last executing test programs: 22.324410901s ago: executing program 3 (id=6784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x98, 0x1000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x4fa}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000013c0003800c00028005000100890000002c00018014000300fc02000000000000000000000000000114000400ff0200000000000000000000000000013c0002802c000300ff0200000000000000000000000000011400040000000000000000000000ffff640101000c00028005000100"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x78, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf940}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x78}}, 0x20004040) r7 = socket(0x400000000010, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) 21.521614367s ago: executing program 3 (id=6792): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(0x0, &(0x7f0000001080)=@random="c70626b4f604", 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x82902, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, &(0x7f0000000500), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6b}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0xfffffffffffffd76) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf}, 0xa) r15 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) shutdown(r3, 0x1) 19.219352371s ago: executing program 3 (id=6824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) 18.424035255s ago: executing program 3 (id=6834): syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x138, 0x168, 0x0, 0x138, 0xa, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x80, 0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x1d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x100, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x100}}, 0x8800) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x18, 0x80801, 0x1) poll(&(0x7f00000000c0)=[{r5, 0x1040, 0x700}, {r1, 0x2187}], 0x2, 0x403) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r6, &(0x7f0000000100)='syzkaller\x00', 0x2100, &(0x7f0000000140)={@_ha_fsid={[0x9, 0xeed6]}, {0xad, 0x9, 0x5, 0x4}}, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000100180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f00000007c0)=""/3, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 16.797184995s ago: executing program 3 (id=6860): socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r0, &(0x7f0000002840)=""/4101, 0x1005, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000002000000000000001ff7f000000000d00f9ff000000dc7020a74b70e0408bb15fec0de8ac20d93b66a60f424a506cfd96142ce13b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe790, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x50) accept$inet6(r3, &(0x7f0000000100), &(0x7f0000000180)=0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001002dbd700000fff40002100000fe00ff0900200000060015000400000014001680100008800c"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @local, 0x2}, 0x1c) bind$inet6(r9, &(0x7f00000006c0)={0xa, 0x4622, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8}, 0x19) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 14.034989097s ago: executing program 2 (id=6877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000000400000f00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="77d798a858b4795ac3aba10000000000000000000900000000000000000009554200000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r4, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000580)={&(0x7f0000000540)=""/2, 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x7}, "a2bb77a476828102", "05f38f2a2da152d349b49257476390a5", "96a154b8", "cfc6b899814e85da"}, 0x28) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@deltaction={0x4c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x20048844) socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0)) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom$unix(r5, 0x0, 0xfffffffffffffdbe, 0x40010020, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.120810543s ago: executing program 4 (id=6885): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x90) 9.87780092s ago: executing program 4 (id=6888): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000100)={0x0, 0x13}, 0x1, 0x0, 0x0, 0x20005014}, 0x20004840) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="f0000000", @ANYRES16, @ANYBLOB="200026bd7500fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000800010070636900"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xfffffffffffffddb, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x4000001) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_emit_ethernet(0xf1, &(0x7f0000000400)={@random="32be4d3d6c14", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x1, 0x1, 'j', "9622a0", 0x8808, "4bb4433bfcd1d12431c6974634d6f32a3aa980b8e754c59650ee12a5c8cc3159a56a52c019ced2e771ef198969c18cf2adb10c13c2383581d6147d13726f9e2e958af0974c680146caaa6881e1ad888efd6a9f73962210f9af9c2321d3ec79339851f28bee7a3554e9abfd229834d78b2d71efc9fbd1f44b42539627e8bb3a442058f0dc74f4bdadab8269b52a8b33756f106cb78bfa58a72be6415c03dc022d537cd5cb9b702829179ba03e2aeb24a442894f1f9778532311656ea41f95bdbea393503aa5fd7afee6004ac4c51bfdf42ab482748e9da7"}}}}}, &(0x7f0000000500)={0x1, 0x4, [0xa72, 0xfe1, 0x500, 0xda6]}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x3}}]}}]}, 0x44}}, 0x24008004) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4051) 9.503756673s ago: executing program 2 (id=6889): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x5, 0x1, 0x5) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x18, 0x7, 0x2, 0x15, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0xffff, @mcast2, 0x6}}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x26, 0x8, 0x14}, @sadb_address={0x5, 0x7, 0x32, 0x190, 0x0, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfc}}]}, 0xa8}}, 0x11) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001240)={r1, &(0x7f00000001c0)="aa679a8ebd46a2e25c672f3220ec8d9ac4359447bc18445de93bf50512ef92ef72622d3ca754c5d9b79c023f0b8743e8c58042dc13a2f1ddf845143b5af14b7dbab751153ef15c94", &(0x7f0000000240)=""/4096}, 0x20) connect$bt_l2cap(r0, &(0x7f0000001280)={0x1f, 0x1, @none, 0x5289}, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x52}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe30}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10cb}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xff7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x700}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001440)='memory.swap.events\x00', 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001480), 0x101800, 0x0) read$rfkill(r4, &(0x7f00000014c0), 0x8) sendmsg$key(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x2, 0x2, 0xb3, 0x0, 0xe, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb7, 0xfff, {0x6, 0xcd, 0x7f, 0x7, 0x0, 0x2, 0x0, @in6=@remote, @in6=@empty}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d6, 0xf8, 0x6, 0xf, 0x2}]}, 0x70}}, 0x10004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r2, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = accept$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001740)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = accept4(r5, &(0x7f0000001780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001800)=0x80, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001840)={r7, 0x3, 0x9, "170ae22d149b8e37d6a03350a88fcdd30a6e6c284ddb751f5573595ea87e0cf20196c7d3d488727bc0b6bc4f8bae0916572f458e40f6d389596e58c1d5b614ee32e3ace5"}) recvmmsg(r3, &(0x7f0000004fc0)=[{{&(0x7f00000018c0)=@ieee802154, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/190, 0xbe}, {&(0x7f0000001a00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/164, 0xa4}], 0x3, &(0x7f0000001c00)=""/55, 0x37}, 0x6b2}, {{&(0x7f0000001c40)=@generic, 0x80, &(0x7f0000004f00)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/226, 0xe2}, {&(0x7f0000002dc0)=""/178, 0xb2}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/93, 0x5d}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x6, &(0x7f0000004f80)=""/52, 0x34}, 0xfffffffd}], 0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000005040)={0x0, 0x5}, &(0x7f0000005080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000050c0)={r8, @in6={{0xa, 0x4e24, 0x0, @local, 0x3}}, [0x9, 0x200, 0x3, 0x1, 0x9, 0x0, 0x800, 0x1, 0x7fffffffffffffff, 0x39b, 0x7ff, 0x5, 0xffffffffffffff3e, 0x200, 0x81]}, &(0x7f00000051c0)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000005200)={r9, 0xcc, "11de816e751f13de7988462154e0496c2c6c44eec28c00ac1a9d4a00c0259e37c1023052924cc1af0388ef24f155be375d011c245861dd0689905cedbeb4cf4f69929646f59d9c44df4c775c09a43a9c10a9d0af53f1b8aeb8e55cc36dccbe7bd9abf73765bbaf4794be005716c152fcbf8ce28e0ef203115c3bc8a3d93ff1826de8da66a82c568e3e108169d4abf3286001174e6785628d96baa35c51ca997c2df0b8d7a4307034160e0c017dda46d2e1d37d883d95402656a1cb2c3643c7e37752589e889df254a641aa82"}, &(0x7f0000005300)=0xd4) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000005340)={'gre0\x00', 0x1}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000005380), &(0x7f00000053c0)=0x4) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwrite64(r10, &(0x7f0000005400)="a915", 0x2, 0x6) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000005900)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005480)={0x430, 0x3f4, 0x20, 0x70bd25, 0x25dfdbfc, {0x6, 0x1, 0x39, [0xe9e1, 0x10000, 0x3, 0x4, 0x8, 0x1, 0x0, 0x8b, 0x6b44, 0x160000, 0x394, 0x1, 0xff, 0x996, 0x2, 0x5, 0x0, 0x8, 0x96, 0x100, 0x10000, 0x0, 0x7f, 0x4800, 0x4, 0x3, 0xfc94, 0x101, 0x4, 0x1, 0x6, 0xf, 0x80000001, 0x7fff, 0x7, 0x5, 0x3, 0x5, 0xcd5, 0x43, 0x3, 0x1, 0x1, 0xffffffff, 0x401, 0x6, 0xec29, 0x1, 0x1, 0x42, 0x8, 0x2e, 0x7f, 0x5, 0x5, 0x91, 0xfffffeff, 0x2, 0x10001, 0x3ff, 0x9, 0x10000, 0x7f, 0x8], [0x9, 0x4, 0x0, 0x7ff, 0x7ff, 0xde, 0x0, 0x9, 0x5, 0x6, 0x1, 0x3, 0x9, 0xd, 0x9, 0x1, 0x7, 0x9, 0x9, 0x4, 0x6, 0x1ff, 0x3, 0x8, 0x4, 0x1fcda2d8, 0x9, 0x0, 0x3, 0x3, 0x1ff, 0x10b17a15, 0x1, 0x4, 0x3, 0x8, 0x1ff, 0x6d8, 0x4, 0x1, 0x9, 0x34, 0x2, 0xb963, 0x1, 0x3, 0x7ff, 0x80000001, 0x5, 0x5, 0x1, 0x40, 0x7, 0x7, 0xffffff2d, 0x1ff, 0x7, 0x1, 0x7, 0x1, 0x5, 0x7, 0x9, 0x1], [0xe, 0xffff473a, 0xa, 0x9, 0xa0, 0x80000000, 0xfffffff6, 0x0, 0x535c, 0x1fe, 0xf5, 0xa175, 0x9, 0x8, 0x1, 0xfffffffd, 0x1, 0x9dda, 0x9, 0x4, 0x8, 0xbbb2, 0xb, 0x7f, 0x4, 0xfffffff7, 0x3, 0x10, 0x9, 0x5, 0xc, 0xfffffff7, 0x0, 0x1, 0x80000000, 0x2, 0x7, 0x8d52, 0x7, 0x0, 0x400, 0x4, 0x7ed3, 0x2, 0x1, 0xa, 0x8001, 0x0, 0xcb32, 0x3, 0x7fff, 0x9, 0xd, 0x92, 0x6, 0x1, 0x6, 0x9, 0x1ff, 0x8, 0x9, 0x0, 0xe6, 0x4], [0xaa, 0x1, 0x3, 0x2, 0x3, 0xfff, 0xfffffffd, 0x3, 0xe, 0x682, 0x21b4, 0x3, 0x42ec730f, 0x401, 0x100, 0x7, 0x3, 0x5, 0x1, 0x10, 0x4f, 0xf, 0x1, 0x2, 0xffff, 0x3, 0x4, 0x10000, 0x800, 0x8, 0xec0, 0x0, 0x10000, 0x9, 0xa9, 0x8, 0x48300, 0x6, 0x46, 0x2, 0x5, 0x6a3, 0x800, 0x2669, 0x99, 0x1, 0x6, 0x3f800, 0x9, 0x64f0, 0x4, 0x1, 0x4, 0x9, 0x8f2, 0x7, 0x8001, 0x2, 0x7, 0xb2, 0x9, 0x65, 0x5, 0x13ad2f9f], 0xd, ['gre0\x00', 'nl80211\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x6044}, 0x48000) sendmsg$inet(r5, &(0x7f0000005d80)={&(0x7f0000005940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000005980)="f55dd3239b9bd1c649cb5e23c474dd2fdc60218aba0845159e34e7b5157ba55b713f6dd1888ecbbb2528456508af2c789428a4d3e1feb5cc9ac995bac6f339dbee75aae6c2fb04736b19962f39710defcf1719c23eea1ca166a692dea1123fd8a8113a38acd236ab991ac4430bde51ebf4ce20acd422d273b402eea0d3399916f09b6135a87249c5013e1f2eb425cd49e32ca87b3bfaaa12920109c13de4df6fa8b91af942c6bed95318c5a93d8b3d7571097b9632b5aefec74d11c51aac5a23ba96cd5cb0160396be34ea092316", 0xce}], 0x1, &(0x7f0000005ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0xe7, [@loopback, @rand_addr=0x64010100, @remote, @multicast2, @loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x82, 0x8, "88d4dba2d320"}, @timestamp_prespec={0x44, 0x4c, 0xba, 0x3, 0x5, [{@multicast2, 0x1}, {@remote, 0x7}, {@loopback, 0x6}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@private=0xa010102, 0xd}, {@empty, 0x5030}, {@rand_addr=0x64010100, 0x4}]}, @end, @cipso={0x86, 0x2d, 0x0, [{0x6, 0xe, "01f13213bba5f95e5500cd79"}, {0x2, 0x9, "a453a78f760050"}, {0x5, 0x2}, {0x6, 0xc, "546052eb3ab4359b2e9d"}, {0x6, 0x2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xeb, [@multicast1, @empty, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x26}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @rand_addr=0x64010101}}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xf2, 0x0, 0x8, [0x4, 0x9]}, @timestamp={0x44, 0x18, 0xe0, 0x0, 0x3, [0x413b9c, 0xfffffff7, 0x4, 0x1ae, 0x3]}, @noop, @cipso={0x86, 0x54, 0x2, [{0xbe1aff70fd17c688, 0xa, "8cbe7b11e759d64d"}, {0x7, 0x5, "046414"}, {0x6, 0x10, "15ea004b4fedd741fd37a88310b4"}, {0x1, 0x10, "7df9b7d7a6b032f97a6ace70ad14"}, {0x7, 0x7, "e18b31ae05"}, {0x1, 0x8, "9c6cbcaade50"}, {0x4, 0x5, "c91741"}, {0x0, 0xb, "5f8f92d6af0f948947"}]}, @timestamp={0x44, 0x20, 0x1d, 0x0, 0x4, [0x5, 0x400, 0x80000001, 0x9, 0x1ff, 0x7, 0x7]}, @cipso={0x86, 0x39, 0x3, [{0x5, 0x4, "9dc8"}, {0x6, 0xa, "9281667b6344d42d"}, {0x2, 0x11, "c24a442102244bb322b077bd4bd5c0"}, {0x0, 0xc, "d9fd3cb3c42c76701e31"}, {0x2, 0x8, "9060d4e4bcb0"}]}, @rr={0x7, 0x3, 0xf9}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}], 0x298}, 0x40040) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000005e80)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000005e40)={&(0x7f0000005e00)={0x20, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa7, 0x19}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0xc0665a8f427bba80) syz_genetlink_get_family_id$l2tp(&(0x7f0000005ec0), r7) 8.874694773s ago: executing program 4 (id=6891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000000000000000009545e762b400"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xe9, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) 8.772714333s ago: executing program 2 (id=6893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)="8a57d58b85df782904b6713f2b947b6d27cb71bd6bccff869f6ddb5c5f1cf0065da87164e8187d5ca8f73972d73ee9364ea0151509a5f947e1dcacffd24d039a145362969003fc29f34bfefdda377f81a6f54dc9e3f71384313ec42bedf38b0ba6692aaaacbc5f608273e959d1a89fc5c65fabf906a78c097e44b85c69319b1efd1cd300192c9328cd6ee2aa0af0030bfb9bbd11b34663e40e202d7bbf4d1ec61c9c65c184bf4649e067f3c606e6", 0xae}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmmsg$inet(r2, &(0x7f0000001180)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1=0x3000000}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000140)={'vlan0\x00', @remote}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x810, r4, 0xbd66f000) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000604"], 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000400)=0xffffffc5, 0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r6, @ANYRES64=r6, @ANYRESOCT=r3, @ANYRES16=r3, @ANYRESHEX=r4], 0x40}, 0x1, 0x0, 0x0, 0x40048001}, 0x20000800) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffffc, 0x1, 0x1000, 0x1, 0x4, 0x9, 0xa1, 0xfff, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x8, 0x80000004, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x401, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x1, 0x0, 0xe, 0x2b11, 0x104, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x100, 0x3, 0x0, 0xfffe, 0x8, 0x7, 0x79c, 0x2, 0x1, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x5, 0x180000, 0x80007, 0x80bf04, 0x5, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xba2a, 0x4, 0x5, 0x8, 0x752, 0x5, 0x4, 0x1, 0x10001, 0x2, 0xffffffff, 0x0, 0x6, 0x8, 0x8, 0xffffffff, 0x2, 0x2, 0x81, 0x100, 0x5, 0x68, 0x83, 0xb, 0x5, 0x6, 0x5, 0x2, 0x1, 0x12, 0xd9a, 0x9, 0x2a2, 0x0, 0xffff, 0x9, 0x5, 0x8, 0x0, 0x98fa, 0x2, 0x0, 0x7, 0x4, 0x5, 0x401, 0xd, 0x0, 0x8, 0x1, 0x200, 0xc5e, 0xffffffff]}}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) bind$nfc_llcp(r10, &(0x7f00000005c0)={0x27, r11, 0x0, 0xd, 0xa2, 0x1, "ff4f09d48b014668340366f8084598c51819a08223dff681a73e05cd7ad55b9ef921c6a66c908a29c305ce0a7e0d2d3da5447b5581deef7dc9c93303d46154", 0x2a}, 0x60) 8.110341834s ago: executing program 2 (id=6896): unshare(0x6a040000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000030000000100000f07000000030000000100000005000000004f003000490213d850965a1ea160c1a2e1e83d3376ed644ab3eb4e60a3c3ddef5f171e35ffe1e77a3f743e712895"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800356a00000000000000000a800000ff030006400000001400010003"], 0x30}}, 0x0) listen(r0, 0x0) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0xb6, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0x100000ff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0xb, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x20004, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x600, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774", 0x10}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000140)="06ff03076844268cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 8.095381883s ago: executing program 4 (id=6897): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001f40)={&(0x7f00000000c0), 0xc, &(0x7f0000001f00)={&(0x7f0000001140)={0xd8c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x700, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3000, 0x6, 0x1000, 0x3, 0x101, 0x42ec, 0x6, 0xf69d]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0xb, 0x9, 0x5, 0x4, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x10c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x3}, {0x0, 0x1}, {0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x7}, {0x0, 0x8}, {0x4}, {}, {0x7, 0x3}, {0x6, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x5, 0x4}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0x6}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x7}, {0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x2}, {0x5, 0x6}, {0x4, 0x9}, {0x3, 0x1}, {0x3, 0x9}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x6}, {0x5, 0x8}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x7}, {0x3, 0x4}, {0x6}, {0x4, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb7, 0xf, 0xfff, 0x0, 0x4, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x59c7c5f3c9b669d9, 0x1, 0x4, 0x6c, 0x24, 0x60, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xa66f6791be1fc264}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x8, 0x1, 0x0, 0x100, 0x9, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5e, 0x3, 0x6, 0x5, 0x48, 0x1b, 0xc, 0x9, 0x16, 0xb, 0x18, 0x7a, 0x12, 0x2, 0x16, 0xc, 0x36, 0x16, 0x16, 0x3, 0x60, 0x6c, 0x3, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7116, 0x6bd1, 0x8c, 0x1ff, 0x79, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x7}, {0x4}, {0x6, 0x5}, {0x4}, {0x7, 0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0xa}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x8}, {0x2, 0x3}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x7}, {0x4}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x1}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x9}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x1f}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x6}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x1}, {0x2, 0x6}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x100, 0x57, 0x81, 0x1, 0xe, 0x1, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x30, 0x60, 0x0, 0x30, 0x24, 0x6, 0x4, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x4, 0x2, 0x9, 0x2, 0x1, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x24, 0x5, 0x2, 0xc, 0xc, 0x36, 0x3, 0x6, 0x5, 0x38, 0x3, 0x24, 0x2, 0x5, 0x24, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7ef5, 0x0, 0xbe, 0x7fff, 0x7e, 0x5f53, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0xf}, {0x7}, {0x5, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x8}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x3, 0x36, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}]}, {0x348, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x344, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6a3, 0x8, 0x7, 0x1, 0x2, 0xaf3, 0x0, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffe, 0xd, 0x1, 0x6, 0xe, 0xff, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xd2d, 0x8b, 0x1, 0xb054, 0x9, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x3}, {0x5, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x1}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x2}, {0x7}, {}, {0x5, 0x2}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x2}, {0x6, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x5}, {0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x7}, {0x7, 0xa}, {0x4, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x2, 0x4}, {0x7, 0x5}, {0x4}, {0x1, 0x8}, {0x6, 0x1}, {}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x17, 0x1, 0x4, 0x3, 0x2, 0x1b, 0xc, 0x2, 0x12, 0x60, 0x24, 0x1b, 0x48, 0x16, 0x6c, 0x9, 0x6c, 0x69, 0x60, 0x24, 0x24, 0xc, 0x60, 0x3a, 0x9, 0x48, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x272d, 0x4, 0x8001, 0xd, 0x4, 0x7f, 0x6, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x180, 0x4, 0xffff, 0xf, 0xfff3, 0x2, 0x400, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x7}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x2, 0xa}, {0x5}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x3}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x7}, {0x4, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x9}, {0x6, 0x6}, {0x7}, {0x7, 0x7}, {0x4, 0x3}, {0x5, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x5, 0x8}, {0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x6c, 0x9, 0x60, 0x36, 0x4, 0x16, 0x30, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffd, 0x3, 0x9, 0x9, 0x1, 0x1, 0x5]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0xc, 0x6c, 0x9, 0x9, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x6c, 0x5, 0x24, 0x3, 0x1, 0x0, 0x9, 0x4, 0x36, 0x6c, 0xc, 0x60, 0x18, 0x4, 0x9, 0x1, 0xc, 0x48, 0x1b, 0x12, 0x24, 0x7a]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x5, 0x71d, 0xb, 0x200, 0x2, 0xfffd]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x3, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x6, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x3}, {0x6, 0x2}, {}, {0x4, 0x7}, {0x3, 0x9}, {0x3, 0x7}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x3}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x6}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x2fac, 0x5, 0xffff, 0x6b46, 0x8, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa19b, 0x9, 0x100, 0x1ff, 0xc, 0x101, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x1, 0x7, 0x7, 0x8, 0x8, 0x0, 0x8ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x785, 0x9, 0xfafd, 0x8, 0x3, 0x3, 0x7f, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x100, 0x3, 0x8, 0x0, 0x8, 0xff9, 0x5363]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8, 0xe, 0x0, 0x9, 0x1, 0xf6, 0xf]}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd90c, 0x585, 0x10, 0x2, 0x1, 0x22e, 0x3, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x22, 0x40, 0x5, 0x9, 0xd0, 0x0, 0x9, 0xddb9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x3, 0x7, 0x6, 0xa, 0x6, 0x800, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe15f, 0x4, 0x6, 0x340, 0x4, 0x8, 0x1ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xca}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}]}]}, @NL80211_ATTR_TID_CONFIG={0x5b8, 0x11d, 0x0, 0x1, [{0x388, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x344, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x8, 0x8000, 0xfff, 0x7e0, 0x6, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7aa8, 0x8, 0x7, 0xf13e, 0x9047, 0x5c, 0xf63a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x19, 0x6, 0x5a, 0x4, 0x3, 0xf, 0x3, 0x5]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x11c, 0x7, 0x7, 0x8, 0x6288, 0x7, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0xfff, 0x4, 0xc2bb, 0xcb1e, 0x4, 0x7fff, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x151b, 0x7d, 0x10f, 0x649, 0x1, 0xf47, 0xe]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x5, 0x36, 0x6, 0xb, 0x6, 0x48, 0x36, 0x1b, 0x18, 0xc, 0x12, 0x0, 0x2, 0x50, 0x48, 0x2]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x60, 0x36, 0x18, 0xc, 0x48, 0x60, 0x6c, 0x2, 0x5, 0x12, 0x4, 0x1b, 0x4, 0x0, 0x60, 0x1b, 0x18, 0x69, 0x60, 0x4, 0x3, 0x30, 0x9, 0x36, 0x9, 0x0, 0x24, 0x1b]}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0xa}, {0x0, 0x6}, {}, {0x6, 0x1}, {0x4, 0x5}, {0x5, 0x9}, {0x1, 0x4}, {0x7}, {0x2, 0x4}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x6, 0x1}, {0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x7, 0x4}, {0x1, 0x3}, {}, {0x3, 0x7}, {0x5, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x8}, {0x2, 0x5}, {0x3, 0xa}, {0x1}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x8}, {0x4, 0x6}, {0x3, 0x3}, {0x7, 0x5}, {0x2, 0x4}, {0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x1}, {0x7, 0x8}, {0x6, 0x7}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x3, 0x9}, {0x2, 0x4}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x6}, {0x4, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x2, 0x7, 0x8, 0x7, 0x800, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x3, 0x1, 0x9eff, 0x2, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x6, 0xb, 0x5, 0x9, 0xe, 0xc, 0xb, 0x36, 0x33, 0x6, 0x3, 0x36, 0x1, 0x35, 0xb, 0x2, 0xb, 0x1b, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x7, 0x54, 0x7, 0x7, 0x6, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x4, 0xe8, 0x0, 0x6, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x51, 0x6, 0x8b2b, 0x5, 0xfff9, 0x200, 0x8, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x4, 0x1, 0x7, 0xfffe, 0xfc, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x0, 0x0, 0x6, 0x8, 0x6, 0x70]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x5, 0x12, 0x2, 0xc, 0x6, 0x4, 0x66, 0x3, 0x24, 0x6c, 0x0, 0x48, 0x1, 0x4, 0x30, 0x6, 0x6c, 0x5, 0x48, 0x12, 0x16, 0x16, 0x48, 0x18, 0x18, 0x3, 0x60, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x40, 0x7, 0xf71, 0x2, 0x800, 0x51be, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8805, 0x93, 0x4, 0x6, 0x7f, 0x80, 0x2, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x1, 0x7, 0x0, 0xd, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x5, 0x2, 0x2, 0x4, 0x8, 0x37ea]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbc89, 0x5fa, 0x3, 0x5, 0x10, 0x1, 0x4000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xca6, 0x2, 0x8000, 0xed, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0xf, 0x7, 0x1, 0x7f4e, 0x6, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x10, 0x3, 0x7, 0x34, 0x5e, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0xc, 0x3, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xf238, 0x7ff, 0x0, 0x3, 0x7, 0xc, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x15, 0x40, 0x5, 0x5, 0xf, 0x3]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x2, 0x60, 0x2, 0x2, 0x48, 0x5, 0x1, 0x60, 0x48, 0x60, 0x48]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x9}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {0x4}, {0x2, 0x5}, {0x3, 0xa}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x6}, {0x4}, {0x5, 0x4}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x8}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x1}, {0x2, 0x2}, {0x1}, {0x5, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0x17}, {0x3, 0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x2}, {0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x4, 0x3}, {0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x1}, {0x2, 0x2}, {}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x1, 0xcb49, 0x3, 0x4, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x2, 0x100, 0x5, 0x8, 0x8001, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0x241a, 0x4, 0x6c2, 0xe, 0x1, 0x8001]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x9}, {0x3, 0xa}, {0x6, 0x7}, {0x6, 0x1}, {0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x0, 0x8, 0x4, 0x9f, 0xfff9, 0x8]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x12, 0xc, 0x2, 0xc, 0x12, 0x1, 0x1, 0xd, 0x12, 0xc, 0x48, 0x24, 0x5, 0x12, 0x9, 0x18, 0x12, 0x12, 0x24, 0x2, 0x4, 0x18, 0xc, 0x36]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}]}]}]}, 0xd8c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40080) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200008c4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x6a, 0x10, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x823}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x7, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x40040) 7.237947978s ago: executing program 4 (id=6899): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x6, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000000640)=""/82, 0x52}, {&(0x7f0000003940)=""/4096, 0x1000}], 0x2}, 0x6}, {{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/251, 0xfb}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/231, 0xe7}], 0x1, &(0x7f0000004f80)=""/127, 0x7f}, 0x2}, {{&(0x7f0000005000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000062c0)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/181, 0xb5}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f00000061c0)=""/195, 0xc3}], 0x4, &(0x7f0000006300)=""/213, 0xd5}, 0x9}, {{&(0x7f0000006400)=@caif, 0x80, &(0x7f00000075c0)=[{&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000006540)=""/107, 0x6b}, {&(0x7f0000009cc0)=""/4104, 0x1008}], 0x3, &(0x7f0000007600)=""/31, 0x1f}, 0xffff}, {{&(0x7f0000007640)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000009a80)=[{&(0x7f00000076c0)=""/222, 0xde}, {&(0x7f00000077c0)=""/4096, 0x1000}, {&(0x7f00000087c0)=""/35, 0x23}, {&(0x7f0000008800)=""/239, 0xef}, {&(0x7f0000008900)}, {&(0x7f0000008940)=""/222, 0xde}, {&(0x7f0000000400)=""/76, 0x4c}, {&(0x7f0000008a80)=""/4096, 0x1000}], 0x8, &(0x7f0000009b00)}, 0xb}], 0x6, 0x40004002, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet6(0xa, 0x0, 0x6) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0xffffffffffffffff, 0xa, 0xc) (async) socket(0xffffffffffffffff, 0xa, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x2, 0x0) 6.122253509s ago: executing program 1 (id=6902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={r5, 0xff}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x80000001}, &(0x7f0000000100)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000a410c94519214d95", @ANYRES32=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 5.148210904s ago: executing program 1 (id=6903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001180)="937ed53af62c83ae406275c8e57c8f3f7be606", 0x13}], 0x1, &(0x7f00000023c0)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x840}], 0x1, 0x40) read(r2, &(0x7f00000006c0)=""/32, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x20a, 0x0, 0x6898}, &(0x7f0000000880)=0x10) r3 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x1, [{@multicast1, 0x8}, {@local, 0x7}]}]}}}], 0x28}}], 0x1, 0x4000810) 4.882975883s ago: executing program 1 (id=6904): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000240)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x2010, r2, 0x913e0000) ioctl(r0, 0x2549, &(0x7f0000000000)="2a19eae96d62f65e78499769e50be2df2b4f37cfee45a4b2060496a078d90549b607e5fcb089a1b38400b676227a1494198d2a19c8f385ab9bdeabcbf208d414ad") setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$kcm(0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r8, 0x13}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="691e243e3a6328ceb31c80645b76129e", 0x10}], 0x1}, 0x20008110) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffff8110a10000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0xfffffffffffffe4c}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000680)=0x8001, 0x4) mmap(&(0x7f00005ce000/0xd000)=nil, 0xd000, 0x3000008, 0x13, r10, 0x1000) 2.978712678s ago: executing program 3 (id=6905): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000001200), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) 2.708996883s ago: executing program 2 (id=6906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xabb58da18564204b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1830000001080000000000000300000095000010000000008f3e2af359c5a696879b77a688474f17c70a0ee60f17010000006c86bda1be69ffd48eb3672ec11ce31952e9584401364b829372bdc64589c956403b70dc58b6973a90876a7b1cc2d29631bd67c3cdae5615dacec19c1fdc5ae6dddc9f032226749b8d1d66320b6a1d6d39c76ad88616e1421d0f2a60c4f2565972562d8533fafd09bb3d46e2b4877fe3cad6ad8d4044ad3bf779a37e3934b936ff007f10c733884b429a954c1c53121f5c"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2b, 0x1, 0x0) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c08d) shutdown(r3, 0x1) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 2.280516252s ago: executing program 4 (id=6907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x5, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x3, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r2}, &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r2}, &(0x7f00000005c0)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x80002, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a58000000090a010400000002000000000a0000000900020073797a310000000008000f40000000060870bb2c0500001c08000a400000000008000340000000400900010073797a30000000000c000b400000000000000967140000001000010000000000000000000084000a"], 0x80}}, 0x0) unshare(0x8000400) (async) unshare(0x8000400) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="920000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055c74986300000000000000000"], 0x290) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) (async) sendto$inet6(r9, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) getsockname(r9, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000200)=0x80) (async) getsockname(r9, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000200)=0x80) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008009c11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e000003"], 0xd6) 2.249126317s ago: executing program 0 (id=6908): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x8, 0x0, 0x6, 0x80, 0xffffffffffffffff}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x3, 0x0, 0x10, r2}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 1.995702784s ago: executing program 0 (id=6909): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x20) listen(r0, 0xec) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0x4, 0x5, r6}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r7 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 1.402014276s ago: executing program 1 (id=6910): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x16a, 0x4) sendmmsg$inet(r1, &(0x7f0000002300), 0x0, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) recvfrom(r1, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000801) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000d0a010100000000000000000a0000010900020073797a31000000000900010073797a3100040000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14ebff03", @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="18640bfc7b03a14a3885119a91807c231530faf36d2856f45107c0be0987b2447f85efc192764fc14fa4d4a7ee2ff8e2d627318e2f4659ab2146c2ec24f056f67aefe0f2a41d46465bc4b35fa7e2f1ce04255b1bd0b458ff2f34288bfaa36434a1500f4f3b58b6e31f80998650b1a308c45bdfd63a8fc421038f11a2e709ec7fe9f78a6f7065d510bf4428c7270d9f8ca9bacb997cc6dcf81b3c0d1a8b600e168c39d19e1ba75052508390624d39747f01f0944e57e347a6fcb77957b466f4f6ba09e61566d71df21e38bdd920d83526be58144b208b1c5a724d05109d61a012a73fd744e897611f"], 0x28}}, 0x20040045) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) 1.136213785s ago: executing program 1 (id=6911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x184, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x158, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0xfffffffffffffeca, 0xa, 0xc3af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16f53e3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x5c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd302}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.116076219s ago: executing program 0 (id=6912): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18f5ff00660000004900000095004000000000000000000043483a9795667ed47beca8191418e7e0f0fed40a2adba06e08357bbdd7b02a971c7bc5a1ec942e9af783a3dc2669da73a967c09e147828cb80e5334bcac266e30534aababc85797efee84b58961b7786fbf45692c39c0da4ae8a3b0b10b2e52855bb69f09d1b33f66c8265e9e93601b8a4b95ca368db0408f6c4cc1cee89f8396020ec9d8d30db3cbaaf32e05277841cc45a9a2cc114366422ab5e58e0fe"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r3, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}, 0x8d6f, 0x6}, &(0x7f0000000300)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007c00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x700, 0x700, 0x7, 0xec, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x66, 0x0, 0x3, 0x4, 0x0, @local, @rand_addr=0x64010101}}}}) 910.140558ms ago: executing program 0 (id=6913): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x100010, 0xffffffffffffffff, 0x0) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 905.984037ms ago: executing program 1 (id=6914): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0xe040400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000019e5aa6f692e2651a0000000000000000001400030068737230000000000000000000000000140011007665746831"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) unshare(0x8000000) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 861.567378ms ago: executing program 0 (id=6915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440100001000010025bd7000fedbdf1611000000000000000000000000000000fe8800000004000080000000a33cfea469f5ee58000bfee38437760101000103944e230005000080003a000000716cc9cbcd68cb31fd82b7113932a0f71663de6697591af13beb621d10e32cab95a8afd9be01b41230afa29f3781dbdabf9d9d063f2dc49e06216cb128ee40360ed47df67c9f14a8143b0a9a215c5a8c63b97cf98d615c38ac1812db709a9faee8364751b1175a4505ab6c70099ac6e6401c878c3b568a21f1e0d6ae505ad5ca4a9dadba992dbf2c23ddefbb1bdf3baf59d732530cad340ce0a3885ffd14e924c5c6624f537695582f61b120f881e6de86e610926ec0f198564b88a719ae41b8e1d124738c0e7d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 390.072496ms ago: executing program 0 (id=6916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000080)="05000000010001", 0x7) (async) close(0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111bc000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 0s ago: executing program 2 (id=6917): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000640)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bdc92e8cf952a4300ee3a3de6a526f7fc583c86b1aef33335725089b9a50f7b1a93e79d8", 0x67}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): : hci5: unexpected cc 0x1001 length: 249 > 9 [ 866.240048][T19728] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 866.248187][T19728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 866.741643][T17756] syz_tun (unregistering): left allmulticast mode [ 866.768076][T17756] syz_tun (unregistering): left promiscuous mode [ 866.972776][T29266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5807'. [ 866.982828][T29266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5807'. [ 867.066180][T29237] xfrm0 speed is unknown, defaulting to 1000 [ 867.209505][T29277] netlink: 'syz.0.5809': attribute type 1 has an invalid length. [ 867.327587][T29282] bridge0: port 3(gretap1) entered blocking state [ 867.336127][T29282] bridge0: port 3(gretap1) entered disabled state [ 867.349458][T29282] gretap1: entered allmulticast mode [ 867.359057][T29282] gretap1: entered promiscuous mode [ 867.549367][T29293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5812'. [ 867.637076][T29295] netlink: 'syz.2.5812': attribute type 1 has an invalid length. [ 867.655193][T29295] netlink: 'syz.2.5812': attribute type 2 has an invalid length. [ 867.788377][T29299] netlink: 'syz.4.5814': attribute type 2 has an invalid length. [ 867.954552][T29237] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.971196][T29237] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.012985][T29237] bridge_slave_0: entered allmulticast mode [ 868.036959][T29237] bridge_slave_0: entered promiscuous mode [ 868.057604][T29237] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.079072][T29237] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.086858][T29237] bridge_slave_1: entered allmulticast mode [ 868.098617][T29237] bridge_slave_1: entered promiscuous mode [ 868.119427][T29311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5818'. [ 868.173818][T29237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.211533][T29237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.298140][T29237] team0: Port device team_slave_0 added [ 868.319454][T20067] Bluetooth: hci5: command tx timeout [ 868.334635][T29237] team0: Port device team_slave_1 added [ 868.374820][T29237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.381944][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.410382][T29237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.432184][T29237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.439350][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.467424][T29237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.559108][T29322] syzkaller0: entered promiscuous mode [ 868.565415][T29322] syzkaller0: entered allmulticast mode [ 868.704667][T29237] hsr_slave_0: entered promiscuous mode [ 868.713247][T29237] hsr_slave_1: entered promiscuous mode [ 868.719977][T29237] debugfs: 'hsr0' already exists in 'hsr' [ 868.726498][T29237] Cannot create hsr debugfs directory [ 868.928394][T29347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5827'. [ 869.972362][T29372] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 870.183843][T29377] xfrm0 speed is unknown, defaulting to 1000 [ 870.383095][T20067] Bluetooth: hci5: command tx timeout [ 870.912309][T29381] ip6tnl1: entered promiscuous mode [ 871.332056][T29237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 871.354679][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.378930][T29392] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 871.387669][T29237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 871.406578][T29392] Cannot find add_set index 1 as target [ 871.408838][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.428117][T29237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 871.439158][T29394] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5840'. [ 871.452767][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.461601][T29237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.474576][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.504052][T29395] netlink: 'syz.2.5839': attribute type 1 has an invalid length. [ 871.535084][T29395] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5839'. [ 871.767570][T29433] netlink: 'syz.3.5843': attribute type 1 has an invalid length. [ 871.866692][T29433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 871.889376][T29438] netlink: 'syz.0.5845': attribute type 4 has an invalid length. [ 871.904057][T29438] netlink: 'syz.0.5845': attribute type 1 has an invalid length. [ 871.909129][T29237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.930889][T29436] syzkaller0: entered promiscuous mode [ 871.936595][T29436] syzkaller0: entered allmulticast mode [ 872.002981][T29436] bond1: peer notification delay (12402) is not a multiple of miimon (100), value rounded to 12400 ms [ 872.075639][T29442] bond4: (slave veth0_to_bond): making interface the new active one [ 872.087642][T29442] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 872.228506][T29448] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 872.330167][T29446] macvlan3: entered promiscuous mode [ 872.336192][T29446] macvlan3: entered allmulticast mode [ 872.343645][T29446] bond4: entered promiscuous mode [ 872.349669][T29446] veth0_to_bond: entered promiscuous mode [ 872.362055][T29446] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 872.371742][T29446] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 872.388623][T29446] bond4: left promiscuous mode [ 872.394627][T29446] veth0_to_bond: left promiscuous mode [ 872.412859][T29237] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.462871][T20067] Bluetooth: hci5: command tx timeout [ 872.470609][T29438] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 872.487602][T29438] bridge0: port 3(gretap1) entered blocking state [ 872.494298][T29438] bridge0: port 3(gretap1) entered forwarding state [ 872.579419][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.586670][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.619323][T24125] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.626579][T24125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.723666][T29458] xfrm0 speed is unknown, defaulting to 1000 [ 872.869815][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5850'. [ 872.929387][T29463] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5851'. [ 873.159875][T29458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5849'. [ 873.188904][T29458] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 873.604638][T29484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5855'. [ 873.628042][T29484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5855'. [ 873.985970][T29496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5857'. [ 874.010873][T29496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5857'. [ 874.032592][T29496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5857'. [ 874.068125][T29237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.345296][T29237] veth0_vlan: entered promiscuous mode [ 874.363838][T29507] netlink: 'syz.4.5860': attribute type 1 has an invalid length. [ 874.376361][T29237] veth1_vlan: entered promiscuous mode [ 874.471103][T29507] bond2: entered promiscuous mode [ 874.498016][T29507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 874.542857][T20067] Bluetooth: hci5: command tx timeout [ 874.682026][T29237] veth0_macvtap: entered promiscuous mode [ 874.720762][T29237] veth1_macvtap: entered promiscuous mode [ 874.787718][T29237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.819621][T29237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.847246][T24135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.868020][T24135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.896354][T24135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.920140][T24135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.121097][T29534] mac80211_hwsim hwsim41 »»»»»»: renamed from wlan0 (while UP) [ 875.141451][T29535] vlan0: entered promiscuous mode [ 875.150882][T29535] vlan0: entered allmulticast mode [ 875.233341][T29535] veth0_vlan: entered allmulticast mode [ 875.404302][T29538] syzkaller0: entered promiscuous mode [ 875.409976][T29538] syzkaller0: entered allmulticast mode [ 875.509347][T29548] syzkaller0: entered promiscuous mode [ 875.515224][T29548] syzkaller0: entered allmulticast mode [ 878.738123][T29572] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 881.536193][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.601465][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.681943][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.702053][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.290987][T29239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.307355][T29239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.320814][T29239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.330473][T29239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.347671][T29239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 882.543058][T20067] Bluetooth: hci2: command 0x0406 tx timeout [ 882.725140][T29608] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 883.384413][T29671] __nla_validate_parse: 6 callbacks suppressed [ 883.384437][T29671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5897'. [ 883.427714][T29651] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 883.466079][T29651] bond1 (unregistering): Released all slaves [ 883.766352][T29663] syzkaller0: entered promiscuous mode [ 883.773348][T29663] syzkaller0: entered allmulticast mode [ 883.962093][T29687] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5898'. [ 884.039989][T29689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5901'. [ 884.099237][T29689] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5901'. [ 884.406551][T19728] Bluetooth: hci1: command tx timeout [ 885.405258][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5906'. [ 886.471722][T19728] Bluetooth: hci1: command tx timeout [ 887.356118][T29697] bridge1: entered promiscuous mode [ 887.361449][T29697] bridge1: entered allmulticast mode [ 887.370254][T29697] team0: Port device bridge1 added [ 887.520328][T29627] xfrm0 speed is unknown, defaulting to 1000 [ 887.916799][ T48] bridge_slave_1: left allmulticast mode [ 887.923301][ T48] bridge_slave_1: left promiscuous mode [ 887.934479][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.138607][ T48] bond1 (unregistering): (slave gre1): Releasing backup interface [ 888.221848][T29709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.365552][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.543572][T19728] Bluetooth: hci1: command tx timeout [ 888.678269][T16380] IPVS: starting estimator thread 0... [ 888.715685][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.748072][ T48] bond0 (unregistering): Released all slaves [ 888.766040][ T48] bond1 (unregistering): Released all slaves [ 888.782898][T29748] IPVS: using max 26 ests per chain, 62400 per kthread [ 888.800798][ T48] bond2 (unregistering): Released all slaves [ 888.837032][ T48] bond3 (unregistering): Released all slaves [ 888.868955][ T48] bond4 (unregistering): Released all slaves [ 888.904763][ T48] bond5 (unregistering): Released all slaves [ 888.934700][ T48] bond6 (unregistering): Released all slaves [ 888.959759][ T48] bond7 (unregistering): Released all slaves [ 888.985211][ T48] bond8 (unregistering): Released all slaves [ 889.223443][T29762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5919'. [ 889.276041][T29762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.283434][T29762] IPv6: NLM_F_CREATE should be set when creating new route [ 889.289096][T29760] bond1: option mode: invalid value (254) [ 889.312388][T29760] bond1 (unregistering): Released all slaves [ 889.368870][ T48] tipc: Disabling bearer [ 889.434697][ T48] tipc: Left network mode [ 889.495218][T29770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5921'. [ 889.720439][T29783] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5923'. [ 889.859177][T29789] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5923'. [ 889.921457][T29789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5923'. [ 889.953557][T29789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5923'. [ 890.068547][T29627] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.078661][T29627] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.089354][T29627] bridge_slave_0: entered allmulticast mode [ 890.097638][T29627] bridge_slave_0: entered promiscuous mode [ 890.107050][T29627] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.115197][T29627] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.122647][T29627] bridge_slave_1: entered allmulticast mode [ 890.137629][T29627] bridge_slave_1: entered promiscuous mode [ 890.154544][T29783] xfrm0 speed is unknown, defaulting to 1000 [ 890.266110][T29627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.324407][T29627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.369375][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.378206][ T48] batman_adv: batadv0: Removing interface: macvlan3 [ 890.386249][ T48] batman_adv: batadv0: Removing interface: dummy0 [ 890.633405][T19728] Bluetooth: hci1: command tx timeout [ 890.893890][T29799] syzkaller0: entered promiscuous mode [ 890.900615][T29799] syzkaller0: entered allmulticast mode [ 890.925294][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 891.357538][T29832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5931'. [ 891.410340][T29833] netlink: 'syz.3.5931': attribute type 1 has an invalid length. [ 892.792981][T19728] Bluetooth: hci4: command 0x0406 tx timeout [ 894.115432][T29627] team0: Port device team_slave_0 added [ 894.126759][T29627] team0: Port device team_slave_1 added [ 894.356563][T29627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.372800][T29627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.432819][T29627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.459735][T29841] syzkaller1: entered promiscuous mode [ 894.476468][T29841] syzkaller1: entered allmulticast mode [ 894.486446][T29846] Bluetooth: MGMT ver 1.23 [ 894.487022][T29627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.505801][T29627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.533217][T29627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.577832][ T48] IPVS: stop unused estimator thread 0... [ 894.657569][T29627] hsr_slave_0: entered promiscuous mode [ 894.674465][T29627] hsr_slave_1: entered promiscuous mode [ 894.693631][T29627] debugfs: 'hsr0' already exists in 'hsr' [ 894.714787][T29627] Cannot create hsr debugfs directory [ 894.842888][T29857] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5937'. [ 895.395982][T29887] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.480943][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.487919][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.494950][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.501879][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.508815][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.515712][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.522694][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.529546][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.536459][T29888] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 895.601720][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5942'. [ 895.636281][T29887] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5942'. [ 895.645815][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5942'. [ 895.672744][T29887] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5942'. [ 895.708663][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5942'. [ 896.367755][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 896.543322][T19728] Bluetooth: hci2: command 0x0406 tx timeout [ 896.550225][T20067] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 896.983173][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5952'. [ 897.141128][T29915] tun0: tun_chr_ioctl cmd 1074025680 [ 897.227948][T29941] syzkaller0: entered promiscuous mode [ 897.246677][T29941] syzkaller0: entered allmulticast mode [ 897.270051][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5952'. [ 897.448808][T29956] netlink: 'syz.0.5951': attribute type 1 has an invalid length. [ 897.595965][T29959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 897.603321][T29959] IPv6: NLM_F_CREATE should be set when creating new route [ 897.754542][T29966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5955'. [ 897.770592][T29967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 897.872408][T29962] bond3 (unregistering): Released all slaves [ 898.133719][T29627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 898.167022][T29627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 898.190243][T29627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 898.235847][T29979] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 898.266311][T29627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 898.294974][T29627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 898.358544][T29627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 898.506259][T29992] bridge0: port 3(gretap1) entered disabled state [ 898.513358][T29992] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.521155][T29992] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.530865][T29992] bridge0: entered allmulticast mode [ 898.548478][T29992] gretap1: left allmulticast mode [ 898.554516][T29992] gretap1: left promiscuous mode [ 898.570168][T29992] bridge0: port 3(gretap1) entered disabled state [ 898.595676][T29992] bridge_slave_1: left allmulticast mode [ 898.623552][T29992] bridge_slave_1: left promiscuous mode [ 898.645088][T29992] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.668144][T29992] bridge_slave_0: left allmulticast mode [ 898.682668][T29992] bridge_slave_0: left promiscuous mode [ 898.694642][T29992] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.790368][T29627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 898.821223][T29627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 899.194719][T29627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.242275][T29627] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.274721][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.282062][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.305979][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.313207][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.646221][T30048] syzkaller0: entered promiscuous mode [ 899.658289][T30048] syzkaller0: entered allmulticast mode [ 899.903540][T30063] veth0: entered promiscuous mode [ 899.959859][T30063] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 900.048200][T30070] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5973'. [ 900.094046][T30061] veth0: left promiscuous mode [ 900.458908][T30086] netlink: 15 bytes leftover after parsing attributes in process `syz.4.5975'. [ 900.555153][T29627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.623548][T30091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5977'. [ 900.743494][T29627] veth0_vlan: entered promiscuous mode [ 900.808437][T29627] veth1_vlan: entered promiscuous mode [ 900.873286][T30099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5979'. [ 900.886850][T30098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.958084][T29627] veth0_macvtap: entered promiscuous mode [ 901.046927][T29627] veth1_macvtap: entered promiscuous mode [ 901.081860][T29627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.097707][T29627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.100239][T30107] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5981'. [ 901.125391][T30107] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5981'. [ 901.127546][T24129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.156194][T24129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.234128][T24129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.273154][T24129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.581131][T24135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.619577][T24135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.723629][T24135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.746932][T24135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.801018][T30131] netlink: 'syz.0.5985': attribute type 5 has an invalid length. [ 901.877858][T30135] netlink: 'syz.1.5984': attribute type 8 has an invalid length. [ 902.585317][T30172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'. [ 902.698804][T30181] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5991'. [ 902.733467][T30183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5994'. [ 902.775599][T30183] syzkaller1: entered promiscuous mode [ 902.794301][T30183] syzkaller1: entered allmulticast mode [ 902.846378][T30183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5994'. [ 903.578658][T30227] vxlan0: entered allmulticast mode [ 903.599684][T24135] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.634812][T24135] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.649562][T24135] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.666956][T24135] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.968983][T30248] SET target dimension over the limit! [ 904.209100][T30265] syzkaller1: entered promiscuous mode [ 904.214860][T30265] syzkaller1: entered allmulticast mode [ 904.225928][T30267] x_tables: duplicate underflow at hook 3 [ 906.385164][T30215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.419617][T30292] netlink: 'syz.0.6023': attribute type 1 has an invalid length. [ 906.444994][T30292] __nla_validate_parse: 12 callbacks suppressed [ 906.445017][T30292] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6023'. [ 906.474944][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 907.021464][T30329] veth0: entered promiscuous mode [ 907.030765][T30328] veth0: left promiscuous mode [ 907.088724][T30330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.118001][T30335] geneve2: entered promiscuous mode [ 907.128589][T30335] syzkaller1: entered promiscuous mode [ 907.134497][T30335] syzkaller1: entered allmulticast mode [ 907.300523][T30295] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 907.946949][T30375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6049'. [ 908.258332][T30388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6052'. [ 908.289557][T30388] ip6gre1: entered promiscuous mode [ 908.296148][T30388] ip6gre1: entered allmulticast mode [ 908.701172][T30402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6056'. [ 908.794350][T30404] syzkaller1: entered promiscuous mode [ 908.799916][T30404] syzkaller1: entered allmulticast mode [ 908.950427][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6062'. [ 908.970897][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6062'. [ 909.163980][T30420] xfrm0 speed is unknown, defaulting to 1000 [ 909.212661][T30423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6063'. [ 909.882298][T30438] xt_l2tp: v2 tid > 0xffff: 37482740 [ 909.964437][T30438] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 910.041428][T30438] net_ratelimit: 3320 callbacks suppressed [ 910.041455][T30438] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 910.726315][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6069'. [ 910.893495][T30459] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 910.938134][T30460] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 910.959710][T30464] IPv6: addrconf: prefix option has invalid lifetime [ 910.980658][T30464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 910.988012][T30464] IPv6: NLM_F_CREATE should be set when creating new route [ 911.027654][T30460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6070'. [ 911.235952][T30471] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001 [ 911.523536][T30491] __nla_validate_parse: 4 callbacks suppressed [ 911.523557][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6080'. [ 911.532025][T30495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 911.546576][T30495] IPv6: NLM_F_CREATE should be set when creating new route [ 911.547487][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6080'. [ 911.560138][T30497] netlink: 356 bytes leftover after parsing attributes in process `syz.0.6080'. [ 911.565643][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6080'. [ 911.581971][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6080'. [ 911.793369][T30509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6085'. [ 911.892155][T30515] x_tables: duplicate underflow at hook 1 [ 912.112794][T30521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6091'. [ 912.337864][T30538] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 912.496739][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6096'. [ 912.500509][T30546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6095'. [ 912.507672][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6096'. [ 912.557619][T30546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 912.661159][T30551] netlink: 'syz.0.6098': attribute type 14 has an invalid length. [ 913.569945][T30613] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 913.839799][T30628] netlink: 'syz.3.6120': attribute type 3 has an invalid length. [ 914.017065][T30640] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 4, id = 0 [ 914.108882][T30636] batadv0: entered promiscuous mode [ 914.116638][T30636] macsec2: entered allmulticast mode [ 914.122013][T30636] batadv0: entered allmulticast mode [ 914.156751][T30636] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 914.183862][T30636] batadv0: left allmulticast mode [ 914.205271][T30636] batadv0: left promiscuous mode [ 914.300382][T30648] bridge2: entered promiscuous mode [ 914.312562][T30648] bridge2: entered allmulticast mode [ 914.329595][T30648] team0: Port device bridge2 added [ 914.424383][T30649] tipc: Started in network mode [ 914.430234][T30655] netlink: 'syz.2.6129': attribute type 1 has an invalid length. [ 914.441677][T30649] tipc: Node identity 363a1781ddf9, cluster identity 4711 [ 914.458781][T30649] tipc: Enabled bearer , priority 0 [ 914.594962][T30649] syzkaller0: entered promiscuous mode [ 914.604558][T30649] syzkaller0: entered allmulticast mode [ 914.618628][T30649] tipc: Resetting bearer [ 914.724254][T30647] tipc: Resetting bearer [ 918.320822][T30647] tipc: Disabling bearer [ 918.399310][T30681] ip6erspan0: entered promiscuous mode [ 918.405876][ T1146] tipc: Node number set to 3955431297 [ 918.446738][T30692] __nla_validate_parse: 9 callbacks suppressed [ 918.446760][T30692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6138'. [ 918.520190][T30695] netlink: 'syz.0.6139': attribute type 1 has an invalid length. [ 918.640858][T30704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6139'. [ 918.646189][T30695] bond1 (unregistering): Released all slaves [ 918.847601][T30717] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6144'. [ 918.873107][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6144'. [ 918.893859][T30717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6144'. [ 918.914200][T30721] syzkaller0: entered promiscuous mode [ 918.925754][T30721] syzkaller0: entered allmulticast mode [ 918.947444][T30703] tipc: Started in network mode [ 918.952564][T30703] tipc: Node identity c6925c275c4a, cluster identity 4711 [ 918.960465][T30703] tipc: Enabled bearer , priority 0 [ 919.084293][T30702] tipc: Resetting bearer [ 919.139973][T30702] tipc: Disabling bearer [ 919.160375][T30730] xt_hashlimit: invalid rate [ 919.226527][T30731] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6147'. [ 919.376203][T30735] syzkaller0: entered promiscuous mode [ 919.392827][T30735] syzkaller0: entered allmulticast mode [ 919.828961][T30754] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6155'. [ 919.846309][T30755] netlink: 'syz.2.6154': attribute type 1 has an invalid length. [ 920.025814][T30760] IPVS: set_ctl: invalid protocol: 26912 119.56.32.115:15904 [ 920.090621][T30763] netlink: 'syz.4.6155': attribute type 1 has an invalid length. [ 923.044075][T30754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.056693][T30754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.068809][T30754] bond0 (unregistering): Released all slaves [ 923.084846][T30755] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 923.096374][T30758] : renamed from dummy0 [ 924.199349][T30781] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 926.543984][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 926.659099][T30819] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 926.822763][T30822] netlink: 'syz.4.6169': attribute type 1 has an invalid length. [ 926.874146][T30822] sctp: [Deprecated]: syz.4.6169 (pid 30822) Use of int in max_burst socket option. [ 926.874146][T30822] Use struct sctp_assoc_value instead [ 926.909361][T30833] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6173'. [ 927.249710][T30854] netlink: 'syz.1.6179': attribute type 6 has an invalid length. [ 927.259311][T30853] netlink: 'syz.2.6181': attribute type 32 has an invalid length. [ 927.271963][T30854] netlink: 'syz.1.6179': attribute type 2 has an invalid length. [ 927.284332][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6179'. [ 927.288267][T30853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6181'. [ 927.354377][T30856] team0: Port device syz_tun added [ 927.382980][T30856] netlink: 'syz.2.6181': attribute type 23 has an invalid length. [ 927.466338][T30853] bond1: option coupled_control: invalid value (255) [ 927.481945][T30853] bond1 (unregistering): Released all slaves [ 927.520132][T30866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6182'. [ 927.561155][T30866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6182'. [ 927.717050][T30879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6185'. [ 927.757838][T30884] Bluetooth: MGMT ver 1.23 [ 927.854469][T30886] syzkaller0: entered promiscuous mode [ 927.871209][T30886] syzkaller0: entered allmulticast mode [ 927.986553][T30896] netlink: 2780 bytes leftover after parsing attributes in process `syz.1.6190'. [ 927.993709][T30897] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6189'. [ 928.164281][T30902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6189'. [ 928.306978][T30903] kthread_run failed with err -4 [ 928.319209][T30893] xfrm0 speed is unknown, defaulting to 1000 [ 928.609057][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6194'. [ 929.397956][T30955] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 929.920905][T30985] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.928730][T30985] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.389219][T31016] netlink: 'syz.2.6221': attribute type 23 has an invalid length. [ 930.420829][T31013] bond0: entered promiscuous mode [ 930.519597][T31016] vlan2: entered promiscuous mode [ 930.525247][T31016] bridge0: entered promiscuous mode [ 931.646163][T31033] IPv6: NLM_F_CREATE should be specified when creating new route [ 933.346103][T31039] __nla_validate_parse: 19 callbacks suppressed [ 933.346124][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6229'. [ 933.449831][T31050] netlink: 'syz.3.6228': attribute type 1 has an invalid length. [ 933.458059][T31050] netlink: 'syz.3.6228': attribute type 2 has an invalid length. [ 933.477554][T31055] netlink: 'syz.4.6232': attribute type 1 has an invalid length. [ 933.487308][T31055] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6232'. [ 933.735047][T31055] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 933.751474][T31055] bond3 (unregistering): Released all slaves [ 933.767796][T31063] netlink: 15 bytes leftover after parsing attributes in process `syz.2.6233'. [ 933.880995][T31065] openvswitch: netlink: Flow key attr not present in new flow. [ 934.093044][T31072] xfrm0 speed is unknown, defaulting to 1000 [ 934.146799][T31077] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6239'. [ 934.931797][T29429] IPVS: starting estimator thread 0... [ 935.023583][T31110] IPVS: using max 26 ests per chain, 62400 per kthread [ 935.303059][T31114] xfrm0 speed is unknown, defaulting to 1000 [ 935.711921][T31121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6248'. [ 935.801308][T31125] netlink: 'syz.1.6249': attribute type 2 has an invalid length. [ 935.849049][T31114] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 935.855402][T31114] syzkaller1: linktype set to 1 [ 936.046492][T31136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6252'. [ 936.456487][T31150] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 936.936334][T31164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6261'. [ 936.964963][T31161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 937.059607][T24127] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.079351][T24127] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.111242][ T3306] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.122188][ T3306] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.268622][T31174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6265'. [ 937.311578][T31174] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6265'. [ 937.343005][T31174] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6265'. [ 937.630060][T31191] batadv1: entered promiscuous mode [ 937.645003][T31194] netlink: 'syz.2.6273': attribute type 1 has an invalid length. [ 937.650666][T31191] batadv1: entered allmulticast mode [ 937.698466][T31194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 937.884826][T31194] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 938.273007][T31224] xfrm0 speed is unknown, defaulting to 1000 [ 938.355008][T31225] __nla_validate_parse: 6 callbacks suppressed [ 938.355029][T31225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6278'. [ 938.465663][T31233] batadv_slave_0: entered promiscuous mode [ 938.488813][T31236] tipc: Failed to remove unknown binding: 66,0,0/3955431297:3066488249/3066488251 [ 938.507165][T31233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6281'. [ 938.508776][T31236] tipc: Failed to remove unknown binding: 66,0,0/3955431297:3066488249/3066488250 [ 938.530336][T31233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.536717][T31236] tipc: Failed to remove unknown binding: 66,0,0/3955431297:3066488249/3066488251 [ 938.550618][T31236] tipc: Failed to remove unknown binding: 66,0,0/3955431297:3066488249/3066488250 [ 938.557956][T31234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6281'. [ 938.614933][T31233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.723033][T31230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6282'. [ 938.735127][T31242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6285'. [ 939.156150][T31254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6287'. [ 939.773066][T31283] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 939.827462][T31284] syzkaller1: entered promiscuous mode [ 939.845872][T31284] syzkaller1: entered allmulticast mode [ 939.867900][T31284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.899061][T31284] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 939.927988][T31284] xt_hashlimit: size too large, truncated to 1048576 [ 940.611130][T31317] xfrm0 speed is unknown, defaulting to 1000 [ 940.669071][T31321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6303'. [ 940.688132][T31321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6303'. [ 940.900485][T31331] netlink: 'syz.4.6307': attribute type 21 has an invalid length. [ 940.919753][T31334] netlink: 'syz.0.6308': attribute type 1 has an invalid length. [ 940.959194][T24125] netdevsim netdevsim4 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.959359][T31331] netlink: 'syz.4.6307': attribute type 21 has an invalid length. [ 940.967978][T24125] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.032421][T24125] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.063032][T24125] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.185457][T31341] netlink: 2780 bytes leftover after parsing attributes in process `syz.4.6312'. [ 941.435281][T31352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6315'. [ 941.693886][T31359] syzkaller0: entered promiscuous mode [ 941.713656][T31359] syzkaller0: entered allmulticast mode [ 941.770892][T31363] netlink: 'syz.4.6320': attribute type 32 has an invalid length. [ 941.820339][T31373] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 941.860568][T31373] ipt_ECN: cannot use operation on non-tcp rule [ 941.877668][ T30] audit: type=1804 audit(1783152144.244:24): pid=31372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6321" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=695 res=1 errno=0 [ 941.915577][ T30] audit: type=1800 audit(1783152144.254:25): pid=31372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6321" name="cgroup.controllers" dev="tmpfs" ino=695 res=0 errno=0 [ 942.019193][T31382] netlink: 'syz.0.6322': attribute type 11 has an invalid length. [ 942.224659][T31395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.528790][T31412] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 944.667568][T31361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.937947][ T30] audit: type=1107 audit(1783152147.314:26): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 945.479405][T31422] __nla_validate_parse: 4 callbacks suppressed [ 945.479428][T31422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6333'. [ 945.598706][T31459] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6345'. [ 946.302937][T31487] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 946.460806][T31503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6355'. [ 946.559653][T31503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 946.665200][T31513] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6357'. [ 946.772979][T31517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6358'. [ 946.965559][T31526] netlink: 'syz.4.6358': attribute type 6 has an invalid length. [ 947.448492][T31543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6364'. [ 947.826946][T31550] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6365'. [ 948.168389][T31562] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6368'. [ 948.358583][T31569] xfrm0 speed is unknown, defaulting to 1000 [ 948.446470][T31572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6371'. [ 948.455737][T31572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6371'. [ 950.318019][T31612] xfrm0 speed is unknown, defaulting to 1000 [ 951.730336][T31638] xfrm0 speed is unknown, defaulting to 1000 [ 951.936006][T31650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 953.045340][T31660] xfrm0 speed is unknown, defaulting to 1000 [ 953.506443][T31680] __nla_validate_parse: 2 callbacks suppressed [ 953.506463][T31680] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6394'. [ 953.797129][T31685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6393'. [ 954.957372][T31707] netlink: 'syz.0.6399': attribute type 6 has an invalid length. [ 955.116588][T31708] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 955.417022][T31714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.571992][T31724] netlink: 'syz.4.6403': attribute type 9 has an invalid length. [ 955.616751][T31724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6403'. [ 955.886569][T31736] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 955.955572][T31736] bond2 (unregistering): Released all slaves [ 956.424485][T31761] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6414'. [ 956.463051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.558610][T31766] netlink: 320 bytes leftover after parsing attributes in process `syz.4.6415'. [ 956.624932][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.653855][T31776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.657421][T31770] netlink: 'syz.1.6417': attribute type 1 has an invalid length. [ 956.684359][T31779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6419'. [ 956.697414][T31780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6416'. [ 956.768379][T31770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 956.797605][T31779] ip6gre2: entered promiscuous mode [ 956.807680][T31779] ip6gre2: entered allmulticast mode [ 956.865910][T31782] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 956.910049][T31790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6420'. [ 956.945936][T29422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.974207][T31770] bond3 (unregistering): (slave syz_tun): Removing an active aggregator [ 956.989025][T31770] bond3 (unregistering): (slave syz_tun): Releasing backup interface [ 957.002221][T31770] bond3 (unregistering): Released all slaves [ 957.025882][T31779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.051019][T31779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.334495][T31809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.384886][T31815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6424'. [ 957.474443][T31822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6428'. [ 957.487557][T31821] IPv6: NLM_F_CREATE should be specified when creating new route [ 957.652225][T31827] team1: entered promiscuous mode [ 957.657996][T31827] team1: entered allmulticast mode [ 957.665943][T31827] 8021q: adding VLAN 0 to HW filter on device team1 [ 957.693464][T31832] team2: entered promiscuous mode [ 957.699321][T31832] team2: entered allmulticast mode [ 957.705158][T31832] 8021q: adding VLAN 0 to HW filter on device team2 [ 957.733202][T31834] netlink: 'syz.0.6431': attribute type 12 has an invalid length. [ 957.793855][T31830] xfrm0 speed is unknown, defaulting to 1000 [ 957.983230][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.142780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.363354][T31848] syzkaller0: entered promiscuous mode [ 958.381604][T31848] syzkaller0: entered allmulticast mode [ 958.410508][T29428] IPVS: starting estimator thread 0... [ 958.545566][T31851] IPVS: using max 34 ests per chain, 81600 per kthread [ 958.573726][T31848] __nla_validate_parse: 5 callbacks suppressed [ 958.573748][T31848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 958.603129][T31848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'. [ 958.628854][T31848] netlink: 'syz.1.6435': attribute type 15 has an invalid length. [ 958.668019][T31858] netlink: 'syz.0.6438': attribute type 1 has an invalid length. [ 958.876998][T31867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6440'. [ 959.020487][T31878] FAULT_INJECTION: forcing a failure. [ 959.020487][T31878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.036834][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.045921][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.054664][T31878] CPU: 0 UID: 0 PID: 31878 Comm: syz.1.6443 Not tainted syzkaller #0 PREEMPT(full) [ 959.054694][T31878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 959.054707][T31878] Call Trace: [ 959.054716][T31878] [ 959.054725][T31878] dump_stack_lvl+0xe8/0x150 [ 959.054768][T31878] should_fail_ex+0x40c/0x560 [ 959.054802][T31878] _copy_to_user+0x31/0xb0 [ 959.054837][T31878] simple_read_from_buffer+0xe1/0x170 [ 959.054873][T31878] proc_fail_nth_read+0x1bb/0x230 [ 959.054907][T31878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.054939][T31878] ? rw_verify_area+0x24a/0x4c0 [ 959.054973][T31878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.055001][T31878] vfs_read+0x213/0xa80 [ 959.055038][T31878] ? __pfx___mutex_lock+0x10/0x10 [ 959.055070][T31878] ? __pfx_vfs_read+0x10/0x10 [ 959.055103][T31878] ? __fget_files+0x2a/0x420 [ 959.055136][T31878] ? __fget_files+0x3a2/0x420 [ 959.055160][T31878] ? __fget_files+0x2a/0x420 [ 959.055198][T31878] ksys_read+0x150/0x270 [ 959.055231][T31878] ? __pfx_ksys_read+0x10/0x10 [ 959.055258][T31878] ? fput+0xa0/0xd0 [ 959.055293][T31878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.055318][T31878] do_syscall_64+0x174/0x580 [ 959.055342][T31878] ? trace_irq_disable+0x3b/0x140 [ 959.055368][T31878] ? clear_bhb_loop+0x40/0x90 [ 959.055394][T31878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.055414][T31878] RIP: 0033:0x7f1ba015e68e [ 959.055435][T31878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 959.055458][T31878] RSP: 002b:00007f1ba10a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.055482][T31878] RAX: ffffffffffffffda RBX: 00007f1ba10a66c0 RCX: 00007f1ba015e68e [ 959.055498][T31878] RDX: 000000000000000f RSI: 00007f1ba10a60a0 RDI: 0000000000000004 [ 959.055512][T31878] RBP: 00007f1ba10a6090 R08: 0000000000000000 R09: 0000000000000000 [ 959.055525][T31878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.055538][T31878] R13: 00007f1ba0426038 R14: 00007f1ba0425fa0 R15: 00007fff75470b58 [ 959.055583][T31878] [ 959.471901][T31894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6447'. [ 959.516753][T31893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6447'. [ 959.551253][T31899] bridge4: entered promiscuous mode [ 959.671917][T31903] syzkaller1: entered promiscuous mode [ 959.677616][T31903] syzkaller1: entered allmulticast mode [ 959.697838][T31905] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 959.857427][T31914] netlink: 'syz.0.6453': attribute type 10 has an invalid length. [ 959.863172][T31913] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6454'. [ 959.874033][T31914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6453'. [ 959.936070][T31903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.949742][T31903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.017469][T31903] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 960.061961][T31903] bridge2: left promiscuous mode [ 960.067728][T31903] bridge2: left allmulticast mode [ 960.073556][T29425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.092179][T31903] team1: left promiscuous mode [ 960.097310][T31903] team1: left allmulticast mode [ 960.105203][T31903] team2: left promiscuous mode [ 960.110136][T31903] team2: left allmulticast mode [ 960.117355][T31903] syzkaller1: left promiscuous mode [ 960.122776][T31903] syzkaller1: left allmulticast mode [ 960.183177][T31912] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 960.209563][ T9138] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.219962][ T9138] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.229728][ T9138] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.239281][ T9138] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.248759][ T9138] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.263049][ T9138] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.293530][ T9138] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.314129][ T9138] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.456750][T31928] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 960.711562][T31944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6464'. [ 960.762224][T31941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6464'. [ 960.808065][T31941] bond5 (unregistering): Released all slaves [ 961.108444][T31953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6469'. [ 961.278474][T31953] bond3 (unregistering): Released all slaves [ 961.561718][T31983] xt_hashlimit: size too large, truncated to 1048576 [ 961.601649][T31981] bridge_slave_0 (unregistering): left allmulticast mode [ 961.640299][T31981] bridge_slave_0 (unregistering): left promiscuous mode [ 961.675242][T31981] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.742607][ C0] net_ratelimit: 4 callbacks suppressed [ 961.742627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.966996][T32008] xfrm0 speed is unknown, defaulting to 1000 [ 962.063536][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.150867][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.312148][T32030] netlink: 'syz.0.6489': attribute type 1 has an invalid length. [ 962.376517][T32019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.386332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.404659][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.424651][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.438249][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.516549][ T9138] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 962.527685][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.559628][ T9138] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 962.577487][ T9138] bond2: active interface up! [ 962.630703][T32040] smc: net device wg2 applied user defined pnetid SYZ0 [ 963.054438][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.300146][T32065] xfrm0 speed is unknown, defaulting to 1000 [ 963.457188][T32045] Bluetooth: hci4: Opcode 0x0c20 failed: -4 [ 963.828560][T32097] __nla_validate_parse: 5 callbacks suppressed [ 963.828580][T32097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6504'. [ 963.874532][T32097] netlink: 'syz.0.6504': attribute type 1 has an invalid length. [ 963.900830][T32097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6504'. [ 963.998736][T32110] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 964.099243][T32122] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 964.227000][T32132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6512'. [ 964.288026][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6513'. [ 964.368979][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6513'. [ 964.379086][T32134] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 964.410683][T32134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 964.420711][T32134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6513'. [ 964.452259][T32138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6515'. [ 964.712918][T20067] Bluetooth: hci4: command 0x0406 tx timeout [ 964.768198][T32152] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.6519'. [ 964.789129][T32152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6519'. [ 964.808379][T32152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6519'. [ 964.838367][T32152] netlink: 'syz.4.6519': attribute type 1 has an invalid length. [ 964.995688][T32162] SET target dimension over the limit! [ 965.400492][T32182] sch_fq: defrate 0 ignored. [ 967.076162][T32276] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 967.114660][T32276] bond3: (slave lo): Enslaving as an active interface with an up link [ 967.126995][T32276] net_ratelimit: 13 callbacks suppressed [ 967.127016][T32276] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 967.268869][T32278] geneve0: entered promiscuous mode [ 967.346240][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.355792][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.719715][T32304] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 967.728297][T29422] team_slave_0: entered promiscuous mode [ 967.736064][T29422] team_slave_1: entered promiscuous mode [ 968.142869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.383287][T29422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.423503][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.295770][T32287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 970.383502][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.434115][T32318] __nla_validate_parse: 10 callbacks suppressed [ 970.434139][T32318] netlink: 784 bytes leftover after parsing attributes in process `syz.1.6557'. [ 970.463500][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.669388][T32337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6563'. [ 970.721508][T32337] syzkaller0: entered promiscuous mode [ 970.727298][T32337] syzkaller0: entered allmulticast mode [ 970.769400][T32345] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6565'. [ 970.815906][T32346] netlink: 'syz.0.6566': attribute type 12 has an invalid length. [ 970.823951][T32346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6566'. [ 970.895305][T32349] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 970.995208][T32360] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6567'. [ 971.036234][T32364] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6571'. [ 971.064553][T32362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6570'. [ 971.082712][T32362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6570'. [ 971.344303][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.362766][T32378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6578'. [ 971.503472][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.580019][T32388] xt_hashlimit: size too large, truncated to 1048576 [ 971.587678][T32388] xt_hashlimit: max too large, truncated to 1048576 [ 971.901634][T32403] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6584'. [ 972.546652][T29422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.622716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 972.690715][T32426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.710674][T32426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 972.726715][T32426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 973.035147][T32442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.061420][T32444] tipc: Started in network mode [ 973.067436][T32444] tipc: Node identity 320ff8417a4, cluster identity 4711 [ 973.083102][T32444] tipc: Enabled bearer , priority 0 [ 973.129361][T32444] syzkaller0: entered promiscuous mode [ 973.130612][T32448] netlink: 'syz.0.6597': attribute type 1 has an invalid length. [ 973.135848][T32444] syzkaller0: entered allmulticast mode [ 973.141734][T32444] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 973.235813][T32449] bond4: (slave geneve3): making interface the new active one [ 973.256306][T32449] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 973.276185][T24127] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 973.290530][ T9138] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 973.310449][T32448] bond4 (unregistering): (slave geneve3): Releasing active interface [ 973.325970][T32448] bond4 (unregistering): Released all slaves [ 973.345434][T32454] tipc: Resetting bearer [ 973.367904][ T9138] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 973.398870][T32449] veth3: entered promiscuous mode [ 973.420542][T32443] tipc: Resetting bearer [ 973.424865][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.484717][T32443] tipc: Disabling bearer [ 973.496435][ T9138] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 973.586219][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.646274][T32471] netlink: 'syz.2.6603': attribute type 2 has an invalid length. [ 973.647766][T32466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 973.661691][T32471] : entered promiscuous mode [ 973.990944][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.002664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.435041][T32509] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 974.547615][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.625700][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.779732][T32518] xt_CONNSECMARK: invalid mode: 0 [ 974.957808][T32524] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 975.070911][T32531] netlink: 'syz.2.6625': attribute type 18 has an invalid length. [ 975.092237][T32531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.104112][T32531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.166052][T32539] netlink: 'syz.2.6625': attribute type 1 has an invalid length. [ 975.197193][T32539] netlink: 'syz.2.6625': attribute type 2 has an invalid length. [ 975.213278][T32544] nbd: socks must be embedded in a SOCK_ITEM attr [ 975.462884][T32553] __nla_validate_parse: 73 callbacks suppressed [ 975.462908][T32553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6630'. [ 975.716455][T32556] bond0: (slave bond_slave_0): Releasing backup interface [ 975.758665][T32556] bond0: (slave bond_slave_1): Releasing backup interface [ 975.793914][T32556] team0: Port device team_slave_0 removed [ 975.818189][T32556] team0: Port device team_slave_1 removed [ 975.837513][T32556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.856599][T32556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.889669][T32556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.923425][T32556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.154978][T32579] netlink: 'syz.0.6637': attribute type 5 has an invalid length. [ 976.173328][T32580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6637'. [ 976.351321][T32587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6640'. [ 976.872003][T32603] syzkaller1: entered promiscuous mode [ 976.877944][T32603] syzkaller1: entered allmulticast mode [ 976.889739][T32603] bond3: (slave lo): Releasing backup interface [ 976.908207][T32610] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 976.926360][T32603] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 976.941200][T32610] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 976.989423][T32603] bridge_slave_1: left promiscuous mode [ 977.002895][T32603] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.041173][T32603] bond0: (slave bond_slave_0): Releasing backup interface [ 977.065169][T32603] bond0: (slave bond_slave_1): Releasing backup interface [ 977.076482][T32603] team0: Port device team_slave_0 removed [ 977.093632][T32603] team0: Port device team_slave_1 removed [ 977.100028][T32603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.121664][T32603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.449290][T32640] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6652'. [ 977.583528][ T5767] net_ratelimit: 266 callbacks suppressed [ 977.583552][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.730756][T32659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6657'. [ 977.751705][T29428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.853920][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.900417][T32665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6658'. [ 977.903107][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.910221][T32667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6658'. [ 977.958794][T32667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6658'. [ 978.007877][T32667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6658'. [ 978.045726][T32667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6658'. [ 978.168909][T32675] netlink: 'syz.0.6661': attribute type 1 has an invalid length. [ 978.352209][T32683] netlink: 'syz.1.6663': attribute type 14 has an invalid length. [ 978.410037][T32667] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.417697][T32667] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.786191][T32667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.396288][T32675] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 979.449606][T32683] netlink: 'syz.1.6663': attribute type 14 has an invalid length. [ 979.469620][ T9143] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.496521][ T9143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.514745][ T9143] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.524147][ T9143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.535495][ T9143] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.555150][ T9143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.581018][ T9143] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.595509][ T9143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.610032][ T9143] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.641415][ T9143] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.695227][ T9143] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.709923][ T9143] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.773889][T32706] vti0: entered promiscuous mode [ 979.778902][T32706] vti0: entered allmulticast mode [ 980.242927][T32713] can: request_module (can-proto-0) failed. [ 980.466226][T32718] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 241 [ 980.992794][T32731] bond4: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 981.003442][T32731] bond4: entered promiscuous mode [ 981.009121][T32731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 981.395558][T32763] __nla_validate_parse: 171 callbacks suppressed [ 981.395580][T32763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6682'. [ 981.411966][T32758] can: request_module (can-proto-0) failed. [ 981.426347][T32762] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 981.438572][T32762] bond5 (unregistering): Released all slaves [ 981.445358][T32758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6680'. [ 981.551473][ T300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6680'. [ 981.590126][ T300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6680'. [ 981.630680][ T304] xt_nfacct: accounting object `\$‚9ZúM#íü¾¦Eµ|¡^cÁ\F9YⳈ«ÃÖ' does not exist [ 981.646930][T32764] netlink: 'syz.1.6680': attribute type 8 has an invalid length. [ 981.887215][ T318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6689'. [ 983.233407][ T349] xt_hashlimit: size too large, truncated to 1048576 [ 983.444887][ T361] xt_hashlimit: size too large, truncated to 1048576 [ 983.504129][ T361] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 983.541788][ T369] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.6702'. [ 983.561729][ T369] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 983.950967][ T376] team0: Port device veth5 added [ 984.058621][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 984.088069][ T385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 984.252937][ T390] lo speed is unknown, defaulting to 1000 [ 984.268161][ T390] lo speed is unknown, defaulting to 1000 [ 984.272014][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6711'. [ 984.282290][ T390] lo speed is unknown, defaulting to 1000 [ 984.297628][ T390] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 984.331205][ T394] bond4: entered promiscuous mode [ 984.337437][ T394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 984.345915][ T390] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 984.364189][ T390] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 984.388863][ T390] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 984.436028][ T394] vlan3: entered allmulticast mode [ 984.441439][ T394] bond4: entered allmulticast mode [ 984.447019][ T390] lo speed is unknown, defaulting to 1000 [ 984.457499][ T390] lo speed is unknown, defaulting to 1000 [ 984.466243][ T390] lo speed is unknown, defaulting to 1000 [ 984.479245][ T390] lo speed is unknown, defaulting to 1000 [ 984.505996][ T390] lo speed is unknown, defaulting to 1000 [ 984.539755][ T390] lo speed is unknown, defaulting to 1000 [ 984.578221][ T390] lo speed is unknown, defaulting to 1000 [ 984.605145][ T390] lo speed is unknown, defaulting to 1000 [ 984.640080][ T404] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6713'. [ 984.658737][ T404] syzkaller1: entered promiscuous mode [ 984.664583][ T404] syzkaller1: entered allmulticast mode [ 987.138934][ T453] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 989.211336][ T444] syzkaller0: entered promiscuous mode [ 989.217245][ T444] syzkaller0: entered allmulticast mode [ 989.305642][ T450] bond0: option arp_validate: invalid value (55553) [ 989.433841][ T463] netlink: 'syz.1.6728': attribute type 4 has an invalid length. [ 989.443653][ T463] __nla_validate_parse: 7 callbacks suppressed [ 989.443673][ T463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6728'. [ 989.650978][ T473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6728'. [ 989.741080][ T475] syzkaller0: entered promiscuous mode [ 989.765066][ T475] syzkaller0: entered allmulticast mode [ 990.073856][T20067] Bluetooth: hci5: command 0x0406 tx timeout [ 990.411206][ T518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6739'. [ 990.564505][ T520] syzkaller0: entered promiscuous mode [ 990.582069][ T520] syzkaller0: entered allmulticast mode [ 990.824834][ T531] geneve2: entered promiscuous mode [ 990.844252][ T6296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 54029 - 0 [ 990.852497][ T535] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6746'. [ 990.864376][ T531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6744'. [ 990.885497][ T535] gretap0: entered promiscuous mode [ 990.904319][ T539] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6746'. [ 990.921172][ T536] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6746'. [ 990.966540][ T536] 0ªî{X¹¦: renamed from gretap0 [ 991.065855][ T549] openvswitch: netlink: IP tunnel dst address not specified [ 991.090090][ T536] 0ªî{X¹¦: left promiscuous mode [ 991.107474][ T536] 0ªî{X¹¦: entered allmulticast mode [ 991.136010][ T536] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 991.181555][ T6296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 54029 - 0 [ 991.208644][ T539] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 991.220528][ T539] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 991.261546][ T6296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 54029 - 0 [ 991.294262][ T6296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 54029 - 0 [ 991.302740][ T559] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6751'. [ 991.399303][ T562] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6752'. [ 991.964429][ T595] tipc: New replicast peer: 255.255.255.255 [ 991.971430][ T595] tipc: Enabled bearer , priority 10 [ 992.109272][ T600] bridge0: port 3(veth1_to_bridge) entered blocking state [ 992.120596][ T600] bridge0: port 3(veth1_to_bridge) entered disabled state [ 992.128749][ T600] veth1_to_bridge: entered allmulticast mode [ 992.137747][ T600] veth1_to_bridge: entered promiscuous mode [ 992.144892][ T600] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 992.164979][ T600] bridge0: port 3(veth1_to_bridge) entered blocking state [ 992.172336][ T600] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 992.281006][ T608] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6764'. [ 992.329745][ T601] syzkaller0: entered promiscuous mode [ 992.349040][ T601] syzkaller0: entered allmulticast mode [ 996.036505][ T8201] tipc: Node number set to 2597870631 [ 996.054441][ T643] __nla_validate_parse: 4 callbacks suppressed [ 996.054479][ T643] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6773'. [ 996.133458][ T646] syzkaller1: entered promiscuous mode [ 996.152676][ T646] syzkaller1: entered allmulticast mode [ 996.219490][ T651] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6776'. [ 996.369409][ T654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6777'. [ 996.404248][ T654] netlink: 'syz.0.6777': attribute type 1 has an invalid length. [ 996.446614][ T654] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6777'. [ 997.090085][ T689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6787'. [ 997.407423][ T696] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 997.475418][ T696] bond5 (unregistering): Released all slaves [ 997.741832][ T716] mac80211_hwsim hwsim53 »»»»»»: renamed from wlan0 [ 997.888356][ T720] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6795'. [ 997.996246][ T739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6800'. [ 998.151648][ T742] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6801'. [ 998.153387][ T741] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6801'. [ 998.261841][ T744] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 998.277788][ T744] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 998.296424][ T744] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 998.436020][ T9138] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 998.500054][ T750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 998.595476][ T758] veth0: entered promiscuous mode [ 998.760501][ T761] syzkaller1: entered promiscuous mode [ 998.818517][ T761] syzkaller1: entered allmulticast mode [ 999.261446][ T756] veth0: left promiscuous mode [ 999.447115][ T809] netlink: 'syz.4.6819': attribute type 15 has an invalid length. [ 999.737500][ T827] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1000.258625][ T855] geneve3: entered promiscuous mode [ 1000.271218][ T6296] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 65530 - 0 [ 1000.283779][ T6296] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 65530 - 0 [ 1000.302109][ T6296] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 65530 - 0 [ 1000.312020][ T6296] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 65530 - 0 [ 1000.393015][ T859] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1000.664557][ T870] set match dimension is over the limit! [ 1000.930987][ T885] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 1001.656078][ T915] tipc: Enabling of bearer rejected, failed to enable media [ 1001.907176][ T928] __nla_validate_parse: 3 callbacks suppressed [ 1001.907197][ T928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6853'. [ 1001.999788][ T934] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1002.030330][ T934] netlink: 'syz.1.6855': attribute type 1 has an invalid length. [ 1002.127395][ T937] netlink: 'syz.4.6857': attribute type 18 has an invalid length. [ 1002.157656][ T937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6857'. [ 1002.170685][ T937] netlink: 'syz.4.6857': attribute type 18 has an invalid length. [ 1002.180652][ T937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6857'. [ 1002.327487][ T962] netlink: 'syz.0.6863': attribute type 10 has an invalid length. [ 1002.379462][ T961] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1002.410876][ T961] bond5: option arp_ip_target: invalid value (0) [ 1002.444104][ T961] bond5 (unregistering): Released all slaves [ 1002.652309][ T974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 1002.693363][ T974] x_tables: duplicate underflow at hook 2 [ 1002.951685][ T994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6866'. [ 1003.099391][ T1000] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6868'. [ 1003.115451][ T993] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1003.133223][ T993] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1003.317504][ T1006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6871'. [ 1003.344808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.357223][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.369964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.382390][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.395016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.407477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.420022][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.431443][ T1006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1003.432399][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.451012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.460893][ T1005] netlink: 'syz.1.6870': attribute type 4 has an invalid length. [ 1003.512051][ T1006] bond3: entered promiscuous mode [ 1003.519180][ T1006] bond3: entered allmulticast mode [ 1003.526282][ T1016] netlink: 'syz.1.6870': attribute type 4 has an invalid length. [ 1003.545194][ T1006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1003.566988][ T1006] team0: Port device bond3 added [ 1003.709729][ T1013] team0: Port device bond3 removed [ 1003.749868][ T1013] bond3 (unregistering): Released all slaves [ 1003.894319][ T1025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6875'. [ 1004.339096][ T1018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6870'. [ 1004.499393][ T1034] syz.1.6876: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1004.518602][ T1034] CPU: 1 UID: 0 PID: 1034 Comm: syz.1.6876 Not tainted syzkaller #0 PREEMPT(full) [ 1004.518631][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1004.518645][ T1034] Call Trace: [ 1004.518655][ T1034] [ 1004.518665][ T1034] dump_stack_lvl+0xe8/0x150 [ 1004.518705][ T1034] warn_alloc+0x24c/0x270 [ 1004.518738][ T1034] ? stack_depot_save_flags+0x33/0x800 [ 1004.518841][ T1034] ? __pfx_warn_alloc+0x10/0x10 [ 1004.518871][ T1034] ? kasan_save_track+0x3e/0x80 [ 1004.518909][ T1034] ? __kasan_kmalloc+0x93/0xb0 [ 1004.518939][ T1034] ? xsk_setsockopt+0x52a/0x960 [ 1004.518997][ T1034] ? do_sock_setsockopt+0x17c/0x1b0 [ 1004.519036][ T1034] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1004.519064][ T1034] ? do_syscall_64+0x174/0x580 [ 1004.519093][ T1034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.519127][ T1034] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1004.519190][ T1034] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1004.519222][ T1034] ? __kasan_kmalloc+0x93/0xb0 [ 1004.519252][ T1034] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1004.519280][ T1034] ? __kmalloc_cache_noprof+0x150/0x660 [ 1004.519311][ T1034] vmalloc_user_noprof+0xad/0xe0 [ 1004.519339][ T1034] ? xskq_create+0xbf/0x170 [ 1004.519366][ T1034] xskq_create+0xbf/0x170 [ 1004.519395][ T1034] xsk_init_queue+0x8a/0xe0 [ 1004.519423][ T1034] xsk_setsockopt+0x52a/0x960 [ 1004.519446][ T1034] ? __fget_files+0x2a/0x420 [ 1004.519477][ T1034] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1004.519502][ T1034] ? __pfx_aa_sk_perm+0x10/0x10 [ 1004.519571][ T1034] ? aa_sock_opt_perm+0xff/0x1a0 [ 1004.519598][ T1034] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1004.519641][ T1034] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1004.519667][ T1034] do_sock_setsockopt+0x17c/0x1b0 [ 1004.519704][ T1034] __x64_sys_setsockopt+0x13d/0x1b0 [ 1004.519738][ T1034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.519762][ T1034] do_syscall_64+0x174/0x580 [ 1004.519789][ T1034] ? trace_irq_disable+0x3b/0x140 [ 1004.519816][ T1034] ? clear_bhb_loop+0x40/0x90 [ 1004.519844][ T1034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.519867][ T1034] RIP: 0033:0x7f1ba019de59 [ 1004.519889][ T1034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.519916][ T1034] RSP: 002b:00007f1ba10a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1004.519940][ T1034] RAX: ffffffffffffffda RBX: 00007f1ba0425fa0 RCX: 00007f1ba019de59 [ 1004.519956][ T1034] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1004.519970][ T1034] RBP: 00007f1ba0233e6f R08: 0000000000000004 R09: 0000000000000000 [ 1004.519983][ T1034] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.519998][ T1034] R13: 00007f1ba0426038 R14: 00007f1ba0425fa0 R15: 00007fff75470b58 [ 1004.520036][ T1034] [ 1004.520144][ T1034] Mem-Info: [ 1004.979061][ T1034] active_anon:6132 inactive_anon:0 isolated_anon:0 [ 1004.979061][ T1034] active_file:0 inactive_file:43887 isolated_file:0 [ 1004.979061][ T1034] unevictable:768 dirty:122 writeback:0 [ 1004.979061][ T1034] slab_reclaimable:12155 slab_unreclaimable:162162 [ 1004.979061][ T1034] mapped:33011 shmem:1425 pagetables:1355 [ 1004.979061][ T1034] sec_pagetables:0 bounce:0 [ 1004.979061][ T1034] kernel_misc_reclaimable:0 [ 1004.979061][ T1034] free:1214748 free_pcp:11753 free_cma:0 [ 1005.248503][ T1036] netlink: 'syz.1.6876': attribute type 10 has an invalid length. [ 1005.305629][ T1036] team0: Port device dummy0 added [ 1005.327898][ T1037] netlink: 'syz.1.6876': attribute type 10 has an invalid length. [ 1005.416237][ T1034] Node 0 active_anon:28428kB inactive_anon:0kB active_file:0kB inactive_file:175344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139572kB dirty:488kB writeback:0kB shmem:8064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15320kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1005.539540][ T1037] team0: Port device dummy0 removed [ 1005.559236][ T1034] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1005.587298][ T1037] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1005.628109][ T1034] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.716424][ T1051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6879'. [ 1005.755134][ T1034] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1005.795672][ T1034] Node 0 DMA32 free:893172kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34628kB inactive_anon:0kB active_file:0kB inactive_file:175344kB unevictable:1536kB writepending:488kB zspages:0kB present:3129332kB managed:2548804kB mlocked:0kB bounce:0kB free_pcp:41168kB local_pcp:16920kB free_cma:0kB [ 1005.968440][ T1034] lowmem_reserve[]: 0 0 0 0 0 [ 1005.980243][ T1034] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.260661][ T1034] lowmem_reserve[]: 0 0 0 0 0 [ 1006.299065][ T1034] Node 1 Normal free:3943776kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2260kB local_pcp:2260kB free_cma:0kB [ 1006.436963][ T1034] lowmem_reserve[]: 0 0 0 0 0 [ 1006.476026][ T1034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1006.561923][ T1034] Node 0 DMA32: 2*4kB (UE) 38*8kB (E) 264*16kB (UME) 267*32kB (UME) 217*64kB (UME) 82*128kB (UME) 34*256kB (UM) 11*512kB (UM) 8*1024kB (UME) 12*2048kB (UME) 196*4096kB (UM) = 887384kB [ 1006.598645][ T1034] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1006.703636][ T1034] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3943828kB [ 1006.867193][ T1034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.953044][ T1034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1007.038343][ T1034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1007.102030][ T1034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1007.148781][ T1071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6881'. [ 1007.164221][ T1034] 49963 total pagecache pages [ 1007.180427][ T1034] 0 pages in swap cache [ 1007.204318][ T1034] Free swap = 124996kB [ 1007.215360][ T1034] Total swap = 124996kB [ 1007.225968][ T1034] 2097051 pages RAM [ 1007.235439][ T1034] 0 pages HighMem/MovableOnly [ 1007.246949][ T1034] 428169 pages reserved [ 1007.257091][ T1034] 0 pages cma reserved [ 1007.997586][ T1083] xfrm0 speed is unknown, defaulting to 1000 [ 1008.118253][ T1083] lo speed is unknown, defaulting to 1000 [ 1008.142828][ C0] net_ratelimit: 10880 callbacks suppressed [ 1008.142850][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.161425][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.174019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.186589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.199088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.211662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.224126][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.236821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.249346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.261919][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.349387][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6886'. [ 1009.290107][ T1103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6887'. [ 1011.228740][ T1149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6898'. [ 1011.286705][ T1148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1011.294074][ T1148] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.301424][ T1148] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.601957][ T1143] xfrm0 speed is unknown, defaulting to 1000 [ 1011.811164][ T1156] dvmrp0: entered allmulticast mode [ 1011.858893][ T1143] lo speed is unknown, defaulting to 1000 [ 1013.152528][ C0] net_ratelimit: 11276 callbacks suppressed [ 1013.152550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.171066][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.183569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.196242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.208737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.221561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.234060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.246615][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.259122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.271692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.871955][T19728] Bluetooth: hci1: link tx timeout [ 1013.881423][T19728] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1014.103351][T20067] Bluetooth: hci1: link tx timeout [ 1014.110423][T20067] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1014.169228][T20067] Bluetooth: hci1: link tx timeout [ 1014.174982][T20067] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1014.314164][ T1200] syzkaller0: entered promiscuous mode [ 1014.331694][ T1200] syzkaller0: entered allmulticast mode [ 1014.733250][T20067] Bluetooth: hci1: link tx timeout [ 1014.738555][T20067] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1015.983677][T20067] Bluetooth: hci1: command 0x0406 tx timeout [ 1016.100777][ T1217] netlink: 'syz.3.6905': attribute type 1 has an invalid length. [ 1016.110191][ T1217] netlink: 'syz.3.6905': attribute type 3 has an invalid length. [ 1016.121145][ T1217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6905'. [ 1016.979058][ T1226] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6907'. [ 1017.957945][ T1243] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1018.162522][ C0] net_ratelimit: 11219 callbacks suppressed [ 1018.162545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.181047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.193668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.195879][ T1253] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6915'. [ 1018.206152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.206555][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.239651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.252274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.264799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.277475][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.290030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.172694][ C0] net_ratelimit: 14614 callbacks suppressed [ 1023.172719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.173429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1023.179004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.191896][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1023.202920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.215757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1023.226816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.239655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1023.250713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.263828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1025.262435][ C1] sched: DL replenish lagged too much [ 1028.182618][ C0] net_ratelimit: 15680 callbacks suppressed [ 1028.182643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.183578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1028.188939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.201913][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1028.212918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.225727][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1028.236703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.249599][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1028.260589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.273846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1033.192578][ C0] net_ratelimit: 14844 callbacks suppressed [ 1033.192603][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.193416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1033.198946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1033.211772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1033.222852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.235698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1033.246872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.259619][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1033.270661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1033.283534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.202764][ C0] net_ratelimit: 15018 callbacks suppressed [ 1038.202787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.203024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.209090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.221991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.233056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1038.245913][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.257078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.269847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.280850][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.293696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1043.212593][ C0] net_ratelimit: 14777 callbacks suppressed [ 1043.212618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.212737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1043.219024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1043.231867][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1043.242922][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.255677][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1043.266826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.279500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1043.290627][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1043.303725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1048.222533][ C0] net_ratelimit: 15011 callbacks suppressed [ 1048.222556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.223455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1048.228869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1048.242251][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1048.252931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.265847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1048.277140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.290044][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1048.301004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1048.313836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1053.232583][ C0] net_ratelimit: 15728 callbacks suppressed [ 1053.232608][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.233510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1053.238923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1053.252256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1053.262837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.275728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1053.286893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.299702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1053.310656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1053.323548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1058.242645][ C0] net_ratelimit: 15582 callbacks suppressed [ 1058.242668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.243508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1058.249000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1058.261860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1058.272999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.285930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1058.296875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.309748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1058.320697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1058.333649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1063.252521][ C0] net_ratelimit: 15223 callbacks suppressed [ 1063.252545][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.253505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1063.258860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1063.271940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1063.282878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.295817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1063.306799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1063.319568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1063.330560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1063.343655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1068.262555][ C0] net_ratelimit: 14773 callbacks suppressed [ 1068.262580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.263027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1068.269030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.281965][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1068.293142][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1068.305925][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1068.317074][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.330328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1068.340968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.353655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1073.272573][ C0] net_ratelimit: 15103 callbacks suppressed [ 1073.272597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1073.272742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1073.278899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.291820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1073.302873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.315748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1073.326688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1073.339636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1073.350573][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.363507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1078.282475][ C1] net_ratelimit: 15552 callbacks suppressed [ 1078.282499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1078.282582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.289773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1078.300795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1078.313761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1078.324729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.337587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1078.348657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.361534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1078.372509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1083.292651][ C0] net_ratelimit: 15384 callbacks suppressed [ 1083.292675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.293264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1083.299063][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1083.312044][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1083.322912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.335856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1083.346812][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.359647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1083.370615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1083.383570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1088.302818][ C0] net_ratelimit: 15428 callbacks suppressed [ 1088.302842][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.302856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1088.304100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1088.309156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1088.322148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1088.333160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.345997][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1088.357121][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.369891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1088.380902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1093.312430][ C0] net_ratelimit: 15085 callbacks suppressed [ 1093.312455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1093.313277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1093.318896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.331699][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1093.342759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.355444][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1093.366629][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1093.380071][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1093.390518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.403446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1098.322432][ C0] net_ratelimit: 14962 callbacks suppressed [ 1098.322457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1098.323053][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1098.328775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.341650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1098.352733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.365410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1098.376515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1098.389367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1098.400455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.413257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1103.332530][ C0] net_ratelimit: 14977 callbacks suppressed [ 1103.332555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.333234][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1103.338858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1103.351686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1103.362812][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.375636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1103.386686][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.399442][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1103.410480][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1103.423299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1108.342458][ C0] net_ratelimit: 15101 callbacks suppressed [ 1108.342482][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1108.342513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1108.348797][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.361665][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1108.372807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.385454][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1108.396528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1108.409473][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1108.420531][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.433350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1113.352710][ C0] net_ratelimit: 14792 callbacks suppressed [ 1113.352725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1113.352733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.353082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.360022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1113.370997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1113.383827][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1113.394872][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.407749][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1113.418753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.431655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1118.362654][ C0] net_ratelimit: 15255 callbacks suppressed [ 1118.362677][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.362960][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1118.369004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.381716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1118.392839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1118.405679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1118.416799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.429538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1118.440677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.453485][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1123.372444][ C0] net_ratelimit: 15106 callbacks suppressed [ 1123.372468][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.373603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1123.378824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.391591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1123.402625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1123.415527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1123.426528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.441123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1123.450957][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.463977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1123.702371][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1123.709371][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1216/1:b..l [ 1123.717879][ C1] rcu: (detected by 1, t=10503 jiffies, g=186917, q=2152 ncpus=2) [ 1123.725829][ C1] task:syz.3.6905 state:R running task stack:27672 pid:1216 tgid:1215 ppid:19508 task_flags:0x400140 flags:0x00080003 [ 1123.740807][ C1] Call Trace: [ 1123.744159][ C1] [ 1123.747117][ C1] __schedule+0x17d9/0x56c0 [ 1123.751702][ C1] ? __pfx___schedule+0x10/0x10 [ 1123.756590][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1123.761710][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1123.766868][ C1] irqentry_exit+0x14f/0x8f0 [ 1123.771488][ C1] ? trace_irq_disable+0x3b/0x140 [ 1123.776548][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1123.782567][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x2550 [ 1123.788420][ C1] Code: 08 8b 15 dd 89 d8 0c 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 70 99 9d 91 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d [ 1123.808055][ C1] RSP: 0018:ffffc9000203f420 EFLAGS: 00000a03 [ 1123.814159][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000080000000 [ 1123.822153][ C1] RDX: 00000000000ad215 RSI: ffffffff8c4bd260 RDI: ffffffff8c4bd220 [ 1123.830153][ C1] RBP: ffffffff8a567541 R08: ffffffff8176f21f R09: 0000000000000000 [ 1123.838150][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: dffffc0000000000 [ 1123.846151][ C1] R13: ffffffff91c2f344 R14: ffffc9000203f4c8 R15: 0000000000095675 [ 1123.854152][ C1] ? mrtsock_destruct+0x241/0x320 [ 1123.859306][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1123.864461][ C1] ? mrtsock_destruct+0x242/0x320 [ 1123.869519][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1123.874661][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1123.880893][ C1] arch_stack_walk+0x11b/0x150 [ 1123.885715][ C1] ? mrtsock_destruct+0x242/0x320 [ 1123.890780][ C1] stack_trace_save+0xa9/0x100 [ 1123.895579][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1123.900980][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1123.905957][ C1] kasan_save_track+0x3e/0x80 [ 1123.910670][ C1] ? kasan_save_track+0x3e/0x80 [ 1123.915712][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1123.920787][ C1] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 1123.926894][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1123.931521][ C1] ? inet_netconf_notify_devconf+0x173/0x240 [ 1123.937602][ C1] ? mrtsock_destruct+0x242/0x320 [ 1123.942721][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1123.947603][ C1] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1123.953702][ C1] kmem_cache_alloc_node_noprof+0x355/0x610 [ 1123.959708][ C1] ? local_lock_release+0x9c/0x160 [ 1123.964847][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1123.970942][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1123.975560][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1123.980191][ C1] __alloc_skb+0x1d7/0x7a0 [ 1123.984646][ C1] inet_netconf_notify_devconf+0x173/0x240 [ 1123.990488][ C1] mrtsock_destruct+0x242/0x320 [ 1123.995386][ C1] ? __pfx_mrtsock_destruct+0x10/0x10 [ 1124.000807][ C1] ? __pfx_mrtsock_destruct+0x10/0x10 [ 1124.006225][ C1] ip_ra_control+0x492/0x530 [ 1124.010924][ C1] raw_close+0x19/0x30 [ 1124.015102][ C1] inet_release+0x143/0x190 [ 1124.019637][ C1] sock_close+0xad/0x220 [ 1124.023906][ C1] ? __pfx_sock_close+0x10/0x10 [ 1124.028780][ C1] __fput+0x418/0xa50 [ 1124.032808][ C1] task_work_run+0x1d9/0x270 [ 1124.037446][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1124.042606][ C1] get_signal+0x1181/0x12c0 [ 1124.047152][ C1] ? kick_process+0xeb/0x160 [ 1124.051784][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1124.057371][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 1124.062258][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1124.068475][ C1] exit_to_user_mode_loop+0x104/0x730 [ 1124.073884][ C1] ? rcu_is_watching+0x15/0xb0 [ 1124.078687][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.084789][ C1] do_syscall_64+0x353/0x580 [ 1124.089422][ C1] ? clear_bhb_loop+0x40/0x90 [ 1124.094135][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.100058][ C1] RIP: 0033:0x7fa31759de59 [ 1124.104496][ C1] RSP: 002b:00007fa3183f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1124.113027][ C1] RAX: 0000000000000000 RBX: 00007fa317825fa0 RCX: 00007fa31759de59 [ 1124.121031][ C1] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000008 [ 1124.129028][ C1] RBP: 00007fa317633e6f R08: 0000000000000004 R09: 0000000000000000 [ 1124.137028][ C1] R10: 0000200000001200 R11: 0000000000000246 R12: 0000000000000000 [ 1124.145024][ C1] R13: 00007fa317826038 R14: 00007fa317825fa0 R15: 00007ffc28b78d48 [ 1124.153039][ C1] [ 1124.156083][ C1] rcu: rcu_preempt kthread starved for 481 jiffies! g186917 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1124.167210][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1124.177199][ C1] rcu: RCU grace-period kthread stack dump: [ 1124.183103][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1124.196633][ C1] Call Trace: [ 1124.199943][ C1] [ 1124.202904][ C1] __schedule+0x17d9/0x56c0 [ 1124.207436][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1124.212432][ C1] ? __pfx___schedule+0x10/0x10 [ 1124.217321][ C1] ? schedule+0x90/0x2b0 [ 1124.221595][ C1] schedule+0x164/0x2b0 [ 1124.225801][ C1] schedule_timeout+0x152/0x2c0 [ 1124.230757][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1124.236180][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1124.241498][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1124.247333][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1124.252918][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1124.257812][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1124.264007][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1124.269322][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1124.274573][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1124.280413][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1124.285037][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1124.290267][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1124.295236][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1124.300295][ C1] kthread+0x388/0x470 [ 1124.304400][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1124.309628][ C1] ? __pfx_kthread+0x10/0x10 [ 1124.314252][ C1] ret_from_fork+0x514/0xb70 [ 1124.318889][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.324060][ C1] ? __switch_to+0xc89/0x1420 [ 1124.328786][ C1] ? __pfx_kthread+0x10/0x10 [ 1124.333412][ C1] ret_from_fork_asm+0x1a/0x30 [ 1124.338228][ C1] [ 1124.341269][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1124.347611][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1124.352841][ C0] NMI backtrace for cpu 0 [ 1124.352857][ C0] CPU: 0 UID: 0 PID: 3231 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1124.352875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.352886][ C0] Workqueue: bat_events batadv_tt_purge [ 1124.352977][ C0] RIP: 0010:__lock_acquire+0x41e/0x2cf0 [ 1124.353000][ C0] Code: 84 db 0f 84 d9 01 00 00 41 8b 45 20 66 85 c0 0f 88 cc 01 00 00 4c 89 ed 0f b6 89 c5 00 00 00 84 c9 0f b6 d3 0f b6 c9 0f 44 ca <89> 4c 24 10 45 8b a6 98 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff [ 1124.353014][ C0] RSP: 0018:ffffc90000006518 EFLAGS: 00000002 [ 1124.353029][ C0] RAX: 0000000000022007 RBX: 0000000000000003 RCX: 0000000000000001 [ 1124.353045][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 1124.353056][ C0] RBP: ffff888032d3ca68 R08: ffffffff8176f21f R09: 0000000000000000 [ 1124.353068][ C0] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000007 [ 1124.353079][ C0] R13: ffff888032d3ca68 R14: ffff888032d3be00 R15: ffff888032d3c9a0 [ 1124.353092][ C0] FS: 0000000000000000(0000) GS:ffff888124f5a000(0000) knlGS:0000000000000000 [ 1124.353106][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1124.353118][ C0] CR2: 00007f9d531eb000 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1124.353135][ C0] Call Trace: [ 1124.353142][ C0] [ 1124.353156][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1124.353172][ C0] ? lock_acquire+0x106/0x350 [ 1124.353203][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1124.353217][ C0] lock_acquire+0x106/0x350 [ 1124.353237][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1124.353256][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1124.353271][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1124.353330][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1124.353346][ C0] unwind_next_frame+0xac/0x2550 [ 1124.353362][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1124.353380][ C0] ? kmem_cache_free+0x182/0x650 [ 1124.353400][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1124.353417][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1124.353437][ C0] arch_stack_walk+0x11b/0x150 [ 1124.353456][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1124.353479][ C0] stack_trace_save+0xa9/0x100 [ 1124.353497][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1124.353515][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1124.353556][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1124.353578][ C0] kasan_save_track+0x3e/0x80 [ 1124.353597][ C0] ? kasan_save_track+0x3e/0x80 [ 1124.353614][ C0] ? kasan_save_free_info+0x40/0x50 [ 1124.353630][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1124.353648][ C0] ? kmem_cache_free+0x182/0x650 [ 1124.353667][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1124.353707][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1124.353728][ C0] kasan_save_free_info+0x40/0x50 [ 1124.353745][ C0] __kasan_slab_free+0x5c/0x80 [ 1124.353765][ C0] kmem_cache_free+0x182/0x650 [ 1124.353784][ C0] ? __skb_ext_put+0x221/0x2f0 [ 1124.353806][ C0] ? __skb_ext_del+0x271/0x390 [ 1124.353828][ C0] br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1124.353854][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1124.353874][ C0] NF_HOOK+0x64e/0x6e0 [ 1124.353896][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1124.353916][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1124.353938][ C0] ? net_generic+0x1e/0x240 [ 1124.353957][ C0] ? net_generic+0x1e/0x240 [ 1124.353978][ C0] br_nf_post_routing+0xa53/0xee0 [ 1124.353999][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1124.354021][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1124.354043][ C0] nf_hook_slow+0xc5/0x220 [ 1124.354100][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1124.354145][ C0] NF_HOOK+0x23e/0x3f0 [ 1124.354164][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1124.354181][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1124.354205][ C0] ? net_generic+0x1e/0x240 [ 1124.354225][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1124.354246][ C0] ? net_generic+0x1e/0x240 [ 1124.354267][ C0] br_forward_finish+0xd3/0x130 [ 1124.354285][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1124.354305][ C0] br_nf_forward_finish+0xa76/0xea0 [ 1124.354330][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1124.354352][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.354372][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1124.354392][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1124.354411][ C0] NF_HOOK+0x64e/0x6e0 [ 1124.354432][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1124.354451][ C0] ? net_generic+0x1e/0x240 [ 1124.354471][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1124.354493][ C0] ? net_generic+0x1e/0x240 [ 1124.354512][ C0] ? net_generic+0x1e/0x240 [ 1124.354533][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 1124.354553][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1124.354574][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1124.354595][ C0] nf_hook_slow+0xc5/0x220 [ 1124.354613][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.354631][ C0] NF_HOOK+0x23e/0x3f0 [ 1124.354650][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1124.354667][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1124.354686][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.354703][ C0] ? skb_clone+0x246/0x3a0 [ 1124.354727][ C0] ? br_flood+0x623/0x8d0 [ 1124.354744][ C0] ? br_handle_vlan+0x5e/0x530 [ 1124.354783][ C0] __br_forward+0x397/0x540 [ 1124.354800][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1124.354820][ C0] br_handle_frame_finish+0x1175/0x1990 [ 1124.354859][ C0] ? kasan_save_track+0x4f/0x80 [ 1124.354882][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.354906][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1124.354922][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1124.354939][ C0] ? nf_hook_slow+0x176/0x220 [ 1124.354956][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.354976][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1124.354997][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1124.355060][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1124.355081][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.355102][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1124.355125][ C0] ? lock_acquire+0x106/0x350 [ 1124.355147][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1124.355187][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.355218][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1124.355240][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1124.355261][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1124.355285][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1124.355307][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 1124.355330][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1124.355350][ C0] br_handle_frame+0x127f/0x1510 [ 1124.355374][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1124.355395][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1124.355415][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1124.355434][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1124.355457][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1124.355477][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1124.355519][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1124.355591][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1124.355609][ C0] ? ip6_rcv_finish+0x265/0x280 [ 1124.355630][ C0] ? NF_HOOK+0x336/0x3c0 [ 1124.355652][ C0] ? process_backlog+0x3c3/0x1860 [ 1124.355674][ C0] ? process_backlog+0x3c3/0x1860 [ 1124.355691][ C0] ? process_backlog+0x3c3/0x1860 [ 1124.355712][ C0] process_backlog+0x706/0x1860 [ 1124.355732][ C0] ? process_backlog+0x3c3/0x1860 [ 1124.355756][ C0] __napi_poll+0xaa/0x330 [ 1124.355775][ C0] net_rx_action+0x61d/0xf50 [ 1124.355799][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1124.355828][ C0] handle_softirqs+0x225/0x840 [ 1124.355848][ C0] ? do_softirq+0x76/0xd0 [ 1124.355867][ C0] ? batadv_tt_purge+0x4ae/0xa10 [ 1124.355884][ C0] do_softirq+0x76/0xd0 [ 1124.355901][ C0] [ 1124.355906][ C0] [ 1124.355913][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1124.355931][ C0] batadv_tt_purge+0x4ae/0xa10 [ 1124.355951][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1124.355969][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1124.355998][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1124.356014][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1124.356035][ C0] ? assign_work+0x3af/0x5d0 [ 1124.356054][ C0] rescuer_thread+0x7b6/0x10b0 [ 1124.356075][ C0] ? rescuer_thread+0xb8/0x10b0 [ 1124.356102][ C0] kthread+0x388/0x470 [ 1124.356123][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1124.356140][ C0] ? __pfx_kthread+0x10/0x10 [ 1124.356162][ C0] ret_from_fork+0x514/0xb70 [ 1124.356185][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.356213][ C0] ? __switch_to+0xc89/0x1420 [ 1124.356232][ C0] ? __pfx_kthread+0x10/0x10 [ 1124.356254][ C0] ret_from_fork_asm+0x1a/0x30 [ 1124.356276][ C0] [ 1128.382540][ C0] net_ratelimit: 14517 callbacks suppressed [ 1128.382564][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.382838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1128.388873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1128.401717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1128.412797][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.425608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1128.436700][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.449801][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1128.460531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1128.473367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1133.392645][ C0] net_ratelimit: 14392 callbacks suppressed [ 1133.392670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.393274][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1133.398986][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.412093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1133.422817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:22:3c:6b:20:ed:60, vlan:0) [ 1133.436003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1133.446714][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.460103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1133.470699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.483831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)