last executing test programs: 21m31.014656037s ago: executing program 0 (id=2964): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) socket(0x14, 0x2, 0x4) listen(0xffffffffffffffff, 0x0) close(0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x200}, 0x14}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@align=0xd0a, {0x5, 0x40, 0x7, 0x5}}, 0xe, 0x0, &(0x7f00000002c0)}, {[0x4, 0x1ff, 0x10001, 0x8]}, 0x6, 0x1b, &(0x7f0000000300)=""/27}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x3, 0x0, [0x80000000, 0xfffffffffffffffd, 0x5, 0x6, 0x5, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x78) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x2c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x44c16be5e48e81b2) 21m29.370885741s ago: executing program 0 (id=2974): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x1, 0x1c000) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) (async) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) (async) close(r2) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000000)={0x87, @empty, 0x4e20, 0x3, 'fo\x00', 0x2c, 0x6, 0x7e}, 0x2c) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) 21m2.801401101s ago: executing program 0 (id=2986): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000480)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) socket$netlink(0x10, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000400000000000000010ff02000000000000000000000000000189"], 0x340a) (async) sendmsg$nl_route(r4, 0x0, 0x200000c4) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 21m0.63402838s ago: executing program 0 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) accept(r1, 0x0, 0x0) (async) r2 = accept(r1, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) (async) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000206030000000000000000000700000305000100070000000900020073797a31000000000500050002000000050004000100000012000300686173683a6e65742c706f72740000002ff0738e0f82f3a767857c45"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100003040000000000000000000064d9", @ANYRES32=0x0, @ANYBLOB="080000000000000020001280080001007674690014000280080003000200000008000400ac1414bb"], 0x40}, 0x1, 0x2000000000000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, &(0x7f0000000040)) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000610000000000119078000000000000000000004e20004d90786046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a1f8259cbe4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29044411d1e17912370b3070a"], 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x1ff, 0x6, 0x4000240}, 0x10) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x1ff, 0x6, 0x4000240}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a80)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a80)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) 21m0.379545817s ago: executing program 0 (id=3130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\"', @ANYRES16=r6, @ANYBLOB="01000000000000000000140000001800078008000200010400000c0003000000000000000000"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 20m44.818100017s ago: executing program 32 (id=3130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\"', @ANYRES16=r6, @ANYBLOB="01000000000000000000140000001800078008000200010400000c0003000000000000000000"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 20m22.688958067s ago: executing program 4 (id=3278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)={0x1, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x5, 0x1018, 0xffffffffffffffff, 0xe}, 0x48) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r6, 0xd1b, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_DISASSOCIATE_REQ(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000884}, 0x10) 20m18.12079854s ago: executing program 4 (id=3292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x2}]}}]}, 0x38}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 20m16.758339466s ago: executing program 4 (id=3301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000280)={0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40100) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) 20m13.464711816s ago: executing program 4 (id=3305): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='+\r', 0x100000}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000200)={0x8, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(0x4) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000240)={0x4, 0x1}, 0x2) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 20m12.161904175s ago: executing program 4 (id=3313): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) close(0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x63}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x24, 0x4, 0x3, 0x31, 0x98, 0x65, 0x0, 0x9, 0x1, 0x0, @loopback, @local, {[@noop, @ssrr={0x89, 0x7, 0x6a, [@private=0xa010101]}, @ssrr={0x89, 0x17, 0x93, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x7b, 0x1, 0x0, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0xfff}]}, @rr={0x7, 0x13, 0x4a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @local, @broadcast]}, @end, @timestamp_prespec={0x44, 0x24, 0xdc, 0x3, 0xb, [{@broadcast}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8}]}]}}, @address_reply={0x12, 0x0, 0x0, 0x8}}}, 0xa6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) writev(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x105}], 0x1) 19m57.080509971s ago: executing program 33 (id=3313): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) close(0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x63}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x24, 0x4, 0x3, 0x31, 0x98, 0x65, 0x0, 0x9, 0x1, 0x0, @loopback, @local, {[@noop, @ssrr={0x89, 0x7, 0x6a, [@private=0xa010101]}, @ssrr={0x89, 0x17, 0x93, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x7b, 0x1, 0x0, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0xfff}]}, @rr={0x7, 0x13, 0x4a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @local, @broadcast]}, @end, @timestamp_prespec={0x44, 0x24, 0xdc, 0x3, 0xb, [{@broadcast}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8}]}]}}, @address_reply={0x12, 0x0, 0x0, 0x8}}}, 0xa6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) writev(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x105}], 0x1) 19m44.694378254s ago: executing program 5 (id=3357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00e4ff", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xffffffff, 0x3, 0x6, 0x1, 0x10001]}]}}}}}}}}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r1, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x68000, &(0x7f00000000c0)={@align, {0x1000, 0xe, 0xb, 0x8d}}, 0x9, &(0x7f0000000100), &(0x7f0000000240)=0x8}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x9000}, @val={0x0, 0x0, 0x80, 0x4, 0x10, 0x8}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @multicast, @local, @random="d0ca66ccba41", @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x42) 19m44.402349967s ago: executing program 5 (id=3360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 19m44.229705247s ago: executing program 5 (id=3361): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) shutdown(r5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 19m43.997976247s ago: executing program 5 (id=3363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) (async, rerun: 64) accept4(r0, 0x0, 0x0, 0x80800) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 19m43.50989144s ago: executing program 5 (id=3364): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x22}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0x2f}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 19m42.693635123s ago: executing program 5 (id=3368): r0 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000380)=0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x6, 0x11, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x26, 0x14}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@mcast1, 0x1a, 0x10, 0x10}, @sadb_x_filter={0x3, 0x1a, @in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x1d, 0x10, 0x10}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async, rerun: 32) r6 = socket$inet6(0xa, 0x800, 0x0) (rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0) (async, rerun: 32) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async, rerun: 32) recvmmsg(r6, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 19m27.171587175s ago: executing program 34 (id=3368): r0 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000380)=0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x6, 0x11, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x26, 0x14}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@mcast1, 0x1a, 0x10, 0x10}, @sadb_x_filter={0x3, 0x1a, @in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x1d, 0x10, 0x10}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async, rerun: 32) r6 = socket$inet6(0xa, 0x800, 0x0) (rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0) (async, rerun: 32) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async, rerun: 32) recvmmsg(r6, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 12m56.100860196s ago: executing program 2 (id=5892): syz_emit_ethernet(0xd5, &(0x7f0000000080)={@local, @broadcast, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x5, 0xc3, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "ed1378ef593cc4e1de5846e1381f443a1e799a5afe225cc251eebe7f762092a816d0c95aa4fc64dfc462f425bdc7aeeda69b6eed8c4d85636e8051ea12b4e0062523ea6100416fc354d0a403437f7c49f2c6df0ef2c236444bd61811bec27152b50b9416c4fde0449d344d"}, {0x8, 0x88be, 0x2, {{0xf, 0x1, 0x9, 0x3, 0x1, 0x1, 0x5, 0x5}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x10, 0x3, 0x1, 0x0, 0x1, 0x2c}, 0x2, {0x2, 0xc, 0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}}}}}}}}, 0x0) 12m56.065132672s ago: executing program 2 (id=5893): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'pimreg1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000009500000400000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac02}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r4 = socket(0x2d, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6a98cf64}, 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001d00)={r5, 0x0, 0x0}, 0x20) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r1, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) (rerun: 64) 12m55.757810067s ago: executing program 2 (id=5894): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000012149bec4145d9caa97d01000000000000000000"], 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000012149bec4145d9caa97d01000000000000000000"], 0x18}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r2, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) 12m55.51393152s ago: executing program 2 (id=5895): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x40) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000180)={r7}, &(0x7f0000000080)=0x8) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) 12m54.348378899s ago: executing program 2 (id=5907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'vlan0\x00', {0x3}, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$kcm(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x800) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0x8, 0x5, 0x8, 0x7, 0x2, 0x7, 0xb, "336b581f9f9c0199ac6889802481df015de428c1", "4552b72cd93e598002ccd4b7f4aacc1251275cb9"}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000804bc1d0f17d8b6e9300000002000000", @ANYRES32=r5], 0x18}, 0x1, 0x0, 0x0, 0x8040000}, 0x0) r7 = socket(0x8, 0x80000, 0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r8, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_IE={0x79, 0x2a, [@random_vendor={0xdd, 0x4c, "b5646fcdb70e794d915ab96b4930e3c1408467751573584919ef7af16aa30db30e1838cbe8bfa096dfea167aeb0e8c1cd7ac091354d0b0b2eb280029a7a5cce28969e4f50394f6d76a501184"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x0, @device_a, 0xa, @value=@device_b, 0xc, 0x7, @broadcast, 0x9}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 12m53.363820425s ago: executing program 2 (id=5913): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000d761f3b778c181ccda00"/33], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2c672, r5, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 12m38.038444773s ago: executing program 35 (id=5913): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000d761f3b778c181ccda00"/33], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2c672, r5, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 11m51.817012044s ago: executing program 1 (id=6240): poll(&(0x7f0000000040), 0x55, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x9, 0xb, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc890) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 11m49.600324993s ago: executing program 1 (id=6251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01020000003d26a0d500030026002757518e862596c435a59d0f2da8cd7c1c4d9c79b5e70022e17412ee9dd0d66e2ca86a58a6010000000000000064095364d60bbd8cb28f0b6f9057d64236f5dc93f405ee7778e2652e92c739aad144387685904bb6f6637f59f8300405f5b1723d1c4b51b913b9948a7da70e14f0714f"], 0x14}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25160000000c00060002000000020000000c000600030000000000000008000300", @ANYRES32=r4, @ANYBLOB="0c00060003000000000000000c00060001000000000000000c00060001000000010000001f6f456e08d26dad15a06ed1d9713844a8c3237d9084910ecfcbc7edc87873dd99175ca103cc9497727521bad26547754bbe"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x300, 0x1, 0xe, 0x84, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) 11m49.469795817s ago: executing program 1 (id=6252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x44, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0xc2, 0x2000, 0x0, 0x7, {[@mptcp=@capable={0x1e, 0xc, 0xf, 0x1, 0x5, 0x1}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @md5sig={0x13, 0x12, "f2a3c47d2be4dabe21013d40454c15b5"}]}}}}}}}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r8 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x7f}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff2}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x9, 0xe, 0x4, {0xd7, 0x1, 0x8, 0x1, 0x200, 0x6}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0xe}, 0x8, 0x80, 0x6f8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff8e, 0x8, 0x1ff, 0x7b7e, 0xc0, 0xa, 0x401, 0x4, 0x6, 0x0, 0xd3d, 0x6, 0x2, 0x5, 0x4, 0x6, 0x8e01, 0x6, 0x7, 0x4, 0xea7, 0x31, 0x20000000, 0x8001, 0x1, 0x100, 0x6, 0x0, 0x0, 0x7, 0xb7, 0x7, 0x2, 0xc6e, 0x400000, 0xf79, 0xec9e, 0x5, 0x6, 0x6, 0x40, 0x401, 0xffffff54, 0x4, 0x3, 0x95, 0xf, 0x9, 0x4, 0xfffffffa, 0x0, 0x3, 0x3, 0x0, 0x100, 0x200, 0x8, 0x2, 0x4, 0x3, 0x4, 0xffffffa8, 0x0, 0x2, 0x47, 0x85ff, 0x4, 0x0, 0x964d, 0x5f, 0xfffffffd, 0x1, 0x8d5f, 0x4, 0x6, 0xffff, 0x2, 0x80000000, 0x384a, 0x8, 0x3, 0x5, 0x7f, 0x80, 0xffffeb06, 0xf93, 0x9, 0xfffffcfc, 0x5, 0xfffffe00, 0xed, 0x401, 0x80000000, 0x80000001, 0x5a57ee2d, 0xfffffffd, 0x8, 0x6, 0x9, 0x5, 0x0, 0x1, 0xfffffffd, 0x4, 0x8, 0x6, 0x6, 0x2, 0x8, 0x4, 0x4b4, 0x2, 0xc6cd, 0xc4, 0x3, 0x7f, 0x4, 0x0, 0xfe, 0x9, 0x7, 0x6, 0x5, 0x5, 0xfffffffb, 0x6, 0x0, 0x6, 0x4, 0x3, 0x0, 0x6, 0x49a, 0xcb, 0x8, 0x7, 0x2, 0x2, 0x8, 0xa, 0x5, 0x6, 0x30, 0x6, 0x9, 0x85398d5, 0x0, 0xfffffe01, 0x3, 0x0, 0x9, 0x5, 0x7, 0xc, 0xe571, 0x0, 0xfffffff9, 0x2a, 0x0, 0xfffffff7, 0xa4, 0xfffffffe, 0x1000, 0x3d1e, 0x0, 0x0, 0x3, 0x5, 0xec2b, 0x2, 0x2, 0xfffffffb, 0x0, 0x6, 0x9, 0x4, 0x80000000, 0x6, 0x869, 0x1ff, 0x8, 0x8, 0x9, 0x175, 0x9, 0xffffffff, 0x2, 0x8, 0x6, 0x0, 0x9, 0x9, 0x10000, 0x5, 0x5, 0x7fff, 0x0, 0x3, 0x5, 0x5, 0x0, 0x4cf, 0xa0000000, 0x8000, 0xc, 0x7, 0x8, 0x9, 0x401, 0xd, 0x9, 0xfffffffa, 0x4c, 0x9, 0x0, 0x8, 0x100, 0x9, 0x9, 0x8, 0xb, 0x7, 0x800, 0x3, 0xff, 0x4, 0x5, 0x0, 0x8, 0xff, 0x1, 0xe, 0x9, 0x2, 0x62, 0x0, 0x1, 0xc, 0x5, 0x7, 0x6, 0x7, 0x6, 0x80000, 0x9, 0x0, 0x0, 0x7f, 0x9, 0x80000000, 0x0, 0x5ae, 0x3, 0x400, 0xf1, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x9d7b, 0x2, 0xffffffff, 0x2, 0x7, 0x9, 0x2, 0x5, 0x1ff, 0x2, 0xc516, 0x0, 0xfffff0b5, 0x3, 0x3, 0x3, 0x8, 0x3ff, 0x2, 0x2, 0x3, 0xfffffffd, 0x41c, 0x46, 0x3, 0x76, 0x800, 0x3, 0x133, 0x6, 0x8, 0x6, 0x3, 0x9eca, 0x4, 0x8, 0x101, 0xa, 0x8, 0x2, 0x7ff, 0xfffff800, 0x3, 0x8001, 0x4, 0x2, 0x0, 0x0, 0x2, 0xfffffffb, 0x4, 0x7f, 0x141, 0x1f8, 0x1000, 0x5, 0x0, 0x7, 0xd3, 0xfffffffc, 0x2, 0x5, 0xc8d, 0x9, 0x6, 0xc, 0x0, 0x6, 0x8, 0x7, 0x5, 0x1, 0x1, 0x2, 0x6, 0xf1, 0xa, 0xfffffff9, 0x5, 0x2, 0x1327d97c, 0xffff527b, 0x9, 0xffffffff, 0x5, 0x7, 0x4, 0x8001, 0xff, 0xffff, 0x8, 0x7, 0x9000000, 0xde, 0x12a, 0xc, 0x8, 0xfffffeff, 0x6, 0x8, 0x76d4, 0x1, 0x7, 0x0, 0xebe2, 0xbe5, 0x3, 0x7f, 0xf, 0x9, 0x2, 0x0, 0x6, 0x8, 0x1, 0x0, 0x3, 0x8, 0x7fff, 0x5, 0xe0d3, 0x3, 0x6, 0x5, 0x9, 0x4, 0x1000, 0x2, 0x5, 0x400, 0x8, 0x8, 0xff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x1000, 0x80000000, 0xc, 0x3, 0x2fb, 0x5, 0x1, 0x9, 0x40, 0x1, 0xaf, 0xb, 0x4, 0x6, 0x4d444d0a, 0x100, 0xe5, 0x8, 0xfffffffe, 0x9, 0x100, 0x3, 0x4, 0x9, 0x0, 0x1, 0xffffffff, 0xb, 0x8, 0xffff0001, 0x5, 0x1000, 0x8d9, 0x101, 0x8db, 0x8, 0x5, 0x6, 0x8, 0x7, 0x20000, 0x57, 0x8, 0x7, 0x3, 0xc, 0x2, 0x0, 0x7, 0x2, 0x2, 0x9, 0x80, 0x9, 0x6, 0x401, 0x0, 0xfae, 0xb6, 0x80, 0x1, 0x2, 0xba8b, 0xe3b426a, 0x1ff, 0x5, 0x6, 0x2, 0x5, 0x931e, 0x5, 0x2, 0x36bf9f05, 0xeb, 0x9, 0x9, 0x1ff, 0x7fff, 0x1, 0x8001, 0x9, 0x8, 0x80, 0x200, 0x8, 0x0, 0x7, 0x100, 0x16, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x4d9, 0x7, 0x5c4, 0x2, 0x6, 0x8, 0x7, 0x4, 0x400000, 0x0, 0x7, 0x9, 0xb20, 0xff, 0x6cb7db37, 0x4, 0x2, 0x7, 0x1, 0x2, 0x4, 0x4, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r15, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44) 11m43.2025537s ago: executing program 1 (id=6263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, 0x0}, 0x494) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) 11m42.734237929s ago: executing program 1 (id=6267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000020000bbd30008200000060000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x1f, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x60, 'syz0\x00', "52e140292bc4ac011cf5760b0ac479d265bbbb60494da73e69c8fa63169f6e83", "1b3bc6e5422991791f49e4dd04d6e6cdd7a25ddbfb6786a7fb5e5a79c1005143"}}}]}, 0x268}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x6, 0x1, 0x4}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000640)={r3, 0x3}, 0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m42.373896086s ago: executing program 1 (id=6270): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020601dfff000000000000000c0000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400"], 0x58}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @multicast1}}}], 0x20}}], 0x1, 0x40000) r4 = socket(0x27, 0x4, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', r3, 0x40, 0x7f00, 0x7fff, 0x3, {{0xe, 0x4, 0x2, 0x3f, 0x38, 0x64, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x22, 0x1, [{0x7, 0xb, "4bd3556bccd870b930"}, {0x1, 0x11, "6c11b326be8d5c4f491f621730d280"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', r3, 0x40, 0x7f00, 0x7fff, 0x3, {{0xe, 0x4, 0x2, 0x3f, 0x38, 0x64, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x22, 0x1, [{0x7, 0xb, "4bd3556bccd870b930"}, {0x1, 0x11, "6c11b326be8d5c4f491f621730d280"}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000400)={@empty, 0x67, r5}) 11m23.266026049s ago: executing program 8 (id=6331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r7 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) writev(r7, &(0x7f0000000040)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8e73eda5a8caf70487ea6", 0x13a}], 0x1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080) (async) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) recvmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) (async) writev(r7, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x13a}], 0x1) (async) 11m21.624721008s ago: executing program 8 (id=6341): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 11m20.359992215s ago: executing program 8 (id=6348): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003000d"], 0x48}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 11m19.656971962s ago: executing program 8 (id=6350): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r3, 0x0, r6, 0x0, 0x1000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev={0xac, 0x14, 0x14, 0x40}}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6, 0x24, 0xfff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x21, 0x8, 0x8, 0x5, 0x10665c9cf3539fdb, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000200)="a7b9b257283c1d0b71598c10b00c94bbc4352fd6c15f27dc19f8eec977361d0ba9bcc38624dfb9feab5cd87d6bbafa65001ad370575a187b44864737e1dce6c4b7542b09771724bf4341e26bb35d79e37ced2493459962e8e1eefea2c982af48d9587a9f686a2ddbb9ef819d32a1d6d60c9a24a49a5f0d03a4173c966f870c9516cda4896770c708a7e7f81ccb1ca8a51ff68384dabc3b2486f608ec5ab37d86bd250b05194be46df6982b8e9d70fd4c6004552b9b32ee457f2c3da71c83278ae49a2f0e", &(0x7f0000000340)=""/69, &(0x7f00000003c0)="be719e57cd918729f40a1494c110621ce5dca87680a1c918e6c40c271b12e963c5338740edf1296b4108444b217daa931e87e6a93aee2525a457", &(0x7f0000000400)="7cedbed3744f967597e329588e13cf258b9bb14c61", 0x6, r7, 0x4}, 0x38) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c095}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x0) 11m19.438908928s ago: executing program 3 (id=6352): r0 = socket(0x26, 0x2, 0x10000) write(r0, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) 11m19.168420041s ago: executing program 3 (id=6353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xfff2, 0xffff}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x1800}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r5, 0xcfa3f000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) 11m18.578368809s ago: executing program 8 (id=6356): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb045cd36be64afe6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x8c}}, 0x8044080) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/133, 0x85, 0x2000, &(0x7f00000003c0)=@nl=@unspec, 0x80) 11m18.577887472s ago: executing program 3 (id=6357): r0 = socket(0x28, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) 11m17.994975926s ago: executing program 3 (id=6358): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x6}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0x3c, @local, 0x10000}}, 0xfffffffc, 0x400, 0xc73, 0xff, 0xe}, &(0x7f00000002c0)=0x98) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0x3c, @local, 0x10000}}, 0xfffffffc, 0x400, 0xc73, 0xff, 0xe}, &(0x7f00000002c0)=0x98) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 11m17.503807583s ago: executing program 8 (id=6360): r0 = socket(0x11, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x48010) r3 = socket(0x1e, 0x5, 0x0) listen(r3, 0x0) accept4$nfc_llcp(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x62a, @empty, 0x3ff}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b0f, &(0x7f0000000000)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) r11 = socket(0x1e, 0x1, 0x0) connect$tipc(r11, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r11) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 11m17.061820468s ago: executing program 6 (id=6363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000200)="4b4f9d", 0x3}], 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}}, 0x2000100) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r7, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fcdbdf250200000005000d002a00000008000100", @ANYRES32=r8, @ANYBLOB="0c225e8c859da610789926181867fb1c49e4696a5ce57636f55f1e73ad59772296ef188cfc"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 11m16.917164826s ago: executing program 3 (id=6364): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'nr0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x2, 0xf522, 0x5, [0x9, 0x3, 0x100000001, 0x7fffffff, 0x6]}}) close(r1) 11m11.777233807s ago: executing program 7 (id=6367): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x100}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000002c80)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="30acdb1d3a", 0x5}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="a9de932f", 0x4}], 0x1}}], 0x3, 0x46054) close(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3, 0x1, 'x'}, 0x9) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) connect$vsock_stream(r3, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x8, {@in6_addr=@empty, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020234000200060001a109000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11m10.986912356s ago: executing program 6 (id=6368): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00030006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}, 0x1, 0x0, 0x0, 0x20}, 0x40000) 11m9.581297847s ago: executing program 6 (id=6369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket(0x2a, 0x2, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x7}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x8, 0xc, 0x0, r0, 0x0, '\x00', 0x0, r3, 0x3, 0x4, 0x0, 0xe}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0xd, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x729f}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x6) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r9, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r4, 0x0) 11m7.879760911s ago: executing program 7 (id=6370): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x4}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="f5b10200800000002400128008e6e7fb8f35b3a54c4ba200010068debb6e18000294242ecd00080004000600"], 0x44}}, 0x800) 11m6.157033343s ago: executing program 3 (id=6371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x81}}, 0x30) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10015}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ee0c94e411d56b2e8681677676a437818c65c42eb881cfcb6aded994779559d68a0f78cb43e12413752b835b707cb309ab0741166a71bdc99c2bc50ee24074a38bb559f2a07c29f592d194551253ecea33a11bb53d219a48ecc5fa9fcf7b34a59d7cd6bdd8447727c81b980f643689a958d9be4c15ac3dceea158959d904fc3ee5858f", 0x83}, {&(0x7f00000003c0)="e613cc3496b5af67e4cbafab5d391de8d15965a327b2", 0x16}], 0x2, 0x0, 0x0, 0x7400}, 0x10) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x10000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, 0x0}, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x8, 'team0\x00', {'bond_slave_0\x00'}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r0, @ANYBLOB="be6d70052d68a1b19514e2a29bff096251ff883e4cde070954", @ANYBLOB="59884fea364b2d31e9818c4fc390ba2e3f96537d8a5ef33688bb2ea25237ade42ca198e7b508c37d1a59f4cbd1c9e18523749e4ad9b4a914eabafc2c79c6469c2f401906d5b6d5217708d78a06889ab29d3c0dae69bd27bc020a23a3cf7b9dfc379436e61b289b51296e68169da3ac6b9f273453b4f732a2a5cf327aaca425dfea08d61aa0118ddb35c84096671bd74f3a64f363c06f727294a04e3a7a4c5a0522dc"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x10) recvfrom(r11, 0x0, 0x0, 0x101, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 11m3.786501597s ago: executing program 7 (id=6372): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0xfff1, 0xf64, 0x4, 0x800}, 0x8) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000000000000200009500204fddd84d0fd7d5aee7d37d95c700080003000a903406f9a5f4a8423259d112897562ef2aaa5c08a8f928da2a", @ANYRES32=r8, @ANYBLOB="0c0099004100000060000000080026009a030000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000440200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000254baa643b39239c870a2b49db482e31b76f6596b4e226", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bd0a0000fcffffff185b000002000000000000000000000085000000af00000018530000020000000000000000000000850000007600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000002c63060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m3.232058727s ago: executing program 7 (id=6373): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r3) 11m1.895302065s ago: executing program 36 (id=6360): r0 = socket(0x11, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x48010) r3 = socket(0x1e, 0x5, 0x0) listen(r3, 0x0) accept4$nfc_llcp(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x62a, @empty, 0x3ff}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b0f, &(0x7f0000000000)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) r11 = socket(0x1e, 0x1, 0x0) connect$tipc(r11, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r11) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 11m0.992546754s ago: executing program 7 (id=6375): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0x15, 0x0, 0x0) r1 = socket(0x22, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000013c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1018}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000", @ANYRES8=r2], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000300), &(0x7f0000000280)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[], 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000f7160edf0d3d0b8b0000d6ff608b889eed0000000000000000"], 0x1c}}, 0x80) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 10m57.538897402s ago: executing program 7 (id=6376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}]}}]}, 0x4c}}, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES16=r1, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a03000008009f000c"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x48000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x208, 0x0, 0xfeffffff, 0x208, 0xf8, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x1, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0xd, 'uP'}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x24, @loopback, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x7, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) ioctl$int_out(r0, 0x3, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb7f2965593497c186a80e0000000001e16c0ff6dab11dd800000700", "c3003d2a", "1202000000040030"}, 0x38) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x1e, 0x805, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380100001a0001000000000000000000ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@gettfilter={0x64, 0x2e, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {0xffe0, 0x2}, {0xb, 0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffff5ef4}, {0x8, 0xb, 0xfa0c}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x13}, {0x8, 0xb, 0x3f3e}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 10m57.482611219s ago: executing program 6 (id=6377): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x4, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x80, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'netpci0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8040, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0xfff5, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r7, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="2c8f", 0x2}], 0x1}, 0x20008110) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000267ccbf0bc"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15}, 0x80) 10m50.076578747s ago: executing program 37 (id=6371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x81}}, 0x30) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10015}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ee0c94e411d56b2e8681677676a437818c65c42eb881cfcb6aded994779559d68a0f78cb43e12413752b835b707cb309ab0741166a71bdc99c2bc50ee24074a38bb559f2a07c29f592d194551253ecea33a11bb53d219a48ecc5fa9fcf7b34a59d7cd6bdd8447727c81b980f643689a958d9be4c15ac3dceea158959d904fc3ee5858f", 0x83}, {&(0x7f00000003c0)="e613cc3496b5af67e4cbafab5d391de8d15965a327b2", 0x16}], 0x2, 0x0, 0x0, 0x7400}, 0x10) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x10000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, 0x0}, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x8, 'team0\x00', {'bond_slave_0\x00'}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r0, @ANYBLOB="be6d70052d68a1b19514e2a29bff096251ff883e4cde070954", @ANYBLOB="59884fea364b2d31e9818c4fc390ba2e3f96537d8a5ef33688bb2ea25237ade42ca198e7b508c37d1a59f4cbd1c9e18523749e4ad9b4a914eabafc2c79c6469c2f401906d5b6d5217708d78a06889ab29d3c0dae69bd27bc020a23a3cf7b9dfc379436e61b289b51296e68169da3ac6b9f273453b4f732a2a5cf327aaca425dfea08d61aa0118ddb35c84096671bd74f3a64f363c06f727294a04e3a7a4c5a0522dc"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x10) recvfrom(r11, 0x0, 0x0, 0x101, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 10m44.557589186s ago: executing program 6 (id=6379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) 10m44.146684399s ago: executing program 6 (id=6380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x518ae, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d6}, 0x6000010) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r6 = getgid() r7 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = getpid() ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000380)=r11) r12 = getuid() r13 = getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r20 = syz_open_procfs$namespace(r17, &(0x7f0000001780)='ns/ipc\x00') r21 = getpid() sendmmsg$unix(r16, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, r19}}}, @cred={{0x1c, 0x1, 0x2, {r21, r18}}}, @rights={{0x18, 0x1, 0x1, [r20, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r19}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb8, 0x80}, 0x80) 10m39.109220473s ago: executing program 38 (id=6376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}]}}]}, 0x4c}}, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES16=r1, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a03000008009f000c"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x48000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x208, 0x0, 0xfeffffff, 0x208, 0xf8, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x1, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0xd, 'uP'}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x24, @loopback, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x7, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) ioctl$int_out(r0, 0x3, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb7f2965593497c186a80e0000000001e16c0ff6dab11dd800000700", "c3003d2a", "1202000000040030"}, 0x38) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x1e, 0x805, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380100001a0001000000000000000000ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@gettfilter={0x64, 0x2e, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {0xffe0, 0x2}, {0xb, 0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffff5ef4}, {0x8, 0xb, 0xfa0c}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x13}, {0x8, 0xb, 0x3f3e}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) 10m25.842518715s ago: executing program 39 (id=6380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x518ae, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d6}, 0x6000010) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r6 = getgid() r7 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = getpid() ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000380)=r11) r12 = getuid() r13 = getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r20 = syz_open_procfs$namespace(r17, &(0x7f0000001780)='ns/ipc\x00') r21 = getpid() sendmmsg$unix(r16, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r17, 0x0, r19}}}, @cred={{0x1c, 0x1, 0x2, {r21, r18}}}, @rights={{0x18, 0x1, 0x1, [r20, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r19}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb8, 0x80}, 0x80) 7m16.254074548s ago: executing program 4 (id=6381): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x11d, 0x76, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000001700)=""/194, 0xc2}, {&(0x7f0000001f00)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/105, 0x69}, {&(0x7f0000002040)=""/250, 0xfa}, {&(0x7f0000002140)=""/181, 0xb5}, {&(0x7f0000002200)=""/26, 0x1a}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/79, 0x4f}], 0x8, &(0x7f0000003340)=""/141, 0x8d}, 0x120) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000034c0)={'syztnl0\x00', &(0x7f0000003440)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x1, 0x2d, 0xa74a87f2da047301, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @private1, 0x80, 0x8, 0x400, 0x400}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003540)={'syztnl1\x00', &(0x7f0000003500)={'syztnl2\x00', r5, 0x7800, 0x80, 0xffffffff, 0x0, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r4, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4117, 0x1015}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000000)=""/76, 0x4c}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000008b80)=""/4092, 0xffc}, {&(0x7f0000000440)=""/51, 0x33}, {&(0x7f00000018c0)=""/197, 0xc5}, {&(0x7f00000019c0)=""/156, 0x9c}], 0x4, &(0x7f0000003b00)=""/4080, 0xff0}, 0xd58a}, {{&(0x7f0000004b00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/28, 0x1c}], 0x1, &(0x7f0000004c00)=""/103, 0x67}, 0x9}, {{&(0x7f0000004c80)=@phonet, 0x80, &(0x7f0000001e00)=[{&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/182, 0xb6}, {&(0x7f0000005dc0)=""/7, 0x7}, {&(0x7f0000005e00)=""/82, 0x52}, {&(0x7f0000001600)=""/77, 0x4d}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000006000)=""/112, 0x70}, {0x0}, {&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/255, 0xff}, {&(0x7f0000001b80)=""/22, 0x16}, {&(0x7f0000001bc0)=""/255, 0xff}, {&(0x7f0000001cc0)=""/236, 0xec}, {&(0x7f0000001dc0)=""/4, 0x4}], 0xe, &(0x7f0000007180)=""/4096, 0x1000}, 0x80be}, {{&(0x7f0000008180)=@can, 0x80, &(0x7f0000008780)=[{&(0x7f0000001540)=""/147, 0x93}, {&(0x7f00000082c0)=""/94, 0x5e}, {&(0x7f0000008340)=""/120, 0x78}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f00000084c0)=""/220, 0xdc}, {&(0x7f00000085c0)=""/200, 0xc8}, {&(0x7f00000086c0)=""/30, 0x1e}, {&(0x7f0000008700)=""/124, 0x7c}], 0x8, &(0x7f0000008800)=""/18, 0x12}, 0x3}], 0xd, 0x2000, 0x0) listen(r0, 0x4) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) 4m30.379155673s ago: executing program 9 (id=6374): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180400000054c217b40000000000000085000000170000009500000000000000603895e320ad166c6ea10ca171cb6f9259e51d38572a05f4ec23be43651eab307ec95ca9ca0a00"/86], &(0x7f00000005c0)='GPL\x00'}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) close(0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) socket(0x14, 0x2, 0x4) (async) close(0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00e1000000000000000000"], 0x14}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@align=0xd0a, {0x5, 0x40, 0x7, 0x5}}, 0xe, 0x0, 0x0}, {[0x4, 0x1ff, 0x10001, 0x8]}, 0x6, 0x1b, &(0x7f0000000300)=""/27}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x3, 0x0, [0x80000000, 0xfffffffffffffffd, 0x5, 0x6, 0x5, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x78) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 0s ago: executing program 0 (id=6378): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="8ba98766577d", @void, {@llc={0x4, {@llc={0x42, 0x42, "bf", "80"}}}}}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000180)=0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, @in6={0xa, 0x4e22, 0x80000000, @empty}, @in6={0xa, 0x4e24, 0x0, @local, 0x3e60}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x9}}], 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x4001, 0x3, 0x430, 0x300, 0xb, 0x148, 0x0, 0x148, 0x398, 0x230, 0x242, 0x398, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x6}, 0x0, 0x1}}}, {{@uncond, 0xec010000, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/net\x00') getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) kernel console output (not intermixed with test programs): ][T27661] veth1_to_bridge: entered promiscuous mode [ 975.171421][T27661] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 975.194222][T27661] bridge0: port 3(veth1_to_bridge) entered blocking state [ 975.201502][T27661] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 975.322836][T27672] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5585'. [ 975.548786][T27681] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 975.558409][T27681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5587'. [ 975.567375][T27681] netlink: 'syz.3.5587': attribute type 7 has an invalid length. [ 975.575096][T27681] netlink: 'syz.3.5587': attribute type 8 has an invalid length. [ 975.584869][T27681] siw: device registration error -23 [ 976.019395][T27682] bond9: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 976.052767][T27682] bond9: (slave C): Enslaving as an active interface with an up link [ 976.066801][T27682] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 976.213647][T27687] bond10 (unregistering): Released all slaves [ 976.277266][T27672] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 976.420761][T27672] __nla_validate_parse: 1 callbacks suppressed [ 976.420779][T27672] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5585'. [ 976.658863][T27707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5594'. [ 976.699799][T27709] dvmrp0: entered allmulticast mode [ 977.498885][T27734] team_slave_1: Caught tx_queue_len zero misconfig [ 977.508954][T27736] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5603'. [ 977.511358][T27734] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5600'. [ 978.024474][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5609'. [ 978.299052][T27759] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5610'. [ 978.438527][T27763] netlink: 'syz.2.5611': attribute type 32 has an invalid length. [ 978.446384][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 978.475542][T27765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5614'. [ 978.491434][T27763] bond10: option coupled_control: invalid value (192) [ 978.499978][T27763] bond10 (unregistering): Released all slaves [ 978.718470][T27765] ipvlan2: entered allmulticast mode [ 978.723804][T27765] syz_tun: entered allmulticast mode [ 979.020418][T27783] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5620'. [ 979.043261][T27788] Cannot find set identified by id 65534 to match [ 979.051049][T27788] IPv6: NLM_F_REPLACE set, but no existing node found! [ 979.186674][T27789] vlan0: entered promiscuous mode [ 979.193069][T27789] dummy0: entered promiscuous mode [ 979.699961][T27805] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5627'. [ 980.273911][T25113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.287042][T25113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.295342][T25113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.303166][T25113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.310776][T25113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.318364][T27826] netlink: 'syz.7.5633': attribute type 11 has an invalid length. [ 980.352704][T27826] netlink: 'syz.7.5633': attribute type 11 has an invalid length. [ 981.028042][T27844] sctp: [Deprecated]: syz.7.5638 (pid 27844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.028042][T27844] Use struct sctp_sack_info instead [ 981.044704][T27844] sctp: [Deprecated]: syz.7.5638 (pid 27844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.044704][T27844] Use struct sctp_sack_info instead [ 981.750289][T27823] xfrm0 speed is unknown, defaulting to 1000 [ 982.360148][T25113] Bluetooth: hci2: link tx timeout [ 982.365437][T25113] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 982.563896][T27882] Bluetooth: hci4: command tx timeout [ 982.607223][ T30] audit: type=1800 audit(1779991406.795:20): pid=27887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5649" name="memory.events" dev="tmpfs" ino=2321 res=0 errno=0 [ 982.786831][T27891] syzkaller0: entered promiscuous mode [ 982.792341][T27891] syzkaller0: entered allmulticast mode [ 982.800114][T27823] vxcan1 speed is unknown, defaulting to 1000 [ 983.538297][ T8525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.549779][ T8525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.609340][T27898] can: request_module (can-proto-0) failed. [ 984.153988][T17198] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 984.163542][T17198] Bluetooth: hci0: command 0x0c1a tx timeout [ 984.300248][T27823] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.307743][T27823] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.315301][T27823] bridge_slave_0: entered allmulticast mode [ 984.323271][T27823] bridge_slave_0: entered promiscuous mode [ 984.332420][T27823] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.339861][T27823] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.347410][T27823] bridge_slave_1: entered allmulticast mode [ 984.403708][T27823] bridge_slave_1: entered promiscuous mode [ 984.437164][T27823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.449330][T27823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.567220][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 984.740586][ T5642] Bluetooth: hci4: command tx timeout [ 985.183958][T27823] team0: Port device team_slave_0 added [ 985.192320][T27823] team0: Port device team_slave_1 added [ 985.223802][T27823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.230771][T27823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.437617][T27823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.525869][T27823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.664434][T27823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.690350][T27823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.001903][ T8525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.020812][ T8525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.173329][T27954] __nla_validate_parse: 2 callbacks suppressed [ 986.173346][T27954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5662'. [ 986.357555][T27958] netlink: 'syz.7.5662': attribute type 10 has an invalid length. [ 986.376365][T27958] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5662'. [ 986.573475][T27958] dummy0: entered promiscuous mode [ 986.584327][T27951] syzkaller0: entered promiscuous mode [ 986.593545][T27951] syzkaller0: entered allmulticast mode [ 986.810244][T25113] Bluetooth: hci4: command tx timeout [ 986.860001][T27823] hsr_slave_0: entered promiscuous mode [ 986.866577][T27823] hsr_slave_1: entered promiscuous mode [ 986.872863][T27823] debugfs: 'hsr0' already exists in 'hsr' [ 986.878601][T27823] Cannot create hsr debugfs directory [ 987.056373][T27969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.076338][T27969] netlink: 'syz.1.5664': attribute type 1 has an invalid length. [ 987.318114][T27979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5668'. [ 987.797448][ T8525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.817522][T27995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5670'. [ 987.826478][ T8525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.022050][T27992] batadv_slave_1: entered promiscuous mode [ 988.116803][T27995] bond8: entered promiscuous mode [ 988.121939][T27995] bond8: entered allmulticast mode [ 988.244001][T27995] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 988.717540][ T8525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.736162][ T8525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.066419][T25113] Bluetooth: hci4: command tx timeout [ 989.354388][ T8521] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.687611][ T1164] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.811354][ T8525] dvmrp0: left allmulticast mode [ 990.318256][T27979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.932208][T28055] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5676'. [ 991.180558][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5677'. [ 991.424152][ T8525] bond1 (unregistering): (slave gretap1): Releasing active interface [ 991.456593][T28069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5679'. [ 991.557837][T28069] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5679'. [ 991.567128][T28069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 991.569681][ T8525] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 991.922411][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'. [ 992.823806][ T8525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.832757][ T8525] bond_slave_0: left allmulticast mode [ 992.839247][ T8525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.848478][ T8525] bond_slave_1: left allmulticast mode [ 992.856965][ T8525] bond0 (unregistering): Released all slaves [ 992.866861][ T8525] bond1 (unregistering): Released all slaves [ 992.879886][ T8525] bond2 (unregistering): Released all slaves [ 992.892888][ T8525] bond3 (unregistering): Released all slaves [ 992.910822][ T8525] bond4 (unregistering): Released all slaves [ 993.016504][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.022879][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.035015][ T8525] bond5 (unregistering): (slave lo): Releasing backup interface [ 993.043208][ T8525] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 993.063636][ T8525] bond5 (unregistering): Released all slaves [ 993.077732][ T8525] bond6 (unregistering): (slave bond7): Releasing backup interface [ 993.086313][ T8525] bond6 (unregistering): Released all slaves [ 993.099397][ T8525] bond7 (unregistering): Released all slaves [ 993.220015][ T8525] bond8 (unregistering): (slave veth7): Releasing active interface [ 993.227956][ T8525] batadv1: entered promiscuous mode [ 993.250145][ T8525] bond8 (unregistering): (slave batadv1): Releasing active interface [ 993.259889][ T8525] bond8 (unregistering): Released all slaves [ 993.282065][ T8525] bond9 (unregistering): Released all slaves [ 993.298887][ T8525] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 993.309303][ T8525] bond10 (unregistering): (slave bond11): Releasing active interface [ 993.414103][ T8525] bond10 (unregistering): Released all slaves [ 993.436090][ T8525] bond11 (unregistering): Released all slaves [ 993.449319][ T8525] bond12 (unregistering): Released all slaves [ 993.475775][ T8525] bond13 (unregistering): Released all slaves [ 993.488693][ T8525] bond14 (unregistering): Released all slaves [ 993.610701][T16027] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.880714][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 993.892268][T28098] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5682'. [ 993.903965][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 993.911994][T28098] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5682'. [ 993.921689][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 993.929682][T28098] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5682'. [ 993.939032][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 993.947065][T28098] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5682'. [ 993.956419][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 993.964164][T28098] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5682'. [ 993.973606][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 993.994457][T28098] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5682'. [ 994.015199][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 994.057043][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 994.074261][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 994.156071][T28098] netlink: 'syz.6.5682': attribute type 3 has an invalid length. [ 994.175859][ T8525] : left promiscuous mode [ 996.209087][T28156] ip6tnl4: entered allmulticast mode [ 996.227106][T28159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.629308][T21662] vxcan1 speed is unknown, defaulting to 1000 [ 996.635550][ T8525] tipc: Disabling bearer [ 996.655877][ T8525] tipc: Left network mode [ 996.832738][T27823] netdevsim netdevsim3 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.553118][T27823] netdevsim netdevsim3 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.006313][T28225] bridge3: entered promiscuous mode [ 999.012522][T28225] bridge3: entered allmulticast mode [ 999.214946][T28230] validate_nla: 56 callbacks suppressed [ 999.214962][T28230] netlink: 'syz.6.5707': attribute type 2 has an invalid length. [ 999.628659][T28241] netlink: 'syz.2.5709': attribute type 4 has an invalid length. [ 999.836227][T28239] __nla_validate_parse: 60 callbacks suppressed [ 999.836245][T28239] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5708'. [ 999.867751][T28248] netlink: 'syz.2.5709': attribute type 4 has an invalid length. [ 999.939686][T27823] netdevsim netdevsim3 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.371166][T28259] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1000.442387][T28259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1000.587737][T28259] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1000.596721][T28259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1000.605728][T28259] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1000.783869][T28265] x_tables: duplicate underflow at hook 1 [ 1000.835361][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 1001.061249][T25113] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1001.404314][T28269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5716'. [ 1001.767870][T28269] netlink: 'syz.7.5716': attribute type 5 has an invalid length. [ 1001.810826][T28269] netlink: 140 bytes leftover after parsing attributes in process `syz.7.5716'. [ 1001.890561][T28298] netlink: 'syz.6.5720': attribute type 4 has an invalid length. [ 1001.905129][T28298] netlink: 'syz.6.5720': attribute type 4 has an invalid length. [ 1001.952691][T28299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1001.967682][T28295] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1002.004480][T27823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1002.145933][T27823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1002.397190][T27823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1002.594826][T27823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.607668][T28311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5723'. [ 1002.624846][T27823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1002.832496][T27823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.840305][T27823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1003.025415][T28318] netlink: 'syz.2.5724': attribute type 1 has an invalid length. [ 1003.038160][T27823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1003.381072][T28318] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1004.313569][T28348] pim6reg1: entered promiscuous mode [ 1004.318906][T28348] pim6reg1: entered allmulticast mode [ 1004.714812][T28362] netlink: 'syz.7.5734': attribute type 11 has an invalid length. [ 1004.727531][ T8525] batman_adv: batadv0: Removing interface: wlan0 [ 1004.924888][T27823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.942213][T27823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.977976][T27823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1004.988340][T27823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1005.192890][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.200051][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.209039][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.216166][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.512522][ T8525] hsr_slave_0: left promiscuous mode [ 1006.522651][ T8525] hsr_slave_1: left promiscuous mode [ 1006.531773][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.539327][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.546964][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.560844][ T8525] veth1_macvtap: left promiscuous mode [ 1007.686422][T27823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.713909][T27823] veth0_vlan: entered promiscuous mode [ 1007.731613][T27823] veth1_vlan: entered promiscuous mode [ 1007.894853][T27823] veth0_macvtap: entered promiscuous mode [ 1007.903455][T27823] veth1_macvtap: entered promiscuous mode [ 1007.917589][T27823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.930651][T27823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.946176][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.044667][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.065288][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.074132][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.142652][T28373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1008.653303][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.684531][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.798795][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.806640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.034582][T28416] tipc: Started in network mode [ 1009.039493][T28416] tipc: Node identity , cluster identity 4711 [ 1009.333097][T28439] syzkaller0: entered promiscuous mode [ 1009.353697][T28439] syzkaller0: entered allmulticast mode [ 1009.758816][T28442] netlink: 'syz.1.5751': attribute type 15 has an invalid length. [ 1010.043006][T28447] __nla_validate_parse: 5 callbacks suppressed [ 1010.043023][T28447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5754'. [ 1010.238564][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1010.247401][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1010.263239][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1010.293371][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1010.301478][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1010.565359][T28459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5755'. [ 1012.071129][T28448] xfrm0 speed is unknown, defaulting to 1000 [ 1012.370256][ T5642] Bluetooth: hci3: command tx timeout [ 1012.626449][T28448] vxcan1 speed is unknown, defaulting to 1000 [ 1013.784668][T28527] netlink: 149 bytes leftover after parsing attributes in process `syz.1.5772'. [ 1014.122667][T28448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.130062][T28448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.250477][T28538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1014.259724][T28448] bridge_slave_0: entered allmulticast mode [ 1014.267347][T28448] bridge_slave_0: entered promiscuous mode [ 1014.275733][T28448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.282943][T28448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.290492][T28448] bridge_slave_1: entered allmulticast mode [ 1014.298579][T28448] bridge_slave_1: entered promiscuous mode [ 1014.334747][T28448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.497397][ T5642] Bluetooth: hci3: command tx timeout [ 1014.636882][T28448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.692082][T28448] team0: Port device team_slave_0 added [ 1014.702976][T28448] team0: Port device team_slave_1 added [ 1014.737270][T28448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.744403][T28448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.871146][T28448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.891821][T28448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.904068][T28448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.128236][T28448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.198564][T28448] hsr_slave_0: entered promiscuous mode [ 1015.205527][T28448] hsr_slave_1: entered promiscuous mode [ 1015.211799][T28448] debugfs: 'hsr0' already exists in 'hsr' [ 1015.462539][T28448] Cannot create hsr debugfs directory [ 1016.302644][T28567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5782'. [ 1016.315603][T28448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.440428][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5781'. [ 1016.459104][T28448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.536041][ T5642] Bluetooth: hci3: command tx timeout [ 1016.897725][T28448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.908023][T28448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.084773][T28590] openvswitch: netlink: IP tunnel dst address not specified [ 1017.101062][T28591] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 2, id = 0 [ 1017.106621][T28592] openvswitch: netlink: IP tunnel dst address not specified [ 1017.726654][T28448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.738073][T28448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.901830][T28613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5796'. [ 1017.928011][T28613] ipvlan2: entered allmulticast mode [ 1017.933465][T28613] syz_tun: entered allmulticast mode [ 1018.085210][T28616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5797'. [ 1018.107137][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5797'. [ 1018.283030][T28448] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.292570][T28448] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.427173][T28624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5799'. [ 1018.860701][T28632] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1018.872731][T28632] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5802'. [ 1018.879981][ T5642] Bluetooth: hci3: command tx timeout [ 1019.120250][T28645] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 1019.724589][T28448] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1019.743103][T28448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1019.750986][T28448] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1019.988534][T28448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1020.009716][T28659] wireguard: wg0: Could not create IPv4 socket [ 1020.020223][T28448] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1020.222825][T28448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1020.241940][T28448] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1020.504622][T28448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.514435][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5813'. [ 1020.549594][T28677] netlink: 'syz.3.5811': attribute type 2 has an invalid length. [ 1020.756950][T28675] netlink: 766 bytes leftover after parsing attributes in process `syz.6.5813'. [ 1020.835499][T28673] netlink: 'syz.7.5812': attribute type 12 has an invalid length. [ 1021.019814][T28693] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1021.076411][T28448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.158959][T28448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.512236][T28699] netlink: 'syz.7.5815': attribute type 1 has an invalid length. [ 1021.547171][T28701] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5816'. [ 1021.549934][T28448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1021.566458][T28448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.754843][T28705] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5815'. [ 1021.782825][T28705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5815'. [ 1021.822215][T28709] netlink: 'syz.3.5817': attribute type 1 has an invalid length. [ 1021.880946][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.888197][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.925263][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.932522][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.168728][T28712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5818'. [ 1022.225778][T28705] ip6gretap2: entered promiscuous mode [ 1022.231463][T28705] ip6gretap2: entered allmulticast mode [ 1022.265429][T28715] netlink: 'syz.1.5820': attribute type 12 has an invalid length. [ 1022.785421][T28727] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1022.832953][T28718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5821'. [ 1023.347363][T28742] netlink: 'syz.3.5826': attribute type 1 has an invalid length. [ 1023.357908][T28743] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1023.570300][T28748] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.5827'. [ 1024.058516][T28448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.199495][T28448] veth0_vlan: entered promiscuous mode [ 1024.355475][T28448] veth1_vlan: entered promiscuous mode [ 1024.538549][T28448] veth0_macvtap: entered promiscuous mode [ 1024.582361][T28773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1024.595150][T28448] veth1_macvtap: entered promiscuous mode [ 1024.809825][T28448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.830723][T28774] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1024.869377][T28448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.893819][T16027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.919350][T16027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.961644][T16027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.087423][ T8521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.616070][T25113] Bluetooth: hci3: command 0x0405 tx timeout [ 1025.621496][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.687496][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.986241][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.001187][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.061091][T28807] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1026.104520][T28800] syzkaller0: entered promiscuous mode [ 1026.122759][T28800] syzkaller0: entered allmulticast mode [ 1026.129863][T28806] bridge0: Device is already in use. [ 1026.155046][T28800] veth0: entered promiscuous mode [ 1026.190698][T28799] veth0: left promiscuous mode [ 1026.399772][T28813] netlink: 'syz.1.5842': attribute type 1 has an invalid length. [ 1026.407555][T28813] netlink: 'syz.1.5842': attribute type 1 has an invalid length. [ 1026.415277][T28813] netlink: 'syz.1.5842': attribute type 1 has an invalid length. [ 1026.422024][T28809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1026.422986][T28813] netlink: 'syz.1.5842': attribute type 2 has an invalid length. [ 1026.612965][T28817] __nla_validate_parse: 1 callbacks suppressed [ 1026.612981][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5844'. [ 1027.305161][T28832] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5848'. [ 1027.527947][T28840] tipc: Started in network mode [ 1027.532861][T28840] tipc: Node identity ac14140f, cluster identity 4711 [ 1027.539857][T28840] tipc: New replicast peer: 255.255.255.255 [ 1027.546320][T28840] tipc: Enabled bearer , priority 10 [ 1028.246819][T28860] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1028.543962][T28869] Bluetooth: MGMT ver 1.23 [ 1028.549245][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5862'. [ 1028.741548][T20141] tipc: Node number set to 2886997007 [ 1028.811730][T28875] netlink: 'syz.2.5864': attribute type 1 has an invalid length. [ 1028.833474][T28875] ip6gretap1: entered promiscuous mode [ 1028.839350][T28875] ip6gretap1: entered allmulticast mode [ 1028.849008][T28875] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1029.308525][ T30] audit: type=1804 audit(1779991453.505:21): pid=28891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5870" name="/newroot/24/cgroup.controllers" dev="tmpfs" ino=143 res=1 errno=0 [ 1029.368798][ T30] audit: type=1800 audit(1779991453.585:22): pid=28891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5870" name="cgroup.controllers" dev="tmpfs" ino=143 res=0 errno=0 [ 1029.522755][ T30] audit: type=1804 audit(1779991453.585:23): pid=28890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5870" name="/newroot/24/cgroup.controllers" dev="tmpfs" ino=143 res=1 errno=0 [ 1030.308079][T28909] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1030.366145][T28920] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1030.389441][T28922] set match dimension is over the limit! [ 1031.068582][T28934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5883'. [ 1031.273212][T28940] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5885'. [ 1031.530418][T28945] netlink: 'syz.3.5887': attribute type 26 has an invalid length. [ 1032.044163][T28963] netlink: 'syz.1.5888': attribute type 1 has an invalid length. [ 1032.052907][T28963] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5888'. [ 1032.090603][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1032.130938][T28967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1032.804153][T28949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1032.813043][T28949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1033.018203][T28985] netlink: 'syz.7.5900': attribute type 11 has an invalid length. [ 1033.026058][T28985] netlink: 'syz.7.5900': attribute type 4 has an invalid length. [ 1033.033786][T28985] netlink: 'syz.7.5900': attribute type 6 has an invalid length. [ 1033.041573][T28985] netlink: 199556 bytes leftover after parsing attributes in process `syz.7.5900'. [ 1033.751158][T29009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5907'. [ 1033.969497][T29012] bond6: entered promiscuous mode [ 1033.982690][T29012] macvlan2: entered promiscuous mode [ 1034.147744][T29012] macvlan2: entered allmulticast mode [ 1034.158500][T29012] bond6: (slave macvlan2): Opening slave failed [ 1034.197473][T29019] netlink: 'syz.1.5909': attribute type 4 has an invalid length. [ 1034.205484][T29019] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5909'. [ 1034.375392][T29019] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1034.408649][T29029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5911'. [ 1034.637360][T29031] openvswitch: netlink: IP tunnel dst address not specified [ 1034.767578][T29034] can: request_module (can-proto-4) failed. [ 1034.968164][T29045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.123160][T29045] bridge_slave_0 (unregistering): left allmulticast mode [ 1035.136728][T29045] bridge_slave_0 (unregistering): left promiscuous mode [ 1035.143796][T29045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.162997][T29049] netlink: 'syz.7.5917': attribute type 2 has an invalid length. [ 1035.444545][T29056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1035.881462][T29073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1036.763164][T29098] netlink: 'syz.7.5930': attribute type 1 has an invalid length. [ 1036.973985][T29098] bond6: entered promiscuous mode [ 1036.990015][T29098] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1037.113374][T29111] bond6: (slave bridge5): making interface the new active one [ 1037.121558][T29111] bridge5: entered promiscuous mode [ 1037.310948][T29111] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1037.879587][T29131] netlink: 'syz.6.5936': attribute type 3 has an invalid length. [ 1037.902964][T29131] __nla_validate_parse: 2 callbacks suppressed [ 1037.902979][T29131] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5936'. [ 1038.358852][T29156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5943'. [ 1038.503220][T29159] vlan3: entered promiscuous mode [ 1038.509497][T29159] bridge0: entered promiscuous mode [ 1038.520083][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.528509][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.535321][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.542081][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.548874][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.555668][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.562457][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.569250][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.576076][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.582836][T29153] tc action pedit offset must be on 32 bit boundaries [ 1038.589632][T29153] 0: reclassify loop, rule prio 0, protocol 800 [ 1039.013754][T29165] netlink: 'syz.3.5946': attribute type 1 has an invalid length. [ 1039.889411][T29178] netlink: 'syz.7.5949': attribute type 32 has an invalid length. [ 1039.960385][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5949'. [ 1040.332683][T29178] bond7: option coupled_control: invalid value (192) [ 1040.341053][T29196] netlink: 'syz.7.5949': attribute type 1 has an invalid length. [ 1040.348793][T29196] netlink: 'syz.7.5949': attribute type 3 has an invalid length. [ 1040.356516][T29196] netlink: 'syz.7.5949': attribute type 7 has an invalid length. [ 1040.364234][T29196] netlink: 'syz.7.5949': attribute type 8 has an invalid length. [ 1040.371955][T29196] netlink: 184 bytes leftover after parsing attributes in process `syz.7.5949'. [ 1040.380993][T29196] NCSI netlink: No device for ifindex 131092 [ 1040.540295][T29178] bond7 (unregistering): Released all slaves [ 1040.742468][T29189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5949'. [ 1041.055068][T29189] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1041.308091][T29209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1041.324018][T29209] netlink: 'syz.3.5953': attribute type 7 has an invalid length. [ 1041.361833][T29209] netlink: 'syz.3.5953': attribute type 8 has an invalid length. [ 1041.377198][T29209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1042.308647][T29227] nbd: must specify at least one socket [ 1043.041422][T29239] bond0: option mode: unable to set because the bond device has slaves [ 1043.057387][T29239] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1044.286281][T29277] syzkaller0: entered promiscuous mode [ 1044.291786][T29277] syzkaller0: entered allmulticast mode [ 1044.429428][T29287] netlink: 'syz.7.5967': attribute type 11 has an invalid length. [ 1044.447598][T29287] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.5967'. [ 1044.595348][T29277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5966'. [ 1044.648940][T29288] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5966'. [ 1044.674088][T29297] netlink: 'syz.7.5969': attribute type 4 has an invalid length. [ 1044.840570][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1044.891507][T29303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5971'. [ 1045.154521][T29309] netlink: 'syz.3.5972': attribute type 1 has an invalid length. [ 1045.214456][T29310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1045.224783][T29310] netlink: 'syz.3.5972': attribute type 14 has an invalid length. [ 1045.232623][T29310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1045.518463][T29318] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1045.693957][T29320] netlink: 'syz.3.5974': attribute type 22 has an invalid length. [ 1045.701813][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5974'. [ 1045.711381][T29320] netlink: 'syz.3.5974': attribute type 22 has an invalid length. [ 1045.719219][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5974'. [ 1046.726179][T29347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1046.740106][T29347] netlink: 'syz.1.5977': attribute type 1 has an invalid length. [ 1048.806688][T29408] netlink: 'syz.3.5993': attribute type 1 has an invalid length. [ 1049.198052][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1049.308527][T29421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1049.315832][T29421] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.323087][T29421] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.330351][T29421] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.340277][T29421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1049.348233][T29421] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1049.357697][T29421] Cannot find del_set index 4 as target [ 1049.420931][T29426] tap0: tun_chr_ioctl cmd 1074025672 [ 1049.426298][T29426] tap0: ignored: set checksum disabled [ 1049.440855][T29426] batadv0: entered promiscuous mode [ 1049.455783][T29426] macsec2: entered promiscuous mode [ 1049.462577][T29426] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1049.598700][T29426] batadv0: left promiscuous mode [ 1050.049671][T25113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1050.058046][T25113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1050.069216][T25113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1050.191370][T25113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1050.201700][T25113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1050.245338][T29441] netlink: 'syz.7.6001': attribute type 1 has an invalid length. [ 1050.253160][T29441] __nla_validate_parse: 5 callbacks suppressed [ 1050.253174][T29441] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6001'. [ 1050.538166][T29441] netlink: 'syz.7.6001': attribute type 1 has an invalid length. [ 1050.552970][T29441] netlink: 'syz.7.6001': attribute type 8 has an invalid length. [ 1050.561110][T29441] netlink: 606 bytes leftover after parsing attributes in process `syz.7.6001'. [ 1050.818599][T29454] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6003'. [ 1050.830487][T29454] syzkaller0: entered promiscuous mode [ 1050.835990][T29454] syzkaller0: entered allmulticast mode [ 1050.868379][T29438] xfrm0 speed is unknown, defaulting to 1000 [ 1051.348714][T29438] vxcan1 speed is unknown, defaulting to 1000 [ 1051.620109][T29462] veth0_macvtap: entered allmulticast mode [ 1051.647206][T29462] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1051.880724][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6007'. [ 1051.922510][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6007'. [ 1051.941230][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6007'. [ 1052.345821][T25113] Bluetooth: hci5: command tx timeout [ 1052.943938][T29480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6010'. [ 1053.106475][T29438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.113734][T29438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.123764][T29438] bridge_slave_0: entered allmulticast mode [ 1053.132653][T29438] bridge_slave_0: entered promiscuous mode [ 1053.144231][T29438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.158225][T29438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.166515][T29438] bridge_slave_1: entered allmulticast mode [ 1053.174301][T29438] bridge_slave_1: entered promiscuous mode [ 1053.212770][T29438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.226570][T29438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.264457][T29438] team0: Port device team_slave_0 added [ 1053.410506][T29438] team0: Port device team_slave_1 added [ 1053.447054][T29438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.454062][T29438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.479950][T29438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.729900][T29502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1053.763479][T29438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.937273][T29438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.980140][T29438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.168469][T29508] netlink: 'syz.7.6014': attribute type 21 has an invalid length. [ 1054.176529][T29508] IPv6: NLM_F_CREATE should be specified when creating new route [ 1054.216558][T29508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1054.223857][T29508] IPv6: NLM_F_CREATE should be set when creating new route [ 1054.231150][T29508] IPv6: NLM_F_CREATE should be set when creating new route [ 1054.238386][T29508] IPv6: NLM_F_CREATE should be set when creating new route [ 1054.348785][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.355150][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.390919][T29438] hsr_slave_0: entered promiscuous mode [ 1054.405950][T29438] hsr_slave_1: entered promiscuous mode [ 1054.422706][T29438] debugfs: 'hsr0' already exists in 'hsr' [ 1054.433774][T29438] Cannot create hsr debugfs directory [ 1054.564839][T25113] Bluetooth: hci5: command tx timeout [ 1055.604591][T29438] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1055.616489][T29438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1055.821531][ T5642] Bluetooth: hci3: link tx timeout [ 1055.833498][ T5642] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1055.897523][T29548] netlink: 'syz.7.6023': attribute type 11 has an invalid length. [ 1055.905508][T29548] netlink: 'syz.7.6023': attribute type 11 has an invalid length. [ 1055.913473][T29548] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6023'. [ 1056.030291][T29438] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1056.078244][T29438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.086177][T29438] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1056.098434][T29438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.106470][T29438] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1056.271532][T29438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1056.701054][T29438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.721067][T29438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.740640][T25113] Bluetooth: hci5: command tx timeout [ 1056.918631][T16028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.925859][T16028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.001946][T16028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.009158][T16028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.392263][T29580] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1057.682859][T29593] netlink: 'syz.3.6032': attribute type 39 has an invalid length. [ 1058.076761][T25113] Bluetooth: hci3: command 0x0405 tx timeout [ 1058.728078][T29619] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1058.891949][ T5642] Bluetooth: hci5: command tx timeout [ 1059.170177][T29629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6039'. [ 1059.710955][T29643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6040'. [ 1059.720464][T29643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6040'. [ 1060.106825][ T36] tipc: Subscription rejected, illegal request [ 1060.682995][T29438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.087058][T29438] veth0_vlan: entered promiscuous mode [ 1062.098973][T29438] veth1_vlan: entered promiscuous mode [ 1062.361914][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6052'. [ 1062.434915][T29709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6052'. [ 1062.563494][T29438] veth0_macvtap: entered promiscuous mode [ 1062.574401][T29438] veth1_macvtap: entered promiscuous mode [ 1062.593810][T29438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.810529][T29438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.979105][ T8525] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.979195][T29718] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6054'. [ 1062.987864][ T8525] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.987903][ T8525] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.014464][ T8532] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.422110][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.439148][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.483676][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.662028][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.262550][T29776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6066'. [ 1065.886969][T29790] netlink: 'syz.3.6072': attribute type 1 has an invalid length. [ 1065.894743][T29790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1066.202665][T29807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1066.360571][T29807] netlink: 'syz.3.6077': attribute type 7 has an invalid length. [ 1066.368337][T29807] netlink: 'syz.3.6077': attribute type 8 has an invalid length. [ 1066.376078][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1066.644744][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6079'. [ 1067.243907][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6084'. [ 1067.486697][T29817] bond2: Invalid ad_actor_system MAC address. [ 1067.517513][T29817] bond2: option ad_actor_system: invalid value (1) [ 1067.611163][T29817] bond2 (unregistering): Released all slaves [ 1067.837868][T29857] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1068.288534][T29870] netlink: 'syz.7.6089': attribute type 63 has an invalid length. [ 1068.296892][T29870] netlink: 'syz.7.6089': attribute type 63 has an invalid length. [ 1068.725644][T29878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6092'. [ 1068.944992][T29884] ip6gre1: entered allmulticast mode [ 1068.978278][T29878] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6092'. [ 1069.009718][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6095'. [ 1069.266257][T29882] vlan4: entered allmulticast mode [ 1069.415801][T29882] bond0: entered allmulticast mode [ 1071.344326][T29945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6107'. [ 1071.522106][T29942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.266355][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6109'. [ 1072.275247][T29963] IPv6: NLM_F_CREATE should be specified when creating new route [ 1072.529978][T29975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6110'. [ 1072.538976][T29972] tc action pedit 'at' offset 15763 out of bounds [ 1072.547279][T29967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6111'. [ 1072.583138][T29975] syzkaller1: entered promiscuous mode [ 1072.608904][T29978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6112'. [ 1072.655153][T29977] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1072.858399][T29984] netlink: 'syz.6.6114': attribute type 58 has an invalid length. [ 1073.003658][T29975] syzkaller1: entered allmulticast mode [ 1073.090352][T29984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6114'. [ 1074.694042][T30016] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6117'. [ 1075.199144][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6119'. [ 1075.208089][T30010] veth1: Caught tx_queue_len zero misconfig [ 1075.381519][T30029] openvswitch: netlink: Flow key attr not present in new flow. [ 1075.589827][T30036] nftables ruleset with unbound chain [ 1077.019625][T30071] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6129'. [ 1077.501323][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.755670][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1078.003491][T30105] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6137'. [ 1079.406170][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.607988][T30120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1079.976364][T30146] netlink: 'syz.7.6146': attribute type 1 has an invalid length. [ 1080.245338][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.251837][T30175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6150'. [ 1080.438913][T30161] syzkaller0: entered promiscuous mode [ 1080.444429][T30161] syzkaller0: entered allmulticast mode [ 1081.314311][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.167813][T30223] xt_TCPMSS: Only works on TCP SYN packets [ 1082.328347][T30223] syzkaller1: entered promiscuous mode [ 1082.362554][T30223] syzkaller1: entered allmulticast mode [ 1083.409953][ T8521] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.437990][T30255] netlink: 'syz.8.6165': attribute type 1 has an invalid length. [ 1083.735619][ T12] bridge_slave_1: left allmulticast mode [ 1083.751283][ T12] bridge_slave_1: left promiscuous mode [ 1083.768635][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.400125][ T12] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1084.859094][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.870211][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.880210][ T12] bond0 (unregistering): Released all slaves [ 1084.889412][ T8522] netdevsim netdevsim2 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.898507][ T8522] netdevsim netdevsim2 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.093899][ T8522] netdevsim netdevsim2 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.544184][T30303] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6174'. [ 1085.581040][T30308] sctp: [Deprecated]: syz.6.6175 (pid 30308) Use of int in max_burst socket option. [ 1085.581040][T30308] Use struct sctp_assoc_value instead [ 1085.617137][T30308] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1085.799925][T30308] netlink: 'syz.6.6175': attribute type 10 has an invalid length. [ 1085.831834][T30308] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6175'. [ 1087.326616][T30352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6186'. [ 1087.419562][T30352] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6186'. [ 1087.499068][T30354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.142088][T30378] veth1_macvtap: left promiscuous mode [ 1088.240237][T30378] macsec0: entered promiscuous mode [ 1088.245486][T30378] macsec0: entered allmulticast mode [ 1088.253992][T30379] veth1_macvtap: entered promiscuous mode [ 1088.272447][T30379] veth1_macvtap: entered allmulticast mode [ 1088.280799][T30379] macsec0: left promiscuous mode [ 1088.333310][T30388] netlink: 'syz.1.6196': attribute type 11 has an invalid length. [ 1088.350856][T30388] netlink: 'syz.1.6196': attribute type 5 has an invalid length. [ 1088.361393][T30391] netlink: 'syz.6.6195': attribute type 1 has an invalid length. [ 1088.370929][T30379] macsec0: left allmulticast mode [ 1088.470180][T30388] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1088.675303][T30379] veth1_macvtap: left allmulticast mode [ 1088.791388][T30393] xt_CT: No such helper "snmp_trap" [ 1089.449664][T30362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6191'. [ 1089.741512][T30417] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1090.712917][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6208'. [ 1090.789446][T30444] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1090.959234][T30453] batadv0: entered promiscuous mode [ 1091.039055][T30453] macsec2: entered promiscuous mode [ 1091.121826][T30453] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1091.263057][T30453] batadv0: left promiscuous mode [ 1092.009277][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1092.022416][T30486] netlink: 'syz.3.6219': attribute type 4 has an invalid length. [ 1092.152906][T30486] netlink: 'syz.3.6219': attribute type 1 has an invalid length. [ 1092.175452][T30486] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1093.328278][T30512] netlink: 'syz.8.6226': attribute type 32 has an invalid length. [ 1093.336166][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6226'. [ 1093.367818][T30508] nlmon0: Caught tx_queue_len zero misconfig [ 1093.377848][T30504] tipc: Enabled bearer , priority 0 [ 1093.385228][T30504] syzkaller0: entered promiscuous mode [ 1093.619326][T30504] syzkaller0: entered allmulticast mode [ 1093.997229][T30512] bond2: Setting coupled_control to off (0) [ 1094.011856][T30504] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1094.029973][T30524] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1094.476003][ T12] hsr_slave_0: left promiscuous mode [ 1094.482204][ T12] hsr_slave_1: left promiscuous mode [ 1094.510694][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.518142][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.543536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.550946][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.696269][ T12] veth1_macvtap: left promiscuous mode [ 1094.701851][ T12] veth0_macvtap: left promiscuous mode [ 1094.720359][ T12] veth1_vlan: left promiscuous mode [ 1094.728102][ T12] veth0_vlan: left promiscuous mode [ 1094.796089][T30547] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6233'. [ 1094.962529][T30549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.183573][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1095.298795][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1095.481218][T30509] tipc: Resetting bearer [ 1095.493775][T30503] tipc: Resetting bearer [ 1095.529080][T30503] tipc: Disabling bearer [ 1095.952255][T30555] veth1_to_bond: mtu less than device minimum [ 1096.384123][T30576] syzkaller0: entered promiscuous mode [ 1096.389646][T30576] syzkaller0: entered allmulticast mode [ 1096.918530][T30592] netlink: 'syz.6.6241': attribute type 5 has an invalid length. [ 1096.940066][T30591] netlink: 'syz.6.6241': attribute type 5 has an invalid length. [ 1097.190732][T30584] syzkaller0: entered promiscuous mode [ 1097.196240][T30584] syzkaller0: entered allmulticast mode [ 1097.406691][T30600] netlink: 'syz.6.6243': attribute type 21 has an invalid length. [ 1097.707007][T30606] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6245'. [ 1103.498707][T30659] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1103.506732][T30659] netlink: 'syz.7.6253': attribute type 5 has an invalid length. [ 1103.972525][T30666] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1104.152083][T30664] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6257'. [ 1104.666831][T30693] openvswitch: netlink: Key type 30 is not supported [ 1104.923948][T30697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6266'. [ 1105.114369][T30701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6262'. [ 1105.224267][T30709] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1105.269614][T30708] pim6reg527: entered allmulticast mode [ 1106.626960][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1107.049551][T30744] xt_hashlimit: size too large, truncated to 1048576 [ 1107.096968][T30748] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6276'. [ 1107.284238][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1107.337723][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1107.355740][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1107.544823][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1107.566654][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1108.279589][T30778] IPVS: length: 4096 != 8 [ 1108.456034][T30783] netlink: 'syz.3.6287': attribute type 21 has an invalid length. [ 1108.649996][T30788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6288'. [ 1108.680228][T30788] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6288'. [ 1109.071612][T30799] pim6reg: entered allmulticast mode [ 1109.381650][T30810] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1109.842755][T25113] Bluetooth: hci3: command tx timeout [ 1109.994042][T30826] xt_hashlimit: size too large, truncated to 1048576 [ 1110.019089][ T5293] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1110.274225][T30750] xfrm0 speed is unknown, defaulting to 1000 [ 1111.028699][T30750] vxcan1 speed is unknown, defaulting to 1000 [ 1111.468668][T30853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6297'. [ 1111.480115][T30853] veth1_macvtap: left promiscuous mode [ 1111.716958][T30843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1111.722929][T30843] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1111.813032][T30843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1111.830280][T30843] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1111.979737][T25113] Bluetooth: hci3: command tx timeout [ 1112.079210][T30843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1112.085819][T30843] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1112.096745][ T5293] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1112.773045][T30843] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1112.803804][T30843] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1113.013243][T30887] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6302'. [ 1113.355405][T30843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1113.362892][T30843] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1114.430535][T30912] gretap0: entered promiscuous mode [ 1114.436748][T30912] vlan4: entered promiscuous mode [ 1114.472672][ T5293] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1114.574981][T30926] ±ÿ: renamed from syz_tun (while UP) [ 1115.307643][T30942] netlink: 'syz.3.6313': attribute type 1 has an invalid length. [ 1115.565215][T30951] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6312'. [ 1115.565487][T30750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.638061][T30750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.660359][T30750] bridge_slave_0: entered allmulticast mode [ 1115.668233][T30750] bridge_slave_0: entered promiscuous mode [ 1115.677404][T30750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.684836][T30750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.692114][T30750] bridge_slave_1: entered allmulticast mode [ 1115.700837][T30750] bridge_slave_1: entered promiscuous mode [ 1115.849707][T30954] syzkaller0: entered promiscuous mode [ 1115.855974][T30954] syzkaller0: entered allmulticast mode [ 1115.923336][T30750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.970397][T30750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.105081][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1116.113922][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.124759][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.172004][T30964] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.393950][T30974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6318'. [ 1121.166550][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6314'. [ 1121.175498][T30956] bridge: RTM_NEWNEIGH with invalid ether address [ 1121.182009][T30963] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6318'. [ 1121.296938][T30963] tipc: Invalid UDP bearer configuration [ 1121.296996][T30963] tipc: Enabling of bearer rejected, failed to enable media [ 1121.542633][T30991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6323'. [ 1121.597735][T30974] bridge_slave_1: left allmulticast mode [ 1121.603511][T30974] bridge_slave_1: left promiscuous mode [ 1121.611005][T30974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.954530][T30974] bridge_slave_0: left allmulticast mode [ 1121.960232][T30974] bridge_slave_0: left promiscuous mode [ 1121.966010][T30974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.519036][T30991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.549257][T30991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.557325][T30991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.564749][T30991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.686095][T30750] team0: Port device team_slave_0 added [ 1122.724583][T30750] team0: Port device team_slave_1 added [ 1122.762549][T30750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.929021][T30750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.954932][T30750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.967374][T30750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.974329][T30750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.172682][T30750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.375811][T30750] hsr_slave_0: entered promiscuous mode [ 1123.382422][T30750] hsr_slave_1: entered promiscuous mode [ 1123.388718][T30750] debugfs: 'hsr0' already exists in 'hsr' [ 1123.394446][T30750] Cannot create hsr debugfs directory [ 1123.937986][T31046] xt_hashlimit: size too large, truncated to 1048576 [ 1123.993081][T31049] –: renamed from vxcan1 (while UP) [ 1124.204695][T31051] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6329'. [ 1124.260615][T30750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.272840][T30750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1124.916674][T31062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.928251][T31063] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6331'. [ 1125.130700][T30750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.152155][T31072] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6333'. [ 1125.158075][T30750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1125.550070][T31080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1125.561051][T31080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1125.992393][T31090] netlink: 'syz.6.6338': attribute type 83 has an invalid length. [ 1126.025527][T31093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6337'. [ 1126.054777][T31092] x_tables: duplicate underflow at hook 4 [ 1126.171315][T31093] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1126.235703][T30750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.245999][T30750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1126.790787][T31108] netlink: 'syz.3.6343': attribute type 2 has an invalid length. [ 1126.917802][T31108] netlink: 'syz.3.6343': attribute type 1 has an invalid length. [ 1126.981497][T31108] gretap2: entered promiscuous mode [ 1127.251842][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6345'. [ 1127.679588][T30750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.691561][T30750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1128.372729][T31150] netlink: 'syz.8.6350': attribute type 21 has an invalid length. [ 1128.405740][T31150] netlink: 'syz.8.6350': attribute type 1 has an invalid length. [ 1128.908171][T30750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1129.056171][T30750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.072944][T30750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1129.235803][T30750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1129.243874][T30750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1129.354016][T30750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1129.383744][T30750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1129.418004][T30750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.923625][T31196] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1130.104962][T31200] netlink: 'syz.7.6359': attribute type 1 has an invalid length. [ 1130.178084][T31200] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1130.323447][T30750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.507343][T31207] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1130.550849][T30750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.566937][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.574119][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.595125][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.602313][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.030967][T31220] netlink: 'syz.6.6363': attribute type 62 has an invalid length. [ 1140.425471][T31252] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6370'. [ 1143.634752][ C1] sched: DL replenish lagged too much [ 1144.507800][T31262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6372'. [ 1145.464863][T31271] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6371'. [ 1154.104430][T31308] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6376'. [ 1154.524018][T31309] xt_TCPMSS: Only works on TCP SYN packets [ 1154.566933][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1154.597550][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1155.024420][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1155.917866][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1155.925497][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.396450][ T5642] Bluetooth: hci0: command tx timeout [ 1160.697516][T25113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1160.708760][T25113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1160.716717][T25113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1161.145351][T25113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1161.582903][T17198] Bluetooth: hci0: command tx timeout [ 1161.589139][T25113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1163.702430][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6380'. [ 1163.713464][T31315] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1163.719758][T31315] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1164.206397][ T5642] Bluetooth: hci0: command tx timeout [ 1166.522847][ T5642] Bluetooth: hci0: command tx timeout [ 1168.209634][T31269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.217354][T31269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.292295][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1169.595978][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1170.020349][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1170.032665][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1170.040310][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1173.284686][ T5642] Bluetooth: hci5: command tx timeout [ 1174.549168][T25113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1174.965588][T25113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1174.973803][T25113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1174.981723][T25113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1174.989464][T25113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1175.371951][ T5642] Bluetooth: hci5: command tx timeout [ 1177.873184][T25113] Bluetooth: hci5: command tx timeout [ 1178.284117][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1178.292940][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.299242][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.309443][T25113] Bluetooth: hci6: command tx timeout [ 1180.453511][ T5642] Bluetooth: hci6: command tx timeout [ 1180.458950][ T5642] Bluetooth: hci5: command tx timeout [ 1184.183439][ T5642] Bluetooth: hci6: command tx timeout [ 1184.669097][T27882] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1185.052091][T27882] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1185.062430][T27882] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1185.076277][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1185.088891][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1185.096053][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1185.531166][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1185.538576][T27882] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1185.547142][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1186.469676][T17198] Bluetooth: hci6: command tx timeout [ 1186.940342][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1189.107319][T25113] Bluetooth: hci8: command tx timeout [ 1191.249492][T17198] Bluetooth: hci8: command tx timeout [ 1191.254967][T17198] Bluetooth: hci7: command tx timeout [ 1193.390944][T25113] Bluetooth: hci7: command tx timeout [ 1193.396390][T25113] Bluetooth: hci8: command tx timeout [ 1195.953470][T17198] Bluetooth: hci8: command tx timeout [ 1195.958913][T17198] Bluetooth: hci7: command tx timeout [ 1198.450562][T25113] Bluetooth: hci7: command tx timeout [ 1208.258897][T31320] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1208.266236][T31320] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1208.273489][T31320] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6380'. [ 1211.583934][T17198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1212.061792][T17198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1213.783637][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1215.032115][T17198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1216.728642][T17198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1220.335505][T17198] Bluetooth: hci3: command tx timeout [ 1220.727490][T17198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1221.100987][T17198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1221.114329][T17198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1221.125749][T17198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1221.133374][T17198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1222.590533][T17198] Bluetooth: hci3: command tx timeout [ 1223.900263][T17198] Bluetooth: hci0: command tx timeout [ 1223.929073][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.729530][ T8525] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.788452][ T8525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.798011][ T8525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.241774][T17198] Bluetooth: hci3: command tx timeout [ 1226.108280][T25113] Bluetooth: hci0: command tx timeout [ 1227.407883][T25113] Bluetooth: hci3: command tx timeout [ 1228.722624][T25113] Bluetooth: hci0: command tx timeout [ 1232.485385][T17198] Bluetooth: hci0: command tx timeout [ 1235.896616][T17198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1236.321110][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1237.169994][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1237.618928][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.026617][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.917156][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1238.925966][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.932270][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.870175][T17198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1240.829090][T17198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1241.286850][T17198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1241.294807][T17198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1241.302498][T17198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1245.746473][T17198] Bluetooth: hci2: command tx timeout [ 1246.217936][ T5642] Bluetooth: hci1: command tx timeout [ 1248.314287][T17198] Bluetooth: hci2: command tx timeout [ 1248.319741][T17198] Bluetooth: hci1: command tx timeout [ 1248.811046][ T8525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.002674][ T5642] Bluetooth: hci1: command tx timeout [ 1252.008092][ T5642] Bluetooth: hci2: command tx timeout [ 1254.750605][ T5642] Bluetooth: hci2: command tx timeout [ 1254.756038][ T5642] Bluetooth: hci1: command tx timeout [ 1257.844003][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1257.853930][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1257.861752][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1257.870754][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1257.878387][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1262.306729][ T5642] Bluetooth: hci4: command tx timeout [ 1264.691625][ T5642] Bluetooth: hci4: command tx timeout [ 1266.988186][T17198] Bluetooth: hci4: command tx timeout [ 1268.678138][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.706909][T31358] xfrm0 speed is unknown, defaulting to 1000 [ 1270.483554][T17198] Bluetooth: hci4: command tx timeout [ 1276.093075][T25113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1276.971551][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1277.421406][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1282.555251][T25113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1284.363086][T25113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1288.258255][T25113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1288.707341][T25113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1288.715281][T25113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1288.723213][T25113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1288.730818][T25113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1289.974072][T25113] Bluetooth: hci5: command tx timeout [ 1292.500933][T25113] Bluetooth: hci5: command tx timeout [ 1292.942987][ T5642] Bluetooth: hci6: command tx timeout [ 1294.535200][T25113] Bluetooth: hci5: command tx timeout [ 1295.445430][T25113] Bluetooth: hci6: command tx timeout [ 1296.264393][T17198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1296.291436][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1296.722264][T17198] Bluetooth: hci5: command tx timeout [ 1297.172499][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1298.013490][ T5642] Bluetooth: hci6: command tx timeout [ 1298.039859][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1298.437935][T17198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1300.007776][T25113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1300.024695][T25113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1300.421054][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1300.429872][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.436168][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.444408][ T5642] Bluetooth: hci6: command tx timeout [ 1300.452860][T25113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1300.460827][T25113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1300.916653][T25113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1301.337464][T25113] Bluetooth: hci3: command tx timeout [ 1303.476558][T25113] Bluetooth: hci0: command tx timeout [ 1303.483131][T25113] Bluetooth: hci3: command tx timeout [ 1303.505303][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.573512][T31358] vxcan1 speed is unknown, defaulting to 1000 [ 1305.448661][T31428] xfrm0 speed is unknown, defaulting to 1000 [ 1307.464000][T17198] Bluetooth: hci3: command tx timeout [ 1307.469444][T17198] Bluetooth: hci0: command tx timeout [ 1311.013845][T25113] Bluetooth: hci0: command tx timeout [ 1311.019292][T25113] Bluetooth: hci3: command tx timeout [ 1314.622523][T17198] Bluetooth: hci8: command 0x0406 tx timeout [ 1314.628581][T17198] Bluetooth: hci0: command tx timeout [ 1321.602454][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1322.109799][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1322.967188][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1323.334645][T17198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1323.342353][T17198] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1325.844378][T17198] Bluetooth: hci7: command tx timeout [ 1328.453897][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.325194][T17198] Bluetooth: hci7: command tx timeout [ 1330.222103][T31406] xfrm0 speed is unknown, defaulting to 1000 [ 1330.624327][T31428] vxcan1 speed is unknown, defaulting to 1000 [ 1332.138003][T17198] Bluetooth: hci7: command tx timeout [ 1334.776329][T25113] Bluetooth: hci7: command tx timeout [ 1341.337924][T17198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1342.805792][T17198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1343.282203][T17198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1343.290198][T17198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1343.298045][T17198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1346.842663][ T5642] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1346.854374][ T5642] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1346.867307][ T5642] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1346.875270][ T5642] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1347.247367][ T5642] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1349.725381][T31497] xfrm0 speed is unknown, defaulting to 1000 [ 1352.457502][T31406] vxcan1 speed is unknown, defaulting to 1000 [ 1355.611106][ T5642] Bluetooth: hci1: command tx timeout [ 1357.448706][T17198] Bluetooth: hci9: command tx timeout [ 1359.119028][ T5642] Bluetooth: hci1: command tx timeout [ 1360.011379][ T5642] Bluetooth: hci9: command tx timeout [ 1363.127430][T17198] Bluetooth: hci1: command tx timeout [ 1363.132875][T17198] Bluetooth: hci9: command tx timeout [ 1363.579638][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1363.588509][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.594848][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.098120][T17198] Bluetooth: hci9: command tx timeout [ 1366.103654][T17198] Bluetooth: hci1: command tx timeout [ 1367.464412][ T5642] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1367.934240][T17198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1368.417701][T17198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1368.850510][ T36] bridge_slave_1: left allmulticast mode [ 1368.856460][ T36] bridge_slave_1: left promiscuous mode [ 1368.862263][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.287502][T17198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1369.295932][T31361] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1370.195126][T31361] Bluetooth: hci2: command 0x0406 tx timeout [ 1370.204381][T31361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1371.092574][T31585] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1373.412641][T17198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1375.032678][ T36] bridge_slave_0: left allmulticast mode [ 1375.038365][ T36] bridge_slave_0: left promiscuous mode [ 1375.044200][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.723573][ T5642] Bluetooth: hci5: command tx timeout [ 1379.764287][T31361] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1379.776682][T31361] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1379.785560][T31361] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1381.032040][T17198] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1381.045982][T25113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1382.321951][T25113] Bluetooth: hci5: command tx timeout [ 1385.370737][T31361] Bluetooth: hci5: command tx timeout [ 1385.376189][T31361] Bluetooth: hci4: command 0x0406 tx timeout [ 1385.795310][ T5642] Bluetooth: hci10: command tx timeout [ 1388.234143][T17198] Bluetooth: hci10: command tx timeout [ 1388.239673][T17198] Bluetooth: hci5: command tx timeout [ 1389.803579][T25113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1390.252761][T25113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1390.261469][T25113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1390.269542][T25113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1390.704401][T25113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1391.188683][T17198] Bluetooth: hci10: command tx timeout [ 1393.023359][T25113] Bluetooth: hci6: command tx timeout [ 1393.581943][T25113] Bluetooth: hci10: command tx timeout [ 1396.003167][T25113] Bluetooth: hci6: command tx timeout [ 1397.933000][T17198] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1397.945919][T17198] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1398.444943][T31361] Bluetooth: hci6: command tx timeout [ 1399.323486][T31361] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1399.331771][T31361] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1399.339570][T31361] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1400.691975][T31361] Bluetooth: hci6: command tx timeout [ 1402.879598][T31361] Bluetooth: hci11: command tx timeout [ 1403.695360][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.725475][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.104884][ T36] bond0 (unregistering): Released all slaves [ 1405.274922][T25113] Bluetooth: hci11: command tx timeout [ 1405.286718][ T36] bond1 (unregistering): Released all slaves [ 1405.305567][ T36] bond2 (unregistering): Released all slaves [ 1406.225721][T31361] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1406.660266][ T8525] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.668639][ T8525] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.676955][ T8525] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.685248][ T8525] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.601887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1407.603316][T31361] Bluetooth: hci11: command tx timeout [ 1407.623352][T17198] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1407.632307][T17198] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1407.640414][T17198] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1407.650865][T31361] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1410.412655][T31361] Bluetooth: hci11: command tx timeout [ 1410.858518][T31361] Bluetooth: hci12: command tx timeout [ 1413.473361][T31497] vxcan1 speed is unknown, defaulting to 1000 [ 1414.968570][T31361] Bluetooth: hci12: command tx timeout [ 1417.931229][T25113] Bluetooth: hci12: command tx timeout [ 1420.309836][T31361] Bluetooth: hci12: command tx timeout [ 1425.039296][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1425.049966][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.057206][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.891329][T17198] Bluetooth: hci0: command 0x0406 tx timeout [ 1438.486743][ T5642] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1438.498069][T27882] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1438.508686][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1438.521057][ T5642] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1438.974152][T27882] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1438.983752][T27882] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1439.417418][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1439.425024][ T5642] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1439.433719][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1439.441266][ T5642] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1462.578874][T25113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1465.599615][T17198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1466.033639][T17198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1466.460924][T17198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1468.230185][T25113] Bluetooth: hci13: command tx timeout [ 1468.238803][T25113] Bluetooth: hci14: command tx timeout [ 1468.251436][T31361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1468.260421][T25113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1468.271060][T25113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1468.711675][T31361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1470.036159][T31361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1470.044169][T31361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1470.502758][T31361] Bluetooth: hci14: command tx timeout [ 1470.954556][T25113] Bluetooth: hci13: command tx timeout [ 1473.667688][T31361] Bluetooth: hci13: command tx timeout [ 1473.673221][T31361] Bluetooth: hci14: command tx timeout [ 1478.135493][T25113] Bluetooth: hci14: command tx timeout [ 1478.141023][T25113] Bluetooth: hci13: command tx timeout [ 1485.522722][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1485.531610][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.537927][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.546283][T31361] Bluetooth: hci7: command tx timeout [ 1486.455002][T17198] Bluetooth: hci1: command tx timeout [ 1489.133514][T31361] Bluetooth: hci7: command tx timeout [ 1489.138949][T31361] Bluetooth: hci1: command tx timeout [ 1493.587531][T31361] Bluetooth: hci1: command tx timeout [ 1493.592963][T31361] Bluetooth: hci7: command tx timeout [ 1495.053005][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1496.444123][T31361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1496.453440][T31361] Bluetooth: hci7: command tx timeout [ 1496.458881][T31361] Bluetooth: hci1: command tx timeout [ 1496.464992][T31361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1497.448806][T25113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1498.459970][T31361] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1498.468585][T25113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1498.476109][T25113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1498.484126][T25113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1498.493993][T31361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1500.750605][T31361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1504.643528][T31361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1504.658574][T31361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1504.668869][T31361] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1504.676940][T31361] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1505.160519][T31361] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1511.045720][ T5293] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1521.526080][T31361] Bluetooth: hci3: command tx timeout [ 1524.163917][T25113] Bluetooth: hci3: command tx timeout [ 1526.159428][T17198] Bluetooth: hci5: command tx timeout [ 1527.817413][ T5642] Bluetooth: hci6: command tx timeout [ 1527.817657][T25113] Bluetooth: hci3: command tx timeout [ 1527.833314][T31361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1529.112928][T25113] Bluetooth: hci5: command tx timeout [ 1529.118840][T31361] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1530.581598][T25113] Bluetooth: hci6: command tx timeout [ 1530.587049][T25113] Bluetooth: hci3: command tx timeout [ 1531.070809][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1531.499304][T31361] Bluetooth: hci5: command tx timeout [ 1531.932101][ T5642] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1531.943159][T31361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1532.879042][T31361] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1532.888925][T31361] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1532.896693][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1533.320012][T31361] Bluetooth: hci6: command tx timeout [ 1533.331609][ T5642] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1534.432955][T31649] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1536.612899][T25113] Bluetooth: hci5: command tx timeout [ 1536.971036][T31740] Bluetooth: hci9: Opcode 0x0c1a failed: -110 [ 1537.480643][T25113] Bluetooth: hci6: command tx timeout [ 1537.486592][T25113] Bluetooth: hci7: command tx timeout [ 1538.318336][T31361] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1538.742151][T31361] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1539.593256][T25113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1539.600360][T25113] Bluetooth: hci7: command tx timeout [ 1540.863279][T31361] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1541.260727][T25113] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1542.129703][T25113] Bluetooth: hci7: command tx timeout [ 1544.716938][T31649] Bluetooth: hci7: command tx timeout [ 1546.024914][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1546.033772][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.040084][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.855002][T25113] Bluetooth: hci9: command tx timeout [ 1551.405771][ T5293] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1552.913806][T25113] Bluetooth: hci9: command tx timeout [ 1557.112228][T31361] Bluetooth: hci9: command tx timeout [ 1559.775264][T31361] Bluetooth: hci9: command tx timeout [ 1571.408776][T31361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1571.427941][T31361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1571.870586][T31361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1574.068120][T31361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1574.450828][T31649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1586.794744][T17198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1588.512169][T31361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1589.418079][T31361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1590.705430][T27882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1590.714772][T27882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1590.727771][T27882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1590.736050][T27882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1590.744973][T27882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1591.178816][T27882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1591.185946][T27882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1592.484047][T25113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1593.762475][T27882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1593.769606][T27882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1594.188504][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1594.196519][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1595.006404][T17198] Bluetooth: hci3: command tx timeout [ 1597.971300][T31649] Bluetooth: hci3: command tx timeout [ 1599.710393][T27882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1600.124698][T25113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1600.926922][T25113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1601.386167][T25113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1601.814983][T31361] Bluetooth: hci3: command tx timeout [ 1602.632903][ T36] hsr_slave_0: left promiscuous mode [ 1603.504335][T25113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1603.511435][T25113] Bluetooth: hci1: command tx timeout [ 1603.558196][ T36] hsr_slave_1: left promiscuous mode [ 1604.514474][ T5642] Bluetooth: hci6: command tx timeout [ 1604.521039][ T5642] Bluetooth: hci3: command tx timeout [ 1604.526485][ T5642] Bluetooth: hci5: command tx timeout [ 1605.758875][T31649] Bluetooth: hci1: command tx timeout [ 1608.038651][T31649] Bluetooth: hci5: command tx timeout [ 1608.044104][T31649] Bluetooth: hci6: command tx timeout [ 1608.049519][T31649] Bluetooth: hci1: command tx timeout [ 1608.503446][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1608.512295][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.518608][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.996963][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1609.967880][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.853317][ T5642] Bluetooth: hci1: command tx timeout [ 1610.858768][ T5642] Bluetooth: hci6: command tx timeout [ 1610.864168][ T5642] Bluetooth: hci5: command tx timeout [ 1612.143499][ T5642] Bluetooth: hci2: command tx timeout [ 1613.002253][ T5642] Bluetooth: hci5: command tx timeout [ 1613.007708][ T5642] Bluetooth: hci6: command tx timeout [ 1613.014101][T31649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1613.448260][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1613.457681][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1613.465642][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1614.300428][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.307858][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.368177][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1615.277165][ T5642] Bluetooth: hci2: command tx timeout [ 1617.471547][ T5642] Bluetooth: hci2: command tx timeout [ 1617.888854][ T5642] Bluetooth: hci0: command tx timeout [ 1618.225611][ T36] veth0_macvtap: left promiscuous mode [ 1618.231230][ T36] veth1_vlan: left promiscuous mode [ 1618.236501][ T36] veth0_vlan: left promiscuous mode [ 1620.011961][ T5642] Bluetooth: hci2: command tx timeout [ 1620.040391][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1620.464847][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1620.473221][ T5642] Bluetooth: hci0: command tx timeout [ 1620.479070][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1620.959552][T31649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1622.428198][T31649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1622.914754][T31649] Bluetooth: hci0: command tx timeout [ 1624.797632][T31649] Bluetooth: hci4: command tx timeout [ 1625.392235][T31649] Bluetooth: hci0: command tx timeout [ 1626.964799][T25113] Bluetooth: hci4: command tx timeout [ 1627.795251][ T36] pim6reg527 (unregistering): left allmulticast mode [ 1629.179881][T25113] Bluetooth: hci4: command tx timeout [ 1629.993328][T31649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1630.005208][T31649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1630.419629][T31649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1630.855883][T31649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1630.863592][T31649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1631.776214][T25113] Bluetooth: hci4: command tx timeout [ 1634.436082][T31649] Bluetooth: hci7: command tx timeout [ 1636.996950][T31649] Bluetooth: hci7: command tx timeout [ 1637.479028][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1638.323620][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1639.211859][T31649] Bluetooth: hci7: command tx timeout [ 1642.147405][T31649] Bluetooth: hci7: command tx timeout [ 1644.294960][ T5293] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1644.739894][T25113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1647.156083][T25113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1647.948072][T25113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1652.151259][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1654.733836][T25113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1660.336892][T31832] xfrm0 speed is unknown, defaulting to 1000 [ 1663.893390][T25113] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1663.926551][T25113] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1664.329851][T25113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1665.606789][T25113] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1665.623010][T17198] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1666.575341][T31832] vxcan1 speed is unknown, defaulting to 1000 [ 1669.250997][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1669.507283][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.562086][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.941882][T31839] xfrm0 speed is unknown, defaulting to 1000 [ 1681.801678][T31361] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1684.285675][T25113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1685.484360][T31361] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1690.138325][ T5293] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1691.376235][T17198] Bluetooth: hci10: Opcode 0x1005 failed: -110 [ 1692.309913][T25113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1692.318309][T31361] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1692.325796][T17198] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1692.333867][T17198] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1693.605552][T31361] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1694.929839][ T5642] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1695.793347][T31361] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1696.185278][ T5642] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1697.400704][ T5642] Bluetooth: hci8: command tx timeout [ 1697.407286][ T5642] Bluetooth: hci9: command tx timeout [ 1697.785358][T25113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1697.797846][T25113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1697.805140][T25113] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1698.274935][T25113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1698.747042][T25113] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1699.185265][T25113] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1700.118055][T25113] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1700.125244][T25113] Bluetooth: hci9: command tx timeout [ 1700.130651][T25113] Bluetooth: hci8: command tx timeout [ 1702.446054][T25113] Bluetooth: hci8: command tx timeout [ 1702.910788][T25113] Bluetooth: hci9: command tx timeout [ 1705.515455][T31649] Bluetooth: hci9: command tx timeout [ 1705.520897][T31649] Bluetooth: hci8: command tx timeout [ 1706.255237][ T5642] Bluetooth: hci10: command tx timeout [ 1707.484403][T31361] Bluetooth: hci11: command tx timeout [ 1708.745640][ T5642] Bluetooth: hci10: command tx timeout [ 1708.753647][T31649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1708.764987][T31649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1708.773381][T31649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1709.210782][ T5642] Bluetooth: hci12: command tx timeout [ 1709.616850][ T5642] Bluetooth: hci11: command tx timeout [ 1709.634011][T31649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1709.641716][T31649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1710.869103][T31649] Bluetooth: hci10: command tx timeout [ 1711.637122][T31649] Bluetooth: hci12: command tx timeout [ 1712.135091][T31649] Bluetooth: hci11: command tx timeout [ 1712.140674][T31649] Bluetooth: hci1: command tx timeout [ 1713.035921][T31361] Bluetooth: hci10: command tx timeout [ 1714.290728][T31649] Bluetooth: hci12: command tx timeout [ 1715.192838][ T5642] Bluetooth: hci11: command tx timeout [ 1715.198395][T31649] Bluetooth: hci1: command tx timeout [ 1716.141201][T31839] vxcan1 speed is unknown, defaulting to 1000 [ 1716.936744][T31649] Bluetooth: hci12: command tx timeout [ 1717.339728][T31827] xfrm0 speed is unknown, defaulting to 1000 [ 1717.843471][T31649] Bluetooth: hci1: command tx timeout [ 1720.480340][T31649] Bluetooth: hci1: command tx timeout [ 1723.314015][T31847] xfrm0 speed is unknown, defaulting to 1000 [ 1726.179298][T31649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1726.190223][T31649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1726.203009][T31649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1726.581349][T31649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1726.589967][T31649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1729.195834][T31649] Bluetooth: hci2: command tx timeout [ 1730.382841][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1731.175904][T31884] xfrm0 speed is unknown, defaulting to 1000 [ 1731.468667][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.480959][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.824979][T31649] Bluetooth: hci2: command tx timeout [ 1735.293747][T31649] Bluetooth: hci2: command tx timeout [ 1738.232695][T31649] Bluetooth: hci2: command tx timeout [ 1738.291693][T31827] vxcan1 speed is unknown, defaulting to 1000 [ 1743.482336][T31361] Bluetooth: hci0: command 0x0406 tx timeout [ 1748.348282][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 1748.356898][T17198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1748.727512][T17198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1748.745946][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1750.103874][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1750.130262][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1753.264077][ T5642] Bluetooth: hci3: command tx timeout [ 1755.496884][ T5642] Bluetooth: hci3: command tx timeout [ 1757.694707][T17198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1758.123448][T17198] Bluetooth: hci7: command 0x0406 tx timeout [ 1758.544333][T31361] Bluetooth: hci3: command tx timeout [ 1759.003894][T31361] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1759.019610][T31361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1759.029243][T31361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1759.037042][T31361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1761.313098][T31884] vxcan1 speed is unknown, defaulting to 1000 [ 1761.695842][T31941] xfrm0 speed is unknown, defaulting to 1000 [ 1762.718367][T31361] Bluetooth: hci3: command tx timeout [ 1768.263943][ T5642] Bluetooth: hci5: command tx timeout [ 1770.362626][T31649] Bluetooth: hci5: command tx timeout [ 1770.370829][T17198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1770.916416][T31649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1770.925186][T17198] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1770.933237][T17198] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1772.316152][T31361] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1772.323997][T31361] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1772.716676][T31361] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1772.725186][T31361] Bluetooth: hci5: command tx timeout [ 1773.227393][T17198] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1773.641459][T17198] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1773.649373][T17198] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1774.907465][T17198] Bluetooth: hci5: command tx timeout [ 1775.827926][T31649] Bluetooth: hci6: command tx timeout [ 1776.776373][T31649] Bluetooth: hci13: command tx timeout [ 1778.182733][T31649] Bluetooth: hci6: command tx timeout [ 1779.635236][T31649] Bluetooth: hci13: command tx timeout [ 1780.961849][T31649] Bluetooth: hci6: command tx timeout [ 1782.745358][T31649] Bluetooth: hci13: command tx timeout [ 1782.753933][T31847] vxcan1 speed is unknown, defaulting to 1000 [ 1784.061588][T31905] xfrm0 speed is unknown, defaulting to 1000 [ 1784.988231][T17198] Bluetooth: hci6: command tx timeout [ 1784.993692][T17198] Bluetooth: hci13: command tx timeout [ 1791.772356][T31361] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1791.781375][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1791.790187][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.796496][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.668567][T31649] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1794.042140][T31361] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1797.344665][T17198] Bluetooth: hci14: Opcode 0x1005 failed: -110 [ 1797.933447][T17198] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1797.957075][T17198] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1799.017191][T17198] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1800.889552][T17198] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1804.034632][T32058] Bluetooth: hci14: Opcode 0x0c14 failed: -110 [ 1805.011579][T17198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1806.370356][T17198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1807.328248][T17198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1810.711522][T17198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1812.064930][T31361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1816.073590][T31361] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1816.467915][T17198] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1816.876615][T17198] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1818.167567][T25113] Bluetooth: hci2: command tx timeout [ 1818.176341][T27882] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1818.604786][T27882] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1818.612066][T27882] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1818.621207][T27882] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1818.632065][T27882] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1818.643806][T27882] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1819.547237][T31649] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1820.555290][T25113] Bluetooth: hci2: command tx timeout [ 1820.560828][T25113] Bluetooth: hci8: command 0x0406 tx timeout [ 1820.566895][T25113] Bluetooth: hci9: command 0x0406 tx timeout [ 1821.922686][T31649] Bluetooth: hci14: command tx timeout [ 1821.939714][T27882] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1822.380326][T27882] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1822.828804][T27882] Bluetooth: hci2: command tx timeout [ 1822.843015][ T5642] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1822.851108][T27882] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1822.858885][T27882] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1824.163566][T31649] Bluetooth: hci14: command tx timeout [ 1825.031169][T27882] Bluetooth: hci15: command tx timeout [ 1825.037868][T27882] Bluetooth: hci2: command tx timeout [ 1826.258308][T31649] Bluetooth: hci16: command tx timeout [ 1826.264929][T31649] Bluetooth: hci14: command tx timeout [ 1827.313434][T27882] Bluetooth: hci15: command tx timeout [ 1829.143406][T17198] Bluetooth: hci14: command tx timeout [ 1829.464124][ T5642] Bluetooth: hci16: command tx timeout [ 1829.505479][ T5642] Bluetooth: hci15: command tx timeout [ 1830.405124][T25113] Bluetooth: hci10: command 0x0406 tx timeout [ 1830.411319][T25113] Bluetooth: hci11: command 0x0406 tx timeout [ 1830.417469][T25113] Bluetooth: hci12: command 0x0406 tx timeout [ 1830.434231][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1830.444789][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.487801][T25113] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1831.498921][T25113] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1832.004142][T25113] Bluetooth: hci15: command tx timeout [ 1832.009662][T25113] Bluetooth: hci16: command tx timeout [ 1832.481813][T25113] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1832.489955][T25113] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1832.497705][T25113] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1834.892242][T32104] Bluetooth: hci16: command tx timeout [ 1835.342213][T31649] Bluetooth: hci1: command 0x0406 tx timeout [ 1836.171679][T31931] xfrm0 speed is unknown, defaulting to 1000 [ 1839.812773][T31649] Bluetooth: hci17: command tx timeout [ 1842.643357][ T5642] Bluetooth: hci17: command tx timeout [ 1845.022904][ T5642] Bluetooth: hci17: command tx timeout [ 1847.928280][ T5642] Bluetooth: hci17: command tx timeout [ 1847.989082][T31920] xfrm0 speed is unknown, defaulting to 1000 [ 1853.337143][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1853.345983][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.352291][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.924403][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1855.807590][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.739396][T31931] vxcan1 speed is unknown, defaulting to 1000 [ 1858.104832][T32013] xfrm0 speed is unknown, defaulting to 1000 [ 1870.060717][T31361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1870.074105][T31361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1870.472591][T31649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1873.856655][T31649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1874.265509][T31361] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1876.041556][T31361] Bluetooth: hci3: command 0x0406 tx timeout [ 1878.726103][T31361] Bluetooth: hci6: command tx timeout [ 1881.035658][T31361] Bluetooth: hci6: command tx timeout [ 1882.009425][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1883.109936][T17198] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1883.310339][ T5642] Bluetooth: hci6: command tx timeout [ 1883.320414][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1883.328701][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1883.336718][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1883.344461][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1884.153375][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1884.616332][ T5642] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1884.624462][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1884.987196][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1885.400451][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1887.580485][ T5642] Bluetooth: hci6: command tx timeout [ 1887.585945][ T5642] Bluetooth: hci2: command tx timeout [ 1887.592485][ T5642] Bluetooth: hci13: command tx timeout [ 1887.994784][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.320250][T32000] xfrm0 speed is unknown, defaulting to 1000 [ 1890.284447][T31361] Bluetooth: hci13: command tx timeout [ 1890.289980][T31361] Bluetooth: hci2: command tx timeout [ 1893.442898][ T5642] Bluetooth: hci5: command 0x0406 tx timeout [ 1893.448958][ T5642] Bluetooth: hci2: command tx timeout [ 1893.454354][ T5642] Bluetooth: hci13: command tx timeout [ 1893.495468][ T5642] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1894.393114][ T5642] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1894.814390][T31905] vxcan1 speed is unknown, defaulting to 1000 [ 1895.758555][ T5642] Bluetooth: hci13: command tx timeout [ 1895.764087][ T5642] Bluetooth: hci2: command tx timeout [ 1896.673557][T17198] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1898.963868][T17198] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1901.656719][T17198] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1908.394096][T31361] Bluetooth: hci18: command tx timeout [ 1908.845338][T31361] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1909.744951][T17198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1910.218517][T17198] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1911.201360][T17198] Bluetooth: hci18: command tx timeout [ 1912.128760][T17198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1912.136544][T17198] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1913.488763][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1913.499066][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.453564][T17198] Bluetooth: hci18: command tx timeout [ 1914.459127][T17198] Bluetooth: hci4: command tx timeout [ 1914.933167][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1914.942016][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.948328][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.192968][T31649] Bluetooth: hci4: command tx timeout [ 1917.198420][T31649] Bluetooth: hci18: command tx timeout [ 1919.345192][T17198] Bluetooth: hci4: command tx timeout [ 1922.062248][T17198] Bluetooth: hci4: command tx timeout [ 1923.306375][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 1935.562221][T32157] xfrm0 speed is unknown, defaulting to 1000 [ 1935.932758][T32000] vxcan1 speed is unknown, defaulting to 1000 [ 1943.523110][T31361] Bluetooth: hci14: command 0x0406 tx timeout [ 1945.111543][ T5642] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1945.151143][T31361] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1945.566101][T27882] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1947.822806][T32104] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1947.830008][T32104] Bluetooth: hci15: command 0x0406 tx timeout [ 1947.836180][T32104] Bluetooth: hci16: command 0x0406 tx timeout [ 1949.575485][T27882] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1957.825553][ T1164] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.833951][ T1164] netdevsim netdevsim7 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.059161][T31361] Bluetooth: hci17: command 0x0406 tx timeout [ 1964.396251][T31361] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1964.422625][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1964.431326][ T5642] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1965.323928][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1965.750679][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1968.761841][ T5642] Bluetooth: hci13: command tx timeout [ 1969.613686][T31361] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1969.623263][T31361] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1969.638647][T31361] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1969.647150][T31361] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1969.656077][T31361] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1970.571880][T31361] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1970.580996][T31361] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1970.588193][T31361] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1970.604624][T31361] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1970.611833][T31361] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1971.507509][ T5642] Bluetooth: hci19: command tx timeout [ 1971.893868][ T5642] Bluetooth: hci13: command tx timeout [ 1973.660956][T32104] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1974.093599][T31649] Bluetooth: hci21: command tx timeout [ 1974.100336][T31649] Bluetooth: hci20: command tx timeout [ 1974.536336][T31361] Bluetooth: hci13: command tx timeout [ 1974.541873][T31361] Bluetooth: hci19: command tx timeout [ 1974.553866][T32104] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1974.562944][T32104] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1975.495343][T32104] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1975.503158][T32104] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1976.410460][ T1317] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1976.419307][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.329849][T32104] Bluetooth: hci19: command tx timeout [ 1977.335386][T32104] Bluetooth: hci13: command tx timeout [ 1977.340875][T32104] Bluetooth: hci21: command tx timeout [ 1977.715189][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.723643][ T5642] Bluetooth: hci20: command tx timeout [ 1978.149558][T31920] vxcan1 speed is unknown, defaulting to 1000 [ 1979.097530][T32104] Bluetooth: hci18: command tx timeout [ 1979.115905][ T1164] netdevsim netdevsim7 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.126439][T32144] xfrm0 speed is unknown, defaulting to 1000 [ 1980.628781][ T12] netdevsim netdevsim7 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.129522][ T5642] Bluetooth: hci21: command tx timeout [ 1981.135050][ T5642] Bluetooth: hci19: command tx timeout [ 1981.140534][ T5642] Bluetooth: hci20: command tx timeout [ 1981.987130][ T5642] Bluetooth: hci18: command tx timeout [ 1984.079824][T32104] Bluetooth: hci18: command tx timeout [ 1984.085369][T32104] Bluetooth: hci20: command tx timeout [ 1984.090852][T32104] Bluetooth: hci21: command tx timeout [ 1986.326807][ T5642] Bluetooth: hci18: command tx timeout [ 1997.513054][T31649] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1997.524352][T31649] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1998.822173][T17198] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 2000.713655][T31649] Bluetooth: hci6: command 0x0406 tx timeout [ 2002.484539][T17198] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 2004.607001][T31649] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 2005.099079][T31361] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 2005.552049][T31649] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 2005.559612][T31649] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 2006.005665][T31649] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 2006.802807][T31649] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 2008.475634][T32013] vxcan1 speed is unknown, defaulting to 1000 [ 2009.919017][T31649] Bluetooth: hci2: command 0x0406 tx timeout [ 2012.363292][T31649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2012.780055][T31649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2013.056684][T32104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2013.735485][T31649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2014.619507][T31649] Bluetooth: hci23: command tx timeout [ 2014.626186][T31649] Bluetooth: hci22: command tx timeout [ 2015.048828][T31649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2017.064560][ T31] INFO: task syz-executor:31847 blocked for more than 143 seconds. [ 2017.072606][ T31] Not tainted syzkaller #0 [ 2017.077550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2017.086234][ T31] task:syz-executor state:D stack:25560 pid:31847 tgid:31847 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2017.098188][ T31] Call Trace: [ 2017.101488][ T31] [ 2017.104435][ T31] __schedule+0x1821/0x5740 [ 2017.109054][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 2017.114027][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 2017.119252][ T31] ? __pfx___schedule+0x10/0x10 [ 2017.124135][ T31] ? schedule+0x90/0x360 [ 2017.128408][ T31] schedule+0x164/0x360 [ 2017.132584][ T31] schedule_preempt_disabled+0x13/0x30 [ 2017.138063][ T31] rwsem_down_write_slowpath+0x883/0x1080 [ 2017.144028][ T31] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 2017.149957][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 2017.156148][ T31] ? __rtnl_unlock+0x68/0xf0 [ 2018.438045][T32104] Bluetooth: hci22: command tx timeout [ 2018.443576][T32104] Bluetooth: hci23: command tx timeout [ 2018.449914][T32104] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2019.749443][ T31] ? rdma_dev_exit_net+0x92/0x350 [ 2019.754664][ T31] down_write+0x1bc/0x200 [ 2019.759022][ T31] ? __pfx_down_write+0x10/0x10 [ 2019.763899][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 2019.769117][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 2019.774334][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 2019.779640][ T31] rdma_dev_exit_net+0x92/0x350 [ 2019.784511][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 2019.789905][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2020.676061][T17198] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 2020.684519][T17198] Bluetooth: hci23: command tx timeout [ 2020.690036][T17198] Bluetooth: hci22: command tx timeout [ 2021.144325][T17198] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 2021.543182][T31361] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 2021.550953][T31361] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 2021.559803][ T31] ? rtnl_is_locked+0x15/0x20 [ 2021.564536][ T31] ops_undo_list+0x49f/0x940 [ 2021.569272][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 2021.574397][ T31] ? ops_init+0x469/0x5c0 [ 2021.578749][ T31] setup_net+0x2f0/0x340 [ 2021.583015][ T31] ? __pfx_setup_net+0x10/0x10 [ 2021.587794][ T31] ? preinit_net+0x492/0x7b0 [ 2021.592401][ T31] copy_net_ns+0x50e/0x730 [ 2021.596837][ T31] create_new_namespaces+0x3e7/0x6a0 [ 2021.602177][ T31] ? security_capable+0x7e/0x2c0 [ 2021.607228][ T31] unshare_nsproxy_namespaces+0x149/0x190 [ 2022.545331][ T31] ksys_unshare+0x57d/0x9f0 [ 2022.549907][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 2022.554959][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.561044][ T31] __x64_sys_unshare+0x38/0x50 [ 2022.565825][ T31] do_syscall_64+0x174/0xf80 [ 2022.570437][ T31] ? trace_irq_disable+0x3b/0x140 [ 2022.575481][ T31] ? clear_bhb_loop+0x40/0x90 [ 2024.861296][T31361] Bluetooth: hci22: command tx timeout [ 2025.862970][T17198] Bluetooth: hci23: command tx timeout