last executing test programs: 3m27.755170001s ago: executing program 0 (id=1577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)='L', 0x1, 0x40008895, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005e0001000400000000000000801c5d30"], 0x14}], 0x1}, 0x0) epoll_create(0x3ff) epoll_create1(0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r4, &(0x7f0000000100)='\x00', 0x22b400, &(0x7f0000000140)={@align=0x6, {0xfff8, 0xab, 0x2, 0x5}}, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x9}) write$cgroup_int(r5, &(0x7f0000000300), 0xffffffab) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) 3m26.969658277s ago: executing program 0 (id=1583): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x145a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8003}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) unshare(0x22020600) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r7, 0x0, 0x104) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000200)={0x200000c0, 0xfffffffa, 0x101, 0xb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35, 0x3, 0x0, 0x600}]}, 0x10) 3m26.056345972s ago: executing program 1 (id=1592): r0 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) (async) connect$packet(r0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="00008500000015e7ff0095e4ff00"/32], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 3m25.682667672s ago: executing program 2 (id=1594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f00000004c0)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x1205, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8000, 0x7, 0x9, 0x7fffffff, 0x5}) 3m25.573024058s ago: executing program 0 (id=1595): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x100}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg1\x00', @random="2b0436d23321"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="580000001000ffff25b800e402f720ff076a000063393996523a356d67bd46ff05ebcc3516c97dbf2ac855d6ce51b9cefa83e9038dce4b7ef29ca827994e57", @ANYRESOCT=r0, @ANYBLOB="4200000021204b000030000280080003000300e22a9f7b3bde11d2fcec845ded12d52256ab900d18bf7b0d8ecba125bc9b3d7076ce7a7c0b23803448bc66d981b619e258170ea8f0ee8fcfc5b5daeca6dc70b6281ec13d33530201f902cc918e34058ed0404e0f48c6920637cc4047085d7df48bee2db7eaca780ae034cb36af0a5ef980ae53f0"], 0x58}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000002) write$tun(r3, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES64=r0, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYBLOB="15a9c20e1b23f1fdf58d35ace9c581fc295510c7b6ff18b951177a3c119b152bd9707145526659f8dda8e87a46bd041f6cebc8b122bd090ae6b00b3a1f0f23b78ca6748be98a2701244264a398c001510dd0db50c309d19344f5aab6875c95abcbff61bdfec456f636824da381a702925a5302376df033f10c8957859ef610b4efa2d8f6c2c0d02cd87beea5695f2e", @ANYRESDEC=r0, @ANYRES32], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700009000000050005174d5bf530028e6c000000000000000000"], 0x24}}, 0x4000000) syz_emit_ethernet(0x6a, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa010133}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}]}]}}}}}}}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x98d0}, 0x4040000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x6e31d89d47bfef6a}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r12, @ANYBLOB="010026bd7000ffdbdf25040000002800070073797374656d5f753a6f626a6563745f723a616e6163726f6e5f657865635f743a73300014000300fc1100000000000000000000000000002a00070073797374656d5f753a6f626a6563745f723a74756e5f7461705f6465766963655f743a7330000000050001000000000014000600776c616e3000000000000000000000001400060070696d36726567310000000000000000140006006272696467655f736c6176655f310000"], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x4008800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r10) sendmsg$IEEE802154_LIST_IFACE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="030725bd7000000000001f"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) 3m25.442438416s ago: executing program 1 (id=1596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000600)=0xdfa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x44008) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008000) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) (async, rerun: 32) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) 3m25.258860969s ago: executing program 4 (id=1597): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2490f8321fe6c0684c00000010001fff00d66c002bf735cdb21716702ab21196aa5db76e9a18645cd2dc6758e204661d8b629f7e6fffb91fe03d397e16605c89fcf885c1abc109905d5286701cf7138f612bd0dfc67697ff5b4046794423881b1cac81e438d19a009baa", @ANYRES32=0x0, @ANYBLOB="0270000010000000280012800b0001006272696467650000180002800c002300028000000000000005002a000100000004002200"], 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x410) 3m25.257109057s ago: executing program 2 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x54, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x40, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d13f772e59f5aeeb4149476500"/52}}}}}}}, 0x66) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0073016900000000009500000000000000000000000000000000000000000000bbff504dd65d575f787d020bd4e77bf0271c2e1231e2e6f1109065603fb4caaadadde9334d289767b49745a06f16ff5328b4e85c6d24100bd178d05e6a06f25fc3cb64b0f2bccd16a6688686f8198d5da8d3b982922b6184b7220f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 3m24.912814098s ago: executing program 1 (id=1600): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000000901010000000000000000000000001000038008000140000001000000000014000280080001000000000021000200ac1414000800054000db0000090001"], 0x58}}, 0x48044) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r8, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) unshare(0x20400) r11 = socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0xd}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000) r12 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x40810, r12, 0x5b9bf000) bind$nfc_llcp(r7, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r7, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019001ac1e0001ac1414aa030490781206183f2500000000670000007f00000100186371ae9b1c03"], 0x0) 3m24.798412823s ago: executing program 4 (id=1601): sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="de5450ecde887b7939d58be1ca04c080eda531e71f5103483466afae924b3d83ccf34b014a9d1f55d43a6a2f6b75c4c57a42b9a720b405ecd50cf4260a78ef0c36b04e", 0x43, 0x1, &(0x7f0000000540)={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00', 0xfffffffc}, 0x1c) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c967cd9e60d00000000000003ff1cf700001e00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\n\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="44003300400000000802110000000802110000015050505050500000000001002d1a02881b06000000000000000100c2001c0000000100ce95000009720603030303030305001901070000000800cd0004"], 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x10) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r7, 0x1) (async) connect$bt_l2cap(r7, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1, &(0x7f00000032c0)=""/5, 0x5}, 0xb}], 0x2, 0x23, 0x0) (async) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)="2ea6", 0x2}], 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3m24.445034907s ago: executing program 3 (id=1603): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140000000000c000180080001006c6f67000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000040)="34868893ac1aa87b3776ed8b1a00", 0x0, 0x10000, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES16=r6, @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 3m24.23716851s ago: executing program 3 (id=1604): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="d2777ff0fbaf5eea84abfb6b6819b89bf2bdc311258c3d2beb065a85e61c68aa43d252df9b9163f35f995269ac9458cf0f04296852d860ac", 0x38) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001080)={{0xffffffffffffffff, &(0x7f0000000ec0)='{\x00', 0x42c0, &(0x7f0000000f00)={@align=0xffff, {0x3, 0x1, 0xb, 0x101}}, 0x5, &(0x7f0000000f40)={@_ha_fsid}, &(0x7f0000000f80)=0x2}, {[0x100, 0x3, 0x6, 0x2]}, 0x2, 0x99, &(0x7f0000000fc0)=""/153}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000080000b800000000009500"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d30"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000040)=[{0x0, 0xf5}, {&(0x7f0000000680)=""/180, 0xb4}], 0x2, 0x6, 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x668, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r6}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r7, 0xffffffffffffffff, 0x6, 0x1, 0x2}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000a80)={{r2, &(0x7f0000000400)='GPL\x00', 0x28240, &(0x7f0000000440)={@align=0x3, {0x4, 0x55, 0x2, 0x3ff}}, 0x7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)}, 0x4, &(0x7f0000000a00)=[{0x2, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="065d57c7170d48d424d651045c47f38e603e55ff9cb3966f503f853d31c44724360e7644153376cfbc323c0010a0c7bbdeaffd8710b6490244766066dca31516f761d6a3b1be0c26154aa4846faff59b90598fbee7d13691bbaf05c0a708d6fbd55ee5a658cb52b32ceb6741c78640764db9d30400672f7901f13c0dd53d55c37809a6ea3b76e2a19e4a4f29e34f23a60473a45574d8ab89ebd9df07a92150ad0cac3db3b624475a4aabe32e0e7fcbe800ab270f98d9ae16deca5a89f446686b12a4564bd6a0d494", 0xc8, 0x32}, {0x3, 0x76f, &(0x7f0000000700)='*\xc1[@-$\'*#+:$(^@\x00', &(0x7f0000000740)="842db7f0a66ad740d720553dbb00fdb8283319642254e4dcd1f8656dee84a61c67e1e7830090deb3c19a58b9b56f048a0fa25145c069cd3fd35e7bac17332cb70102e9627992d19a3c0cd7fe241869086a5cdf275da55c7ead9359c8f351114a2228358828e08de60e6c12be3592c34d8fb5d181663d1af4b798b405b3b0eaf5ca39ccde3fa63d23bae8994f92ec742915164004235f0cc19eab86e1baad9b62490dbec2251d38d1ee2a5c0eb8d3cddec92787a6e0fdf74e872544097f76dcc053923b8a36b4f236da7ef4b22261ff709829089a89c5decd181cea3527d2dbd07f5488e303858a2f26aa4a5a6d5ce860e33b", 0xf2, 0xc}, {0x1, 0x6, &(0x7f0000000840)='\x00', &(0x7f0000000880)="2b648dba9f031a5377c01ee78a2b3fb91443b4c38d7f425f274691237bdfcacccc9e2c32bb6a57a31831e44d1b339f82683889fef59049a1ce926e4dd37c273da9569accb1801535d3e9", 0x4a, 0x32}, {0x3, 0x4, &(0x7f0000000900)='\x00', &(0x7f0000000940)="c95058345aa5bfd45c38cf6524f5f17a55ff97ac1c31eb1115620806658df15fb3cc22ee62e98a830b7bf82139381da45dfff4e1a31b1feb00b086e833c56ac7e354ce9fc00f76383ffddb0a670e8508e08c0169a992e9d71446c67994f25f7634e10b01e9504b3d898e2b942208d5c12924c7e5dda64ca6fad7d035a71726b694df850c39365232ae4b4effdb0e4fae94cc02c1ee8f302dcf507c9ee75cd46b536889357304e7a3c50d6078e610f5872f9eb2936d09f0bc4d58cdad1c2d40", 0xbf, 0x3a}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000001066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1d, 0xa6ec, 0x800, 0xacb, 0x5000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) 3m24.112635607s ago: executing program 3 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000040)='batadv_slave_1\x00', 0x200000, &(0x7f00000000c0)={@align=0xcb, {0x4, 0x8000, 0xc436, 0x8}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000fedbdf254c00000008000300", @ANYRES32=r3, @ANYBLOB="0c0058002c000000000000000c0058002b000000000000000c00580012000000000000000c0058007b00000300000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'caif0\x00', {0x2, 0x0, @local}}) socket$rxrpc(0x21, 0x2, 0x2) close(0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007000400030004000400040006"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m22.785879296s ago: executing program 4 (id=1606): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, 0x0, 0x4c800) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) socket(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x10, 0x803, 0x0) socket(0x2a, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) close(r1) socket$tipc(0x1e, 0x5, 0x0) socket(0x2a, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m22.686092972s ago: executing program 3 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1e, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @alu={0x4, 0x1, 0xe, 0x0, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x8, 0xc, 0x8000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r0, r0, r0, r0, r0, r0], &(0x7f00000007c0)=[{0x1, 0x3, 0x4, 0xc}, {0x3, 0x3, 0xb, 0x1}, {0x4, 0x4, 0x3, 0x3}, {0x3, 0x3, 0x7, 0x7}, {0x0, 0x2, 0xb, 0x7}, {0x1, 0x3, 0xa, 0x2}], 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b3800128014000180090001006c617374000000000400028020007e060000000000006f7461000000100002800c000140000000000000008008000340000001"], 0xa4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8948, &(0x7f00000002c0)={'bond0\x00', @broadcast}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1e, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @alu={0x4, 0x1, 0xe, 0x0, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x8, 0xc, 0x8000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r0, r0, r0, r0, r0, r0], &(0x7f00000007c0)=[{0x1, 0x3, 0x4, 0xc}, {0x3, 0x3, 0xb, 0x1}, {0x4, 0x4, 0x3, 0x3}, {0x3, 0x3, 0x7, 0x7}, {0x0, 0x2, 0xb, 0x7}, {0x1, 0x3, 0xa, 0x2}], 0x10, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b3800128014000180090001006c617374000000000400028020007e060000000000006f7461000000100002800c000140000000000000008008000340000001"], 0xa4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8948, &(0x7f00000002c0)={'bond0\x00', @broadcast}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) 3m22.685437291s ago: executing program 2 (id=1608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x2}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x2}, 0x6}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106020000000000000007006235b1"], 0x1c}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r6) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x2}], 0x18}], 0x1, 0x20008054) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b00ace03dd65193dfb6c5619a3d86dd6067060000140654034d069cdb99b4dcf74b5c85cd6db0c10000", 0x2c}, {&(0x7f0000000100)="0400e4eda7f6c173b552572f13f8", 0xe}], 0x2) 3m22.684246774s ago: executing program 0 (id=1609): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40000002, 0x0) (async, rerun: 32) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000003140100000000000000000009000280"], 0x60}}, 0x20000000) (async) r6 = socket$inet(0x2, 0x6, 0x0) getsockopt(r6, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32=r11, @ANYRESOCT=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) listen(r7, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@newtfilter={0x5d8, 0x2c, 0xf3f, 0x70ad2c, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x4, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7, 0xfa}}, @filter_kind_options=@f_flow={{0x9}, {0x58c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x2}, @TCA_FLOW_ACT={0x23c, 0x9, 0x0, 0x1, [@m_vlan={0x114, 0x19, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x33a92151, 0x1, 0x0, 0x4, 0x200}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3c4}]}, {0xb4, 0x6, "2f4968a80e76ac1f5df7ef6c3485465ba7fb2c6275314619242d68177bc05ef827090165e871df937fe1445cdcb699553c37748c61f8f6915904e482d5bafad94949c05c6ef12f74faea3e93cde20ba852c0bcac7f24e8a4d5c25e1dc0c27563ab804427d74cdde154c7b412fcca99778596455d73a227d4afde0504bc1d0054c273e20e48ed7a15a164593665917621253c27a164b8b439e863dc91f801fc52272b34e219177b3142e8cc1e11b0fd44"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x124, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x20000000, 0x2, 0x7}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xa, 0x0, 0x2, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6}]}, {0x8f, 0x6, "1c4a9bb8a1e0b72517b6207743f1aac054245d1c67a1da2cbc2b4bc6600b896a356c92bd7715d024645fc3f718e24d782e4fafbe729344a4308945c654baee1bc08c62357913358c00686b73fefffc44e3b8ae260c28ec4a17b4c7aaa7c535e432f206975301b837923d70fdf4cc3ff7e5f95bf238e4660836ac9f232f1b16fd942320482a4ce336e7315c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_EMATCHES={0x30c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xf0, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="929951323575361a6cbd"]}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="e82b783f", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="66673c1f028c8071", @TCF_META_TYPE_VAR="53f9290316416f3083", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="1f", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="03236552c5", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="601d058a70d6e90917"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d11323be"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x1, 0x1}, {0x7, 0xec, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x2, 0x1}, {0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x9, 0x1}, {0x6, 0x7}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x15c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x7fff, 0x4, 0x2, 0x7, 0x1, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0xffff}, {0x9, 0x9, 0x5, 0x6, 0x8, 0x0, 0x1}}}, @TCF_EM_IPT={0xb8, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x11, 0x5, "f0015d1fb8a6036e0b10bd34bb"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x76, 0x5, "2becec0d3010d45b5f0713b5012cb4f5933929b39a0dcd0ad03ee923253701629611295fea0e38c1ac838349c75d53818e7d493d0d67e20134870943aa14314bb82d1353942648c7a34042a0e29e8ee8fa3135bf81ef33f6be82e6474df26f4c5abf7dff57e5e6505a63e4b491b114778a6c"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x7, 0x2, 0xa}, {0x1, 0x8, 0x2, "424f460cbe456335"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xe, 0x7, 0x6}, {{0x4, 0x0, 0x1, 0x1}, {0x3}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x40, 0x7, 0xb}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8001, 0x7, 0x7}, {{0x2}, {0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xf54e, 0x3, 0xf}, {0x141, 0x4, 0x8, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0xb, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="9a813df777e1e7"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7f, 0x2}, {0x40, 0x8}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x72, 0x1}, {0x8000, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x0, 0x2}, {0xb52, 0x3}}}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="dc107a01924830bcde", @TCF_META_TYPE_VAR="2ef173a638018962fe", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='[', @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x1}, {0x800, 0x18}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x2f7}, {0xf, 0x0, 0xc3d6, 0xbfba}}}, @TCF_EM_IPT={0x18, 0x3, 0x0, 0x0, {{0xbf, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1ff}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb59}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MASK={0x8, 0x6, 0x8000}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xfff2}}]}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) splice(r7, 0x0, r4, 0x0, 0xffffffffffffff00, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@canfd={{0x2}, 0x16, 0x2, 0x0, 0x0, "92a4883372f6632556a6b68da1aaeffa7b55af2ee640861c92a78cda69612182a805540d81b0fcce100e3170050b4b501f11cc0f78db10e2c75693ab90ec3b35"}, 0x48}}, 0xd209f6d814827b17) socket(0x1d, 0x1, 0x5) 3m22.310222128s ago: executing program 1 (id=1610): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 3m22.308748726s ago: executing program 3 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2f, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r6, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x1418, 0x1, 0x20000000, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x6}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xffffff05}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m22.082356745s ago: executing program 4 (id=1612): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000800000000500030005000000100004006c6f616462616c616e6365ce"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) 3m21.885719916s ago: executing program 0 (id=1613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'vlan0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x7, 0x8, "4b4ddee73eca4a44"}}) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2, r0}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'gre0\x00', r4, 0x8, 0x700, 0x9, 0x8, {{0xf, 0x4, 0x2, 0x10, 0x3c, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x1f, 0x97, [@multicast1, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xc2, [@rand_addr=0x64010101]}, @end]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000080)={0x18, 'vlan0\x00', {0x6}, 0xff}) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\ty', 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}]}}}}}, 0x0) (async) recvmmsg(r5, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {0x0}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}, 0x800}], 0x4, 0x20000, 0x0) r8 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x60) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000600)={0x1, 0xff}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="611578000000000061133c0000000000bfa000000000000007000000ee0000052d03010000000000250500000000000069163e0000000000bf07200000000000350507000fff0720670500003f000000140300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190de000000003cc3aa39642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a01000000a1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6e15e1417058ba11671295d20ba906d4331ce87573d2472371ac6369744a569da6c90f0e8ecba9ee68be2691922073d177bdffd5f1aa96173286f7d66f6c3e6b5eff01ed91681bbddcc66544b42a3d68c129798f2ae62b0fc690c9df12ef0dee69bdbe446322a18155e6662c13708d73aa49f1d8fd2cf86754065bfed808d0c76caaca1e0fc8a6baf185b58a1541911688f4a055bc49ed73c5bfb556c7c7bb62a8594e0aef56a374f4bf910a60d9cd751c3a14f94a3be70dbc9211d754ca9023e1efeef81c775664c3f348d000000000000000000000076d4b94b8d33469cdf2aba94c6e871fcd122f18409ee01620e45ab01c4af441373c1e6234b631ea4bb41e344"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3m21.885000185s ago: executing program 2 (id=1614): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x1, 0x3, 0x3a, &(0x7f0000000000)=""/58}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r1, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000ffff14000780080008000000008908000640000001250500010006000000050005000200000005000400000000000900020073797a31000000000d0003006c6973743a73657400000000640fc329566fad3a069a4ad6e1791b0a74f9889bd181c59dab8672d5ff43ef67592225773c20c5882ab6f99ca81f2d1808de41c8cfa74c696cb6f2ae5c5c7fa3d3cb89460c6972736c3df5304c3a1db27212301134e57bef3f14d32101eb3ffb5e5a0a3113a93444a501ca3a9674e33d3853f3c33fe03d8b140952548505d1534d3bf238a17dec88ebf29e146792421e0cb99b1a5e933871750a2afb339594769f49ff7c60602c7f0b972ddadadbf0fbed68aabbee9db0f7830d6826123cfc6ed0e8acf3b044a1ae2449ae9a6126060c4986debde0e13453a9fa979ff50735cb789d4f932105ad39d173e97faa5c57733e526b54a6d6675628969fcc60e2305c0c4ff32d04f26725d8ef95189ed4cb316fb8944503"], 0x5c}}, 0x0) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f00000000c0)) connect$pptp(r2, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) close(0x3) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf251000000008000100", @ANYRES32, @ANYBLOB="050010"], 0x44}, 0x1, 0x0, 0x0, 0x8854}, 0x24000040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000120003042dbd7000fbdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="40600000800000000a0001000000000000000000140003006272696467653000"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) 3m21.827091749s ago: executing program 1 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0x8}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8000800, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xfff, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x8, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x0, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x1, 0x65e1, 0x10002, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x8, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x6, 0x7de, 0x1, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3fd, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x5, 0x1, 0xb8, 0x6, 0x0, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0x7fff, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0x11, 0x81982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x2d17, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xbff, 0x9, 0x9, 0x2, 0x8, 0x10001, 0x295, 0x6, 0x8f, 0x1, 0xb7e, 0x10005, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0x800000ec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x80000001, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefbe, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8005, 0xd9, 0x1, 0x8, 0xfff, 0x421, 0x3ff, 0x2, 0x7fffffff, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0xffffffff, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x64048880) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) (async) bind$bt_l2cap(r4, &(0x7f0000000580)={0x1f, 0x0, @any, 0x1}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0}}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x1000009}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff0004"], 0x28}, 0x400c885) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)}, 0x4008040) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80400, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80040000000000000000000000002c97e32e47960f9b5f1818ee5d", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x4040) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x11, 0xfe, 0x0, 0x4, 0xc, 0x0, 0x8, 0x0, 0xfd, 0x9}, 0xe) shutdown(r7, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffffff88, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r8, 0xad}, &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000540)=0x10) 3m21.565646038s ago: executing program 4 (id=1616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) 3m21.325770623s ago: executing program 3 (id=1617): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161442, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = epoll_create1(0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="55ff", 0x2}], 0x1}}], 0x1, 0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) 3m21.324228205s ago: executing program 2 (id=1618): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback}}}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m18.93994811s ago: executing program 1 (id=1619): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xea, 0x6}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f0000004600)={&(0x7f0000004440)=[&(0x7f0000000040)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x60000001}}, &(0x7f00000000c0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000000140)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000500)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x7, 0x3}, {0x5b40, 0x6}, {0x52, 0x800}, {0x200, 0x9}, {0x10000}, {0x7fffffff, 0xce}, {0x2016, 0x6c38bd}, {0xb, 0xf48}, {0xfffffffffffffff7, 0x8}, {0x4}, {0x6}, {0x7fff, 0x1}, {0x600000000000000, 0x4}, {0x0, 0x10000}, {0x9, 0x10}, {0x40, 0x10000}, {0x4, 0x6}, {0x7, 0x8}, {}, {0xf, 0x1}, {0x7, 0x8}, {0x8, 0x4}, {0xc3a9, 0x3ff}, {0x101, 0x7fffffffffffffff}, {0xced1, 0x3}, {0xdb}, {0x7, 0x1}, {0x3, 0xfca9}, {0x4, 0x5}, {0x7fffffffffffffff, 0x200}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0xffffffff}, {0x2, 0x3}, {0x7, 0x746}, {0x4, 0x1}, {0x7, 0x2}, {0xa2, 0x4}, {0xc, 0xfffffffffffffffe}, {0x8000, 0xa2}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0x2b}, {0x7fff, 0x1}, {0x80000001, 0xa}, {0x7, 0xff01}, {0x0, 0x1}, {0x5, 0x5}, {0xfffffffffffffff7, 0x2}, {0xb, 0x7ff}, {0x100000000, 0xfffffffffffffffb}, {0x5, 0x8}, {0x3, 0x3}, {0xffffffff, 0x57d7}, {0x6, 0x2}, {0x836b, 0x90}, {0xf, 0x8}, {0x40fa5163, 0x9}, {0x7, 0x8000}, {0x7, 0x1}, {0xff}, {0xffffffff}, {0x5, 0x8}, {0x7, 0x6}, {0xff, 0x101}, {0x82, 0xffffffffffffffff}, {0x7, 0x9}, {0x3, 0xffffffffffffff72}, {0xb7, 0xffffffffffffffc0}, {0x5, 0x80000000}, {0x0, 0x7}, {0x8, 0x1}, {0x7fffffff, 0x8}, {0x0, 0x7}, {0x9000000000, 0xb}, {0x2, 0x1}, {0x0, 0x49f4c417}, {0x5, 0x1ff}, {0x7d8, 0x2}, {0x101, 0xd3}, {0x2000000000000000, 0xcc}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x8, 0x2}, {0x1}, {0x3ff, 0x1200000000}, {0x711, 0x9}, {0x79, 0x9d}, {0x10001, 0xc}, {0x40, 0xf3b6}, {0x8000000000000001, 0xd}, {0x8, 0xd297}, {0x9, 0xb8}, {0x6, 0x2}, {0x400, 0x4}, {0x1, 0x2}, {0x400, 0x3}, {0xffffffffffffffff, 0xeb2e}, {0xfffffffffffffff8, 0xffff}, {0x10, 0x3}, {0x1, 0x59}, {0x3, 0x1}, {0xffff, 0xa0e6}, {0xc, 0x8000000000000001}, {0xc000000000000000}, {0x1, 0x6}, {0x1, 0xc8af}, {0x7, 0x1a15}, {0x4, 0x11}, {0x7, 0x6}, {0x1, 0xfffffffffffffffd}, {0x101, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x200}, {0x62, 0x3}, {0x32}, {0x1, 0x7}, {0x8, 0x5}, {0x100, 0x10000}, {0xbeff, 0x100}, {0x377, 0x4}, {0x1000, 0x9}, {0x0, 0x84}, {0x5, 0x80}, {0x1, 0x8000000000000001}, {0x6, 0x4cb0}, {0x8, 0x5}, {0x3, 0x1}, {0x4, 0xfffffffffffffff8}, {0xa73, 0x7fffffffffffffff}, {0x0, 0x100000000}, {0x2e, 0x3}, {0x3, 0x6eed98d6}, {0x3, 0x40}, {0x2, 0x9d5e}, {0x4, 0xbf}, {0x8000000000000001, 0xf}, {0x9a9a, 0x5}, {0x55, 0x491c}, {0x10000, 0x400}, {0x6, 0x3}, {0x2, 0x4}, {0x4}, {0xe2e, 0x1000}, {0x8, 0x3}, {0x80000000, 0x4}, {0xe, 0x92}, {0x5, 0x100}, {0xb00, 0x6}, {0x0, 0x5}, {0x80000001, 0xe}, {0x101, 0x7}, {0x7ff}, {0xe008, 0x5}, {0x6}, {0x9, 0xff}, {0x92e, 0x8}, {0xfff0000, 0x9}, {0x8, 0x401}, {0x5, 0x2}, {0x45, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x9, 0xffffffffffff9e35}, {0x7, 0x5}, {0x8000000000000001, 0xf7}, {0xb6bb, 0x7}, {0xa, 0x40}, {0x5, 0x3}, {0x8, 0x66}, {0xd4, 0x3}, {0x7, 0xd08c}, {0x5, 0x7}, {0x1, 0x81}, {0x4, 0x9}, {0xbc, 0x8}, {0x1, 0x8}, {0x402a}, {0x4, 0x1}, {0xf31, 0xbe4}, {0x7fffffffffffffff, 0x2}, {0x55f1, 0x2}, {0x0, 0x6}, {0x8000000000000001, 0x7fffffffffffffff}, {0x76dd, 0x7}, {0x3, 0x2}, {0x0, 0x100}, {0x8, 0x4}, {0x8, 0xf9a7}, {0xe7, 0x2}, {0x100000001, 0xe}, {0x0, 0x8}, {0x6}, {0x1, 0xc7}, {0x4}, {0xd, 0x5}, {0x5, 0xffffffffffffffff}, {0xc5c, 0x7}, {0x9c5, 0x96}, {0x7, 0x609}, {0x7fffffff}, {0x401, 0xf4ea}, {0x4001, 0xd}, {0x4, 0xc886}, {0x3, 0x8}, {0x1, 0x5}, {0xffffffffffff8001, 0x1}, {0x9, 0x5}, {0x4, 0xfb1}, {0x8}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x6}, {0x6, 0xb}, {0xfffffffffffffff7, 0x3ff}, {0x4}, {0x100000001, 0x2}, {0x100000000, 0x2}, {0x7375, 0x6b7}, {0x9, 0x400}, {0x1c8, 0x5}, {0x7d84}, {0xa, 0xbc7}, {0x40, 0x4}, {0x1, 0x2}, {0x7, 0x90}, {0x6, 0x9}, {0x9, 0x7f}, {0x2, 0x2}, {0x7fffffffffffffff, 0x100000000}, {0x7, 0xac}, {0x9, 0x4}, {0x2, 0x40}, {0x9, 0x4}, {0x9f6, 0x4}, {0x5, 0x4}, {0x9, 0x8}, {0x400, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0xa9bc, 0x9}, {0x401, 0xe}, {0x9}, {0x139, 0x6}, {0x1400000000000, 0x401}, {0x4, 0x5}, {0x2, 0x8}, {0x42, 0x5}, {0x5, 0xffff}, {0x2a0747c, 0x6}, {0x2, 0x1}]}, &(0x7f0000001540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000001580)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x8}, &(0x7f00000016c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000001700)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000001740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000001780)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x1, 0x4}, {0x9, 0x8}, {0xc16, 0x6a8e}, {0x1, 0xfffffe0000000000}, {0x9, 0x2}, {0xe, 0xffff}, {0x10, 0x3}, {0x4, 0x6}, {0x4, 0x7}, {0x2e0c, 0x7}, {0x0, 0x8000000000000001}, {0x0, 0x8}, {0x3, 0x8fd0}, {0xb, 0x3}, {0x9, 0xff}, {0xfffffffffffffeff, 0x8}, {0x4b8, 0x2}, {0x6, 0x10001}, {0x4, 0x7}, {0xffff, 0x629}, {0x5, 0x2}, {0x6, 0xffff}, {0x80000000000, 0x100000001}, {0x2, 0xfffffffffffffffe}, {0x0, 0x8}, {0x5, 0x7fffffff}, {0x6, 0x5}, {0x3, 0xc}, {0x800, 0x54d}, {0x0, 0xffffffffffffff34}, {0x1, 0x7}, {0xb66, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x7c, 0x2}, {0x7, 0xa10}, {0x1, 0x7}, {0x200, 0x7}, {0x0, 0x200040000}, {0xa, 0x8001}, {0x3, 0x8}, {0x10001, 0x7}, {0x7, 0x5}, {0xf3dd, 0x100000000}, {0x2, 0x80}, {0x4, 0x1}, {0x4, 0x8}, {0x13d, 0x3}, {0x81, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x3, 0x30}, {0x4}, {0x40, 0x8}, {0x5430a7d1, 0x7}, {0x2, 0xffffffffffffffff}, {0x7, 0x2480}, {0x7fff, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x7fffffff, 0x8}, {0xffffffff, 0x7}, {0x5, 0xfffffffffffffffd}, {0x1, 0x3633}, {0x7f, 0x6}, {0x7, 0x5}, {0x100, 0x8000000000000001}, {0x7, 0x3}, {0x46b8000, 0x100000001}, {0x2, 0x3}, {0x3, 0xfffffffffffffffa}, {0x4, 0x3}, {0x7, 0x7fffffff}, {0xfff, 0x200}, {0x80000000, 0x4}, {0x3, 0x81f}, {0xffffffffffffffff, 0x4}, {0x4, 0x6}, {0xae, 0x8000000000000000}, {0x8153}, {0x5, 0x3}, {0x16, 0x40}, {0x3, 0x66537163}, {0x2, 0x4}, {0xa5eb, 0x1}, {0x5, 0x8}, {0x8000000000000000, 0x7fff}, {0x4, 0x5e0f}, {0xccb8, 0x8001}, {0x9, 0x1}, {0x8, 0x3f3b}, {0x0, 0xfffffffffffffff9}, {0xfffffffffffffbff, 0xb68}, {0x9f43, 0x9}, {0xfde4, 0xd}, {0x8}, {0x1d, 0x6}, {0x8, 0x1}, {0x5, 0x5}, {0x1, 0x200}, {0x7, 0x4d60}, {0x48, 0x51}, {0x5, 0xc85}, {0xda, 0x5}, {0x3, 0x2}, {0x6}, {0x5, 0x25ae}, {0x100, 0x2}, {0xde, 0x9}, {0x0, 0x81}, {0x1ff, 0x2}, {0x0, 0xf}, {0x1, 0x2}, {0x1, 0x6}, {0xffffffffffffffff, 0x1}, {0x4, 0x5}, {0x5, 0x5}, {0x9, 0x8}, {0x25e, 0x7fffffff}, {0x9, 0xffffffff80000001}, {0xf, 0x5}, {0xad0f, 0xfffffffffffffff8}, {0x10000, 0x70}, {0x6, 0x9}, {0xdb2, 0x100}, {0xffffffffffffac71, 0xc7}, {0x7, 0x2}, {0x7, 0xfffffffffffffffe}, {0xfffffffffffffffa, 0x4}, {0x8, 0x5}, {0xe190, 0x9}, {0x75, 0x4}, {0x7, 0x8}, {0x3, 0xfffffffffffffffd}, {0x8, 0x6}, {0x2c8747ca}, {0x2, 0x2}, {0x6, 0x1000}, {0x3, 0x6}, {0x7fff, 0x5}, {0x6, 0x2}, {0x8, 0x6}, {0xfffffffffffffff9, 0x4}, {0x745a622d, 0x1}, {0x75e2, 0x6}, {0xc4, 0x3ff}, {0x7a7, 0x3}, {0x25, 0x8}, {0xc, 0x10000}, {0x634d, 0x8001}, {0x936, 0x2}, {0x1, 0x3ff}, {0x0, 0x8000}, {0x40, 0x8}, {0x0, 0x1}, {0x1b, 0x6}, {0x2, 0x2e127d12}, {0x0, 0x6c}, {0x4, 0xcc30000}, {0x7, 0x6}, {0xd, 0x19a4}, {0x6, 0x9}, {0x8, 0xfff}, {0x0, 0x401}, {0x9, 0x6}, {0x7, 0x8001}, {0x6, 0x101}, {0x9, 0x870}, {0x9, 0x8}, {0x1, 0x40}, {0x0, 0x14}, {0x2, 0x7}, {0x40, 0x1}, {0x6b2, 0xa8}, {0xfffffffffffffff7, 0x3}, {0x59a, 0x4}, {0xfffffffffffffffa, 0x200}, {0x7, 0xd2}, {0xffffffffffffffff, 0x469e}, {0x9, 0x7}, {0x6, 0xb87}, {0x9, 0x86}, {0x5}, {0x9, 0x1}, {0x4, 0x5}, {0x6, 0x8000000000000000}, {0x4, 0x440}, {0x12f9, 0xffffffffffffffff}, {0x992, 0xffffffffffffffff}, {0x8, 0x4}, {0x0, 0x3}, {0xd, 0xfffffffffffffffc}, {0x5, 0x7}, {0x8, 0x6c9}, {0x7fffffff, 0xd3ce}, {0xd, 0x7}, {0x6, 0xfffffffffffffe76}, {0xfffffffffffffffb, 0xf27}, {0x7, 0x7fffffffffffffff}, {0xffff, 0x1}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x7f}, {0x451a000, 0x2791}, {0x9, 0x2}, {0xfff, 0xb}, {0x5e7, 0x6}, {0x1e, 0x9}, {0x848, 0x4c}, {0x9, 0xab3f}, {0x7, 0x400}, {0xa00000, 0x4}, {0x2, 0xb}, {0x5, 0x9}, {0x3, 0x7fff}, {0x7, 0x6}, {0x10000000000, 0x101}, {0xc, 0x80000000}, {0xba7, 0xc5}, {0x48e5, 0x9324}, {0x1, 0xfffffffffffffff2}, {0x97cc, 0x5}, {0x0, 0x955}, {0x800, 0xfffffffffffffffe}, {0x7, 0x1ff}, {0x0, 0x9}, {0x2, 0x7b}, {0xf2, 0x9}, {0x5, 0x5}, {0x3ff, 0xa811}, {0x1000, 0x3}, {0x6366034, 0x1}, {0xffffffff80000001, 0xbd}, {0x6, 0x4}, {0x7fffffffffffffff, 0x7}, {0xc41, 0xf9}, {0x5, 0x8000000000000001}, {0x1, 0x7}, {0x2, 0xfffffffffffffff8}, {0x1, 0x10001}, {0x3, 0x8}, {0xb, 0x29b}, {0x1a18, 0x60}, {0x2, 0x7}, {0x2000000000000000, 0x1}, {0x6, 0x5}, {0x8000, 0x21da}, {0x3, 0x9}, {0x3, 0xcb}, {0xffff}, {0x3, 0x2}, {0x70f, 0x50}, {0x7, 0x7fff}, {0x6, 0x80000001}, {0x7, 0x3}]}, &(0x7f00000027c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002800)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000002840)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002880)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x3}, &(0x7f00000029c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002a00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002a40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002a80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002ac0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000002b00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000002b40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002b80)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000002c00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002c40)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002c80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000002cc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000002d00)=@uuid={{0x4f32494e, 0x5, 0x10, 0xe0000001}}, &(0x7f0000002d40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000002d80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000002dc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000002e00)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000002e40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x80000000, 0xdc}, {0xc43, 0x527a}, {0x3, 0x10}, {0x5, 0x3}, {0x8001, 0x7fff}, {0x9, 0xb}, {0x2, 0x1}, {0x7, 0x400}, {0x7, 0xfff}, {0xe, 0xc5a}, {0x875a}, {0x5, 0x4}, {0x3, 0xebe}, {0x2, 0xffffffffaaa96ae1}, {0x7, 0x1d43}, {0x1, 0x8}, {0x10, 0xffffffffffffffff}, {0x5, 0x228}, {0x80000000, 0x4}, {0xf, 0x100000000}, {0x7, 0x8}, {0x0, 0xf}, {0x4, 0x2}, {0x9, 0xe}, {0x0, 0x1}, {0x80000000}, {0x0, 0x8000000000000001}, {0x0, 0x2}, {0x8b}, {0x9, 0xdc1}, {0x24, 0xa}, {0xcf, 0xbee}, {0x3, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x6, 0x4}, {0x8, 0x780}, {0xffff, 0x8}, {0xff, 0x8}, {0x0, 0x3}, {0x8, 0x4}, {0x9, 0x7bd5}, {0x3}, {0x8000, 0x79}, {0x3, 0x6}, {0x1, 0x40}, {0x9, 0x8}, {0x8, 0xfffffffffffffffa}, {0x0, 0x100000000}, {0x2, 0x5}, {0x1, 0x2}, {0x5}, {0x7}, {0x7f}, {0x80000001, 0x7}, {0xffffffffffff0d9d, 0x62}, {0x3}, {0x7, 0x2}, {0x80, 0xf}, {0xc, 0x606dcb48}, {0x4}, {0x202, 0x100}, {0x5, 0x4}, {0x10, 0xc4}, {0x8, 0xfffffffffffffff7}, {0x1, 0xc}, {0x7, 0x1}, {0x5, 0x6}, {0x30, 0x3f800000000000}, {0xfffffffffffffffc, 0x3}, {0x7, 0x9}, {0xd, 0x7fffffff}, {0x4, 0xfff}, {0x1000, 0x3}, {0x5, 0x7}, {0x4, 0x5}, {0x9, 0x200}, {0x3079, 0xffffffffffffffff}, {0x9, 0x8000000000000000}, {0xe, 0x8}, {0x2, 0x400}, {0x3, 0xc}, {0xa2, 0x1}, {0x2, 0x6}, {0x8, 0xffffffffffffff00}, {0x4, 0xb}, {0xc, 0x7}, {0x5bc, 0x2}, {0x7, 0x3760}, {0x7, 0x354}, {0x3, 0x2201a768}, {0x8ee9, 0x7}, {0x9, 0x7ff}, {0xffffffffffff1e95, 0x8}, {0x8, 0x6}, {0x9, 0x4}, {0x1ff, 0xf}, {0x1, 0x6}, {0x4, 0x8000}, {0x3, 0x2}, {0x6, 0xe21}, {0x7e, 0x3}, {0x0, 0x4}, {0xffffffffe19f363f, 0x3}, {0xc442, 0x101}, {0x5, 0xa9d5}, {0x8, 0xc89e}, {0x6, 0xfffffffffffffffa}, {0x1, 0xfffffffffffffb62}, {0xda, 0x4c}, {0xa9b, 0xfffffffffffffff9}, {0x100000001, 0x6}, {0x101, 0x3}, {0x800, 0x8000}, {0x6ae6f291, 0x2}, {0x6, 0x7}, {0x3, 0x7fffffff}, {0x8315, 0x5}, {0x5, 0x2}, {0xb8, 0x4}, {0x1, 0x5}, {0x7ff, 0x6}, {0xad70000000000000, 0xffffffffffffffff}, {0x2, 0x9}, {0x1, 0x9}, {0xd, 0xed98}, {0x200, 0x1ff}, {0x1, 0x5}, {0x25f, 0x2}, {0x6, 0x100}, {0xb68, 0x77a}, {0x8}, {0xdb, 0x7}, {0x0, 0x5}, {0x3, 0x7}, {0xff, 0x1000}, {0x0, 0x5}, {0x5, 0x34}, {0xfff, 0x9}, {0x4, 0x4}, {0x0, 0x8}, {0x8000000000000000, 0x21}, {0x7fffffff, 0x3}, {0xa, 0x101}, {0x8, 0x3}, {0x8000000000000000, 0x4}, {0x8, 0xd}, {0x38e1, 0x4}, {0x4, 0x3}, {0x9, 0x7}, {0x72}, {0x0, 0x4}, {0x8, 0xc}, {0x979e, 0x6}, {0x200}, {0x4, 0x7}, {0x8, 0xb}, {0x665f, 0x7f}, {0x10, 0x7f}, {0x2, 0xbc19}, {0x8, 0x6}, {0xfffffffffffffff9, 0x7ff}, {0x0, 0xa30b}, {0x9, 0x9}, {0x22, 0x8}, {0xb, 0x4}, {0x8000, 0x9}, {0x6, 0xfffffffffffffc00}, {0x1, 0x3ff}, {0x5, 0x9}, {0x5, 0x6}, {0x1, 0x6}, {0x5, 0x7fffffff}, {0x14, 0x5}, {0xfffffffffffffff8, 0x200}, {0x9, 0x3da922aa000000}, {0x3, 0xffffffffffffffff}, {0x6, 0x7}, {0x0, 0xc}, {0x8, 0x7}, {0x71, 0x39a}, {0x1, 0x1}, {0xd, 0x2}, {0x81, 0x10}, {0x8000000000000000, 0x6}, {0x401}, {0x6000000000000000, 0x7}, {0x1, 0x7}, {0x7, 0xfff}, {0x811, 0xfb2}, {0x4, 0x8000000000000000}, {0x8, 0x5}, {0x4, 0x2a}, {0x1, 0x35}, {0x3, 0x1000}, {0x2}, {0x8}, {0xa, 0x843a}, {0x100000001}, {0x25, 0x7}, {0x3, 0x2}, {0x9, 0x768}, {0x1, 0x5}, {0x1ff}, {0x74, 0xe7}, {0x100000000, 0x8}, {0x9, 0x3}, {0x0, 0x4}, {0x8, 0x5c}, {0x8, 0xfffffffffffff30d}, {0x1fc80, 0x200}, {0x8}, {0x7944, 0x80000000}, {0xa2e2, 0x7}, {0x6e2c, 0x45e}, {0x2, 0x7}, {0x0, 0x3}, {0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x40, 0x5}, {0x7, 0x3}, {0xc, 0x100}, {0x637, 0x2}, {0xc, 0x1}, {0x4, 0xfd}, {0xffffffff, 0x6}, {0x21, 0x9}, {0x0, 0x5}, {0xffffffff, 0x5}, {0x80, 0x6}, {0x4, 0x80000000}, {0x8, 0x100000000}, {0xe, 0xea02}, {0x5, 0x7fffffff}, {0x6}, {0x9, 0x3}, {0x7, 0x5}, {0x2c, 0x2}, {0x7, 0x9}, {0xe, 0xfffffffffffffffc}, {0x5a, 0xb6a}, {0x9, 0xeff3}, {0x1, 0xb}, {0x2}, {0x6, 0x36}, {0x7, 0xff0000000}, {0x9, 0xfff}, {0xb, 0x8}, {0xffffffff, 0x3}, {0x7, 0x1}, {0x9, 0x2}, {0x206, 0x6}, {0x6, 0x5}, {0x0, 0x33}]}, &(0x7f0000003e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000003ec0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000003f40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000003f80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003fc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000004000)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000004040)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000004080)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f00000040c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0xd}, &(0x7f0000004200)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000004240)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000004280)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f00000042c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000004300)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000004340)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000004380)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f00000043c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000004400)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}], 0x32}) socket$netlink(0x10, 0x3, 0x12) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000000000)='\a', 0xffc0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) recvmsg(r5, &(0x7f0000001fc0)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000001f00)=[{0x0}, {0x0}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x3}, 0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000240)=0x84) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000280)={r6, 0x8001}, &(0x7f00000002c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112100000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 3m16.695499098s ago: executing program 0 (id=1620): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000239443c4d1a1e1125fae059d386c5e4f00001800ffff00a3440000000000"], 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r5, 0x0, 0x0, 0x4a71, 0x5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x0, 0x4, 0x2, 0x1, 0x101, 0x7fff, 0x89b, 0x98, 0x8, 0x5, 0x8, 0x49, 0x4, 0x5, 0x4, 0x5f1b6026, 0x9, 0x200, 0x3, 0xb3f, 0x1, 0x0, 0x73a, 0x1d, 0x9, 0x1, 0x4, 0x6, 0x0, 0x81, 0x4, 0x1000, 0x2, 0x8ffc, 0x83, 0x81, 0x8, 0x1, 0xe9, 0x9, 0x7, 0x2, 0xfffffff8, 0x6, 0x2, 0x23, 0x9, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffa, 0xc, 0x10001, 0x5, 0x10001, 0x4, 0xfe7, 0x5, 0xa0, 0x0, 0x9, 0x3, 0x16db, 0xfffffff1, 0x812, 0x7, 0x2, 0x800, 0x10000, 0x5, 0x7, 0x8, 0x1bd, 0x9, 0x7, 0x3, 0x8, 0x6, 0x9, 0x3, 0x40000, 0x200, 0x0, 0xd4, 0xa1a, 0x588, 0x7, 0x6, 0xe, 0x9, 0x2, 0x6, 0x8000b44, 0x0, 0x4, 0x800, 0x5, 0x9, 0x8, 0x0, 0x2, 0x9, 0x407c, 0x6, 0x3, 0x5, 0x0, 0x7, 0x7, 0xb, 0xd8, 0x3, 0x4, 0x5, 0x1, 0x80000001, 0x7ff, 0xe, 0x5, 0x80, 0x0, 0x9, 0xe94c, 0x5, 0x6, 0x1, 0x8000, 0x3, 0xbf2d, 0x1ff, 0xfffffffa, 0x101, 0x5, 0x2, 0x10, 0x7fffffff, 0x1, 0x1, 0x1, 0x3, 0x47, 0x22, 0x96e4, 0x7, 0xf0, 0x8000, 0x6, 0x80000001, 0x4, 0x3, 0x5, 0x0, 0x5, 0xd2, 0x2, 0x0, 0x1000, 0xe, 0x8, 0xfd, 0x3, 0xa155, 0x9, 0x4, 0x4, 0x4920, 0x5, 0x10001, 0x2, 0x5, 0xc, 0x9, 0x2, 0x101, 0xb094, 0x4, 0x7, 0x6, 0x80000000, 0x81, 0x1, 0x0, 0x200, 0x2, 0x428, 0x2000, 0x0, 0x81, 0x0, 0x80000001, 0x3, 0x400, 0x1, 0x6, 0x6, 0xff, 0x5, 0x6, 0x0, 0x5, 0x8f76, 0x4, 0x8000, 0xffffff01, 0xf, 0x0, 0x6, 0xf, 0x3, 0x9, 0x8000, 0x7, 0xffffffff, 0x7ff, 0x2d, 0x1, 0x2, 0x9, 0x3, 0xffffffff, 0x400, 0xfffffffc, 0x6, 0x1, 0x8, 0x7, 0x80000000, 0x7, 0x0, 0xc, 0x0, 0x9, 0x22fbb94a, 0x1, 0x0, 0x5, 0x3, 0x7, 0x0, 0xfffffde3, 0x4, 0x6, 0xd75, 0x1, 0xbc, 0xa, 0x2, 0x8, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7fff, 0x7, 0x9, 0x3, 0x5, 0x775, 0xffff, 0x800, 0x1, 0x2a28, 0x0, 0x6, 0x8, 0x3f, 0x10000, 0xc, 0x1, 0x7, 0x8, 0xe, 0x8, 0x3, 0x1, 0x7c, 0x1, 0x8000, 0x0, 0xeb3, 0x7, 0x81, 0x7, 0x3cb, 0x3, 0xb, 0x6, 0x1, 0x7, 0x8, 0xe8, 0x6, 0xffff, 0x9, 0x0, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2, 0x3, 0xdd0f, 0xfa, 0x1, 0x77e, 0x5, 0x100, 0xffffffff, 0x101, 0x5, 0x0, 0x8, 0x6b, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3, 0x5, 0x4, 0x7f, 0x2, 0x9, 0x4, 0x8000, 0x2, 0x80000001, 0xfffffffa, 0x4, 0x7, 0x3, 0x9, 0x1, 0x9, 0x8000, 0x9, 0x58, 0x2, 0x18fb, 0x2, 0x75f, 0x7, 0x3000000, 0x1, 0x16, 0x4, 0x66cf, 0x0, 0x3, 0x7, 0xff, 0x9, 0x101, 0x1, 0x7, 0xb5f, 0x2, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x1ff, 0x2, 0x10000, 0x8000, 0x8, 0xfff, 0x5256f118, 0x2, 0x1000, 0x8f35, 0x0, 0x7fffffff, 0x492, 0x8, 0x6, 0x4, 0x9, 0x1, 0x6, 0x1, 0xffff, 0xf, 0x38e, 0x5, 0x0, 0x6, 0x7, 0x256056b8, 0x9, 0x1, 0x80, 0x2, 0x7fffffff, 0x6, 0x1, 0x1c9, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x179, 0x7f, 0x4, 0x4, 0x4, 0x100000, 0xfffffffb, 0xe, 0x81, 0xf25, 0x8001, 0x0, 0x5, 0x5, 0xfffff41b, 0x2, 0x7ff, 0xffff, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x9e, 0x7, 0x200, 0x6, 0x2, 0x9, 0x8, 0x4, 0x3, 0x401a, 0x3ff, 0x3, 0x7, 0xd, 0x6, 0x1000, 0x9, 0x4, 0xf, 0xffffffff, 0x65, 0x1, 0x8, 0xa, 0x6, 0x8, 0x8001, 0x75, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x7ff, 0xea, 0x8001, 0x2, 0x101, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x4, 0x2, 0x3, 0x2, 0x6, 0x7, 0x3, 0x1, 0x0, 0x2, 0x471a, 0x80, 0x40, 0x9e9, 0x80000000, 0x7, 0x3, 0x6, 0xfffffff9, 0x464, 0x5, 0x9, 0xa2a, 0x0, 0x80000001, 0x0, 0x6, 0x10000, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7c2d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x5, 0x9, {0x5, 0x2, 0x1, 0x3, 0x3, 0xd446}, {0x9, 0x1, 0x2, 0x2, 0x8, 0x9}, 0x1, 0x6, 0xffffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x0, 0x4, 0x2, 0x1, 0x101, 0x7fff, 0x89b, 0x98, 0x8, 0x5, 0x8, 0x49, 0x4, 0x5, 0x4, 0x5f1b6026, 0x9, 0x200, 0x3, 0xb3f, 0x1, 0x0, 0x73a, 0x1d, 0x9, 0x1, 0x4, 0x6, 0x0, 0x81, 0x4, 0x1000, 0x2, 0x8ffc, 0x83, 0x81, 0x8, 0x1, 0xe9, 0x9, 0x7, 0x2, 0xfffffff8, 0x6, 0x2, 0x23, 0x9, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffa, 0xc, 0x10001, 0x5, 0x10001, 0x4, 0xfe7, 0x5, 0xa0, 0x0, 0x9, 0x3, 0x16db, 0xfffffff1, 0x812, 0x7, 0x2, 0x800, 0x10000, 0x5, 0x7, 0x8, 0x1bd, 0x9, 0x7, 0x3, 0x8, 0x6, 0x9, 0x3, 0x40000, 0x200, 0x0, 0xd4, 0xa1a, 0x588, 0x7, 0x6, 0xe, 0x9, 0x2, 0x6, 0x8000b44, 0x0, 0x4, 0x800, 0x5, 0x9, 0x8, 0x0, 0x2, 0x9, 0x407c, 0x6, 0x3, 0x5, 0x0, 0x7, 0x7, 0xb, 0xd8, 0x3, 0x4, 0x5, 0x1, 0x80000001, 0x7ff, 0xe, 0x5, 0x80, 0x0, 0x9, 0xe94c, 0x5, 0x6, 0x1, 0x8000, 0x3, 0xbf2d, 0x1ff, 0xfffffffa, 0x101, 0x5, 0x2, 0x10, 0x7fffffff, 0x1, 0x1, 0x1, 0x3, 0x47, 0x22, 0x96e4, 0x7, 0xf0, 0x8000, 0x6, 0x80000001, 0x4, 0x3, 0x5, 0x0, 0x5, 0xd2, 0x2, 0x0, 0x1000, 0xe, 0x8, 0xfd, 0x3, 0xa155, 0x9, 0x4, 0x4, 0x4920, 0x5, 0x10001, 0x2, 0x5, 0xc, 0x9, 0x2, 0x101, 0xb094, 0x4, 0x7, 0x6, 0x80000000, 0x81, 0x1, 0x0, 0x200, 0x2, 0x428, 0x2000, 0x0, 0x81, 0x0, 0x80000001, 0x3, 0x400, 0x1, 0x6, 0x6, 0xff, 0x5, 0x6, 0x0, 0x5, 0x8f76, 0x4, 0x8000, 0xffffff01, 0xf, 0x0, 0x6, 0xf, 0x3, 0x9, 0x8000, 0x7, 0xffffffff, 0x7ff, 0x2d, 0x1, 0x2, 0x9, 0x3, 0xffffffff, 0x400, 0xfffffffc, 0x6, 0x1, 0x8, 0x7, 0x80000000, 0x7, 0x0, 0xc, 0x0, 0x9, 0x22fbb94a, 0x1, 0x0, 0x5, 0x3, 0x7, 0x0, 0xfffffde3, 0x4, 0x6, 0xd75, 0x1, 0xbc, 0xa, 0x2, 0x8, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7fff, 0x7, 0x9, 0x3, 0x5, 0x775, 0xffff, 0x800, 0x1, 0x2a28, 0x0, 0x6, 0x8, 0x3f, 0x10000, 0xc, 0x1, 0x7, 0x8, 0xe, 0x8, 0x3, 0x1, 0x7c, 0x1, 0x8000, 0x0, 0xeb3, 0x7, 0x81, 0x7, 0x3cb, 0x3, 0xb, 0x6, 0x1, 0x7, 0x8, 0xe8, 0x6, 0xffff, 0x9, 0x0, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2, 0x3, 0xdd0f, 0xfa, 0x1, 0x77e, 0x5, 0x100, 0xffffffff, 0x101, 0x5, 0x0, 0x8, 0x6b, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3, 0x5, 0x4, 0x7f, 0x2, 0x9, 0x4, 0x8000, 0x2, 0x80000001, 0xfffffffa, 0x4, 0x7, 0x3, 0x9, 0x1, 0x9, 0x8000, 0x9, 0x58, 0x2, 0x18fb, 0x2, 0x75f, 0x7, 0x3000000, 0x1, 0x16, 0x4, 0x66cf, 0x0, 0x3, 0x7, 0xff, 0x9, 0x101, 0x1, 0x7, 0xb5f, 0x2, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x1ff, 0x2, 0x10000, 0x8000, 0x8, 0xfff, 0x5256f118, 0x2, 0x1000, 0x8f35, 0x0, 0x7fffffff, 0x492, 0x8, 0x6, 0x4, 0x9, 0x1, 0x6, 0x1, 0xffff, 0xf, 0x38e, 0x5, 0x0, 0x6, 0x7, 0x256056b8, 0x9, 0x1, 0x80, 0x2, 0x7fffffff, 0x6, 0x1, 0x1c9, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x179, 0x7f, 0x4, 0x4, 0x4, 0x100000, 0xfffffffb, 0xe, 0x81, 0xf25, 0x8001, 0x0, 0x5, 0x5, 0xfffff41b, 0x2, 0x7ff, 0xffff, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x9e, 0x7, 0x200, 0x6, 0x2, 0x9, 0x8, 0x4, 0x3, 0x401a, 0x3ff, 0x3, 0x7, 0xd, 0x6, 0x1000, 0x9, 0x4, 0xf, 0xffffffff, 0x65, 0x1, 0x8, 0xa, 0x6, 0x8, 0x8001, 0x75, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x7ff, 0xea, 0x8001, 0x2, 0x101, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x4, 0x2, 0x3, 0x2, 0x6, 0x7, 0x3, 0x1, 0x0, 0x2, 0x471a, 0x80, 0x40, 0x9e9, 0x80000000, 0x7, 0x3, 0x6, 0xfffffff9, 0x464, 0x5, 0x9, 0xa2a, 0x0, 0x80000001, 0x0, 0x6, 0x10000, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7c2d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x5, 0x9, {0x5, 0x2, 0x1, 0x3, 0x3, 0xd446}, {0x9, 0x1, 0x2, 0x2, 0x8, 0x9}, 0x1, 0x6, 0xffffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3m10.600417444s ago: executing program 4 (id=1621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @random="fd137b07daa7", @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast1, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x1}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m8.159079391s ago: executing program 2 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r1], 0x54}}, 0x0) 3m3.073381513s ago: executing program 32 (id=1617): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161442, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = epoll_create1(0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="55ff", 0x2}], 0x1}}], 0x1, 0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) 2m56.981500087s ago: executing program 33 (id=1620): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000239443c4d1a1e1125fae059d386c5e4f00001800ffff00a3440000000000"], 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r5, 0x0, 0x0, 0x4a71, 0x5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x0, 0x4, 0x2, 0x1, 0x101, 0x7fff, 0x89b, 0x98, 0x8, 0x5, 0x8, 0x49, 0x4, 0x5, 0x4, 0x5f1b6026, 0x9, 0x200, 0x3, 0xb3f, 0x1, 0x0, 0x73a, 0x1d, 0x9, 0x1, 0x4, 0x6, 0x0, 0x81, 0x4, 0x1000, 0x2, 0x8ffc, 0x83, 0x81, 0x8, 0x1, 0xe9, 0x9, 0x7, 0x2, 0xfffffff8, 0x6, 0x2, 0x23, 0x9, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffa, 0xc, 0x10001, 0x5, 0x10001, 0x4, 0xfe7, 0x5, 0xa0, 0x0, 0x9, 0x3, 0x16db, 0xfffffff1, 0x812, 0x7, 0x2, 0x800, 0x10000, 0x5, 0x7, 0x8, 0x1bd, 0x9, 0x7, 0x3, 0x8, 0x6, 0x9, 0x3, 0x40000, 0x200, 0x0, 0xd4, 0xa1a, 0x588, 0x7, 0x6, 0xe, 0x9, 0x2, 0x6, 0x8000b44, 0x0, 0x4, 0x800, 0x5, 0x9, 0x8, 0x0, 0x2, 0x9, 0x407c, 0x6, 0x3, 0x5, 0x0, 0x7, 0x7, 0xb, 0xd8, 0x3, 0x4, 0x5, 0x1, 0x80000001, 0x7ff, 0xe, 0x5, 0x80, 0x0, 0x9, 0xe94c, 0x5, 0x6, 0x1, 0x8000, 0x3, 0xbf2d, 0x1ff, 0xfffffffa, 0x101, 0x5, 0x2, 0x10, 0x7fffffff, 0x1, 0x1, 0x1, 0x3, 0x47, 0x22, 0x96e4, 0x7, 0xf0, 0x8000, 0x6, 0x80000001, 0x4, 0x3, 0x5, 0x0, 0x5, 0xd2, 0x2, 0x0, 0x1000, 0xe, 0x8, 0xfd, 0x3, 0xa155, 0x9, 0x4, 0x4, 0x4920, 0x5, 0x10001, 0x2, 0x5, 0xc, 0x9, 0x2, 0x101, 0xb094, 0x4, 0x7, 0x6, 0x80000000, 0x81, 0x1, 0x0, 0x200, 0x2, 0x428, 0x2000, 0x0, 0x81, 0x0, 0x80000001, 0x3, 0x400, 0x1, 0x6, 0x6, 0xff, 0x5, 0x6, 0x0, 0x5, 0x8f76, 0x4, 0x8000, 0xffffff01, 0xf, 0x0, 0x6, 0xf, 0x3, 0x9, 0x8000, 0x7, 0xffffffff, 0x7ff, 0x2d, 0x1, 0x2, 0x9, 0x3, 0xffffffff, 0x400, 0xfffffffc, 0x6, 0x1, 0x8, 0x7, 0x80000000, 0x7, 0x0, 0xc, 0x0, 0x9, 0x22fbb94a, 0x1, 0x0, 0x5, 0x3, 0x7, 0x0, 0xfffffde3, 0x4, 0x6, 0xd75, 0x1, 0xbc, 0xa, 0x2, 0x8, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7fff, 0x7, 0x9, 0x3, 0x5, 0x775, 0xffff, 0x800, 0x1, 0x2a28, 0x0, 0x6, 0x8, 0x3f, 0x10000, 0xc, 0x1, 0x7, 0x8, 0xe, 0x8, 0x3, 0x1, 0x7c, 0x1, 0x8000, 0x0, 0xeb3, 0x7, 0x81, 0x7, 0x3cb, 0x3, 0xb, 0x6, 0x1, 0x7, 0x8, 0xe8, 0x6, 0xffff, 0x9, 0x0, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2, 0x3, 0xdd0f, 0xfa, 0x1, 0x77e, 0x5, 0x100, 0xffffffff, 0x101, 0x5, 0x0, 0x8, 0x6b, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3, 0x5, 0x4, 0x7f, 0x2, 0x9, 0x4, 0x8000, 0x2, 0x80000001, 0xfffffffa, 0x4, 0x7, 0x3, 0x9, 0x1, 0x9, 0x8000, 0x9, 0x58, 0x2, 0x18fb, 0x2, 0x75f, 0x7, 0x3000000, 0x1, 0x16, 0x4, 0x66cf, 0x0, 0x3, 0x7, 0xff, 0x9, 0x101, 0x1, 0x7, 0xb5f, 0x2, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x1ff, 0x2, 0x10000, 0x8000, 0x8, 0xfff, 0x5256f118, 0x2, 0x1000, 0x8f35, 0x0, 0x7fffffff, 0x492, 0x8, 0x6, 0x4, 0x9, 0x1, 0x6, 0x1, 0xffff, 0xf, 0x38e, 0x5, 0x0, 0x6, 0x7, 0x256056b8, 0x9, 0x1, 0x80, 0x2, 0x7fffffff, 0x6, 0x1, 0x1c9, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x179, 0x7f, 0x4, 0x4, 0x4, 0x100000, 0xfffffffb, 0xe, 0x81, 0xf25, 0x8001, 0x0, 0x5, 0x5, 0xfffff41b, 0x2, 0x7ff, 0xffff, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x9e, 0x7, 0x200, 0x6, 0x2, 0x9, 0x8, 0x4, 0x3, 0x401a, 0x3ff, 0x3, 0x7, 0xd, 0x6, 0x1000, 0x9, 0x4, 0xf, 0xffffffff, 0x65, 0x1, 0x8, 0xa, 0x6, 0x8, 0x8001, 0x75, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x7ff, 0xea, 0x8001, 0x2, 0x101, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x4, 0x2, 0x3, 0x2, 0x6, 0x7, 0x3, 0x1, 0x0, 0x2, 0x471a, 0x80, 0x40, 0x9e9, 0x80000000, 0x7, 0x3, 0x6, 0xfffffff9, 0x464, 0x5, 0x9, 0xa2a, 0x0, 0x80000001, 0x0, 0x6, 0x10000, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7c2d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x5, 0x9, {0x5, 0x2, 0x1, 0x3, 0x3, 0xd446}, {0x9, 0x1, 0x2, 0x2, 0x8, 0x9}, 0x1, 0x6, 0xffffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x0, 0x4, 0x2, 0x1, 0x101, 0x7fff, 0x89b, 0x98, 0x8, 0x5, 0x8, 0x49, 0x4, 0x5, 0x4, 0x5f1b6026, 0x9, 0x200, 0x3, 0xb3f, 0x1, 0x0, 0x73a, 0x1d, 0x9, 0x1, 0x4, 0x6, 0x0, 0x81, 0x4, 0x1000, 0x2, 0x8ffc, 0x83, 0x81, 0x8, 0x1, 0xe9, 0x9, 0x7, 0x2, 0xfffffff8, 0x6, 0x2, 0x23, 0x9, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffa, 0xc, 0x10001, 0x5, 0x10001, 0x4, 0xfe7, 0x5, 0xa0, 0x0, 0x9, 0x3, 0x16db, 0xfffffff1, 0x812, 0x7, 0x2, 0x800, 0x10000, 0x5, 0x7, 0x8, 0x1bd, 0x9, 0x7, 0x3, 0x8, 0x6, 0x9, 0x3, 0x40000, 0x200, 0x0, 0xd4, 0xa1a, 0x588, 0x7, 0x6, 0xe, 0x9, 0x2, 0x6, 0x8000b44, 0x0, 0x4, 0x800, 0x5, 0x9, 0x8, 0x0, 0x2, 0x9, 0x407c, 0x6, 0x3, 0x5, 0x0, 0x7, 0x7, 0xb, 0xd8, 0x3, 0x4, 0x5, 0x1, 0x80000001, 0x7ff, 0xe, 0x5, 0x80, 0x0, 0x9, 0xe94c, 0x5, 0x6, 0x1, 0x8000, 0x3, 0xbf2d, 0x1ff, 0xfffffffa, 0x101, 0x5, 0x2, 0x10, 0x7fffffff, 0x1, 0x1, 0x1, 0x3, 0x47, 0x22, 0x96e4, 0x7, 0xf0, 0x8000, 0x6, 0x80000001, 0x4, 0x3, 0x5, 0x0, 0x5, 0xd2, 0x2, 0x0, 0x1000, 0xe, 0x8, 0xfd, 0x3, 0xa155, 0x9, 0x4, 0x4, 0x4920, 0x5, 0x10001, 0x2, 0x5, 0xc, 0x9, 0x2, 0x101, 0xb094, 0x4, 0x7, 0x6, 0x80000000, 0x81, 0x1, 0x0, 0x200, 0x2, 0x428, 0x2000, 0x0, 0x81, 0x0, 0x80000001, 0x3, 0x400, 0x1, 0x6, 0x6, 0xff, 0x5, 0x6, 0x0, 0x5, 0x8f76, 0x4, 0x8000, 0xffffff01, 0xf, 0x0, 0x6, 0xf, 0x3, 0x9, 0x8000, 0x7, 0xffffffff, 0x7ff, 0x2d, 0x1, 0x2, 0x9, 0x3, 0xffffffff, 0x400, 0xfffffffc, 0x6, 0x1, 0x8, 0x7, 0x80000000, 0x7, 0x0, 0xc, 0x0, 0x9, 0x22fbb94a, 0x1, 0x0, 0x5, 0x3, 0x7, 0x0, 0xfffffde3, 0x4, 0x6, 0xd75, 0x1, 0xbc, 0xa, 0x2, 0x8, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7fff, 0x7, 0x9, 0x3, 0x5, 0x775, 0xffff, 0x800, 0x1, 0x2a28, 0x0, 0x6, 0x8, 0x3f, 0x10000, 0xc, 0x1, 0x7, 0x8, 0xe, 0x8, 0x3, 0x1, 0x7c, 0x1, 0x8000, 0x0, 0xeb3, 0x7, 0x81, 0x7, 0x3cb, 0x3, 0xb, 0x6, 0x1, 0x7, 0x8, 0xe8, 0x6, 0xffff, 0x9, 0x0, 0x6, 0x7f, 0xfffffff7, 0x8, 0x2, 0x3, 0xdd0f, 0xfa, 0x1, 0x77e, 0x5, 0x100, 0xffffffff, 0x101, 0x5, 0x0, 0x8, 0x6b, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3, 0x5, 0x4, 0x7f, 0x2, 0x9, 0x4, 0x8000, 0x2, 0x80000001, 0xfffffffa, 0x4, 0x7, 0x3, 0x9, 0x1, 0x9, 0x8000, 0x9, 0x58, 0x2, 0x18fb, 0x2, 0x75f, 0x7, 0x3000000, 0x1, 0x16, 0x4, 0x66cf, 0x0, 0x3, 0x7, 0xff, 0x9, 0x101, 0x1, 0x7, 0xb5f, 0x2, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x1ff, 0x2, 0x10000, 0x8000, 0x8, 0xfff, 0x5256f118, 0x2, 0x1000, 0x8f35, 0x0, 0x7fffffff, 0x492, 0x8, 0x6, 0x4, 0x9, 0x1, 0x6, 0x1, 0xffff, 0xf, 0x38e, 0x5, 0x0, 0x6, 0x7, 0x256056b8, 0x9, 0x1, 0x80, 0x2, 0x7fffffff, 0x6, 0x1, 0x1c9, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x179, 0x7f, 0x4, 0x4, 0x4, 0x100000, 0xfffffffb, 0xe, 0x81, 0xf25, 0x8001, 0x0, 0x5, 0x5, 0xfffff41b, 0x2, 0x7ff, 0xffff, 0x8, 0x7, 0x9, 0xffffffff, 0x10001, 0x9e, 0x7, 0x200, 0x6, 0x2, 0x9, 0x8, 0x4, 0x3, 0x401a, 0x3ff, 0x3, 0x7, 0xd, 0x6, 0x1000, 0x9, 0x4, 0xf, 0xffffffff, 0x65, 0x1, 0x8, 0xa, 0x6, 0x8, 0x8001, 0x75, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x7ff, 0xea, 0x8001, 0x2, 0x101, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x4, 0x2, 0x3, 0x2, 0x6, 0x7, 0x3, 0x1, 0x0, 0x2, 0x471a, 0x80, 0x40, 0x9e9, 0x80000000, 0x7, 0x3, 0x6, 0xfffffff9, 0x464, 0x5, 0x9, 0xa2a, 0x0, 0x80000001, 0x0, 0x6, 0x10000, 0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3ff, 0x5, 0x2, 0x7c2d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x5, 0x9, {0x5, 0x2, 0x1, 0x3, 0x3, 0xd446}, {0x9, 0x1, 0x2, 0x2, 0x8, 0x9}, 0x1, 0x6, 0xffffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m53.768560352s ago: executing program 34 (id=1619): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xea, 0x6}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f0000004600)={&(0x7f0000004440)=[&(0x7f0000000040)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x60000001}}, &(0x7f00000000c0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000000140)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000500)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x7, 0x3}, {0x5b40, 0x6}, {0x52, 0x800}, {0x200, 0x9}, {0x10000}, {0x7fffffff, 0xce}, {0x2016, 0x6c38bd}, {0xb, 0xf48}, {0xfffffffffffffff7, 0x8}, {0x4}, {0x6}, {0x7fff, 0x1}, {0x600000000000000, 0x4}, {0x0, 0x10000}, {0x9, 0x10}, {0x40, 0x10000}, {0x4, 0x6}, {0x7, 0x8}, {}, {0xf, 0x1}, {0x7, 0x8}, {0x8, 0x4}, {0xc3a9, 0x3ff}, {0x101, 0x7fffffffffffffff}, {0xced1, 0x3}, {0xdb}, {0x7, 0x1}, {0x3, 0xfca9}, {0x4, 0x5}, {0x7fffffffffffffff, 0x200}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0xffffffff}, {0x2, 0x3}, {0x7, 0x746}, {0x4, 0x1}, {0x7, 0x2}, {0xa2, 0x4}, {0xc, 0xfffffffffffffffe}, {0x8000, 0xa2}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0x2b}, {0x7fff, 0x1}, {0x80000001, 0xa}, {0x7, 0xff01}, {0x0, 0x1}, {0x5, 0x5}, {0xfffffffffffffff7, 0x2}, {0xb, 0x7ff}, {0x100000000, 0xfffffffffffffffb}, {0x5, 0x8}, {0x3, 0x3}, {0xffffffff, 0x57d7}, {0x6, 0x2}, {0x836b, 0x90}, {0xf, 0x8}, {0x40fa5163, 0x9}, {0x7, 0x8000}, {0x7, 0x1}, {0xff}, {0xffffffff}, {0x5, 0x8}, {0x7, 0x6}, {0xff, 0x101}, {0x82, 0xffffffffffffffff}, {0x7, 0x9}, {0x3, 0xffffffffffffff72}, {0xb7, 0xffffffffffffffc0}, {0x5, 0x80000000}, {0x0, 0x7}, {0x8, 0x1}, {0x7fffffff, 0x8}, {0x0, 0x7}, {0x9000000000, 0xb}, {0x2, 0x1}, {0x0, 0x49f4c417}, {0x5, 0x1ff}, {0x7d8, 0x2}, {0x101, 0xd3}, {0x2000000000000000, 0xcc}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x8, 0x2}, {0x1}, {0x3ff, 0x1200000000}, {0x711, 0x9}, {0x79, 0x9d}, {0x10001, 0xc}, {0x40, 0xf3b6}, {0x8000000000000001, 0xd}, {0x8, 0xd297}, {0x9, 0xb8}, {0x6, 0x2}, {0x400, 0x4}, {0x1, 0x2}, {0x400, 0x3}, {0xffffffffffffffff, 0xeb2e}, {0xfffffffffffffff8, 0xffff}, {0x10, 0x3}, {0x1, 0x59}, {0x3, 0x1}, {0xffff, 0xa0e6}, {0xc, 0x8000000000000001}, {0xc000000000000000}, {0x1, 0x6}, {0x1, 0xc8af}, {0x7, 0x1a15}, {0x4, 0x11}, {0x7, 0x6}, {0x1, 0xfffffffffffffffd}, {0x101, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x200}, {0x62, 0x3}, {0x32}, {0x1, 0x7}, {0x8, 0x5}, {0x100, 0x10000}, {0xbeff, 0x100}, {0x377, 0x4}, {0x1000, 0x9}, {0x0, 0x84}, {0x5, 0x80}, {0x1, 0x8000000000000001}, {0x6, 0x4cb0}, {0x8, 0x5}, {0x3, 0x1}, {0x4, 0xfffffffffffffff8}, {0xa73, 0x7fffffffffffffff}, {0x0, 0x100000000}, {0x2e, 0x3}, {0x3, 0x6eed98d6}, {0x3, 0x40}, {0x2, 0x9d5e}, {0x4, 0xbf}, {0x8000000000000001, 0xf}, {0x9a9a, 0x5}, {0x55, 0x491c}, {0x10000, 0x400}, {0x6, 0x3}, {0x2, 0x4}, {0x4}, {0xe2e, 0x1000}, {0x8, 0x3}, {0x80000000, 0x4}, {0xe, 0x92}, {0x5, 0x100}, {0xb00, 0x6}, {0x0, 0x5}, {0x80000001, 0xe}, {0x101, 0x7}, {0x7ff}, {0xe008, 0x5}, {0x6}, {0x9, 0xff}, {0x92e, 0x8}, {0xfff0000, 0x9}, {0x8, 0x401}, {0x5, 0x2}, {0x45, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x9, 0xffffffffffff9e35}, {0x7, 0x5}, {0x8000000000000001, 0xf7}, {0xb6bb, 0x7}, {0xa, 0x40}, {0x5, 0x3}, {0x8, 0x66}, {0xd4, 0x3}, {0x7, 0xd08c}, {0x5, 0x7}, {0x1, 0x81}, {0x4, 0x9}, {0xbc, 0x8}, {0x1, 0x8}, {0x402a}, {0x4, 0x1}, {0xf31, 0xbe4}, {0x7fffffffffffffff, 0x2}, {0x55f1, 0x2}, {0x0, 0x6}, {0x8000000000000001, 0x7fffffffffffffff}, {0x76dd, 0x7}, {0x3, 0x2}, {0x0, 0x100}, {0x8, 0x4}, {0x8, 0xf9a7}, {0xe7, 0x2}, {0x100000001, 0xe}, {0x0, 0x8}, {0x6}, {0x1, 0xc7}, {0x4}, {0xd, 0x5}, {0x5, 0xffffffffffffffff}, {0xc5c, 0x7}, {0x9c5, 0x96}, {0x7, 0x609}, {0x7fffffff}, {0x401, 0xf4ea}, {0x4001, 0xd}, {0x4, 0xc886}, {0x3, 0x8}, {0x1, 0x5}, {0xffffffffffff8001, 0x1}, {0x9, 0x5}, {0x4, 0xfb1}, {0x8}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x6}, {0x6, 0xb}, {0xfffffffffffffff7, 0x3ff}, {0x4}, {0x100000001, 0x2}, {0x100000000, 0x2}, {0x7375, 0x6b7}, {0x9, 0x400}, {0x1c8, 0x5}, {0x7d84}, {0xa, 0xbc7}, {0x40, 0x4}, {0x1, 0x2}, {0x7, 0x90}, {0x6, 0x9}, {0x9, 0x7f}, {0x2, 0x2}, {0x7fffffffffffffff, 0x100000000}, {0x7, 0xac}, {0x9, 0x4}, {0x2, 0x40}, {0x9, 0x4}, {0x9f6, 0x4}, {0x5, 0x4}, {0x9, 0x8}, {0x400, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0xa9bc, 0x9}, {0x401, 0xe}, {0x9}, {0x139, 0x6}, {0x1400000000000, 0x401}, {0x4, 0x5}, {0x2, 0x8}, {0x42, 0x5}, {0x5, 0xffff}, {0x2a0747c, 0x6}, {0x2, 0x1}]}, &(0x7f0000001540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000001580)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x8}, &(0x7f00000016c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000001700)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000001740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000001780)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x1, 0x4}, {0x9, 0x8}, {0xc16, 0x6a8e}, {0x1, 0xfffffe0000000000}, {0x9, 0x2}, {0xe, 0xffff}, {0x10, 0x3}, {0x4, 0x6}, {0x4, 0x7}, {0x2e0c, 0x7}, {0x0, 0x8000000000000001}, {0x0, 0x8}, {0x3, 0x8fd0}, {0xb, 0x3}, {0x9, 0xff}, {0xfffffffffffffeff, 0x8}, {0x4b8, 0x2}, {0x6, 0x10001}, {0x4, 0x7}, {0xffff, 0x629}, {0x5, 0x2}, {0x6, 0xffff}, {0x80000000000, 0x100000001}, {0x2, 0xfffffffffffffffe}, {0x0, 0x8}, {0x5, 0x7fffffff}, {0x6, 0x5}, {0x3, 0xc}, {0x800, 0x54d}, {0x0, 0xffffffffffffff34}, {0x1, 0x7}, {0xb66, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x7c, 0x2}, {0x7, 0xa10}, {0x1, 0x7}, {0x200, 0x7}, {0x0, 0x200040000}, {0xa, 0x8001}, {0x3, 0x8}, {0x10001, 0x7}, {0x7, 0x5}, {0xf3dd, 0x100000000}, {0x2, 0x80}, {0x4, 0x1}, {0x4, 0x8}, {0x13d, 0x3}, {0x81, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x3, 0x30}, {0x4}, {0x40, 0x8}, {0x5430a7d1, 0x7}, {0x2, 0xffffffffffffffff}, {0x7, 0x2480}, {0x7fff, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x7fffffff, 0x8}, {0xffffffff, 0x7}, {0x5, 0xfffffffffffffffd}, {0x1, 0x3633}, {0x7f, 0x6}, {0x7, 0x5}, {0x100, 0x8000000000000001}, {0x7, 0x3}, {0x46b8000, 0x100000001}, {0x2, 0x3}, {0x3, 0xfffffffffffffffa}, {0x4, 0x3}, {0x7, 0x7fffffff}, {0xfff, 0x200}, {0x80000000, 0x4}, {0x3, 0x81f}, {0xffffffffffffffff, 0x4}, {0x4, 0x6}, {0xae, 0x8000000000000000}, {0x8153}, {0x5, 0x3}, {0x16, 0x40}, {0x3, 0x66537163}, {0x2, 0x4}, {0xa5eb, 0x1}, {0x5, 0x8}, {0x8000000000000000, 0x7fff}, {0x4, 0x5e0f}, {0xccb8, 0x8001}, {0x9, 0x1}, {0x8, 0x3f3b}, {0x0, 0xfffffffffffffff9}, {0xfffffffffffffbff, 0xb68}, {0x9f43, 0x9}, {0xfde4, 0xd}, {0x8}, {0x1d, 0x6}, {0x8, 0x1}, {0x5, 0x5}, {0x1, 0x200}, {0x7, 0x4d60}, {0x48, 0x51}, {0x5, 0xc85}, {0xda, 0x5}, {0x3, 0x2}, {0x6}, {0x5, 0x25ae}, {0x100, 0x2}, {0xde, 0x9}, {0x0, 0x81}, {0x1ff, 0x2}, {0x0, 0xf}, {0x1, 0x2}, {0x1, 0x6}, {0xffffffffffffffff, 0x1}, {0x4, 0x5}, {0x5, 0x5}, {0x9, 0x8}, {0x25e, 0x7fffffff}, {0x9, 0xffffffff80000001}, {0xf, 0x5}, {0xad0f, 0xfffffffffffffff8}, {0x10000, 0x70}, {0x6, 0x9}, {0xdb2, 0x100}, {0xffffffffffffac71, 0xc7}, {0x7, 0x2}, {0x7, 0xfffffffffffffffe}, {0xfffffffffffffffa, 0x4}, {0x8, 0x5}, {0xe190, 0x9}, {0x75, 0x4}, {0x7, 0x8}, {0x3, 0xfffffffffffffffd}, {0x8, 0x6}, {0x2c8747ca}, {0x2, 0x2}, {0x6, 0x1000}, {0x3, 0x6}, {0x7fff, 0x5}, {0x6, 0x2}, {0x8, 0x6}, {0xfffffffffffffff9, 0x4}, {0x745a622d, 0x1}, {0x75e2, 0x6}, {0xc4, 0x3ff}, {0x7a7, 0x3}, {0x25, 0x8}, {0xc, 0x10000}, {0x634d, 0x8001}, {0x936, 0x2}, {0x1, 0x3ff}, {0x0, 0x8000}, {0x40, 0x8}, {0x0, 0x1}, {0x1b, 0x6}, {0x2, 0x2e127d12}, {0x0, 0x6c}, {0x4, 0xcc30000}, {0x7, 0x6}, {0xd, 0x19a4}, {0x6, 0x9}, {0x8, 0xfff}, {0x0, 0x401}, {0x9, 0x6}, {0x7, 0x8001}, {0x6, 0x101}, {0x9, 0x870}, {0x9, 0x8}, {0x1, 0x40}, {0x0, 0x14}, {0x2, 0x7}, {0x40, 0x1}, {0x6b2, 0xa8}, {0xfffffffffffffff7, 0x3}, {0x59a, 0x4}, {0xfffffffffffffffa, 0x200}, {0x7, 0xd2}, {0xffffffffffffffff, 0x469e}, {0x9, 0x7}, {0x6, 0xb87}, {0x9, 0x86}, {0x5}, {0x9, 0x1}, {0x4, 0x5}, {0x6, 0x8000000000000000}, {0x4, 0x440}, {0x12f9, 0xffffffffffffffff}, {0x992, 0xffffffffffffffff}, {0x8, 0x4}, {0x0, 0x3}, {0xd, 0xfffffffffffffffc}, {0x5, 0x7}, {0x8, 0x6c9}, {0x7fffffff, 0xd3ce}, {0xd, 0x7}, {0x6, 0xfffffffffffffe76}, {0xfffffffffffffffb, 0xf27}, {0x7, 0x7fffffffffffffff}, {0xffff, 0x1}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x7f}, {0x451a000, 0x2791}, {0x9, 0x2}, {0xfff, 0xb}, {0x5e7, 0x6}, {0x1e, 0x9}, {0x848, 0x4c}, {0x9, 0xab3f}, {0x7, 0x400}, {0xa00000, 0x4}, {0x2, 0xb}, {0x5, 0x9}, {0x3, 0x7fff}, {0x7, 0x6}, {0x10000000000, 0x101}, {0xc, 0x80000000}, {0xba7, 0xc5}, {0x48e5, 0x9324}, {0x1, 0xfffffffffffffff2}, {0x97cc, 0x5}, {0x0, 0x955}, {0x800, 0xfffffffffffffffe}, {0x7, 0x1ff}, {0x0, 0x9}, {0x2, 0x7b}, {0xf2, 0x9}, {0x5, 0x5}, {0x3ff, 0xa811}, {0x1000, 0x3}, {0x6366034, 0x1}, {0xffffffff80000001, 0xbd}, {0x6, 0x4}, {0x7fffffffffffffff, 0x7}, {0xc41, 0xf9}, {0x5, 0x8000000000000001}, {0x1, 0x7}, {0x2, 0xfffffffffffffff8}, {0x1, 0x10001}, {0x3, 0x8}, {0xb, 0x29b}, {0x1a18, 0x60}, {0x2, 0x7}, {0x2000000000000000, 0x1}, {0x6, 0x5}, {0x8000, 0x21da}, {0x3, 0x9}, {0x3, 0xcb}, {0xffff}, {0x3, 0x2}, {0x70f, 0x50}, {0x7, 0x7fff}, {0x6, 0x80000001}, {0x7, 0x3}]}, &(0x7f00000027c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002800)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000002840)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002880)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x3}, &(0x7f00000029c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002a00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002a40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002a80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002ac0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000002b00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000002b40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002b80)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000002c00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002c40)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002c80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000002cc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000002d00)=@uuid={{0x4f32494e, 0x5, 0x10, 0xe0000001}}, &(0x7f0000002d40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000002d80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000002dc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000002e00)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000002e40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x80000000, 0xdc}, {0xc43, 0x527a}, {0x3, 0x10}, {0x5, 0x3}, {0x8001, 0x7fff}, {0x9, 0xb}, {0x2, 0x1}, {0x7, 0x400}, {0x7, 0xfff}, {0xe, 0xc5a}, {0x875a}, {0x5, 0x4}, {0x3, 0xebe}, {0x2, 0xffffffffaaa96ae1}, {0x7, 0x1d43}, {0x1, 0x8}, {0x10, 0xffffffffffffffff}, {0x5, 0x228}, {0x80000000, 0x4}, {0xf, 0x100000000}, {0x7, 0x8}, {0x0, 0xf}, {0x4, 0x2}, {0x9, 0xe}, {0x0, 0x1}, {0x80000000}, {0x0, 0x8000000000000001}, {0x0, 0x2}, {0x8b}, {0x9, 0xdc1}, {0x24, 0xa}, {0xcf, 0xbee}, {0x3, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x6, 0x4}, {0x8, 0x780}, {0xffff, 0x8}, {0xff, 0x8}, {0x0, 0x3}, {0x8, 0x4}, {0x9, 0x7bd5}, {0x3}, {0x8000, 0x79}, {0x3, 0x6}, {0x1, 0x40}, {0x9, 0x8}, {0x8, 0xfffffffffffffffa}, {0x0, 0x100000000}, {0x2, 0x5}, {0x1, 0x2}, {0x5}, {0x7}, {0x7f}, {0x80000001, 0x7}, {0xffffffffffff0d9d, 0x62}, {0x3}, {0x7, 0x2}, {0x80, 0xf}, {0xc, 0x606dcb48}, {0x4}, {0x202, 0x100}, {0x5, 0x4}, {0x10, 0xc4}, {0x8, 0xfffffffffffffff7}, {0x1, 0xc}, {0x7, 0x1}, {0x5, 0x6}, {0x30, 0x3f800000000000}, {0xfffffffffffffffc, 0x3}, {0x7, 0x9}, {0xd, 0x7fffffff}, {0x4, 0xfff}, {0x1000, 0x3}, {0x5, 0x7}, {0x4, 0x5}, {0x9, 0x200}, {0x3079, 0xffffffffffffffff}, {0x9, 0x8000000000000000}, {0xe, 0x8}, {0x2, 0x400}, {0x3, 0xc}, {0xa2, 0x1}, {0x2, 0x6}, {0x8, 0xffffffffffffff00}, {0x4, 0xb}, {0xc, 0x7}, {0x5bc, 0x2}, {0x7, 0x3760}, {0x7, 0x354}, {0x3, 0x2201a768}, {0x8ee9, 0x7}, {0x9, 0x7ff}, {0xffffffffffff1e95, 0x8}, {0x8, 0x6}, {0x9, 0x4}, {0x1ff, 0xf}, {0x1, 0x6}, {0x4, 0x8000}, {0x3, 0x2}, {0x6, 0xe21}, {0x7e, 0x3}, {0x0, 0x4}, {0xffffffffe19f363f, 0x3}, {0xc442, 0x101}, {0x5, 0xa9d5}, {0x8, 0xc89e}, {0x6, 0xfffffffffffffffa}, {0x1, 0xfffffffffffffb62}, {0xda, 0x4c}, {0xa9b, 0xfffffffffffffff9}, {0x100000001, 0x6}, {0x101, 0x3}, {0x800, 0x8000}, {0x6ae6f291, 0x2}, {0x6, 0x7}, {0x3, 0x7fffffff}, {0x8315, 0x5}, {0x5, 0x2}, {0xb8, 0x4}, {0x1, 0x5}, {0x7ff, 0x6}, {0xad70000000000000, 0xffffffffffffffff}, {0x2, 0x9}, {0x1, 0x9}, {0xd, 0xed98}, {0x200, 0x1ff}, {0x1, 0x5}, {0x25f, 0x2}, {0x6, 0x100}, {0xb68, 0x77a}, {0x8}, {0xdb, 0x7}, {0x0, 0x5}, {0x3, 0x7}, {0xff, 0x1000}, {0x0, 0x5}, {0x5, 0x34}, {0xfff, 0x9}, {0x4, 0x4}, {0x0, 0x8}, {0x8000000000000000, 0x21}, {0x7fffffff, 0x3}, {0xa, 0x101}, {0x8, 0x3}, {0x8000000000000000, 0x4}, {0x8, 0xd}, {0x38e1, 0x4}, {0x4, 0x3}, {0x9, 0x7}, {0x72}, {0x0, 0x4}, {0x8, 0xc}, {0x979e, 0x6}, {0x200}, {0x4, 0x7}, {0x8, 0xb}, {0x665f, 0x7f}, {0x10, 0x7f}, {0x2, 0xbc19}, {0x8, 0x6}, {0xfffffffffffffff9, 0x7ff}, {0x0, 0xa30b}, {0x9, 0x9}, {0x22, 0x8}, {0xb, 0x4}, {0x8000, 0x9}, {0x6, 0xfffffffffffffc00}, {0x1, 0x3ff}, {0x5, 0x9}, {0x5, 0x6}, {0x1, 0x6}, {0x5, 0x7fffffff}, {0x14, 0x5}, {0xfffffffffffffff8, 0x200}, {0x9, 0x3da922aa000000}, {0x3, 0xffffffffffffffff}, {0x6, 0x7}, {0x0, 0xc}, {0x8, 0x7}, {0x71, 0x39a}, {0x1, 0x1}, {0xd, 0x2}, {0x81, 0x10}, {0x8000000000000000, 0x6}, {0x401}, {0x6000000000000000, 0x7}, {0x1, 0x7}, {0x7, 0xfff}, {0x811, 0xfb2}, {0x4, 0x8000000000000000}, {0x8, 0x5}, {0x4, 0x2a}, {0x1, 0x35}, {0x3, 0x1000}, {0x2}, {0x8}, {0xa, 0x843a}, {0x100000001}, {0x25, 0x7}, {0x3, 0x2}, {0x9, 0x768}, {0x1, 0x5}, {0x1ff}, {0x74, 0xe7}, {0x100000000, 0x8}, {0x9, 0x3}, {0x0, 0x4}, {0x8, 0x5c}, {0x8, 0xfffffffffffff30d}, {0x1fc80, 0x200}, {0x8}, {0x7944, 0x80000000}, {0xa2e2, 0x7}, {0x6e2c, 0x45e}, {0x2, 0x7}, {0x0, 0x3}, {0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x40, 0x5}, {0x7, 0x3}, {0xc, 0x100}, {0x637, 0x2}, {0xc, 0x1}, {0x4, 0xfd}, {0xffffffff, 0x6}, {0x21, 0x9}, {0x0, 0x5}, {0xffffffff, 0x5}, {0x80, 0x6}, {0x4, 0x80000000}, {0x8, 0x100000000}, {0xe, 0xea02}, {0x5, 0x7fffffff}, {0x6}, {0x9, 0x3}, {0x7, 0x5}, {0x2c, 0x2}, {0x7, 0x9}, {0xe, 0xfffffffffffffffc}, {0x5a, 0xb6a}, {0x9, 0xeff3}, {0x1, 0xb}, {0x2}, {0x6, 0x36}, {0x7, 0xff0000000}, {0x9, 0xfff}, {0xb, 0x8}, {0xffffffff, 0x3}, {0x7, 0x1}, {0x9, 0x2}, {0x206, 0x6}, {0x6, 0x5}, {0x0, 0x33}]}, &(0x7f0000003e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000003ec0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000003f40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000003f80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003fc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000004000)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000004040)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000004080)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f00000040c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0xd}, &(0x7f0000004200)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000004240)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000004280)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f00000042c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000004300)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000004340)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000004380)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f00000043c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000004400)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}], 0x32}) socket$netlink(0x10, 0x3, 0x12) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000000000)='\a', 0xffc0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) recvmsg(r5, &(0x7f0000001fc0)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000001f00)=[{0x0}, {0x0}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x3}, 0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000240)=0x84) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000280)={r6, 0x8001}, &(0x7f00000002c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112100000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 2m50.060337967s ago: executing program 35 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r1], 0x54}}, 0x0) 2m44.625302035s ago: executing program 36 (id=1621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @random="fd137b07daa7", @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast1, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x1}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 5 (id=1623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c0006000000000000000000040007800c0002008000000000000000"], 0x30}}, 0x20000000) kernel console output (not intermixed with test programs): 87.433816][ T5993] syzkaller0: entered allmulticast mode [ 87.434934][ T43] IPVS: starting estimator thread 0... [ 87.447562][ T1075] smbdirect: ib_dev[syz2] removed [ 87.503157][ T1075] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.529174][ T3297] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.545572][ T5998] IPVS: using max 41 ests per chain, 98400 per kthread [ 87.610676][ T3297] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.682649][ T1075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.711056][ T6004] atomic_op ffff888030e76998 conn xmit_atomic 0000000000000000 [ 87.711381][ T6005] __nla_validate_parse: 3 callbacks suppressed [ 87.711394][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 87.806529][ T5785] IPVS: starting estimator thread 0... [ 87.896229][ T6011] IPVS: using max 34 ests per chain, 81600 per kthread [ 87.984982][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 88.014171][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 88.039789][ T6013] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 88.055227][ T6013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.47'. [ 88.319001][ T6030] netlink: 'syz.4.53': attribute type 2 has an invalid length. [ 88.774847][ T6044] syzkaller1: entered promiscuous mode [ 88.792941][ T6044] syzkaller1: entered allmulticast mode [ 88.942345][ T6045] syzkaller0: entered promiscuous mode [ 88.955709][ T6045] syzkaller0: entered allmulticast mode [ 89.238139][ T6077] netlink: 'syz.4.59': attribute type 2 has an invalid length. [ 89.250360][ T6077] netlink: 224 bytes leftover after parsing attributes in process `syz.4.59'. [ 89.595380][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 89.604587][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 89.613798][ T6085] netlink: 'syz.2.58': attribute type 11 has an invalid length. [ 90.572424][ T6084] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 90.750463][ T6094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.62'. [ 90.908365][ T6105] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.917150][ T6099] block nbd0: server does not support multiple connections per device. [ 90.930862][ T6099] block nbd0: shutting down sockets [ 91.410009][ T6129] syzkaller0: entered promiscuous mode [ 91.427447][ T6129] syzkaller0: entered allmulticast mode [ 91.579475][ T6106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.604036][ T6106] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 91.688481][ T6106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.704600][ T1075] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.713822][ T6106] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 91.753791][ T1075] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.764279][ T1075] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.774774][ T6106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.777650][ T1075] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.810222][ T6106] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 91.826758][ T1014] cfg80211: failed to load regulatory.db [ 91.923616][ T6106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.943817][ T6106] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 91.970886][ T6145] syzkaller0: entered promiscuous mode [ 91.990601][ T6145] syzkaller0: entered allmulticast mode [ 92.000375][ T6106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 92.011818][ T6106] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 92.764537][ T6192] net_ratelimit: 3323 callbacks suppressed [ 92.764558][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.832368][ T6195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.359404][ T6211] syzkaller0: entered promiscuous mode [ 93.415164][ T6211] syzkaller0: entered allmulticast mode [ 93.821753][ T6232] syzkaller0: entered promiscuous mode [ 93.850393][ T6232] syzkaller0: entered allmulticast mode [ 93.883888][ T6236] tipc: Started in network mode [ 93.910547][ T6236] tipc: Node identity c623dc8749a6, cluster identity 7 [ 93.952143][ T6236] tipc: Enabled bearer , priority 0 [ 93.981722][ T6232] tipc: Resetting bearer [ 94.064682][ T6239] can: request_module (can-proto-5) failed. [ 94.531289][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.540313][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.653329][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.670512][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.796738][ T6226] tipc: Resetting bearer [ 94.836946][ T6226] tipc: Disabling bearer [ 94.872146][ T431] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.891873][ T431] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.918652][ T431] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.952532][ T431] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.157060][ T6289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.97'. [ 95.174366][ T6291] syzkaller0: entered promiscuous mode [ 95.203691][ T6291] syzkaller0: entered allmulticast mode [ 95.352646][ T6294] bond1: option lp_interval: invalid value (0) [ 95.370041][ T6294] bond1: option lp_interval: allowed values 1 - 2147483647 [ 95.393206][ T6294] bond1 (unregistering): Released all slaves [ 95.700537][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 95.831299][ T6326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'. [ 95.840487][ T6328] syzkaller0: entered promiscuous mode [ 95.840545][ T6328] syzkaller0: entered allmulticast mode [ 96.893778][ T6323] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 97.788126][ T6418] syzkaller0: entered promiscuous mode [ 97.795081][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 97.808795][ T6418] syzkaller0: entered allmulticast mode [ 97.864787][ T6425] IPVS: set_ctl: invalid protocol: 183 172.20.20.11:21 [ 97.902333][ T6438] bridge1: entered promiscuous mode [ 97.910162][ T6438] bridge1: entered allmulticast mode [ 97.957524][ T6440] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 97.973067][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 98.275615][ T6462] netlink: 100 bytes leftover after parsing attributes in process `syz.2.127'. [ 99.918616][ T6462] netlink: 'syz.2.127': attribute type 2 has an invalid length. [ 99.926604][ T6462] netlink: 103 bytes leftover after parsing attributes in process `syz.2.127'. [ 99.937873][ T6476] netlink: 'syz.0.130': attribute type 12 has an invalid length. [ 100.125874][ T6497] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 100.172538][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 100.259061][ T6500] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 100.296529][ T6508] warning: `syz.2.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.385234][ T6512] xt_cgroup: invalid path, errno=-2 [ 100.593634][ T6524] syzkaller0: entered promiscuous mode [ 100.620511][ T6524] syzkaller0: entered allmulticast mode [ 100.847011][ T6541] netlink: 'syz.2.146': attribute type 10 has an invalid length. [ 100.867385][ T6541] team0: Device veth1_virt_wifi failed to register rx_handler [ 100.890664][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.900999][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.148'. [ 101.554528][ T6558] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 101.614284][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 102.802922][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 102.851135][ T6574] netlink: 96 bytes leftover after parsing attributes in process `syz.0.155'. [ 103.013156][ T6583] netlink: 112 bytes leftover after parsing attributes in process `syz.4.159'. [ 103.137257][ T6586] netlink: 64419 bytes leftover after parsing attributes in process `syz.3.161'. [ 103.286634][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.408772][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'. [ 103.499773][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.573451][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.164'. [ 103.598546][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.164'. [ 103.666338][ T6611] netlink: 'syz.0.168': attribute type 30 has an invalid length. [ 103.683547][ T6611] vxlan0: entered promiscuous mode [ 103.689251][ T6611] vxlan0: entered allmulticast mode [ 103.701298][ T6611] netlink: 'syz.0.168': attribute type 30 has an invalid length. [ 103.721253][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.731396][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.740813][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.789872][ T6611] vxlan1: entered promiscuous mode [ 103.803729][ T6611] vxlan1: entered allmulticast mode [ 103.834849][ T6610] syzkaller1: entered promiscuous mode [ 103.856465][ T6610] syzkaller1: entered allmulticast mode [ 103.877440][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.897321][ T6612] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 103.920311][ T6612] netlink: 'syz.2.167': attribute type 2 has an invalid length. [ 104.048463][ T6628] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 104.150665][ T6632] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 104.233244][ T6644] Cannot find del_set index 0 as target [ 104.603160][ T6657] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 104.872184][ T6660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.457703][ T6693] macsec1: entered promiscuous mode [ 105.463100][ T6693] bridge0: entered promiscuous mode [ 105.519384][ T6693] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.589225][ T6703] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.079764][ T6709] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 106.586874][ T6721] __nla_validate_parse: 9 callbacks suppressed [ 106.586893][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'. [ 106.848801][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 107.786239][ T5785] IPVS: starting estimator thread 0... [ 107.896792][ T6765] IPVS: using max 27 ests per chain, 64800 per kthread [ 108.310384][ T6784] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 108.350808][ T6784] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 108.404703][ T6783] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 108.429820][ T6783] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 108.515974][ T6790] netlink: 108 bytes leftover after parsing attributes in process `syz.4.215'. [ 108.776928][ T6808] netlink: 36 bytes leftover after parsing attributes in process `syz.1.222'. [ 109.227053][ T6835] netlink: 160 bytes leftover after parsing attributes in process `syz.1.229'. [ 109.233601][ T6828] bond1: option arp_interval: invalid value (18446744073709551615) [ 109.242447][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 109.244489][ T6828] bond1: option arp_interval: allowed values 0 - 2147483647 [ 109.264951][ T6828] bond1 (unregistering): Released all slaves [ 109.267631][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 109.320138][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.227'. [ 109.361914][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 109.383216][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 109.648793][ T6857] netlink: 'syz.1.236': attribute type 1 has an invalid length. [ 109.685383][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.720164][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.752128][ T6857] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 109.816663][ T5724] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.094888][ T6869] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 110.232105][ T6869] bond4 (unregistering): Released all slaves [ 110.417249][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.502770][ T6889] netlink: 'syz.4.245': attribute type 30 has an invalid length. [ 110.525692][ T5724] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.572717][ T6899] netlink: 'syz.4.245': attribute type 30 has an invalid length. [ 110.581308][ T6897] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 110.999209][ T6924] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 111.497560][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 111.507344][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 112.127471][ T5827] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 113.233949][ T6958] lo speed is unknown, defaulting to 1000 [ 113.268132][ T6970] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 113.312037][ T6969] __nla_validate_parse: 5 callbacks suppressed [ 113.312053][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 113.334997][ T6970] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 113.339847][ T6958] lo speed is unknown, defaulting to 1000 [ 113.365990][ T6971] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 113.435073][ T6958] lo speed is unknown, defaulting to 1000 [ 113.727439][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 113.807868][ T6995] netlink: 84 bytes leftover after parsing attributes in process `syz.4.269'. [ 113.927014][ T6992] syz_tun: entered allmulticast mode [ 114.013232][ T5813] IPVS: starting estimator thread 0... [ 114.063381][ T6996] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:19996 [ 114.092594][ T7000] bond4: entered allmulticast mode [ 114.112766][ T7000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.120456][ T7005] IPVS: using max 29 ests per chain, 69600 per kthread [ 114.201353][ T6988] syz_tun: left allmulticast mode [ 114.364977][ T6958] infiniband syz1: set active [ 114.374492][ T5813] lo speed is unknown, defaulting to 1000 [ 114.394481][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 114.410496][ T6958] infiniband syz1: added lo [ 114.421519][ T7012] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 114.436198][ T6958] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 114.451652][ T6958] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 114.469157][ T6958] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 114.547769][ T6958] RDS/IB: syz1: added [ 114.555627][ T6958] smc: adding ib device syz1 with port count 1 [ 114.564913][ T6958] smc: ib device syz1 port 1 has no pnetid [ 114.620572][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.628287][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.788503][ T7012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.939066][ T5813] lo speed is unknown, defaulting to 1000 [ 114.971668][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.980807][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.992978][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.002155][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.038627][ T6958] lo speed is unknown, defaulting to 1000 [ 115.045351][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.066445][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.098295][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.126728][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.423217][ T7038] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 115.447231][ T7038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.282'. [ 115.503246][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 115.543361][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.607602][ T7040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.013061][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 116.061659][ T6958] lo speed is unknown, defaulting to 1000 [ 116.096563][ T7063] dvmrp0: entered allmulticast mode [ 116.353326][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.389124][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 116.900126][ T7057] lo speed is unknown, defaulting to 1000 [ 117.254416][ T7102] tipc: Enabling of bearer rejected, failed to enable media [ 117.518606][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 117.586869][ T6958] lo speed is unknown, defaulting to 1000 [ 118.128692][ T7137] xt_hashlimit: size too large, truncated to 1048576 [ 118.272018][ T6958] lo speed is unknown, defaulting to 1000 [ 118.499663][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.661533][ T6958] lo speed is unknown, defaulting to 1000 [ 119.139647][ T7154] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 119.174803][ T7154] netlink: 'syz.2.312': attribute type 2 has an invalid length. [ 119.174854][ T7156] netlink: 'syz.3.313': attribute type 4 has an invalid length. [ 119.220536][ T7156] __nla_validate_parse: 2 callbacks suppressed [ 119.220553][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 119.290853][ T7156] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 119.582552][ T7175] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 119.922978][ T7177] syzkaller0: entered promiscuous mode [ 119.926196][ T7188] openvswitch: netlink: IP tunnel TTL not specified. [ 119.937401][ T7177] syzkaller0: entered allmulticast mode [ 120.142474][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 120.163328][ T7196] netlink: 'syz.3.323': attribute type 32 has an invalid length. [ 120.206560][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'. [ 120.453297][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 120.535167][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 120.589911][ T7219] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 120.630567][ T7227] openvswitch: netlink: IP tunnel dst address not specified [ 120.685933][ T7215] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 120.741032][ T7219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.839113][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 120.848489][ T7236] netlink: 11 bytes leftover after parsing attributes in process `syz.0.330'. [ 120.873627][ T7229] bond2: (slave geneve2): making interface the new active one [ 120.898653][ T7229] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 120.924508][ T6379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.950893][ T6379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.988593][ T6379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.025301][ T6379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.053770][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 121.099652][ T7242] lo speed is unknown, defaulting to 1000 [ 121.267181][ T7257] netlink: 260 bytes leftover after parsing attributes in process `syz.4.335'. [ 121.371829][ T5282] veth0_macvtap: left promiscuous mode [ 121.463197][ T7264] netlink: 'syz.4.338': attribute type 1 has an invalid length. [ 121.734758][ T7264] bond1: entered promiscuous mode [ 121.752401][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.012780][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 122.329354][ T7293] netlink: 'syz.3.343': attribute type 18 has an invalid length. [ 122.396737][ T7260] lo speed is unknown, defaulting to 1000 [ 123.781449][ T7337] tipc: Enabled bearer , priority 0 [ 123.843203][ T7339] syzkaller0: entered promiscuous mode [ 123.849464][ T7339] syzkaller0: entered allmulticast mode [ 123.857153][ T7339] tipc: Resetting bearer [ 123.893672][ T7336] tipc: Resetting bearer [ 125.577462][ T7336] tipc: Disabling bearer [ 125.602169][ T1014] tipc: Node number set to 2407914631 [ 125.873870][ T7362] __nla_validate_parse: 3 callbacks suppressed [ 125.873888][ T7362] netlink: 60 bytes leftover after parsing attributes in process `syz.4.358'. [ 125.889883][ T7363] netlink: 'syz.0.359': attribute type 7 has an invalid length. [ 125.918990][ T7365] netlink: 'syz.0.359': attribute type 7 has an invalid length. [ 125.942840][ T7363] netlink: 'syz.0.359': attribute type 3 has an invalid length. [ 125.955037][ T7374] IPVS: length: 58 != 8 [ 125.964982][ T7365] netlink: 'syz.0.359': attribute type 3 has an invalid length. [ 125.995644][ T7363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.359'. [ 126.037024][ T7365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.359'. [ 126.097254][ T7378] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 126.257520][ T7378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.339819][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.380194][ T7386] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 126.440895][ T7394] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 126.482171][ T7394] bond1 (unregistering): Released all slaves [ 126.944778][ T7412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.373'. [ 127.012464][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 127.033451][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 127.047862][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.373'. [ 128.366036][ T7482] netlink: 'syz.2.381': attribute type 2 has an invalid length. [ 128.584437][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 129.009196][ T7489] syz.0.384 (7489) used greatest stack depth: 18312 bytes left [ 129.037510][ T7518] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 129.213145][ T7528] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 129.234712][ T7528] netlink: 'syz.0.391': attribute type 3 has an invalid length. [ 129.258274][ T7528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.391'. [ 129.284706][ T7530] tipc: New replicast peer: 255.255.255.255 [ 129.313809][ T7530] tipc: Enabled bearer , priority 10 [ 129.314486][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 129.345272][ T7530] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 129.521932][ T7530] bond2: entered promiscuous mode [ 129.536939][ T7530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.549597][ T7545] bond2: entered allmulticast mode [ 129.705672][ T7549] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 129.732929][ T7546] bridge1: port 1(dummy0) entered blocking state [ 129.778311][ T7546] bridge1: port 1(dummy0) entered disabled state [ 129.813417][ T7546] dummy0: entered allmulticast mode [ 129.844011][ T7546] dummy0: entered promiscuous mode [ 129.913688][ T7537] bond2: (slave bridge1): making interface the new active one [ 129.935558][ T7537] bridge1: entered promiscuous mode [ 129.944528][ T7537] bridge1: entered allmulticast mode [ 129.991387][ T7537] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 130.008784][ T7549] bridge1: port 1(dummy0) entered blocking state [ 130.016470][ T7549] bridge1: port 1(dummy0) entered forwarding state [ 130.048293][ T7549] dummy0: left allmulticast mode [ 130.060788][ T7549] bridge1: port 1(dummy0) entered disabled state [ 130.949575][ T7601] syzkaller0: entered promiscuous mode [ 130.965582][ T7601] syzkaller0: entered allmulticast mode [ 130.981727][ T7607] __nla_validate_parse: 5 callbacks suppressed [ 130.981743][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 131.036941][ T7601] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 131.118654][ T7616] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 131.172321][ T5827] lo speed is unknown, defaulting to 1000 [ 131.449334][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.418'. [ 132.768112][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.945946][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 181.957802][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 181.983905][ T7667] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 181.987607][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 182.021344][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 182.090972][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 182.636168][ T7698] syzkaller0: entered promiscuous mode [ 182.648150][ T7698] syzkaller0: entered allmulticast mode [ 182.655259][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 182.688834][ T7707] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 182.743900][ T7710] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 182.780758][ T7710] netlink: 104 bytes leftover after parsing attributes in process `syz.3.440'. [ 182.930427][ T7718] bond1: option lp_interval: invalid value (0) [ 182.936933][ T7718] bond1: option lp_interval: allowed values 1 - 2147483647 [ 182.950771][ T7718] bond1 (unregistering): Released all slaves [ 183.395856][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 183.494320][ T7742] bond3 (unregistering): Released all slaves [ 183.586241][ T7752] netlink: 'syz.0.448': attribute type 2 has an invalid length. [ 183.601769][ T7752] netlink: 92 bytes leftover after parsing attributes in process `syz.0.448'. [ 183.611435][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 183.677155][ T7756] block nbd0: not configured, cannot reconfigure [ 184.087911][ T7780] netlink: 'syz.4.460': attribute type 11 has an invalid length. [ 184.304809][ T7777] lo speed is unknown, defaulting to 1000 [ 184.436456][ T7796] sctp: [Deprecated]: syz.1.463 (pid 7796) Use of int in max_burst socket option. [ 184.436456][ T7796] Use struct sctp_assoc_value instead [ 184.659492][ T7801] openvswitch: netlink: IP tunnel dst address not specified [ 185.017751][ T7814] batadv1: entered promiscuous mode [ 185.042967][ T7814] batadv1: entered allmulticast mode [ 185.057511][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 185.509485][ T7844] netlink: 'syz.4.478': attribute type 3 has an invalid length. [ 185.533365][ T7844] netlink: 'syz.4.478': attribute type 1 has an invalid length. [ 185.562891][ T7844] NCSI netlink: No device for ifindex 0 [ 185.757154][ T7850] netlink: 'syz.0.480': attribute type 15 has an invalid length. [ 185.771849][ T7855] netlink: 'syz.0.480': attribute type 15 has an invalid length. [ 185.841124][ T7861] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 185.968101][ T7869] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.413686][ T7884] bond0: (slave ip6tnl0): refused to change device type [ 186.534136][ T7884] ip6erspan0: entered allmulticast mode [ 186.999092][ T7903] lo speed is unknown, defaulting to 1000 [ 187.213425][ T7900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.599066][ T7938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.794910][ T7938] __nla_validate_parse: 7 callbacks suppressed [ 187.794928][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 187.812541][ T7942] netlink: 'syz.3.507': attribute type 3 has an invalid length. [ 187.837505][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 187.865607][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 188.106612][ T7958] netlink: 56 bytes leftover after parsing attributes in process `syz.2.509'. [ 188.117255][ T7957] netlink: 56 bytes leftover after parsing attributes in process `syz.2.509'. [ 188.358356][ T7970] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 188.361751][ T7963] netlink: 68 bytes leftover after parsing attributes in process `syz.0.511'. [ 188.402851][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.512'. [ 188.589005][ T7967] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 188.983587][ T8002] 8021q: VLANs not supported on ip_vti0 [ 189.320964][ T8014] lo speed is unknown, defaulting to 1000 [ 189.547017][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 189.721889][ T8040] netlink: 48 bytes leftover after parsing attributes in process `syz.1.528'. [ 190.118784][ T8053] pimreg: entered allmulticast mode [ 190.142002][ T8050] pimreg: left allmulticast mode [ 190.231083][ T8050] team0: Device vlan2 is already an upper device of the team interface [ 190.938992][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 190.951103][ T8087] netlink: 'syz.2.541': attribute type 11 has an invalid length. [ 191.740051][ T8117] netlink: 'syz.2.549': attribute type 2 has an invalid length. [ 192.201546][ T8146] netlink: 'syz.4.557': attribute type 4 has an invalid length. [ 192.343368][ T8152] trusted_key: syz.0.559 sent an empty control message without MSG_MORE. [ 192.414671][ T8156] bridge_slave_0: left allmulticast mode [ 192.438478][ T8156] bridge_slave_0: left promiscuous mode [ 192.451962][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.469809][ T8157] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 192.500626][ T8156] bridge_slave_1: left allmulticast mode [ 192.516457][ T8156] bridge_slave_1: left promiscuous mode [ 192.518312][ T8157] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 192.527913][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.544876][ T8156] bond0: (slave bond_slave_0): Releasing backup interface [ 192.554840][ T8156] bond0: (slave bond_slave_1): Releasing backup interface [ 192.569724][ T8156] team0: Port device team_slave_0 removed [ 192.601725][ T8156] team0: Port device team_slave_1 removed [ 192.611787][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.622898][ T8156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.853131][ T8185] xt_hashlimit: size too large, truncated to 1048576 [ 193.571706][ T8212] __nla_validate_parse: 7 callbacks suppressed [ 193.571722][ T8212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 193.671148][ T8210] xt_CT: No such helper "netbios-ns" [ 193.753707][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 193.757053][ T8226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.062105][ T8236] lo speed is unknown, defaulting to 1000 [ 194.067692][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 194.089025][ T8244] netlink: 68 bytes leftover after parsing attributes in process `syz.0.586'. [ 194.122766][ T8246] netlink: 'syz.2.584': attribute type 8 has an invalid length. [ 194.213084][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257219][ T8249] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 194.537528][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.591783][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 195.002499][ T8291] syzkaller0: entered promiscuous mode [ 195.014878][ T8291] syzkaller0: entered allmulticast mode [ 195.135251][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 195.183423][ T8298] syzkaller0: entered promiscuous mode [ 195.194969][ T8298] syzkaller0: entered allmulticast mode [ 195.312223][ T8298] tipc: Started in network mode [ 195.318170][ T8298] tipc: Node identity 522b75052a25, cluster identity 4711 [ 195.325796][ T8298] tipc: Enabled bearer , priority 0 [ 195.353150][ T8308] netlink: 140 bytes leftover after parsing attributes in process `syz.2.603'. [ 195.354889][ T8298] tipc: Resetting bearer [ 195.403961][ T8297] tipc: Resetting bearer [ 195.422935][ T8297] tipc: Disabling bearer [ 195.701973][ T8317] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 195.814040][ T8317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.821410][ T8313] lo speed is unknown, defaulting to 1000 [ 195.925088][ T8325] bond5: (slave geneve2): making interface the new active one [ 195.938575][ T8325] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 196.490844][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'. [ 196.604274][ T8359] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 196.617206][ T8359] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 196.722357][ T8360] lo speed is unknown, defaulting to 1000 [ 197.068014][ T8376] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 197.083401][ T8376] syzkaller1: tun_chr_ioctl cmd 21731 [ 197.578149][ T8385] lo speed is unknown, defaulting to 1000 [ 197.920756][ T8395] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.049636][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 198.089919][ T8398] bridge3: port 1(dummy0) entered blocking state [ 198.101950][ T8398] bridge3: port 1(dummy0) entered disabled state [ 198.114771][ T8398] dummy0: entered allmulticast mode [ 198.128861][ T8398] dummy0: entered promiscuous mode [ 198.145294][ T8399] netlink: 'syz.3.626': attribute type 10 has an invalid length. [ 198.191958][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.626'. [ 198.269285][ T8399] bridge3: port 1(dummy0) entered blocking state [ 198.275875][ T8399] bridge3: port 1(dummy0) entered forwarding state [ 198.311176][ T8399] dummy0: left allmulticast mode [ 198.338768][ T8399] bridge3: port 1(dummy0) entered disabled state [ 198.675752][ T8410] xt_CT: No such helper "netbios-ns" [ 199.251439][ T8434] __nla_validate_parse: 1 callbacks suppressed [ 199.251457][ T8434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.638'. [ 199.836117][ T8457] team0: Device vlan2 is already an upper device of the team interface [ 199.855346][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 199.861611][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.645'. [ 199.883721][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 200.249244][ T8486] bond1: option ad_user_port_key: invalid value (65535) [ 200.261437][ T8486] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 200.278777][ T8486] bond1 (unregistering): Released all slaves [ 200.299590][ T8494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.651'. [ 200.593705][ T8501] netlink: 'syz.1.653': attribute type 5 has an invalid length. [ 200.660857][ T8508] lo speed is unknown, defaulting to 1000 [ 201.008911][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 201.200520][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 201.546404][ T8560] netlink: 'syz.1.666': attribute type 11 has an invalid length. [ 201.803707][ T8563] netlink: 'syz.4.668': attribute type 9 has an invalid length. [ 201.814419][ T8571] bridge1: entered promiscuous mode [ 201.826507][ T8571] bridge1: entered allmulticast mode [ 201.835298][ T8571] team0: Port device bridge1 added [ 202.053059][ T8579] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 202.061740][ T8579] netlink: 244 bytes leftover after parsing attributes in process `syz.1.673'. [ 202.213036][ T8586] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 203.012309][ T8618] hsr0: entered promiscuous mode [ 203.082649][ T8623] netlink: 34 bytes leftover after parsing attributes in process `syz.1.687'. [ 203.435230][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 203.744707][ T8660] netlink: 'syz.2.696': attribute type 39 has an invalid length. [ 204.874631][ T8711] __nla_validate_parse: 3 callbacks suppressed [ 204.874648][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 205.045312][ T8712] lo speed is unknown, defaulting to 1000 [ 205.203847][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 205.294509][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 205.669191][ T8726] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 205.697005][ T8737] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 205.747149][ T8730] macvlan2: entered promiscuous mode [ 205.779631][ T8730] macvlan2: entered allmulticast mode [ 205.811332][ T8730] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 206.162267][ T8760] tipc: Enabling of bearer rejected, failed to enable media [ 206.210787][ T8762] sctp: [Deprecated]: syz.1.718 (pid 8762) Use of int in maxseg socket option. [ 206.210787][ T8762] Use struct sctp_assoc_value instead [ 206.330837][ T8769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.962332][ T8796] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 207.337102][ T8825] netlink: 'syz.4.734': attribute type 3 has an invalid length. [ 207.355572][ T8820] syz_tun: entered allmulticast mode [ 207.362357][ T8825] netlink: 'syz.4.734': attribute type 3 has an invalid length. [ 207.397915][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 207.437598][ T43] IPVS: starting estimator thread 0... [ 207.446823][ T8811] raw_sendmsg: syz.0.730 forgot to set AF_INET. Fix it! [ 207.489921][ T8808] syz_tun: left allmulticast mode [ 207.547339][ T8831] IPVS: using max 36 ests per chain, 86400 per kthread [ 207.901220][ T8851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.741'. [ 207.949819][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 209.127352][ T8909] netlink: 'syz.1.753': attribute type 21 has an invalid length. [ 209.296517][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'. [ 209.502928][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 209.546445][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 209.561946][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 209.683322][ T8909] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 209.712365][ T8936] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 209.936212][ T8943] geneve2: entered promiscuous mode [ 209.947556][ T8943] geneve2: entered allmulticast mode [ 210.129617][ T8959] __nla_validate_parse: 1 callbacks suppressed [ 210.129635][ T8959] netlink: 68 bytes leftover after parsing attributes in process `syz.4.762'. [ 210.278699][ T8959] rdma_rxe: rxe_newlink: failed to add lo [ 210.303065][ T8959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.337219][ T8965] vlan3: entered promiscuous mode [ 210.342489][ T8965] syz_tun: entered promiscuous mode [ 210.360773][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 210.449582][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.765'. [ 210.521936][ T8970] lo speed is unknown, defaulting to 1000 [ 210.755896][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 210.783481][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 211.227533][ T9002] netlink: 332 bytes leftover after parsing attributes in process `syz.0.775'. [ 211.243843][ T9002] netlink: 'syz.0.775': attribute type 9 has an invalid length. [ 211.253117][ T9002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.775'. [ 211.263622][ T9002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.775'. [ 211.380092][ T9004] netlink: 'syz.1.776': attribute type 2 has an invalid length. [ 211.409926][ T9004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.776'. [ 211.686560][ T9023] netlink: 'syz.3.781': attribute type 8 has an invalid length. [ 211.731712][ T9023] netlink: 'syz.3.781': attribute type 9 has an invalid length. [ 211.798075][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 211.813552][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.065107][ T9035] macsec1: entered promiscuous mode [ 212.074588][ T9035] macsec1: entered allmulticast mode [ 212.093720][ T9035] dummy0: entered allmulticast mode [ 212.104018][ T9035] dummy0: left allmulticast mode [ 212.210274][ T9039] lo speed is unknown, defaulting to 1000 [ 212.260003][ T9039] lo speed is unknown, defaulting to 1000 [ 212.339365][ T9044] bridge0: port 3(macvlan0) entered blocking state [ 212.346549][ T9044] bridge0: port 3(macvlan0) entered disabled state [ 212.354747][ T9044] macvlan0: entered allmulticast mode [ 212.360363][ T9044] veth1_vlan: entered allmulticast mode [ 212.379752][ T9044] macvlan0: entered promiscuous mode [ 212.393552][ T9044] bridge0: port 3(macvlan0) entered blocking state [ 212.401749][ T9044] bridge0: port 3(macvlan0) entered forwarding state [ 212.428881][ T9039] lo speed is unknown, defaulting to 1000 [ 212.454701][ T9039] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 212.486071][ T9039] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 212.505515][ T9039] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 212.585620][ T9039] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 212.678207][ T9039] lo speed is unknown, defaulting to 1000 [ 212.690600][ T9039] lo speed is unknown, defaulting to 1000 [ 212.710623][ T9039] lo speed is unknown, defaulting to 1000 [ 212.743036][ T9039] lo speed is unknown, defaulting to 1000 [ 212.782552][ T9039] lo speed is unknown, defaulting to 1000 [ 212.866337][ T9066] syzkaller0: entered promiscuous mode [ 212.875732][ T9066] syzkaller0: entered allmulticast mode [ 213.334451][ T9102] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 213.913023][ T9115] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 213.933948][ T9117] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 213.952139][ T9117] openvswitch: netlink: Message has 512 unknown bytes. [ 214.273532][ T9127] syzkaller1: entered allmulticast mode [ 214.954344][ T9168] netlink: 'syz.0.825': attribute type 32 has an invalid length. [ 215.105584][ T9168] bond3: option coupled_control: invalid value (255) [ 215.136794][ T9168] bond3 (unregistering): Released all slaves [ 215.820046][ T9205] syzkaller0: entered promiscuous mode [ 215.835800][ T9205] syzkaller0: entered allmulticast mode [ 215.921565][ T9212] __nla_validate_parse: 15 callbacks suppressed [ 215.921581][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 215.954775][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 216.002151][ T9202] lo speed is unknown, defaulting to 1000 [ 216.297909][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 216.446914][ T9241] sctp: [Deprecated]: syz.0.843 (pid 9241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.446914][ T9241] Use struct sctp_sack_info instead [ 216.733448][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 217.151655][ T9272] netlink: 164 bytes leftover after parsing attributes in process `syz.3.849'. [ 217.183780][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'. [ 217.221857][ T9202] lo speed is unknown, defaulting to 1000 [ 217.404558][ T9275] bridge_slave_0: left allmulticast mode [ 217.438268][ T9275] bridge_slave_0: left promiscuous mode [ 217.460164][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.474669][ T9275] bridge_slave_1: left allmulticast mode [ 217.482664][ T9275] bridge_slave_1: left promiscuous mode [ 217.489193][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.500102][ T9275] bond0: (slave bond_slave_0): Releasing backup interface [ 217.513421][ T9275] bond0: (slave bond_slave_1): Releasing backup interface [ 217.529279][ T9275] team0: Port device team_slave_0 removed [ 217.542293][ T9275] team0: Port device team_slave_1 removed [ 217.550113][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.557594][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.566402][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.573789][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.582882][ T9275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.634224][ T9282] netlink: 'syz.0.854': attribute type 3 has an invalid length. [ 217.769270][ T9287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.856'. [ 217.815061][ T9287] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 218.414249][ T9311] Can't find ip_set type bitmap:ip [ 218.528524][ T9319] vlan2: entered allmulticast mode [ 218.544031][ T9319] bond0: entered allmulticast mode [ 218.651568][ T9321] ip6gre1: entered promiscuous mode [ 218.660461][ T9321] ip6gre1: entered allmulticast mode [ 218.673798][ T9323] netlink: 128 bytes leftover after parsing attributes in process `syz.3.867'. [ 218.684019][ T9323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.704354][ T9326] netlink: 72 bytes leftover after parsing attributes in process `syz.2.869'. [ 218.927025][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.873'. [ 219.454067][ T9363] veth1_macvtap: left promiscuous mode [ 219.503418][ T9363] veth1_macvtap: entered promiscuous mode [ 219.715103][ T9382] bridge_slave_0: left allmulticast mode [ 219.732444][ T9382] bridge_slave_0: left promiscuous mode [ 219.741809][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.891314][ T9382] bridge_slave_1: left allmulticast mode [ 219.916650][ T9382] bridge_slave_1: left promiscuous mode [ 219.931704][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.009508][ T9382] bond0: (slave bond_slave_0): Releasing backup interface [ 220.022916][ T9382] bond0: (slave bond_slave_1): Releasing backup interface [ 220.043709][ T9382] team0: Port device team_slave_0 removed [ 220.063430][ T9382] team0: Port device team_slave_1 removed [ 220.074547][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.142341][ T9382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.494308][ T9406] xt_hashlimit: size too large, truncated to 1048576 [ 220.872620][ T9423] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 220.915308][ T9423] netlink: 'syz.4.891': attribute type 2 has an invalid length. [ 220.978800][ T9441] syzkaller1: entered promiscuous mode [ 220.993960][ T9441] syzkaller1: entered allmulticast mode [ 221.017724][ T9441] __nla_validate_parse: 5 callbacks suppressed [ 221.017742][ T9441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.901'. [ 221.093189][ T9441] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 221.782875][ T9479] netlink: 67 bytes leftover after parsing attributes in process `syz.3.907'. [ 221.917264][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.928924][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.940470][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.991740][ T9478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.002474][ T9478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.017492][ T9478] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.064477][ T1014] lo speed is unknown, defaulting to 1000 [ 222.091198][ T1014] syz2: Port: 1 Link ACTIVE [ 222.134371][ T9479] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.360528][ T9502] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 222.378892][ T9502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.915'. [ 222.458657][ T9502] bond0: entered promiscuous mode [ 222.464558][ T9502] bridge0: port 1(bond0) entered blocking state [ 222.477841][ T9502] bridge0: port 1(bond0) entered disabled state [ 222.489614][ T9502] bond0: entered allmulticast mode [ 222.497713][ T9506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.525065][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.916'. [ 222.648839][ T9510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.918'. [ 222.714480][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.918'. [ 223.271444][ T9543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.927'. [ 223.322507][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.927'. [ 224.097125][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 224.111192][ T9590] syzkaller0: entered promiscuous mode [ 224.123605][ T9590] syzkaller0: entered allmulticast mode [ 224.321141][ T9601] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 224.333856][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 224.560920][ T9608] bond3: (slave veth5): Enslaving as an active interface with a down link [ 224.699645][ T9601] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 225.221621][ T9638] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 225.481807][ T9656] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 226.323140][ T9700] netlink: 'syz.4.970': attribute type 9 has an invalid length. [ 226.776667][ T9726] __nla_validate_parse: 3 callbacks suppressed [ 226.776685][ T9726] netlink: 156 bytes leftover after parsing attributes in process `syz.1.978'. [ 226.921969][ T9736] netlink: 64 bytes leftover after parsing attributes in process `syz.4.980'. [ 226.951854][ T9746] syzkaller1: entered promiscuous mode [ 226.961453][ T9746] syzkaller1: entered allmulticast mode [ 226.974959][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'. [ 227.163314][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.984'. [ 227.927246][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 227.933576][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.969514][ T9745] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.986724][ T9745] dummy0: left promiscuous mode [ 228.006636][ T9745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.074856][ T9745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.085568][ T9745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.099190][ T9745] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 228.446438][ T9766] bond7: entered promiscuous mode [ 228.451845][ T9766] bond7: entered allmulticast mode [ 228.499896][ T9784] netlink: 260 bytes leftover after parsing attributes in process `syz.0.989'. [ 230.112733][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'. [ 231.830834][ T9867] bridge0: entered allmulticast mode [ 231.936920][ T9867] pim6reg: entered allmulticast mode [ 232.128751][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 232.208311][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1009'. [ 232.436587][ T9882] syzkaller0: entered promiscuous mode [ 232.479778][ T9882] syzkaller0: entered allmulticast mode [ 232.512207][ T9891] netlink: 'syz.4.1016': attribute type 30 has an invalid length. [ 232.585258][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 232.612885][ T9882] syzkaller0: mtu less than device minimum [ 232.961402][ T9891] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 233.116584][ T9909] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 233.193562][ T9891] bond3 (unregistering): Released all slaves [ 233.909703][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 234.001252][ T9938] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1022'. [ 234.169619][ T6381] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.223504][ T6381] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.293250][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1022'. [ 234.337983][ T6381] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.369119][ T6381] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.403543][ T9949] gretap1: entered allmulticast mode [ 234.416824][ T9944] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 234.504775][ T9951] gretap1: entered allmulticast mode [ 234.791552][ T9956] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 235.049435][ T9956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.156233][ T9960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.208927][ T9960] bond4: (slave nlmon0): The slave device specified does not support setting the MAC address [ 235.252443][ T9960] bond4: (slave nlmon0): Error -95 calling set_mac_address [ 235.308732][ T9974] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 235.435808][ T9974] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 235.506309][ T9974] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 235.764862][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 235.953646][ T9978] lo speed is unknown, defaulting to 1000 [ 236.730238][T10000] FAULT_INJECTION: forcing a failure. [ 236.730238][T10000] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 236.744348][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.0.1039 Not tainted syzkaller #0 PREEMPT(full) [ 236.744382][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 236.744400][T10000] Call Trace: [ 236.744407][T10000] [ 236.744415][T10000] dump_stack_lvl+0xe8/0x150 [ 236.744459][T10000] should_fail_ex+0x40c/0x560 [ 236.744489][T10000] prepare_alloc_pages+0x230/0x650 [ 236.744521][T10000] __alloc_frozen_pages_noprof+0x12f/0x380 [ 236.744551][T10000] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.744580][T10000] ? __pfx_policy_nodemask+0x10/0x10 [ 236.744607][T10000] ? __schedule+0x17ef/0x56c0 [ 236.744643][T10000] alloc_pages_mpol+0x212/0x380 [ 236.744675][T10000] alloc_pages_noprof+0xac/0x2a0 [ 236.744703][T10000] pte_alloc_one+0x22/0x370 [ 236.744725][T10000] do_pte_missing+0x13c8/0x34b0 [ 236.744754][T10000] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 236.744789][T10000] handle_mm_fault+0x1b36/0x3080 [ 236.744820][T10000] ? handle_mm_fault+0xec/0x3080 [ 236.744848][T10000] ? __pfx_handle_mm_fault+0x10/0x10 [ 236.744887][T10000] ? lock_mm_and_find_vma+0xa7/0x340 [ 236.744913][T10000] do_user_addr_fault+0x744/0x1340 [ 236.744953][T10000] exc_page_fault+0x6a/0xc0 [ 236.744974][T10000] asm_exc_page_fault+0x26/0x30 [ 236.744992][T10000] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 236.745018][T10000] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 236.745033][T10000] RSP: 0018:ffffc900067174f8 EFLAGS: 00050202 [ 236.745055][T10000] RAX: 00007ffffffff001 RBX: 0000000000000028 RCX: 0000000000000028 [ 236.745067][T10000] RDX: 0000000000000001 RSI: 0000200000001280 RDI: ffffc90006717880 [ 236.745078][T10000] RBP: ffffc90006717cd0 R08: ffffc900067178a7 R09: 1ffff92000ce2f14 [ 236.745091][T10000] R10: dffffc0000000000 R11: fffff52000ce2f15 R12: 00000000ffffffff [ 236.745104][T10000] R13: 000000000000011c R14: ffffc90006717880 R15: 0000200000001280 [ 236.745133][T10000] _copy_from_user+0x7a/0xb0 [ 236.745161][T10000] mptcp_getsockopt+0x12a6/0x1ed0 [ 236.745197][T10000] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 236.745221][T10000] ? process_measurement+0x7b2/0x1c10 [ 236.745250][T10000] ? up_write+0x19f/0x4a0 [ 236.745274][T10000] ? process_measurement+0x14fb/0x1c10 [ 236.745302][T10000] ? kasan_quarantine_put+0xbb/0x1f0 [ 236.745327][T10000] ? __lock_acquire+0x683/0x2cf0 [ 236.745363][T10000] ? __lock_acquire+0x683/0x2cf0 [ 236.745396][T10000] ? unwind_next_frame+0x8f/0x2550 [ 236.745417][T10000] ? __lock_acquire+0x683/0x2cf0 [ 236.745461][T10000] ? aa_file_perm+0x18b/0x15f0 [ 236.745484][T10000] ? aa_label_sk_perm+0x532/0x6e0 [ 236.745519][T10000] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 236.745547][T10000] ? _parse_integer_limit+0x192/0x1e0 [ 236.745575][T10000] ? __lock_acquire+0x683/0x2cf0 [ 236.745600][T10000] ? kstrtouint+0x6e/0xe0 [ 236.745638][T10000] ? __might_fault+0xaf/0x130 [ 236.745659][T10000] ? __might_fault+0xaf/0x130 [ 236.745694][T10000] ? sock_common_getsockopt+0x2d/0xb0 [ 236.745719][T10000] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 236.745744][T10000] do_sock_getsockopt+0x51d/0x7e0 [ 236.745769][T10000] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 236.745804][T10000] ? __fget_files+0x3a2/0x420 [ 236.745827][T10000] ? __fget_files+0x2a/0x420 [ 236.745855][T10000] __x64_sys_getsockopt+0x1a4/0x240 [ 236.745896][T10000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.745917][T10000] do_syscall_64+0x174/0x580 [ 236.745935][T10000] ? trace_irq_disable+0x3b/0x140 [ 236.745958][T10000] ? clear_bhb_loop+0x40/0x90 [ 236.745980][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.745998][T10000] RIP: 0033:0x7f4dffb9de99 [ 236.746022][T10000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.746037][T10000] RSP: 002b:00007f4e00a0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 236.746055][T10000] RAX: ffffffffffffffda RBX: 00007f4dffe26180 RCX: 00007f4dffb9de99 [ 236.746068][T10000] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000005 [ 236.746078][T10000] RBP: 00007f4e00a0c090 R08: 0000200000000200 R09: 0000000000000000 [ 236.746090][T10000] R10: 0000200000001280 R11: 0000000000000246 R12: 0000000000000001 [ 236.746101][T10000] R13: 00007f4dffe26218 R14: 00007f4dffe26180 R15: 00007ffd1abac328 [ 236.746131][T10000] [ 237.228430][T10014] netlink: 'syz.2.1043': attribute type 1 has an invalid length. [ 237.360357][T10014] bond5: entered promiscuous mode [ 237.365992][T10014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.623376][ T9978] lo speed is unknown, defaulting to 1000 [ 237.702227][T10020] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1046'. [ 237.752229][T10014] netlink: 'syz.2.1043': attribute type 5 has an invalid length. [ 237.931309][T10020] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1046'. [ 237.979684][T10014] macvtap1: entered allmulticast mode [ 238.731436][T10055] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 238.824058][T10055] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 238.896420][T10055] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 240.148179][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1059'. [ 240.427901][T10092] SET target dimension over the limit! [ 240.479736][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1061'. [ 240.698507][T10097] vxcan0: entered allmulticast mode [ 241.824498][T10129] syzkaller1: entered promiscuous mode [ 241.871938][T10129] syzkaller1: entered allmulticast mode [ 242.077568][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1067'. [ 242.218999][T10143] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 243.113519][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 243.139561][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 243.177857][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 243.567742][T10189] netlink: 'syz.4.1074': attribute type 9 has an invalid length. [ 243.668895][T10186] xt_l2tp: invalid flags combination: 8 [ 244.202586][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.210362][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.403551][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.665736][T10169] macsec1: left promiscuous mode [ 244.699523][T10169] bond1: left promiscuous mode [ 244.731768][T10169] bond2: left promiscuous mode [ 244.745638][T10169] bridge1: left promiscuous mode [ 244.756867][T10169] bond2: left allmulticast mode [ 244.773125][T10169] bridge1: left allmulticast mode [ 244.795865][T10169] geneve2: left promiscuous mode [ 244.811333][T10169] geneve2: left allmulticast mode [ 244.904179][T10202] gre0: entered promiscuous mode [ 244.934375][T10202] gre0: entered allmulticast mode [ 244.963114][ T3297] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.008487][ T3297] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.322209][ T3297] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.390279][ T3297] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.436362][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 245.454476][ T3297] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.499591][ T3297] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.513799][T10230] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1083'. [ 245.535710][T10233] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1084'. [ 245.548199][ T3297] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.563556][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 245.591171][ T3297] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.664593][T10235] netlink: 'syz.2.1085': attribute type 62 has an invalid length. [ 245.729836][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 246.140884][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 247.166686][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1096'. [ 247.181183][T10271] gre0: left promiscuous mode [ 247.208002][T10271] gre0: left allmulticast mode [ 248.037812][T10271] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 248.056789][T10271] batadv1: left promiscuous mode [ 248.067061][T10271] batadv1: left allmulticast mode [ 248.089696][T10271] bond5: left promiscuous mode [ 248.100670][T10271] macvtap1: left allmulticast mode [ 248.153972][T10290] lo speed is unknown, defaulting to 1000 [ 248.394694][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 248.512504][T10290] lo speed is unknown, defaulting to 1000 [ 255.647698][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.023796][T10337] netlink: 'syz.3.1111': attribute type 3 has an invalid length. [ 279.045560][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 279.331000][T10344] syzkaller0: entered promiscuous mode [ 279.347287][T10344] syzkaller0: entered allmulticast mode [ 279.517432][T10365] syz_tun: entered allmulticast mode [ 279.530278][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 279.570633][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 279.584792][T10366] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 279.595707][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'. [ 279.621342][T10368] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1121'. [ 281.620684][T10375] sctp: [Deprecated]: syz.1.1122 (pid 10375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.620684][T10375] Use struct sctp_sack_info instead [ 281.637391][T10359] syz_tun: left allmulticast mode [ 281.710667][T10380] netlink: 'syz.2.1123': attribute type 4 has an invalid length. [ 281.751501][T10380] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1123'. [ 281.838493][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 281.865208][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 281.884290][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 281.936666][T10388] geneve3: entered promiscuous mode [ 281.949037][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 281.958716][T10388] geneve3: entered allmulticast mode [ 282.101611][T10403] ±ÿ: renamed from lo (while UP) [ 282.330973][T10410] syzkaller0: entered promiscuous mode [ 282.337194][T10410] syzkaller0: entered allmulticast mode [ 282.725313][T10438] block nbd2: not configured, cannot reconfigure [ 282.865060][T10444] sctp: [Deprecated]: syz.2.1142 (pid 10444) Use of int in max_burst socket option. [ 282.865060][T10444] Use struct sctp_assoc_value instead [ 283.248366][T10464] IPVS: set_ctl: invalid protocol: 149 0.0.0.0:13834 [ 285.902469][T10506] bond6: invalid NS target :: specified for addition [ 285.909447][T10506] bond6: option ns_ip6_target: invalid value (18446744073709551615) [ 285.921989][T10506] bond6 (unregistering): Released all slaves [ 285.943205][T10510] __nla_validate_parse: 4 callbacks suppressed [ 285.943223][T10510] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1160'. [ 286.003905][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.012835][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.121790][T10513] bond4: entered promiscuous mode [ 286.483996][T10533] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 286.560297][T10533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.646071][T10533] tipc: Enabled bearer , priority 10 [ 286.684655][T10533] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1167'. [ 286.744643][T10550] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 286.765031][T10533] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 286.793345][T10533] bond3: (slave batadv1): making interface the new active one [ 286.822757][T10533] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 287.274020][T10573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1180'. [ 287.744025][T10594] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.1184'. [ 287.755279][T10591] x_tables: ip_tables: osf match: only valid for protocol 6 [ 287.783844][T10594] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 287.939176][T10591] bond5: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 287.999578][T10591] bond5 (unregistering): Released all slaves [ 288.238914][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 288.583029][T10642] xt_hashlimit: size too large, truncated to 1048576 [ 288.615827][T10642] xt_hashlimit: max too large, truncated to 1048576 [ 288.664174][T10644] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1199'. [ 289.206046][T10673] netlink: 'syz.0.1208': attribute type 2 has an invalid length. [ 289.214891][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 289.261721][T10673] ¿: entered promiscuous mode [ 289.334070][T10682] netlink: 'syz.1.1210': attribute type 13 has an invalid length. [ 289.346549][T10682] netlink: 'syz.1.1210': attribute type 17 has an invalid length. [ 289.387366][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 289.873142][T10708] netlink: 'syz.0.1215': attribute type 3 has an invalid length. [ 289.946675][T10708] netlink: 'syz.0.1215': attribute type 39 has an invalid length. [ 290.332118][T10728] syzkaller0: entered promiscuous mode [ 290.349526][T10728] syzkaller0: entered allmulticast mode [ 290.463351][T10739] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 290.474983][T10739] netlink: 'syz.2.1229': attribute type 2 has an invalid length. [ 290.475126][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'. [ 290.493962][T10738] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 290.576861][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 290.592680][T10736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.723804][T10746] tun0: tun_chr_ioctl cmd 1074025675 [ 290.731335][T10746] tun0: persist enabled [ 290.746249][T10746] tun0: tun_chr_ioctl cmd 1074025675 [ 290.755541][T10746] tun0: persist disabled [ 290.890363][T10759] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.912644][T10759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.921541][T10759] IPv6: NLM_F_CREATE should be set when creating new route [ 290.928966][T10759] IPv6: NLM_F_CREATE should be set when creating new route [ 290.936264][T10759] IPv6: NLM_F_CREATE should be set when creating new route [ 290.953633][T10761] pimreg: entered allmulticast mode [ 290.974825][T10761] pimreg: left allmulticast mode [ 291.606392][T10805] __nla_validate_parse: 3 callbacks suppressed [ 291.606411][T10805] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1248'. [ 291.997170][T10818] syzkaller1: entered promiscuous mode [ 292.002985][T10818] syzkaller1: entered allmulticast mode [ 292.163342][T10827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1257'. [ 292.179423][T10827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1257'. [ 292.196943][T10827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.217605][T10830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.252786][T10827] validate_nla: 5 callbacks suppressed [ 292.252802][T10827] netlink: 'syz.1.1257': attribute type 62 has an invalid length. [ 292.461101][T10842] netlink: 'syz.0.1260': attribute type 9 has an invalid length. [ 292.471021][T10839] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 292.484618][T10841] netlink: 'syz.0.1260': attribute type 9 has an invalid length. [ 292.938484][T10870] bond0: left allmulticast mode [ 292.966967][T10870] bridge0: port 1(bond0) entered disabled state [ 293.001344][T10870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.187846][T10875] netlink: 'syz.0.1270': attribute type 11 has an invalid length. [ 293.233125][T10872] lo speed is unknown, defaulting to 1000 [ 293.520834][T10894] netlink: 'syz.3.1276': attribute type 21 has an invalid length. [ 293.536949][T10894] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1276'. [ 293.565170][T10894] netlink: 'syz.3.1276': attribute type 4 has an invalid length. [ 293.650583][T10894] netlink: 'syz.3.1276': attribute type 3 has an invalid length. [ 293.675434][T10894] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1276'. [ 293.748258][T10872] ±ÿ speed is unknown, defaulting to 1000 [ 293.808434][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 293.838341][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 293.859706][ T6377] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.067306][ T6377] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.078265][ T6377] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.101996][T10918] team0: Mode changed to "broadcast" [ 294.126121][ T6377] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.630029][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1288'. [ 294.654343][T10936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1288'. [ 294.762467][T10939] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 294.792533][T10939] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 295.096858][T10954] batman_adv: batadv0: Adding interface: gretap1 [ 295.134070][T10954] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.179401][T10954] batman_adv: batadv0: Interface activated: gretap1 [ 295.241052][T10958] team0: Port device xfrm0 added [ 295.457521][T10963] IPVS: persistence engine module ip_vs_pe_ not found [ 295.668234][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 296.027384][T10982] FAULT_INJECTION: forcing a failure. [ 296.027384][T10982] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 296.058304][T10984] IPVS: length: 15 != 8 [ 296.068409][T10982] CPU: 0 UID: 0 PID: 10982 Comm: syz.1.1301 Not tainted syzkaller #0 PREEMPT(full) [ 296.068434][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 296.068444][T10982] Call Trace: [ 296.068451][T10982] [ 296.068459][T10982] dump_stack_lvl+0xe8/0x150 [ 296.068490][T10982] should_fail_ex+0x40c/0x560 [ 296.068524][T10982] _copy_from_iter+0x1d3/0x1660 [ 296.068548][T10982] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 296.068572][T10982] ? rcu_is_watching+0x15/0xb0 [ 296.068599][T10982] ? trace_kmem_cache_alloc+0x29/0xe0 [ 296.068621][T10982] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 296.068642][T10982] ? __pfx__copy_from_iter+0x10/0x10 [ 296.068662][T10982] ? __alloc_skb+0x276/0x7a0 [ 296.068686][T10982] ? __alloc_skb+0x276/0x7a0 [ 296.068717][T10982] ? netlink_sendmsg+0x650/0xb40 [ 296.068736][T10982] ? skb_put+0x112/0x210 [ 296.068765][T10982] netlink_sendmsg+0x6c0/0xb40 [ 296.068794][T10982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.068817][T10982] ? aa_sock_msg_perm+0xf1/0x1b0 [ 296.068841][T10982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.068857][T10982] sock_sendmsg_nosec+0x13a/0x180 [ 296.068884][T10982] ____sys_sendmsg+0x54e/0x850 [ 296.068907][T10982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.068934][T10982] ? import_iovec+0x73/0xa0 [ 296.068963][T10982] ___sys_sendmsg+0x2a5/0x360 [ 296.068982][T10982] ? __lock_acquire+0x683/0x2cf0 [ 296.069010][T10982] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.069059][T10982] ? __fget_files+0x2a/0x420 [ 296.069082][T10982] ? __fget_files+0x3a2/0x420 [ 296.069113][T10982] __x64_sys_sendmsg+0x1b1/0x290 [ 296.069135][T10982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.069170][T10982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.069191][T10982] do_syscall_64+0x174/0x580 [ 296.069209][T10982] ? trace_irq_disable+0x3b/0x140 [ 296.069265][T10982] ? clear_bhb_loop+0x40/0x90 [ 296.069289][T10982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.069330][T10982] RIP: 0033:0x7f9573d9de99 [ 296.069347][T10982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.069362][T10982] RSP: 002b:00007f9574bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.069387][T10982] RAX: ffffffffffffffda RBX: 00007f9574025fa0 RCX: 00007f9573d9de99 [ 296.069400][T10982] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 296.069411][T10982] RBP: 00007f9574bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 296.069422][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.069432][T10982] R13: 00007f9574026038 R14: 00007f9574025fa0 R15: 00007ffce7655038 [ 296.069462][T10982] [ 296.439877][T10989] sock: sock_set_timeout: `syz.2.1305' (pid 10989) tries to set negative timeout [ 296.589242][T10996] erspan0: left promiscuous mode [ 296.594380][T10996] erspan0: left allmulticast mode [ 296.737875][T11006] __nla_validate_parse: 2 callbacks suppressed [ 296.737894][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 296.822936][T11014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1313'. [ 296.902960][T10996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.914746][T10996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.962353][T10996] macvtap1: left allmulticast mode [ 296.969769][T10996] macvtap2: left allmulticast mode [ 296.978385][T10996] vxlan0: left promiscuous mode [ 296.983308][T10996] vxlan0: left allmulticast mode [ 296.991440][T10996] vxlan1: left promiscuous mode [ 296.996453][T10996] vxlan1: left allmulticast mode [ 297.019147][T10996] ip6gre1: left promiscuous mode [ 297.024159][T10996] ip6gre1: left allmulticast mode [ 297.032797][T10996] bond4: left promiscuous mode [ 297.067542][T10996] batman_adv: batadv0: Interface deactivated: gretap1 [ 297.084834][T10211] lo speed is unknown, defaulting to 1000 [ 297.102038][T10211] syz1: Port: 1 Link DOWN [ 297.135189][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 297.144612][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 297.157489][T11017] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1312'. [ 297.194786][ T6377] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.225096][ T6377] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.244452][T10213] lo speed is unknown, defaulting to 1000 [ 297.263600][ T6377] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.292097][ T6377] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.329758][ T6377] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.351717][ T6377] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.385029][ T6377] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.418827][ T6377] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.524035][T11037] netlink: 'syz.0.1321': attribute type 2 has an invalid length. [ 297.556375][T11035] 8021q: VLANs not supported on lo [ 297.611787][T11038] x_tables: duplicate underflow at hook 4 [ 297.682822][T11037] : entered promiscuous mode [ 297.722926][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 297.739888][T11045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.150624][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1330'. [ 298.253799][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 298.263604][T11067] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 298.550669][T11067] bridge4: entered promiscuous mode [ 298.571935][T11089] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1334'. [ 298.767369][T11100] netlink: 279 bytes leftover after parsing attributes in process `syz.2.1338'. [ 298.790522][T11100] veth0_to_bond: default FDB implementation only supports local addresses [ 298.834049][T11100] pim6reg99999999: entered allmulticast mode [ 299.307017][T11128] syzkaller0: refused to change device tx_queue_len [ 299.628129][T11151] syzkaller0: entered promiscuous mode [ 299.635687][T11151] syzkaller0: entered allmulticast mode [ 299.765132][T11151] tipc: Started in network mode [ 299.774068][T11151] tipc: Node identity 9289d136ec16, cluster identity 4711 [ 299.782471][T11151] tipc: Enabled bearer , priority 0 [ 299.793167][T11151] tipc: Resetting bearer [ 299.813700][T11150] tipc: Resetting bearer [ 299.847259][T11150] tipc: Disabling bearer [ 300.079498][T11173] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 300.139077][T11173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.364234][T11190] netlink: 'syz.3.1362': attribute type 15 has an invalid length. [ 300.801919][T11210] netlink: 'syz.3.1367': attribute type 9 has an invalid length. [ 301.101700][T11218] netlink: 'syz.3.1369': attribute type 2 has an invalid length. [ 301.227343][T10394] udevd[10394]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.740986][T11248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.861350][T11252] __nla_validate_parse: 14 callbacks suppressed [ 301.861375][T11252] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1381'. [ 301.889225][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 301.974712][T11256] Bluetooth: MGMT ver 1.23 [ 302.013433][T11256] SET target dimension over the limit! [ 302.034124][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 302.118264][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 302.141219][T11262] veth1_vlan: left allmulticast mode [ 302.199324][T11262] bridge0: port 3(macvlan0) entered disabled state [ 302.253460][T11262] macvlan0 (unregistering): left allmulticast mode [ 302.274910][T11262] bridge0: port 3(macvlan0) entered disabled state [ 302.307781][T11271] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 302.329640][T11271] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1388'. [ 302.346744][T11271] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 302.365947][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 302.440599][T11277] ip6gre1: entered promiscuous mode [ 302.474971][T11277] ip6gre1: entered allmulticast mode [ 302.484214][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.493157][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.505591][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.776353][T11289] sch_fq: defrate 8 ignored. [ 302.836285][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1393'. [ 302.984400][T11299] tipc: Enabled bearer , priority 0 [ 303.010557][T11295] tipc: Resetting bearer [ 303.246128][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.485666][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.367532][T11295] tipc: Disabling bearer [ 305.654809][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 305.696332][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1399'. [ 305.943847][T11309] bond0: left promiscuous mode [ 305.976497][T11309] dummy0: left promiscuous mode [ 306.320834][T11309] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 306.334368][T11309] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 306.506205][ T24] ±ÿ speed is unknown, defaulting to 1000 [ 306.511982][ T24] syz2: Port: 1 Link DOWN [ 306.558045][ T6377] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.595517][ T6377] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.618962][ T6377] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.637171][ T6377] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.685538][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.701346][ T6377] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.718968][ T6377] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.754592][ T6377] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.775664][ T6377] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.901809][T11368] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1412'. [ 307.548420][T11400] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 308.001196][T11413] xfrm1: entered allmulticast mode [ 308.225820][T11427] syzkaller0: entered promiscuous mode [ 308.238384][T11427] syzkaller0: entered allmulticast mode [ 308.414378][T11441] smc: removing ib device syz1 [ 308.438719][T11447] xt_ipcomp: unknown flags 1D [ 308.455129][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'. [ 308.513711][T11441] smbdirect: ib_dev[syz1] removed [ 308.548594][ T29] audit: type=1804 audit(1784780398.710:2): pid=11451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1433" name="/newroot/288/cgroup.controllers" dev="tmpfs" ino=1490 res=1 errno=0 [ 308.612919][ T29] audit: type=1800 audit(1784780398.710:3): pid=11451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1433" name="cgroup.controllers" dev="tmpfs" ino=1490 res=0 errno=0 [ 308.955409][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 309.078539][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 309.327988][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1436'. [ 309.603412][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 309.634605][T11486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.644774][T11486] netlink: 'syz.3.1441': attribute type 4 has an invalid length. [ 309.654508][T11486] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1441'. [ 309.669023][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 309.809925][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'. [ 310.294169][T11522] xfrm0: entered allmulticast mode [ 310.580184][T11531] FAULT_INJECTION: forcing a failure. [ 310.580184][T11531] name failslab, interval 1, probability 0, space 0, times 0 [ 310.625463][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.0.1452 Not tainted syzkaller #0 PREEMPT(full) [ 310.625488][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.625511][T11531] Call Trace: [ 310.625519][T11531] [ 310.625527][T11531] dump_stack_lvl+0xe8/0x150 [ 310.625559][T11531] should_fail_ex+0x40c/0x560 [ 310.625586][T11531] should_failslab+0xa8/0x100 [ 310.625615][T11531] __kmalloc_cache_noprof+0xa8/0x660 [ 310.625639][T11531] ? alloc_netdev_mqs+0xc2e/0x12b0 [ 310.625660][T11531] ? alloc_netdev_mqs+0xc2e/0x12b0 [ 310.625682][T11531] ? __xdp_rxq_info_reg+0x171/0x280 [ 310.625706][T11531] alloc_netdev_mqs+0xc2e/0x12b0 [ 310.625735][T11531] rtnl_create_link+0x321/0xd70 [ 310.625765][T11531] rtnl_newlink_create+0x258/0x7b0 [ 310.625791][T11531] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 310.625814][T11531] ? __pfx___mutex_lock+0x10/0x10 [ 310.625846][T11531] ? ns_capable+0x89/0xe0 [ 310.625870][T11531] rtnl_newlink+0x166d/0x1c30 [ 310.625920][T11531] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.625948][T11531] ? __lock_acquire+0x683/0x2cf0 [ 310.625980][T11531] ? __lock_acquire+0x683/0x2cf0 [ 310.626008][T11531] ? __lock_acquire+0x683/0x2cf0 [ 310.626040][T11531] ? unwind_next_frame+0x8f/0x2550 [ 310.626066][T11531] ? is_bpf_text_address+0x26/0x2b0 [ 310.626104][T11531] ? is_bpf_text_address+0x26/0x2b0 [ 310.626134][T11531] ? __lock_acquire+0x683/0x2cf0 [ 310.626161][T11531] ? kernel_text_address+0xa5/0xe0 [ 310.626190][T11531] ? __kernel_text_address+0xd/0x30 [ 310.626215][T11531] ? unwind_get_return_address+0x4d/0x90 [ 310.626234][T11531] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.626256][T11531] ? arch_stack_walk+0xfb/0x150 [ 310.626285][T11531] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 310.626328][T11531] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.626354][T11531] rtnetlink_rcv_msg+0x802/0xc00 [ 310.626379][T11531] ? netlink_sendmsg+0x5d4/0xb40 [ 310.626402][T11531] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 310.626428][T11531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.626456][T11531] ? __lock_acquire+0x683/0x2cf0 [ 310.626493][T11531] netlink_rcv_skb+0x226/0x4a0 [ 310.626514][T11531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.626543][T11531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.626576][T11531] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.626595][T11531] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.626620][T11531] netlink_unicast+0x7bb/0x940 [ 310.626659][T11531] netlink_sendmsg+0x813/0xb40 [ 310.626689][T11531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.626713][T11531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.626740][T11531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.626759][T11531] sock_sendmsg_nosec+0x13a/0x180 [ 310.626787][T11531] ____sys_sendmsg+0x54e/0x850 [ 310.626812][T11531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.626840][T11531] ? import_iovec+0x73/0xa0 [ 310.626868][T11531] ___sys_sendmsg+0x2a5/0x360 [ 310.626889][T11531] ? __lock_acquire+0x683/0x2cf0 [ 310.626914][T11531] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.626960][T11531] ? __fget_files+0x2a/0x420 [ 310.626980][T11531] ? __fget_files+0x3a2/0x420 [ 310.627014][T11531] __x64_sys_sendmsg+0x1b1/0x290 [ 310.627033][T11531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.627068][T11531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.627088][T11531] do_syscall_64+0x174/0x580 [ 310.627105][T11531] ? trace_irq_disable+0x3b/0x140 [ 310.627124][T11531] ? clear_bhb_loop+0x40/0x90 [ 310.627144][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.627160][T11531] RIP: 0033:0x7f4dffb9de99 [ 310.627176][T11531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.627189][T11531] RSP: 002b:00007f4e00a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.627207][T11531] RAX: ffffffffffffffda RBX: 00007f4dffe25fa0 RCX: 00007f4dffb9de99 [ 310.627218][T11531] RDX: 00000000040008c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 310.627230][T11531] RBP: 00007f4e00a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 310.627240][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.627249][T11531] R13: 00007f4dffe26038 R14: 00007f4dffe25fa0 R15: 00007ffd1abac328 [ 310.627276][T11531] [ 311.359554][T11541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 311.664216][T11555] netlink: 'syz.4.1460': attribute type 5 has an invalid length. [ 311.703149][T11555] geneve3: entered promiscuous mode [ 311.724839][T11555] geneve3: entered allmulticast mode [ 311.781805][ T6377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 56507 - 0 [ 311.799030][ T6377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 56507 - 0 [ 311.878623][ T6377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 56507 - 0 [ 311.904276][ T6377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 56507 - 0 [ 311.917715][T11574] __nla_validate_parse: 4 callbacks suppressed [ 311.917735][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1463'. [ 311.997667][T11577] ±ÿ speed is unknown, defaulting to 1000 [ 312.064067][T11582] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1467'. [ 312.079028][T11583] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1467'. [ 312.287639][T11600] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 312.296467][T11601] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 312.430969][T11600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.549121][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'. [ 312.627542][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 312.654449][T11619] netlink: 'syz.1.1477': attribute type 1 has an invalid length. [ 312.728175][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 312.739867][T11625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1480'. [ 312.749548][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 312.761196][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1476'. [ 312.964074][T11619] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.544151][T11675] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 313.568761][T11678] netlink: 'syz.2.1487': attribute type 4 has an invalid length. [ 313.583953][T11675] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 313.617415][T11678] netlink: 'syz.2.1487': attribute type 4 has an invalid length. [ 313.857004][T11696] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 313.902035][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 314.359034][T11730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.730614][T11749] xt_hashlimit: size too large, truncated to 1048576 [ 315.111263][T11775] IPv6: addrconf: prefix option has invalid lifetime [ 315.165529][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 315.421822][T11788] syzkaller1: entered promiscuous mode [ 315.434569][T11788] syzkaller1: entered allmulticast mode [ 315.964169][T11814] x_tables: unsorted entry at hook 2 [ 316.435061][T11826] syzkaller0: entered promiscuous mode [ 316.440954][T11826] syzkaller0: entered allmulticast mode [ 316.671952][T11835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.782115][T11837] netlink: 'syz.0.1534': attribute type 12 has an invalid length. [ 316.790367][T11837] netlink: 'syz.0.1534': attribute type 29 has an invalid length. [ 316.953092][T11844] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 316.966369][T11844] bond11 (unregistering): Released all slaves [ 317.075862][T11851] syzkaller0: entered promiscuous mode [ 317.097824][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.105160][T11851] syzkaller0: entered allmulticast mode [ 317.383722][T11861] __nla_validate_parse: 20 callbacks suppressed [ 317.383739][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 317.593178][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 317.605229][T11878] unsupported nla_type 216 [ 317.622481][T11880] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1546'. [ 317.652761][T11880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1546'. [ 317.741019][T11888] netlink: 'syz.4.1551': attribute type 10 has an invalid length. [ 317.784082][T11888] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 317.792338][T11890] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 317.878750][T11890] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.896173][T11893] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 317.923845][T11893] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 318.086237][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 318.399348][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 318.751534][T11944] netlink: 'syz.3.1566': attribute type 1 has an invalid length. [ 318.808588][T11944] bond5: entered promiscuous mode [ 318.813909][T11944] bond5: entered allmulticast mode [ 318.826698][T11944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.945900][T11955] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 319.194953][T11955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.291844][T11961] vlan2: entered allmulticast mode [ 319.307951][T11961] bond6: entered allmulticast mode [ 319.349636][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 319.374350][T11969] bond6: (slave geneve4): making interface the new active one [ 319.382201][T11969] geneve4: entered allmulticast mode [ 319.391322][T11969] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 319.415299][ T47] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.586413][ T47] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.728638][ T47] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 319.755001][ T47] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 321.560457][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 322.127534][T12049] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 322.276134][T12054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1595'. [ 322.453240][T12051] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 322.512704][T12054] netlink: 'syz.0.1595': attribute type 1 has an invalid length. [ 322.566785][T12054] netlink: 'syz.0.1595': attribute type 2 has an invalid length. [ 322.644947][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'. [ 322.704437][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 322.774716][T12070] netlink: 'syz.1.1600': attribute type 3 has an invalid length. [ 322.812009][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'. [ 322.846754][T12070] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 322.897876][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 323.004578][T12065] 8021q: adding VLAN 0 to HW filter on device bond11 [ 323.059674][T12069] bond11 (unregistering): Released all slaves [ 324.802852][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'. [ 324.833132][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1607'. [ 324.851727][T12089] tipc: Enabling of bearer <–dp:syx2> rejected, media not registered [ 324.896990][T12085] vlan3: entered promiscuous mode [ 324.907983][T12085] veth1: entered promiscuous mode [ 325.323745][T12105] xt_HMARK: proto mask must be zero with L3 mode [ 325.780862][T12123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1614'. [ 327.418579][T12138] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 327.676177][T12138] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1618'. [ 332.453248][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.095356][ C0] sched: DL replenish lagged too much [ 365.731939][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.829771][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.499943][ T5639] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 387.591534][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.810098][T12156] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 403.297885][ T5630] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 408.154208][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.526905][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.713792][T12161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.017520][T12161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.804018][T12161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 416.194872][T12161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.648346][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 416.786208][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.107828][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.208681][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.293116][ T5639] Bluetooth: hci6: command tx timeout [ 417.703617][T12175] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.023867][T12175] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.784412][T12175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.861724][T12175] Bluetooth: hci6: command tx timeout [ 420.784601][T12174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.866710][T12174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.905900][ T5630] Bluetooth: hci6: command tx timeout [ 424.564743][ T5630] Bluetooth: hci6: command tx timeout [ 434.848963][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.505156][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.640404][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.885556][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 437.243054][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.352761][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.714637][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 438.170554][T12161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 438.210248][T12161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.299051][T12161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.548791][T12161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.783406][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.911254][T12161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.101469][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.151796][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.890981][ T5630] Bluetooth: hci5: command tx timeout [ 441.952736][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.837162][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.145421][ T5630] Bluetooth: hci5: command tx timeout [ 445.150906][ T5630] Bluetooth: hci0: command tx timeout [ 445.543035][T12161] Bluetooth: hci2: command tx timeout [ 447.799395][T12161] Bluetooth: hci0: command tx timeout [ 447.804838][T12161] Bluetooth: hci5: command tx timeout [ 447.819728][ T5630] Bluetooth: hci2: command tx timeout [ 449.964205][T12161] Bluetooth: hci5: command tx timeout [ 449.978592][T12161] Bluetooth: hci0: command tx timeout [ 449.984143][T12161] Bluetooth: hci2: command tx timeout [ 454.204892][ T5630] Bluetooth: hci2: command tx timeout [ 454.219200][ T5630] Bluetooth: hci0: command tx timeout [ 461.473368][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.745866][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.852505][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.030310][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.100519][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.080073][T12161] Bluetooth: hci1: command tx timeout [ 467.816687][T12161] Bluetooth: hci1: command tx timeout [ 470.148626][ T5630] Bluetooth: hci1: command tx timeout [ 472.300175][T12161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.359445][T12161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.440133][T12161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.538131][T12161] Bluetooth: hci1: command tx timeout [ 472.982816][T12161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.821667][T12161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.254580][T12175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.451354][T12174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.500663][T12174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.555577][T12174] Bluetooth: hci3: command tx timeout [ 482.594244][T12174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.656258][T12174] Bluetooth: hci3: command tx timeout [ 482.821509][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.184008][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 484.386980][T12175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 484.452880][T12175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 484.506326][T12175] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 484.681339][T12214] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 484.701016][T12175] Bluetooth: hci3: command tx timeout [ 484.762397][T12214] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 484.934904][T12214] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 485.113757][T12214] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 485.192526][T12175] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 485.490367][T12161] Bluetooth: hci4: command tx timeout [ 485.962413][T12175] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 486.812963][T12161] Bluetooth: hci3: command tx timeout [ 487.666810][T12174] Bluetooth: hci4: command tx timeout [ 487.751193][T12174] Bluetooth: hci8: command tx timeout [ 488.564764][T12174] Bluetooth: hci7: command tx timeout [ 489.847733][T12174] Bluetooth: hci4: command tx timeout [ 489.861322][T12174] Bluetooth: hci8: command tx timeout [ 490.619165][T12175] Bluetooth: hci7: command tx timeout [ 491.972344][T12175] Bluetooth: hci8: command tx timeout [ 491.973472][T12174] Bluetooth: hci4: command tx timeout [ 492.854805][T12174] Bluetooth: hci7: command tx timeout [ 494.067603][T12174] Bluetooth: hci8: command tx timeout [ 494.937136][T12174] Bluetooth: hci7: command tx timeout [ 501.778528][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.451428][T12161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 517.501264][T12161] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 517.635011][T12161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 518.222331][T12161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.413768][T12174] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 519.782867][T12174] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.954373][T12237] Bluetooth: hci2: Opcode 0x0c03 failed: -4 [ 522.396217][T12175] Bluetooth: hci5: command tx timeout [ 525.348652][T12175] Bluetooth: hci5: command tx timeout [ 528.269397][T12175] Bluetooth: hci5: command tx timeout [ 529.788860][T12174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 529.877974][T12174] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 530.323695][T12174] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 530.608763][T12174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 530.703853][T12174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.939153][T12174] Bluetooth: hci5: command tx timeout [ 534.379872][T12214] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.477165][T12175] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 534.742809][T12175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.802672][T12175] Bluetooth: hci2: command tx timeout [ 535.383579][T12175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 535.473882][T12175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 536.207307][T12175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 536.398452][T12175] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 537.012634][T12175] Bluetooth: hci2: command tx timeout [ 539.093964][T12175] Bluetooth: hci6: command tx timeout [ 539.109763][T12214] Bluetooth: hci2: command tx timeout [ 539.735881][ T7473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.266874][T12214] Bluetooth: hci2: command tx timeout [ 541.272319][T12214] Bluetooth: hci6: command tx timeout [ 541.961548][T12175] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 542.037491][T12175] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 542.089715][T12175] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 542.492471][T12175] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 542.592954][T12175] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 543.381196][T12161] Bluetooth: hci6: command tx timeout [ 545.430815][T12161] Bluetooth: hci6: command tx timeout [ 548.153702][T12174] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 548.201463][T12174] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 548.247724][T12174] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 548.378606][T12174] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 548.439482][T12174] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 552.319575][T12161] Bluetooth: hci10: command tx timeout [ 552.698511][T12161] Bluetooth: hci9: command tx timeout [ 554.522496][T12161] Bluetooth: hci10: command tx timeout [ 554.776228][T12161] Bluetooth: hci9: command tx timeout [ 556.616473][T12161] Bluetooth: hci10: command tx timeout [ 556.861785][T12161] Bluetooth: hci9: command tx timeout [ 558.693185][T12161] Bluetooth: hci10: command tx timeout [ 558.959820][T12161] Bluetooth: hci9: command tx timeout [ 563.034116][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.193216][T12175] Bluetooth: hci0: command 0x0406 tx timeout [ 569.012893][ T7473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.087708][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.640549][T12175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.758000][T12175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.902901][T12175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.678555][T12175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.883459][T12175] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 583.527421][T12175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 583.619054][T12175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.746052][T12175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.889358][T12175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.249811][T12214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 584.299592][T12214] Bluetooth: hci1: command tx timeout [ 586.413945][T12175] Bluetooth: hci1: command tx timeout [ 588.133935][T12175] Bluetooth: hci3: command tx timeout [ 588.479940][T12175] Bluetooth: hci1: command tx timeout [ 589.259469][T12161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.343559][T12161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.422649][T12161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 590.214727][T12161] Bluetooth: hci3: command tx timeout [ 590.410452][T12161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 590.509440][T12161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.547111][T12214] Bluetooth: hci1: command tx timeout [ 592.357592][T12161] Bluetooth: hci3: command tx timeout [ 592.580381][T12175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 592.639995][T12175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 592.679556][T12175] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 593.082921][T12175] Bluetooth: hci2: command tx timeout [ 593.641917][T12175] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 593.772078][T12175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 594.266277][ T7473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.453277][T12175] Bluetooth: hci3: command tx timeout [ 595.189887][T12175] Bluetooth: hci2: command tx timeout [ 596.298623][T12175] Bluetooth: hci4: command tx timeout [ 597.257576][T12175] Bluetooth: hci2: command tx timeout [ 598.404349][T12175] Bluetooth: hci4: command tx timeout [ 599.367259][T12175] Bluetooth: hci2: command tx timeout [ 600.459226][T12175] Bluetooth: hci4: command tx timeout [ 602.537292][T12175] Bluetooth: hci4: command tx timeout [ 619.749510][ T7473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.862305][T12161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.442297][T12161] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.488926][T12161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.630417][T12161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.702366][T12161] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 623.495606][T12161] Bluetooth: hci5: command tx timeout [ 624.410525][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.812858][T12168] ±ÿ speed is unknown, defaulting to 1000 [ 625.581716][T12175] Bluetooth: hci5: command tx timeout [ 627.653042][T12175] Bluetooth: hci5: command tx timeout [ 629.743838][T12175] Bluetooth: hci5: command tx timeout [ 647.074764][T12161] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 647.341878][T12161] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 647.718643][T12161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 648.556203][T12214] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 648.612276][T12214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 649.212008][T12174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 649.821985][T12214] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 651.023995][T12214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 652.312886][T12214] Bluetooth: hci6: command tx timeout [ 652.688159][T12214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 652.853636][T12214] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 653.230974][T12174] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 653.700311][T12161] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 653.754451][T12161] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 653.910577][T12161] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 654.102627][T12161] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 654.513714][T12161] Bluetooth: hci6: command tx timeout [ 655.587648][T12161] Bluetooth: hci7: command tx timeout [ 656.617739][T12214] Bluetooth: hci6: command tx timeout [ 657.214900][ T7473] pim6reg: left allmulticast mode [ 657.398333][ T7473] bridge0: left allmulticast mode [ 657.654650][T12174] Bluetooth: hci7: command tx timeout [ 657.961513][T12174] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 658.011132][T12174] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 658.062624][T12174] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 658.193999][T12174] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 658.199145][ T7473] dvmrp8: left allmulticast mode [ 658.305110][T12174] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 658.631775][T12174] Bluetooth: hci8: command tx timeout [ 658.707833][T12214] Bluetooth: hci6: command tx timeout [ 659.765536][T12214] Bluetooth: hci7: command tx timeout [ 660.709270][T12214] Bluetooth: hci8: command tx timeout [ 660.723581][T12214] Bluetooth: hci9: command tx timeout [ 661.820635][T12214] Bluetooth: hci7: command tx timeout [ 662.791549][T12214] Bluetooth: hci9: command tx timeout [ 662.838906][T12174] Bluetooth: hci8: command tx timeout [ 665.384909][T12174] Bluetooth: hci8: command tx timeout [ 665.399425][T12214] Bluetooth: hci9: command tx timeout [ 667.575781][T12214] Bluetooth: hci9: command tx timeout [ 686.282093][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.569354][T12174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 692.677321][T12174] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 692.714935][T12174] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 692.790235][T12174] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 692.842172][T12174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 695.356121][T12174] Bluetooth: hci1: command tx timeout [ 697.424872][T12214] Bluetooth: hci1: command tx timeout [ 698.349077][T12174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 698.442934][T12174] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 698.633293][T12174] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 698.738875][T12174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 698.884774][T12174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 699.502394][T12174] Bluetooth: hci1: command tx timeout [ 701.108191][T12174] Bluetooth: hci2: command tx timeout [ 701.590867][T12161] Bluetooth: hci1: command tx timeout [ 703.190382][T12161] Bluetooth: hci2: command tx timeout [ 703.623142][T12174] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 704.294862][T12174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 704.333108][T12174] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 704.592074][T12174] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 704.777696][T12174] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 705.250288][T12174] Bluetooth: hci2: command tx timeout [ 707.014979][T12161] Bluetooth: hci3: command tx timeout [ 707.340325][T12161] Bluetooth: hci2: command tx timeout [ 709.095763][T12161] Bluetooth: hci3: command tx timeout [ 710.111337][T12174] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 710.147888][T12174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 710.197085][T12174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 710.319937][T12174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 710.397718][T12174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 711.354940][T12161] Bluetooth: hci3: command tx timeout [ 712.777169][T12161] Bluetooth: hci4: command tx timeout [ 713.415583][T12161] Bluetooth: hci3: command tx timeout [ 714.854154][T12161] Bluetooth: hci4: command tx timeout [ 716.938779][T12161] Bluetooth: hci4: command tx timeout [ 719.015760][T12161] Bluetooth: hci4: command tx timeout [ 722.631110][T12174] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 723.123999][T12174] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 723.176358][T12174] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 723.330527][T12174] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 723.405464][T12174] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 725.975010][T12161] Bluetooth: hci10: command tx timeout [ 728.055323][T12161] Bluetooth: hci10: command tx timeout [ 730.140331][T12161] Bluetooth: hci10: command tx timeout [ 732.227080][T12161] Bluetooth: hci10: command tx timeout [ 744.150894][T12174] Bluetooth: hci5: command 0x0406 tx timeout [ 747.682583][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.024027][T12214] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 750.091984][T12214] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 750.149145][T12214] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 750.266749][T12214] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 750.402075][T12214] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 752.771487][T12161] Bluetooth: hci11: command tx timeout [ 754.856987][T12161] Bluetooth: hci11: command tx timeout [ 756.934526][T12161] Bluetooth: hci11: command tx timeout [ 759.031482][T12161] Bluetooth: hci11: command tx timeout [ 767.562178][T12214] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 767.632545][T12214] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 767.670923][T12214] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 767.798857][T12214] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 767.877888][T12214] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 770.606651][T12214] Bluetooth: hci12: command tx timeout [ 771.970500][T12161] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 772.016382][T12161] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 772.112750][T12161] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 772.210738][T12161] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 772.286500][T12161] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 772.705130][T12174] Bluetooth: hci12: command tx timeout [ 773.079788][T12214] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 773.130877][T12214] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 773.208374][T12214] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 773.370532][T12214] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 773.585536][T12214] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 774.456338][T12214] Bluetooth: hci13: command tx timeout [ 774.780159][T12214] Bluetooth: hci12: command tx timeout [ 774.878539][T12214] Bluetooth: hci6: command 0x0406 tx timeout [ 776.449575][T12214] Bluetooth: hci14: command tx timeout [ 776.593313][T12214] Bluetooth: hci13: command tx timeout [ 776.934272][T12214] Bluetooth: hci12: command tx timeout [ 778.533171][T12174] Bluetooth: hci14: command tx timeout [ 778.698237][T12174] Bluetooth: hci13: command tx timeout [ 780.068643][T12174] Bluetooth: hci7: command 0x0406 tx timeout [ 780.074751][T12174] Bluetooth: hci8: command 0x0406 tx timeout [ 780.737723][T12174] Bluetooth: hci14: command tx timeout [ 780.847432][T12174] Bluetooth: hci13: command tx timeout [ 781.718269][T12175] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 782.601706][T12175] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 782.645809][T12175] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 782.732246][T12175] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 782.775871][T12175] Bluetooth: hci14: command tx timeout [ 783.691887][T12174] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 785.577311][T12174] Bluetooth: hci9: command 0x0406 tx timeout [ 786.296534][T12175] Bluetooth: hci15: command tx timeout [ 788.374600][T12175] Bluetooth: hci15: command tx timeout [ 790.460382][T12175] Bluetooth: hci15: command tx timeout [ 792.537602][T12175] Bluetooth: hci15: command tx timeout [ 808.850104][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.899097][ T30] INFO: task kworker/u8:7:1075 blocked for more than 143 seconds. [ 809.922198][ T30] Not tainted syzkaller #0 [ 809.934877][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.451972][ T30] task:kworker/u8:7 state:D stack:21040 pid:1075 tgid:1075 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 810.493616][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 810.508470][ T30] Call Trace: [ 810.511795][ T30] [ 810.514739][ T30] __schedule+0x17d9/0x56c0 [ 811.430643][ T30] ? __lock_acquire+0x683/0x2cf0 [ 811.444086][ T30] ? __lock_acquire+0x683/0x2cf0 [ 811.533976][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 811.563835][ T30] ? unwind_next_frame+0x8f/0x2550 [ 811.794231][ T30] ? __pfx___schedule+0x10/0x10 [ 811.807305][ T30] ? schedule+0x90/0x2b0 [ 811.811602][ T30] schedule+0x164/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 812.313788][ T30] schedule_preempt_disabled+0x13/0x30 [ 812.457045][ T30] __mutex_lock+0x7bf/0x1550 [ 812.710284][ T30] ? __mutex_lock+0x5d4/0x1550 [ 812.715122][ T30] ? addrconf_dad_work+0x116/0x15c0 [ 812.738992][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 812.827940][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 812.953866][ T30] addrconf_dad_work+0x116/0x15c0 [ 812.968269][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 813.290038][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 813.425021][ T30] ? rcu_is_watching+0x15/0xb0 [ 813.437923][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 813.443700][ T30] process_scheduled_works+0xa8e/0x14e0 [ 813.653485][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 813.874440][ T30] ? assign_work+0x3cf/0x5d0 [ 813.887399][ T30] worker_thread+0xa47/0xfb0 [ 813.892089][ T30] ? __kthread_parkme+0x71/0x1f0 [ 814.405746][ T30] kthread+0x388/0x470 [ 814.409894][ T30] ? __pfx_worker_thread+0x10/0x10 [ 814.910120][ T30] ? __pfx_kthread+0x10/0x10 [ 814.914784][ T30] ret_from_fork+0x514/0xb70 [ 815.609881][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 816.324796][T12174] Bluetooth: hci1: command 0x0406 tx timeout [ 816.460784][ T30] ? __switch_to+0xc89/0x1420 [ 816.473715][ T30] ? __pfx_kthread+0x10/0x10 [ 817.300082][ T30] ret_from_fork_asm+0x1a/0x30 [ 817.313018][ T30] [ 817.464491][ T30] INFO: task dhcpcd:5281 blocked for more than 151 seconds. [ 817.525596][ T30] Not tainted syzkaller #0 [ 817.642561][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.070364][ T30] task:dhcpcd state:D stack:25448 pid:5281 tgid:5281 ppid:1 task_flags:0x400140 flags:0x00080000 [ 818.928071][ T30] Call Trace: [ 818.931405][ T30] [ 818.934355][ T30] __schedule+0x17d9/0x56c0