tipc: Disabling bearer [ 900.839495][T28436] netlink: 'syz.4.6216': attribute type 13 has an invalid length. [ 900.889056][T28436] netlink: 'syz.4.6216': attribute type 17 has an invalid length. [ 900.956023][T28436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 901.056313][T28440] syzkaller0 speed is unknown, defaulting to 1000 [ 901.070593][T28446] netlink: 'syz.3.6218': attribute type 13 has an invalid length. [ 901.083841][T28446] netlink: 'syz.3.6218': attribute type 17 has an invalid length. [ 901.100290][T28440] lo speed is unknown, defaulting to 1000 [ 901.119487][T28445] tipc: Enabled bearer , priority 0 [ 901.212308][T28446] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.231021][T28446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 901.270005][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6220'. [ 901.471891][T28445] tipc: Disabling bearer [ 901.590183][T28447] syzkaller0 speed is unknown, defaulting to 1000 [ 901.635780][T28447] lo speed is unknown, defaulting to 1000 [ 902.305000][T28472] tipc: Enabling of bearer rejected, already enabled [ 902.323056][T28472] batadv0: mtu less than device minimum [ 902.555727][T28478] tipc: Enabling of bearer rejected, already enabled [ 902.741378][T28486] netlink: 'syz.2.6231': attribute type 15 has an invalid length. [ 903.477627][T28515] dvmrp12: entered allmulticast mode [ 903.508777][T28515] dvmrp12: left allmulticast mode [ 903.751718][T28528] tipc: Enabling of bearer rejected, already enabled [ 903.790798][T28528] batadv0: mtu less than device minimum [ 903.818924][T28526] syzkaller0 speed is unknown, defaulting to 1000 [ 903.855112][T28526] lo speed is unknown, defaulting to 1000 [ 903.881794][T28531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6245'. [ 905.402171][T28564] tipc: Enabling of bearer rejected, already enabled [ 905.988481][T28584] netlink: 'syz.3.6262': attribute type 15 has an invalid length. [ 906.609158][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6267'. [ 906.770816][T28612] x_tables: duplicate underflow at hook 1 [ 906.815212][T28615] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6272'. [ 907.057691][T28620] netlink: 'syz.3.6274': attribute type 1 has an invalid length. [ 907.102030][T28624] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 907.106133][T28622] syzkaller0 speed is unknown, defaulting to 1000 [ 907.122123][T28622] lo speed is unknown, defaulting to 1000 [ 907.215103][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6283'. [ 907.227883][T28631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6283'. [ 907.726800][T28642] syzkaller0 speed is unknown, defaulting to 1000 [ 907.756599][T28642] lo speed is unknown, defaulting to 1000 [ 907.891624][T28654] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6284'. [ 908.371219][T28671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.525167][T28642] netlink: 'syz.3.6279': attribute type 6 has an invalid length. [ 909.496688][T28700] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6299'. [ 910.026343][T28726] xt_NFQUEUE: number of total queues is 0 [ 910.065212][T28727] netlink: 'syz.1.6311': attribute type 13 has an invalid length. [ 910.088696][T28727] netlink: 'syz.1.6311': attribute type 17 has an invalid length. [ 910.112311][T28727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 910.254312][T28724] syzkaller0 speed is unknown, defaulting to 1000 [ 910.286185][T28724] lo speed is unknown, defaulting to 1000 [ 910.356475][T28739] tipc: Enabled bearer , priority 0 [ 910.357365][T28741] IPv6: Can't replace route, no match found [ 910.402714][T28739] batadv0: mtu less than device minimum [ 910.478865][T28739] tipc: Disabling bearer [ 910.983096][T28761] syzkaller0 speed is unknown, defaulting to 1000 [ 910.999887][T28761] lo speed is unknown, defaulting to 1000 [ 911.038644][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6325'. [ 911.095112][T28763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6325'. [ 912.382176][T28801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6339'. [ 912.400904][T28801] vlan3: entered promiscuous mode [ 912.406451][T28801] macvtap0: entered promiscuous mode [ 912.508748][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6342'. [ 912.611448][T28811] openvswitch: netlink: Tunnel attr 7 has unexpected len 4 expected 0 [ 912.732247][T28818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6346'. [ 913.829875][ T5824] Bluetooth: hci5: link tx timeout [ 913.836882][ T5824] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 914.101399][T28869] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 914.192983][T28875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6368'. [ 914.884934][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6376'. [ 915.835024][T28954] netlink: 'syz.4.6398': attribute type 10 has an invalid length. [ 915.892293][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 916.123899][T28969] tipc: Enabled bearer , priority 0 [ 916.139072][T28969] batadv0: mtu less than device minimum [ 916.185188][T28969] tipc: Disabling bearer [ 916.385187][T28975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6405'. [ 917.212858][T29009] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6423'. [ 917.255265][T29013] netlink: 'syz.3.6425': attribute type 15 has an invalid length. [ 917.496567][T29022] syzkaller0 speed is unknown, defaulting to 1000 [ 917.522725][T29022] lo speed is unknown, defaulting to 1000 [ 917.588833][T29029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6427'. [ 917.623111][T29029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6427'. [ 917.940720][T29041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6434'. [ 918.173340][T29053] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6437'. [ 918.475703][T29064] netlink: 'syz.4.6440': attribute type 15 has an invalid length. [ 918.724005][T29083] syzkaller0 speed is unknown, defaulting to 1000 [ 918.732583][T29083] lo speed is unknown, defaulting to 1000 [ 918.793804][T29086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6447'. [ 918.816370][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6446'. [ 918.827032][T29086] syzkaller0 speed is unknown, defaulting to 1000 [ 918.835462][T29086] lo speed is unknown, defaulting to 1000 [ 918.844993][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6446'. [ 919.191306][T29097] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6449'. [ 919.278336][T29097] netlink: 'syz.1.6449': attribute type 9 has an invalid length. [ 919.286361][T29097] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6449'. [ 919.301876][T29097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6449'. [ 920.516009][T29159] netlink: 'syz.1.6474': attribute type 10 has an invalid length. [ 921.069749][T29188] netlink: 'syz.5.6484': attribute type 2 has an invalid length. [ 921.086014][T29188] : entered promiscuous mode [ 921.383069][T29203] xt_l2tp: missing protocol rule (udp|l2tpip) [ 923.494906][T29291] netlink: 'syz.3.6519': attribute type 13 has an invalid length. [ 923.503352][T29291] netlink: 'syz.3.6519': attribute type 17 has an invalid length. [ 923.516250][T29291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 923.567354][T29289] syzkaller0 speed is unknown, defaulting to 1000 [ 923.576606][T29289] lo speed is unknown, defaulting to 1000 [ 923.734216][T29298] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 924.547504][T29325] syzkaller0 speed is unknown, defaulting to 1000 [ 924.558793][T29325] lo speed is unknown, defaulting to 1000 [ 924.683309][T29325] __nla_validate_parse: 6 callbacks suppressed [ 924.683328][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6531'. [ 924.707709][T29325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6531'. [ 925.179681][T29348] syzkaller0 speed is unknown, defaulting to 1000 [ 925.200546][T29348] lo speed is unknown, defaulting to 1000 [ 925.296846][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6537'. [ 925.316931][T29355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6537'. [ 925.909789][T29382] netlink: 7 bytes leftover after parsing attributes in process `syz.5.6547'. [ 925.935108][T29382] erspan0: entered promiscuous mode [ 926.005529][T29386] netlink: 'syz.4.6549': attribute type 4 has an invalid length. [ 926.152636][T29400] netlink: 'syz.4.6552': attribute type 13 has an invalid length. [ 926.173414][T29400] netlink: 'syz.4.6552': attribute type 17 has an invalid length. [ 926.214745][T29400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 926.296743][T29393] syzkaller0 speed is unknown, defaulting to 1000 [ 926.306446][T29393] lo speed is unknown, defaulting to 1000 [ 926.846054][T29430] syzkaller0 speed is unknown, defaulting to 1000 [ 926.855666][T29430] lo speed is unknown, defaulting to 1000 [ 926.962265][T29435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6566'. [ 926.974389][T29437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6568'. [ 926.985438][T29437] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 926.997337][T29435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6566'. [ 927.008540][T29437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.678056][T29457] tipc: Enabling of bearer rejected, already enabled [ 927.809587][T29457] batadv0: mtu less than device minimum [ 928.392071][T29491] syzkaller0 speed is unknown, defaulting to 1000 [ 928.400812][T29491] lo speed is unknown, defaulting to 1000 [ 928.444967][T29495] tipc: Enabled bearer , priority 0 [ 928.448786][T29496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6588'. [ 928.459250][T29495] batadv0: mtu less than device minimum [ 928.461637][T29496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6588'. [ 928.532321][T29495] tipc: Disabling bearer [ 928.694888][T29503] batadv0: entered promiscuous mode [ 929.106816][T29522] tipc: Enabled bearer , priority 0 [ 929.121768][T29522] batadv0: mtu less than device minimum [ 929.166252][T29522] tipc: Disabling bearer [ 930.053047][T29558] tipc: Enabling of bearer rejected, already enabled [ 930.086119][T29558] batadv0: mtu less than device minimum [ 930.384476][T29572] syzkaller1: entered promiscuous mode [ 930.396278][T29572] syzkaller1: entered allmulticast mode [ 930.458478][T29576] __nla_validate_parse: 1 callbacks suppressed [ 930.458510][T29576] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.6621'. [ 930.475332][T29576] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 930.491166][T29576] openvswitch: netlink: Message has 8454 unknown bytes. [ 930.502041][T29578] tipc: Enabling of bearer rejected, failed to enable media [ 930.591186][T29580] tipc: Enabled bearer , priority 0 [ 930.708527][T29580] tipc: Disabling bearer [ 930.945753][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6629'. [ 931.486755][T29616] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6635'. [ 931.841609][T29630] netlink: 'syz.5.6640': attribute type 13 has an invalid length. [ 931.868535][T29630] netlink: 'syz.5.6640': attribute type 17 has an invalid length. [ 931.955911][T29630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 932.072287][T29626] syzkaller0 speed is unknown, defaulting to 1000 [ 932.102526][T29626] lo speed is unknown, defaulting to 1000 [ 932.307225][T29649] tipc: Enabling of bearer rejected, already enabled [ 932.328125][T29649] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 933.784669][T29706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6667'. [ 933.798968][T29706] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6667'. [ 933.882191][T29715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6668'. [ 934.223848][T29725] syzkaller0 speed is unknown, defaulting to 1000 [ 934.241062][T29725] lo speed is unknown, defaulting to 1000 [ 934.322202][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6672'. [ 934.354357][T29733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6672'. [ 935.594449][T29790] tipc: Enabling of bearer rejected, already enabled [ 935.606140][T29790] batadv0: mtu less than device minimum [ 935.696706][T29794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6697'. [ 936.301808][T29825] tipc: Enabled bearer , priority 0 [ 936.315383][T29825] batadv0: mtu less than device minimum [ 936.382370][T29825] tipc: Disabling bearer [ 937.342656][T29864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6719'. [ 937.382009][T29863] syzkaller0 speed is unknown, defaulting to 1000 [ 937.393633][T29863] lo speed is unknown, defaulting to 1000 [ 937.440489][T29868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6718'. [ 937.473992][T29868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6718'. [ 937.770429][T29884] netlink: 'syz.5.6725': attribute type 1 has an invalid length. [ 938.557129][T29922] syzkaller1: entered promiscuous mode [ 938.563019][T29922] syzkaller1: entered allmulticast mode [ 939.104997][T29939] syzkaller0 speed is unknown, defaulting to 1000 [ 939.115476][T29939] lo speed is unknown, defaulting to 1000 [ 939.140100][T29941] syzkaller0 speed is unknown, defaulting to 1000 [ 939.160391][T29941] lo speed is unknown, defaulting to 1000 [ 939.183429][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6743'. [ 939.195931][T29945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6743'. [ 939.220964][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6744'. [ 939.252402][T29946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6744'. [ 939.876333][T29961] syzkaller0 speed is unknown, defaulting to 1000 [ 939.916961][T29961] lo speed is unknown, defaulting to 1000 [ 940.560528][T29986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6755'. [ 940.826706][T29961] netlink: 'syz.5.6748': attribute type 6 has an invalid length. [ 941.564217][T30017] "syz.4.6761" (30017) uses obsolete ecb(arc4) skcipher [ 941.750527][T30032] netlink: 'syz.4.6766': attribute type 13 has an invalid length. [ 941.773913][T30032] netlink: 'syz.4.6766': attribute type 17 has an invalid length. [ 941.878866][T30032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 941.976473][T30028] syzkaller0 speed is unknown, defaulting to 1000 [ 941.985788][T30028] lo speed is unknown, defaulting to 1000 [ 942.425399][T30054] netlink: 'syz.3.6772': attribute type 16 has an invalid length. [ 942.440420][T30054] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6772'. [ 942.889119][T30082] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6779'. [ 943.325101][T30086] syzkaller0 speed is unknown, defaulting to 1000 [ 943.451968][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6783'. [ 943.633296][T30090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6783'. [ 943.689967][T30086] lo speed is unknown, defaulting to 1000 [ 944.549891][T30121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6793'. [ 944.575346][T30121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6793'. [ 946.008620][T30171] netlink: 'syz.2.6809': attribute type 13 has an invalid length. [ 946.019463][T30171] netlink: 'syz.2.6809': attribute type 17 has an invalid length. [ 946.070283][T30176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6813'. [ 946.095687][T30171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 946.230794][T30170] syzkaller0 speed is unknown, defaulting to 1000 [ 946.251144][T30170] lo speed is unknown, defaulting to 1000 [ 946.490266][T30191] tipc: Enabled bearer , priority 0 [ 946.517434][T30191] batadv0: mtu less than device minimum [ 946.701556][T30197] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6818'. [ 946.778104][T30191] tipc: Disabling bearer [ 946.993046][T30202] syzkaller0 speed is unknown, defaulting to 1000 [ 947.010284][T30202] lo speed is unknown, defaulting to 1000 [ 947.053180][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6819'. [ 947.149857][T30204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6819'. [ 948.066471][T30237] tipc: Enabled bearer , priority 0 [ 948.578985][T30237] tipc: Disabling bearer [ 948.815476][T30274] netlink: 'syz.5.6839': attribute type 1 has an invalid length. [ 948.828637][T30274] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6839'. [ 948.848982][T30274] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.897157][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6840'. [ 948.975268][T30281] syzkaller1: entered promiscuous mode [ 948.985024][T30281] syzkaller1: entered allmulticast mode [ 949.219942][T30293] batadv0: mtu less than device minimum [ 949.304181][T30297] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6844'. [ 950.619371][T26657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.627433][T26657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.639112][ T6034] bond2: (slave wlan0): failed to get link speed/duplex [ 950.749987][T26657] bond2: (slave wlan0): failed to get link speed/duplex [ 950.767260][T30344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6863'. [ 950.804371][T30344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 950.812962][T30347] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6864'. [ 950.856197][T30344] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 950.878259][ T6034] bond2: (slave wlan0): failed to get link speed/duplex [ 950.988143][ T6034] bond2: (slave wlan0): failed to get link speed/duplex [ 951.098347][ T6034] bond2: (slave wlan0): failed to get link speed/duplex [ 951.238419][ T6034] bond2: (slave wlan0): failed to get link speed/duplex [ 951.383440][T26657] bond2: (slave wlan0): failed to get link speed/duplex [ 952.088749][T30390] tipc: Enabled bearer , priority 0 [ 952.102238][T30390] batadv0: mtu less than device minimum [ 952.133739][T30390] tipc: Disabling bearer [ 953.012227][T30430] tipc: Enabled bearer , priority 0 [ 953.089760][T30430] batadv0: mtu less than device minimum [ 953.137214][T30430] tipc: Disabling bearer [ 953.556947][T30448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6892'. [ 953.723105][T30455] syzkaller0 speed is unknown, defaulting to 1000 [ 953.733221][T30455] lo speed is unknown, defaulting to 1000 [ 953.809680][T30462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6895'. [ 953.820321][T30462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6895'. [ 954.410304][T30477] tipc: Enabled bearer , priority 0 [ 954.695390][T30477] tipc: Disabling bearer [ 954.979648][ T6040] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 955.045758][T30509] syzkaller0 speed is unknown, defaulting to 1000 [ 955.054574][T30509] lo speed is unknown, defaulting to 1000 [ 955.153002][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6907'. [ 955.172527][T30509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6907'. [ 955.889063][T30524] syzkaller0 speed is unknown, defaulting to 1000 [ 955.897422][T30534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 955.908719][T30534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6911'. [ 955.922963][T30524] lo speed is unknown, defaulting to 1000 [ 956.659951][T30563] syzkaller1: entered promiscuous mode [ 956.665689][T30563] syzkaller1: entered allmulticast mode [ 957.089014][T30585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6929'. [ 957.196829][T30590] syzkaller0 speed is unknown, defaulting to 1000 [ 957.206003][T30590] lo speed is unknown, defaulting to 1000 [ 957.301470][T30595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 957.312135][T30598] netlink: 'syz.5.6933': attribute type 2 has an invalid length. [ 957.319975][T30595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6931'. [ 957.469453][T30603] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6934'. [ 957.481288][T30603] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6934'. [ 957.497325][T30603] netlink: 'syz.5.6934': attribute type 5 has an invalid length. [ 957.509134][T30603] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6934'. [ 958.373180][T30627] netlink: 'syz.1.6940': attribute type 13 has an invalid length. [ 958.382112][T30627] netlink: 'syz.1.6940': attribute type 17 has an invalid length. [ 958.636746][T30627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 958.695311][T30628] syzkaller0 speed is unknown, defaulting to 1000 [ 958.709516][T30628] lo speed is unknown, defaulting to 1000 [ 959.852252][T30672] syzkaller0 speed is unknown, defaulting to 1000 [ 959.864836][T30672] lo speed is unknown, defaulting to 1000 [ 960.212055][T30680] bond3: (slave macvlan0): Releasing backup interface [ 960.834550][T30717] __nla_validate_parse: 2 callbacks suppressed [ 960.834567][T30717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6967'. [ 960.869854][T30717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6967'. [ 960.888761][T30713] netlink: 'syz.5.6969': attribute type 13 has an invalid length. [ 960.913272][T30713] netlink: 'syz.5.6969': attribute type 17 has an invalid length. [ 963.121600][T30713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 963.201752][T30718] syzkaller0 speed is unknown, defaulting to 1000 [ 963.228032][T30718] lo speed is unknown, defaulting to 1000 [ 963.413811][T30742] tipc: Enabling of bearer rejected, already enabled [ 963.434657][T30745] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6977'. [ 963.518745][T30742] batadv0: mtu less than device minimum [ 964.075468][T30765] tipc: Enabling of bearer rejected, already enabled [ 964.118716][T30765] batadv0: mtu less than device minimum [ 964.384367][T30776] syzkaller0 speed is unknown, defaulting to 1000 [ 964.405020][T30776] lo speed is unknown, defaulting to 1000 [ 964.467059][T30780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6987'. [ 964.506619][T30780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6987'. [ 964.829723][T30793] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6991'. [ 965.154718][T30802] tipc: Enabled bearer , priority 0 [ 965.173942][T30802] batadv0: mtu less than device minimum [ 965.234286][T30802] tipc: Disabling bearer [ 965.296633][T30809] tipc: Enabling of bearer rejected, already enabled [ 968.099354][T30837] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7006'. [ 968.117018][T30844] syzkaller0: left promiscuous mode [ 968.122981][T30844] syzkaller0: left allmulticast mode [ 969.037983][T30855] tipc: Enabling of bearer rejected, already enabled [ 969.050141][T30874] batadv0: mtu less than device minimum [ 969.953199][T30902] syzkaller0 speed is unknown, defaulting to 1000 [ 969.978309][T30902] lo speed is unknown, defaulting to 1000 [ 969.993547][T30904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7021'. [ 970.004700][T30904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7021'. [ 970.228356][T30913] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 970.527504][T30925] tipc: Enabling of bearer rejected, already enabled [ 970.576963][T30925] batadv0: mtu less than device minimum [ 971.203907][T30949] netlink: 666 bytes leftover after parsing attributes in process `syz.3.7035'. [ 971.243993][T30956] netlink: 'syz.4.7033': attribute type 4 has an invalid length. [ 971.492247][T30964] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 971.550443][T30964] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 971.662423][T30972] tipc: Enabled bearer , priority 0 [ 971.694902][T30972] batadv0: mtu less than device minimum [ 971.849556][T30981] syzkaller0 speed is unknown, defaulting to 1000 [ 971.881285][T30981] lo speed is unknown, defaulting to 1000 [ 971.926511][T30988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7045'. [ 971.958436][T30988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7045'. [ 972.343909][T30972] tipc: Disabling bearer [ 972.443157][T31007] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7050'. [ 972.848268][T31020] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7054'. [ 972.856051][T31021] netlink: 'syz.4.7053': attribute type 13 has an invalid length. [ 972.869777][T31021] netlink: 'syz.4.7053': attribute type 17 has an invalid length. [ 972.943435][T31021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 973.020137][T31016] syzkaller0 speed is unknown, defaulting to 1000 [ 973.044382][T31016] lo speed is unknown, defaulting to 1000 [ 973.448788][T31046] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7060'. [ 973.641754][T31057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7062'. [ 973.850409][T31069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7065'. [ 974.013314][T31064] syzkaller0 speed is unknown, defaulting to 1000 [ 974.086818][T31064] lo speed is unknown, defaulting to 1000 [ 975.131215][T31108] syzkaller1: entered promiscuous mode [ 975.136735][T31108] syzkaller1: entered allmulticast mode [ 976.740170][T31166] syzkaller0 speed is unknown, defaulting to 1000 [ 976.748400][T31166] lo speed is unknown, defaulting to 1000 [ 976.848005][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7094'. [ 976.857454][T31166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7094'. [ 977.612612][T31194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7104'. [ 977.627703][T31194] nbd: couldn't find a device at index 0 [ 977.635399][T31194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7104'. [ 977.684627][T31196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7105'. [ 978.772603][T31209] syzkaller0: entered promiscuous mode [ 978.800152][T31209] syzkaller0: entered allmulticast mode [ 978.826315][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7112'. [ 979.113317][T31226] syzkaller0 speed is unknown, defaulting to 1000 [ 979.147009][T31234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7119'. [ 979.158385][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7116'. [ 979.167473][T31235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7116'. [ 979.185314][T31226] lo speed is unknown, defaulting to 1000 [ 979.224326][T31240] netlink: 'syz.3.7120': attribute type 10 has an invalid length. [ 979.623700][T31260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7128'. [ 979.713374][T31266] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7128'. [ 979.980514][T31277] tipc: Enabling of bearer rejected, already enabled [ 980.026156][T31277] batadv0: mtu less than device minimum [ 980.052001][T31281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7134'. [ 980.148418][T31284] syzkaller0 speed is unknown, defaulting to 1000 [ 980.156908][T31284] lo speed is unknown, defaulting to 1000 [ 980.278860][T31284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7135'. [ 980.307593][T31284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7135'. [ 980.618286][T31303] syzkaller0 speed is unknown, defaulting to 1000 [ 980.626459][T31303] lo speed is unknown, defaulting to 1000 [ 980.712776][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7141'. [ 981.192016][T31320] syzkaller0: entered promiscuous mode [ 981.198709][T31320] syzkaller0: entered allmulticast mode [ 981.262234][T31322] tipc: Enabling of bearer rejected, already enabled [ 981.326622][T31322] batadv0: mtu less than device minimum [ 981.949850][T31344] syzkaller0 speed is unknown, defaulting to 1000 [ 981.971868][T31344] lo speed is unknown, defaulting to 1000 [ 982.506931][T31364] netlink: 'syz.2.7158': attribute type 4 has an invalid length. [ 982.595797][T31367] netlink: 'syz.2.7158': attribute type 4 has an invalid length. [ 983.582757][T31370] syzkaller0 speed is unknown, defaulting to 1000 [ 983.597782][T31370] lo speed is unknown, defaulting to 1000 [ 983.922891][T31379] netlink: 'syz.3.7165': attribute type 15 has an invalid length. [ 984.269532][T31381] syzkaller0 speed is unknown, defaulting to 1000 [ 984.308975][T31381] lo speed is unknown, defaulting to 1000 [ 984.551689][T31409] __nla_validate_parse: 7 callbacks suppressed [ 984.551711][T31409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7169'. [ 984.874896][T31420] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7173'. [ 985.078545][T31427] syzkaller0 speed is unknown, defaulting to 1000 [ 985.086900][T31427] lo speed is unknown, defaulting to 1000 [ 985.178202][T31433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7176'. [ 985.218065][T31433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7176'. [ 985.286716][T31439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7180'. [ 985.362266][T31441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7179'. [ 985.390975][T31435] syzkaller0 speed is unknown, defaulting to 1000 [ 985.415996][T31441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7179'. [ 985.428670][T31435] lo speed is unknown, defaulting to 1000 [ 985.696820][T31446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7182'. [ 986.005426][T31464] netlink: 'syz.1.7190': attribute type 1 has an invalid length. [ 986.099692][T31471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7192'. [ 986.134406][T31467] bond14: (slave veth21): Enslaving as an active interface with a down link [ 986.147499][T31464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7190'. [ 986.164751][T31464] 8021q: adding VLAN 0 to HW filter on device bond14 [ 986.383258][T31485] syzkaller0 speed is unknown, defaulting to 1000 [ 986.436419][T31485] lo speed is unknown, defaulting to 1000 [ 987.110126][T31508] tipc: Enabling of bearer rejected, failed to enable media [ 987.548642][T31518] syzkaller0 speed is unknown, defaulting to 1000 [ 987.558993][T31518] lo speed is unknown, defaulting to 1000 [ 987.874712][T31534] netlink: 'syz.5.7207': attribute type 1 has an invalid length. [ 987.974439][T31534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 988.214249][T31549] siw: device registration error -23 [ 988.230368][T31550] tipc: Enabling of bearer rejected, already enabled [ 988.241284][T31548] tipc: Enabling of bearer rejected, already enabled [ 988.463717][T31553] syzkaller0 speed is unknown, defaulting to 1000 [ 988.489033][T31553] lo speed is unknown, defaulting to 1000 [ 988.722093][T31561] tipc: Enabled bearer , priority 0 [ 988.737917][T31561] syzkaller0: entered promiscuous mode [ 988.743735][T31561] syzkaller0: entered allmulticast mode [ 988.781786][T31561] tipc: Resetting bearer [ 988.799804][T31560] tipc: Resetting bearer [ 988.824790][T31560] tipc: Disabling bearer [ 989.991678][T31583] syzkaller0 speed is unknown, defaulting to 1000 [ 990.019445][T31587] __nla_validate_parse: 10 callbacks suppressed [ 990.019463][T31587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7222'. [ 990.026610][T31583] lo speed is unknown, defaulting to 1000 [ 990.102512][T31587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7222'. [ 990.213112][T31589] tipc: Resetting bearer [ 990.235808][T31591] netlink: 'syz.1.7224': attribute type 1 has an invalid length. [ 990.483476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.492255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.500460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.508648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.516898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.606748][T31597] netlink: 'syz.4.7227': attribute type 16 has an invalid length. [ 990.619183][T31597] netlink: 'syz.4.7227': attribute type 17 has an invalid length. [ 990.671069][T31597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.087735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.183150][T31619] netlink: 'syz.5.7232': attribute type 13 has an invalid length. [ 991.202006][T31619] netlink: 'syz.5.7232': attribute type 17 has an invalid length. [ 991.265228][T31619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.350117][T31614] syzkaller0 speed is unknown, defaulting to 1000 [ 991.372555][T31614] lo speed is unknown, defaulting to 1000 [ 992.209121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.217283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.263045][T31650] vlan1: entered promiscuous mode [ 992.511122][T31656] nftables ruleset with unbound set [ 992.781298][T31666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7249'. [ 992.956630][T31672] syzkaller0 speed is unknown, defaulting to 1000 [ 992.985712][T31672] lo speed is unknown, defaulting to 1000 [ 993.865741][T31706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7257'. [ 994.261663][T31722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7264'. [ 994.868317][ T50] Bluetooth: hci5: link tx timeout [ 994.873570][ T50] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 995.838606][T31758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7273'. [ 996.036670][T31764] syzkaller0 speed is unknown, defaulting to 1000 [ 996.070916][T31764] lo speed is unknown, defaulting to 1000 [ 996.176774][ C1] net_ratelimit: 2 callbacks suppressed [ 996.176797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.190622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.198778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.311058][T31777] syzkaller0 speed is unknown, defaulting to 1000 [ 996.341944][T31777] lo speed is unknown, defaulting to 1000 [ 996.665027][T31792] vlan0: entered promiscuous mode [ 996.933969][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 996.958641][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7286'. [ 997.062707][T31813] tipc: Failed to remove unknown binding: 66,1,1/2497188818:2980525175/2980525177 [ 997.073011][T31813] tipc: Failed to remove unknown binding: 66,1,1/2497188818:2980525175/2980525177 [ 997.082084][T31815] tipc: Enabling of bearer rejected, already enabled [ 997.341077][T31825] vlan0: entered promiscuous mode [ 997.346671][T31825] vlan0: entered allmulticast mode [ 997.352942][T31826] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7290'. [ 997.403893][T31825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7291'. [ 997.504035][T31834] netlink: 'syz.3.7292': attribute type 10 has an invalid length. [ 997.566802][T31835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7292'. [ 997.720102][T31834] veth1_macvtap: entered allmulticast mode [ 997.726509][T31834] macsec0: left allmulticast mode [ 997.732088][T31834] veth1_macvtap: left allmulticast mode [ 997.761822][T31837] Bluetooth: MGMT ver 1.23 [ 998.003911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.012183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.020349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.426590][T31868] netlink: 'syz.5.7302': attribute type 13 has an invalid length. [ 998.437105][T31868] netlink: 'syz.5.7302': attribute type 17 has an invalid length. [ 998.451175][T31868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 998.506254][T31863] syzkaller0 speed is unknown, defaulting to 1000 [ 998.514733][T31863] lo speed is unknown, defaulting to 1000 [ 999.209460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.407681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.415884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.101893][T31902] team_slave_0: entered promiscuous mode [ 1000.107667][T31902] team_slave_1: entered promiscuous mode [ 1000.131059][T31902] vlan0: entered promiscuous mode [ 1000.142586][T31902] team0: entered promiscuous mode [ 1000.478399][T31911] syzkaller0 speed is unknown, defaulting to 1000 [ 1000.509534][T31916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1000.540937][T31913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1000.556064][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7315'. [ 1000.565743][T31919] bond_slave_0: entered promiscuous mode [ 1000.572045][T31919] bond_slave_1: entered promiscuous mode [ 1000.580601][T31919] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1000.585228][T31920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7315'. [ 1000.591468][T31919] bond5: (slave macvlan0): Enslaving as a backup interface with an up link [ 1000.642890][T31916] : left promiscuous mode [ 1000.650739][T31911] lo speed is unknown, defaulting to 1000 [ 1000.676893][T31913] bridge_slave_0: left allmulticast mode [ 1000.685291][T31913] bridge_slave_0: left promiscuous mode [ 1000.707144][T31913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.732322][T31913] bridge_slave_1: left allmulticast mode [ 1000.740071][T31913] bridge_slave_1: left promiscuous mode [ 1000.746145][T31913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.759738][T31913] bond0: (slave bond_slave_0): Releasing backup interface [ 1000.768695][T31913] bond_slave_0: left promiscuous mode [ 1000.785198][T31913] bond0: (slave bond_slave_1): Releasing backup interface [ 1000.806394][T31913] bond_slave_1: left promiscuous mode [ 1000.820961][T31913] team_slave_0: left promiscuous mode [ 1000.833445][T31913] team0: Port device team_slave_0 removed [ 1000.843434][T31913] team_slave_1: left promiscuous mode [ 1000.860251][T31913] team0: Port device team_slave_1 removed [ 1000.872550][T31913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.880463][T31913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.890174][T31913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.898893][T31913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.912018][ T1011] bond5: (slave macvlan0): speed changed to 0 on port 1 [ 1001.025085][T31932] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7319'. [ 1001.154354][T31935] syzkaller0 speed is unknown, defaulting to 1000 [ 1001.165073][T31935] lo speed is unknown, defaulting to 1000 [ 1001.562933][ C1] net_ratelimit: 3 callbacks suppressed [ 1001.562953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.646620][T30849] bond5: (slave macvlan0): link status definitely down, disabling slave [ 1002.213345][T31949] syzkaller0 speed is unknown, defaulting to 1000 [ 1002.235007][T31949] lo speed is unknown, defaulting to 1000 [ 1002.537644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.729778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.752264][T31981] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7331'. [ 1002.963282][T31986] syzkaller0 speed is unknown, defaulting to 1000 [ 1002.982425][T31986] lo speed is unknown, defaulting to 1000 [ 1003.034151][T31989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7334'. [ 1003.039439][T31983] syzkaller0 speed is unknown, defaulting to 1000 [ 1003.055275][T31989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7334'. [ 1003.093742][T31983] lo speed is unknown, defaulting to 1000 [ 1003.577659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.013458][T32018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7343'. [ 1004.030196][T32018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7343'. [ 1004.796883][T32029] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 1004.825077][T26234] lo speed is unknown, defaulting to 1000 [ 1004.832040][T26234] syz1: Port: 1 Link DOWN [ 1004.910102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.918384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.079097][T32045] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7351'. [ 1005.265920][T32048] syzkaller0 speed is unknown, defaulting to 1000 [ 1005.279407][T32048] lo speed is unknown, defaulting to 1000 [ 1005.300780][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1005.339794][T32051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1005.451202][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7354'. [ 1005.553127][T32055] syzkaller0 speed is unknown, defaulting to 1000 [ 1005.575859][T32055] lo speed is unknown, defaulting to 1000 [ 1005.647654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.655918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.928238][T32074] syzkaller0 speed is unknown, defaulting to 1000 [ 1006.044512][T32074] lo speed is unknown, defaulting to 1000 [ 1006.126955][T32080] tipc: Enabled bearer , priority 0 [ 1006.425142][T32092] __nla_validate_parse: 1 callbacks suppressed [ 1006.425160][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7361'. [ 1006.710542][T32092] team1: entered promiscuous mode [ 1006.743141][T32092] team1: entered allmulticast mode [ 1006.759332][T32092] 8021q: adding VLAN 0 to HW filter on device team1 [ 1006.800699][T32080] tipc: Disabling bearer [ 1006.901446][T32095] syzkaller1: entered promiscuous mode [ 1006.906975][T32095] syzkaller1: entered allmulticast mode [ 1006.952973][T32102] netlink: 666 bytes leftover after parsing attributes in process `syz.5.7363'. [ 1007.025022][T32095] syzkaller0 speed is unknown, defaulting to 1000 [ 1007.131961][T32095] lo speed is unknown, defaulting to 1000 [ 1007.441977][T32117] syzkaller0 speed is unknown, defaulting to 1000 [ 1007.453804][T32117] lo speed is unknown, defaulting to 1000 [ 1007.524289][T32122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7369'. [ 1007.535957][T32122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7369'. [ 1007.571361][T32124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7370'. [ 1007.601488][T32124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7370'. [ 1007.687256][T32120] syzkaller0 speed is unknown, defaulting to 1000 [ 1007.723266][T32120] lo speed is unknown, defaulting to 1000 [ 1007.975433][T32135] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1008.069031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.077184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.085462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.210217][T32142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1008.271862][T32142] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1009.033874][T32160] netlink: 'syz.2.7378': attribute type 1 has an invalid length. [ 1009.078043][T32160] netlink: 'syz.2.7378': attribute type 1 has an invalid length. [ 1009.085836][T32160] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7378'. [ 1009.100500][T32163] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7379'. [ 1009.483877][T32184] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1009.530774][T32184] bond14: (slave veth21): Releasing active interface [ 1009.604043][T32187] syzkaller0 speed is unknown, defaulting to 1000 [ 1009.615683][T32187] lo speed is unknown, defaulting to 1000 [ 1009.737144][T32184] netlink: 'syz.1.7384': attribute type 10 has an invalid length. [ 1009.792657][T32184] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1009.889586][ T1011] wlan1: Trigger new scan to find an IBSS to join [ 1010.194345][T32195] syzkaller0 speed is unknown, defaulting to 1000 [ 1010.204135][T32195] lo speed is unknown, defaulting to 1000 [ 1010.249935][T32204] netlink: 'syz.5.7388': attribute type 13 has an invalid length. [ 1010.277142][T32204] netlink: 'syz.5.7388': attribute type 17 has an invalid length. [ 1010.329985][T32204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1010.425378][T32201] syzkaller0 speed is unknown, defaulting to 1000 [ 1010.434780][T32201] lo speed is unknown, defaulting to 1000 [ 1010.477200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.485523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.493793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.847704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.960219][T32217] netlink: 'syz.1.7392': attribute type 1 has an invalid length. [ 1011.478541][T32239] __nla_validate_parse: 8 callbacks suppressed [ 1011.478560][T32239] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1011.565727][T32239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1012.250349][T32256] tipc: Enabling of bearer rejected, already enabled [ 1012.329783][T32256] batadv0: mtu less than device minimum [ 1012.441107][T32262] syzkaller0 speed is unknown, defaulting to 1000 [ 1012.463908][T32262] lo speed is unknown, defaulting to 1000 [ 1012.486745][T32263] netlink: 'syz.3.7399': attribute type 1 has an invalid length. [ 1012.543860][T32266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7402'. [ 1012.587035][T32266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7402'. [ 1012.595907][T32263] bond15: entered promiscuous mode [ 1012.622851][T32263] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1013.853452][T32304] tipc: Enabled bearer , priority 0 [ 1013.864660][T32304] net_ratelimit: 4 callbacks suppressed [ 1013.864677][T32304] batadv0: mtu less than device minimum [ 1013.950694][T32304] tipc: Disabling bearer [ 1014.060490][T32287] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1014.078025][T32287] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1014.637401][T32317] syzkaller0 speed is unknown, defaulting to 1000 [ 1014.649602][T32317] lo speed is unknown, defaulting to 1000 [ 1014.736125][T32321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7416'. [ 1014.766768][T32321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7416'. [ 1014.892971][T32326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7417'. [ 1015.155086][T32311] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1015.353120][T32336] syzkaller0 speed is unknown, defaulting to 1000 [ 1015.361855][T32336] lo speed is unknown, defaulting to 1000 [ 1015.456207][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7419'. [ 1015.465293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.465403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.465441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.490638][T32336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7419'. [ 1015.577365][T32344] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1015.701908][T32347] syzkaller0 speed is unknown, defaulting to 1000 [ 1015.710345][T32347] lo speed is unknown, defaulting to 1000 [ 1015.810735][T32349] syzkaller0 speed is unknown, defaulting to 1000 [ 1015.829642][T32349] lo speed is unknown, defaulting to 1000 [ 1017.024110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.032379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.087747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.785821][T32390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7431'. [ 1017.795256][T32390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7431'. [ 1017.923827][T32392] IPVS: Scheduler module ip_vs_sip not found [ 1018.096386][T32399] syzkaller0 speed is unknown, defaulting to 1000 [ 1018.108495][T32399] lo speed is unknown, defaulting to 1000 [ 1018.135697][T32402] netlink: 'syz.5.7435': attribute type 10 has an invalid length. [ 1018.147485][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7434'. [ 1018.153204][T32398] syzkaller0 speed is unknown, defaulting to 1000 [ 1018.157507][T32403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7434'. [ 1018.171773][T32402] mac80211_hwsim hwsim67 wlan1: entered promiscuous mode [ 1018.183871][T32402] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1018.216630][T32398] lo speed is unknown, defaulting to 1000 [ 1018.228352][ T6052] bond5: (slave macvlan0): link status up again after 0 ms [ 1018.267827][ T6043] bond5: (slave macvlan0): link status up again after 0 ms [ 1018.298016][ T6043] bond5: (slave macvlan0): link status up again after 0 ms [ 1018.965212][T32425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7440'. [ 1018.974630][ T55] net_ratelimit: 6 callbacks suppressed [ 1018.974652][ T55] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.078327][ T55] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.104989][T32427] tipc: Enabling of bearer rejected, already enabled [ 1019.195592][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.308391][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.433818][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.464306][T32436] tipc: Resetting bearer [ 1019.548131][ T6038] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.632869][T32442] syzkaller0 speed is unknown, defaulting to 1000 [ 1019.642081][T32442] lo speed is unknown, defaulting to 1000 [ 1019.738097][ T55] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.845198][T32444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7446'. [ 1019.854351][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1019.855657][T32444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7446'. [ 1019.988542][ T55] bond5: (slave macvlan0): failed to get link speed/duplex [ 1020.101375][T32458] netlink: 'syz.3.7450': attribute type 33 has an invalid length. [ 1020.109556][T32458] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7450'. [ 1020.122687][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1020.143106][T32458] `: renamed from team0 (while UP) [ 1020.381392][T32468] netlink: 'syz.4.7453': attribute type 1 has an invalid length. [ 1020.389837][T32468] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7453'. [ 1020.625753][T32474] syzkaller0 speed is unknown, defaulting to 1000 [ 1020.636089][T32474] lo speed is unknown, defaulting to 1000 [ 1020.702234][T32479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7455'. [ 1020.912852][T25488] lo speed is unknown, defaulting to 1000 [ 1020.931390][T25488] syz1: Port: 1 Link ACTIVE [ 1022.321335][T32516] syzkaller0 speed is unknown, defaulting to 1000 [ 1022.330166][T32516] lo speed is unknown, defaulting to 1000 [ 1023.035611][T32540] wg1: left promiscuous mode [ 1023.042997][T32540] wg1: left allmulticast mode [ 1023.051859][T32540] veth1_vlan: left allmulticast mode [ 1023.074144][T32540] bond14: left promiscuous mode [ 1023.080284][T32540] geneve5: left promiscuous mode [ 1023.086230][T32540] geneve5: left allmulticast mode [ 1023.112343][T32540] bond15: left promiscuous mode [ 1023.148737][T32540] veth5: left promiscuous mode [ 1023.154301][T32546] netlink: 'syz.5.7469': attribute type 4 has an invalid length. [ 1023.158574][T32540] bond17: left promiscuous mode [ 1023.196184][T32540] veth7: left promiscuous mode [ 1023.211723][T32549] __nla_validate_parse: 3 callbacks suppressed [ 1023.211743][T32549] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7469'. [ 1023.223736][T32540] ip6gre1: left allmulticast mode [ 1023.238051][T32549] nbd: couldn't find a device at index 0 [ 1023.253502][T32540] gtp1: left promiscuous mode [ 1023.310404][T32552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7470'. [ 1023.338215][T32552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7470'. [ 1023.349228][T32540] macvtap1: left promiscuous mode [ 1023.368481][T32540] macvtap1: left allmulticast mode [ 1023.448850][T32543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7469'. [ 1023.536226][T32547] syzkaller0 speed is unknown, defaulting to 1000 [ 1023.545668][T32547] lo speed is unknown, defaulting to 1000 [ 1024.008112][ T55] net_ratelimit: 29 callbacks suppressed [ 1024.008138][ T55] bond5: (slave macvlan0): failed to get link speed/duplex [ 1024.138198][ T55] bond5: (slave macvlan0): failed to get link speed/duplex [ 1024.309571][T30849] bond5: (slave macvlan0): failed to get link speed/duplex [ 1024.370221][T32584] netlink: 'syz.4.7474': attribute type 4 has an invalid length. [ 1024.437891][T30849] bond5: (slave macvlan0): failed to get link speed/duplex [ 1024.578940][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1024.688502][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1024.724742][T32591] netlink: 'syz.5.7478': attribute type 5 has an invalid length. [ 1024.811430][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1024.826939][T32594] netlink: 'syz.3.7479': attribute type 3 has an invalid length. [ 1024.836789][T32594] netlink: 'syz.3.7479': attribute type 1 has an invalid length. [ 1024.844653][T32594] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7479'. [ 1024.900238][T32599] netlink: 'syz.5.7481': attribute type 1 has an invalid length. [ 1024.926084][T32599] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1024.942992][T32599] bond2: (slave wlan0): Releasing active interface [ 1024.949704][T32599] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1024.967026][T32599] vlan2: entered promiscuous mode [ 1024.976908][T32599] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 1024.998208][T30849] bond5: (slave macvlan0): failed to get link speed/duplex [ 1025.059973][T32604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7482'. [ 1025.114017][T30849] bond5: (slave macvlan0): failed to get link speed/duplex [ 1025.164883][T32606] pim6reg: entered allmulticast mode [ 1025.182470][T32606] pim6reg: left allmulticast mode [ 1025.358209][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1025.648996][ T5824] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1025.895346][T32616] syzkaller0 speed is unknown, defaulting to 1000 [ 1025.962747][T32624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1025.979703][T32624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1025.993887][T32616] lo speed is unknown, defaulting to 1000 [ 1026.200154][T32626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7486'. [ 1026.554644][T32629] bond19: Unable to set up delay as MII monitoring is disabled [ 1026.636663][T32629] bond19 (unregistering): Released all slaves [ 1026.908684][T32646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7490'. [ 1027.001932][T32648] bridge0: port 1(erspan0) entered blocking state [ 1027.009571][T32648] bridge0: port 1(erspan0) entered disabled state [ 1027.016212][T32648] erspan0: entered allmulticast mode [ 1027.025859][T32648] erspan0: left allmulticast mode [ 1027.989205][T32670] netlink: 'syz.2.7496': attribute type 13 has an invalid length. [ 1027.997144][T32670] netlink: 'syz.2.7496': attribute type 17 has an invalid length. [ 1028.039755][T32670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.051389][T32670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.135869][T32669] syzkaller0 speed is unknown, defaulting to 1000 [ 1028.170024][T32669] lo speed is unknown, defaulting to 1000 [ 1028.343228][T32677] syzkaller0 speed is unknown, defaulting to 1000 [ 1028.376527][T32677] lo speed is unknown, defaulting to 1000 [ 1028.659656][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1028.671576][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1028.681495][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1028.690449][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1028.698823][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1028.869780][T32689] __nla_validate_parse: 2 callbacks suppressed [ 1028.869800][T32689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7501'. [ 1029.040659][T32686] syzkaller0 speed is unknown, defaulting to 1000 [ 1029.050632][T32686] lo speed is unknown, defaulting to 1000 [ 1029.061527][T30849] net_ratelimit: 25 callbacks suppressed [ 1029.061547][T30849] bond5: (slave macvlan0): failed to get link speed/duplex [ 1029.234550][T32696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7504'. [ 1029.278702][T32700] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7503'. [ 1029.394185][T32698] syzkaller0 speed is unknown, defaulting to 1000 [ 1029.420621][T32698] lo speed is unknown, defaulting to 1000 [ 1029.628413][T32686] chnl_net:caif_netlink_parms(): no params data found [ 1029.870554][T32686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.878934][T32686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.886480][T32686] bridge_slave_0: entered allmulticast mode [ 1029.894333][T32686] bridge_slave_0: entered promiscuous mode [ 1029.905115][T32720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7508'. [ 1029.935451][T32686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.955658][T32686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.977786][T32686] bridge_slave_1: entered allmulticast mode [ 1029.989930][T32686] bridge_slave_1: entered promiscuous mode [ 1030.061499][T32726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7508'. [ 1030.131779][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1030.166672][T32686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.204181][T32686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.294314][T32686] team0: Port device team_slave_0 added [ 1030.327360][T32686] team0: Port device team_slave_1 added [ 1030.460229][T32686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.467246][T32686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.495305][T32686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.515953][T32686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.523735][T32686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.550861][T32686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.609444][T32686] hsr_slave_0: entered promiscuous mode [ 1030.616106][T32686] hsr_slave_1: entered promiscuous mode [ 1030.623743][T32686] debugfs: 'hsr0' already exists in 'hsr' [ 1030.630108][T32686] Cannot create hsr debugfs directory [ 1030.638456][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1030.768662][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1030.775986][ T5824] Bluetooth: hci6: command tx timeout [ 1030.863658][T32686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.876262][T32749] syzkaller0 speed is unknown, defaulting to 1000 [ 1030.876637][T32686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.894100][T32749] lo speed is unknown, defaulting to 1000 [ 1030.894275][T32686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1030.912430][T32686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1031.228945][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1031.242066][T32762] netlink: zone id is out of range [ 1031.261698][T32762] netlink: zone id is out of range [ 1031.307165][T32762] netlink: zone id is out of range [ 1031.346171][T32762] netlink: zone id is out of range [ 1031.358522][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1031.374163][T32686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.392004][T32766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7516'. [ 1031.439270][T32686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.465919][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.473191][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.531326][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.538588][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.407368][T32686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.542765][ T333] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1032.858321][ T5824] Bluetooth: hci6: command 0x041b tx timeout [ 1033.410509][T32686] veth0_vlan: entered promiscuous mode [ 1033.421787][ T344] dvmrp0: left allmulticast mode [ 1033.472896][T32686] veth1_vlan: entered promiscuous mode [ 1033.493331][ T345] rdma_rxe: rxe_newlink: failed to add lo [ 1033.613467][T32686] veth0_macvtap: entered promiscuous mode [ 1033.630633][ T347] syzkaller0 speed is unknown, defaulting to 1000 [ 1033.641359][T32686] veth1_macvtap: entered promiscuous mode [ 1033.655535][ T347] lo speed is unknown, defaulting to 1000 [ 1033.686188][T32686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.746328][T32686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.806878][ T6052] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.822061][ T6052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.853395][ T6052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.885696][ T6052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.205351][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.208660][ T55] net_ratelimit: 35 callbacks suppressed [ 1034.208680][ T55] bond5: (slave macvlan0): failed to get link speed/duplex [ 1034.226738][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.363964][T30849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.372919][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1034.383555][T30849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.498600][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1034.576409][ T377] netlink: 'syz.6.7498': attribute type 13 has an invalid length. [ 1034.589636][ T377] netlink: 'syz.6.7498': attribute type 17 has an invalid length. [ 1034.762030][ T377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1034.839655][T26657] bond5: (slave macvlan0): failed to get link speed/duplex [ 1034.852644][ T381] syzkaller0 speed is unknown, defaulting to 1000 [ 1034.869334][ T381] lo speed is unknown, defaulting to 1000 [ 1034.929445][ T50] Bluetooth: hci6: command 0x041b tx timeout [ 1034.963326][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1035.089139][T26657] bond5: (slave macvlan0): failed to get link speed/duplex [ 1035.199149][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1035.256063][ T397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1035.272150][ T397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1035.328781][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1035.438258][ T1011] bond5: (slave macvlan0): failed to get link speed/duplex [ 1035.873948][ T411] netlink: 'syz.2.7548': attribute type 1 has an invalid length. [ 1036.046288][ T418] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1036.123780][ T418] bond19: (slave vxcan1): Error -95 calling set_mac_address [ 1036.302778][ T425] netlink: 'syz.2.7548': attribute type 10 has an invalid length. [ 1036.476338][ T441] netlink: 20824 bytes leftover after parsing attributes in process `syz.5.7555'. [ 1036.638202][ T1011] vlan2: left promiscuous mode [ 1036.640931][ T437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7555'. [ 1036.691468][ T437] netlink: 'syz.5.7555': attribute type 10 has an invalid length. [ 1036.723534][ T437] dummy0: entered promiscuous mode [ 1036.744452][ T437] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1036.845312][ T449] netlink: 'syz.3.7558': attribute type 83 has an invalid length. [ 1037.008422][ T50] Bluetooth: hci6: command 0x041b tx timeout [ 1037.031631][ T455] syzkaller0 speed is unknown, defaulting to 1000 [ 1037.052445][ T455] lo speed is unknown, defaulting to 1000 [ 1037.058950][ T7144] IPVS: starting estimator thread 0... [ 1037.149515][ T460] IPVS: using max 31 ests per chain, 74400 per kthread [ 1037.862102][ T493] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7567'. [ 1039.258637][T26657] net_ratelimit: 26 callbacks suppressed [ 1039.258657][T26657] bond5: (slave macvlan0): failed to get link speed/duplex [ 1039.382721][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1039.510217][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1039.628184][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1039.639348][ T542] openvswitch: netlink: IP tunnel dst address not specified [ 1039.759119][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1039.868171][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1039.978624][ T6043] bond5: (slave macvlan0): failed to get link speed/duplex [ 1040.113543][ T557] tipc: Enabled bearer , priority 0 [ 1040.128247][ T6052] bond5: (slave macvlan0): failed to get link speed/duplex [ 1040.251324][T26657] bond5: (slave macvlan0): failed to get link speed/duplex [ 1040.355325][ T557] tipc: Disabling bearer [ 1041.106342][ T606] syzkaller0 speed is unknown, defaulting to 1000 [ 1041.120141][ T606] lo speed is unknown, defaulting to 1000 [ 1041.138644][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7603'. [ 1041.163216][ T610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7603'. [ 1041.529849][ T623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.062710][ T642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1042.093803][ T636] syzkaller0 speed is unknown, defaulting to 1000 [ 1042.102449][ T636] lo speed is unknown, defaulting to 1000 [ 1042.109498][ T642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1042.724305][ T661] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7617'. [ 1043.134166][ T678] syzkaller0 speed is unknown, defaulting to 1000 [ 1043.143826][ T678] lo speed is unknown, defaulting to 1000 [ 1043.154961][ T685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 1043.181095][ T685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7624'. [ 1044.015598][ T709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7631'. [ 1044.045589][ T709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7631'. [ 1044.072123][ T712] veth0_to_bond: entered allmulticast mode [ 1044.209587][ C0] ------------[ cut here ]------------ [ 1044.215599][ C0] ODEBUG: free active (active state 0) object: ffff88803670ec90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1044.229345][ C0] WARNING: CPU: 0 PID: 696 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 1044.238886][ C0] Modules linked in: [ 1044.243241][ C0] CPU: 0 UID: 0 PID: 696 Comm: syz.4.7628 Not tainted syzkaller #0 PREEMPT(full) [ 1044.252581][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1044.262798][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1044.268738][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1044.288486][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 1044.294607][ C0] RAX: d27e42abdc1b7300 RBX: dffffc0000000000 RCX: ffff88802b23dac0 [ 1044.302842][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1044.310954][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1044.319161][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37af80 [ 1044.327333][ C0] R13: ffffffff8bc04680 R14: ffff88803670ec90 R15: ffffffff8b6ce100 [ 1044.335445][ C0] FS: 00007ff1dfe7d6c0(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 1044.344504][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.351171][ C0] CR2: 0000000000000000 CR3: 0000000043fdc000 CR4: 00000000003526f0 [ 1044.359223][ C0] Call Trace: [ 1044.362541][ C0] [ 1044.365418][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 1044.371057][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1044.376178][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1044.381410][ C0] kfree+0x112/0x440 [ 1044.385354][ C0] rose_timer_expiry+0x4cb/0x600 [ 1044.390388][ C0] call_timer_fn+0x17e/0x5f0 [ 1044.395005][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1044.400558][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1044.405267][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1044.410489][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1044.415714][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1044.420997][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1044.426521][ C0] __run_timer_base+0x61a/0x860 [ 1044.431488][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1044.436966][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1044.443330][ C0] run_timer_softirq+0xb7/0x180 [ 1044.448262][ C0] handle_softirqs+0x283/0x870 [ 1044.453262][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1044.458432][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1044.464090][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1044.469558][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1044.474192][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1044.479597][ C0] irq_exit_rcu+0x9/0x30 [ 1044.483874][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1044.489606][ C0] [ 1044.492581][ C0] [ 1044.495624][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1044.501707][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 1044.507603][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 df 3c b7 09 e8 fa b6 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1044.527313][ C0] RSP: 0018:ffffc90003b37418 EFLAGS: 00000286 [ 1044.533487][ C0] RAX: d27e42abdc1b7300 RBX: 0000000000000000 RCX: d27e42abdc1b7300 [ 1044.541553][ C0] RDX: 0000000000000000 RSI: ffffffff8d7ddcda RDI: ffffffff8bc03b60 [ 1044.549611][ C0] RBP: ffffc90003b37470 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 1044.557683][ C0] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffff88802b23dac0 [ 1044.565706][ C0] R13: dffffc0000000000 R14: ffff888030321e40 R15: ffff8880b863ab98 [ 1044.573813][ C0] ? finish_task_switch+0x266/0x950 [ 1044.579218][ C0] __schedule+0x17a0/0x4cc0 [ 1044.583781][ C0] ? irqentry_exit+0x74/0x90 [ 1044.588507][ C0] ? __lock_acquire+0xab9/0xd20 [ 1044.593404][ C0] ? __pfx___schedule+0x10/0x10 [ 1044.598750][ C0] ? schedule+0x91/0x360 [ 1044.603040][ C0] schedule+0x165/0x360 [ 1044.607352][ C0] schedule_hrtimeout_range_clock+0x1c5/0x2f0 [ 1044.613547][ C0] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 1044.620251][ C0] ? __fget_files+0x2a/0x420 [ 1044.624890][ C0] ? __fget_files+0x3a0/0x420 [ 1044.629676][ C0] ? poll_schedule_timeout+0x30/0x1b0 [ 1044.635082][ C0] poll_schedule_timeout+0xd1/0x1b0 [ 1044.640439][ C0] do_sys_poll+0x73b/0x1070 [ 1044.644995][ C0] ? do_sys_poll+0x651/0x1070 [ 1044.649792][ C0] ? __pfx_do_sys_poll+0x10/0x10 [ 1044.654775][ C0] ? futex_unqueue+0x22/0x240 [ 1044.659570][ C0] ? __pfx_pollwake+0x10/0x10 [ 1044.664472][ C0] ? futex_wait+0x285/0x360 [ 1044.669180][ C0] ? __pfx_futex_wait+0x10/0x10 [ 1044.674121][ C0] ? __pfx_do_futex+0x10/0x10 [ 1044.678906][ C0] ? set_user_sigmask+0xc7/0x1b0 [ 1044.683981][ C0] ? __pfx_set_user_sigmask+0x10/0x10 [ 1044.689492][ C0] __se_sys_ppoll+0x1ff/0x260 [ 1044.694223][ C0] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1044.699528][ C0] ? do_syscall_64+0xbe/0xfa0 [ 1044.704238][ C0] ? __x64_sys_ppoll+0x20/0xc0 [ 1044.709103][ C0] do_syscall_64+0xfa/0xfa0 [ 1044.713637][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1044.718906][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.725003][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1044.729749][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.735665][ C0] RIP: 0033:0x7ff1def8eec9 [ 1044.740139][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.759903][ C0] RSP: 002b:00007ff1dfe7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1044.768387][ C0] RAX: ffffffffffffffda RBX: 00007ff1df1e5fa0 RCX: 00007ff1def8eec9 [ 1044.776410][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000500 [ 1044.784458][ C0] RBP: 00007ff1df011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1044.792610][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.801696][ C0] R13: 00007ff1df1e6038 R14: 00007ff1df1e5fa0 R15: 00007ffd8d711ff8 [ 1044.810474][ C0] [ 1044.813536][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1044.821013][ C0] CPU: 0 UID: 0 PID: 696 Comm: syz.4.7628 Not tainted syzkaller #0 PREEMPT(full) [ 1044.830233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1044.840305][ C0] Call Trace: [ 1044.843592][ C0] [ 1044.846433][ C0] dump_stack_lvl+0x99/0x250 [ 1044.851120][ C0] ? __asan_memcpy+0x40/0x70 [ 1044.855901][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.861114][ C0] ? __pfx__printk+0x10/0x10 [ 1044.865824][ C0] vpanic+0x281/0x750 [ 1044.870084][ C0] ? __pfx__printk+0x10/0x10 [ 1044.874674][ C0] ? __pfx_vpanic+0x10/0x10 [ 1044.879188][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1044.884511][ C0] panic+0xb9/0xc0 [ 1044.888291][ C0] ? __pfx_panic+0x10/0x10 [ 1044.892719][ C0] __warn+0x31b/0x4b0 [ 1044.896692][ C0] ? debug_print_object+0x16b/0x1e0 [ 1044.902068][ C0] ? debug_print_object+0x16b/0x1e0 [ 1044.907265][ C0] report_bug+0x2be/0x4f0 [ 1044.911592][ C0] ? debug_print_object+0x16b/0x1e0 [ 1044.916809][ C0] ? debug_print_object+0x16b/0x1e0 [ 1044.922014][ C0] ? debug_print_object+0x16d/0x1e0 [ 1044.927216][ C0] handle_bug+0x84/0x160 [ 1044.931479][ C0] exc_invalid_op+0x1a/0x50 [ 1044.935991][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1044.940831][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1044.946626][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1044.966240][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 1044.972319][ C0] RAX: d27e42abdc1b7300 RBX: dffffc0000000000 RCX: ffff88802b23dac0 [ 1044.980293][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1044.988288][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1044.996254][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37af80 [ 1045.004589][ C0] R13: ffffffff8bc04680 R14: ffff88803670ec90 R15: ffffffff8b6ce100 [ 1045.012657][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1045.018314][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 1045.023879][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1045.028912][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1045.034030][ C0] kfree+0x112/0x440 [ 1045.037917][ C0] rose_timer_expiry+0x4cb/0x600 [ 1045.042883][ C0] call_timer_fn+0x17e/0x5f0 [ 1045.047555][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1045.053041][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1045.057768][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1045.062968][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.068186][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.073384][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1045.078837][ C0] __run_timer_base+0x61a/0x860 [ 1045.083687][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1045.089043][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1045.095365][ C0] run_timer_softirq+0xb7/0x180 [ 1045.100206][ C0] handle_softirqs+0x283/0x870 [ 1045.104995][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1045.109761][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1045.115041][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1045.120426][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1045.125035][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1045.130255][ C0] irq_exit_rcu+0x9/0x30 [ 1045.134486][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1045.140107][ C0] [ 1045.143076][ C0] [ 1045.145994][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1045.152015][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 1045.157829][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 df 3c b7 09 e8 fa b6 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1045.177439][ C0] RSP: 0018:ffffc90003b37418 EFLAGS: 00000286 [ 1045.183527][ C0] RAX: d27e42abdc1b7300 RBX: 0000000000000000 RCX: d27e42abdc1b7300 [ 1045.191486][ C0] RDX: 0000000000000000 RSI: ffffffff8d7ddcda RDI: ffffffff8bc03b60 [ 1045.199557][ C0] RBP: ffffc90003b37470 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 1045.207616][ C0] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffff88802b23dac0 [ 1045.215585][ C0] R13: dffffc0000000000 R14: ffff888030321e40 R15: ffff8880b863ab98 [ 1045.223576][ C0] ? finish_task_switch+0x266/0x950 [ 1045.228823][ C0] __schedule+0x17a0/0x4cc0 [ 1045.233356][ C0] ? irqentry_exit+0x74/0x90 [ 1045.238000][ C0] ? __lock_acquire+0xab9/0xd20 [ 1045.242945][ C0] ? __pfx___schedule+0x10/0x10 [ 1045.247856][ C0] ? schedule+0x91/0x360 [ 1045.252130][ C0] schedule+0x165/0x360 [ 1045.256316][ C0] schedule_hrtimeout_range_clock+0x1c5/0x2f0 [ 1045.262452][ C0] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 1045.269337][ C0] ? __fget_files+0x2a/0x420 [ 1045.273946][ C0] ? __fget_files+0x3a0/0x420 [ 1045.278628][ C0] ? poll_schedule_timeout+0x30/0x1b0 [ 1045.283997][ C0] poll_schedule_timeout+0xd1/0x1b0 [ 1045.289199][ C0] do_sys_poll+0x73b/0x1070 [ 1045.293705][ C0] ? do_sys_poll+0x651/0x1070 [ 1045.298406][ C0] ? __pfx_do_sys_poll+0x10/0x10 [ 1045.303450][ C0] ? futex_unqueue+0x22/0x240 [ 1045.308133][ C0] ? __pfx_pollwake+0x10/0x10 [ 1045.312863][ C0] ? futex_wait+0x285/0x360 [ 1045.317373][ C0] ? __pfx_futex_wait+0x10/0x10 [ 1045.322289][ C0] ? __pfx_do_futex+0x10/0x10 [ 1045.327069][ C0] ? set_user_sigmask+0xc7/0x1b0 [ 1045.332035][ C0] ? __pfx_set_user_sigmask+0x10/0x10 [ 1045.337433][ C0] __se_sys_ppoll+0x1ff/0x260 [ 1045.342122][ C0] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1045.347323][ C0] ? do_syscall_64+0xbe/0xfa0 [ 1045.352002][ C0] ? __x64_sys_ppoll+0x20/0xc0 [ 1045.356764][ C0] do_syscall_64+0xfa/0xfa0 [ 1045.361267][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.366468][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.372615][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1045.377320][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.383233][ C0] RIP: 0033:0x7ff1def8eec9 [ 1045.387663][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.407272][ C0] RSP: 002b:00007ff1dfe7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1045.415687][ C0] RAX: ffffffffffffffda RBX: 00007ff1df1e5fa0 RCX: 00007ff1def8eec9 [ 1045.423661][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000500 [ 1045.431645][ C0] RBP: 00007ff1df011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1045.439615][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.447602][ C0] R13: 00007ff1df1e6038 R14: 00007ff1df1e5fa0 R15: 00007ffd8d711ff8 [ 1045.455607][ C0] [ 1045.458889][ C0] Kernel Offset: disabled [ 1045.463245][ C0] Rebooting in 86400 seconds..