last executing test programs: 9m43.826836898s ago: executing program 1 (id=2074): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="fe112162c63e6da8bc8432294ef18af53cc330a64c2c7035246635093ba4d30fcf19a90804f04a10939db8f4e1b4acab11d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a51db7555c3b49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f0000000000eba1ada452cfe17b0000096f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d87120000000000007077ea7362eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9623810aca432a0415ad7e85dfafe625ad68f8fd9ef5c5dd59296895d1672efa7072477de47b1aec5a72376e7b0b558765ec7435f5aa572dc93b407411a3faad6b07cf54ab3cafcec4347f48120cea1ee1bb51e5c5f429fa352fb21dc81666b3b1e48a01976654c3a54eaca18432e45e25622e1f67f81ec2ac12796efffdc3a92efb57590a8a18a3f974b4a8b90f4c63b9a74ab91d44ac075b94e90bfb43983aa2e048ce4ebee34bdb97f41f645e5f8e540e39d33fc4c6a", 0x259}], 0x4}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000800000000800180000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 9m43.668611842s ago: executing program 1 (id=2076): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="052f", 0x2}], 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, 0x38}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="052f", 0x2}], 0x1) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, 0x38}, 0x28) (async) 9m43.429100547s ago: executing program 1 (id=2078): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000140)=0x4) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) 9m42.903765506s ago: executing program 1 (id=2084): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410ac1414aa000000001c00000000070000000000000700"], 0x40}, 0x0) 9m42.792064592s ago: executing program 1 (id=2086): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x9, "132bf2b2631e4a669e"}, &(0x7f0000000180)=0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002380)={{r2}, r4, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r5}) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x5f0}}], 0x600, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000004a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2cc, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x26c, 0x3, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "61d4d6456630b9c1fd46c92baaa3775eed822f3ddd278fb6d473c80bc56d52e338b7da16901249961d47e8aa09f4dce603b5b8f1638589f59a8f3c20aca89d081f86abbd982c261e846cc572f6c3d574149116106e64151bda8e24136e07546731c897586f7a9f635ce91a371885a6508177bea749d997a2220e8a40f946dd5ad1b6bc2e9feb012a652abaabd42ade8433b2af84a36362eee985c6fa8493eefde53ec721891c6c98c902753c34fb4c3c22"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "71b07ba918ebdb0839b183c50e94f766359bbf001f008f9690bbd9b5d10c3a756c5c3b756293367f90230ceafd2d15d97c0d8cac36760dd8a7d8d4b2d75c58d095c2094b51281f7268b9586938601f386c2a24b640d8bd23ffd147c43dff8527663907819c6c93ed1e617cf793d221740fb301234ba5f8070477d055861e8ab63e49183139b857c40d648588834e1db88b9b9f60bec7047ba6"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x34}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "5ff0994fc2f12a23afd1f459af2d087468c05e271348307070975e879353fa09e3b8f74fcb56c494cf38e8074e85f314d1df8e6407739dd986bdfb4f6ede752fad5324183efbcd9a4f09bd3324a9492ed6a261c7f2d0e0aa974e2adb763c7ce9a9b60a9a4732385f67f4fa81628cf72244837400bc027d32b765feff4c247b4c137fdc9ce5cdbe1d3a33e52d864a9ca9fd4c8063f7b708556b043237db8d6307c6ce72fb33f4ec7f4d68e38f07b033"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x140, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x104, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x480}}, 0xc0d0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000040)={0x89, @local, 0x4e24, 0x1, 'wlc\x00', 0x2, 0x10, 0x11}, 0x2c) 9m42.39473024s ago: executing program 1 (id=2093): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2dbd7000fcdbff25640003000000", @ANYRES32=r2, @ANYBLOB="0c009900010000007d000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0xffffc90000000000, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r3, 0xad386000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000001440)="de21cff472aa580c2ee98eff33da106d04336ca7442dd7c89e4fa6588fd068653f75", 0x22}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b4782212ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b8715495cacce4662d3bc3f7adc346d6a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b401ea9111605e62e77b3da1e271e588df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c96010043dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290caee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8b8000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b33b1a6a0a94e6ba262319abe45f6e30277b8a70fe72a4f4d57c62a8e31cbdd125eeb545b4a2db55d104ae8b650", 0xe1a}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 9m27.321494362s ago: executing program 32 (id=2093): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2dbd7000fcdbff25640003000000", @ANYRES32=r2, @ANYBLOB="0c009900010000007d000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0xffffc90000000000, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f0000222000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r3, 0xad386000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000001440)="de21cff472aa580c2ee98eff33da106d04336ca7442dd7c89e4fa6588fd068653f75", 0x22}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b4782212ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b8715495cacce4662d3bc3f7adc346d6a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b401ea9111605e62e77b3da1e271e588df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c96010043dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290caee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8b8000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b33b1a6a0a94e6ba262319abe45f6e30277b8a70fe72a4f4d57c62a8e31cbdd125eeb545b4a2db55d104ae8b650", 0xe1a}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m59.135679793s ago: executing program 3 (id=5759): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000500)=0xf338cc85023ba7e3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r5, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r5, 0x3, 0xc182}, &(0x7f0000000380)=0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000b00)={0x0, 0x3ff}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b80)={0x0, 0xf, 0x1, [0x2]}, &(0x7f0000000bc0)=0xa) sendmsg$inet_sctp(r6, &(0x7f0000000d00)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x12}, 0x48c}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000900)="6d5e28986860c786ab4541e2eb09a125b1256d6f744582da616d916c0b1e372353291cb342b5d9843a943a426bf4ab8e303fd4dcacb7f3ff7059675d01a0413151980a55f6b50c3c346066af294415b9f04f63a6a940aec3742ee57796fef3cc3a60313d8f82d78448997524c371ba84ab1172c8392a547609ce1c16dfd676d97ecf2fe5c755ae19", 0x88}, {&(0x7f00000009c0)="74c87af8605745aa9aa10a3c776bb6f321ac23fc902a7454dcf2635ccff92710fc111ae2ee742da4d79110fb3e93", 0x2e}, {&(0x7f0000000a00)="9165d8a64a6b37a53e0570065bbb3d1c7bf6dce2534b", 0x16}, {&(0x7f0000000a40)="6bd9d9d149724928e728d05cfc24c1c5804e3cca1bf8ce7b4b376d05385d775a5770f88e6e8bfba2424f6e9a12bf5ddfde19ae2096144eec0fa1a6cad5c6086e58cda956142594a4a26c19b42c5421c7426f83", 0x53}], 0x4, &(0x7f0000000c00)=[@init={0x18, 0x84, 0x0, {0x1, 0x3ff, 0x401, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x6f, 0x3913, 0x5, 0x81, 0x1, 0x5, 0x7, 0x6, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x40, 0x3, 0x1, 0x40, 0xfffff001, 0x5, 0x6, 0x8, r8}}, @init={0x18, 0x84, 0x0, {0x1, 0x2, 0x3, 0x2}}], 0xc8, 0x22040005}, 0x840) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4c081) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800) sendmsg$nl_route(r10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="e50100010024d68736192d", @ANYBLOB="80d425bd7000fddbdf2506000000050030000100000008003b0061f30000"], 0x24}, 0x1, 0x0, 0x0, 0x400c1}, 0x20040044) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r13, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m58.611383173s ago: executing program 3 (id=5761): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000120001", @ANYRES16, @ANYRES16=r0], 0xfdef) 1m57.987981971s ago: executing program 3 (id=5768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000003888fe8000000000000000000000000000aa00000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02"], 0x158}}, 0x0) 1m46.351750407s ago: executing program 3 (id=5773): unshare(0x28000600) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)='-\x00\x00\x00', 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006a00090528bd7000ffdbdf250210b4ab1e00000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c00178004000700"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) 1m46.28382693s ago: executing program 3 (id=5833): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x301, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m46.178497289s ago: executing program 3 (id=5836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r2) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r4, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 1m30.939067652s ago: executing program 33 (id=5836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r2) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r4, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 1m20.549689078s ago: executing program 0 (id=6002): socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000800000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000020000000000599ed4fab1efc9ec39f43cb20000000000000000000800000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000800000000000000000002000000000000000000000000000000430605403c3ec8c22e166889f4a4a4d21135954d1015d722fc915a1797b1c33475f3c7c81a3eb8676b9b6430f3831aac05a3"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1m20.440589156s ago: executing program 0 (id=6003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000100009050300000000000800d20001000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2871285f282829"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x58}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x68}, 0x28) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) syz_emit_ethernet(0x70, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3a, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], @dest_unreach={0x1, 0x4, 0x0, 0x80, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x2f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x65}], "7bf3"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e23, 0xc01, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffe7ffff}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000007", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1m17.964643578s ago: executing program 0 (id=6017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095000000000000000000c2b762"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100100a14000000000a01080000000000000000010080033c000000160a010800000000000000000300000a0c00054000000000000000050c00054000000000000000050900020073797a30000000000400038014000000060a0104000000000000000001000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) socket$packet(0x11, 0x2, 0x300) 1m17.308582378s ago: executing program 0 (id=6024): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xb080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) close(0x4) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffbff}, [@map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9108}]}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0xc3, &(0x7f0000000b80)=""/195, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000c80)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x1, 0x80000001, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[r3, r3, r4], &(0x7f0000000d40)=[{0x3, 0x5, 0x2, 0xb}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r5}, 0x38) connect$inet(r2, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0xf5c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_int(r3, &(0x7f0000000380)='cpuset.mems\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4089, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x6b) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000340)={0x7f7, 0x5, 0xffffffad}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000580)={{r1, &(0x7f0000000080)='-./{)*\'-\x00', 0x4000, &(0x7f0000000100)={@_ha_fsid={[0xfffffffb, 0x4]}, {0xf7f, 0x1, 0x81, 0x1}}, 0x8, &(0x7f0000000140), &(0x7f0000000240)=0x7}, {[0x3, 0x2, 0x6, 0x6]}, 0xd0, 0x78, &(0x7f0000000280)=""/120}) 1m16.911305882s ago: executing program 0 (id=6028): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x2}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073"], 0xd4}}, 0x4000050) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000020bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006a030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000cb0a00fe410000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0], 0xe0}, 0x1, 0x7}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000090000000000000000000000000000080005400000001f080005400000001708000340000000080c00048008000140000000080c00048008000140000010060000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) setsockopt$sock_int(r7, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000002c0)={r7, &(0x7f0000000080)='GPL\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x2]}, {0x7, 0x6, 0x6, 0x76a7}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x401}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1m15.876833707s ago: executing program 0 (id=6030): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xff}, 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m5.299837217s ago: executing program 2 (id=6117): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='wg2\x00') r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040), 0x4) 1m5.112520581s ago: executing program 2 (id=6119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x30, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88ff0005"], 0x0) 1m5.030318167s ago: executing program 2 (id=6121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010800000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffd08000340200000000900010073797a30"], 0xd8}, 0x1, 0x20}, 0x4040840) 1m4.804435135s ago: executing program 2 (id=6123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000324c1020000ff", 0x13}, {&(0x7f0000000580)="02db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 1m0.838112944s ago: executing program 34 (id=6030): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xff}, 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 59.107075148s ago: executing program 2 (id=6137): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, 0x0, 0xfdef) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x40, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3c}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2e}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4880) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x8, 0x3, 0xfff, 0x70, 0x6c, 0xd, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x81, 0x8, 0x94f, 0x3, 0xb}}, &(0x7f00000003c0)=0xb0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 56.880949125s ago: executing program 2 (id=6146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000324c1020000ff", 0x13}, {&(0x7f0000000580)="02db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 41.841029454s ago: executing program 35 (id=6146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000324c1020000ff", 0x13}, {&(0x7f0000000580)="02db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 36.289030516s ago: executing program 5 (id=6235): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.183413819s ago: executing program 5 (id=6237): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000400"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 29.307655733s ago: executing program 5 (id=6250): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000840)={&(0x7f0000000200)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x2000850) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) 22.596096871s ago: executing program 5 (id=6269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 22.340895508s ago: executing program 6 (id=6273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="11db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 21.984336292s ago: executing program 5 (id=6277): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000000000003000000052000004c000000", @ANYBLOB="d4ad60fa029ae39fde221ac520c28ededc8be343ef161cf18d7e9f6488a05b6eb7", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r6) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x38, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}}, 0x20004080) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021100000000000100000000000200080008000000f10000000000000b02000100000080ffffff0500000000a0050006003c0000000a004e210000000700000000000000000000ffffac1414aa000800000000000005000500000000000a004e240000000e00000000000000000000ffffe0000002280b000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES16=r2, @ANYBLOB="08009f000d0000000800a1050b000000080026006c09"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1406, 0x1, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0x2, 0x2, 0x5}, 0xc) 21.935020198s ago: executing program 4 (id=6278): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)=ANY=[@ANYRES32, @ANYBLOB="1b00000024"], 0x20) syz_emit_ethernet(0x1fe, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb1d710154d25344dc4b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34cb64994c78f38f5c966190288a11b5c7c3830af6b26868600f042ff7778f02de78c461feec2dbc7777f3c1648da649b02ab84887d321d98ce20c8e1998b380ba10bc62d1f3965f657d607a0b5dc8c3a0b319b563b758f3368982151727decc966d3971da04a3de762195acbe67019b828d036a19da5c13890cac99197cc8195d6e1db4c557b4278675e1bcd19b8e7cf05330356af6db28c3535b1aef3a597df0a00ac7bbc"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newnexthop={0x54, 0x68, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x3}, [@NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x80}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4117}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c8c5}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b3b20000000000000000000085100800000000000000000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) 17.636273502s ago: executing program 4 (id=6280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010800000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffd08000340200000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x2000}, 0x4040840) 17.609478543s ago: executing program 4 (id=6282): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) 17.403601243s ago: executing program 4 (id=6284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="df320200201a010a140003006e657464657673696d3000fb88000000200016801c0001"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x880) 17.215068451s ago: executing program 6 (id=6285): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r1, 0xd371f000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8, 0xfff5}, 0xff4c) 17.136431755s ago: executing program 4 (id=6286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001f000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 16.962770201s ago: executing program 4 (id=6287): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x14, 0x841, 0x2, 0x7ffff, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r5, &(0x7f00000006c0)={0x1d, r6}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r7, 0xffffffffffffffff, 0x44) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a00fe8000000085fb67daae3153d900000010000000000000bbff02000000770000000000000000000102009078000000006050835900000000fc010000000000000000000000000000ff01000000000010000000000000000106000400000000005969fdb45b9e99ecd99bd66ab837e7ca0024851a3375b33b131ca94d42d3010352f4ffd7a6ac8292cee1b300f9dd1ea9536328ca04faecf9cdcd595cecc37f2984bb88ec174fb0"], 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16.945346181s ago: executing program 6 (id=6288): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r1, 0xd371f000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8, 0x1001}, 0xff4c) 16.746123547s ago: executing program 7 (id=6289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x800, 0x70bd2b, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x4}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8841}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005dc0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa180014801400026e2f27c211675ff9000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 16.715178579s ago: executing program 6 (id=6290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000020000008510f8000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 16.468129837s ago: executing program 6 (id=6291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xe, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x94) 16.300234804s ago: executing program 7 (id=6292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010800000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffd08000340200000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x2400}, 0x4040840) 16.299602671s ago: executing program 6 (id=6293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a3000f5000008000a4000000003280004800800024000000012080001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 16.188726477s ago: executing program 5 (id=6294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="11db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 15.968318575s ago: executing program 7 (id=6295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000003888fe8000000000000000000000000000aa00000000000000001a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02"], 0x158}}, 0x0) 15.896293292s ago: executing program 7 (id=6296): bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.78983626s ago: executing program 7 (id=6297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004741ce383cb8c3c1d800"/24], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r12, 0x4) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf46242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 15.53496773s ago: executing program 7 (id=6298): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080008000003060003002d004000ff"], 0x2e) 1.192851306s ago: executing program 36 (id=6293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a3000f5000008000a4000000003280004800800024000000012080001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 1.086677529s ago: executing program 37 (id=6287): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x14, 0x841, 0x2, 0x7ffff, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r5, &(0x7f00000006c0)={0x1d, r6}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r7, 0xffffffffffffffff, 0x44) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a00fe8000000085fb67daae3153d900000010000000000000bbff02000000770000000000000000000102009078000000006050835900000000fc010000000000000000000000000000ff01000000000010000000000000000106000400000000005969fdb45b9e99ecd99bd66ab837e7ca0024851a3375b33b131ca94d42d3010352f4ffd7a6ac8292cee1b300f9dd1ea9536328ca04faecf9cdcd595cecc37f2984bb88ec174fb0"], 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 30.089489ms ago: executing program 38 (id=6298): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080008000003060003002d004000ff"], 0x2e) 0s ago: executing program 39 (id=6294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="11db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) kernel console output (not intermixed with test programs): msg+0x10/0x10 [ 721.489736][T21887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.489761][T21887] do_syscall_64+0x174/0x580 [ 721.489791][T21887] ? trace_irq_disable+0x3b/0x140 [ 721.489819][T21887] ? clear_bhb_loop+0x40/0x90 [ 721.489846][T21887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.489868][T21887] RIP: 0033:0x7f0ce9b9e019 [ 721.489889][T21887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.489908][T21887] RSP: 002b:00007f0ceab1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.489932][T21887] RAX: ffffffffffffffda RBX: 00007f0ce9e25fa0 RCX: 00007f0ce9b9e019 [ 721.489948][T21887] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 721.489962][T21887] RBP: 00007f0ceab1d090 R08: 0000000000000000 R09: 0000000000000000 [ 721.489976][T21887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.489989][T21887] R13: 00007f0ce9e26038 R14: 00007f0ce9e25fa0 R15: 00007ffd510e1878 [ 721.490023][T21887] [ 722.531708][T21915] sit0: Caught tx_queue_len zero misconfig [ 722.887899][T21935] FAULT_INJECTION: forcing a failure. [ 722.887899][T21935] name failslab, interval 1, probability 0, space 0, times 0 [ 722.955122][T21935] CPU: 1 UID: 0 PID: 21935 Comm: syz.3.5027 Not tainted syzkaller #0 PREEMPT(full) [ 722.955153][T21935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.955167][T21935] Call Trace: [ 722.955175][T21935] [ 722.955184][T21935] dump_stack_lvl+0xe8/0x150 [ 722.955223][T21935] should_fail_ex+0x40c/0x560 [ 722.955256][T21935] should_failslab+0xa8/0x100 [ 722.955292][T21935] __kmalloc_noprof+0xfe/0x720 [ 722.955318][T21935] ? __pfx_netdev_has_upper_dev+0x10/0x10 [ 722.955341][T21935] ? __lock_acquire+0x683/0x2cf0 [ 722.955371][T21935] ? team_add_slave+0x26c/0x28c0 [ 722.955486][T21935] ? team_add_slave+0x26c/0x28c0 [ 722.955517][T21935] team_add_slave+0x26c/0x28c0 [ 722.955557][T21935] ? do_raw_spin_lock+0x12b/0x2f0 [ 722.955592][T21935] ? __pfx_team_add_slave+0x10/0x10 [ 722.955610][T21935] ? __dev_notify_flags+0x3d4/0x510 [ 722.955642][T21935] ? __pfx___dev_notify_flags+0x10/0x10 [ 722.955665][T21935] ? __dev_change_flags+0x5f1/0x820 [ 722.955700][T21935] ? mutex_is_locked+0x17/0x50 [ 722.955724][T21935] do_set_master+0x563/0x720 [ 722.955762][T21935] do_setlink+0xe7b/0x4670 [ 722.955787][T21935] ? unwind_get_return_address+0x4d/0x90 [ 722.955826][T21935] ? __pfx_do_setlink+0x10/0x10 [ 722.955853][T21935] ? __lock_acquire+0x683/0x2cf0 [ 722.955887][T21935] ? stack_depot_save_flags+0x33/0x800 [ 722.955923][T21935] ? kasan_save_track+0x4f/0x80 [ 722.955949][T21935] ? kasan_save_track+0x3e/0x80 [ 722.955975][T21935] ? __kasan_kmalloc+0x93/0xb0 [ 722.956013][T21935] ? __kmalloc_cache_noprof+0x32d/0x660 [ 722.956052][T21935] ? __mutex_trylock_common+0x15f/0x270 [ 722.956078][T21935] ? __pfx___mutex_trylock_common+0x10/0x10 [ 722.956105][T21935] ? rcu_is_watching+0x15/0xb0 [ 722.956126][T21935] ? trace_contention_end+0x3d/0x140 [ 722.956151][T21935] ? __mutex_lock+0x30d/0x1550 [ 722.956194][T21935] ? rtnl_newlink+0xc10/0x1c30 [ 722.956220][T21935] ? __pfx___mutex_lock+0x10/0x10 [ 722.956260][T21935] ? full_name_hash+0x92/0xe0 [ 722.956298][T21935] rtnl_newlink+0x15a3/0x1c30 [ 722.956336][T21935] ? __pfx_rtnl_newlink+0x10/0x10 [ 722.956359][T21935] ? do_syscall_64+0x174/0x580 [ 722.956428][T21935] ? kasan_quarantine_put+0xbb/0x1f0 [ 722.956457][T21935] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.956496][T21935] ? nlmon_xmit+0xb0/0x100 [ 722.956518][T21935] ? kmem_cache_free+0x182/0x650 [ 722.956559][T21935] ? __lock_acquire+0x683/0x2cf0 [ 722.956593][T21935] ? __dev_queue_xmit+0x29b/0x3820 [ 722.956627][T21935] ? __local_bh_enable_ip+0xd0/0x130 [ 722.956653][T21935] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.956680][T21935] ? __dev_queue_xmit+0x29b/0x3820 [ 722.956707][T21935] ? __local_bh_enable_ip+0xd0/0x130 [ 722.956731][T21935] ? __dev_queue_xmit+0x29b/0x3820 [ 722.956768][T21935] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 722.956794][T21935] ? __pfx_rtnl_newlink+0x10/0x10 [ 722.956832][T21935] ? __pfx_rtnl_newlink+0x10/0x10 [ 722.956856][T21935] rtnetlink_rcv_msg+0x802/0xc00 [ 722.956886][T21935] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 722.956910][T21935] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.956933][T21935] ? ref_tracker_free+0x689/0x830 [ 722.956965][T21935] ? __pfx_ref_tracker_free+0x10/0x10 [ 722.957013][T21935] netlink_rcv_skb+0x226/0x4a0 [ 722.957044][T21935] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.957072][T21935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 722.957114][T21935] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.957142][T21935] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.957177][T21935] netlink_unicast+0x7bb/0x940 [ 722.957215][T21935] netlink_sendmsg+0x813/0xb40 [ 722.957260][T21935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.957293][T21935] ? aa_sock_msg_perm+0xf1/0x1b0 [ 722.957325][T21935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.957352][T21935] sock_sendmsg_nosec+0x13a/0x180 [ 722.957390][T21935] ____sys_sendmsg+0x54e/0x850 [ 722.957424][T21935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.957463][T21935] ? import_iovec+0x73/0xa0 [ 722.957488][T21935] ___sys_sendmsg+0x2a5/0x360 [ 722.957521][T21935] ? __lock_acquire+0x683/0x2cf0 [ 722.957556][T21935] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.957621][T21935] ? __fget_files+0x2a/0x420 [ 722.957650][T21935] ? __fget_files+0x3a2/0x420 [ 722.957692][T21935] __x64_sys_sendmsg+0x1b1/0x290 [ 722.957723][T21935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 722.957770][T21935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.957794][T21935] do_syscall_64+0x174/0x580 [ 722.957822][T21935] ? trace_irq_disable+0x3b/0x140 [ 722.957851][T21935] ? clear_bhb_loop+0x40/0x90 [ 722.957878][T21935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.957900][T21935] RIP: 0033:0x7f4abb19e019 [ 722.957919][T21935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.957937][T21935] RSP: 002b:00007f4abbff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.957961][T21935] RAX: ffffffffffffffda RBX: 00007f4abb425fa0 RCX: 00007f4abb19e019 [ 722.957976][T21935] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 722.957997][T21935] RBP: 00007f4abbff2090 R08: 0000000000000000 R09: 0000000000000000 [ 722.958010][T21935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.958022][T21935] R13: 00007f4abb426038 R14: 00007f4abb425fa0 R15: 00007ffe716972e8 [ 722.958057][T21935] [ 723.800213][T21949] xt_connbytes: Forcing CT accounting to be enabled [ 723.806936][T21949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.328996][T21972] __nla_validate_parse: 7 callbacks suppressed [ 724.329017][T21972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5037'. [ 724.942087][T22003] netlink: 'syz.4.5044': attribute type 19 has an invalid length. [ 724.988629][T22003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5044'. [ 725.244837][T22014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 725.330094][T22018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5051'. [ 725.871694][T22042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5060'. [ 726.039633][T22046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5062'. [ 726.261897][T22056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5065'. [ 726.780605][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5073'. [ 726.814729][T22083] vlan3: entered promiscuous mode [ 727.164152][T22097] : option downdelay: invalid value (18446744073709547007) [ 727.190201][T22097] : option downdelay: allowed values 0 - 2147483647 [ 727.200065][T22097]  (unregistering): Released all slaves [ 727.394324][T22103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.835443][T22117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5085'. [ 728.370682][T22140] block nbd4: not configured, cannot reconfigure [ 728.380228][T22140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5095'. [ 728.641122][T22149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5102'. [ 729.128237][T22168] team0: Port device syz_tun added [ 729.667935][T22184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 729.682467][T22184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.844093][T22192] : option downdelay: invalid value (18446744073709547007) [ 729.880467][T22192] : option downdelay: allowed values 0 - 2147483647 [ 729.889224][T22192]  (unregistering): Released all slaves [ 729.995368][T22199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 730.138114][T22203] __nla_validate_parse: 3 callbacks suppressed [ 730.138135][T22203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5123'. [ 730.245808][T22203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5123'. [ 730.447095][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5129'. [ 730.492284][T22184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 730.503211][T22184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.619509][T22220] vlan2: entered promiscuous mode [ 730.724100][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5132'. [ 730.929618][T22184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 730.940110][T22184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.492879][T22259] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 731.537547][T22260] netlink: 'syz.2.5138': attribute type 8 has an invalid length. [ 731.548865][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 731.550457][T22258] netlink: 'syz.2.5138': attribute type 8 has an invalid length. [ 731.565493][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 731.598229][T22260] bond0: entered promiscuous mode [ 731.603599][T22260] bond0: left promiscuous mode [ 731.690813][T22258] bond0: entered promiscuous mode [ 731.696154][T22258] bond0: left promiscuous mode [ 731.835684][T22273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5141'. [ 731.983003][T22184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 732.012311][T22184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.112911][T22260] netlink: 'syz.2.5138': attribute type 8 has an invalid length. [ 732.135617][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 732.152744][T22260] bond0: entered promiscuous mode [ 732.158421][T22260] bond0: left promiscuous mode [ 732.266391][T22258] netlink: 'syz.2.5138': attribute type 8 has an invalid length. [ 732.275358][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 732.290678][T22258] bond0: entered promiscuous mode [ 732.296263][T22258] bond0: left promiscuous mode [ 732.505710][ T80] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 732.513876][ T80] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.522119][ T80] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 732.530242][ T80] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.538470][ T80] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 732.546590][ T80] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.624382][ T80] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 732.647504][ T80] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.873142][T22306] block nbd5: not configured, cannot reconfigure [ 732.926981][T22306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5152'. [ 733.103876][T22312] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 733.139707][T22317] netlink: 'syz.0.5157': attribute type 18 has an invalid length. [ 733.423972][T22326] netlink: Conntrack attr has 1 unknown bytes [ 733.437660][T22326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.666489][T22333] syzkaller0: entered promiscuous mode [ 733.672701][T22333] syzkaller0: entered allmulticast mode [ 733.701355][T20043] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 733.740438][T22332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.776695][T22332] netlink: 'syz.2.5163': attribute type 8 has an invalid length. [ 733.913053][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 734.419222][T22356] sctp: [Deprecated]: syz.4.5174 (pid 22356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.419222][T22356] Use struct sctp_sack_info instead [ 734.632127][T22370] netlink: 'syz.3.5177': attribute type 2 has an invalid length. [ 734.646687][T22372] netlink: 'syz.2.5179': attribute type 19 has an invalid length. [ 734.937250][T22370] ip_tables: iptables: counters copy to user failed while replacing table [ 735.226448][T22398] __nla_validate_parse: 6 callbacks suppressed [ 735.226470][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5190'. [ 735.372571][T22403] netlink: 'syz.2.5187': attribute type 9 has an invalid length. [ 735.421958][T22405] netlink: 'syz.3.5192': attribute type 1 has an invalid length. [ 735.870298][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5198'. [ 736.108161][T22423] TC_ACT_REPEAT abuse ? [ 736.698701][T22449] FAULT_INJECTION: forcing a failure. [ 736.698701][T22449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.735960][T22449] CPU: 1 UID: 0 PID: 22449 Comm: syz.4.5205 Not tainted syzkaller #0 PREEMPT(full) [ 736.735992][T22449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.736006][T22449] Call Trace: [ 736.736015][T22449] [ 736.736025][T22449] dump_stack_lvl+0xe8/0x150 [ 736.736065][T22449] should_fail_ex+0x40c/0x560 [ 736.736103][T22449] _copy_to_user+0x31/0xb0 [ 736.736127][T22449] bpf_test_finish+0x1cf/0x690 [ 736.736241][T22449] ? __pfx_bpf_test_finish+0x10/0x10 [ 736.736278][T22449] ? bpf_prog_test_run_skb+0x903/0x2230 [ 736.736310][T22449] bpf_prog_test_run_skb+0x11fe/0x2230 [ 736.736363][T22449] ? __fget_files+0x3a2/0x420 [ 736.736392][T22449] ? __fget_files+0x2a/0x420 [ 736.736427][T22449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 736.736456][T22449] bpf_prog_test_run+0x2c5/0x340 [ 736.736492][T22449] __sys_bpf+0xa22/0xd90 [ 736.736531][T22449] ? __pfx___sys_bpf+0x10/0x10 [ 736.736573][T22449] ? __fget_files+0x2a/0x420 [ 736.736622][T22449] ? ksys_write+0x242/0x270 [ 736.736646][T22449] ? __pfx_ksys_write+0x10/0x10 [ 736.736674][T22449] __x64_sys_bpf+0xba/0xd0 [ 736.736701][T22449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.736733][T22449] do_syscall_64+0x174/0x580 [ 736.736764][T22449] ? trace_irq_disable+0x3b/0x140 [ 736.736792][T22449] ? clear_bhb_loop+0x40/0x90 [ 736.736820][T22449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.736842][T22449] RIP: 0033:0x7fd3aef9e019 [ 736.736862][T22449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.736881][T22449] RSP: 002b:00007fd3ad1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.736904][T22449] RAX: ffffffffffffffda RBX: 00007fd3af226180 RCX: 00007fd3aef9e019 [ 736.736921][T22449] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 736.736935][T22449] RBP: 00007fd3ad1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 736.736949][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.736962][T22449] R13: 00007fd3af226218 R14: 00007fd3af226180 R15: 00007ffd154eed38 [ 736.736997][T22449] [ 737.188468][T22453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 737.189331][T22453] validate_nla: 1 callbacks suppressed [ 737.189351][T22453] netlink: 'syz.0.5207': attribute type 21 has an invalid length. [ 737.346786][T20043] smc: removing ib device syz0 [ 737.452254][T20043] smbdirect: ib_dev[syz0] removed [ 737.890269][T20053] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 737.898423][T20053] bridge1 (unregistering): left promiscuous mode [ 737.904821][T20053] bridge1 (unregistering): left allmulticast mode [ 737.968679][T20053] team0: Port device bond0 removed [ 738.000794][T20053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.014440][T20053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.044498][T20053] bond0 (unregistering): Released all slaves [ 738.065278][T20053] bond1 (unregistering): Released all slaves [ 738.298221][T20053] bond2 (unregistering): Released all slaves [ 738.333006][T20053] bond3 (unregistering): Released all slaves [ 738.354393][T20053] bond4 (unregistering): Released all slaves [ 738.392411][T22466] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 739.416616][T22439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.124937][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5226'. [ 740.382406][T20053] : left promiscuous mode [ 740.395788][T22533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 740.494742][T22530] FAULT_INJECTION: forcing a failure. [ 740.494742][T22530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.507982][T22530] CPU: 0 UID: 0 PID: 22530 Comm: syz.3.5232 Not tainted syzkaller #0 PREEMPT(full) [ 740.508012][T22530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.508025][T22530] Call Trace: [ 740.508034][T22530] [ 740.508043][T22530] dump_stack_lvl+0xe8/0x150 [ 740.508082][T22530] should_fail_ex+0x40c/0x560 [ 740.508116][T22530] _copy_to_user+0x31/0xb0 [ 740.508140][T22530] bpf_test_finish+0x4ea/0x690 [ 740.508180][T22530] ? __pfx_bpf_test_finish+0x10/0x10 [ 740.508216][T22530] ? bpf_prog_test_run_skb+0x903/0x2230 [ 740.508247][T22530] bpf_prog_test_run_skb+0x11fe/0x2230 [ 740.508298][T22530] ? __fget_files+0x3a2/0x420 [ 740.508328][T22530] ? __fget_files+0x2a/0x420 [ 740.508362][T22530] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 740.508391][T22530] bpf_prog_test_run+0x2c5/0x340 [ 740.508427][T22530] __sys_bpf+0xa22/0xd90 [ 740.508465][T22530] ? __pfx___sys_bpf+0x10/0x10 [ 740.508507][T22530] ? __fget_files+0x2a/0x420 [ 740.508554][T22530] ? ksys_write+0x242/0x270 [ 740.508578][T22530] ? __pfx_ksys_write+0x10/0x10 [ 740.508605][T22530] __x64_sys_bpf+0xba/0xd0 [ 740.508630][T22530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.508654][T22530] do_syscall_64+0x174/0x580 [ 740.508684][T22530] ? trace_irq_disable+0x3b/0x140 [ 740.508711][T22530] ? clear_bhb_loop+0x40/0x90 [ 740.508736][T22530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.508758][T22530] RIP: 0033:0x7f4abb19e019 [ 740.508776][T22530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.508797][T22530] RSP: 002b:00007f4abbff2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 740.508819][T22530] RAX: ffffffffffffffda RBX: 00007f4abb425fa0 RCX: 00007f4abb19e019 [ 740.508834][T22530] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 740.508848][T22530] RBP: 00007f4abbff2090 R08: 0000000000000000 R09: 0000000000000000 [ 740.508861][T22530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.508874][T22530] R13: 00007f4abb426038 R14: 00007f4abb425fa0 R15: 00007ffe716972e8 [ 740.508906][T22530] [ 740.531974][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5233'. [ 740.781296][T22535] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 740.788433][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5234'. [ 740.862475][T22542] syzkaller0: entered promiscuous mode [ 740.868772][T22542] syzkaller0: entered allmulticast mode [ 741.011287][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5240'. [ 741.022887][T22554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5240'. [ 741.083808][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5238'. [ 741.126718][T22559] netlink: 'syz.0.5242': attribute type 19 has an invalid length. [ 741.143486][T22561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 741.145414][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5242'. [ 741.150534][T22561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 741.165822][T22561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 741.172613][T22561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 741.468722][T22555] vlan2: entered promiscuous mode [ 741.516223][T20053] tipc: Left network mode [ 741.719799][T22583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5250'. [ 742.063505][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5256'. [ 742.096842][T22597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5256'. [ 742.175355][T22585] netlink: 'syz.0.5251': attribute type 1 has an invalid length. [ 742.357957][T22615] nbd: couldn't find a device at index 2 [ 742.381601][T22615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5260'. [ 742.580500][T22585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.778023][T20053] hsr_slave_0: left promiscuous mode [ 742.796414][T20053] hsr_slave_1: left promiscuous mode [ 742.804520][T20053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.814397][T20053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.845039][T20053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.864607][T20053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.896614][T20053] veth1_vlan: left promiscuous mode [ 742.904544][T20053] veth0_vlan: left promiscuous mode [ 743.333259][T20053] team0 (unregistering): Port device 76žÿ removed [ 744.078228][T22673] netlink: 'syz.3.5276': attribute type 9 has an invalid length. [ 744.260652][T22675] netlink: 'syz.5.5278': attribute type 5 has an invalid length. [ 744.695510][T20053] IPVS: stop unused estimator thread 0... [ 745.003050][T22696] netlink: 'syz.0.5284': attribute type 1 has an invalid length. [ 745.150705][T22696] bond4: (slave geneve2): making interface the new active one [ 745.173757][T22696] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 745.198462][T14893] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 745.206604][T14893] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 745.225535][T22701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 745.259725][T20081] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 745.287395][T20081] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 745.314826][T20081] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 745.341901][T20081] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 745.422578][T14893] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 745.869374][ T9553] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 746.475502][T22728] x_tables: duplicate underflow at hook 1 [ 746.619152][T22735] syzkaller0: entered promiscuous mode [ 746.625087][T22735] syzkaller0: entered allmulticast mode [ 747.332341][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.659481][T22764] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 747.667365][T22764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.676770][T22765] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 747.684557][T22765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.014283][T22781] __nla_validate_parse: 10 callbacks suppressed [ 748.014306][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5312'. [ 748.033241][T22781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5312'. [ 748.202289][T22785] syzkaller0: entered promiscuous mode [ 748.218501][T22785] syzkaller0: entered allmulticast mode [ 748.474098][T22797] Cannot find add_set index 0 as target [ 748.631859][T22802] syzkaller0: entered promiscuous mode [ 748.637401][T22802] syzkaller0: entered allmulticast mode [ 748.943701][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5320'. [ 748.955479][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5320'. [ 750.084712][T22830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.236848][T22838] syzkaller0: entered promiscuous mode [ 750.251688][T22838] syzkaller0: entered allmulticast mode [ 750.735796][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5339'. [ 750.847015][T22868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5344'. [ 751.041541][T22878] netlink: 'syz.2.5346': attribute type 9 has an invalid length. [ 751.153973][T22886] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5351'. [ 751.515905][T22900] syzkaller1: entered promiscuous mode [ 751.521487][T22900] syzkaller1: entered allmulticast mode [ 752.152815][T22906] netlink: 'syz.2.5357': attribute type 9 has an invalid length. [ 752.275954][T22911] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 752.293654][T20099] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.300883][T20099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.454657][T22922] IPv6: Can't replace route, no match found [ 752.519718][T22925] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 753.248106][T22959] netlink: 'syz.3.5376': attribute type 9 has an invalid length. [ 753.376089][T22951] tunl0: Caught tx_queue_len zero misconfig [ 753.610601][T22962] syzkaller0: entered promiscuous mode [ 753.629242][T22962] syzkaller0: entered allmulticast mode [ 754.096764][T22964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5377'. [ 756.771732][T22949] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 756.986481][T22988] syzkaller0: entered promiscuous mode [ 757.001605][T22988] syzkaller0: entered allmulticast mode [ 757.157455][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'. [ 757.806106][T23020] nbd: couldn't find a device at index 2 [ 757.817619][T23020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5396'. [ 758.720476][T23029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5400'. [ 760.308171][T23003] ipvlan1: entered promiscuous mode [ 760.313563][T23003] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 760.325981][T23003] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 760.337935][T23003] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 760.361961][T23029] ipvlan0: entered promiscuous mode [ 760.368234][T23029] ipvlan0: left promiscuous mode [ 760.588569][T23042] netlink: 'syz.5.5402': attribute type 1 has an invalid length. [ 760.622399][T23042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 760.633899][T23045] netlink: 'syz.2.5405': attribute type 11 has an invalid length. [ 760.641770][T23045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5405'. [ 760.758117][T23042] bond5: (slave veth3): Enslaving as an active interface with a down link [ 760.865201][T23042] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 760.872349][T23042] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 760.961151][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5409'. [ 761.836252][T23099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5425'. [ 762.334755][T23126] syzkaller0: entered promiscuous mode [ 762.340818][T23126] syzkaller0: entered allmulticast mode [ 763.157937][T23159] ipvlan2: entered promiscuous mode [ 763.171482][T23159] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 763.184229][T23159] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 763.200760][T23159] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 763.213123][T23160] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 763.839758][T23185] syzkaller0: entered promiscuous mode [ 763.852696][T23185] syzkaller0: entered allmulticast mode [ 764.002443][ T29] audit: type=1107 audit(1785866458.765:9): pid=23175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 764.736108][T23220] netlink: 'syz.3.5465': attribute type 9 has an invalid length. [ 766.720590][T23219] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 767.111263][T23241] ipvlan1: entered promiscuous mode [ 767.129300][T23241] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 767.151457][T23241] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 767.167901][T23241] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 767.416671][T23251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5476'. [ 767.604260][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5477'. [ 767.665684][T23254] gretap0: entered promiscuous mode [ 767.709534][T23261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5480'. [ 767.723776][T23261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5480'. [ 767.781192][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5478'. [ 767.816761][T23254] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 767.836191][T23254] batman_adv: batadv0: Adding interface: gretap1 [ 767.842756][T23254] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.869941][T23254] batman_adv: batadv0: Interface activated: gretap1 [ 767.899814][T23264] tipc: Enabling of bearer rejected, failed to enable media [ 767.936752][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5481'. [ 768.018617][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5482'. [ 768.593069][T23279] syzkaller0: entered promiscuous mode [ 768.598618][T23279] syzkaller0: entered allmulticast mode [ 768.601050][T23290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5486'. [ 768.736464][T23287] syzkaller0: entered promiscuous mode [ 768.742162][T23287] syzkaller0: entered allmulticast mode [ 769.020263][T23306] ieee802154 phy1 wpan1: encryption failed: -90 [ 769.544873][T23326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5497'. [ 771.823046][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5496'. [ 772.214944][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.227398][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.242531][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.321565][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.329540][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.570537][T14789] team0: Port device syz_tun removed [ 772.835450][T23369] syzkaller0: entered promiscuous mode [ 772.841118][T23369] syzkaller0: entered allmulticast mode [ 773.273257][T23392] netlink: 'syz.5.5523': attribute type 19 has an invalid length. [ 773.295280][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5523'. [ 773.841103][T23412] netlink: 'syz.0.5527': attribute type 13 has an invalid length. [ 773.849268][T23412] netlink: 'syz.0.5527': attribute type 17 has an invalid length. [ 774.363955][T18150] Bluetooth: hci0: command tx timeout [ 775.807400][T23394] workqueue: Failed to create a rescuer kthread for wq "": -EINTR [ 775.937360][T23412] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 775.976730][T20043] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.993683][T20043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.435668][T18150] Bluetooth: hci0: command tx timeout [ 776.590433][T23456] block nbd5: not configured, cannot reconfigure [ 776.600043][T23456] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5541'. [ 776.613949][T23351] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.621160][T23351] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.628423][T23351] bridge_slave_0: entered allmulticast mode [ 776.636661][T23351] bridge_slave_0: entered promiscuous mode [ 776.645255][T23351] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.652422][T23351] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.682149][T23351] bridge_slave_1: entered allmulticast mode [ 776.690181][T23351] bridge_slave_1: entered promiscuous mode [ 776.731688][T23351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.744250][T23351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.803716][T23351] team0: Port device team_slave_0 added [ 776.812025][T23351] team0: Port device team_slave_1 added [ 776.857772][T23463] syzkaller0: entered promiscuous mode [ 776.863276][T23463] syzkaller0: entered allmulticast mode [ 777.007089][T23467] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5543'. [ 777.040215][T23467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 777.707532][T23481] netlink: 'syz.0.5545': attribute type 4 has an invalid length. [ 777.724497][T23481] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5545'. [ 778.529775][T18150] Bluetooth: hci0: command tx timeout [ 779.670713][T23351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.677698][T23351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.714859][T23351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.726172][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5545'. [ 779.758677][T23480] team0: Port device syz_tun added [ 779.782468][T23351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.796598][T23351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.843275][T23351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.921561][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5549'. [ 780.014971][T23493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5552'. [ 780.096388][T23493] bond4: entered promiscuous mode [ 780.104061][T23493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 780.150194][T23493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 780.172843][T23493] bond4: (slave sit2): The slave device specified does not support setting the MAC address [ 780.184051][T23493] bond4: (slave sit2): Error -95 calling set_mac_address [ 780.218092][T23351] hsr_slave_0: entered promiscuous mode [ 780.224778][T23351] hsr_slave_1: entered promiscuous mode [ 780.231950][T23351] debugfs: 'hsr0' already exists in 'hsr' [ 780.239569][T23351] Cannot create hsr debugfs directory [ 780.606007][T18150] Bluetooth: hci0: command tx timeout [ 780.742330][T23520] syzkaller0: entered promiscuous mode [ 780.747838][T23520] syzkaller0: entered allmulticast mode [ 781.268805][T23525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5563'. [ 781.351900][T23528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5564'. [ 781.619071][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5564'. [ 783.433104][T23551] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5569'. [ 783.448696][T23550] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5569'. [ 783.820680][T23571] : option downdelay: invalid value (18446744073709547007) [ 783.828485][T23571] : option downdelay: allowed values 0 - 2147483647 [ 783.843005][T23571]  (unregistering): Released all slaves [ 783.944465][T23575] syzkaller0: entered promiscuous mode [ 783.950016][T23575] syzkaller0: entered allmulticast mode [ 783.978016][T23583] netlink: 'syz.5.5579': attribute type 4 has an invalid length. [ 785.144945][T23608] netlink: 'syz.4.5588': attribute type 9 has an invalid length. [ 788.201351][T23607] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 788.323909][T23613] Cannot find add_set index 0 as target [ 788.527177][T23620] netlink: 'syz.3.5593': attribute type 1 has an invalid length. [ 788.591348][T23351] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 788.693037][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5591'. [ 788.784263][T23351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.798239][T23351] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 788.821911][T23351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.834766][T23351] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 788.856709][T23351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.867971][T23351] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 788.879573][T23351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.887282][T23616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5591'. [ 789.062251][T23351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.099265][T23351] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.128137][T20054] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.135333][T20054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.172788][T23645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5596'. [ 789.204664][T20054] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.211864][T20054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.230063][T23649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5599'. [ 789.501037][T23351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 789.511615][T23351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.643789][T23662] : option downdelay: invalid value (18446744073709547007) [ 789.651894][T23662] : option downdelay: allowed values 0 - 2147483647 [ 789.685937][T23662]  (unregistering): Released all slaves [ 790.058903][T23675] netlink: 'syz.0.5606': attribute type 9 has an invalid length. [ 790.282974][T23686] netlink: 'syz.4.5608': attribute type 9 has an invalid length. [ 790.472569][T20060] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 790.496384][T20060] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 790.543841][T20060] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 790.562495][T20060] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 790.754273][T23699] syzkaller0: entered promiscuous mode [ 790.772959][T23699] syzkaller0: entered allmulticast mode [ 791.011616][T23351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.741179][T23728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5622'. [ 791.806450][T23732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5623'. [ 792.221071][T23740] Cannot find add_set index 0 as target [ 792.273274][T23743] Bluetooth: MGMT ver 1.23 [ 793.406174][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 795.226705][T23732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5623'. [ 795.244225][T23741] ipvlan2: entered promiscuous mode [ 795.249903][T23741] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 795.262779][T23741] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 795.276433][T23741] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 795.365782][T23747] netlink: 'syz.3.5629': attribute type 19 has an invalid length. [ 795.372474][T23351] veth0_vlan: entered promiscuous mode [ 795.388027][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5629'. [ 795.399915][T23351] veth1_vlan: entered promiscuous mode [ 795.471713][T23351] veth0_macvtap: entered promiscuous mode [ 795.501149][T23351] veth1_macvtap: entered promiscuous mode [ 795.608512][T23351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.629116][T23351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.667498][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5635'. [ 795.716675][T20081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.862191][T20081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.903895][T20081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.972481][T20054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.980383][T20054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.028120][T20081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.036939][T20081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.112706][T20042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.248333][T23781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5643'. [ 796.410830][T23781] team0: Port device syz_tun removed [ 796.741754][T23803] syzkaller0: entered promiscuous mode [ 796.747303][T23803] syzkaller0: entered allmulticast mode [ 797.036644][T23821] : option downdelay: invalid value (18446744073709547007) [ 797.044071][T23821] : option downdelay: allowed values 0 - 2147483647 [ 797.062793][T23821]  (unregistering): Released all slaves [ 797.149366][T23828] syzkaller0: left promiscuous mode [ 797.154636][T23828] syzkaller0: left allmulticast mode [ 797.294786][T23832] Cannot find add_set index 1 as target [ 797.307985][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5662'. [ 797.643510][T23853] netlink: 'syz.4.5668': attribute type 4 has an invalid length. [ 798.024446][T23872] : option downdelay: invalid value (18446744073709547007) [ 798.032297][T23872] : option downdelay: allowed values 0 - 2147483647 [ 798.041820][T23872]  (unregistering): Released all slaves [ 799.499656][T23898] netlink: 'syz.0.5684': attribute type 19 has an invalid length. [ 799.508794][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 799.570439][T23797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.124912][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'. [ 800.149922][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 800.165300][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 800.176647][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 800.185791][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 800.196209][T23915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5692'. [ 800.229533][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 800.327280][T23920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5694'. [ 800.355648][T23920] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 800.688233][T23932] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5696'. [ 800.760905][T23938] ipvlan2: entered promiscuous mode [ 800.766537][T23938] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 800.787274][T23938] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 800.811672][T23940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5691'. [ 800.817842][T23938] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 800.856152][T23940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5691'. [ 800.915657][T23944] tipc: Invalid UDP bearer configuration [ 800.915710][T23944] tipc: Enabling of bearer rejected, failed to enable media [ 801.295344][T23944] debugfs: '1ùà^!‚l' already exists in 'ieee80211' [ 801.434858][T23947] netlink: 'syz.5.5700': attribute type 9 has an invalid length. [ 801.458911][T23960] nbd: couldn't find a device at index 2 [ 801.467835][T23960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5702'. [ 801.607138][T23966] xfrm1: entered allmulticast mode [ 801.685672][T23916] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.692884][T23916] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.700151][T23916] bridge_slave_0: entered allmulticast mode [ 801.709748][T23916] bridge_slave_0: entered promiscuous mode [ 801.715325][T23973] netlink: 'syz.4.5707': attribute type 19 has an invalid length. [ 801.723814][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5707'. [ 801.740554][T23916] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.747901][T23916] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.755168][T23916] bridge_slave_1: entered allmulticast mode [ 801.804975][T23916] bridge_slave_1: entered promiscuous mode [ 801.908028][T23916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.921152][T23916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.984671][T23916] team0: Port device team_slave_0 added [ 801.993577][T23916] team0: Port device team_slave_1 added [ 802.106990][T23916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.136048][T23916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.182590][T23916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.206763][T23916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.214048][T23916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.243884][T23916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.268816][T23991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5713'. [ 802.330819][T23916] hsr_slave_0: entered promiscuous mode [ 802.337969][T23916] hsr_slave_1: entered promiscuous mode [ 802.344636][T23916] debugfs: 'hsr0' already exists in 'hsr' [ 802.371074][T18150] Bluetooth: hci4: command tx timeout [ 802.371579][T23916] Cannot create hsr debugfs directory [ 802.756463][T24001] syzkaller1: entered promiscuous mode [ 802.762011][T24001] syzkaller1: entered allmulticast mode [ 802.981853][T23916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.996347][T23916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.008969][T23916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 803.246353][T23916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.265065][T23916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.285491][T23916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 803.549235][T24034] netlink: 'syz.2.5728': attribute type 1 has an invalid length. [ 803.641195][T24041] netlink: 'syz.4.5729': attribute type 9 has an invalid length. [ 803.671336][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5726'. [ 803.725195][T23916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.736021][T23916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.810938][T23916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 803.934832][T24053] FAULT_INJECTION: forcing a failure. [ 803.934832][T24053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.988824][T24053] CPU: 0 UID: 0 PID: 24053 Comm: syz.3.5732 Not tainted syzkaller #0 PREEMPT(full) [ 803.988855][T24053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.988870][T24053] Call Trace: [ 803.988879][T24053] [ 803.988897][T24053] dump_stack_lvl+0xe8/0x150 [ 803.988943][T24053] should_fail_ex+0x40c/0x560 [ 803.988980][T24053] _copy_to_user+0x31/0xb0 [ 803.989005][T24053] simple_read_from_buffer+0xe1/0x170 [ 803.989043][T24053] proc_fail_nth_read+0x1bb/0x230 [ 803.989079][T24053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.989112][T24053] ? rw_verify_area+0x24a/0x4c0 [ 803.989131][T24053] ? vfs_write+0x27b/0xba0 [ 803.989150][T24053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.989175][T24053] vfs_read+0x213/0xa80 [ 803.989197][T24053] ? __pfx___mutex_lock+0x10/0x10 [ 803.989239][T24053] ? __pfx_vfs_read+0x10/0x10 [ 803.989257][T24053] ? __fget_files+0x2a/0x420 [ 803.989286][T24053] ? __fget_files+0x3a2/0x420 [ 803.989310][T24053] ? __fget_files+0x2a/0x420 [ 803.989342][T24053] ksys_read+0x150/0x270 [ 803.989361][T24053] ? __pfx_ksys_read+0x10/0x10 [ 803.989386][T24053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.989407][T24053] do_syscall_64+0x174/0x580 [ 803.989432][T24053] ? trace_irq_disable+0x3b/0x140 [ 803.989457][T24053] ? clear_bhb_loop+0x40/0x90 [ 803.989484][T24053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.989503][T24053] RIP: 0033:0x7f4abb15e84e [ 803.989520][T24053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 803.989537][T24053] RSP: 002b:00007f4abbff1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 803.989561][T24053] RAX: ffffffffffffffda RBX: 00007f4abbff26c0 RCX: 00007f4abb15e84e [ 803.989575][T24053] RDX: 000000000000000f RSI: 00007f4abbff20a0 RDI: 0000000000000009 [ 803.989591][T24053] RBP: 00007f4abbff2090 R08: 0000000000000000 R09: 0000000000000000 [ 803.989602][T24053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.989613][T24053] R13: 00007f4abb426038 R14: 00007f4abb425fa0 R15: 00007ffe716972e8 [ 803.989645][T24053] [ 804.472393][T23916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.482741][T23916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.493052][T23916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 804.529573][T18150] Bluetooth: hci4: command tx timeout [ 804.885038][T24076] : option downdelay: invalid value (18446744073709547007) [ 804.908918][T24076] : option downdelay: allowed values 0 - 2147483647 [ 804.935180][T24076]  (unregistering): Released all slaves [ 805.227357][T23916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 805.276208][T23916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.306694][T23916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 805.328889][T23916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.337379][T23916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 805.391510][T23916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.401208][T23916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 805.452834][T23916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.487286][T24102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5750'. [ 805.641703][T23916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.687276][T23916] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.706464][T20060] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.713709][T20060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.732197][T20060] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.739444][T20060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.957312][T24122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5755'. [ 805.966680][T24122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5755'. [ 806.233555][T24136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5757'. [ 806.625041][T23916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.651676][T18150] Bluetooth: hci4: command tx timeout [ 806.685060][T24146] ipvlan2: entered promiscuous mode [ 806.690498][T24146] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 806.702870][T24146] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 806.713368][T24146] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 806.830861][T23916] veth0_vlan: entered promiscuous mode [ 806.846355][T23916] veth1_vlan: entered promiscuous mode [ 806.879303][T23916] veth0_macvtap: entered promiscuous mode [ 806.944087][T23916] veth1_macvtap: entered promiscuous mode [ 806.972951][T23916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.987539][T23916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.193633][T20081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.201524][T20081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.224495][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.253998][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.283119][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.294710][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.389446][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.424134][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.755042][T24188] netlink: 'syz.5.5771': attribute type 2 has an invalid length. [ 807.958759][T24194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5772'. [ 808.015036][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 808.032993][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 808.043232][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 808.052522][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 808.060342][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 808.458936][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.490605][T24208] ipvlan2: entered promiscuous mode [ 808.496176][T24208] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 808.509470][T24208] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 808.520067][T24208] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 808.648511][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.678279][T18150] Bluetooth: hci4: command tx timeout [ 808.789945][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 808.790489][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.977352][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.262525][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.315564][T24193] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.322896][T24193] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.343269][T24193] bridge_slave_0: entered allmulticast mode [ 809.351196][T24193] bridge_slave_0: entered promiscuous mode [ 809.361248][T24193] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.368564][T24193] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.375823][T24193] bridge_slave_1: entered allmulticast mode [ 809.384341][T24193] bridge_slave_1: entered promiscuous mode [ 809.424526][T24193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.437082][T24193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.490734][T24193] team0: Port device team_slave_0 added [ 809.499418][T24193] team0: Port device team_slave_1 added [ 809.529244][T24193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.536262][T24193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.575440][T24193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.588219][T24193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.595224][T24193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.621199][T24193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.682010][T24193] hsr_slave_0: entered promiscuous mode [ 809.689747][T24193] hsr_slave_1: entered promiscuous mode [ 809.696422][T24193] debugfs: 'hsr0' already exists in 'hsr' [ 809.702566][T24193] Cannot create hsr debugfs directory [ 809.921807][ T80] bridge_slave_1: left allmulticast mode [ 809.928862][ T80] bridge_slave_1: left promiscuous mode [ 809.937299][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.949304][ T80] bridge_slave_0: left allmulticast mode [ 809.954981][ T80] bridge_slave_0: left promiscuous mode [ 809.962575][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.995533][ T80] batman_adv: batadv0: Interface deactivated: gretap1 [ 810.126248][T18150] Bluetooth: hci3: command tx timeout [ 810.262455][ T80] batman_adv: batadv0: Removing interface: gretap1 [ 810.412505][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.425396][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.436200][ T80] bond0 (unregistering): Released all slaves [ 810.449985][ T80] bond1 (unregistering): Released all slaves [ 810.472741][ T80] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 810.482038][ T80] veth0_to_bond: left promiscuous mode [ 810.487793][ T80] veth0_to_bond: left allmulticast mode [ 810.495159][ T80] bond2 (unregistering): Released all slaves [ 810.519871][ T80] bond3 (unregistering): Released all slaves [ 810.628965][T24180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.771066][ T80] tipc: Left network mode [ 810.857575][T24248] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5786'. [ 810.939080][T24251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5785'. [ 811.181012][T24253] bond1: entered promiscuous mode [ 811.211565][T24253] bond1: entered allmulticast mode [ 811.596850][T24278] Cannot find add_set index 2 as target [ 811.604776][T24280] Cannot find add_set index 2 as target [ 811.657438][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 812.216594][T18150] Bluetooth: hci3: command tx timeout [ 813.241176][T24336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5801'. [ 813.470883][ T80] hsr_slave_0: left promiscuous mode [ 813.477246][ T80] hsr_slave_1: left promiscuous mode [ 813.483658][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.491232][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.539063][ T80] veth1_macvtap: left promiscuous mode [ 813.544634][ T80] veth0_macvtap: left promiscuous mode [ 813.550333][ T80] veth1_vlan: left promiscuous mode [ 813.556096][ T80] veth0_vlan: left promiscuous mode [ 813.570873][T24346] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5803'. [ 813.823106][ T80] team0 (unregistering): Port device team_slave_1 removed [ 813.854400][ T80] team0 (unregistering): Port device team_slave_0 removed [ 814.285696][T18150] Bluetooth: hci3: command tx timeout [ 814.439223][T24351] netlink: 'syz.5.5804': attribute type 9 has an invalid length. [ 814.942472][T24287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 814.964554][T24193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.004502][T24193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.025820][T24193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.113928][T24193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 815.151561][T24193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.179222][T24193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 815.193189][ T80] IPVS: stop unused estimator thread 0... [ 815.199839][T24193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.261305][T24193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.302296][T24363] netlink: 'syz.2.5808': attribute type 13 has an invalid length. [ 815.335174][T24365] Cannot find add_set index 0 as target [ 815.430111][T24363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5808'. [ 815.455029][T24363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5808'. [ 815.563577][T24193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.584309][T24193] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.599247][T20106] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.606540][T20106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.637786][T20054] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.645394][T20054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.920775][T24392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5813'. [ 815.999839][T24392] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.013921][T24394] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5811'. [ 816.323940][T24193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.345856][ T5629] Bluetooth: hci3: command tx timeout [ 816.393667][T24193] veth0_vlan: entered promiscuous mode [ 816.432021][T24193] veth1_vlan: entered promiscuous mode [ 816.479045][T24193] veth0_macvtap: entered promiscuous mode [ 816.490007][T24193] veth1_macvtap: entered promiscuous mode [ 816.544312][T24193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.560671][T24193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.607474][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.685749][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.694562][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.739887][T20081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.855232][T24416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5817'. [ 817.225224][T24428] xt_NFQUEUE: number of total queues is 0 [ 818.504497][ T5629] Bluetooth: hci3: command 0x0405 tx timeout [ 818.601761][T24379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.713660][T20081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.730199][T20081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.774992][T20081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.794918][T20081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.940374][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5830'. [ 818.962145][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5830'. [ 819.161131][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5834'. [ 819.191068][T24459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5834'. [ 819.237481][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5834'. [ 819.281379][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5834'. [ 819.359780][ T80] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.376977][ T80] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.388668][T24467] netlink: 'syz.2.5839': attribute type 1 has an invalid length. [ 819.469268][T24467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.538131][T24464] syzkaller0: entered promiscuous mode [ 819.543687][T24464] syzkaller0: entered allmulticast mode [ 819.575614][T20060] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.778422][T24493] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 824.805736][T20060] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.896360][T24518] ipvlan2: entered promiscuous mode [ 824.901792][T24518] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 824.914261][T24518] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 824.925308][T24518] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 824.982275][T24521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5852'. [ 824.991279][T24521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5852'. [ 825.146658][T24527] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5855'. [ 826.004042][T24558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5866'. [ 826.449385][T24583] : option downdelay: invalid value (18446744073709547007) [ 826.456925][T24583] : option downdelay: allowed values 0 - 2147483647 [ 826.464945][T24583]  (unregistering): Released all slaves [ 826.516529][T24585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5872'. [ 828.461462][T24613] netlink: 'syz.2.5884': attribute type 1 has an invalid length. [ 828.485954][T24613] bond2: entered promiscuous mode [ 828.491490][T24613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 828.531822][T24613] vlan2: entered allmulticast mode [ 828.537043][T24613] bond2: entered allmulticast mode [ 828.889733][T24616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5885'. [ 829.040317][T24623] Cannot find add_set index 0 as target [ 829.056652][T24562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 829.167320][T24625] netlink: 'syz.2.5887': attribute type 9 has an invalid length. [ 829.256078][T24630] ipvlan2: entered promiscuous mode [ 829.261586][T24630] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 829.292106][T24630] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 829.305191][T24630] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 829.859453][T24646] netlink: 'syz.2.5897': attribute type 19 has an invalid length. [ 829.867353][T24646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'. [ 830.014630][T24653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 830.026520][T24653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5900'. [ 830.232705][T24664] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5904'. [ 830.439277][T24674] team0: Port device syz_tun added [ 830.711284][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5912'. [ 830.784267][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5912'. [ 830.822696][T24687] syzkaller0: entered promiscuous mode [ 830.830197][T24687] syzkaller0: entered allmulticast mode [ 831.253443][T24704] netlink: 'syz.4.5919': attribute type 19 has an invalid length. [ 831.261415][T24704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5919'. [ 831.421691][T24708] netlink: 'syz.4.5920': attribute type 9 has an invalid length. [ 831.495215][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5922'. [ 831.504494][T24712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5922'. [ 831.615245][T24716] : option downdelay: invalid value (18446744073709547007) [ 831.622652][T24716] : option downdelay: allowed values 0 - 2147483647 [ 831.642713][T24716]  (unregistering): Released all slaves [ 832.678077][T24759] netlink: 'syz.4.5938': attribute type 9 has an invalid length. [ 832.700784][T24757] block nbd5: not configured, cannot reconfigure [ 832.710541][T24757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5939'. [ 832.798268][T24761] x_tables: duplicate underflow at hook 3 [ 832.924414][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5944'. [ 832.934065][T24766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5944'. [ 833.274944][T24778] syzkaller0: entered promiscuous mode [ 833.280472][T24778] syzkaller0: entered allmulticast mode [ 834.660635][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.673505][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.684643][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.693250][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.701159][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.882395][T24820] syzkaller0: entered promiscuous mode [ 834.887981][T24820] syzkaller0: entered allmulticast mode [ 835.465168][T24809] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.472616][T24809] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.480205][T24809] bridge_slave_0: entered allmulticast mode [ 835.488447][T24809] bridge_slave_0: entered promiscuous mode [ 835.499911][T24809] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.508828][T24809] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.522271][T24809] bridge_slave_1: entered allmulticast mode [ 835.542917][T24809] bridge_slave_1: entered promiscuous mode [ 835.573536][T24809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.586030][T24809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.634410][T24809] team0: Port device team_slave_0 added [ 835.643571][T24809] team0: Port device team_slave_1 added [ 835.681039][T24809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.688051][T24809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.718932][T24809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.743648][T24809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.750659][T24809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.776587][T24809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.857387][T24809] hsr_slave_0: entered promiscuous mode [ 835.864023][T24809] hsr_slave_1: entered promiscuous mode [ 835.870585][T24809] debugfs: 'hsr0' already exists in 'hsr' [ 835.876510][T24809] Cannot create hsr debugfs directory [ 836.229570][T20060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.424308][T20060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.637911][T20060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.771824][T18150] Bluetooth: hci2: command tx timeout [ 836.854315][T20060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.023024][T20060] bridge_slave_1: left allmulticast mode [ 837.028748][T20060] bridge_slave_1: left promiscuous mode [ 837.047576][T20060] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.057955][T20060] bridge_slave_0: left allmulticast mode [ 837.063633][T20060] bridge_slave_0: left promiscuous mode [ 837.069360][T20060] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.145125][T24791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.466710][T20060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.478132][T20060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.514192][T20060] bond0 (unregistering): Released all slaves [ 837.528710][T24809] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 837.539673][T24809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 837.548888][T24844] __nla_validate_parse: 3 callbacks suppressed [ 837.548911][T24844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5966'. [ 837.556675][T24847] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.587935][T24809] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 837.645767][T24809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 837.673786][T24809] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 837.773198][T24809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 837.845267][T24860] netlink: 'syz.4.5971': attribute type 9 has an invalid length. [ 837.878965][T24809] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 837.907052][T24809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.918772][T24862] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 838.435406][T24882] syzkaller0: entered promiscuous mode [ 838.440953][T24882] syzkaller0: entered allmulticast mode [ 838.787375][T24895] xt_TPROXY: Can be used only with -p tcp or -p udp [ 838.815417][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 838.833603][T24809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.863289][T18150] Bluetooth: hci2: command tx timeout [ 838.933061][T24809] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.980647][T20054] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.987921][T20054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.021094][T20106] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.028439][T20106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.083730][T24905] netlink: 'syz.5.5978': attribute type 1 has an invalid length. [ 839.310538][T20060] hsr_slave_0: left promiscuous mode [ 839.321052][T20060] hsr_slave_1: left promiscuous mode [ 839.327414][T20060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.334858][T20060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.343008][T20060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.350450][T20060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.372931][T20060] veth1_macvtap: left promiscuous mode [ 839.378489][T20060] veth0_macvtap: left promiscuous mode [ 839.384132][T20060] veth1_vlan: left promiscuous mode [ 839.389448][T20060] veth0_vlan: left promiscuous mode [ 839.680902][T20060] team0 (unregistering): Port device team_slave_1 removed [ 839.701299][T20060] team0 (unregistering): Port device team_slave_0 removed [ 839.843019][T24914] : option downdelay: invalid value (18446744073709547007) [ 839.850381][T24914] : option downdelay: allowed values 0 - 2147483647 [ 839.880603][T24914]  (unregistering): Released all slaves [ 840.151528][T24922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5981'. [ 840.217642][T24809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.653500][T24809] veth0_vlan: entered promiscuous mode [ 840.673185][T24809] veth1_vlan: entered promiscuous mode [ 840.733099][T24809] veth0_macvtap: entered promiscuous mode [ 840.770226][T24809] veth1_macvtap: entered promiscuous mode [ 840.792855][T24809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.808967][T24809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.926194][T20108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.935078][T20108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.986938][T18150] Bluetooth: hci2: command tx timeout [ 840.992410][T20106] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.036088][T20108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.370311][T24943] syzkaller0: entered promiscuous mode [ 841.376679][T24943] syzkaller0: entered allmulticast mode [ 841.440620][T24940] netlink: 'syz.5.5984': attribute type 9 has an invalid length. [ 841.634541][T24889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.723395][T20042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.750013][T20042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.896574][T20042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.896612][T24954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5988'. [ 841.935328][T20042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.002415][T24954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5988'. [ 842.899486][T24987] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20000 [ 843.008880][T18150] Bluetooth: hci2: command tx timeout [ 843.047455][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 843.314856][T24998] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5995'. [ 843.689770][T25013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5997'. [ 844.110938][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 844.379041][T25026] syzkaller0: entered promiscuous mode [ 844.384595][T25026] syzkaller0: entered allmulticast mode [ 844.706772][T25044] netlink: 'syz.6.6001': attribute type 9 has an invalid length. [ 845.366320][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 845.705763][T25069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6004'. [ 845.715190][T25069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6004'. [ 845.722609][T25071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6005'. [ 845.980556][T25074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6006'. [ 846.428781][T25085] : option downdelay: invalid value (18446744073709547007) [ 846.436114][T25085] : option downdelay: allowed values 0 - 2147483647 [ 846.444222][T25085]  (unregistering): Released all slaves [ 846.728706][T25090] syzkaller0: entered promiscuous mode [ 846.734382][T25090] syzkaller0: entered allmulticast mode [ 847.348956][T25025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.957303][T25114] team0: Port device syz_tun added [ 848.050247][T25118] syzkaller0: entered promiscuous mode [ 848.055793][T25118] syzkaller0: entered allmulticast mode [ 848.521609][T25134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6028'. [ 848.526319][T25133] ieee802154 phy1 wpan1: encryption failed: -90 [ 849.673698][T25157] netlink: 'syz.4.6031': attribute type 361 has an invalid length. [ 849.719851][T25157] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6031'. [ 849.950405][T25164] syzkaller1: entered promiscuous mode [ 849.956129][T25164] syzkaller1: entered allmulticast mode [ 850.848788][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 850.858586][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 850.868319][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 850.878009][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 850.891677][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 850.901968][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 850.911677][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 850.921376][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6040'. [ 851.327452][T25215] ip6tnl0: Caught tx_queue_len zero misconfig [ 851.646855][T25226] netlink: 'syz.2.6050': attribute type 1 has an invalid length. [ 851.656148][T25226] xt_NFQUEUE: number of total queues is 0 [ 851.935517][T25230] netlink: 'syz.2.6052': attribute type 30 has an invalid length. [ 852.027245][T25235] nbd: couldn't find a device at index 2 [ 852.539954][T25260] syzkaller0: entered promiscuous mode [ 852.545766][T25260] syzkaller0: entered allmulticast mode [ 853.032479][T25278] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.041932][T25277] ieee802154 phy1 wpan1: encryption failed: -22 [ 855.325059][T25247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 855.467238][T25291] syzkaller0: entered promiscuous mode [ 855.472794][T25291] syzkaller0: entered allmulticast mode [ 855.580476][T25293] block nbd4: not configured, cannot reconfigure [ 855.590006][T25293] __nla_validate_parse: 69 callbacks suppressed [ 855.590025][T25293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6074'. [ 855.831413][T25304] can: request_module (can-proto-0) failed. [ 856.105377][T25315] team0: Port device syz_tun added [ 856.237599][T25320] : option downdelay: invalid value (18446744073709547007) [ 856.244983][T25320] : option downdelay: allowed values 0 - 2147483647 [ 856.308752][T25320]  (unregistering): Released all slaves [ 857.370467][T25366] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 857.460686][T25366] bond1 (unregistering): Released all slaves [ 857.648153][T25388] Cannot find add_set index 0 as target [ 857.901562][T25400] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6101'. [ 858.243281][T25418] netlink: 13 bytes leftover after parsing attributes in process `syz.5.6095'. [ 859.712473][T25338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 860.085006][T25457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6116'. [ 860.496499][T25463] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.504162][T25463] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.734474][T25463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.749484][T25463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.995744][T20043] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.004709][T20043] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.013661][T20043] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.022596][T20043] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.143140][T25496] syzkaller0: entered promiscuous mode [ 861.148776][T25496] syzkaller0: entered allmulticast mode [ 861.489441][T25510] Cannot find add_set index 0 as target [ 862.329948][T25526] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6133'. [ 863.437591][T25474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 864.755359][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 864.796552][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 864.821075][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 864.864149][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 864.892291][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 866.158426][T25524] lo speed is unknown, defaulting to 1000 [ 866.179811][T25529] : option downdelay: invalid value (18446744073709547007) [ 866.187151][T25529] : option downdelay: allowed values 0 - 2147483647 [ 866.195044][T25529]  (unregistering): Released all slaves [ 866.270413][T23916] team0: Port device syz_tun removed [ 866.285261][T25524] lo speed is unknown, defaulting to 1000 [ 866.292866][T25524] lo speed is unknown, defaulting to 1000 [ 866.303003][T25524] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 866.322783][T25524] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 866.351686][T25524] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 866.401926][T25524] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 866.500448][T25524] lo speed is unknown, defaulting to 1000 [ 866.542105][T25524] lo speed is unknown, defaulting to 1000 [ 866.572947][T25524] lo speed is unknown, defaulting to 1000 [ 866.602334][T25524] lo speed is unknown, defaulting to 1000 [ 866.619122][T25524] lo speed is unknown, defaulting to 1000 [ 866.637541][T25524] lo speed is unknown, defaulting to 1000 [ 866.658639][T25553] ipvlan2: entered promiscuous mode [ 866.665714][T25553] bridge0: port 2(ipvlan2) entered blocking state [ 866.672301][T25553] bridge0: port 2(ipvlan2) entered disabled state [ 866.679207][T25553] ipvlan2: entered allmulticast mode [ 866.705543][T25553] bridge0: entered allmulticast mode [ 866.714393][T25553] ipvlan2: left allmulticast mode [ 866.719498][T25553] bridge0: left allmulticast mode [ 866.831668][T25524] lo speed is unknown, defaulting to 1000 [ 866.839631][T25524] lo speed is unknown, defaulting to 1000 [ 866.969758][T25548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.087977][T25539] lo speed is unknown, defaulting to 1000 [ 867.145198][ T5629] Bluetooth: hci3: command tx timeout [ 867.378170][T25548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.618668][T25539] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.625904][T25539] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.633115][T25539] bridge_slave_0: entered allmulticast mode [ 867.640541][T25539] bridge_slave_0: entered promiscuous mode [ 867.649058][T25539] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.656343][T25539] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.663524][T25539] bridge_slave_1: entered allmulticast mode [ 867.670929][T25539] bridge_slave_1: entered promiscuous mode [ 867.733708][T25539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.746797][T25539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.833811][T25548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.871318][T25539] team0: Port device team_slave_0 added [ 867.879657][T25539] team0: Port device team_slave_1 added [ 867.918540][T25539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.925551][T25539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.951536][T25539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.964213][T25539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.978238][T25539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.004262][T25539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.083283][T25548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.103926][T25539] hsr_slave_0: entered promiscuous mode [ 868.110547][T25539] hsr_slave_1: entered promiscuous mode [ 868.117017][T25539] debugfs: 'hsr0' already exists in 'hsr' [ 868.122779][T25539] Cannot create hsr debugfs directory [ 868.528294][T20054] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.546323][T25593] syzkaller0: entered promiscuous mode [ 868.551889][T25593] syzkaller0: entered allmulticast mode [ 868.645760][T20054] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.693921][T20054] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.702884][T20054] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.235879][ T5629] Bluetooth: hci3: command tx timeout [ 869.837081][T25559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.910019][T25539] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 869.956377][T25539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.964529][T25539] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 870.023319][T25539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.031473][T25539] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 870.085178][T25539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.114615][T25539] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 870.131757][T25539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.171438][T25597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6148'. [ 870.224871][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.275545][T25539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.293639][T25539] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.377831][T25613] block nbd5: not configured, cannot reconfigure [ 870.461023][T20106] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.468227][T20106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.479504][T20106] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.486702][T20106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.955770][T25631] lo speed is unknown, defaulting to 1000 [ 871.013580][T25628] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6154'. [ 871.075122][ T9551] lo speed is unknown, defaulting to 1000 [ 871.080943][ T9551] syz2: Port: 1 Link ACTIVE [ 871.331014][ T5629] Bluetooth: hci3: command tx timeout [ 871.416989][T25539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.982129][T25539] veth0_vlan: entered promiscuous mode [ 872.010467][T25539] veth1_vlan: entered promiscuous mode [ 872.042732][T25539] veth0_macvtap: entered promiscuous mode [ 872.052546][T25539] veth1_macvtap: entered promiscuous mode [ 872.071164][T25539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.085420][T25539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.218193][T20060] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.241543][T20060] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.251275][T20060] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.262654][T20060] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.413517][ T5629] Bluetooth: hci3: command tx timeout [ 874.108781][T25643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.302458][T20108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.312495][T20108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.345034][T20042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.353443][T20042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.473449][T20042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.484658][T20042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.605350][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6170'. [ 874.619582][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6170'. [ 874.815222][T20042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.827320][T20042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.419736][T20042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.430093][T20042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.953429][T20042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.981193][T20042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.128022][T25735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6178'. [ 876.138017][T25735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6178'. [ 876.354211][T20042] bridge_slave_1: left allmulticast mode [ 876.362195][T20042] bridge_slave_1: left promiscuous mode [ 876.368028][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.377855][T20042] bridge_slave_0: left allmulticast mode [ 876.383605][T20042] bridge_slave_0: left promiscuous mode [ 876.389364][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.608715][T20042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.619955][T20042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.642219][T20042] bond0 (unregistering): Released all slaves [ 876.654170][T20042] bond1 (unregistering): Released all slaves [ 877.220626][T25682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.419847][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6180'. [ 877.883283][T25759] team0: Port device syz_tun removed [ 877.889227][T25759] bridge_slave_0: left allmulticast mode [ 877.894975][T25759] bridge_slave_0: left promiscuous mode [ 877.900822][T25759] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.944428][T25759] bridge_slave_1: left allmulticast mode [ 877.990549][T25759] bridge_slave_1: left promiscuous mode [ 877.996436][T25759] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.013338][T25759] bond0: (slave bond_slave_0): Releasing backup interface [ 878.023543][T25759] bond0: (slave bond_slave_1): Releasing backup interface [ 878.036037][T25759] team0: Port device team_slave_0 removed [ 878.046403][T25759] team0: Port device team_slave_1 removed [ 878.052667][T25759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.060955][T25759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.069178][T25759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.116413][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6188'. [ 878.125691][T25770] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6188'. [ 878.174420][T20042] hsr_slave_0: left promiscuous mode [ 878.181034][T20042] hsr_slave_1: left promiscuous mode [ 878.189282][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.213590][T20042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.265265][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.292730][T20042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.392015][T20042] veth1_macvtap: left promiscuous mode [ 878.406961][T20042] veth0_macvtap: left promiscuous mode [ 878.440237][T20042] veth1_vlan: left promiscuous mode [ 878.446561][T20042] veth0_vlan: left promiscuous mode [ 878.825556][T20042] team0 (unregistering): Port device team_slave_1 removed [ 878.848723][T20042] team0 (unregistering): Port device team_slave_0 removed [ 878.877063][T25793] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6193'. [ 879.074360][T25763] tipc: Enabled bearer , priority 0 [ 879.131899][T25768] syzkaller0: entered promiscuous mode [ 879.137449][T25768] syzkaller0: entered allmulticast mode [ 879.144882][T25768] tipc: Resetting bearer [ 879.151952][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 879.189332][T25762] tipc: Resetting bearer [ 879.448596][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6196'. [ 883.772285][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 883.815098][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 883.838737][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 883.849478][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 883.878477][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 883.930712][T25762] tipc: Disabling bearer [ 883.996997][T25804] erspan1: entered allmulticast mode [ 884.010325][T25806] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 884.024284][T23766] tipc: Node number set to 1055587067 [ 884.457207][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6202'. [ 884.500674][T25830] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6202'. [ 884.842992][T25808] lo speed is unknown, defaulting to 1000 [ 884.971225][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6209'. [ 885.015912][T25858] IPVS: lc: FWM 3 0x00000003 - no destination available [ 885.025037][T20108] IPVS: starting estimator thread 0... [ 885.071675][T25858] tipc: Failed to remove unknown binding: 66,1,1/0:3099747490/3099747492 [ 885.230704][T25868] block nbd4: not configured, cannot reconfigure [ 885.242971][T25868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6210'. [ 885.398207][T25834] syzkaller0: entered promiscuous mode [ 885.403772][T25834] syzkaller0: entered allmulticast mode [ 885.433513][T25862] IPVS: using max 25 ests per chain, 60000 per kthread [ 885.524314][T25876] Cannot find add_set index 0 as target [ 885.584129][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 885.703932][T25881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6213'. [ 886.047084][T18150] Bluetooth: hci4: command tx timeout [ 886.320651][T25808] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.329066][T25808] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.336786][T25808] bridge_slave_0: entered allmulticast mode [ 886.344631][T25808] bridge_slave_0: entered promiscuous mode [ 886.356340][T25808] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.363716][T25808] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.371440][T25808] bridge_slave_1: entered allmulticast mode [ 886.429172][T25808] bridge_slave_1: entered promiscuous mode [ 886.723061][T25808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.802609][T25808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.865056][T25916] team0: Port device syz_tun added [ 886.900784][T25808] team0: Port device team_slave_0 added [ 886.923066][T25808] team0: Port device team_slave_1 added [ 887.051890][T25914] syzkaller0: entered promiscuous mode [ 887.057439][T25914] syzkaller0: entered allmulticast mode [ 887.607140][T25808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.614164][T25808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.640082][T25808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.652857][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 887.672923][T25808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.700671][T25808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.754302][T18150] Bluetooth: hci1: command 0x0405 tx timeout [ 887.765913][T25946] netlink: 'syz.6.6226': attribute type 13 has an invalid length. [ 887.792668][T25808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.928281][T25808] hsr_slave_0: entered promiscuous mode [ 887.935185][T25808] hsr_slave_1: entered promiscuous mode [ 887.946089][T25808] debugfs: 'hsr0' already exists in 'hsr' [ 887.951995][T25808] Cannot create hsr debugfs directory [ 887.958677][T25946] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6226'. [ 888.028193][T25953] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6229'. [ 888.118332][ T5629] Bluetooth: hci4: command tx timeout [ 888.408241][T25946] bond_slave_0: entered promiscuous mode [ 888.413980][T25946] bond_slave_0: entered allmulticast mode [ 888.616631][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 888.963697][T25808] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 888.975566][T25808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.991337][T25808] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 889.061683][T25808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.069988][T25808] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 889.086427][T25808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.101864][T25808] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 889.113408][T25808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.454062][T26004] syzkaller0: entered promiscuous mode [ 889.466694][T26004] syzkaller0: entered allmulticast mode [ 890.205784][ T5629] Bluetooth: hci4: command tx timeout [ 892.275483][ T5629] Bluetooth: hci4: command tx timeout [ 895.143228][T25808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.214808][T25808] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.229748][T20081] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.237050][T20081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.254067][T26023] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 895.265897][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6243'. [ 895.274918][T26056] netlink: 'syz.6.6243': attribute type 21 has an invalid length. [ 895.282952][T26023] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 895.294292][T20106] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.310134][T26023] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 895.319413][T20106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.707922][T26071] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6246'. [ 896.086022][T26082] hsr0: entered allmulticast mode [ 896.091151][T26082] hsr_slave_0: entered allmulticast mode [ 896.135008][T26084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6248'. [ 896.143958][T26084] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6248'. [ 896.165918][T26082] hsr_slave_1: entered allmulticast mode [ 896.263399][T26081] hsr0: left allmulticast mode [ 896.268260][T26081] hsr_slave_0: left allmulticast mode [ 896.273787][T26081] hsr_slave_1: left allmulticast mode [ 896.818969][T26102] netlink: 316 bytes leftover after parsing attributes in process `syz.7.6255'. [ 896.828080][T26102] openvswitch: netlink: Flow key attr not present in new flow. [ 896.943891][T26101] syzkaller0: entered promiscuous mode [ 896.963596][T26101] syzkaller0: entered allmulticast mode [ 897.888986][T26136] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6262'. [ 901.767145][T25592] team0: Port device syz_tun removed [ 902.112433][T26157] : option downdelay: invalid value (18446744073709547007) [ 902.119864][T26157] : option downdelay: allowed values 0 - 2147483647 [ 902.128855][T26157]  (unregistering): Released all slaves [ 902.201627][T25808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.456936][T20053] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.592880][T26174] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 902.781037][T26174] 8021q: adding VLAN 0 to HW filter on device bond5 [ 903.062744][T26177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 903.081519][T26177] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.091771][T26177] bond5: (slave team0): making interface the new active one [ 903.100500][T26177] bond5: (slave team0): Enslaving as an active interface with an up link [ 903.259837][T26199] xt_NFQUEUE: number of total queues is 0 [ 903.276861][T20053] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.320189][T26202] block nbd4: not configured, cannot reconfigure [ 903.344438][T26202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6275'. [ 903.448801][T26196] syzkaller0: entered promiscuous mode [ 903.454369][T26196] syzkaller0: entered allmulticast mode [ 903.589588][T26206] block nbd5: not configured, cannot reconfigure [ 903.600320][T26206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6277'. [ 907.675710][T20053] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.710603][T26211] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.758509][T25808] veth0_vlan: entered promiscuous mode [ 907.814622][T25808] veth1_vlan: entered promiscuous mode [ 908.071532][T26234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6284'. [ 908.113423][T25808] veth0_macvtap: entered promiscuous mode [ 908.154191][T25808] veth1_macvtap: entered promiscuous mode [ 908.264410][T25808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.339535][T25808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.508839][T20053] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.641703][T26254] nbd: must specify at least one socket [ 908.757283][T20043] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.875853][T20108] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.888051][T20108] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.896852][T20108] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.294341][T26284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6293'. [ 909.315209][T26284] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6293'. [ 910.836256][ T5629] Bluetooth: hci1: command 0x0405 tx timeout [ 910.851211][T26260] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 910.857678][T26260] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 931.674133][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.682130][T26260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 938.704661][T26260] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 938.838931][T26260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 938.876261][T26260] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 941.199066][ C0] sched: DL replenish lagged too much [ 974.479745][T20053] bridge_slave_1: left allmulticast mode [ 974.492949][T20053] bridge_slave_1: left promiscuous mode [ 974.501751][T20053] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.541906][T20053] bridge_slave_0: left allmulticast mode [ 974.547719][T20053] bridge_slave_0: left promiscuous mode [ 974.553584][T20053] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.019537][T20053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.039736][T20053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.054295][T20053] bond0 (unregistering): Released all slaves [ 979.071194][T20053] bond1 (unregistering): Released all slaves [ 986.332911][T20053] bond2 (unregistering): Released all slaves [ 986.502818][T26260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 986.512518][T26260] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 993.156025][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.133181][T26284] team0: Port device syz_tun removed [ 997.272746][ T5629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1016.071937][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1016.251378][T20053] hsr_slave_0: left promiscuous mode [ 1016.261727][T20053] hsr_slave_1: left promiscuous mode [ 1016.268818][T20053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.276681][T20053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.294665][T20053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.302198][T20053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.343778][T20053] veth1_macvtap: left promiscuous mode [ 1016.349447][T20053] veth0_macvtap: left promiscuous mode [ 1016.355108][T20053] veth1_vlan: left promiscuous mode [ 1016.362137][T20053] veth0_vlan: left promiscuous mode [ 1016.582843][T26362] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1016.731271][T26440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1016.750249][T26440] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1016.767124][T26440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1016.787318][T26440] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1016.817050][T26441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1016.827790][T26440] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1016.866085][T26441] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1016.879459][T26440] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1016.903957][T26441] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1016.918629][T26440] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1016.944197][T26442] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1016.951723][T26440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1016.964477][T26442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1016.980601][T26440] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1016.988251][T26441] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1016.998324][T26442] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1017.012092][T26440] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1017.021918][T26441] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1017.032047][T26442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.041980][T26441] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1017.049523][T26440] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1017.057695][T26442] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1017.068188][T26441] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1017.078047][T26440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.089112][T26442] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1017.108065][T26441] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1017.120274][T26442] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1017.143288][T26441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.162064][T26442] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1017.169695][T26440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1017.179300][T26441] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1017.186718][T26444] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1017.218403][T26441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1017.231497][T26442] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1017.241519][T26441] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1017.249400][T26442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.256980][T26441] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1017.266746][T26442] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1017.274396][T26441] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1017.282408][T26442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.290828][T26441] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1017.298615][T26442] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1017.310933][T26442] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1017.347208][T26442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.358335][T26442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1017.492974][T26442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1017.504550][T26442] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1017.516082][T26442] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1017.524926][T26442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.540209][T26442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.548665][T26442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.556392][T26442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1017.565226][T26442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.574759][T26442] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1017.582555][T26442] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1017.589968][T26398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1017.621977][ T5629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1017.653129][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1017.669161][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1017.676805][T26442] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1017.686874][T26442] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1017.703751][T26442] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1017.711465][T26442] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1017.722083][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1017.737438][T26442] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1017.865627][T26442] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1017.891511][T26442] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1017.899516][T26442] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1017.909950][T26442] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1017.921070][T26442] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1017.933071][T26442] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1017.946908][ T5629] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1017.961187][ T5629] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1017.968622][T26442] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.978005][T26442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.990057][T26442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.998462][T26442] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1018.016219][T26442] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1018.032791][T18150] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1018.040389][T26442] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1018.068657][T26442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1018.094695][T26442] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1018.102657][T26442] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1018.110437][T26442] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1018.125963][T26442] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1018.210352][T18150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1018.226472][T18150] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1018.246697][T18150] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1018.291303][ T5629] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1018.315851][ T5629] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1019.635767][T18150] Bluetooth: hci1: command tx timeout [ 1019.816182][T18150] Bluetooth: hci7: command tx timeout [ 1019.866049][T18150] Bluetooth: hci9: command tx timeout [ 1019.874315][ T5629] Bluetooth: hci6: command tx timeout [ 1020.195603][ T5629] Bluetooth: hci8: command tx timeout [ 1020.210581][T18150] Bluetooth: hci10: command tx timeout [ 1020.296203][T18150] Bluetooth: hci11: command tx timeout [ 1020.366493][T18150] Bluetooth: hci2: command tx timeout [ 1020.476444][T18150] Bluetooth: hci12: command tx timeout [ 1021.726157][T18150] Bluetooth: hci1: command tx timeout [ 1021.886082][T18150] Bluetooth: hci7: command tx timeout [ 1021.955792][ T5629] Bluetooth: hci6: command tx timeout [ 1021.962961][T18150] Bluetooth: hci9: command tx timeout [ 1022.275770][T18150] Bluetooth: hci10: command tx timeout [ 1022.282578][ T5629] Bluetooth: hci8: command tx timeout [ 1022.377417][T18150] Bluetooth: hci11: command tx timeout [ 1022.446569][T18150] Bluetooth: hci2: command tx timeout [ 1022.556347][T18150] Bluetooth: hci12: command tx timeout [ 1023.808974][T18150] Bluetooth: hci1: command tx timeout [ 1023.976290][T18150] Bluetooth: hci7: command tx timeout [ 1024.076478][ T5629] Bluetooth: hci6: command tx timeout [ 1024.081991][T18150] Bluetooth: hci9: command tx timeout [ 1024.355577][ T5629] Bluetooth: hci8: command tx timeout [ 1024.361108][T18150] Bluetooth: hci10: command tx timeout [ 1024.455909][ T5629] Bluetooth: hci11: command tx timeout [ 1024.526553][ T5629] Bluetooth: hci2: command tx timeout [ 1024.625879][ T5629] Bluetooth: hci12: command tx timeout [ 1025.876025][ T5629] Bluetooth: hci1: command tx timeout [ 1026.046200][ T5629] Bluetooth: hci7: command tx timeout [ 1026.157780][ T5629] Bluetooth: hci9: command tx timeout [ 1026.163413][T18150] Bluetooth: hci6: command tx timeout [ 1026.435631][T18150] Bluetooth: hci10: command tx timeout [ 1026.441256][ T5629] Bluetooth: hci8: command tx timeout [ 1026.535865][ T5629] Bluetooth: hci11: command tx timeout [ 1026.596525][ T5629] Bluetooth: hci2: command tx timeout [ 1026.706210][ T5629] Bluetooth: hci12: command tx timeout [ 1045.870152][T18150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1045.891190][T18150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.920249][T18150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.941028][T18150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.955486][T18150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.322270][T18150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1046.342362][T18150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1046.353031][T18150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1046.373372][T18150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1046.381315][T18150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1046.564974][T18150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1046.581013][T18150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1046.591472][T18150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1046.622345][T18150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1046.630265][T18150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1046.814585][ T5629] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1046.843187][ T5629] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1046.862464][ T5629] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1046.887366][ T5629] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1046.895472][ T5629] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1048.038332][T18150] Bluetooth: hci3: command tx timeout [ 1048.467054][T18150] Bluetooth: hci4: command tx timeout [ 1048.697257][T18150] Bluetooth: hci5: command tx timeout [ 1049.015981][T18150] Bluetooth: hci13: command tx timeout [ 1050.116221][T18150] Bluetooth: hci3: command tx timeout [ 1050.547075][T18150] Bluetooth: hci4: command tx timeout [ 1050.776054][T18150] Bluetooth: hci5: command tx timeout [ 1051.097760][T18150] Bluetooth: hci13: command tx timeout [ 1052.195918][T18150] Bluetooth: hci3: command tx timeout [ 1052.586349][T18150] Bluetooth: hci4: command tx timeout [ 1052.856201][T18150] Bluetooth: hci5: command tx timeout [ 1053.186292][T18150] Bluetooth: hci13: command tx timeout [ 1054.285994][T18150] Bluetooth: hci3: command tx timeout [ 1054.519862][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.675897][T18150] Bluetooth: hci4: command tx timeout [ 1054.946162][T18150] Bluetooth: hci5: command tx timeout [ 1055.226127][T18150] Bluetooth: hci13: command tx timeout [ 1064.939619][ T5629] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1064.963979][ T5629] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1064.977101][ T5629] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1064.989968][ T5629] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1065.001659][ T5629] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1066.996245][T18150] Bluetooth: hci14: command tx timeout [ 1069.075731][T18150] Bluetooth: hci14: command tx timeout [ 1071.197569][T18150] Bluetooth: hci14: command tx timeout [ 1073.266114][T18150] Bluetooth: hci14: command tx timeout [ 1107.481585][ T5629] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1107.500951][ T5629] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1107.511428][ T5629] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1107.533830][ T5629] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1107.546461][ T5629] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1107.766550][T18150] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1107.784632][T18150] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1107.806082][T18150] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1107.831606][T18150] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1107.841797][T18150] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1108.015236][ T5629] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1108.045855][ T5629] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1108.056660][ T5629] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1108.069501][ T5629] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1108.077594][ T5629] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1108.168506][T18150] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1108.190057][T18150] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1108.204137][T18150] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1108.216443][T18150] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1108.224398][T18150] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1109.745906][T18150] Bluetooth: hci15: command tx timeout [ 1109.906151][T18150] Bluetooth: hci16: command tx timeout [ 1110.126232][T18150] Bluetooth: hci17: command tx timeout [ 1110.286072][T18150] Bluetooth: hci18: command tx timeout [ 1111.826063][T18150] Bluetooth: hci15: command tx timeout [ 1111.996970][T18150] Bluetooth: hci16: command tx timeout [ 1112.206009][T18150] Bluetooth: hci17: command tx timeout [ 1112.365972][T18150] Bluetooth: hci18: command tx timeout [ 1113.905890][T18150] Bluetooth: hci15: command tx timeout [ 1114.066403][T18150] Bluetooth: hci16: command tx timeout [ 1114.286188][T18150] Bluetooth: hci17: command tx timeout [ 1114.445744][T18150] Bluetooth: hci18: command tx timeout [ 1115.976589][T18150] Bluetooth: hci15: command tx timeout [ 1115.991863][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.146556][T18150] Bluetooth: hci16: command tx timeout [ 1116.367656][T18150] Bluetooth: hci17: command tx timeout [ 1116.525790][T18150] Bluetooth: hci18: command tx timeout [ 1123.765414][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1123.772432][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9553/1:b..l [ 1123.781025][ C1] rcu: (detected by 1, t=10503 jiffies, g=151193, q=8550 ncpus=2) [ 1123.788974][ C1] task:kworker/0:12 state:R running task stack:24296 pid:9553 tgid:9553 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1123.804086][ C1] Workqueue: events_power_efficient gc_worker [ 1123.810328][ C1] Call Trace: [ 1123.813647][ C1] [ 1123.816618][ C1] __schedule+0x17d9/0x56c0 [ 1123.821177][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1123.826245][ C1] ? __virt_addr_valid+0x137/0x390 [ 1123.831406][ C1] ? lock_acquire+0x106/0x350 [ 1123.836136][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1123.841138][ C1] ? __pfx___schedule+0x10/0x10 [ 1123.846046][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1123.851109][ C1] irqentry_exit+0x14f/0x8f0 [ 1123.855744][ C1] ? trace_irq_disable+0x3b/0x140 [ 1123.860839][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1123.866898][ C1] RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 [ 1123.874007][ C1] Code: 00 75 11 e8 85 b3 d5 f7 4d 85 f6 75 16 e8 7b b3 d5 f7 eb 15 e8 74 b3 d5 f7 e8 8f c4 e0 01 4d 85 f6 74 ea e8 65 b3 d5 f7 fb 5b <41> 5e e9 fc c6 e3 01 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 1123.893670][ C1] RSP: 0018:ffffc900061a7990 EFLAGS: 00000293 [ 1123.899792][ C1] RAX: ffffffff89f1609b RBX: 0000000000000001 RCX: ffff888032a63e00 [ 1123.907804][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1123.915865][ C1] RBP: ffffc900061a7af0 R08: ffffffff9057a737 R09: 1ffffffff20af4e6 [ 1123.923885][ C1] R10: dffffc0000000000 R11: fffffbfff20af4e7 R12: ffff8880375081d0 [ 1123.931917][ C1] R13: ffff888037508240 R14: 0000000000000200 R15: 0000000000015356 [ 1123.939943][ C1] ? seqcount_lockdep_reader_access+0xeb/0x100 [ 1123.946159][ C1] gc_worker+0x31b/0x1890 [ 1123.950553][ C1] ? gc_worker+0x274/0x1890 [ 1123.955115][ C1] ? __pfx_gc_worker+0x10/0x10 [ 1123.959921][ C1] ? rcu_is_watching+0x15/0xb0 [ 1123.964755][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1123.970525][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1123.976169][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1123.982217][ C1] ? assign_work+0x3cf/0x5d0 [ 1123.986866][ C1] worker_thread+0xa47/0xfb0 [ 1123.991518][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1123.996520][ C1] kthread+0x388/0x470 [ 1124.000671][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1124.005831][ C1] ? __pfx_kthread+0x10/0x10 [ 1124.010486][ C1] ret_from_fork+0x514/0xb70 [ 1124.015163][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.020332][ C1] ? __switch_to+0xc89/0x1420 [ 1124.025066][ C1] ? __pfx_kthread+0x10/0x10 [ 1124.029712][ C1] ret_from_fork_asm+0x1a/0x30 [ 1124.034540][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)