last executing test programs: 3.646919063s ago: executing program 2 (id=3562): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x90282, 0x4880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt(r3, 0x6, 0x6, &(0x7f0000000100)=""/23, &(0x7f0000000180)=0x17) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400002000010327bd7000008000000200000000000003"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 3.44445432s ago: executing program 2 (id=3564): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000240)={'vxcan1\x00', {0x2, 0x0, @multicast2}}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000140)) connect$can_bcm(r2, &(0x7f0000000200), 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.000370112s ago: executing program 3 (id=3569): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0xc804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x218, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffc}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1400, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1b, 0xffff, 0x400, 0x2, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0x7ff, 0x2, 0xfff]}}, {{0x1c, 0x1, {0x8, 0x5, 0xb, 0xffffffff, 0x0, 0x7, 0xa, 0x2}}, {0x8, 0x2, [0x200, 0x3]}}, {{0x1c, 0x1, {0x40, 0x40, 0x4, 0x101, 0x0, 0x14d60000, 0x511d, 0x9}}, {0x16, 0x2, [0x40, 0x1fe, 0x8001, 0x3, 0x0, 0x4, 0x409, 0x1, 0x8]}}, {{0x1c, 0x1, {0xb, 0x0, 0x90, 0xffff, 0x2, 0xfffd, 0xd9c7, 0x8}}, {0x14, 0x2, [0x4, 0xe4ce, 0x4, 0x8, 0x7, 0x6, 0x8000, 0x35]}}, {{0x1c, 0x1, {0xdb, 0x2, 0x3, 0x1, 0x1, 0x8000, 0xfffffc01, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x5, 0x7, 0x400, 0x1, 0x0, 0x2, 0xe5, 0x9}}, {0x16, 0x2, [0xccf3, 0x4, 0x3, 0x1, 0xa4, 0x6, 0x6, 0x10, 0xe]}}, {{0x1c, 0x1, {0xf, 0x2, 0x3, 0xb, 0x0, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x1da1, 0x2, 0x82e]}}, {{0x1c, 0x1, {0x3, 0x0, 0x100, 0x4, 0x2, 0x4, 0x0, 0x6}}, {0x10, 0x2, [0x101, 0xad, 0x1000, 0x81, 0x80, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0xea}}]}, 0x218}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 2.894535619s ago: executing program 4 (id=3570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476"], 0x38}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}}, 0x20}}, 0x28000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write(r2, &(0x7f00000000c0)="ec", 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'vcan0\x00', {}, {}, 0x2c, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x80, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [0x0, 0x0, 0xffffffff, 0xff000000], 'veth1_vlan\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0xfffffffffffffe95, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x345) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 2.725738428s ago: executing program 3 (id=3572): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@getchain={0x3c, 0x66, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {0x5, 0x3}, {0x8, 0xf}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x8f8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x200, 0x0, {{0x38, 0x4, 0x0, 0x6, 0xe0, 0x67, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x59, 0xffffffffffffffff, [{0x0, 0xd, "ff95d26d67b0846a9120cd"}, {0x7, 0x5, "3074ec"}, {0x0, 0x10, "d57455b6841e98d5e7d64e0c0cd4"}, {0x5, 0xf, "58e430150c6a2b9701b4de7b85"}, {0x7, 0xc, "e5b0797daea65f74429d"}, {0x0, 0x7, "e18476d0fb"}, {0x0, 0xf, "45f8fb251a6024866d58ae4316"}]}, @timestamp_prespec={0x44, 0x34, 0x7b, 0x3, 0x8, [{@loopback, 0xda}, {@local, 0x4a}, {@local}, {@broadcast, 0x7800}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@local, 0x5}]}, @generic={0x89, 0x4, "a8c0"}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x6, 0xb, "c888f24af377349b13"}, {0x2, 0x11, "e604afcd6e928b0a5c41485ca6aabf"}, {0x6, 0x6, "4b98378e"}]}, @ssrr={0x89, 0x13, 0x41, [@broadcast, @multicast1, @local, @local]}]}}}}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x4, 0x987, 0x200ff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff3a98}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) bind$packet(r8, &(0x7f0000000040)={0x11, 0x1f, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08002c004c000000050038000100000008003b000d000000050038000100000008000300", @ANYRES32=r11, @ANYBLOB], 0x54}}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x1, 0x5, 0x1}}) 2.670219417s ago: executing program 2 (id=3573): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000001280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)="76b6939e031833d84849623a32403fb4bee581d5177b28ad5fe175be156097d8d51c42910f7b666c3ca659af7418559555b83a134d5a7d694de73d76673b9c9570cb5d86f4e683565b99eca59bcc00d2e0dd69a369bfbe2e36362dee2c8954c0d279e2124bb59fb1254d2c493aeee9025a116e84f6dd235e32b4e23fe637a74bfce81656852005c1dd68618aabb077e8fa3d024dd1871b894c895b316fa780c26be7de8fdfa9a17e4ef7c491ed9127d41c5067e35a0ea8e704028581c093c7c64de95055928bd58831b4f140adf4024ff47c13b939b08f8419a83278265b7746b5544d55f9da44bf4c88516d6739f5f1ae805f5c54d1831b3c5d3c93d569cf7881b7d066e0d57b3d77d97bc24964556d875f80c5bee4fc81b8fc3731468a3df2ee385149ae7e40c9762218f34d8cc4c5f1df58efc17f05ef6da8d8d1e961e10197c59e8b06bca9df2c7cacf0de9760d1520871b15fef8462a93e51795ebeb2e7b2835686fc37310299b3582f4988e80538b15edf45cf9397f4bcc39bcbd8cad3d0f1e7bfd86f4882c176b22a07ad78c7efaf22dd34502c71f36a13eedce6c92a93e01b6082b842cb2481aff9239dcd72f22c84d5240b1543487386ba908ee50203e706877f73a0df9dae6ae1b54627638e351e8780b1612ca111fc978e52b0d2887ee99927d8db35dc4581e18e70bd2e724b02b9b54ac9564f7bf2556f8dc72b716dff5b3ccb259d0dd83439caac7afd94a67dd97ca29d2fc9aa7d85d92134195b5edbb3c86633558a95f01d8e223e917fa352d1a7f76f7ebbe099d72f4353b608d25f2aaedb48c50cd5dd22dbb26bda8435b52896352e754b6d903da9b579d688e6a774ca93c7cdab0b7983ba9d7270cc34586d0224e491e30e726d90e060be227b426d5aac3bcf3e4d6c37b4216e208b0a05341a56d89669ffed1a66a342e8924d3617c4b8a7880bdf10afbaddb8aa07fd84851f41e779025270db83785ea0ebd43ecf8ac3bd3a9075bdc1a97a914014726bfc64a2d2d2947fee50195d91234ba48ca3a785733e95039ca847053bab108bcbba20436127be3777f1880e32281651dbe26356c9184d130ce0e69661e47bd9505969e5b2299f9359f5cd9272c7e6e4fb1064512bcfe4baea2a7adc7128966f18146357eb4dfdbd0d16790568f3e6ccf94bacebb7bb060c4e011024350237672fb3fb32f684234869b38bab2aed92549c96fd1272a54ec730daa2fe22013609ab6559c71480cae33dbf0ef89060a91e7e07ec43ee5bb4fc02bffa55a6529d7a6b04ed609ba978161f5599962306e529960bf1c335051216efcbb1c77594f103ff9606491a50c65d596e6e6cc46b2d5e8480bd5144802d5b81b9646b7d965249b3839f1e5ab1f65411889a744d6231fc31446cad25944947aaf5fd912481d36d81c1f4d4f766a8a9f1788e1030cf8b2ceb4e72630f86a96d319a8e568024559a26ffed789a118bd4ce9d6fcc9965cc8260d0cc09c54fd809740f3cf4f501fd056c7cc2c57ecce1e051787d2aaff9a77f083fed3e8dc8937f9e9c873633db3fe886ae9575420636f961bd8ed850a66f36c26c7f21cf045d5781345f05a9bf930f2d19399b413b4fcc4c0afbd7187e5f11bc74cc8c1c9f15ba00cbe14c890f04fbef25fe5bc2a93b4dd331034e0bae25fda41ae03526a77f5538fb080470a73b9b512d4020398173a25398802a9dfd7a9878c929ce16c65b40e0130ce0dd919f86cc86a5a1e2278e9fc8119ac52a9f1195b70e2fdaed99ff628bc5aa0894d96c37304b9b44438e9336611198407ab7ce0a8545799b5c0346b858ab5647ba38cc10b20a8f5add11d81949b412ecf76cf9936ab1c2abb22b8649957717000cadd7387fc5729edc5acfc65a8d6dcd1840a589a81302350313cf7d88987eb8d6c084733929824e664bff0a7027aaba5e4a2c1acbe9045e8e901943d94754efbdcc7fc08f2c52314a6f97b64d4ec6d2cd90a38f20916b646a25f63af7c6e66c00aeed782620ccb7da1a5c23d179d04a406fdcfd479c10b617c9b5894ee4553850421554b0a04cd6ba49f0e809c4a732f203fcd8314f3fb3c68848a37df697a32bd40626fdd1903d4ee0a998ffee0b9c4186af1d8eb8ca93fc9724905fc3664017c81a7c9aa46fcb8466af1fb8245bcd0e7a030342220fd04955a5820212d80dd46bbbcea08b8e94eb23609f27c7181ab2e89650906f5bd3da0a6d59d3ae20908349b5ac1709cf1d5ca97f97d12feb65633ea9097ceb73983225a17abb581f924febae264a9ce8fa9cacbcc1f617a9af8761ec6fc1ac8d92d510b831a4ff7e2bdfb4e55219b8619e701964e7e14914ed55894ee0905c36178122790bc68943bbd3cb95100ce257e9314c0647b374f19665a72ef6b8135f597f6d99fbbf58af04267f5862abdc1253bc4ec21747dcbda6dfbf78d8c12fc11cda17a1721c69ca50f2861229f16aea81ef155595ad78cdb0218be5c39aca5eaddc649aa963e13b95ac46829f438c138c3c38e5f7c2631171ef3cc5bf967ada957203bce81ac029cc744a15553083424952bcf8f91b823d760b4f043497c95aa55b476341b333a7f6ac526e63d736103efb68aa356b6e734a3094de6cbb46e4bdb65b0c0a5d7b38803ecf75da55182fb626c65b038c54989a491ef5336cc43744fee365156c4c5e63e854719e7a51076aa3ad2a02e5b7eb7697d8474f04db6314c9f763fa5ff849209b2dc1cda603fa127151e9d39933575bfb79543d230f185bfd00ca8fe0322dc756ea1b681f3b62c6a47f780a226a120e4e5299234bb03ba0e3d6919c5e9ccc7a725f80080513610c8c71ceefc1e23b98e1961633bb5dce54a7e5504c5b94e4cd5e0f040be3678139c739876b23342b7b058843c93b54432a55f2c233db179c61b405917660e35094df63ecc5acc2f31ccf712346a4703608d19a6075efb326684a127502062707a98504df6230bfd0e97d5b70fc1ba2c90dd61ff909f9d1af8b134a1178112a116823657ac52eb94947fa41d3b8fd65e9790ccb495d1565626d0604ec96bffb5923675f838cdc8567114c7fa5020ed624e1741107feb005476fbf4d855e59d3f8c0be488f34294a5dac5f45363eb8199b2d3813cba42bb9c5a647a99f9fda0c09b507bac2c0a689e2b529425add15adcd37d65db01d09a196f2c233a5b3dcad4facba47be72e5738a2203c03f10643b2be22f057d9478049d0f6376a622151246ffa1ae2d04c14d2a4a758c05bc1f43c100a7613446c4d23851fa5eebefa64da7ff781809091099be7b212cdd52a621002bac81d5082e7713e6a2e29a15b18ef1261e262f0eeebc6348f430d510cc64d4e40d20ae43436b557c2ffffab3892f2e0645bb17bb6d0a439ec7d909a8f3ecc0846cdf4d95855886bd911096033b40ae3b3605c464e053dc6dbc0a38835f1aa0b46acaa036bf847b1364bbe27d381e14204a1e47736c245078049eba40a53e90af1cca53ecb062cb9c7cd4208c56e8cfc2f4931658f9c4540fc53ddd0c63125007986cd02e0d05edca099be1d42e1c1771e5016095d4f5172dca0a83a98e40c218a31d411d6b2f93254fc58ee6145f4e9c3418d817c8d0609988b7b4ca322e6e44006b3d0e37ef14803590f525f7810966801f6c56b1d7e187a4948237a0e2ed8ad60ab468a6dd1330daa135e366072e8c9c7a7096eb6a0ff47cb91656727fe3990c6f738ba3d38ac257f83cb9784d9e9c1d958cd1776fe75a0573c93507cc5a84f808eff3d3096cf7a3594f6a8b43819fe758a5fa587974562fb5563a7372487fd5977bb41806bc277f320c3eab67c325b9492dd1f6906ef96ed5b8fd1f022ceb3f432840451caf63c21517cc6bb7a7b414968f81a6f9a9c5dd4f8d1df13f61dc8e3df12cbd5b315a13b1d39c08bd35b8671bf9adb474173a49ae9defaa53fd8c82edff109a1c65d77b4f68dd7d8701806133516b68c9dcf36b860347ffaf8c86af00bd04d18e76a84328578ed63be375ffc22be39819a43ec38f6d0ad2c4b9e0c3303c75f847c9a3bb4a475fe4ef8ea7d2947d9adb30ff17f11ab2991e91ea5d921a0fe99b897a736a22dc2b69b97f8447397334d8cd1dff4f5cb55bfc394e45fd51dc50a4b0c1e1b9f0637083afccd39c0112ff8c91848e2481acf58c8c6e2d21bd61d4716b5f1738c9ca07c9659867a604a569717b4eb0575543d8a3804bd146688d713d4b0d9df86988412c4d0872a657ff954b88ba773cccbd0ab82b3b1394622c15da2cb73bd57353c85da07a98e153a2d27f99c8ed644c3533b6a8719f830852b93230887bf52b2bd60ebf7347aac9606b34eb94697635900e1c0e361d4bb41f02ce336559c78b12592fcf71811ac658b6c8259d3be52035bba026437be2cff139e986e3add9a5649b26e9369fe123c6116b0f7593ad3ff3d6a0a70732c414b2e9ca6f554edc7f00c6f86d2e1e756b32d7b9fb22022b1eed0e59d7fe80f08448aa23ed4e53904481acdd069fcf6469a88d28853766763c2803527139a2dd5169b8dda0c25e2f596412fdba180ba892534c3e815fdcd04e1f3c87acffa4d7198f483cfb3da6a9930ebb26421d6866d23904e024a61211c29f900e86d1007a954ad29eb7805ed08c36494e39cb236c395c848f4e82e6f02caec73aa6204f2f5c07bad93bc04820718be19a7ace2be9b0d94949a029f750ad284bd83babb38bd309a588e44e577e8e01fbc5c3c24bb4db36c6fc78f943a854a9049991ab00be0cf21511f97fb1edb9bc3d78d6deaa97dc7da6ad00c02c5c77950fef2376b88ce034612ed1e6f0e3161c715ea127696516801ab2a662c0d5dfc7ff7585f3de1e326f036530a4652b82adc3493d4cfd431c68e0c4c82b12e3fd4e547197e663ffa1dfa0d5f228f2b0bd9b0cf2e1180c375bec44e8dcb7", 0xd9d}], 0x1}, 0x40004) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x87, &(0x7f0000000f40), &(0x7f0000000f80)="3ac1fc818d5a4ddd356a7f8bc6bc26f6da723e6050d2502259501e6051e95b2c072c9d17173353c9813332797681e9a774f523fc6b0eb310a16d0febde70d804541d872af2e04a2519746a28b818c680eaf361ceba6c939cb765e067d8990225efa37c81b0df75618baa51522b599f5409a4af71965792d1bf1fac0c4476d2619288cb043c3dff", 0x1, 0x0, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r3, @ANYRES16=r8, @ANYBLOB="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"], 0x3c}}, 0x20008000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf2516000000c53a0300", @ANYRES32=r4, @ANYBLOB="0a001a000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800eb468300ff8d5d5649d1f0b57511e58a9b86c2a557618f33e356e0efbd895ac7bd5f4116c5e88edc8aba070d8f8f6d783d3e7d60a601cbe8c7184b25a58c409b712ae29a32660712733267aed37ab0049473bbfc1bed5bea"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) shutdown(r10, 0x1) recvmmsg(r10, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) (async) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={0x0, 0xd1b, 0x5, 0x1}) ioctl$BTRFS_IOC_SCRUB(r11, 0xc400941b, &(0x7f00000009c0)={r12, 0xffffffffffff121c, 0x5}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073698100140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.980646857s ago: executing program 4 (id=3576): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x8001) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000080)=0xe, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1d, 0xf, 0xe7, 0xdb, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket(0xa, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0xfc, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x80, 0x2, 0x1, 0xf6e3, 0x6, 0x2}}, {0x8, 0x2, [0x7, 0x9]}}, {{0x1c, 0x1, {0x0, 0x7, 0x8, 0x2, 0x0, 0xe, 0x2, 0x5}}, {0xe, 0x2, [0xac60, 0x4, 0x4b, 0x7, 0x7]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffff00000200000008000300", @ANYRES32, @ANYBLOB="0c0099000200000023000000080026003c14000008009f00"], 0x40}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd2, 0x78}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400d4}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1405, 0x10, 0x70bd29, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r9, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) 1.498330952s ago: executing program 2 (id=3577): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) close(0x4) (async, rerun: 32) getsockname$l2tp6(r0, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'dvmrp1\x00', 0x0}) sendto$packet(r3, &(0x7f00000004c0)="cf15306bd425478450fc08f04a51b4a44afcaf4a6e725dbabf3ec645f012797597b25495594381b3a87333ddfe", 0x2d, 0x810, &(0x7f0000000540)={0x11, 0x18, r5, 0x1, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000400000b7080000000000007b8af8ff00000000bfa2000008000000b70400000000000085000000030000009500"/72], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_int(r10, &(0x7f0000000000)=0x8, 0x12) close(r10) (async) splice(r9, 0x0, r10, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in6=@private0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) (async) syz_emit_ethernet(0x17b, 0x0, 0x0) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000880) (async, rerun: 32) r11 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @empty, 0x9}, 0x1c) (async, rerun: 64) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000580)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0xa0, 0x0, 0x89, r4, 0xee01}, {0x5, 0xffffffff, 0xfffffffffffffff8, 0x6, 0x7, 0x0, 0x10001, 0x12}, {0x4, 0x2, 0x1800000000, 0x100}, 0x1377, 0x6e6bbb, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d2, 0x33}, 0xa, @in6=@local, 0x3507, 0x1, 0x2, 0x6, 0x4, 0x80000000, 0x2}}, 0xe8) (async, rerun: 64) sendmsg(r11, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000060a010400000000000000000a0000040900010073797a310000000028000480240001800b0001007470726f787900001400028008000340d96ae5d108000140000000010900020073797a3500000000140000001100010000000000000000000a00000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 1.446018793s ago: executing program 3 (id=3578): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000005d47dc5446b446e05f4e75e7456eb2ea3174833037032b9afc8874d5c5f5f37cf835af776d4d8ac08c12428ec11f19dbe76bfbe167f170e4b7b7f52e4f844c2cc53d7f71f53fea9ed5e8c641914b9b8a4248267e1c7db48da90cdcd857046ec756ca3cc34cbf37421be354f733ae64ed88c52e46abd6356dc6c7df852a40addb4bcd515d4fd39d0b", @ANYRES32=0x0, @ANYBLOB="2420040085ad0000340012800e00010069703665727370616e00000020000280060010004e21000008001400ff070000060011004e22000004001200"], 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000080000000000100000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8a0f83371b0d4e668a23b0daea1ffffffbfa400000000000007040000f0ffffffb70200000800000018230000f741dff66e1018f97b3d89f4153c26d0c3bb442f4ae7e58482d5d065e7912b9a0266a4878e04e1bcdaa6bee5", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) unshare(0x400) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500"/96], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_to_team\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000000000000000008004500002c000000000011907800000000e000000100000e220018907804000000000000000004000000000000"], 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x20040600) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000000780)={0x3a, @multicast1, 0x4e21, 0x2, 'nq\x00', 0x10, 0x9, 0x1f}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.330181645s ago: executing program 2 (id=3580): r0 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000380)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x2a, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08060001080006040003000000000040ffffffff0180c20000017f000001"], 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000003c0)=""/181, &(0x7f0000000480)=0xb5) 1.311283093s ago: executing program 0 (id=3581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf254f0000000800030095dabe03358ae12a3ece5e7a4be5667aa66e7c8745cb592e30bb12b6b61006b43abf6acb6af83f0e5301d635de769aa7dcd3a773e8b0a7a7cf11b179fd99106166e7d644689c39d32a439bba3b8bb37b71d710d994b81c45ab9c", @ANYRES8=r0, @ANYBLOB="38007a801400010058d4b125c8ccbaaf9be77b09c5d5e36614080200e48a1f"], 0x54}, 0x1, 0x0, 0x0, 0xcd}, 0x4050) 1.285566558s ago: executing program 4 (id=3582): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004180000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 1.218376639s ago: executing program 1 (id=3583): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x4, 0x3}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800020072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800020072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) close(r0) (async) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f0000000300)=':\xf7-$', 0x204002, &(0x7f0000000340)={@align=0x5, {0x6, 0x2, 0x80000000, 0x6}}, 0xfffffffa, &(0x7f0000000380), &(0x7f00000003c0)=0x2}, {[0x8, 0xc3, 0x950, 0x9]}, 0x7, 0xc0, &(0x7f0000000480)=""/192}) syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}}, 0x4008081) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1412, 0x88ee8222d7f5badd, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) clock_gettime(0x9, &(0x7f0000000280)) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000880)={r4, 0x0, 0x6, 0x5, 0x80000000, 0x8, [0x5, 0x13f2, 0xfff, 0xc5, 0x2, 0x3]}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c4) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c4) 1.152735316s ago: executing program 0 (id=3584): socket(0x2, 0x80805, 0x0) (async) close(0x4) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030408bd780000000010f87065babd3c4d8e7145fbad725a7d9f01bae5d260179aa152492223d9c20335bb9b45e4e1d99dc036ad9e7634ef82a133246873c84b246bbb000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff000000000100e6be6da47885f383f5a9e3cab6ece55500000000000072b6079a845931528dc2b2313cd64cd0a361d8ca684ae67d4cb5323c07c9", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800900010069706970000000000c00028008000100", @ANYRES32=r6, @ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="000d3195006fa448785b39c07af42d71d5a4cc5783cac058d2bd1c7962f81be965470d1772e09234"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xfff2, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7ff}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x20000002) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f00000003c0)=0x1) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 32) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) 1.130969011s ago: executing program 4 (id=3585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c80)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000001640)={&(0x7f00000016c0)=ANY=[@ANYBLOB="e00e0000", @ANYRES16=r4, @ANYBLOB="02002dbd7000ffdbdf25830000000800", @ANYRES32=r5, @ANYBLOB="0c009900fffeffff2d00000008001001080000000a000600080211000001000008001001020000005808118054080580200300800a00010008021100000100000a000100ffffffffffff00007001038074000180100001800400090004000b00040009001c0001800500060010000000050006000600000004000a00040008000c00018004000c0004000b0018000180050003000b000000060004000600000004000b000c0001800600040007000000140001800500070007000000050003000a000000f400018020000180050007000800000005000700ab0000000500050001000000040009003000018004000a0004000900050003000f00000004000c000600040001000000050005000f00000004000b00040009000c00018005000500030000002c00018004000800050006001f0000000800020004000000050005000900000004000a0004000b0004000a00180001800500060015000000080002000200000004000b001c00018004000b00050006001900000004000a00050005000d00000034000180060004000008000004000a00060004007f000000050005000000000004000a0004000800040001000500070004000000040002001000038004000200040002000400020078010380040002002001018018000180050003000d0000000500070000000000040009001c00018008000200020000000500030000000000050005000e00000010000180050006000000000004000b00400001a0050006000900000004000100040008000400080004000900060004002c2f0000040001000500070009000000050003000d0000000500050002000000240001800500070007000000050006000e000000080002000200000006000400018000002c000180050006000b0000000400010004000a0004000a000500060003000000050006000a000000040008003c000180050003000c0000000400080005000300040000000400010004000800040001000500050001000000060004009800000005000700080000000c0001800400010004000b005000018018000180050006001c00000004000b000500060018000000100001800400090004000c000400090010000180050003000f000000040009001400018005000700000000000400090004000c000a000100ffffffffffff0000580200803c020380040002009400018008000180040009004c000180080002000000000004000a00040001000800020003000000050003000b000000050006001b000000050005000500000005000600020000000500030008000000050005000200000014000180050005000300000004000b00040001002800018004000a00040009000500050003000000050006000e000000040001000800020004000000040002006c0001800c0001800400080004000b0020000180050007000000000005000300030000000500030006000000040008003c000180050005000800000004000a0004000800050007000900000006000400ff03000004000c0004000b0004000b00050003000f00000004000a00800001803c00018004000b00050005000700000004000a000500070007000000050007000b000000080002000200000004000b000500060008000000040009001c0001800500050001000000040009000500050007000000040009002400018004000b00050005000d00000005000500030000000400090008000200000000007c00018044000180050005000f000000050003000f000000050007000700000005000700010000000500050006000000050005000a000000050003000200000004000a00040009000c000180050003000d0000002000018004000800050003000600000004000b000500070003000000040009000800018004000b0004000200300001802c00018004000100040008000400010004000c0004000a0004000a0004000c0008000200ad9fe46504000a000c00038004000200040002000a0001000802110000010000280000802400028008009f0000000000080026007b090000080027000000000008009f0007000000940000800a000100080211000000000078000380700001800c0001800400010004000c000c00018004000c0004000a0010000180050006000a00000004000800040001803000018004000b00050005000e0000000400010004000a0004000a0004000a000800020001000000060004000c0000001000018004000b0004000b0004000800040002000a000100080211000000000014010080dc000380040002000400020004000200cc0001800c00018006000400010000000c0001800500050004000000140001800400080006000400080000000400080010000180080002000100000004000b001c00018004000b00060004000900000004000c0005000500080000002800018008000200061fe4000500050001000000050005000700000004000b00050006000900000018000180040001000400090004000c000400010004000b00100001800500060011000000040008001400018004000b00050005000c000000040008000c00018004000c000400080034000280080022011903000008002600111700000800a10000100000050018012f0000000800270000000000080026006c090000500000800a000100080211000000000034000280080026007b09000008002600e4160000050018010f000000050019010b00000008002201c901000008009f00000000000a000100ffffffffffff0000b80000800c0003800400020004000200a800038004000200940001801400018004000c0005000600080000000400010010000180080002000000000004000a000c00018006000400ff7f00001c0001800400090005000700010000000800020003000000040001000c00018005000600000000000c00018006000400bf9b00002c00018004000b000400080004000b0005000700f500000006000400ff7f000004000c00050005000a0000000c0001800800018004000100440611804006058030020080b8000380b40001802000018004000b00050005000f00000004000c000400010004000800040001000800018004000a002c00018004000c0004000b0004000b00040008000500060008000000080002000200000005000500010000003c0001800400010004cdfc0885eb3becce81413844000900060004000100000004000c00040008000400010005000600120000000500050002000000040009000500030000000000200001800400010004000b00050005000300000004000c0004000b0004000b003c01038004000200100001800c00018008000200020000000400020004000200580001800c00018008000200030000000c00018005000700010000001c00018005000600100000000800020002000000050003000400000020000180080002000300000004000c000500030002000000080002000400000074000180200001800800020003000000050003000e0000000400080005000500090000003c0001800400080004000b00050006000c00000005000600160000000500070003000000050003000b0000000800020000000000050005000300000014000180060004005d0000000400010004000a00040002004c000180200001800400090008000200030000000400080008000200030000000400010028000180050006000d00000004000b000600040000040000050006000e000000050005000400000014000280080026006c0900000800a0001b3000002400028008002600f41500000800270000000000050019010400000008002201e50100000c040080440002800800a00034b8e13f08002201480300000800a000020000000800a10006000000080027000000000008002600081600000800a000010000000800a100f8ffffff0a000100080211000001000008000380040002005c0303800400020004000200840001801c00018004000b000500050006000000050007004f00000004000a003800018004000b0008000200040000000500060001000000080002000000000005000300070000000400010004000c00050006001a0000002c00018004000c0004000b0004000100050007000600000004000a0004000c0004000c000500070006000000000101802400018004000b000400010004000800050005000a000000050006001b00000004000100100001800400090008000200010000003000018004000c0004000a00040008000400010004000b00080002000400000004000a00080002000000000004000b00200001800500070030000000060004002c04000004000a0005000600150000003000018005000600020000000400090004000b0004000b00080002000300000004000b0004000100050005000a000000040001800c0001800600040004000000380001800800020002000000050005000e000000050003000c0000000400090004000b0004000a000800020003000000080002000100000004000200040002006c0001800c0001800400090004000b001800018008000200010000000400080004000b000400080008000180040008003c000180050007000500000004000a0004000900050003000d000000060004000400000005000700fc00000008000200050000000800020001000000700001800c0001800800020003000000440001800400080008000200030000000800020004000000050006000300000006000400050000000400010005000700090000000400010006000400ff7f000004000a000800018004000a000c00018006000400a60000000800018004000a00c80001803400018004000a00050003000b00000004000900080002000100000006000400080000000800020000000000040009000400010014000180050005000e000000050006001a0000002c000180050005000000000004000a000400090004000900080002000200000004000a00050005000000000028000180050006001600000004000800050006001500000004000a000400090004000c0004000c000800018004000a0008000180040008000c00018004000c0004000c000c0001800500030005000000200001801c00018004000800040009000500060003000000080002000200000004000200040002000400020044000180400001800400080005000500040000000800020004000000050005000600000004000a0004000100050005000800000004000c0004000900050005000400000000000000"], 0xee0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c0000000001010200000000141a0000020000002400000108000200e00000010c00028005000100000000003c0018800800024000000002080002400000d7d608000340ffff8001080003408000000008000240000000000800034000000003050003"], 0x7c}}, 0x0) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r7, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200), 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000004c0)=""/4080, 0x1000}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000002c0)=""/145, 0x87}, {&(0x7f00000014c0)=""/200, 0xc8}], 0x38}, 0x7fff}], 0x4000000000001da, 0x12, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.053802484s ago: executing program 1 (id=3586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r5, 0x952de000) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070200000000000000000100000008000880040000002c00048005000300010000000500030080ff000005000300050000000500030001000000050003000100000008000100030000000800020001"], 0x58}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000480)={0x48, r1, 0x1, 0x70bd25, 0x25cfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x48}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) 1.053114819s ago: executing program 2 (id=3587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="000000000000000000bd00"/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a0000000000006111bb0000000000850000006300000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000001180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a82b39d111babb9972c39e8e3e7cb3aa37e97342a02aed742b10d7f1d15086449a18f06bd8e46b0c0c3e1416ce7d384d93a141cb436dbd8e6e9af782a18d91b26ae1db3c459657f1e0608376dc200c9dd3fdb5cac07afee4259c561d33b4dd7f7702c7c2e226eac8", 0xda}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40000300) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057dcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b990000000000", 0xcb3}], 0x1000000000000066, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000bcfc48e3009800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = socket(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r10, &(0x7f0000000000)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) connect$netlink(r7, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) 940.415838ms ago: executing program 4 (id=3588): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) readv(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/121, 0x79}], 0x1) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4", 0x27}, {&(0x7f0000000300)="193b73", 0x3}], 0x2}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000307ff0008001100ff070000080010000000020008000f"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$kcm(0x29, 0x7, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6eba, 0x0, r5, 0x8, '\x00', r9, r10, 0x1, 0x1, 0x4}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 215.662903ms ago: executing program 1 (id=3589): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x69) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1004}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x6, 0x8, 0x9, 0x30, 0x8}, @exit, @alu={0x4, 0x0, 0x8, 0x3, 0x0, 0xa2ff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004864) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061102c00000000006301480100000000950009000000000012ea7392"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x14) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$XFS_IOC_GOINGDOWN(r5, 0x8004587d, &(0x7f0000000440)=0xa) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r7, 0x201, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040000) sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x41) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) 215.308413ms ago: executing program 0 (id=3590): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="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", 0xfc}], 0x1, &(0x7f0000001fc0)=[{0x100, 0x118, 0x2, "491035d54c398c5c174cd4b062553f0ad94815c87b2338831a0aef095297cb5a5f4bbea28fe74e1639b01832557713e959d30396952ce0258db0a6c882dba959b062d5485236c875c06b2036cc2e6b959b75a82fc48c6190253969911d172b7374b218494a5ecb5f48833be3602957f1c67c6c9c167b70f7347aad459d8533dcdd6a080dacafce815c2e1bc6d151f6335e2a8b33d512d7559751e0950210d64c5b55a7c67b7a6c8064b0803e77b800d15fde05d4908da920c53945bc601a5651d41a8d49f59b9a51dd2f7211c6ca02970b24b4a574005417ba0dce03c5a24909c529222010cebcb95b"}, {0xd0, 0x108, 0x6, "3c09e3b93534baa9c3a2837b2b522a672763051eb56a8acaed8b85f1f17809edbf8b7499be1c333c59d4a3751a46890b5d65078ca12bf56383b3639fea1d3cb1f2aba4170ec8ebdbfde60376555a0b2cc9fb3568b3101ffe40c564bd566c6b6bbe254fe107144934eba3103a98328e82ef08fada5316d4e617add5cc5b1fa44ab31f0a68dbe041bd2f97440990e3a8caad9c2d5e1e95f0a67e2a1fe4c45eb5e23edff22cf9aab41bd6e2bd3f71f714bce5ae9736f35628b6bebbfffcf9bbe48d"}, {0x1010, 0x10d, 0x0, "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"}, {0x38, 0x29, 0x2, "c7211b681e336e5f7c057e53fc67f5d9e02500b9a4a0a7e06a4c5a88c5bcb0065387"}, {0x80, 0x1, 0x2, "af1350e7dabed74971ada41f23b4832b7d670e4cec3363da1aa1733bdca981d3a564daf8cf555d1e86af7a28363e9f52536d4fd3d1f268c5f1e6e75a0ace1522f07c37749390ad200ed63ea972f7e25d24b6e5ba40e8d09d25072c84a4e84dc50aa7e11a18d7c1f25db8218b88568551"}, {0x40, 0x1e2, 0x3, "c37a274b9292ae66f62f9dfd6769efc3fa2191c0d507d1c55edb5c9d4e242382ab83ba5ddb518f153748a58cd5b47a"}, {0x90, 0x11, 0x2000, "a181fe6a2b88ec749ec6b9c3f07697726aafec4d4fae41baa33fbdac9acb95cf4ff25ba6b7e38e116838fa264be5ecac386a44a4d5b6244434b971f391a50be22c75d32a26064ced4965d90220fd7c59b8d3fbb139e8322328e4aa663ca26b7c60111c31fb17e76688d173f36e3e87c528d4f97a1c261bd6b2"}, {0x28, 0x111, 0x8, "b6dd7ee4d3d801095375bdc04622a98c83"}, {0x20, 0x1, 0x9f, "2554d4baa2b99981fdf11c"}], 0x13b0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x2c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="356ee88bd200"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a129cdeecaaf1eca6489c4557d70001002cbd7000fedbdf25f87f140c000efd070001170008000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000180)=0x4, 0x4) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 214.694285ms ago: executing program 1 (id=3591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0xffffffffffffff9a, 0x1, [@m_vlan={0x68, 0x14, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6ee}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1e0}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xa, 0x6, "adfa861ad047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x80}}, 0x8041) 211.043145ms ago: executing program 1 (id=3592): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) accept$nfc_llcp(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x60) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd}, 0x90) 210.602266ms ago: executing program 4 (id=3593): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) accept4(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000240)=0x80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x300}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) 209.612886ms ago: executing program 0 (id=3594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000cf0000000000010000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70400f436a42a008500000095000000181100fc", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x23, 0x0, &(0x7f00000000c0)="882f1242414a4c80b605a700000000000000000000000000000000a7ea08a23eb93287", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 209.046295ms ago: executing program 3 (id=3595): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0xc0, 0x24, 0x200, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x0, 0xc}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x91, 0xd, 0x5, 0x1fcd7e99, 0x1, 0x1, 0x8, 0x3}}, {0xa, 0x2, [0xfff, 0x1, 0x5]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x800}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0xb, 0xa, 0xb, 0xe, 0xd, 0xb, 0x10, 0xa, 0x10, 0xa, 0xe, 0x2, 0x0, 0x6, 0x5, 0xb], 0x0, [0x9, 0x0, 0x7fff, 0x3, 0xe4ab, 0x6, 0x3, 0x8, 0x81, 0x9, 0x7, 0x81, 0x4, 0x0, 0x6, 0xff7f], [0x7, 0x4, 0x7, 0x3, 0xae, 0x5, 0x8, 0x0, 0x14c6, 0x10, 0x5, 0x1, 0x0, 0x6, 0x7ff, 0x2]}}]}}]}, 0xc0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="38007a801400010058d4b125c8ccbaaf9be77b09c5d5e36614080200e48a1f"], 0x54}, 0x1, 0x0, 0x0, 0xcd}, 0x4050) 208.606392ms ago: executing program 1 (id=3596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:*\vrrm'], 0xa) r5 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r8, @ANYBLOB="14000100fff1ffffffffffffff00000000000001080008000204"], 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r10, @ANYBLOB="080008000604000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000f80)) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001708001504008680080006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="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", 0x158}, {&(0x7f0000000100)="65c37adfc6b674abb64808dbf0a6039c4b3951829c713a3af099885235f182c2fa48ec4ae0bcc2e47c2b8ff627edc05dae85845b8e508b828a804c54e59f56f7536108defdf848096d3e6627af3724428b7052dcaa32469f2a52b3ae7468d03b56775b05eb34e056b0f153f2c80487a777ea7e03e19e72ffc9e568754a1db5165fdaeefcab804fd836ee0027ec462d1f1d428802d0400d59996c3aa346ba411357d833e0d7eb83c008e0ee7e3b3762543784faae811716dbd00d41b0fb37819bbcfc665d581c48694483020f95db2365cd5758", 0xd3}, {&(0x7f0000000000)="1fe1ed0d918ef6fdf963eec4dd384b6b8d12a0b5cf28b24325ef8b7f63bf9ff7002793850b78cfbf10c08d28699bfdb452fdbf5194a82c4311bef966b30ad77d411502c98d957dcf50ea17d16af5434e13ebb51b67bc4222be41d29177a85cacb4113dc08d5259bd76d244c4e91df8f6c80da47f35359ab50632f86e8aca53a27ffb534e8899ad4207f2644b4e3ffb6c6b1a5515dcc1c40a6d0ddb3fb536134ee29de721dca7335b6db7fb5af89a40e34e81834a2563a10953caeea7b5c4117b9ea67d", 0xc3}, {&(0x7f00000002c0)="bb712bff9bdaeb8d575ad6f8fe75e3d8662ce8f7e6777d6c383d5df94518d98e22c856a5da89543c8bb9fbd2d46e12816d", 0x31}, {&(0x7f0000000300)="e3000e43e402b6d2b11bc639ec381264cb2d4dc165c0ccb4bf0875582fc93db7cd9181503fa94e9f2bec2e7420117321f8e9145d481d68162df3664cee9130a6997d9ed72c215c2649c57cf8ef5adbb35277836768ebbf9f70ca644ef3ff986a08f4eb36aa4d074450c6dd1bdc9c348478c433fbf70205", 0x77}, {&(0x7f0000000380)="c3f721aea5ace8037094c24542b4591855910a638cf01faab9c7adda98bce86a900a162bb19b5663895445a43e9d9dd0db6da6a60aee9e2ff6b68d3008242b0016cf11c71913b1d3cf211ccb6681df54129bb1e62b8a9f1ed3466773f10786b4d06779c4de6a65c38922b199e5474bdb1f151f06573baa94ebe63d7493d4554a030e6f787948", 0x86}, {&(0x7f0000000440)="59c43330e550d750b1f46c87f9e0594a2cf8fa6290c1adc64789c56e0164f21a93ee85de0f3cc2d9b6658962aaf170d73b91530026d20cc31af7e01a540f77254bbf9d55ec11db757e62ca623de84979d6", 0x51}], 0x7}, 0x0) 157.485251ms ago: executing program 0 (id=3597): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x18080, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x3d4, 0xff, 0x3, 0x8}, {0x7, 0x40, 0x9, 0x80000001}]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000840600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004d4405000000000082000000950000000000000035356d2a6086983bae8af6dc599a65284767f7703c1f99a90ad47d0d7b3298cf720c4f0c48c82ff764eb8d1a39dc43c83e6ed096180b66556c655a4f55751e8d011b9b25f91e14de72e88055640bd59a99b1e220e5a07794e75353244b8b79dc74719c47ee32376b8a8bf231281feb472ab231bccf9e8fd9c24603491b38"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000080)={0x80000002}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r3, 0x25, 0x2}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911059000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0xfff, &(0x7f0000000400)=ANY=[], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800001fd0c0aa457aa77f7300fcff2f03000000000000000061107800000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmmsg$inet(r0, &(0x7f0000002a80), 0x0, 0x2054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000002940)=[{0xfffffffffffffffc}, {&(0x7f00000001c0)="dfbaba43657d30bb8d4c43f9e82eeeb516f70c498afada389691695d0f853d04cc15bdade6c8e4b05fcb649bff9d854db9046684a9e87f7dfd5c5bc9fe896614890d1d9ace1644848200607d5eef359c557745acbc964282a5ccab2ba18fbc", 0x5f}, {&(0x7f0000000380)="b73f9035e731eaee97f699fb9d4261f251a6675b141f63027c3fe6175bfc077bded8b7b5938767758139bea1aa699d6c87e02077e93fcd6f330dd5c3c64b2d281d56c31516eb156b1f71c6454fde77e16b3d5a27842691b197b8a627427f67f178d14343c041ecb6a19302c9f4896d21a6f32290c0e9ec4e57211f2547123d483f662246c836be69a8e9db79fa1bacca993b20be429f711e2c2e42156b434099e3158eb85de22964c18f0a05c8", 0xad}, {&(0x7f0000000440)="229cf61f04ac5ddf75ae208f6bebbe48646ee200c953a4810b9a8ef4cb326ccc8c42bae512bf053f30cf9b1d801b57dc185301007248f705d2943f53b07cd0bc206d10a15371637871ad11a72bb224b02bcca87ff79d56975ae99679d9ee", 0x5e}, {&(0x7f0000000780)="edacba956dca269c21ec755537a88939b99dd89733b80c0c50bcf3928d94d7eeea27c4fd5cb65fda6cc7d9db87ac65abf5b0b68ff5a622db996724193b6aba299ce56e06ba26ddf8ba8d616a49fd8cc0dd26db7de831664b306a8947ef035ed84b36dc8b40fb040869b94e7fd929e5b68d4775b40c75652bcc92bc6d364574b4c9f21477f056a9b1d39b0d36c9ba3ba35c8223085dd8917fd14fc884c093b3d30fbe4eac2852f4c4d475a07bcb2719ae080b470d22e8c74fb654b6d88f175e61b7bc85daaea353422203155fa7cd5cbbf188ef01c968ebb99da823b49bbcba614f2b", 0xe2}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="e88b6416e8", 0x5}, {&(0x7f0000002740)="046c59577c6405de24a66dd44530c7b7f24d25cd2c8de122b043ab9441ecb06e9ebf05cfe8a9b4be87a4807c8bc054e97962bb873d56435fcec8770d66867fefaf163118f5020913fdbf90a255ad338baee8e4c956001f3cb54486faad1898b04fc90a9ef85a37fd6ef5e0bb0ef99f8b", 0x70}, {&(0x7f0000002840)="db825b665c7a26d8773727ebc38500017bc0497dbbfa79ba15b7f5987b3c7f612d608fcb0c10849009b6fec6c4aca34a36989eca5855488fcd61205b346a733841d1d36f2cb5b38d4df5f18dc97d878b5530b501378bbd8ea255d318f9894190a15d59212984b29e8fbda9811bec3d5a46262cbd5dc4cdcfd04da9715e30f96636038dae0155cf4ed3dd87f725c8c089a953e561addc4941b5c719e7d34fff7c2274a6dc8e84b1c49bdd06a47ef27c5383ec2e670de7887feddd88e3c7f2230333fe0b", 0xc3}], 0x117e}}], 0x1, 0x2000c884) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 156.653183ms ago: executing program 3 (id=3598): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000b40)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000f00)={r3, 0x400, 0x0, [0x2, 0x2de, 0x3, 0xfffffffffffffffd, 0x9], [0xd, 0x5, 0x6, 0x6, 0x3c3, 0x1, 0x1000, 0x4, 0x3, 0x7fff, 0x2, 0x9, 0x7f, 0x9, 0xe58, 0x6, 0x800, 0x3, 0x9, 0x7, 0x9, 0xffff, 0x3, 0x6e74, 0x81, 0x8, 0xf15, 0x8, 0x401, 0x4, 0x1, 0x401, 0x1, 0xd, 0x1, 0x61, 0x6, 0x1000, 0xb, 0x18a6, 0x8, 0x6, 0x7, 0xffffffffffffff9e, 0x2, 0x80, 0x9, 0x8000000000000001, 0x66f, 0x5, 0x3, 0xfffffffffffffffd, 0x3, 0x6, 0xa19f, 0x7, 0x0, 0x9, 0x9, 0x5, 0x200, 0x4, 0x2, 0x200, 0x6, 0x4, 0x6, 0x7fff, 0x1, 0x4, 0x4, 0xfffffffffffffff5, 0x0, 0xfff, 0x7, 0x8000000000000000, 0x2e, 0xd7d, 0x8, 0x6, 0x7fffffff, 0xfffffffffffffffe, 0x9, 0x7fffffff, 0x5, 0x8000000000000000, 0x5, 0x8, 0x0, 0x7f, 0x401, 0x9, 0x4, 0x5, 0x5, 0x8000, 0x3, 0x8d8, 0x800, 0x2, 0x84, 0x5, 0x6, 0x96e9, 0x3ff, 0xc, 0x0, 0x0, 0x8a6a, 0xb4e, 0xfffffffffffffffa, 0x6, 0x6, 0x9, 0x2, 0x2, 0x9, 0x80, 0x8000000000000001, 0x7, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000d40)={{r1}, r2, 0x0, @unused=[0x8001, 0x1, 0x5, 0x3], @devid=r3}) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000480)={0x0, 0x26000, 0x800, 0xfffffffe, 0x1}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0xf3a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x1d, &(0x7f0000000b40)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r7, 0x0, 0x0, &(0x7f0000000900), 0x10, 0xf44}, 0x94) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r11, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000c0}, 0x6c050) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x81}, &(0x7f00000000c0)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa1e0, 0x0, 0x0, 0x0, 0x3}, @generic={0x8, 0x6, 0x2, 0x1, 0xf}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xc6, &(0x7f0000000340)=""/198, 0x41000, 0x42, '\x00', 0x0, @fallback=0x2c, r6, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xf, 0x10000, 0x3}, 0x10, r10, r4, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r14, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000000, 0x1}}, 0x40) 40.271188ms ago: executing program 3 (id=3599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x5, 0x100, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x20000084) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10130}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0xf}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004004) 0s ago: executing program 0 (id=3600): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'vlan0\x00', {}, {}, 0x6, 0x1, 0x5a}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x0, 0x4, 0x3, 0x5], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x2, 0x6], 0x2, 0x3}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'sit0\x00', 'geneve0\x00', {}, {0xff}, 0xff, 0x2, 0x22}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) kernel console output (not intermixed with test programs): e the new active one [ 315.983608][T14727] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 315.995128][T13364] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 316.019538][T13364] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 316.051181][T13364] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 316.081302][T13364] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 316.331117][ C0] Dropped outbound packet type=88ca [ 316.594853][T14764] 8021q: adding VLAN 0 to HW filter on device bond10 [ 316.751262][T14771] bond10: (slave veth7): Enslaving as an active interface with an up link [ 317.182319][T14786] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 317.297646][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.371137][ C0] Dropped outbound packet type=88ca [ 317.411329][T13369] net_ratelimit: 26 callbacks suppressed [ 317.411345][T13369] bond5: (slave erspan0): failed to get link speed/duplex [ 317.552042][T13369] bond5: (slave erspan0): failed to get link speed/duplex [ 317.691466][T13369] bond5: (slave erspan0): failed to get link speed/duplex [ 317.794781][T14813] vlan3: entered allmulticast mode [ 317.812188][T14813] bond0: entered allmulticast mode [ 317.818787][T14813] bond_slave_0: entered allmulticast mode [ 317.826070][T14813] bond_slave_1: entered allmulticast mode [ 317.851964][T13369] bond5: (slave erspan0): failed to get link speed/duplex [ 317.924057][T14804] ip6gre2: entered promiscuous mode [ 317.957580][T14829] xt_CONNSECMARK: invalid mode: 254 [ 317.963044][T14804] ip6gre2: entered allmulticast mode [ 318.035252][ T13] bond5: (slave erspan0): failed to get link speed/duplex [ 318.087951][T14836] netlink: 'syz.1.2230': attribute type 1 has an invalid length. [ 318.239843][T14836] bond11: entered promiscuous mode [ 318.411325][ C0] Dropped outbound packet type=88ca [ 318.437389][T14836] bond5: (slave erspan0): Removing an active aggregator [ 318.453172][T13369] bond5: Warning: Found an uninitialized port [ 318.469184][T14836] bond5: (slave erspan0): Releasing backup interface [ 318.523567][T14860] sctp: [Deprecated]: syz.4.2236 (pid 14860) Use of int in max_burst socket option deprecated. [ 318.523567][T14860] Use struct sctp_assoc_value instead [ 318.571229][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 318.776478][T14836] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.816298][T14863] ip6tnl3: entered allmulticast mode [ 318.836434][T13377] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 318.864000][ T6610] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 318.872999][T13377] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 318.900952][T14836] bond11: left promiscuous mode [ 318.980043][T14874] __nla_validate_parse: 16 callbacks suppressed [ 318.980060][T14874] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2241'. [ 319.015909][T14874] netlink: 'syz.2.2241': attribute type 9 has an invalid length. [ 319.053720][T14874] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2241'. [ 319.065822][T14874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2241'. [ 319.083404][T14885] netlink: 'syz.2.2241': attribute type 11 has an invalid length. [ 319.094617][T14885] netlink: 'syz.2.2241': attribute type 11 has an invalid length. [ 319.107450][T14885] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2241'. [ 319.131571][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 319.217581][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2247'. [ 319.451138][ C0] Dropped outbound packet type=88ca [ 319.547894][T14912] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 319.691605][ T5763] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 319.756512][T14923] bond6: (slave gretap2): making interface the new active one [ 319.801402][T14923] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 319.860611][T14926] macvlan2: entered promiscuous mode [ 319.877944][T14926] macvlan2: entered allmulticast mode [ 319.893650][T14926] bond6: entered promiscuous mode [ 319.904112][T14926] gretap2: entered promiscuous mode [ 319.912326][T14926] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.921440][T14926] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 319.941491][ T5763] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 319.951495][T14926] bond6: left promiscuous mode [ 319.961217][T14926] gretap2: left promiscuous mode [ 319.978470][T14941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2260'. [ 319.991729][T14941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2260'. [ 320.129970][T14947] netlink: 'syz.3.2262': attribute type 10 has an invalid length. [ 320.176589][T14953] netlink: 'syz.2.2265': attribute type 3 has an invalid length. [ 320.184792][T14953] netlink: 'syz.2.2265': attribute type 6 has an invalid length. [ 320.431493][T14968] veth0: entered promiscuous mode [ 320.454875][T14968] bond0: entered promiscuous mode [ 320.466574][T14968] geneve4: entered promiscuous mode [ 320.482666][T14966] bond0: left promiscuous mode [ 320.491147][ C0] Dropped outbound packet type=88ca [ 320.493096][T14966] geneve4: left promiscuous mode [ 320.517083][T14966] veth0: left promiscuous mode [ 320.787282][T14997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2275'. [ 320.859422][T14987] netlink: 'syz.0.2275': attribute type 4 has an invalid length. [ 321.138376][T15023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2286'. [ 321.344627][T15034] netlink: 'syz.1.2290': attribute type 1 has an invalid length. [ 321.351756][T15036] netlink: 'syz.1.2290': attribute type 2 has an invalid length. [ 321.400120][T15034] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.434884][T15035] vlan0: entered promiscuous mode [ 321.440178][T15035] bond12: entered promiscuous mode [ 321.445863][T15035] vlan0: entered allmulticast mode [ 321.453867][T15035] bond12: entered allmulticast mode [ 321.464292][T15030] syzkaller0: entered promiscuous mode [ 321.470255][T15030] syzkaller0: entered allmulticast mode [ 321.508817][T15030] netlink: 'syz.2.2288': attribute type 6 has an invalid length. [ 321.531134][ C0] Dropped outbound packet type=88ca [ 321.833877][ T5652] Bluetooth: hci4: link tx timeout [ 321.843720][ T5652] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.557706][T15109] openvswitch: netlink: Invalid VLAN frame [ 322.566530][T15108] ip6gre3: entered promiscuous mode [ 322.571998][ C0] Dropped outbound packet type=88ca [ 322.579344][T15108] ip6gre3: entered allmulticast mode [ 322.585318][T15109] openvswitch: netlink: Invalid VLAN frame [ 322.651185][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 322.666138][T15117] netlink: 'syz.0.2312': attribute type 5 has an invalid length. [ 323.611182][ C0] Dropped outbound packet type=88ca [ 323.830866][T15180] bond13: entered promiscuous mode [ 323.839411][T15180] 8021q: adding VLAN 0 to HW filter on device bond13 [ 323.864908][T15186] bond3: (slave lo): Releasing backup interface [ 323.888707][T15186] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 323.929889][T15186] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 323.945700][ T5645] Bluetooth: hci4: command 0x0405 tx timeout [ 324.058438][T15188] bond13: (slave veth13): making interface the new active one [ 324.087885][T15188] veth13: entered promiscuous mode [ 324.112168][T15188] bond13: (slave veth13): Enslaving as an active interface with an up link [ 324.164482][T15205] __nla_validate_parse: 14 callbacks suppressed [ 324.164498][T15205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2331'. [ 324.248149][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2329'. [ 324.260478][T15211] syzkaller0: renamed from batadv_slave_1 [ 324.324904][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'. [ 324.370093][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'. [ 324.409050][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'. [ 324.576304][T15227] validate_nla: 1 callbacks suppressed [ 324.576329][T15227] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 324.615839][T15227] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2337'. [ 324.651145][ C0] Dropped outbound packet type=88ca [ 324.783312][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 324.944148][T15246] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 324.952426][T15246] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 324.960488][T15244] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2339'. [ 324.981207][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.157253][T15250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 325.167151][T15250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2342'. [ 325.692379][ C0] Dropped outbound packet type=88ca [ 326.143953][T15284] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.268456][T15286] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 326.643489][T15302] netlink: 'syz.1.2356': attribute type 1 has an invalid length. [ 326.694302][T15307] netlink: 'syz.4.2358': attribute type 5 has an invalid length. [ 326.731153][ C0] Dropped outbound packet type=88ca [ 326.742385][T15302] 8021q: adding VLAN 0 to HW filter on device bond14 [ 326.775402][T15308] vlan2: entered promiscuous mode [ 326.781527][T15308] bond14: entered promiscuous mode [ 326.829523][T15308] vlan2: entered allmulticast mode [ 326.855969][T15308] bond14: entered allmulticast mode [ 326.905414][T15302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.928484][T15302] bond14: (slave batadv0): making interface the new active one [ 326.949365][T15302] batadv0: entered promiscuous mode [ 326.955654][T15302] batadv0: entered allmulticast mode [ 326.962618][T15302] bond14: (slave batadv0): Enslaving as an active interface with an up link [ 327.104649][T15320] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 327.430702][T15341] veth0: entered promiscuous mode [ 327.441866][T15340] veth0: left promiscuous mode [ 327.610879][T15346] syzkaller1: entered promiscuous mode [ 327.619903][T15346] syzkaller1: entered allmulticast mode [ 327.771338][ C0] Dropped outbound packet type=88ca [ 327.846023][T15356] netlink: 'syz.3.2372': attribute type 61 has an invalid length. [ 327.870691][T15356] netlink: 'syz.3.2372': attribute type 105 has an invalid length. [ 328.040842][T15361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.812452][ C0] Dropped outbound packet type=88ca [ 329.196842][T15402] __nla_validate_parse: 10 callbacks suppressed [ 329.196860][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2383'. [ 329.202286][T15397] vlan4: left allmulticast mode [ 329.219455][ T5763] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.232997][T15397] bond5: left allmulticast mode [ 329.238071][T15397] geneve3: left allmulticast mode [ 329.251336][T15397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.259793][T15397] ip6gre3: left promiscuous mode [ 329.266440][T15397] ip6gre3: left allmulticast mode [ 329.334685][ T5763] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.397482][ T5755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.515064][ T5755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.572527][ T5763] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.620220][T15412] netlink: 'syz.0.2387': attribute type 83 has an invalid length. [ 329.646988][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.736054][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.804588][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.851138][ C0] Dropped outbound packet type=88ca [ 329.872312][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.002740][ T6610] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 330.002757][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.190134][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 330.321285][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.405557][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 330.599458][T15446] syzkaller0: entered promiscuous mode [ 330.619730][T15446] syzkaller0: entered allmulticast mode [ 330.731190][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 330.734512][T15452] žÿ: renamed from team_slave_1 (while UP) [ 330.891140][ C0] Dropped outbound packet type=88ca [ 331.103545][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2406'. [ 331.125641][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2402'. [ 331.309953][T15470] xfrm1: entered allmulticast mode [ 331.537326][T15489] syzkaller1: tun_chr_ioctl cmd 35108 [ 331.763710][T15504] syzkaller1: entered promiscuous mode [ 331.785501][T15504] syzkaller1: entered allmulticast mode [ 331.823948][T15503] netlink: 'syz.3.2416': attribute type 32 has an invalid length. [ 331.834999][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 331.854021][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 331.870209][T15503] bond11: Setting coupled_control to off (0) [ 331.885973][T15511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2420'. [ 331.931173][ C0] Dropped outbound packet type=88ca [ 331.957389][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 332.034619][T15511] gtp0: entered promiscuous mode [ 332.067965][T15511] gtp0: entered allmulticast mode [ 332.234658][T15536] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2428'. [ 332.270445][T15539] openvswitch: netlink: Actions may not be safe on all matching packets [ 332.424320][T13369] tipc: Subscription rejected, illegal request [ 332.498405][T15556] openvswitch: netlink: Unknown nsh attribute 0 [ 332.521238][T15556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.636402][T15561] ip6gre3: entered promiscuous mode [ 332.661209][ T5652] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.668394][T15561] ip6gre3: entered allmulticast mode [ 332.705000][T15561] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 332.732022][T15567] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 332.966175][T15578] tipc: Enabling of bearer rejected, already enabled [ 332.971154][ C0] Dropped outbound packet type=88ca [ 333.521703][T15592] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 334.011186][ C0] Dropped outbound packet type=88ca [ 334.388744][T15670] __nla_validate_parse: 7 callbacks suppressed [ 334.388761][T15670] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2464'. [ 334.449219][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2464'. [ 334.568609][T15680] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 334.586133][T15674] bridge0: port 1(batadv0) entered blocking state [ 334.595296][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2464'. [ 334.604677][T15674] bridge0: port 1(batadv0) entered disabled state [ 334.611355][T15683] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 334.619560][T15674] batadv0: entered allmulticast mode [ 334.628164][T15674] batadv0: entered promiscuous mode [ 334.718159][T15680] 8021q: adding VLAN 0 to HW filter on device bond15 [ 334.738076][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2464'. [ 334.796475][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2468'. [ 334.832369][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2468'. [ 335.051141][ C0] Dropped outbound packet type=88ca [ 335.076882][T13365] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 335.086674][T13365] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 335.109658][T15710] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 335.285641][T15723] xt_TCPMSS: Only works on TCP SYN packets [ 335.304662][T15721] can: request_module (can-proto-0) failed. [ 335.318379][T15723] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2475'. [ 335.497955][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 335.590046][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 336.000302][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 336.020043][T15770] geneve3: entered promiscuous mode [ 336.029478][T15770] geneve3: entered allmulticast mode [ 336.091147][ C0] Dropped outbound packet type=88ca [ 336.125601][T15777] netlink: 'syz.0.2493': attribute type 1 has an invalid length. [ 336.844666][T15811] netlink: 'syz.0.2506': attribute type 1 has an invalid length. [ 337.131145][ C0] Dropped outbound packet type=88ca [ 337.829488][T15862] syzkaller1: entered promiscuous mode [ 337.836676][T15862] syzkaller1: entered allmulticast mode [ 338.171160][ C0] Dropped outbound packet type=88ca [ 338.908022][T15900] netlink: 'syz.1.2533': attribute type 2 has an invalid length. [ 338.929196][T15900] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 339.150902][T15916] netlink: 'syz.3.2537': attribute type 111 has an invalid length. [ 339.211502][ C0] Dropped outbound packet type=88ca [ 339.353207][T15923] ªªªªªª: renamed from veth0 [ 339.408294][T15925] netlink: 'syz.3.2540': attribute type 11 has an invalid length. [ 339.475982][T15929] netlink: 'syz.3.2540': attribute type 11 has an invalid length. [ 339.513757][T15931] __nla_validate_parse: 18 callbacks suppressed [ 339.513773][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 339.546675][T15925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.574738][T15925] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 339.712305][T15939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2544'. [ 340.213948][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2551'. [ 340.251129][ C0] Dropped outbound packet type=88ca [ 340.253028][T15961] 8021q: adding VLAN 0 to HW filter on device bond16 [ 340.668090][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 340.680524][T15995] netlink: 'syz.1.2560': attribute type 22 has an invalid length. [ 340.695168][T15995] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2560'. [ 340.883874][T16004] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 340.915971][T16006] netlink: 'syz.1.2564': attribute type 10 has an invalid length. [ 340.976055][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.986222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.996519][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.006622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.085395][T13377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.098118][T13377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.291122][ C0] Dropped outbound packet type=88ca [ 341.366624][T16028] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2569'. [ 341.406291][T16032] vlan5: entered promiscuous mode [ 341.411656][T16032] bridge0: entered promiscuous mode [ 342.020847][T16063] syzkaller0: entered promiscuous mode [ 342.039575][T16063] syzkaller0: entered allmulticast mode [ 342.203945][T16075] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 342.331148][ C0] Dropped outbound packet type=88ca [ 342.376522][T16084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 342.459334][T16090] veth0: entered promiscuous mode [ 342.478528][T16091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2582'. [ 342.535672][T16091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.545404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.574145][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 342.592053][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2584'. [ 342.594415][T16089] veth0: left promiscuous mode [ 342.731317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.741669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.750789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.906736][T16108] netlink: 'syz.1.2590': attribute type 3 has an invalid length. [ 342.962111][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2589'. [ 343.051517][T13369] wlan1: Trigger new scan to find an IBSS to join [ 343.069747][T16117] netlink: 'syz.3.2591': attribute type 1 has an invalid length. [ 343.134752][T16120] netlink: 'syz.4.2593': attribute type 4 has an invalid length. [ 343.248489][T16129] netlink: 'syz.4.2593': attribute type 4 has an invalid length. [ 343.371116][ C0] Dropped outbound packet type=88ca [ 343.439970][T16136] bond0: (slave ip6tnl0): refused to change device type [ 343.476156][T16139] ip6erspan2: entered allmulticast mode [ 344.335530][T16166] syzkaller1: entered promiscuous mode [ 344.353321][T16166] syzkaller1: entered allmulticast mode [ 344.411146][ C0] Dropped outbound packet type=88ca [ 344.662891][T16176] netlink: 'syz.3.2608': attribute type 1 has an invalid length. [ 344.664605][T16171] __nla_validate_parse: 2 callbacks suppressed [ 344.664620][T16171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2607'. [ 344.672113][T16176] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2608'. [ 344.695610][T16176] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2608'. [ 344.710026][T16176] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2608'. [ 344.713446][T16171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2607'. [ 344.728536][T16176] net_ratelimit: 4 callbacks suppressed [ 344.728559][T16176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.745292][T13369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.753536][T13369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.762202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.120269][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 345.205571][T16185] sctp: [Deprecated]: syz.4.2611 (pid 16185) Use of int in maxseg socket option. [ 345.205571][T16185] Use struct sctp_assoc_value instead [ 345.358567][T16192] netlink: 298 bytes leftover after parsing attributes in process `syz.4.2614'. [ 345.370271][T16192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.371315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.414620][T16203] netlink: 'syz.1.2616': attribute type 49 has an invalid length. [ 345.451618][ C0] Dropped outbound packet type=88ca [ 345.717881][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 345.738558][T16219] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2618'. [ 345.968525][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 346.017556][T13369] wlan1: Trigger new scan to find an IBSS to join [ 346.091134][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 346.098868][T13377] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.491142][ C0] Dropped outbound packet type=88ca [ 346.556448][T16256] netlink: 'syz.3.2631': attribute type 22 has an invalid length. [ 346.732918][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.741223][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.749917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.758272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.829833][T16272] netlink: 'syz.2.2635': attribute type 11 has an invalid length. [ 347.404741][T16298] macsec0: entered promiscuous mode [ 347.531897][ C0] Dropped outbound packet type=88ca [ 347.758871][T16317] xt_nat: multiple ranges no longer supported [ 347.929543][T16322] bond5: option lp_interval: invalid value (0) [ 347.949379][T16322] bond5: option lp_interval: allowed values 1 - 2147483647 [ 347.962157][T16329] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 347.963343][T16334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.983707][T16322] bond5 (unregistering): Released all slaves [ 348.011653][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.082705][T16329] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 348.571115][ C0] Dropped outbound packet type=88ca [ 348.659722][T16373] x_tables: duplicate underflow at hook 1 [ 348.981294][T16401] netlink: 'syz.4.2665': attribute type 3 has an invalid length. [ 349.052696][T13364] wlan1: Trigger new scan to find an IBSS to join [ 349.106939][T16407] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.242141][T16411] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.397102][T16418] netlink: 'syz.2.2672': attribute type 5 has an invalid length. [ 349.611152][ C0] Dropped outbound packet type=88ca [ 349.690781][T16443] __nla_validate_parse: 19 callbacks suppressed [ 349.690798][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2677'. [ 349.718466][T16446] vlan3: entered promiscuous mode [ 349.723144][T16443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2677'. [ 349.730738][T16446] hsr0: entered promiscuous mode [ 349.746206][T16446] vlan3: entered allmulticast mode [ 349.751949][T16446] hsr0: entered allmulticast mode [ 349.757278][T16446] hsr_slave_0: entered allmulticast mode [ 349.763734][T16446] hsr_slave_1: entered allmulticast mode [ 349.835389][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 349.850094][T16450] tipc: Enabled bearer , priority 0 [ 349.912235][T16459] netlink: 'syz.1.2682': attribute type 8 has an invalid length. [ 349.930347][T16454] hsr_slave_0: left promiscuous mode [ 349.942256][T13377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.949720][T16454] hsr_slave_1: left promiscuous mode [ 349.986146][T16464] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 350.018230][T16468] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 350.029574][T16468] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2684'. [ 350.051301][T16468] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2684'. [ 350.065146][T16468] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2684'. [ 350.083226][T16450] syzkaller0: entered promiscuous mode [ 350.098577][T16450] syzkaller0: entered allmulticast mode [ 350.115353][T16455] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 350.191661][T16471] tipc: Resetting bearer [ 350.275911][T16449] tipc: Resetting bearer [ 350.338752][T16449] tipc: Disabling bearer [ 350.430458][T16486] x_tables: duplicate underflow at hook 1 [ 350.576024][T13378] net_ratelimit: 1 callbacks suppressed [ 350.576119][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.590128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.605026][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.613607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.651159][ C0] Dropped outbound packet type=88ca [ 350.702311][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2686'. [ 350.711678][T16481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2686'. [ 350.726865][T16500] Unsupported ieee802154 address type: 0 [ 350.741688][T16481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2686'. [ 350.954444][T16509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2694'. [ 351.067382][T16515] netlink: 'syz.1.2697': attribute type 10 has an invalid length. [ 351.084150][T16515] bridge0: port 1(netdevsim1) entered blocking state [ 351.093631][T16515] bridge0: port 1(netdevsim1) entered disabled state [ 351.100558][T16515] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 351.119122][T16515] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 351.197847][T16522] netlink: 'syz.1.2699': attribute type 13 has an invalid length. [ 351.207210][T16522] netlink: 'syz.1.2699': attribute type 17 has an invalid length. [ 351.285396][T16522] 8021q: adding VLAN 0 to HW filter on device .` [ 351.294885][T16522] –: left allmulticast mode [ 351.350725][T16522] syzkaller0: left promiscuous mode [ 351.356658][T16522] syzkaller0: left allmulticast mode [ 351.390750][T16522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.466799][T16522] gtp0: left allmulticast mode [ 351.478824][T16522] ip6erspan1: left allmulticast mode [ 351.512830][T16522] 8021q: adding VLAN 0 to HW filter on device bond8 [ 351.528854][T16522] geneve2: left promiscuous mode [ 351.536261][T16522] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 351.554722][ T5755] syz1: Port: 1 Link ACTIVE [ 351.691115][ C0] Dropped outbound packet type=88ca [ 351.729237][T16537] netlink: 'syz.3.2704': attribute type 1 has an invalid length. [ 351.733752][ T13] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 351.748115][T16537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.756615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.776516][T13377] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 351.801437][T13377] bond3: (slave veth7): making interface the new active one [ 351.814902][T13377] bond3: active interface up! [ 351.851684][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.860056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.883140][T13378] bond9: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 351.919571][T13378] bond9: (slave veth11): making interface the new active one [ 351.942935][T13378] bond9: active interface up! [ 352.044598][T13377] bond7: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 352.064346][T13377] bond7: (slave veth9): making interface the new active one [ 352.077812][T13377] bond7: active interface up! [ 352.125225][T16555] bond7: Removing last ns target with arp_interval on [ 352.257074][T16567] netlink: 'syz.2.2712': attribute type 1 has an invalid length. [ 352.493909][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.658049][T16563] ip6erspan1: entered allmulticast mode [ 352.731124][ C0] Dropped outbound packet type=88ca [ 352.873319][T16579] vlan3: entered promiscuous mode [ 353.133214][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.404072][T16603] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 353.426030][T16607] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 353.458685][T16603] 8021q: adding VLAN 0 to HW filter on device bond17 [ 353.495724][T16603] bond17: (slave veth14): Enslaving as an active interface with a down link [ 353.771782][ C0] Dropped outbound packet type=88ca [ 354.070270][T16646] ip6erspan2: entered allmulticast mode [ 354.287959][T16651] sctp: [Deprecated]: syz.3.2732 (pid 16651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.287959][T16651] Use struct sctp_sack_info instead [ 354.811644][ C0] Dropped outbound packet type=88ca [ 355.249966][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.274344][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.285519][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.301989][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.313203][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.387647][T16700] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 355.408442][T16703] netlink: 'syz.1.2750': attribute type 1 has an invalid length. [ 355.427659][T16700] __nla_validate_parse: 20 callbacks suppressed [ 355.427676][T16700] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2751'. [ 355.501914][T16700] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2751'. [ 355.541692][T16700] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2751'. [ 355.568317][T16703] veth16: entered allmulticast mode [ 355.735454][T13377] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.851573][ C0] Dropped outbound packet type=88ca [ 355.885472][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2753'. [ 355.967740][T13377] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.995059][T16721] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2754'. [ 356.093948][T13377] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.130553][T16721] netlink: 'syz.2.2754': attribute type 16 has an invalid length. [ 356.138936][T16721] netlink: 'syz.2.2754': attribute type 3 has an invalid length. [ 356.147243][T16721] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2754'. [ 356.171356][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 356.292066][T13377] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.333908][T13365] net_ratelimit: 4 callbacks suppressed [ 356.333927][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.348570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.481621][T16740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.490175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.893778][ C0] Dropped outbound packet type=88ca [ 357.372130][ T5645] Bluetooth: hci5: command tx timeout [ 357.383036][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 357.627022][T13369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.635910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.931143][ C0] Dropped outbound packet type=88ca [ 358.971512][ C0] Dropped outbound packet type=88ca [ 359.456669][ T5645] Bluetooth: hci5: command tx timeout [ 359.826386][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 359.874034][T13377] bridge0: port 4(team0) entered disabled state [ 359.886908][T13377] vlan2: left allmulticast mode [ 359.901371][T13377] geneve0: left allmulticast mode [ 359.915346][T13377] vlan2: left promiscuous mode [ 359.936498][T13377] geneve0: left promiscuous mode [ 359.955084][T13377] bridge0: port 3(vlan2) entered disabled state [ 359.982037][T13377] bridge_slave_1: left allmulticast mode [ 360.000176][T13377] bridge_slave_1: left promiscuous mode [ 360.008381][T13377] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.011172][ C0] Dropped outbound packet type=88ca [ 360.030559][T13377] bridge_slave_0: left allmulticast mode [ 360.039034][T16788] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 360.047042][T13377] bridge_slave_0: left promiscuous mode [ 360.055312][T16788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2767'. [ 360.067616][T13377] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.075732][T16788] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2767'. [ 360.086158][T16788] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2767'. [ 360.468552][T13377] bond1 (unregistering): (slave ipip0): Releasing backup interface [ 360.508907][T13377] vxlan0 (unregistering): left promiscuous mode [ 360.515406][T13377] vxlan0 (unregistering): left allmulticast mode [ 360.522933][T13377] team0: Port device vxlan0 removed [ 360.545274][T13377] bond4 (unregistering): (slave bridge1): Releasing active interface [ 360.593116][T13377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.605718][T13377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.615522][T13377] bond0 (unregistering): Released all slaves [ 360.627576][T13377] bond1 (unregistering): Released all slaves [ 360.641879][T13377] bond2 (unregistering): Released all slaves [ 360.655924][T13377] bond3 (unregistering): Released all slaves [ 360.680042][T13377] bond4 (unregistering): Released all slaves [ 360.694209][T13377] bond5 (unregistering): Released all slaves [ 360.709581][T13377] bond6 (unregistering): Released all slaves [ 360.723775][T13377] bond7 (unregistering): Released all slaves [ 360.737645][T13377] bond8 (unregistering): Released all slaves [ 360.752928][T13377] bond9 (unregistering): Released all slaves [ 360.786450][T13377] bond10 (unregistering): Released all slaves [ 360.799695][T13377] bond11 (unregistering): Released all slaves [ 360.815483][T13377] bond12 (unregistering): Released all slaves [ 361.051098][ C0] Dropped outbound packet type=88ca [ 361.085496][T16802] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2770'. [ 361.109916][T13377] : left promiscuous mode [ 361.119044][T16800] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2769'. [ 361.364506][T13377] tipc: Disabling bearer [ 361.371233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.385811][T13377] tipc: Disabling bearer [ 361.405945][T13377] tipc: Left network mode [ 361.453356][T13369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.461860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.531847][ T5645] Bluetooth: hci5: command tx timeout [ 361.925644][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2774'. [ 362.091474][ C0] Dropped outbound packet type=88ca [ 362.237694][T16841] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2776'. [ 362.496810][T16841] nbd1: detected capacity change from 0 to 3 [ 362.546448][T16841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2776'. [ 362.566045][T14935] buffer_io_error: 18 callbacks suppressed [ 362.566148][T14935] Buffer I/O error on dev nbd1, logical block 1, async page read [ 362.655846][ T5645] block nbd1: Receive control failed (result -104) [ 362.854688][T16870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2780'. [ 362.888958][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 363.079257][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2784'. [ 363.136299][ C0] Dropped outbound packet type=88ca [ 363.144952][T16890] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.155814][T16696] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.165570][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.175781][T16696] bridge_slave_0: entered allmulticast mode [ 363.184715][T16696] bridge_slave_0: entered promiscuous mode [ 363.221913][T16696] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.255465][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.284964][T16696] bridge_slave_1: entered allmulticast mode [ 363.307848][T16696] bridge_slave_1: entered promiscuous mode [ 363.330642][T16889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.339297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.374485][T13364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.383262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.497679][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2789'. [ 363.589399][T16696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.611217][ T5645] Bluetooth: hci5: command tx timeout [ 363.622692][T16696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.860355][T16696] team0: Port device team_slave_0 added [ 363.881456][T16696] team0: Port device team_slave_1 added [ 364.019699][T16696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.033006][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.107157][T16696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.153146][T16696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.160132][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.186459][ C0] Dropped outbound packet type=88ca [ 364.232732][T16696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.457266][T16937] openvswitch: netlink: Message has 8 unknown bytes. [ 364.566120][T16696] hsr_slave_0: entered promiscuous mode [ 364.642026][T16696] hsr_slave_1: entered promiscuous mode [ 364.671292][ T30] audit: type=1800 audit(1781255807.266:15): pid=16945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2797" name="memory.swap.current" dev="tmpfs" ino=3073 res=0 errno=0 [ 364.802082][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2798'. [ 364.886640][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 365.098413][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2800'. [ 365.211152][ C0] Dropped outbound packet type=88ca [ 365.265116][T13377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.291355][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 365.451321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.459821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.492032][T13377] team_slave_1 (unregistering): left promiscuous mode [ 365.510327][T13377] team_slave_1 (unregistering): left allmulticast mode [ 365.528008][T13377] team0 (unregistering): Port device team_slave_1 removed [ 366.107796][T16986] __nla_validate_parse: 3 callbacks suppressed [ 366.107812][T16986] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2808'. [ 366.251109][ C0] Dropped outbound packet type=88ca [ 366.292404][T16992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2810'. [ 366.345671][T16998] netlink: 'syz.1.2812': attribute type 11 has an invalid length. [ 366.601842][T17010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2814'. [ 366.662222][T17018] IPv4: Oversized IP packet from 127.202.26.0 [ 366.934593][T17026] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2816'. [ 367.224676][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.233141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.291446][ C0] Dropped outbound packet type=88ca [ 367.597991][T17058] netlink: 'syz.2.2824': attribute type 58 has an invalid length. [ 367.614745][T17058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2824'. [ 367.726579][T13377] IPVS: stop unused estimator thread 0... [ 367.790366][T17062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2824'. [ 367.817108][T17062] tipc: Invalid UDP bearer configuration [ 367.817162][T17062] tipc: Enabling of bearer rejected, failed to enable media [ 368.084059][T17072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2826'. [ 368.148615][T17072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2826'. [ 368.283051][T17082] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2827'. [ 368.331117][ C0] Dropped outbound packet type=88ca [ 368.476603][T16696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.574166][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.597794][T16696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.639660][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2830'. [ 368.682110][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.700563][T16696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.725996][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.827874][T17097] bond19: entered promiscuous mode [ 368.849571][T17103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.863049][T17097] 8021q: adding VLAN 0 to HW filter on device bond19 [ 368.887865][T16696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 368.936683][T16696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.095784][T17117] netlink: 'syz.4.2833': attribute type 1 has an invalid length. [ 369.146501][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.155004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.278928][T17117] bond8 (unregistering): Released all slaves [ 369.371562][ C0] Dropped outbound packet type=88ca [ 369.638080][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.890024][T16696] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.940072][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.947331][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.048156][T13364] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.055399][T13364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.108674][ T5645] block nbd2: Receive control failed (result -1) [ 370.333609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.385296][T17171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.395632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.411671][ C0] Dropped outbound packet type=88ca [ 370.651284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.453193][ C0] Dropped outbound packet type=88ca [ 371.692702][T13369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.701155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.107970][T16696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.387112][T17248] netlink: 'syz.4.2851': attribute type 1 has an invalid length. [ 372.487004][T16696] veth0_vlan: entered promiscuous mode [ 372.492725][ C0] Dropped outbound packet type=88ca [ 372.525347][T16696] veth1_vlan: entered promiscuous mode [ 372.583532][T16696] veth0_macvtap: entered promiscuous mode [ 372.606546][T16696] veth1_macvtap: entered promiscuous mode [ 372.655880][T16696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.688074][T16696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.747501][T13369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.774805][T13369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.845649][T13369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.864564][T13369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.975534][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.984464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.399466][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.425305][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.531204][ C0] Dropped outbound packet type=88ca [ 373.567439][T17281] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 373.582407][T13378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.582887][T17281] __nla_validate_parse: 5 callbacks suppressed [ 373.582900][T17281] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2856'. [ 373.608564][T13378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.612829][T17288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.626238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.639185][T17281] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2856'. [ 373.665335][T17281] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2856'. [ 373.700191][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2858'. [ 374.040610][T17304] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 374.062923][T17304] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 374.215210][T17308] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 374.225979][T17308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2860'. [ 374.363589][T17316] sctp: [Deprecated]: syz.4.2861 (pid 17316) Use of int in max_burst socket option deprecated. [ 374.363589][T17316] Use struct sctp_assoc_value instead [ 374.571116][ C0] Dropped outbound packet type=88ca [ 374.902616][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.910997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.036881][ T5652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.053905][ T5652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.064164][ T5652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.073356][ T5652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.095807][ T5652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.428848][T17345] netlink: 'syz.4.2864': attribute type 1 has an invalid length. [ 375.457563][ T5629] bond0: (slave syz_tun): Releasing backup interface [ 375.469376][ T5629] syz_tun (unregistering): left allmulticast mode [ 375.611111][ C0] Dropped outbound packet type=88ca [ 375.791645][T17358] xt_nfacct: accounting object `\$‚9ZúM#íü¾¦Eµ|¡^cÁ\F9YⳈ«ÃÖ' does not exist [ 375.940276][T13379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.955150][T13379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.347663][T13379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.363750][T13379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.393070][T17385] netlink: 'syz.4.2873': attribute type 2 has an invalid length. [ 376.568025][T13379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.601189][T13379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.651303][ C0] Dropped outbound packet type=88ca [ 376.794645][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 376.817595][ T13] net_ratelimit: 1 callbacks suppressed [ 376.817613][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.831628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.849724][T13379] netdevsim netdevsim3 »»»»»» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.891305][T13379] netdevsim netdevsim3 »»»»»» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.976080][T17412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2877'. [ 377.002600][T17412] unsupported nla_type 48896 [ 377.137660][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2882'. [ 377.211657][ T5645] Bluetooth: hci3: command tx timeout [ 377.308976][T17434] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2883'. [ 377.449835][T17445] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2883'. [ 377.451268][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.580914][T17434] gretap0: entered promiscuous mode [ 377.618921][T17445] 0ªî{X¹¦: renamed from gretap0 [ 377.664693][T17445] 0ªî{X¹¦: left promiscuous mode [ 377.680169][T17445] 0ªî{X¹¦: entered allmulticast mode [ 377.691084][ C0] Dropped outbound packet type=88ca [ 377.710748][T17445] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 378.057970][T13379] bridge0: left allmulticast mode [ 378.077421][T13379] pimreg9: left allmulticast mode [ 378.131376][T17471] x_tables: duplicate entry at hook 1 [ 378.736285][ C0] Dropped outbound packet type=88ca [ 379.086238][T13379] erspan0 (unregistering): left promiscuous mode [ 379.190613][T13379] gretap0 (unregistering): left promiscuous mode [ 379.294235][ T5645] Bluetooth: hci3: command tx timeout [ 379.324333][T17512] netlink: 'syz.1.2893': attribute type 4 has an invalid length. [ 379.595723][T13379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.605909][T13379] bond_slave_0: left allmulticast mode [ 379.614305][T13379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.625404][T13379] bond_slave_1: left allmulticast mode [ 379.634574][T13379] bond0 (unregistering): Released all slaves [ 379.645148][T13379] bond1 (unregistering): Released all slaves [ 379.658974][T13379] bond2 (unregistering): Released all slaves [ 379.677459][T13379] bond3 (unregistering): Released all slaves [ 379.697870][T13379] bond4 (unregistering): Released all slaves [ 379.712716][T13379] bond5 (unregistering): Released all slaves [ 379.728153][T13379] bond6 (unregistering): Released all slaves [ 379.748661][T13379] bond7 (unregistering): (slave veth3): Releasing active interface [ 379.757801][T13379] bond7 (unregistering): Released all slaves [ 379.771111][ C0] Dropped outbound packet type=88ca [ 379.785986][T13379] bond8 (unregistering): (slave veth5): Releasing backup interface [ 379.795776][T13379] bond8 (unregistering): Released all slaves [ 379.809072][T13379] bond9 (unregistering): Released all slaves [ 379.824296][T13379] bond10 (unregistering): (slave veth7): Releasing backup interface [ 379.834959][T13379] bond10 (unregistering): Released all slaves [ 379.849319][T13379] bond11 (unregistering): Released all slaves [ 379.868205][T13379] bond12 (unregistering): Released all slaves [ 379.882036][T13379] bond13 (unregistering): Released all slaves [ 379.919026][T17486] batadv0: entered promiscuous mode [ 379.925138][T17486] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 379.974022][T17516] team0: entered promiscuous mode [ 380.152549][T13379] 5Ò: left promiscuous mode [ 380.229338][T17524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.236854][T17524] IPv6: NLM_F_CREATE should be set when creating new route [ 380.244154][T17524] IPv6: NLM_F_CREATE should be set when creating new route [ 380.308465][T13379] tipc: Disabling bearer [ 380.321259][T13379] tipc: Left network mode [ 380.428231][T13379] IPVS: stopping master sync thread 11085 ... [ 380.811098][ C0] Dropped outbound packet type=88ca [ 380.834890][T17551] netlink: 'syz.1.2902': attribute type 2 has an invalid length. [ 381.271761][T17579] xt_nfacct: accounting object `syz0' does not exist [ 381.371326][ T5645] Bluetooth: hci3: command tx timeout [ 381.474820][T17588] unsupported nlmsg_type 40 [ 381.483063][T17576] tipc: Started in network mode [ 381.486883][T17590] netlink: 'syz.2.2908': attribute type 1 has an invalid length. [ 381.488187][T17592] __nla_validate_parse: 4 callbacks suppressed [ 381.488200][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.496681][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.533856][T17576] tipc: Node identity 7a0068ba2ba, cluster identity 4711 [ 381.535699][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.544939][T17576] tipc: Enabled bearer , priority 0 [ 381.558814][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.594702][T17580] syzkaller0: entered promiscuous mode [ 381.619710][T17580] syzkaller0: entered allmulticast mode [ 381.643270][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.645076][T17589] tipc: Resetting bearer [ 381.657411][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.748778][T17590] bond8: entered promiscuous mode [ 381.754729][T17590] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.774363][T17588] syzkaller0: entered promiscuous mode [ 381.780334][T17588] syzkaller0: entered allmulticast mode [ 381.796108][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 381.805470][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.805483][T17575] tipc: Resetting bearer [ 381.820477][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 381.823762][T17599] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2909'. [ 381.851148][ C0] Dropped outbound packet type=88ca [ 381.857987][T17575] tipc: Disabling bearer [ 381.902184][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 382.046430][T17327] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.062392][T17327] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.069838][T17327] bridge_slave_0: entered allmulticast mode [ 382.078068][T17327] bridge_slave_0: entered promiscuous mode [ 382.191736][T17327] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.218581][T17327] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.244936][T17327] bridge_slave_1: entered allmulticast mode [ 382.266764][T17327] bridge_slave_1: entered promiscuous mode [ 382.454719][T17327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.505870][T17327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.680085][T17327] team0: Port device team_slave_0 added [ 382.746331][T17327] team0: Port device team_slave_1 added [ 382.766971][T17642] openvswitch: netlink: Duplicate or invalid key (type 0). [ 382.804307][T17642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.891099][ C0] Dropped outbound packet type=88ca [ 382.943071][T17327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.957998][T17327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.987884][T17327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.010166][T17327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.019544][T17327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.060748][T17327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.288994][T17327] hsr_slave_0: entered promiscuous mode [ 383.302831][T17327] hsr_slave_1: entered promiscuous mode [ 383.316989][T17327] debugfs: 'hsr0' already exists in 'hsr' [ 383.342731][T17327] Cannot create hsr debugfs directory [ 383.452220][ T5645] Bluetooth: hci3: command tx timeout [ 383.708649][T17679] ip6gre4: entered promiscuous mode [ 383.741634][T17679] ip6gre4: entered allmulticast mode [ 383.894117][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 383.931115][ C0] Dropped outbound packet type=88ca [ 384.357722][T13366] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.376109][T13366] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.389805][ T6616] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.493225][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 384.691484][ T6616] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.705844][T13379] hsr_slave_0: left promiscuous mode [ 384.722163][T13379] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 384.731512][ T6616] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.741102][T13379] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 384.753433][T13379] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 384.772140][T13379] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 384.802478][T13379] veth1_macvtap: left promiscuous mode [ 384.809656][T13379] veth0_macvtap: left promiscuous mode [ 384.817145][T13379] veth1_vlan: left promiscuous mode [ 384.822601][T13379] veth0_vlan: left promiscuous mode [ 384.971450][ C0] Dropped outbound packet type=88ca [ 385.131775][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 385.203752][T13364] smc: removing ib device uyz0 [ 385.273912][ T6619] uyz0: Port: 1 Link DOWN [ 385.646703][T17733] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 385.695650][T13364] smbdirect: ib_dev[uyz0] removed [ 386.011229][ C0] Dropped outbound packet type=88ca [ 386.628858][T17773] __nla_validate_parse: 24 callbacks suppressed [ 386.628876][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2943'. [ 386.747622][T17778] tun0: tun_chr_ioctl cmd 1074812117 [ 386.766971][T17773] batadv0: Device is already in use. [ 386.974142][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 386.995085][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 387.008809][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 387.025771][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 387.039527][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 387.051208][ C0] Dropped outbound packet type=88ca [ 387.320704][T17791] ip_vti0: entered promiscuous mode [ 387.373439][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 387.566694][T17803] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 387.657561][T17803] syzkaller1: entered promiscuous mode [ 387.666779][T17803] syzkaller1: entered allmulticast mode [ 388.091133][ C0] Dropped outbound packet type=88ca [ 388.126021][T17814] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 388.251162][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 388.263501][T17327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.320434][T17327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.349375][T17327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.390580][T17327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.568723][T17327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.607437][T17327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.635666][T17327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.697402][T17327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.895644][T17327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.977321][T17327] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.016110][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.023379][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.074299][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.081551][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.131130][ C0] Dropped outbound packet type=88ca [ 389.406787][T13379] IPVS: stop unused estimator thread 0... [ 390.171151][ C0] Dropped outbound packet type=88ca [ 390.287044][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2964'. [ 390.299716][T17905] netlink: 'syz.4.2964': attribute type 5 has an invalid length. [ 390.314375][T17905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2964'. [ 390.342434][T17905] geneve5: entered promiscuous mode [ 390.368096][T17905] geneve5: entered allmulticast mode [ 390.382349][T17911] netlink: 'syz.0.2966': attribute type 10 has an invalid length. [ 390.401754][T17912] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2964'. [ 390.435797][T17911] team0: Device vxcan1 is of different type [ 390.463942][T13378] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 390.498430][T13378] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 390.568096][T13378] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 390.590080][T13378] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 390.617925][T17327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.829043][T17327] veth0_vlan: entered promiscuous mode [ 390.854887][T17928] netlink: 'syz.4.2972': attribute type 13 has an invalid length. [ 390.909306][T17934] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 390.974275][ T6608] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 391.044535][T17327] veth1_vlan: entered promiscuous mode [ 391.169162][T17327] veth0_macvtap: entered promiscuous mode [ 391.209867][T17327] veth1_macvtap: entered promiscuous mode [ 391.211063][ C0] Dropped outbound packet type=88ca [ 391.269037][T17954] netlink: 'syz.0.2980': attribute type 4 has an invalid length. [ 391.273880][T17327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.323583][T17962] netlink: 'syz.0.2980': attribute type 4 has an invalid length. [ 391.403661][T17961] bond9: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 391.417824][T17961] bond9 (unregistering): Released all slaves [ 391.445401][T17327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.467151][T13364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.478560][T13364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.504571][T13364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.545373][T13364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.574625][T17968] bridge1: entered allmulticast mode [ 391.701991][T17971] x_tables: unsorted entry at hook 2 [ 391.726255][T17973] __nla_validate_parse: 3 callbacks suppressed [ 391.726271][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 391.780278][T17973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2984'. [ 391.888605][T13364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.900098][T13364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.931418][ T5763] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 391.998115][T13365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.007884][T13365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.251556][ C0] Dropped outbound packet type=88ca [ 392.363880][T18002] openvswitch: netlink: Missing valid actions attribute. [ 392.391674][T18000] syzkaller1: entered promiscuous mode [ 392.398941][T18002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.420031][T18000] syzkaller1: entered allmulticast mode [ 392.578755][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.599182][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.607879][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.616281][T18005] bridge0: port 1(vlan0) entered blocking state [ 392.628546][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.636104][T18005] bridge0: port 1(vlan0) entered disabled state [ 392.636321][T18005] vlan0: entered allmulticast mode [ 392.636338][T18005] dummy0: entered allmulticast mode [ 392.639809][T18005] vlan0: entered promiscuous mode [ 392.659821][T18005] dummy0: entered promiscuous mode [ 392.675830][T18009] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2993'. [ 392.677016][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.828261][ T1710] block nbd1: Possible stuck request ffff888026e67000: control (read@0,1024B). Runtime 30 seconds [ 393.055075][T18024] netlink: 'syz.4.2996': attribute type 4 has an invalid length. [ 393.104637][T18024] netlink: 'syz.4.2996': attribute type 4 has an invalid length. [ 393.178466][T18024] netlink: 'syz.4.2996': attribute type 4 has an invalid length. [ 393.291083][ C0] Dropped outbound packet type=88ca [ 393.703309][T18061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3004'. [ 393.713828][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3004'. [ 393.847814][T18068] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 393.876084][T18068] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3005'. [ 393.905015][T18068] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3005'. [ 393.959597][ T6608] IPVS: starting estimator thread 0... [ 393.973249][T18074] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3007'. [ 394.025170][T18074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3007'. [ 394.055433][T18080] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3007'. [ 394.101644][T18079] IPVS: using max 34 ests per chain, 81600 per kthread [ 394.331064][ C0] Dropped outbound packet type=88ca [ 394.679361][T18112] tipc: Started in network mode [ 394.706012][T18112] tipc: Node identity ac14140f, cluster identity 4711 [ 394.733693][ T5645] Bluetooth: hci1: command tx timeout [ 394.742053][T18112] tipc: Enabled bearer , priority 10 [ 394.767245][T18112] netlink: 'syz.3.3016': attribute type 10 has an invalid length. [ 394.896778][T18112] team0: Port device geneve1 added [ 394.983389][T18006] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.001185][T18006] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.009669][T18006] bridge_slave_0: entered allmulticast mode [ 395.045886][T18006] bridge_slave_0: entered promiscuous mode [ 395.063548][T18006] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.070906][T18006] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.081555][T18006] bridge_slave_1: entered allmulticast mode [ 395.092073][T18006] bridge_slave_1: entered promiscuous mode [ 395.149018][T18144] gre1: entered allmulticast mode [ 395.224768][T18006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.254586][T18006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.360210][T18006] team0: Port device team_slave_0 added [ 395.371336][ C0] Dropped outbound packet type=88ca [ 395.400776][T18006] team0: Port device team_slave_1 added [ 395.586578][T18157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.599264][T18157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.611357][T18157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 395.782060][T18006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.789073][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.817023][T18006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.835383][T18006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.842907][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.894842][T18006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.906536][ T6608] tipc: Node number set to 2886997007 [ 396.011185][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 396.015003][T13364] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.068954][T18157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.080841][T18157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.102545][T18187] validate_nla: 1 callbacks suppressed [ 396.102641][T18187] netlink: 'syz.4.3038': attribute type 3 has an invalid length. [ 396.103340][T18157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 396.200504][T18194] vlan0: entered promiscuous mode [ 396.235495][T18006] hsr_slave_0: entered promiscuous mode [ 396.247052][T18006] hsr_slave_1: entered promiscuous mode [ 396.257690][T18006] debugfs: 'hsr0' already exists in 'hsr' [ 396.271656][T18006] Cannot create hsr debugfs directory [ 396.291873][T18157] bridge0: port 1(netdevsim1) entered disabled state [ 396.368530][T18203] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 396.387689][T18157] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 396.397061][T18157] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 396.410197][T18157] bridge0: port 1(netdevsim1) entered disabled state [ 396.419054][ C0] Dropped outbound packet type=88ca [ 396.451852][T18157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.467459][T18157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.480294][T18157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 396.667347][T18157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.677913][T18157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.688600][T18157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 396.731655][T18221] __nla_validate_parse: 10 callbacks suppressed [ 396.731673][T18221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3045'. [ 396.750192][T18220] veth1: Caught tx_queue_len zero misconfig [ 396.814791][ T5645] Bluetooth: hci1: command tx timeout [ 397.056772][T18006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.266612][T13379] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.286518][T13379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 397.305206][T13379] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 397.402310][T18233] netlink: 'syz.0.3049': attribute type 3 has an invalid length. [ 397.406303][T18006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.451107][ C0] Dropped outbound packet type=88ca [ 397.460235][T13364] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.483102][T13364] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 397.513185][T13364] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 397.609249][T18006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.666076][T13365] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.691368][T13365] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 397.709933][T13365] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 397.767245][T18006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.788857][T13365] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.797315][T13365] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 397.806327][T13365] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.022365][T18255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.273602][T18273] netlink: 'syz.3.3059': attribute type 3 has an invalid length. [ 398.278787][T18263] syzkaller1: entered promiscuous mode [ 398.328888][T18263] syzkaller1: entered allmulticast mode [ 398.491098][ C0] Dropped outbound packet type=88ca [ 398.532935][T18279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3060'. [ 398.540074][T18006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.558066][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.566938][T18006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.591884][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.602660][T18279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3060'. [ 398.613455][T18006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.635221][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.650748][T18006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.667926][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.760834][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'. [ 398.891286][ T5645] Bluetooth: hci1: command tx timeout [ 399.064321][T18006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.113388][T18006] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.139517][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.146783][T13379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.172336][T18302] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3067'. [ 399.336079][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.343322][T13378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.416878][T18309] netlink: 'syz.4.3069': attribute type 3 has an invalid length. [ 399.531127][ C0] Dropped outbound packet type=88ca [ 399.966896][T18331] batadv0: left promiscuous mode [ 399.978659][T18331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.038288][T18331] vlan0: left promiscuous mode [ 400.105103][T18331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.218662][T18351] tun0: tun_chr_ioctl cmd 1074025680 [ 400.477579][T18006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.571126][ C0] Dropped outbound packet type=88ca [ 400.636030][T18006] veth0_vlan: entered promiscuous mode [ 400.675040][T18006] veth1_vlan: entered promiscuous mode [ 400.797898][T18006] veth0_macvtap: entered promiscuous mode [ 400.800301][T18382] netlink: 'syz.4.3084': attribute type 3 has an invalid length. [ 400.850242][T18006] veth1_macvtap: entered promiscuous mode [ 400.954448][T18006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.971484][ T5645] Bluetooth: hci1: command tx timeout [ 401.007764][T18006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.069924][T13369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.116328][T18362] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 401.116404][T13369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.154003][T18362] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 401.173884][T13369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.203525][T13369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.209750][T18402] netlink: 'syz.4.3087': attribute type 1 has an invalid length. [ 401.217465][T18398] can: request_module (can-proto-3) failed. [ 401.309958][T18402] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3087'. [ 401.486994][T18419] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 401.503219][T18409] netlink: 'syz.4.3087': attribute type 23 has an invalid length. [ 401.518124][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.529918][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.539594][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 401.572733][T18421] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3091'. [ 401.575833][T18419] bond1: entered promiscuous mode [ 401.588346][T18419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.611070][ C0] Dropped outbound packet type=88ca [ 401.725181][T13369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.753174][T13369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.087395][T18435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3095'. [ 402.117804][T18435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3095'. [ 402.217034][T18446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2989'. [ 402.276807][T18447] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2989'. [ 402.489462][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.512144][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.523059][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.536767][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.545531][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.651079][ C0] Dropped outbound packet type=88ca [ 402.858705][T18459] syzkaller0: entered promiscuous mode [ 402.871126][T18459] syzkaller0: entered allmulticast mode [ 402.993952][T18463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3098'. [ 403.050407][T18471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3100'. [ 403.096901][T18471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3100'. [ 403.428139][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'. [ 403.465288][T18491] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3104'. [ 403.523904][T18491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3104'. [ 403.607678][T18498] netlink: 'syz.2.3106': attribute type 1 has an invalid length. [ 403.692668][ C0] Dropped outbound packet type=88ca [ 404.652568][ T5645] Bluetooth: hci2: command tx timeout [ 404.733217][ C0] Dropped outbound packet type=88ca [ 404.900843][T18462] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 405.771059][ C0] Dropped outbound packet type=88ca [ 406.648228][T18499] erspan1: entered allmulticast mode [ 406.676979][T18509] syz.2.3106 (18509) used obsolete PPPIOCDETACH ioctl [ 406.731098][ T5645] Bluetooth: hci2: command tx timeout [ 406.811123][ C0] Dropped outbound packet type=88ca [ 406.903081][T18529] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 407.028260][T18529] bond2: entered promiscuous mode [ 407.033963][T18529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.104964][T18529] __nla_validate_parse: 1 callbacks suppressed [ 407.104980][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3115'. [ 407.181295][T18529] bond2: entered allmulticast mode [ 407.202744][T18448] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.210140][T18448] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.219264][T18448] bridge_slave_0: entered allmulticast mode [ 407.227612][T18448] bridge_slave_0: entered promiscuous mode [ 407.237131][T18448] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.244766][T18448] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.252449][T18448] bridge_slave_1: entered allmulticast mode [ 407.260446][T18448] bridge_slave_1: entered promiscuous mode [ 407.333716][T18448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.347050][T18448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.392427][T18448] team0: Port device team_slave_0 added [ 407.402201][T18448] team0: Port device team_slave_1 added [ 407.445797][T18530] netlink: 'syz.1.3114': attribute type 3 has an invalid length. [ 407.463609][T18448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.473599][T18530] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3114'. [ 407.476740][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.514709][T18448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.529352][T18448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.537436][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.564111][T18448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.715399][T18448] hsr_slave_0: entered promiscuous mode [ 407.745463][T18448] hsr_slave_1: entered promiscuous mode [ 407.762701][T18448] debugfs: 'hsr0' already exists in 'hsr' [ 407.774720][T18448] Cannot create hsr debugfs directory [ 407.851107][ C0] Dropped outbound packet type=88ca [ 408.217777][T18448] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.246810][T18448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.264521][T18448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.276585][T18448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 408.519641][T18448] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.544206][T18448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.561698][T18448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.576103][T18448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 408.630777][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 408.658842][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3128'. [ 408.687842][T18585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 408.699809][T18586] netlink: 'syz.0.3128': attribute type 4 has an invalid length. [ 408.707692][T18586] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3128'. [ 408.727919][T18585] netlink: 'syz.3.3131': attribute type 1 has an invalid length. [ 408.767118][T18448] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.787562][T18448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.793294][T18591] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 408.803837][T18448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.817999][ T5645] Bluetooth: hci2: command tx timeout [ 408.823668][T18448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 408.845778][T18591] netlink: 'syz.1.3130': attribute type 11 has an invalid length. [ 408.855344][T18586] .`: renamed from bond0 (while UP) [ 408.879040][T18591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3130'. [ 408.891049][ C0] Dropped outbound packet type=88ca [ 408.893705][T18448] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.906804][T18448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.918453][T18448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 408.929022][T18448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 409.125308][T18601] nbd: must specify at least one socket [ 409.451197][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.457951][ T1126] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 409.474761][T18448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.505437][T18448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.550596][T18615] team0 (unregistering): Port device team_slave_0 removed [ 409.575029][T18615] team0 (unregistering): Port device team_slave_1 removed [ 409.603481][T18448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.620645][T18448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.630008][T18448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.673130][T18448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.694480][T18448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.716015][T18448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.726830][ T5639] IPVS: starting estimator thread 0... [ 409.821501][T18624] IPVS: using max 29 ests per chain, 69600 per kthread [ 409.884045][T18448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.926771][T18448] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.931085][ C0] Dropped outbound packet type=88ca [ 409.955972][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.963211][T13365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.009853][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.017090][T13365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.091519][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 410.217630][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 410.309155][T18650] tipc: Enabled bearer , priority 0 [ 410.325557][T18650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3146'. [ 410.336569][T18650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3146'. [ 410.891274][ T5645] Bluetooth: hci2: command tx timeout [ 410.902004][T18448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.971141][ C0] Dropped outbound packet type=88ca [ 411.010913][T18693] openvswitch: netlink: Multiple metadata blocks provided [ 411.294558][T18713] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 411.573491][T18448] veth0_vlan: entered promiscuous mode [ 411.574054][T18726] netlink: 'syz.2.3164': attribute type 15 has an invalid length. [ 411.588852][T18726] netlink: 'syz.2.3164': attribute type 25 has an invalid length. [ 411.619425][T18448] veth1_vlan: entered promiscuous mode [ 411.699160][T18448] veth0_macvtap: entered promiscuous mode [ 411.742069][T18448] veth1_macvtap: entered promiscuous mode [ 411.879520][T18448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.927588][T18448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.012396][ C0] Dropped outbound packet type=88ca [ 412.028363][T13369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.064852][T13369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.123284][T13369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.135234][T18746] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 412.172616][T13369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.488801][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.516398][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.562879][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.582910][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.767703][T18766] netlink: 'syz.4.3096': attribute type 3 has an invalid length. [ 413.051099][ C0] Dropped outbound packet type=88ca [ 413.276323][T18779] syzkaller0: entered promiscuous mode [ 413.303604][T18779] syzkaller0: entered allmulticast mode [ 413.733789][T18798] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 413.917607][T18809] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.989831][T18809] bridge_slave_0 (unregistering): left allmulticast mode [ 414.014526][T18809] bridge_slave_0 (unregistering): left promiscuous mode [ 414.032866][T18809] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.091138][ C0] Dropped outbound packet type=88ca [ 414.416043][T18819] xt_TPROXY: Can be used only with -p tcp or -p udp [ 414.480398][T18821] __nla_validate_parse: 6 callbacks suppressed [ 414.480438][T18821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3191'. [ 414.507008][T18823] netlink: 'syz.1.3190': attribute type 1 has an invalid length. [ 415.132447][ C0] Dropped outbound packet type=88ca [ 415.226717][T13369] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 415.238772][T13369] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 415.250509][T13369] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 415.283055][T13369] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 415.367674][T18864] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3202'. [ 415.406829][T18864] sctp: [Deprecated]: syz.1.3202 (pid 18864) Use of int in max_burst socket option deprecated. [ 415.406829][T18864] Use struct sctp_assoc_value instead [ 415.458149][T18869] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3202'. [ 415.736646][T18886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3208'. [ 415.852091][ T5645] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 416.144151][T18905] bridge0: port 3(batadv1) entered blocking state [ 416.171090][ C0] Dropped outbound packet type=88ca [ 416.176769][T18905] bridge0: port 3(batadv1) entered disabled state [ 416.226442][T18905] batadv1: entered allmulticast mode [ 416.260154][T18905] batadv1: entered promiscuous mode [ 416.453643][T18906] IPVS: Scheduler module ip_vs_ not found [ 416.622940][ T1126] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 416.632963][ T1126] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 416.977501][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3223'. [ 417.007437][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 417.208419][T18955] netlink: 'syz.3.3225': attribute type 1 has an invalid length. [ 417.211062][ C0] Dropped outbound packet type=88ca [ 417.352467][T18967] sctp: [Deprecated]: syz.2.3228 (pid 18967) Use of int in maxseg socket option. [ 417.352467][T18967] Use struct sctp_assoc_value instead [ 417.879783][ T5755] IPVS: starting estimator thread 0... [ 417.889126][T18985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3236'. [ 417.958085][T18991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3237'. [ 417.983264][T18988] IPVS: using max 34 ests per chain, 81600 per kthread [ 418.055848][T18989] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 418.251105][ C0] Dropped outbound packet type=88ca [ 418.560846][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3248'. [ 418.968884][T19036] syzkaller0: entered promiscuous mode [ 418.977386][T19036] syzkaller0: entered allmulticast mode [ 419.008318][T19040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3253'. [ 419.291049][ C0] Dropped outbound packet type=88ca [ 419.300163][T19059] netlink: 'syz.1.3257': attribute type 13 has an invalid length. [ 420.081371][T19079] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3260'. [ 420.332453][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 420.342408][ C0] Dropped outbound packet type=88ca [ 420.455412][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 421.377578][ C0] Dropped outbound packet type=88ca [ 422.417381][ C0] Dropped outbound packet type=88ca [ 422.477629][T19059] gretap0: refused to change device tx_queue_len [ 422.486709][T19059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 422.550716][T19079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'. [ 422.691890][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'. [ 422.747467][T19086] syzkaller1: entered allmulticast mode [ 422.752959][T19105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 422.935009][ T1710] block nbd1: Possible stuck request ffff888026e67000: control (read@0,1024B). Runtime 60 seconds [ 422.966037][T19113] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3263'. [ 422.977807][T19111] tipc: Failed to remove unknown binding: 66,0,0/0:784779836/784779838 [ 423.001356][T19111] tipc: Failed to remove unknown binding: 66,0,0/0:784779836/784779837 [ 423.167295][T19123] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3270'. [ 423.208267][T19123] netlink: 'syz.2.3270': attribute type 1 has an invalid length. [ 423.227260][T19123] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3270'. [ 423.255614][T19128] sctp: [Deprecated]: syz.4.3272 (pid 19128) Use of int in max_burst socket option deprecated. [ 423.255614][T19128] Use struct sctp_assoc_value instead [ 423.259329][T19123] netlink: 'syz.2.3270': attribute type 10 has an invalid length. [ 423.311947][T19136] netlink: 'syz.2.3270': attribute type 10 has an invalid length. [ 423.368026][T19123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.400795][T19123] team0: Port device netdevsim1 added [ 423.443253][T19135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.458763][ C0] Dropped outbound packet type=88ca [ 423.515389][T19136] team0: Port device netdevsim1 removed [ 423.534265][T19136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.564229][T19136] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 423.710736][T19142] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 423.794133][T19142] bond1 (unregistering): Released all slaves [ 423.899519][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 424.016478][T19161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3279'. [ 424.102612][T19168] IPv6: addrconf: prefix option has invalid lifetime [ 424.109482][T19168] IPv6: addrconf: prefix option has invalid lifetime [ 424.330815][T19186] netlink: 'syz.1.3286': attribute type 1 has an invalid length. [ 424.385714][T19186] bond20: entered promiscuous mode [ 424.420535][T19186] 8021q: adding VLAN 0 to HW filter on device bond20 [ 424.485078][T19190] 8021q: adding VLAN 0 to HW filter on device bond20 [ 424.491117][ C0] Dropped outbound packet type=88ca [ 424.503662][T19190] bond20: (slave ipip0): The slave device specified does not support setting the MAC address [ 424.508615][T19196] netlink: 'syz.0.3290': attribute type 5 has an invalid length. [ 424.535884][T19190] bond20: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 424.619244][T19190] bond20: (slave ipip0): making interface the new active one [ 424.646912][T19190] ipip0: entered promiscuous mode [ 424.676415][T19190] bond20: (slave ipip0): Enslaving as an active interface with an up link [ 425.532715][ C0] Dropped outbound packet type=88ca [ 425.544965][T19229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.686456][T19237] __nla_validate_parse: 6 callbacks suppressed [ 425.686475][T19237] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3300'. [ 426.443753][T19237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.507498][T19237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.571092][ C0] Dropped outbound packet type=88ca [ 426.583708][T19237] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 426.618427][T19237] bond0 (unregistering): Released all slaves [ 427.024080][T19288] netlink: 'syz.2.3308': attribute type 1 has an invalid length. [ 427.057928][T19288] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.3308'. [ 427.250404][T19296] tipc: Started in network mode [ 427.263021][T19296] tipc: Node identity 5, cluster identity 4711 [ 427.286088][T19296] tipc: Node number set to 5 [ 427.310092][T19296] tipc: Cannot configure node identity twice [ 427.374967][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 427.408462][T19292] netlink: 4136 bytes leftover after parsing attributes in process `syz.0.3312'. [ 427.454464][T19292] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3312'. [ 427.497661][T19301] openvswitch: netlink: IP tunnel TTL not specified. [ 427.611026][ C0] Dropped outbound packet type=88ca [ 427.627342][T19309] netlink: 1371 bytes leftover after parsing attributes in process `syz.0.3317'. [ 427.658592][T19313] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3316'. [ 427.689956][T19309] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 427.690110][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'. [ 427.698680][T19309] batman_adv: batadv0: Adding interface: wlan0 [ 427.716515][T19309] batman_adv: batadv0: Interface activated: wlan0 [ 427.973599][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3320'. [ 428.028762][T19331] sit0: entered promiscuous mode [ 428.072020][T19331] netlink: 'syz.1.3323': attribute type 1 has an invalid length. [ 428.100838][T19331] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3323'. [ 428.563271][T19364] netlink: 'syz.4.3331': attribute type 49 has an invalid length. [ 428.662827][ C0] Dropped outbound packet type=88ca [ 428.758273][T19364] ip6gretap0: entered promiscuous mode [ 428.767187][T19364] ip6gretap0: entered allmulticast mode [ 428.816236][ T5645] Bluetooth: hci2: command tx timeout [ 429.182432][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 429.235910][T19395] veth1_to_batadv: entered promiscuous mode [ 429.274515][T19395] veth1_to_batadv: entered allmulticast mode [ 429.691074][ C0] Dropped outbound packet type=88ca [ 429.772960][T19424] xt_TCPMSS: Only works on TCP SYN packets [ 430.026019][T19433] netlink: 'syz.0.3345': attribute type 4 has an invalid length. [ 430.079958][T19430] can: request_module (can-proto-0) failed. [ 430.104967][T19439] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 430.495942][T19460] netlink: 'syz.1.3347': attribute type 11 has an invalid length. [ 430.731087][ C0] Dropped outbound packet type=88ca [ 431.219173][T19490] __nla_validate_parse: 4 callbacks suppressed [ 431.219188][T19490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3360'. [ 431.292093][T19497] IPVS: set_ctl: invalid protocol: 15 255.255.255.255:20003 [ 431.364126][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3362'. [ 431.449006][T19502] syzkaller0: entered promiscuous mode [ 431.461972][T19502] syzkaller0: entered allmulticast mode [ 431.501406][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'. [ 431.548708][T19510] openvswitch: netlink: EtherType 50a is less than min 600 [ 431.613704][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3365'. [ 431.771064][ C0] Dropped outbound packet type=88ca [ 432.190013][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.208218][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.219500][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.230681][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.265399][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.821088][ C0] Dropped outbound packet type=88ca [ 432.877362][T13366] smc: removing ib device syz1 [ 432.907464][ T6610] syz1: Port: 1 Link DOWN [ 432.981313][T13366] smbdirect: ib_dev[syz1] removed [ 433.851127][ C0] Dropped outbound packet type=88ca [ 434.331606][ T5645] Bluetooth: hci4: command tx timeout [ 434.851496][T19528] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.883641][T19528] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.891028][ C0] Dropped outbound packet type=88ca [ 434.936778][T19528] bridge_slave_0: entered allmulticast mode [ 434.968933][T19597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 434.987274][T19528] bridge_slave_0: entered promiscuous mode [ 435.103614][T19613] Bluetooth: MGMT ver 1.23 [ 435.315090][T19597] bond0: entered promiscuous mode [ 435.336225][T19597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.360065][T19528] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.396529][T19528] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.425868][T19528] bridge_slave_1: entered allmulticast mode [ 435.497040][T19528] bridge_slave_1: entered promiscuous mode [ 435.666703][T19607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3386'. [ 435.890259][T19528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.931107][ C0] Dropped outbound packet type=88ca [ 435.950399][T19528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.214834][T19528] team0: Port device team_slave_0 added [ 436.244480][T19528] team0: Port device team_slave_1 added [ 436.336482][T19664] netlink: 'syz.3.3399': attribute type 1 has an invalid length. [ 436.374738][T19666] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3397'. [ 436.411512][ T5652] Bluetooth: hci4: command tx timeout [ 436.482639][T19528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.505990][T19528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.584442][T19528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.614155][T19528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.621438][T19528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.711047][T19528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.971880][ C0] Dropped outbound packet type=88ca [ 436.999843][T19684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3404'. [ 437.009317][T19686] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 437.056066][T19528] hsr_slave_0: entered promiscuous mode [ 437.083052][T19528] hsr_slave_1: entered promiscuous mode [ 437.089784][T19528] debugfs: 'hsr0' already exists in 'hsr' [ 437.096218][T19528] Cannot create hsr debugfs directory [ 437.127326][T19661] netlink: 'syz.0.3397': attribute type 11 has an invalid length. [ 437.307873][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3408'. [ 437.447615][T19704] vlan2: entered allmulticast mode [ 437.453566][T19704] dummy0: entered allmulticast mode [ 437.567874][T19707] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3408'. [ 437.707128][T19706] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3410'. [ 437.828711][T19719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3414'. [ 437.892021][T19528] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.932006][T19528] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 437.950739][T19528] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.011399][ C0] Dropped outbound packet type=88ca [ 438.038915][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'. [ 438.074101][T19726] pim6reg1: entered promiscuous mode [ 438.089696][T19726] pim6reg1: entered allmulticast mode [ 438.112366][T19528] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.122881][T19528] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 438.133438][T19528] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.156730][T19734] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3417'. [ 438.177686][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3417'. [ 438.333286][T19741] vlan2: entered promiscuous mode [ 438.338782][T19741] bridge0: entered promiscuous mode [ 438.400529][T19744] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 438.415655][T19528] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.434553][T19528] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 438.451641][T19528] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.491194][ T5652] Bluetooth: hci4: command 0x040f tx timeout [ 438.603668][T19528] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.627580][T19528] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 438.647951][T19528] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.892219][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 438.927006][T19744] syzkaller0: entered promiscuous mode [ 438.961826][T19744] syzkaller0: entered allmulticast mode [ 439.051049][ C0] Dropped outbound packet type=88ca [ 439.090663][T19757] syzkaller0: entered promiscuous mode [ 439.103841][T19757] syzkaller0: entered allmulticast mode [ 439.133044][T19760] tipc: Started in network mode [ 439.157467][T19760] tipc: Node identity 6690cc1aa3fe, cluster identity 4711 [ 439.197250][T19760] tipc: Enabled bearer , priority 0 [ 440.091089][ C0] Dropped outbound packet type=88ca [ 440.573321][ T5645] Bluetooth: hci4: command 0x040f tx timeout [ 441.131194][ C0] Dropped outbound packet type=88ca [ 441.461311][T13379] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 442.177004][ C0] Dropped outbound packet type=88ca [ 442.371490][ T4999] udevd[4999]: worker [14935] /devices/virtual/block/nbd1 is taking a long time [ 442.654616][ T5645] Bluetooth: hci4: command 0x040f tx timeout [ 442.867756][T19756] tipc: Resetting bearer [ 442.890327][T19756] tipc: Disabling bearer [ 442.910336][ T6610] tipc: Node number set to 3312372762 [ 443.092474][T19785] xt_nat: multiple ranges no longer supported [ 443.108093][T19779] netlink: 'syz.0.3428': attribute type 32 has an invalid length. [ 443.211060][ C0] Dropped outbound packet type=88ca [ 443.428988][T19810] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20001 [ 443.443480][T19809] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3433'. [ 443.564924][T19528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 443.593145][T19820] netlink: 'syz.0.3437': attribute type 3 has an invalid length. [ 443.635000][T19528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.659632][T19528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 443.751542][T19528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.775103][T19528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 443.858288][T19528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.881409][T19528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 443.908964][T19528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.155976][T19856] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3442'. [ 444.251031][ C0] Dropped outbound packet type=88ca [ 444.312768][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 444.386328][T19528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.458490][T19528] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.515295][T19874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3447'. [ 444.525141][T13366] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.532338][T13366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.545628][T19878] sctp: [Deprecated]: syz.3.3449 (pid 19878) Use of int in maxseg socket option. [ 444.545628][T19878] Use struct sctp_assoc_value instead [ 444.578593][T19878] Cannot find del_set index 0 as target [ 444.592615][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.599838][T13378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.633829][T19874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3447'. [ 444.732125][ T5645] Bluetooth: hci4: command 0x040f tx timeout [ 445.045327][T19889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.299326][ C0] Dropped outbound packet type=88ca [ 445.318472][T19914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.334932][T19917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'. [ 445.415347][T19917] vlan0: entered promiscuous mode [ 445.490001][T19922] tipc: Enabled bearer , priority 0 [ 445.546559][T19922] syzkaller0: entered promiscuous mode [ 445.592174][T19922] syzkaller0: entered allmulticast mode [ 445.623242][T19926] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 445.710891][T19922] tipc: Resetting bearer [ 445.744672][T19528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.766919][T19942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3459'. [ 446.047341][T19528] veth0_vlan: entered promiscuous mode [ 446.155272][T19528] veth1_vlan: entered promiscuous mode [ 446.199630][T19919] tipc: Resetting bearer [ 446.262814][T19919] tipc: Disabling bearer [ 446.331029][ C0] Dropped outbound packet type=88ca [ 446.355094][T19528] veth0_macvtap: entered promiscuous mode [ 446.392196][T19528] veth1_macvtap: entered promiscuous mode [ 446.472738][T19528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.512818][T19528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.585431][T13366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.617227][T13366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.652854][T13366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.684904][T13366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.896730][T19991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3470'. [ 446.922354][T19991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 446.945834][T19991] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3470'. [ 446.968238][T19991] netlink: 'syz.3.3470': attribute type 3 has an invalid length. [ 446.997948][T19991] netlink: 'syz.3.3470': attribute type 2 has an invalid length. [ 447.234187][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.269537][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.323221][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.342287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.371170][ C0] Dropped outbound packet type=88ca [ 448.382281][T20027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.411072][ C0] Dropped outbound packet type=88ca [ 448.428276][T20026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.580518][T20048] netlink: 'syz.4.3485': attribute type 1 has an invalid length. [ 448.611899][T20050] syzkaller1: entered promiscuous mode [ 448.626814][T20050] syzkaller1: entered allmulticast mode [ 448.647502][T20050] __nla_validate_parse: 1 callbacks suppressed [ 448.647517][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3484'. [ 448.679677][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3485'. [ 448.684901][T20048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.005067][T20079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3492'. [ 449.045249][T20077] syzkaller0: entered promiscuous mode [ 449.051348][T20077] syzkaller0: entered allmulticast mode [ 449.110184][T20081] bond0: option min_links: invalid value (18446744073709551612) [ 449.137259][T20081] bond0: option min_links: allowed values 0 - 2147483647 [ 449.146784][T20081] bond0 (unregistering): Released all slaves [ 449.317470][T20089] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3495'. [ 449.457866][ C0] Dropped outbound packet type=88ca [ 450.422652][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 450.491051][ C0] Dropped outbound packet type=88ca [ 451.531202][ C0] Dropped outbound packet type=88ca [ 452.165525][T20086] tipc: Started in network mode [ 452.170441][T20086] tipc: Node identity ac14140f, cluster identity 4711 [ 452.184062][T20086] tipc: New replicast peer: 255.255.255.255 [ 452.190480][T20086] tipc: Enabled bearer , priority 10 [ 452.392416][T20119] sctp: [Deprecated]: syz.1.3502 (pid 20119) Use of int in maxseg socket option. [ 452.392416][T20119] Use struct sctp_assoc_value instead [ 452.474535][T20119] syzkaller1: entered promiscuous mode [ 452.490892][T20125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3505'. [ 452.503014][T20119] syzkaller1: entered allmulticast mode [ 452.576101][ C0] Dropped outbound packet type=88ca [ 452.743979][T20132] netlink: 'syz.0.3505': attribute type 10 has an invalid length. [ 452.907188][T20145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3510'. [ 452.975434][ T1710] block nbd1: Possible stuck request ffff888026e67000: control (read@0,1024B). Runtime 90 seconds [ 453.001172][T20147] netlink: 'syz.1.3511': attribute type 9 has an invalid length. [ 453.009134][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3511'. [ 453.026535][T20147] gretap0: entered promiscuous mode [ 453.034210][T20147] macvlan2: entered promiscuous mode [ 453.039794][T20147] macvlan2: entered allmulticast mode [ 453.046167][T20147] gretap0: entered allmulticast mode [ 453.301366][ T6619] tipc: Node number set to 2886997007 [ 453.534043][T20166] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3518'. [ 453.582812][T20169] netlink: 'syz.4.3520': attribute type 2 has an invalid length. [ 453.610182][T20169] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3520'. [ 453.619794][ C0] Dropped outbound packet type=88ca [ 453.676784][T20171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 453.808910][T20179] : renamed from veth0_to_bond (while UP) [ 453.811573][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3526'. [ 453.845827][T20182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3526'. [ 453.944769][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 454.028287][T20195] netlink: 'syz.3.3529': attribute type 6 has an invalid length. [ 454.117514][T20200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3531'. [ 454.154966][T20200] netlink: 'syz.2.3531': attribute type 58 has an invalid length. [ 454.171488][T20200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3531'. [ 454.218683][T20206] netlink: 'syz.1.3534': attribute type 1 has an invalid length. [ 454.230191][T20205] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.444225][T20209] syzkaller1: entered promiscuous mode [ 454.449831][T20209] syzkaller1: entered allmulticast mode [ 454.651083][ C0] Dropped outbound packet type=88ca [ 455.105119][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'. [ 455.359746][T20263] xt_hashlimit: size too large, truncated to 1048576 [ 455.459013][T20270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3551'. [ 455.560398][ T5645] block nbd3: Receive control failed (result -1) [ 455.691032][ C0] Dropped outbound packet type=88ca [ 455.866820][T20287] netlink: 'syz.4.3554': attribute type 3 has an invalid length. [ 456.046228][T20290] netlink: 'syz.0.3555': attribute type 3 has an invalid length. [ 456.647068][T20313] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 456.713786][T20313] bond1: entered promiscuous mode [ 456.719574][T20313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.731007][ C0] Dropped outbound packet type=88ca [ 456.765568][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3559'. [ 456.775219][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3559'. [ 456.847555][T20313] bond1: (slave bridge2): making interface the new active one [ 456.881199][T20313] bridge2: entered promiscuous mode [ 456.895412][T20313] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 457.507077][ T6619] IPVS: starting estimator thread 0... [ 457.623671][T20348] IPVS: using max 33 ests per chain, 79200 per kthread [ 457.771060][ C0] Dropped outbound packet type=88ca [ 458.552521][T20382] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.811251][ C0] Dropped outbound packet type=88ca [ 458.817034][T20387] __nla_validate_parse: 7 callbacks suppressed [ 458.817049][T20387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3576'. [ 459.143624][T20379] veth0: entered promiscuous mode [ 459.254689][T20378] veth0: left promiscuous mode [ 459.374290][T13378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.449670][T20408] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 459.462380][T20407] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3581'. [ 459.614199][T20417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3584'. [ 459.627494][T20419] netlink: 'syz.4.3585': attribute type 3 has an invalid length. [ 459.680799][ T30] audit: type=1800 audit(1781255902.276:16): pid=20422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3586" name=20 dev="tmpfs" ino=123 res=0 errno=0 [ 459.851099][ C0] Dropped outbound packet type=88ca [ 460.116365][T20441] 5nè‹Ò: entered promiscuous mode [ 460.367649][T20452] netlink: 'syz.3.3595': attribute type 1 has an invalid length. [ 460.394375][T20452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.652710][ C0] [ 460.655083][ C0] ====================================================== [ 460.662273][ C0] WARNING: possible circular locking dependency detected [ 460.669381][ C0] syzkaller #0 Not tainted [ 460.673982][ C0] ------------------------------------------------------ [ 460.681061][ C0] syz-executor/16696 is trying to acquire lock: [ 460.687312][ C0] ffff88807e3dd030 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 460.696869][ C0] [ 460.696869][ C0] but task is already holding lock: [ 460.704238][ C0] ffff88807c271158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 460.714270][ C0] [ 460.714270][ C0] which lock already depends on the new lock. [ 460.714270][ C0] [ 460.724653][ C0] [ 460.724653][ C0] the existing dependency chain (in reverse order) is: [ 460.733650][ C0] [ 460.733650][ C0] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 460.741971][ C0] _raw_spin_lock+0x2e/0x40 [ 460.747065][ C0] sch_direct_xmit+0x15f/0x4c0 [ 460.752440][ C0] __dev_queue_xmit+0x180f/0x3950 [ 460.758083][ C0] hsr_forward_skb+0x166e/0x2a70 [ 460.763531][ C0] hsr_dev_xmit+0x242/0x360 [ 460.768544][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 460.774164][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 460.779720][ C0] ip6_output+0x340/0x550 [ 460.784666][ C0] NF_HOOK+0x177/0x4f0 [ 460.789328][ C0] mld_sendpack+0x8b4/0xe40 [ 460.794338][ C0] mld_ifc_work+0x835/0xe70 [ 460.799349][ C0] process_scheduled_works+0xb5d/0x1860 [ 460.805441][ C0] worker_thread+0xa53/0xfc0 [ 460.810543][ C0] kthread+0x389/0x470 [ 460.815118][ C0] ret_from_fork+0x514/0xb70 [ 460.820254][ C0] ret_from_fork_asm+0x1a/0x30 [ 460.825589][ C0] [ 460.825589][ C0] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 460.833326][ C0] __lock_acquire+0x15a5/0x2cf0 [ 460.838878][ C0] lock_acquire+0x106/0x350 [ 460.843911][ C0] _raw_spin_lock_bh+0x36/0x50 [ 460.849194][ C0] hsr_dev_xmit+0x237/0x360 [ 460.854207][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 460.859826][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 460.865355][ C0] ip_finish_output2+0xca9/0x1070 [ 460.870980][ C0] ip_output+0x29f/0x450 [ 460.875775][ C0] iptunnel_xmit+0x621/0xd10 [ 460.880910][ C0] ip_tunnel_xmit+0x193a/0x1f20 [ 460.886270][ C0] __gre_xmit+0x19e/0x240 [ 460.891185][ C0] erspan_xmit+0xa41/0x14d0 [ 460.896211][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 460.901843][ C0] sch_direct_xmit+0x251/0x4c0 [ 460.907144][ C0] __dev_queue_xmit+0x180f/0x3950 [ 460.912697][ C0] ip6_output+0x340/0x550 [ 460.917540][ C0] ndisc_send_skb+0xd0b/0x1670 [ 460.922875][ C0] addrconf_rs_timer+0x395/0x6d0 [ 460.928366][ C0] call_timer_fn+0x192/0x5e0 [ 460.933486][ C0] __run_timer_base+0x652/0x8b0 [ 460.938847][ C0] run_timer_softirq+0xb7/0x170 [ 460.944206][ C0] handle_softirqs+0x22a/0x840 [ 460.949493][ C0] __irq_exit_rcu+0xca/0x220 [ 460.954612][ C0] irq_exit_rcu+0x9/0x30 [ 460.959380][ C0] common_interrupt+0xbb/0xe0 [ 460.964684][ C0] asm_common_interrupt+0x26/0x40 [ 460.970239][ C0] lock_release+0x2d7/0x3c0 [ 460.975347][ C0] is_bpf_text_address+0x28d/0x2b0 [ 460.981020][ C0] kernel_text_address+0xa5/0xe0 [ 460.986478][ C0] __kernel_text_address+0xd/0x30 [ 460.992022][ C0] unwind_get_return_address+0x4d/0x90 [ 460.998042][ C0] arch_stack_walk+0xfb/0x150 [ 461.003235][ C0] stack_trace_save+0xa9/0x100 [ 461.008516][ C0] kasan_save_track+0x3e/0x80 [ 461.013746][ C0] kasan_save_free_info+0x46/0x50 [ 461.019275][ C0] __kasan_slab_free+0x5c/0x80 [ 461.024555][ C0] kfree+0x1c5/0x640 [ 461.028971][ C0] tomoyo_path_perm+0x403/0x560 [ 461.034444][ C0] security_inode_getattr+0x12b/0x310 [ 461.040377][ C0] vfs_getattr+0x23/0x70 [ 461.045164][ C0] vfs_statx_path+0x2b/0x230 [ 461.050262][ C0] vfs_statx+0x12e/0x200 [ 461.055008][ C0] vfs_fstatat+0x11b/0x170 [ 461.059946][ C0] __x64_sys_newfstatat+0x151/0x200 [ 461.065649][ C0] do_syscall_64+0x174/0x580 [ 461.070747][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.077147][ C0] [ 461.077147][ C0] other info that might help us debug this: [ 461.077147][ C0] [ 461.087355][ C0] Possible unsafe locking scenario: [ 461.087355][ C0] [ 461.094905][ C0] CPU0 CPU1 [ 461.100330][ C0] ---- ---- [ 461.105676][ C0] lock(&qdisc_xmit_lock_key#4); [ 461.110691][ C0] lock(&hsr->seqnr_lock); [ 461.117701][ C0] lock(&qdisc_xmit_lock_key#4); [ 461.125234][ C0] lock(&hsr->seqnr_lock); [ 461.129745][ C0] [ 461.129745][ C0] *** DEADLOCK *** [ 461.129745][ C0] [ 461.137929][ C0] 11 locks held by syz-executor/16696: [ 461.143466][ C0] #0: ffffffff8f088638 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 461.152750][ C0] #1: ffffc90000007cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 461.162311][ C0] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670 [ 461.171780][ C0] #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 461.180823][ C0] #4: ffffffff8e95cd80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 461.190750][ C0] #5: ffff88807f3ce228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 461.203348][ C0] #6: ffff88807c271158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 461.213600][ C0] #7: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 461.222463][ C0] #8: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 461.232190][ C0] #9: ffffffff8e95cd80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 461.242118][ C0] #10: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 461.251344][ C0] [ 461.251344][ C0] stack backtrace: [ 461.257229][ C0] CPU: 0 UID: 0 PID: 16696 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 461.257246][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.257258][ C0] Call Trace: [ 461.257324][ C0] [ 461.257359][ C0] dump_stack_lvl+0xe8/0x150 [ 461.257404][ C0] print_circular_bug+0x2e1/0x300 [ 461.257424][ C0] check_noncircular+0x12e/0x150 [ 461.257442][ C0] __lock_acquire+0x15a5/0x2cf0 [ 461.257459][ C0] ? __siphash_unaligned+0x25f/0x3b0 [ 461.257505][ C0] ? skb_network_protocol+0x23d/0x400 [ 461.257524][ C0] ? hsr_dev_xmit+0x237/0x360 [ 461.257541][ C0] lock_acquire+0x106/0x350 [ 461.257554][ C0] ? hsr_dev_xmit+0x237/0x360 [ 461.257573][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 461.257589][ C0] ? hsr_dev_xmit+0x237/0x360 [ 461.257606][ C0] _raw_spin_lock_bh+0x36/0x50 [ 461.257619][ C0] ? hsr_dev_xmit+0x237/0x360 [ 461.257636][ C0] hsr_dev_xmit+0x237/0x360 [ 461.257653][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 461.257670][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 461.257691][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 461.257710][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 461.257736][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 461.257752][ C0] ? neigh_connected_output+0x1ea/0x460 [ 461.257791][ C0] ? eth_header+0x11b/0x200 [ 461.257831][ C0] ? __asan_memcpy+0x40/0x70 [ 461.257856][ C0] ? ip_finish_output2+0x3c2/0x1070 [ 461.257869][ C0] ip_finish_output2+0xca9/0x1070 [ 461.257882][ C0] ? ip_skb_dst_mtu+0x80b/0xa50 [ 461.257903][ C0] ? ip_finish_output+0x40e/0x530 [ 461.257937][ C0] ip_output+0x29f/0x450 [ 461.257957][ C0] ? ip_output+0x5b/0x450 [ 461.257976][ C0] iptunnel_xmit+0x621/0xd10 [ 461.257994][ C0] ip_tunnel_xmit+0x193a/0x1f20 [ 461.258021][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 461.258041][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 461.258062][ C0] __gre_xmit+0x19e/0x240 [ 461.258079][ C0] ? __pfx___gre_xmit+0x10/0x10 [ 461.258096][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 461.258112][ C0] erspan_xmit+0xa41/0x14d0 [ 461.258134][ C0] ? __pfx_erspan_xmit+0x10/0x10 [ 461.258155][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 461.258176][ C0] sch_direct_xmit+0x251/0x4c0 [ 461.258190][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 461.258205][ C0] __dev_queue_xmit+0x180f/0x3950 [ 461.258225][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 461.258245][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 461.258261][ C0] ? neigh_resolve_output+0x438/0x750 [ 461.258274][ C0] ? eth_header+0x11b/0x200 [ 461.258290][ C0] ? __asan_memcpy+0x40/0x70 [ 461.258313][ C0] ? ip6_output+0x126/0x550 [ 461.258329][ C0] ip6_output+0x340/0x550 [ 461.258346][ C0] ? __pfx_ip6_output+0x10/0x10 [ 461.258361][ C0] ndisc_send_skb+0xd0b/0x1670 [ 461.258375][ C0] ? ndisc_send_skb+0x215/0x1670 [ 461.258389][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 461.258402][ C0] ? __pfx_dst_output+0x10/0x10 [ 461.258421][ C0] addrconf_rs_timer+0x395/0x6d0 [ 461.258442][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 461.258460][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.258481][ C0] call_timer_fn+0x192/0x5e0 [ 461.258496][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 461.258514][ C0] ? call_timer_fn+0xd4/0x5e0 [ 461.258528][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 461.258545][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.258558][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 461.258577][ C0] __run_timer_base+0x652/0x8b0 [ 461.258593][ C0] ? __pfx_napi_schedule_prep+0x10/0x10 [ 461.258615][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 461.258627][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.258647][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 461.258663][ C0] run_timer_softirq+0xb7/0x170 [ 461.258677][ C0] handle_softirqs+0x22a/0x840 [ 461.258691][ C0] ? __irq_exit_rcu+0xca/0x220 [ 461.258707][ C0] __irq_exit_rcu+0xca/0x220 [ 461.258724][ C0] irq_exit_rcu+0x9/0x30 [ 461.258736][ C0] common_interrupt+0xbb/0xe0 [ 461.258756][ C0] [ 461.258760][ C0] [ 461.258797][ C0] asm_common_interrupt+0x26/0x40 [ 461.258811][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 461.258826][ C0] Code: 2c 98 11 00 00 00 00 eb b5 e8 65 7c 08 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 45 e7 97 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 42 6a 92 [ 461.258846][ C0] RSP: 0018:ffffc900051e7478 EFLAGS: 00000286 [ 461.258858][ C0] RAX: f15a86ddac720e00 RBX: 0000000000000202 RCX: 0000000000000046 [ 461.258868][ C0] RDX: 0000000000000001 RSI: ffffffff8e224845 RDI: ffffffff8c28a660 [ 461.258877][ C0] RBP: ffff888028668bb8 R08: ffffffff81d5ace6 R09: ffffffff8e95cd20 [ 461.258887][ C0] R10: ffffc900051e7598 R11: ffffffff81b0e210 R12: 0000000000000001 [ 461.258897][ C0] R13: 0000000000000001 R14: ffffffff8e95cd20 R15: ffff888028668000 [ 461.258908][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.258929][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 461.258947][ C0] is_bpf_text_address+0x28d/0x2b0 [ 461.258961][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 461.258974][ C0] kernel_text_address+0xa5/0xe0 [ 461.258993][ C0] __kernel_text_address+0xd/0x30 [ 461.259011][ C0] unwind_get_return_address+0x4d/0x90 [ 461.259027][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.259047][ C0] arch_stack_walk+0xfb/0x150 [ 461.259066][ C0] stack_trace_save+0xa9/0x100 [ 461.259085][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 461.259105][ C0] ? string+0x279/0x2b0 [ 461.259123][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 461.259136][ C0] kasan_save_track+0x3e/0x80 [ 461.259154][ C0] ? kasan_save_track+0x3e/0x80 [ 461.259171][ C0] ? kasan_save_free_info+0x46/0x50 [ 461.259185][ C0] ? __kasan_slab_free+0x5c/0x80 [ 461.259203][ C0] ? kfree+0x1c5/0x640 [ 461.259220][ C0] ? tomoyo_path_perm+0x403/0x560 [ 461.259237][ C0] ? security_inode_getattr+0x12b/0x310 [ 461.259251][ C0] ? vfs_getattr+0x23/0x70 [ 461.259263][ C0] ? vfs_statx_path+0x2b/0x230 [ 461.259279][ C0] ? vfs_statx+0x12e/0x200 [ 461.259291][ C0] ? vfs_fstatat+0x11b/0x170 [ 461.259303][ C0] ? __x64_sys_newfstatat+0x151/0x200 [ 461.259318][ C0] ? do_syscall_64+0x174/0x580 [ 461.259331][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.259358][ C0] ? tomoyo_check_acl+0x386/0x400 [ 461.259373][ C0] kasan_save_free_info+0x46/0x50 [ 461.259388][ C0] __kasan_slab_free+0x5c/0x80 [ 461.259407][ C0] kfree+0x1c5/0x640 [ 461.259422][ C0] ? tomoyo_path_perm+0x403/0x560 [ 461.259437][ C0] ? tomoyo_path_permission+0x2a4/0x380 [ 461.259456][ C0] tomoyo_path_perm+0x403/0x560 [ 461.259473][ C0] ? tomoyo_path_perm+0x251/0x560 [ 461.259489][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 461.259522][ C0] security_inode_getattr+0x12b/0x310 [ 461.259536][ C0] vfs_getattr+0x23/0x70 [ 461.259550][ C0] vfs_statx_path+0x2b/0x230 [ 461.259566][ C0] ? vfs_statx+0x107/0x200 [ 461.259585][ C0] vfs_statx+0x12e/0x200 [ 461.259600][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 461.259618][ C0] ? strncpy_from_user+0x150/0x2b0 [ 461.259691][ C0] ? do_getname+0x151/0x250 [ 461.259706][ C0] vfs_fstatat+0x11b/0x170 [ 461.259783][ C0] __x64_sys_newfstatat+0x151/0x200 [ 461.259803][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 461.259828][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 461.259865][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.259879][ C0] do_syscall_64+0x174/0x580 [ 461.259895][ C0] ? trace_irq_disable+0x3b/0x140 [ 461.259920][ C0] ? clear_bhb_loop+0x40/0x90 [ 461.259935][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.259949][ C0] RIP: 0033:0x7fd34319b49a [ 461.259963][ C0] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 [ 461.259975][ C0] RSP: 002b:00007fff4ff90338 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 461.259990][ C0] RAX: ffffffffffffffda RBX: 00007fd3432321ca RCX: 00007fd34319b49a [ 461.260000][ C0] RDX: 00007fff4ff90360 RSI: 00007fff4ff903f0 RDI: 00000000ffffff9c [ 461.260010][ C0] RBP: 00007fff4ff903f0 R08: 00007fff4ff913f0 R09: 00000000ffffffff [ 461.260019][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007fff4ff91480 [ 461.260028][ C0] R13: 00007fd3432321ca R14: 0000000000070721 R15: 00007fff4ff914c0 [ 461.260044][ C0] [ 462.068502][ C0] Dropped outbound packet type=88ca [ 462.223741][T20476] ipt_REJECT: TCP_RESET invalid for non-tcp [ 463.141377][ C0] Dropped outbound packet type=88ca [ 464.173010][ C0] Dropped outbound packet type=88ca [ 465.211364][ C0] Dropped outbound packet type=88ca [ 466.252464][ C0] Dropped outbound packet type=88ca [ 467.301343][ C0] Dropped outbound packet type=88ca [ 468.332983][ C0] Dropped outbound packet type=88ca [ 469.371647][ C0] Dropped outbound packet type=88ca [ 470.413032][ C0] Dropped outbound packet type=88ca