last executing test programs: 1m13.503310904s ago: executing program 2 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a000048000000000006907864010101ac1414aa44149d41ac1414bb00000006000000000000000500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2a}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x13, 0x0, 0x2000, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) close(0x3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="3bfa9edf27badd96f2418f2d2d55800a4914d90c789dba"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r14) (async) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 59.635995286s ago: executing program 2 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a000048000000000006907864010101ac1414aa44149d41ac1414bb00000006000000000000000500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2a}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x13, 0x0, 0x2000, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) close(0x3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="3bfa9edf27badd96f2418f2d2d55800a4914d90c789dba"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r14) (async) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 52.564973307s ago: executing program 1 (id=702): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x20000004) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffedd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x80c0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x891b, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601010000000000000000000000008b000100070000000900020073797a32000000000c000780080012000000000013000300686173683a6e65742c69666163650000050005000200000005000400000000"], 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSETELEM={0x758, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70c, 0x3, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x154, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "dac3a4f537887b0cd8428d2ec99b1ae7ba53ed6e26e9bec11dacc933b9b6e76ac2e62d9a722a057b1953f844637d7e8f9f745ced4ac82f25359d6c52e3071e8a511d5a7217bdfceb749255838b72f26f14e6853e2fac6e1186fa50f697aa3e54106afe651c8ca92e82d3eb93bea8ccaf47c2d751fc18f0ffcbf31e7414eefab4d20e5efb85c48261a03f75bb61801ad398e34ea9eb1e534b9dc28d7712c73b8aedb0d6c7270cad96bdd7408b50f079bfd8232218562605d9d0f8163ae26aa383405d94b0a1283e0290b2a2f346a166bc23648c6372f3eb1cd8f9b47793c1"}, @NFTA_DATA_VALUE={0x54, 0x1, "857adb934a5b5056a07117849295e995fb69a735145bd635c84c431e5e813a876cbeabb3d4ac4e8a20aba62e07448970cdaf930089f44947e26aa5e55d5a1371f20082392fb8aa5fb8ed31cd14ef77aa"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x80}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff9}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x100}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "ef4eeb7e99a1f187afc08e331a772f39b2fac2b37f688edbcf67b7e0ae7d34ba5d19ad846708b341ab80a1486b"}, @NFTA_SET_ELEM_USERDATA={0x88, 0x6, 0x1, 0x0, "143b0e8601d762701cb3c0ef0d8138a688bce055fd9b4313c11b3b4525bfd3f994afc7f9e525083bffc733ee857576a704b92e0809f6e15d0a3461b96f6e6eeda6446e4bb869652bd44af73410d34c2fd3e9f1b5fdc31cf3aa21e3d36557b2c5780456bcb28195b7640f52b3e08315f8e41332b22609e89dd57c7b08a138f008868c2268"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x328, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8e, 0x1, "9817048fddabde3ec8a2b32add0cc4ee6bc13880dcbb2567daea57e94fef61a73e43c734f46b4f0cdaba205adaded2687a5c1c6b77a9521e5740ad095fafb87311da889fc36cdc8537807a0348269b0a96c3fb66ba4d9833354a1f3d1341b07cb642005a2463c2a1a31e51169cb4ca9fcae92ad6d841590e52487615bd47b6b981c22809e58e04fcf9e2"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "83073e8c19388e517122c62999a86e1962421b3aa4fc3d490eaea649893d70df27bfc930d5c297935a734149b72bc313064528b13f73a5dd1366e23c58acf73f7b2360acfc334bc594d2e9f75a0c0d08dd01fd49cfaf86ccb1194e0a0d13110b7ab02974f5dc517d7749"}, @NFTA_DATA_VALUE={0xe3, 0x1, "083ba1af6e1153d4ddef7b93848748b3437cd25470560562954a949a9785a5354c315ab76bc497a8a3a5990dff937a37eebe6c04adfb1ae08b790970fb4bf129704666e816c547a21478c3729aeb01cbd545e0e2d7eba5cced1d6b34482545980560d79d1d00b7c82046bd75cb580ab18c1c5d92df6dd847725f3e55cc760a77fbe213d8c214888ef0ca1255cf238777d762cb223212fc12ca391831b85f2dc4eb19bea39b6ceb6fd5861aaa3ccb5a95224adff0b62004de82feb72cd5aba523a6fe233cae89f2b05fe25c8a48db3f3b9e9f5d2d401ca4ecd743c697ea2791"}, @NFTA_DATA_VALUE={0x98, 0x1, "6735b9bb2ee7e5992cd8ee702d6ebc40e0aafc6eb01c45c57ec41bd6d98cd46e65e8f2e374f40c45e06c85a39bcf8ae3ea2c413b491a15294f317d2f5a1570f596cdaee4bdd93fcebb2ba39d95cb95b4d8aac755b102735a1290285a4946c3eb249c4745d7b9a796db863d74efdec27f85b993a7e3f1098ff2fb544b9f0d5b59349e6eee6b0f3e07ad87862dae094c63fead09bf"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x128, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x104, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'hsr0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_DELOBJ={0x19c, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xd3, 0x8, "6674ea484746e579004b36b28efde16572e4c438350f6c7dc0055bbabcdf9885c5b16685b6b0bb9c15c40d7bef8279b0447ef34ab884dc7a909f7dcb9c2fbacac1aefb983f477505188c080bfe116bbc408a02c3230dd3fcf4976af6fa01614f00feb1da319e980ca786ec886e3f500a113e82a9f25d1c062e18863587154ff4b63ba6b38c810bbb5adae44e8509d9e77c9c891658f99bc54c824d4ae4b8af0b679873b2c6b9bb692d11e70e26cb38bffeaafdb86241555043a4a8d171a92ddff3c4e9612d803865679b294b31cfea"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x99, 0x8, "7caafe32285d12a7bc883c660acd97dc933c42abfa748419f0cab2064226fcd27a0f944a19c4aa3c96e9bcd0585979a58fb2fa65c61b4db0a8132988b823d4c027cc3b9e423aa19cfbc3e2620efb7665cc0249bbf4a2d43c52989e96bb7bf200e291024d72946dce74d6b472c60f394801328f4b7f7b239ac35e24b8a8a6637721b4a65dd5bbdb2c7a0848fb5b403f0748230f6e2a"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb50}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000004880), r11) sendmsg$NLBL_CALIPSO_C_REMOVE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004900)={&(0x7f00000048c0)={0x1c, r12, 0x484d974516549a15, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4c0d0) 52.437168543s ago: executing program 1 (id=703): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'caif0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011acbda8a90001010000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 52.13023934s ago: executing program 1 (id=705): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000002780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x8, &(0x7f0000002800)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x800, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x27, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x8851) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000b40)=""/218, 0xda}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000001dc0)=""/4063, 0xfdf}], 0x8}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) close(r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000003240), &(0x7f0000003280)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x80000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 47.248320625s ago: executing program 2 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a000048000000000006907864010101ac1414aa44149d41ac1414bb00000006000000000000000500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2a}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x13, 0x0, 0x2000, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) close(0x3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="3bfa9edf27badd96f2418f2d2d55800a4914d90c789dba"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r14) (async) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 38.347597617s ago: executing program 1 (id=705): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000002780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x8, &(0x7f0000002800)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x800, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x27, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x8851) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000b40)=""/218, 0xda}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000001dc0)=""/4063, 0xfdf}], 0x8}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) close(r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000003240), &(0x7f0000003280)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x80000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 29.32431917s ago: executing program 2 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a000048000000000006907864010101ac1414aa44149d41ac1414bb00000006000000000000000500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2a}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x13, 0x0, 0x2000, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) close(0x3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="3bfa9edf27badd96f2418f2d2d55800a4914d90c789dba"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r14) (async) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 21.707777934s ago: executing program 1 (id=705): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000002780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x8, &(0x7f0000002800)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x800, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x27, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x8851) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000b40)=""/218, 0xda}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000001dc0)=""/4063, 0xfdf}], 0x8}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) close(r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000003240), &(0x7f0000003280)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x80000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 13.267329832s ago: executing program 2 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a000048000000000006907864010101ac1414aa44149d41ac1414bb00000006000000000000000500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2a}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x13, 0x0, 0x2000, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) close(0x3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="3bfa9edf27badd96f2418f2d2d55800a4914d90c789dba"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r14) (async) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 11.688594876s ago: executing program 1 (id=705): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000002780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x8, &(0x7f0000002800)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x800, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x27, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x8851) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000b40)=""/218, 0xda}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000001dc0)=""/4063, 0xfdf}], 0x8}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) close(r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000003240), &(0x7f0000003280)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x80000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 1.541529621s ago: executing program 0 (id=1049): unshare(0x28000600) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x2000000, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@multicast2}, {@local}, {@remote}]}]}}}}}}}, 0x0) r2 = socket(0x23, 0x5, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'veth1_vlan\x00', 0xa78}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) shutdown(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r5, &(0x7f0000000100)=@abs={0x27}, 0x6e) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000040)=0xbd, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000001600)=""/168, 0xa8}], 0x5}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x20, 0x0) 1.45994729s ago: executing program 3 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x0) 1.289626211s ago: executing program 4 (id=1052): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xffffff00], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.209694139s ago: executing program 0 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 1.101638531s ago: executing program 3 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = getpid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r5, 0x0, 0x2, &(0x7f0000000280)='\'\x00'}, 0x30) 933.214472ms ago: executing program 4 (id=1055): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='-7f'], 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r3, 0xff}, &(0x7f0000000100)=0x8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local}, @redirect={0x8, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x1, 0x64, 0xff, 0x0, 0x89, 0x0, @remote, @remote}}}}}}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) preadv(r6, &(0x7f0000001340), 0x0, 0xe, 0x7fffffff) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x48, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x3}}, @sp_mp_open={0xf, 0x1, {0xb100, {}, @val={0x72, 0x6}, @void}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4841}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r10, 0x6a98047402e98331}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000020000001400020070696d367265673000000000000000000900010073"], 0x40}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) 885.525475ms ago: executing program 0 (id=1056): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0xfffffffffffffd0c}, 0x0) (async) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x10101) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x28}, 0x4, 0x700000000000000, 0x0, 0x10000}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0xf4, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xf4}}, 0x0) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="b2c72649408d88c1df4bd5784f0b24f2d58ce9f6922407ca8f07529c5d6f", 0x1e}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="39fbd5c84cad6556200f5bb163620462be6195df6dffafdf4abc3b3ee3c7a17265e7a83e5a7f6a79eba8eabe5fd362f661b092cf2eeff8c864b5e85413adbe8cb688eb88ef1f26bcf58d", 0x4a}, {&(0x7f0000000380)="c8f44b4539c225", 0x7}, {&(0x7f00000003c0)="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", 0xfa}, {&(0x7f00000004c0)="b6d51ffc93aec53797d653118f34389f657d52ef8374f9", 0x17}, {&(0x7f0000000500)="f21478ebbfbe168da2a19e4ba4209e4232ca622a06c26e25", 0x18}], 0x7, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast1}}}], 0x38}, 0x4000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000001440)=[{&(0x7f0000000000)="f104c9613bc9dd43", 0x8}, {&(0x7f0000000140)="95fcf2b7fcb6c29e1587e58743feaabbfc43244a9cc4b94fc758bd0cd492f55582c22358865ecb432e1c85e2a49a42895f95edae43cbe5372e2b1983d613ef27e117a0cc5b62ceeefe92e65be88181f5da71539ed302b0c25b0bace798c33a", 0x5f}, {&(0x7f00000001c0)="d861c57a0c9f917641502a7160d174d9a8a3758a4b59c7ea104abad451bb8450cd0a35a851be06079148", 0x2a}], 0x3) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf253e00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200408c4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 885.001569ms ago: executing program 4 (id=1057): bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@bloom_filter={0x1e, 0x0, 0x1f, 0x0, 0x1005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7c3, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/4091, 0xffb}], 0x1}, 0x28}], 0x1, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x268, 0x311, 0x0, 0x268, 0x348, 0x460, 0x460, 0x348, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000], 'nicvf0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x3a, 0x8, 0x0, 0x2}, 0x0, 0xd0, 0xf0, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000f3fe7f0000cc77016dd3000826a123bf612b61f040029b73b40000000008009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000f000069116a00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 729.00561ms ago: executing program 3 (id=1058): r0 = socket(0x2, 0x80805, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000340)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="a25a5ade43fb5fa48c86efe70a9ae7bf1840051bdbe8d12b67a61dbd58af5e25fa11f8e1adba3662eaf34d02c41eace0dccedd04182a7830844ff8b013b46080c802967521c4950a01583defb5c61164", 0x50}, {&(0x7f00000004c0)="a99af073eb00a3f30cc1ffc0f9720d3aeae248ecf9c409c451af46cd935fc7235de09e1c1f832051f16fc17547be331dc991e711a5d29dc3f4e4ae8348b7ffdf8bc8732463ca190c73b1ab6b9ad38e0c6567d6fb4f50b660c8c2eda720dd3d853c698550d6dcef11c7bcc7555a15def3c168bc9d8f401da32a34b49e539f3ba02e31a9d62298546503366e7644f226b0ef8a0d7298191f7c", 0x98}, {&(0x7f0000000400)="b60eb71371de16dd9b1bb6bf38ae021c64fa34481f2dd0cabf73a5c298752a75bfe4d7f213d2d785db86a18eba4869b6bb230b0de09f7791bf31a0807c94a0", 0x3f}, {&(0x7f00000000c0)="32241769d7be4f86f363b11986c9697611bba5265f8a22aed12e0d413080ae11e6368f4dd555a74adffaed63c78d492d990dacf20970a2dd0983bbf8377359df6b70129cbb1669d037f812e7be9b8643e774c72002c644038f2d64658d3ded39f59517e79965e39d894284975612920abcef03d5f3238a5b4277f91429cd1e9737d56bdbfac43ef128f199ae060c784f71cba52ec1c3ac083225cdf3fdf21a310ae394fb73dbf0bc06489b7cfc1239039d3e4182fe0a7db86c9ce2c225440b564801ed92ab9eede63a322ffdad0df068e43b3ee99485458d8ff05bb8dbd2007a8d3c273d13a2fa", 0xe7}, {&(0x7f00000029c0)="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", 0x2d7}], 0x5}, 0x2000c841) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x2}, 0x8) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 545.159504ms ago: executing program 0 (id=1059): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0000001080002007f1414aa08000300", @ANYRES32], 0x34}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000e5ffffb602000014000000b7030000000000008500000065000000bf0900000000000055090100000000009500000000000000be91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0000001080002007f1414aa08000300", @ANYRES32], 0x34}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000e5ffffb602000014000000b7030000000000008500000065000000bf0900000000000055090100000000009500000000000000be91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 544.381284ms ago: executing program 4 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r4, 0x0, 0x53, 0x0, &(0x7f0000002e40)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x44880) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x100, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0x2, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800010040f0"], 0x6c}}, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0x2, 0x80, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x66, 0x0, 0x5, 0x29, 0x0, @remote, @remote, {[@noop, @generic={0x89, 0xc, "b430aed82e48f3fe330b"}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000400)={0x68, r12, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x44804) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008006ad0905dec6a253e2405fd93a760329852a65ffa31bc1c57cbb0747ba0d81b01fd0682"], 0x76}}, 0xc000) 481.236974ms ago: executing program 3 (id=1061): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r7, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r7, 0x0, 0x0, 0x2101, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x57}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 394.690684ms ago: executing program 0 (id=1062): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000580)="af4da7eef4b02e", 0x7, 0x24028085, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xbb4f9544870215e8, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r3, 0x2f, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x0, r2}, 0x10) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async, rerun: 64) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) (async) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="a3d26688cc84acc83571dfbbd9745f0d794526c5f4e120efffb518c3b285900c54526cec7a5375b053c34fd789ef8ebefdca127803bdc002246eff70e9c0b5a08d25f53950e3ed9ddcebb061349a065acabb889e17e4340ca84ed3480edbd39487594977e06464040701e36385e039b00da4dbc99ee6d178ebd862bf0f9e8c58a530bf8814b79888f40e68725b25662e3c92868583740569bd985c756250c8e00ebcd46719654a4dfb625feb939e0fd8", 0xb0}, {&(0x7f00000002c0)="4a22a2a36180cd165a86144e628570ada0d4329c0c103ef5b999317e677474606fd0661cd21fb9dda738d731349ea95a0c2f07147062219201f77053be5c63d7c1c3984002a4e8031cf9aaea43ce967137461887d183093b49fda01adff19cb0b987cb161d800a0631ff89a89c44bbc8a38d333464fbf1fa258cd36f05eb56a45ed46beaa3c2a84b1e584344b28d113a37fe844bad23b33ea51607b5326fc5e158e1160c1f007200cce9782957580bf04a57257eaebdccf7aaca2b233b407d3424f18c7323da106df09cfb78154cd0d5aef632dd85cca0e1c96ef05a7a307690", 0xe0}, {&(0x7f0000000040)="e6c39aeae8dc9c109aa18de434273939", 0x10}, {&(0x7f00000003c0)="8ef89438e6150d6b4c034c333f251d8403d5cddcc2814c3b3c5f0c943dc0f08f0cf2c472ad1a295818d5d280c08ecb1d60a23095ad57dee7486320b3a4111a8f92ba2db5cbb6dabf5d9a86cb3c6b6a53c8c8303e8fdbab96daf3ff223a286a29ae36689f", 0x64}, {&(0x7f0000000440)="4c2810acc95712754f3936aacbed3654718d0733e0b662145850342d4d058b52ffb864a4a02d32b6e7e88a410142c243ec994cd3cde59f3aee6544437870607c33300033d84a9e5f5ef6698704c0b75805d64eaddd8edf4290e02dda404986a39d7ed0e42b77157d63d590a9305b", 0x6e}, {&(0x7f00000004c0)="ac69af77673cc7e629e8f7df2aba75e05f48d96cb63502f3cb10ca8a2390e79f26b0e05660aec3ae4a4b1d76a36b655c16824c0b6d45aa4438d6066f0b7a9d66b5c4e3b198432c1f68665aae16738ff01606fef265b6acc8f2cb0262ff06bf5a17a0ea8a184982da85d2fd55fcdc93716dcee694b90ecfb3ec081d7d7dacc49694c4b3eb158a66cdb3b45bce4e67", 0x8e}, {&(0x7f00000005c0)="2415a2c69ca9374008bd7dee19a5dffac8e4df656322b344f3cfdb4955aac9d1fcd899fd8982cd35f76d057f3a29fb5ac593acb49d94d77aea81b254011ea6c45a0f6c0de74323f1813ded63b32e12a568464c601b2269993f66281f9fa9f5b58fd578f3ab5f4d97122d63e9e5ca5f65225e1860db10", 0x76}, {&(0x7f0000000640)="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", 0xfa}], 0x8}, 0x4000000) (async, rerun: 64) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000800)) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f00000007c0)=0x5, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000001100)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x4c, r12, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x4c}}, 0x0) (async) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r13, &(0x7f00000001c0)='\b', 0x1, 0xc0181, &(0x7f00000000c0)={0x11, 0xd, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) 285.293475ms ago: executing program 4 (id=1063): socket(0x3b, 0x805, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) socketpair(0x25, 0xa, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x200000}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) socket(0x3b, 0x805, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) socketpair(0x25, 0xa, 0x1, &(0x7f0000000080)) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) (async) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) (async) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x200000}}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) (async) 211.987807ms ago: executing program 3 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x0) 87.897579ms ago: executing program 4 (id=1065): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x206, 0x0, 0x0, 0x70, 0x72, 0x1, 0x3, 0x7, 0x0, 0xfffffff4, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) clock_gettime(0x0, &(0x7f0000001040)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000fc0)=[{{&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000380)=""/58, 0x3a}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f00000007c0)=""/74, 0x4a}], 0x7, &(0x7f00000008c0)=""/176, 0xb0}, 0xd27}, {{&(0x7f0000000980)=@phonet, 0x80, &(0x7f0000000e00)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000700)=""/10, 0xa}, {&(0x7f0000000a00)=""/99, 0x63}, {&(0x7f0000000a80)=""/61, 0x3d}, {&(0x7f0000000ac0)=""/26, 0x1a}, {&(0x7f0000000b00)=""/171, 0xab}, {&(0x7f0000000bc0)=""/125, 0x7d}, {&(0x7f0000000c40)=""/224, 0xe0}, {&(0x7f0000000d40)=""/139, 0x8b}], 0x9, &(0x7f0000000ec0)=""/255, 0xff}, 0x40}], 0x2, 0x10020, &(0x7f0000001080)={r5, r6+10000000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x6, 0x1c, 0x0, 0x2000e863) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001100030400"/20, @ANYRES32=r11], 0x20}}, 0x84880) 40.900466ms ago: executing program 0 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 19.454249ms ago: executing program 3 (id=1067): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="00012cbd7000ffdbdf250600000014001780040004000400050004000600040004000a00e8000802110000000000100017800400010004000600040002100a00e800ffffffffffff00001800178004000200040004000400010004000400040001001c00e7000cdb2b28c3a223383e0f7622af89842ee8978d2cac9a36be95b8fdaea0eb882e98c4bf9bb8885c5f14359512e28dbaafbc38a786789137f6e80855148949afded38d0c7084c9ba9c7b67f6a78b297587acbcb12ff244d60b89b36560d6e158803997c1944324c905a62a15452a"], 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x8001) 0s ago: executing program 2 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x56, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a000048000000000006907864010101ac1414aa44149d41ac1414bb00000006000000000000000500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async, rerun: 64) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2a}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x13, 0x0, 0x2000, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) close(0x3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="3bfa9edf27badd96f2418f2d2d55800a4914d90c789dba"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r14) (async) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) kernel console output (not intermixed with test programs): S network, BSSID 50:50:50:50:50:50 [ 119.574638][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.894585][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.014102][ T7665] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 120.075602][ T7665] __nla_validate_parse: 3 callbacks suppressed [ 120.075621][ T7665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.427'. [ 120.150165][ T7664] dvmrp0: entered allmulticast mode [ 120.389978][ T7683] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 120.446571][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 120.614727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.038385][ T989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.427179][ T989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.592818][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 121.654635][ C0] net_ratelimit: 1 callbacks suppressed [ 121.654656][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.686758][ T989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.925241][ T989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.929909][ T7731] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 121.974589][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.985049][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 122.317998][ T989] bridge_slave_1: left allmulticast mode [ 122.323729][ T989] bridge_slave_1: left promiscuous mode [ 122.335443][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.359029][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.367195][ T989] bridge_slave_0: left allmulticast mode [ 122.372907][ T989] bridge_slave_0: left promiscuous mode [ 122.381094][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.381935][ T7750] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 122.410006][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.422372][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.441481][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.455384][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.463658][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.694831][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.902442][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.455'. [ 122.923475][ T7767] netlink: 248 bytes leftover after parsing attributes in process `syz.4.455'. [ 122.934300][ T7767] NCSI netlink: No device for ifindex 0 [ 123.019045][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.092009][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.112829][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.129370][ T989] bond0 (unregistering): Released all slaves [ 123.155363][ T7750] team0: Port device netdevsim0 added [ 123.409247][ T7772] netlink: 84 bytes leftover after parsing attributes in process `syz.3.456'. [ 123.734635][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.796561][ T7789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.000969][ T7808] netlink: 72 bytes leftover after parsing attributes in process `syz.3.464'. [ 124.054581][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.194246][ T989] hsr_slave_0: left promiscuous mode [ 124.215485][ T989] hsr_slave_1: left promiscuous mode [ 124.252602][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.297512][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.356402][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.379566][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.441927][ T989] veth1_macvtap: left promiscuous mode [ 124.451139][ T989] veth0_macvtap: left promiscuous mode [ 124.461445][ T989] veth1_vlan: left promiscuous mode [ 124.468283][ T989] veth0_vlan: left promiscuous mode [ 124.551531][ T5837] Bluetooth: hci1: command tx timeout [ 124.781198][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 125.028996][ T7844] netlink: 'syz.4.472': attribute type 11 has an invalid length. [ 125.068425][ T989] team0 (unregistering): Port device team_slave_1 removed [ 125.093513][ T7845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.102588][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 125.132105][ T989] team0 (unregistering): Port device team_slave_0 removed [ 125.944855][ T7848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'. [ 126.008353][ T7748] chnl_net:caif_netlink_parms(): no params data found [ 126.125428][ T7858] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 126.133147][ T7858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.476'. [ 126.619696][ T7880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 126.636882][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.640623][ T5837] Bluetooth: hci1: command tx timeout [ 126.655052][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.662781][ T7748] bridge_slave_0: entered allmulticast mode [ 126.669211][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 126.722247][ T7748] bridge_slave_0: entered promiscuous mode [ 126.736754][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.750048][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.765845][ T7748] bridge_slave_1: entered allmulticast mode [ 126.796181][ T7748] bridge_slave_1: entered promiscuous mode [ 126.819020][ T7889] v: renamed from veth1_virt_wifi (while UP) [ 126.854927][ C0] net_ratelimit: 2 callbacks suppressed [ 126.854949][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.025970][ T7748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.093192][ T7748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.176639][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.191796][ T7748] team0: Port device team_slave_0 added [ 127.219744][ T7748] team0: Port device team_slave_1 added [ 127.298125][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.306119][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.381032][ T7748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.395663][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.402754][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.444759][ T7748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.577986][ T7914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.610956][ T7748] hsr_slave_0: entered promiscuous mode [ 127.641125][ T7748] hsr_slave_1: entered promiscuous mode [ 127.650226][ T7919] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 127.680980][ T7748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.694565][ T7748] Cannot create hsr debugfs directory [ 127.726787][ T7919] team0: Device hsr_slave_0 failed to register rx_handler [ 127.772960][ T7914] can: request_module (can-proto-4) failed. [ 127.894514][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.213698][ T7944] netlink: 'syz.0.492': attribute type 5 has an invalid length. [ 128.221564][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.251765][ T7944] netlink: 140 bytes leftover after parsing attributes in process `syz.0.492'. [ 128.368993][ T7947] team0: Device wg2 is of different type [ 128.512841][ T7952] netlink: 'syz.4.495': attribute type 4 has an invalid length. [ 128.695337][ T5837] Bluetooth: hci1: command tx timeout [ 128.695346][ T5838] Bluetooth: hci2: command tx timeout [ 128.814523][ T7963] syz.4.498: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.872176][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.4.498 Not tainted 6.13.0-rc7-syzkaller-00108-g70d81f25cc92 #0 [ 128.882860][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 128.892964][ T7963] Call Trace: [ 128.896276][ T7963] [ 128.899231][ T7963] dump_stack_lvl+0x241/0x360 [ 128.903962][ T7963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.909199][ T7963] ? __pfx__printk+0x10/0x10 [ 128.913920][ T7963] ? __rcu_read_unlock+0xa1/0x110 [ 128.915944][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 128.918958][ T7963] warn_alloc+0x278/0x410 [ 128.919007][ T7963] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 128.934549][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.938225][ T7963] ? __pfx_warn_alloc+0x10/0x10 [ 128.949976][ T7963] ? kasan_save_track+0x3f/0x80 [ 128.954859][ T7963] ? __kasan_kmalloc+0x98/0xb0 [ 128.959640][ T7963] ? xsk_setsockopt+0x4ea/0x950 [ 128.964497][ T7963] ? do_sock_setsockopt+0x3af/0x720 [ 128.969702][ T7963] ? __x64_sys_setsockopt+0x1ee/0x280 [ 128.975072][ T7963] ? do_syscall_64+0xf3/0x230 [ 128.979759][ T7963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.985946][ T7963] __vmalloc_node_range_noprof+0x126/0x1380 [ 128.991885][ T7963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.998224][ T7963] ? __kasan_kmalloc+0x98/0xb0 [ 129.002995][ T7963] vmalloc_user_noprof+0x74/0x80 [ 129.007930][ T7963] ? xskq_create+0xb6/0x170 [ 129.012433][ T7963] xskq_create+0xb6/0x170 [ 129.016768][ T7963] xsk_init_queue+0xa1/0x100 [ 129.021365][ T7963] xsk_setsockopt+0x4ea/0x950 [ 129.026047][ T7963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.031270][ T7963] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.036136][ T7963] ? aa_sock_opt_perm+0x79/0x120 [ 129.041105][ T7963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.046309][ T7963] do_sock_setsockopt+0x3af/0x720 [ 129.051433][ T7963] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 129.056983][ T7963] ? __fget_files+0x395/0x410 [ 129.061703][ T7963] ? __fget_files+0x2a/0x410 [ 129.066315][ T7963] __x64_sys_setsockopt+0x1ee/0x280 [ 129.071550][ T7963] do_syscall_64+0xf3/0x230 [ 129.076070][ T7963] ? clear_bhb_loop+0x35/0x90 [ 129.080750][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.086663][ T7963] RIP: 0033:0x7f7014985d29 [ 129.091083][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.110722][ T7963] RSP: 002b:00007f701575d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.119155][ T7963] RAX: ffffffffffffffda RBX: 00007f7014b76080 RCX: 00007f7014985d29 [ 129.127230][ T7963] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 129.135201][ T7963] RBP: 00007f7014a01b08 R08: 0000000000000004 R09: 0000000000000000 [ 129.143167][ T7963] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.151132][ T7963] R13: 0000000000000000 R14: 00007f7014b76080 R15: 00007ffd20b6cea8 [ 129.159394][ T7963] [ 129.207283][ T7963] Mem-Info: [ 129.228096][ T7963] active_anon:4939 inactive_anon:0 isolated_anon:0 [ 129.228096][ T7963] active_file:1295 inactive_file:38279 isolated_file:0 [ 129.228096][ T7963] unevictable:768 dirty:92 writeback:50 [ 129.228096][ T7963] slab_reclaimable:9859 slab_unreclaimable:97627 [ 129.228096][ T7963] mapped:30607 shmem:1406 pagetables:785 [ 129.228096][ T7963] sec_pagetables:0 bounce:0 [ 129.228096][ T7963] kernel_misc_reclaimable:0 [ 129.228096][ T7963] free:1346342 free_pcp:313 free_cma:0 [ 129.254596][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.277803][ T7963] Node 0 active_anon:19856kB inactive_anon:0kB active_file:5180kB inactive_file:153044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122528kB dirty:364kB writeback:100kB shmem:4088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11452kB pagetables:3140kB sec_pagetables:0kB all_unreclaimable? no [ 129.313820][ T7968] netlink: 'syz.0.497': attribute type 33 has an invalid length. [ 129.349930][ T7973] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 129.369775][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 129.391336][ T7963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 129.429207][ T7963] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.520063][ T7963] lowmem_reserve[]: 0 2465 2466 0 0 [ 129.547441][ T7963] Node 0 DMA32 free:1460244kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19916kB inactive_anon:0kB active_file:5180kB inactive_file:152216kB unevictable:1536kB writepending:160kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:2296kB local_pcp:968kB free_cma:0kB [ 129.621212][ T7963] lowmem_reserve[]: 0 0 0 0 0 [ 129.636062][ T7963] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 129.678623][ T7963] lowmem_reserve[]: 0 0 0 0 0 [ 129.693948][ T7963] Node 1 Normal free:3908220kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 129.734378][ T7963] lowmem_reserve[]: [ 129.736126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.831971][ T7963] 0 0 0 0 0 [ 129.848467][ T7963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.921928][ T7963] Node 0 DMA32: 49*4kB (UM) 36*8kB (ME) 60*16kB (UME) 231*32kB (UME) 105*64kB (UME) 45*128kB (UME) 23*256kB (UME) 12*512kB (UME) 8*1024kB (UME) 5*2048kB (UME) 344*4096kB (M) = 1460804kB [ 129.974514][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.982347][ T7748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.990777][ T7963] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 130.014290][ T7748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.033445][ T7963] Node 1 Normal: 223*4kB (UME) 54*8kB (UME) 37*16kB (UME) 212*32kB (UME) 96*64kB (UME) 39*128kB (UME) 17*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 944*4096kB (M) = 3908220kB [ 130.094559][ T7963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.134581][ T7963] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.159974][ T7963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.185684][ T7963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.201533][ T7963] 40980 total pagecache pages [ 130.208051][ T7963] 0 pages in swap cache [ 130.212331][ T7963] Free swap = 124996kB [ 130.216708][ T7963] Total swap = 124996kB [ 130.221059][ T7963] 2097051 pages RAM [ 130.225052][ T7963] 0 pages HighMem/MovableOnly [ 130.229896][ T7963] 427007 pages reserved [ 130.234070][ T7963] 0 pages cma reserved [ 130.294561][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 130.351067][ T7748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.400818][ T7748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.711084][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.784859][ T5837] Bluetooth: hci1: command tx timeout [ 130.794054][ T8022] vlan3: entered allmulticast mode [ 130.869292][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.940785][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.948018][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.996274][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.003507][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.030233][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 131.321901][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 131.480278][ T8056] sit0: entered promiscuous mode [ 131.509510][ T8056] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 131.549094][ T8056] netlink: 1 bytes leftover after parsing attributes in process `syz.4.521'. [ 131.880321][ T7748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.054583][ C0] net_ratelimit: 6 callbacks suppressed [ 132.054612][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.090466][ T7748] veth0_vlan: entered promiscuous mode [ 132.162466][ T7748] veth1_vlan: entered promiscuous mode [ 132.346540][ T7748] veth0_macvtap: entered promiscuous mode [ 132.374559][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.395221][ T7748] veth1_macvtap: entered promiscuous mode [ 132.508905][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.554668][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.575287][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.587868][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.607601][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.615691][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.642147][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.654806][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.654976][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.674833][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.702201][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.713121][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.727587][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.738647][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.749588][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.757068][ T8114] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.757104][ T8114] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 132.777500][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.789306][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.810419][ T8111] batadv_slave_1: entered promiscuous mode [ 132.823930][ T8106] netlink: 'syz.4.532': attribute type 64 has an invalid length. [ 132.829639][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.839202][ T8101] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.871089][ T8106] netlink: 5 bytes leftover after parsing attributes in process `syz.4.532'. [ 132.887766][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.899249][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.915215][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 132.942442][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.532'. [ 132.954721][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.968631][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.989266][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.018849][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.044874][ T7748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.065262][ T7748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.077238][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.087871][ T8116] batadv_slave_1: left promiscuous mode [ 133.094629][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.128818][ T7748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.174927][ T7748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.210310][ T7748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.237311][ T7748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.414527][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.552174][ T8139] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 133.570287][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.579465][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.585342][ T8145] xfrm1: entered allmulticast mode [ 133.595805][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.602115][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.612338][ T8139] netlink: 'syz.0.540': attribute type 2 has an invalid length. [ 133.681031][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.689284][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.134499][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.246422][ T3494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.364909][ T8145] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 134.454559][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.468464][ T3494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.586716][ T3494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.881705][ T3494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.132474][ T3494] bridge_slave_1: left allmulticast mode [ 135.170142][ T3494] bridge_slave_1: left promiscuous mode [ 135.175945][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.197872][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.250439][ T3494] bridge_slave_0: left allmulticast mode [ 135.272591][ T3494] bridge_slave_0: left promiscuous mode [ 135.283766][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.495715][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.666111][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.678076][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.697690][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.706620][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.714726][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.729986][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.074974][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.092278][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.102948][ T3494] bond0 (unregistering): Released all slaves [ 136.214528][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.534492][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.766311][ T8222] chnl_net:caif_netlink_parms(): no params data found [ 137.254515][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.275869][ T3494] hsr_slave_0: left promiscuous mode [ 137.282494][ T3494] hsr_slave_1: left promiscuous mode [ 137.298638][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.307326][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.337143][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.346473][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.372364][ T3494] veth1_macvtap: left promiscuous mode [ 137.380157][ T3494] veth0_macvtap: left promiscuous mode [ 137.386176][ T3494] veth1_vlan: left promiscuous mode [ 137.391786][ T3494] veth0_vlan: left promiscuous mode [ 137.456846][ T8295] netlink: 'syz.4.563': attribute type 8 has an invalid length. [ 137.473676][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.563'. [ 137.574548][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.821266][ T5837] Bluetooth: hci1: command tx timeout [ 137.980667][ T3494] team0 (unregistering): Port device team_slave_1 removed [ 138.025372][ T3494] team0 (unregistering): Port device team_slave_0 removed [ 138.299680][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.570696][ T8284] netlink: 340 bytes leftover after parsing attributes in process `syz.0.565'. [ 138.595898][ T8285] netlink: 340 bytes leftover after parsing attributes in process `syz.0.565'. [ 138.614543][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.336071][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.654504][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.898042][ T5837] Bluetooth: hci1: command tx timeout [ 140.374520][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 140.694928][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.014701][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.021867][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.035168][ T8222] bridge_slave_0: entered allmulticast mode [ 141.043628][ T8222] bridge_slave_0: entered promiscuous mode [ 141.095638][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.119791][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.137512][ T8222] bridge_slave_1: entered allmulticast mode [ 141.165086][ T8222] bridge_slave_1: entered promiscuous mode [ 141.414555][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.443095][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.495397][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.726528][ T8222] team0: Port device team_slave_0 added [ 141.734496][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.757170][ T8222] team0: Port device team_slave_1 added [ 141.975572][ T5837] Bluetooth: hci1: command tx timeout [ 142.009013][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.045079][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.105942][ T8222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.150658][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.583'. [ 142.162040][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.174798][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.275363][ T8222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.454536][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.531275][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.591'. [ 142.541812][ T8399] netlink: 'syz.1.591': attribute type 7 has an invalid length. [ 142.566375][ T8222] hsr_slave_0: entered promiscuous mode [ 142.572326][ T8399] netlink: 'syz.1.591': attribute type 8 has an invalid length. [ 142.584461][ T8222] hsr_slave_1: entered promiscuous mode [ 142.595666][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 142.639156][ T8222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.651550][ T8222] Cannot create hsr debugfs directory [ 142.774589][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.357492][ T8454] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.600'. [ 143.385958][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 143.408954][ T8454] netlink: zone id is out of range [ 143.414720][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 143.421014][ T8454] netlink: zone id is out of range [ 143.472321][ T8454] netlink: zone id is out of range [ 143.494563][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.505172][ T8454] netlink: get zone limit has 8 unknown bytes [ 143.814535][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.937337][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.604'. [ 144.097175][ T5837] Bluetooth: hci1: command tx timeout [ 144.390578][ T8222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.447926][ T8222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.530134][ T8222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.536969][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.638442][ T8222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.699136][ T8489] netlink: 188 bytes leftover after parsing attributes in process `syz.4.610'. [ 144.723948][ T8489] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 144.829466][ T8502] geneve2: entered promiscuous mode [ 144.854486][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.859712][ T8502] geneve2: entered allmulticast mode [ 145.088699][ T8517] bond_slave_1: entered promiscuous mode [ 145.129814][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.155237][ T8222] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.175604][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.182775][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.213330][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.220479][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.259205][ T5890] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 145.821197][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.882967][ T8222] veth0_vlan: entered promiscuous mode [ 145.929343][ T8222] veth1_vlan: entered promiscuous mode [ 145.991636][ T8565] IPv6: sit1: Disabled Multicast RS [ 146.042266][ T8222] veth0_macvtap: entered promiscuous mode [ 146.052831][ T8222] veth1_macvtap: entered promiscuous mode [ 146.067966][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.078551][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.088462][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.099202][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.109111][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.119710][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.129820][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.140475][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.151652][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.165066][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.175592][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.185749][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.196250][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.206144][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.217086][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.227037][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.237623][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.248899][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.258773][ T8222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.267839][ T8222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.276883][ T8222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.285685][ T8222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.416618][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.426162][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.435938][ T8583] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 146.487571][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 146.538606][ T8587] veth1: entered promiscuous mode [ 146.538668][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 146.573500][ T8587] veth1: left promiscuous mode [ 146.637005][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.659071][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.779493][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.826362][ T8602] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 146.834364][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.147269][ T8617] vlan1: entered promiscuous mode [ 147.167012][ T8612] vlan1: left promiscuous mode [ 147.452926][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 147.499897][ T8630] net_ratelimit: 6 callbacks suppressed [ 147.499922][ T8630] openvswitch: netlink: IP tunnel dst address not specified [ 147.563613][ T8629] openvswitch: netlink: IP tunnel dst address not specified [ 147.576907][ T8637] sctp: [Deprecated]: syz.0.641 (pid 8637) Use of int in maxseg socket option. [ 147.576907][ T8637] Use struct sctp_assoc_value instead [ 147.627766][ T8640] sctp: [Deprecated]: syz.0.641 (pid 8640) Use of int in maxseg socket option. [ 147.627766][ T8640] Use struct sctp_assoc_value instead [ 147.654678][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.974526][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.157689][ T8673] netlink: 'syz.4.650': attribute type 11 has an invalid length. [ 148.236667][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.330833][ T8670] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 148.694535][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.722368][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.928953][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.000205][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.014526][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.113279][ T8693] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1486369625/1486369627 [ 149.132295][ T8695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.654'. [ 149.141660][ T8693] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1486369625/1486369627 [ 149.294853][ T35] bridge_slave_1: left allmulticast mode [ 149.301352][ T35] bridge_slave_1: left promiscuous mode [ 149.330908][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.427652][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 149.433326][ T8709] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.455509][ T35] bridge_slave_0: left allmulticast mode [ 149.462502][ T35] bridge_slave_0: left promiscuous mode [ 149.481713][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.675628][ T8724] SET target dimension over the limit! [ 149.734485][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.866007][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.878067][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.888002][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.903018][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.921259][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.931158][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.054475][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.273971][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.285400][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.303426][ T35] bond0 (unregistering): Released all slaves [ 150.586596][ T8756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.668'. [ 150.671499][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 150.774497][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.857665][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 151.094499][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 151.179390][ T8730] chnl_net:caif_netlink_parms(): no params data found [ 151.212020][ T8781] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 151.246796][ T8793] netlink: 112 bytes leftover after parsing attributes in process `syz.1.670'. [ 151.264645][ T8781] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 151.284183][ T8785] netlink: 'syz.0.671': attribute type 21 has an invalid length. [ 151.424112][ T35] hsr_slave_0: left promiscuous mode [ 151.439646][ T35] hsr_slave_1: left promiscuous mode [ 151.447842][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.455884][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.485178][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.497688][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.579993][ T35] veth1_macvtap: left promiscuous mode [ 151.605150][ T35] veth0_macvtap: left promiscuous mode [ 151.610865][ T35] veth1_vlan: left promiscuous mode [ 151.619854][ T35] veth0_vlan: left promiscuous mode [ 151.991222][ T5837] Bluetooth: hci1: command tx timeout [ 152.252494][ T35] team0 (unregistering): Port device team_slave_1 removed [ 152.314700][ T35] team0 (unregistering): Port device team_slave_0 removed [ 152.854633][ C0] net_ratelimit: 2 callbacks suppressed [ 152.854656][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.040222][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 153.143350][ T8829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.680'. [ 153.174568][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.207462][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.274759][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.282280][ T8730] bridge_slave_0: entered allmulticast mode [ 153.315803][ T8730] bridge_slave_0: entered promiscuous mode [ 153.324075][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.378465][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.418926][ T8730] bridge_slave_1: entered allmulticast mode [ 153.438316][ T8730] bridge_slave_1: entered promiscuous mode [ 153.804257][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.832379][ T8859] sit2: entered promiscuous mode [ 153.838550][ T8859] sit2: entered allmulticast mode [ 153.860213][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.894604][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.013841][ T8730] team0: Port device team_slave_0 added [ 154.041237][ T8730] team0: Port device team_slave_1 added [ 154.054551][ T5837] Bluetooth: hci1: command tx timeout [ 154.112065][ T8872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 154.247953][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.275188][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.332159][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.350902][ T8884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.694'. [ 154.369784][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.397234][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 154.399637][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.451646][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.632789][ T8891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.696'. [ 154.653807][ T8730] hsr_slave_0: entered promiscuous mode [ 154.670971][ T8730] hsr_slave_1: entered promiscuous mode [ 154.694210][ T8730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.704501][ T8730] Cannot create hsr debugfs directory [ 154.721883][ T8897] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.747811][ T8897] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 154.782382][ T8904] netlink: 256 bytes leftover after parsing attributes in process `syz.3.697'. [ 154.934551][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.973796][ T8913] netlink: 'syz.0.701': attribute type 21 has an invalid length. [ 155.004702][ T8913] netlink: 152 bytes leftover after parsing attributes in process `syz.0.701'. [ 155.078491][ T8917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.702'. [ 155.134079][ T8920] openvswitch: netlink: Missing valid actions attribute. [ 155.161198][ T8920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.372467][ T8928] netlink: 68 bytes leftover after parsing attributes in process `syz.0.704'. [ 155.372915][ T8929] netlink: 68 bytes leftover after parsing attributes in process `syz.0.704'. [ 155.658115][ T8932] xt_cgroup: path and classid specified [ 155.683533][ T8730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.727185][ T8730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.768831][ T8730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.785834][ T8730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.912621][ T8938] addrtype_mt_checkentry_v1: 55 callbacks suppressed [ 155.912644][ T8938] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 155.940744][ T8940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.707'. [ 155.974658][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.054335][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.136899][ T5837] Bluetooth: hci1: command tx timeout [ 156.144361][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.199545][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.206871][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.395107][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.418026][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.419467][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.425259][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.489231][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.568631][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.577001][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.588555][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.981857][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.014634][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.032043][ T8950] chnl_net:caif_netlink_parms(): no params data found [ 157.209185][ T8730] veth0_vlan: entered promiscuous mode [ 157.220467][ T8730] veth1_vlan: entered promiscuous mode [ 157.242925][ T8730] veth0_macvtap: entered promiscuous mode [ 157.252546][ T8730] veth1_macvtap: entered promiscuous mode [ 157.442483][ T8997] tipc: Enabling of bearer rejected, failed to enable media [ 157.500893][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.514775][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.549226][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.561002][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.579419][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.600371][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.620679][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.641720][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.684856][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.736964][ T9014] netlink: 'syz.3.722': attribute type 9 has an invalid length. [ 157.776202][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.783380][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.785204][ T9014] netlink: 'syz.3.722': attribute type 6 has an invalid length. [ 157.794674][ T8950] bridge_slave_0: entered allmulticast mode [ 157.813819][ T8950] bridge_slave_0: entered promiscuous mode [ 157.840026][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.847622][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.855470][ T8950] bridge_slave_1: entered allmulticast mode [ 157.862454][ T8950] bridge_slave_1: entered promiscuous mode [ 157.869742][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.880648][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.891010][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.901839][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.912961][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.933800][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.947151][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.958937][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.973239][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.054564][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.137883][ T8730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.177886][ T8730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.198005][ T8730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.215128][ T5838] Bluetooth: hci1: command tx timeout [ 158.224475][ T8730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.279433][ T8950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.344533][ T9032] netlink: 96 bytes leftover after parsing attributes in process `syz.0.726'. [ 158.367187][ T8950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.555087][ T8950] team0: Port device team_slave_0 added [ 158.666053][ T8950] team0: Port device team_slave_1 added [ 158.698970][ T5838] Bluetooth: hci4: command tx timeout [ 158.848159][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.868029][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.009038][ T9066] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.051605][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.051673][ T9073] Cannot find del_set index 4 as target [ 159.060963][ T9066] netlink: 'syz.0.734': attribute type 13 has an invalid length. [ 159.082653][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.109016][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.140077][ T8950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.183847][ T9066] veth0_macvtap: left promiscuous mode [ 159.208311][ T9066] macvtap0: entered allmulticast mode [ 159.242575][ T9066] macvtap0: refused to change device tx_queue_len [ 159.258656][ T9082] ebt_limit: overflow, try lower: 570423552/2483027968 [ 159.310504][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.328186][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.374215][ T8950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.457010][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.489007][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.542598][ T8950] hsr_slave_0: entered promiscuous mode [ 159.580849][ T8950] hsr_slave_1: entered promiscuous mode [ 159.592035][ T8950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.622852][ T8950] Cannot create hsr debugfs directory [ 160.134544][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.316752][ T8950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.580370][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.677021][ T8950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.776261][ T5838] Bluetooth: hci4: command tx timeout [ 160.801224][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.839727][ T8950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.892948][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.937998][ T8950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.001112][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.078904][ T8950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.091586][ T8950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.112506][ T8950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.131022][ T8950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.174522][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.193212][ T11] bridge_slave_1: left allmulticast mode [ 161.201244][ T11] bridge_slave_1: left promiscuous mode [ 161.207911][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.217736][ T11] bridge_slave_0: left allmulticast mode [ 161.223447][ T11] bridge_slave_0: left promiscuous mode [ 161.230113][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.695207][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.718245][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.719851][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.748048][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.769160][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.772814][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.796297][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.804172][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.836033][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.873527][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.893067][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.903756][ T11] bond0 (unregistering): Released all slaves [ 162.176059][ T9152] netlink: 'syz.0.750': attribute type 3 has an invalid length. [ 162.183988][ T9152] netlink: 224 bytes leftover after parsing attributes in process `syz.0.750'. [ 162.214569][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.256614][ T8950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.413600][ T8950] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.480183][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.487445][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.642713][ T11] hsr_slave_0: left promiscuous mode [ 162.649783][ T11] hsr_slave_1: left promiscuous mode [ 162.660633][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.674729][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.711445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.731580][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.811962][ T11] veth1_macvtap: left promiscuous mode [ 162.827089][ T11] veth0_macvtap: left promiscuous mode [ 162.838497][ T11] veth1_vlan: left promiscuous mode [ 162.849598][ T11] veth0_vlan: left promiscuous mode [ 162.854680][ T5838] Bluetooth: hci4: command tx timeout [ 163.083268][ T9186] xt_l2tp: invalid flags combination: 4 [ 163.240131][ T9188] netlink: 'syz.3.757': attribute type 3 has an invalid length. [ 163.250776][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 163.254551][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.726564][ T11] team0 (unregistering): Port device team_slave_1 removed [ 163.771874][ T11] team0 (unregistering): Port device team_slave_0 removed [ 163.900699][ T5838] Bluetooth: hci1: command tx timeout [ 164.294611][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.353676][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.360885][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.608872][ T9144] chnl_net:caif_netlink_parms(): no params data found [ 164.726373][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.761'. [ 164.816677][ T9211] gretap1: entered promiscuous mode [ 164.963145][ T8950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.973772][ T5838] Bluetooth: hci4: command tx timeout [ 164.979264][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 165.309037][ T9238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.326142][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.333887][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.334669][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.364677][ T9144] bridge_slave_0: entered allmulticast mode [ 165.379424][ T9238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.385756][ T9144] bridge_slave_0: entered promiscuous mode [ 165.416283][ T9240] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 165.435446][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.442850][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.455620][ T9235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.459617][ T9144] bridge_slave_1: entered allmulticast mode [ 165.475648][ T9144] bridge_slave_1: entered promiscuous mode [ 165.523850][ T9240] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 165.642074][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.662037][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.680694][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.808914][ T9251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.862104][ T9144] team0: Port device team_slave_0 added [ 165.893876][ T9144] team0: Port device team_slave_1 added [ 165.974749][ T5838] Bluetooth: hci1: command tx timeout [ 166.213999][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.241201][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.269122][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.351741][ T8950] veth0_vlan: entered promiscuous mode [ 166.374557][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.375069][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.436645][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.479658][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.599579][ T9144] hsr_slave_0: entered promiscuous mode [ 166.672775][ T9144] hsr_slave_1: entered promiscuous mode [ 166.680297][ T9144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.699327][ T9144] Cannot create hsr debugfs directory [ 166.784271][ T9285] netlink: 2 bytes leftover after parsing attributes in process `syz.4.777'. [ 166.903217][ T8950] veth1_vlan: entered promiscuous mode [ 167.219978][ T8950] veth0_macvtap: entered promiscuous mode [ 167.314350][ T8950] veth1_macvtap: entered promiscuous mode [ 167.373484][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.385325][ T9309] netlink: 244 bytes leftover after parsing attributes in process `syz.4.783'. [ 167.414575][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.452232][ T9305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.476558][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.508170][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.529034][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.539162][ T9305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.550001][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.574893][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.604559][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.624515][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.647449][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.669480][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.714077][ T9326] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.786'. [ 167.725468][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.769954][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.794806][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.815738][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.836440][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.849752][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.860991][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.871815][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.883590][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.024335][ T8950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.035694][ T9333] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.789'. [ 168.045038][ T8950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.045141][ T8950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.064685][ T5838] Bluetooth: hci1: command tx timeout [ 168.095601][ T8950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.319651][ T9343] netlink: 'syz.3.791': attribute type 29 has an invalid length. [ 168.431534][ T9346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.794'. [ 168.454507][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.513339][ T7599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.533622][ T9340] netlink: 'syz.3.791': attribute type 29 has an invalid length. [ 168.542351][ T7599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.561955][ T7599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.584572][ T7599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.927507][ T9144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.007563][ T9144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.214477][ T9144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.234999][ T9144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.407948][ T7599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.494472][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.496406][ T9389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.615508][ T9389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.636184][ T7599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.775883][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.846595][ T7599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.907905][ T9144] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.965844][ T7599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.041375][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.048576][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.096280][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.103432][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.135187][ T5838] Bluetooth: hci1: command tx timeout [ 170.211558][ T9144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.264467][ T9144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.415536][ T9410] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 170.443199][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 170.534612][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.545625][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.569154][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.577812][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.590991][ T7599] bridge_slave_1: left allmulticast mode [ 170.597111][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.617709][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.625484][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.628102][ T7599] bridge_slave_1: left promiscuous mode [ 170.675090][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.710212][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 170.725240][ T7599] bridge_slave_0: left allmulticast mode [ 170.731375][ T7599] bridge_slave_0: left promiscuous mode [ 170.742126][ T9429] netlink: 5 bytes leftover after parsing attributes in process `syz.3.809'. [ 170.751437][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.498357][ T7599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.527763][ T7599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.547692][ T7599] bond0 (unregistering): Released all slaves [ 171.574500][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.715372][ T9429] 0FN: renamed from bond_slave_0 [ 171.781776][ T9429] 0FN: entered allmulticast mode [ 172.051095][ T9144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.403590][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.817'. [ 172.413320][ T9144] veth0_vlan: entered promiscuous mode [ 172.423892][ T9144] veth1_vlan: entered promiscuous mode [ 172.483003][ T9472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.507407][ T7599] hsr_slave_0: left promiscuous mode [ 172.538491][ T7599] hsr_slave_1: left promiscuous mode [ 172.549821][ T9472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.560228][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.588289][ T7599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.614873][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.621791][ T9472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.694849][ T5838] Bluetooth: hci4: command tx timeout [ 172.765206][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.772933][ T7599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.831606][ T7599] veth1_macvtap: left promiscuous mode [ 172.842572][ T7599] veth0_macvtap: left promiscuous mode [ 172.855376][ T7599] veth1_vlan: left promiscuous mode [ 172.863941][ T7599] veth0_vlan: left promiscuous mode [ 173.654576][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.894168][ T7599] team0 (unregistering): Port device team_slave_1 removed [ 174.017672][ T7599] team0 (unregistering): Port device team_slave_0 removed [ 174.636960][ T9144] veth0_macvtap: entered promiscuous mode [ 174.649917][ T9475] vlan3: entered promiscuous mode [ 174.658114][ T9475] bond0: entered promiscuous mode [ 174.663182][ T9475] bond_slave_0: entered promiscuous mode [ 174.670132][ T9475] bond_slave_1: entered promiscuous mode [ 174.689005][ T9475] bond0: left promiscuous mode [ 174.693976][ T9475] bond_slave_0: left promiscuous mode [ 174.694654][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.700667][ T9475] bond_slave_1: left promiscuous mode [ 174.732982][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 174.774802][ T5838] Bluetooth: hci4: command tx timeout [ 174.808855][ T9144] veth1_macvtap: entered promiscuous mode [ 174.904989][ T9549] netlink: 'syz.0.822': attribute type 3 has an invalid length. [ 175.017313][ T9556] netlink: 'syz.0.822': attribute type 3 has an invalid length. [ 175.028201][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.054976][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.073168][ T9418] bridge_slave_0: entered allmulticast mode [ 175.110750][ T9418] bridge_slave_0: entered promiscuous mode [ 175.149072][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.158947][ T9553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.824'. [ 175.189391][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.228367][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.249437][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.282213][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.293967][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.317053][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.340405][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.363906][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.390359][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.434576][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.448322][ T9418] bridge_slave_1: entered allmulticast mode [ 175.478006][ T9418] bridge_slave_1: entered promiscuous mode [ 175.499703][ T9553] netlink: 'syz.4.824': attribute type 29 has an invalid length. [ 175.513731][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.535866][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.555730][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.574437][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.600587][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.623528][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.645444][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.674782][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.711714][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.734596][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.756795][ T9557] netlink: 'syz.4.824': attribute type 29 has an invalid length. [ 175.822754][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.830'. [ 175.844729][ T9587] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 175.852454][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 175.942944][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.952708][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 175.970268][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.007376][ T9144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.034827][ T9144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.063289][ T9144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.084549][ T9144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.173882][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.832'. [ 176.201175][ T9418] team0: Port device team_slave_0 added [ 176.211877][ T9418] team0: Port device team_slave_1 added [ 176.280300][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 176.383070][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.394827][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.432525][ T9418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.477514][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.493359][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.542298][ T9418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.768883][ T9418] hsr_slave_0: entered promiscuous mode [ 176.774749][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.797256][ T9418] hsr_slave_1: entered promiscuous mode [ 176.854644][ T5838] Bluetooth: hci4: command tx timeout [ 176.866283][ T9418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.901949][ T9418] Cannot create hsr debugfs directory [ 176.941885][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.975692][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.186825][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.197916][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.204363][ T9658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.841'. [ 177.814502][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.966114][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 178.852068][ T989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.854652][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.892443][ T9418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.903721][ T9418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.925910][ T9418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.934704][ T5838] Bluetooth: hci4: command tx timeout [ 178.971953][ T9418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.061456][ T989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.156667][ T989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.250723][ T989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.283150][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.330976][ T9418] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.369508][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.376702][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.495424][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.502609][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.570124][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 179.593917][ T989] bridge_slave_1: left allmulticast mode [ 179.633682][ T989] bridge_slave_1: left promiscuous mode [ 179.645470][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.700104][ T989] bridge_slave_0: left allmulticast mode [ 179.716363][ T989] bridge_slave_0: left promiscuous mode [ 179.722119][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.894485][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.115136][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.141987][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.156110][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.183096][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.208499][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.220791][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.599564][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.618608][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.644886][ T989] bond0 (unregistering): Released all slaves [ 180.738310][ T9761] veth1: entered promiscuous mode [ 180.786392][ T9761] veth1: left promiscuous mode [ 180.934608][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.030085][ T9790] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.256750][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 181.498716][ T989] hsr_slave_0: left promiscuous mode [ 181.522111][ T989] hsr_slave_1: left promiscuous mode [ 181.537573][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.555735][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.586190][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.593807][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.639117][ T989] veth1_macvtap: left promiscuous mode [ 181.647603][ T989] veth0_macvtap: left promiscuous mode [ 181.662905][ T989] veth1_vlan: left promiscuous mode [ 181.668553][ T989] veth0_vlan: left promiscuous mode [ 181.974600][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.297057][ T5837] Bluetooth: hci1: command tx timeout [ 182.319377][ T989] team0 (unregistering): Port device team_slave_1 removed [ 182.360904][ T989] team0 (unregistering): Port device team_slave_0 removed [ 182.763781][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.963726][ T9418] veth0_vlan: entered promiscuous mode [ 182.973982][ T9418] veth1_vlan: entered promiscuous mode [ 183.014494][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.039308][ T9753] chnl_net:caif_netlink_parms(): no params data found [ 183.108831][ T9418] veth0_macvtap: entered promiscuous mode [ 183.200464][ T9843] netlink: 'syz.0.868': attribute type 21 has an invalid length. [ 183.314290][ T9418] veth1_macvtap: entered promiscuous mode [ 183.416772][ T9862] netlink: 'syz.0.871': attribute type 28 has an invalid length. [ 183.425073][ T9862] netlink: 'syz.0.871': attribute type 3 has an invalid length. [ 183.472178][ T9862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.871'. [ 183.509194][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.543151][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.564549][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.593528][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.619401][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.654669][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.674790][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.694712][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.711964][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.776328][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.834512][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.851613][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.865605][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.875918][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.886860][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.917143][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.937762][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.949808][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.961239][ T9753] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.969394][ T9753] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.977222][ T9753] bridge_slave_0: entered allmulticast mode [ 183.984677][ T9753] bridge_slave_0: entered promiscuous mode [ 183.991189][ T9886] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 184.000241][ T9886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.025730][ T9886] openvswitch: netlink: IP tunnel dst address not specified [ 184.051354][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 184.060714][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.095240][ T9418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.112651][ T9418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.124578][ T9418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.144845][ T9418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.180262][ T9753] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.189514][ T9753] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.197238][ T9753] bridge_slave_1: entered allmulticast mode [ 184.204933][ T9753] bridge_slave_1: entered promiscuous mode [ 184.326313][ T9753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.351984][ T9753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.374625][ T5837] Bluetooth: hci1: command tx timeout [ 184.565851][ T7599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.594757][ T9753] team0: Port device team_slave_0 added [ 184.604577][ T7599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.754359][ T9753] team0: Port device team_slave_1 added [ 184.841213][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.850216][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.925757][ T9753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.932758][ T9753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.959565][ T9753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.972222][ T9753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.979354][ T9753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.005914][ T9753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.094530][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.230750][ T9753] hsr_slave_0: entered promiscuous mode [ 185.285716][ T9753] hsr_slave_1: entered promiscuous mode [ 185.315801][ T9753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.323422][ T9753] Cannot create hsr debugfs directory [ 185.360594][ T9938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.369156][ T9938] bridge0: port 3(bond2) entered blocking state [ 185.377124][ T9938] bridge0: port 3(bond2) entered disabled state [ 185.383751][ T9938] bond2: entered allmulticast mode [ 185.391482][ T9938] bond2: entered promiscuous mode [ 185.960490][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 186.134564][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.176920][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.459916][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.470403][ T5837] Bluetooth: hci1: command tx timeout [ 186.486709][ T9991] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 186.563932][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 186.607902][ T9997] can: request_module (can-proto-0) failed. [ 186.614097][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.886177][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.913134][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.926568][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.935630][T10009] syz.3.906 uses old SIOCAX25GETINFO [ 186.951720][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.042710][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.061536][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 187.070383][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.174607][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.370515][ T11] bridge_slave_1: left allmulticast mode [ 187.383376][ T11] bridge_slave_1: left promiscuous mode [ 187.395079][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.433352][ T11] bridge_slave_0: left allmulticast mode [ 187.439928][ T11] bridge_slave_0: left promiscuous mode [ 187.446302][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.466043][T10024] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 187.927921][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.940055][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.951964][ T11] bond0 (unregistering): Released all slaves [ 187.990315][T10024] team0: Port device netdevsim0 removed [ 188.214604][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.498434][T10007] chnl_net:caif_netlink_parms(): no params data found [ 188.534805][ T5837] Bluetooth: hci1: command tx timeout [ 188.679550][ T5829] udevd[5829]: failed to send result of seq 17698 to main daemon: Connection refused [ 188.693726][ T9753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.796085][ T9753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.831463][ T9753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.867115][ T11] hsr_slave_0: left promiscuous mode [ 188.876061][ T11] hsr_slave_1: left promiscuous mode [ 188.883762][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.891834][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.903139][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.910902][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.951243][ T11] veth1_macvtap: left promiscuous mode [ 188.957241][ T11] veth0_macvtap: left promiscuous mode [ 188.962961][ T11] veth1_vlan: left promiscuous mode [ 188.968530][ T11] veth0_vlan: left promiscuous mode [ 189.175624][ T5837] Bluetooth: hci4: command tx timeout [ 189.257454][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.629459][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 189.751985][ T11] team0 (unregistering): Port device team_slave_1 removed [ 189.826867][ T11] team0 (unregistering): Port device team_slave_0 removed [ 190.294605][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.448173][ T9753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.460372][T10007] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.472610][T10007] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.482534][T10007] bridge_slave_0: entered allmulticast mode [ 190.489845][T10007] bridge_slave_0: entered promiscuous mode [ 190.504974][T10007] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.512519][T10007] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.520096][T10007] bridge_slave_1: entered allmulticast mode [ 190.527512][T10007] bridge_slave_1: entered promiscuous mode [ 190.639475][T10007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.682283][T10007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.696772][T10087] tc_dump_action: action bad kind [ 190.910275][T10007] team0: Port device team_slave_0 added [ 190.980225][T10007] team0: Port device team_slave_1 added [ 191.052397][T10102] tipc: Enabling of bearer rejected, failed to enable media [ 191.131821][T10007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.148229][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.192016][T10007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.208567][T10007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.216666][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.249089][T10007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.264086][T10112] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.934'. [ 191.274162][ T54] Bluetooth: hci4: command tx timeout [ 191.290059][T10112] openvswitch: netlink: Flow actions attr not present in new flow. [ 191.334510][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.385972][T10007] hsr_slave_0: entered promiscuous mode [ 191.405764][T10007] hsr_slave_1: entered promiscuous mode [ 191.419047][T10007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.448570][T10007] Cannot create hsr debugfs directory [ 191.479240][ T9753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.508159][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 191.547359][ T9753] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.602828][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.610170][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.660734][ T29] audit: type=1107 audit(1737189537.555:2): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='k~(b$c '"a-hhof؅>ޝ(^ Hg XeTBD,\wyh`N{0o? }@t+;$sY(}AUn*/dNq敎} [ 191.660734][ T29] [ 191.660734][ T29] SO[pz]B"^egżM`Z8mr^K‘z=hY*3]#QD?:J(z&' [ 191.730476][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.737750][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.927396][T10138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.942'. [ 191.979084][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 191.979106][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 191.979155][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 192.183212][ T9753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.253901][T10151] netlink: 'syz.4.946': attribute type 1 has an invalid length. [ 192.270724][ T9753] veth0_vlan: entered promiscuous mode [ 192.373723][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 192.382746][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.387245][ T9753] veth1_vlan: entered promiscuous mode [ 192.400564][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 192.423335][T10156] netlink: 'syz.0.948': attribute type 14 has an invalid length. [ 192.507400][ T9753] veth0_macvtap: entered promiscuous mode [ 192.553221][ T9753] veth1_macvtap: entered promiscuous mode [ 192.582429][T10007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.605547][T10007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.631145][T10162] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 192.636125][T10007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.655068][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.672125][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.693139][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.714671][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.734059][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.756514][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.772190][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.783452][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.795014][ T9753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.815708][T10007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.852589][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.880048][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.901697][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.925411][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.945087][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.967147][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.981846][ T9753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.993232][ T9753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.004807][ T9753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.051091][ T9753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.090200][ T9753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.124504][ T9753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.144874][ T9753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.276903][T10191] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 193.298551][T10191] netlink: 17 bytes leftover after parsing attributes in process `syz.3.958'. [ 193.345096][ T5837] Bluetooth: hci4: command tx timeout [ 193.414607][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.466630][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.482641][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.519145][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.530789][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.558698][T10007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.628943][T10007] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.654750][ T3494] wlan0: Trigger new scan to find an IBSS to join [ 193.670132][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.677408][ T6140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.732363][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.739571][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.940965][T10007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.962591][T10007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.989986][T10224] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 194.000062][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 194.037681][T10224] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.055469][T10224] IPv6: Can't replace route, no match found [ 194.078102][T10228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.136096][T10222] hsr_slave_0 (unregistering): left promiscuous mode [ 194.182090][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 194.191276][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 194.348735][T10007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.412993][ T3494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.454544][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.552122][T10007] veth0_vlan: entered promiscuous mode [ 194.599999][T10007] veth1_vlan: entered promiscuous mode [ 194.644112][T10007] veth0_macvtap: entered promiscuous mode [ 194.652957][T10007] veth1_macvtap: entered promiscuous mode [ 194.670134][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.681609][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.691700][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.702373][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.712552][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.723220][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.733397][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.744253][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.754617][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.765667][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.777799][T10007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.799506][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.810982][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.821121][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.832851][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.843612][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.855171][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.865612][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.876379][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.886598][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.897403][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.908730][T10007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.920378][T10007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.944694][T10007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.953458][T10007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.962633][T10007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.999083][ T3494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.023419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.041737][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.048402][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.091299][ T3494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.136768][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.156646][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.180479][ T3494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.212036][ T6140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.221448][ T6140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.323996][ T3494] bridge_slave_1: left allmulticast mode [ 195.329896][ T3494] bridge_slave_1: left promiscuous mode [ 195.337178][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.347854][ T3494] bridge_slave_0: left allmulticast mode [ 195.353508][ T3494] bridge_slave_0: left promiscuous mode [ 195.360708][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.498555][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.761817][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.771585][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.780362][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.792498][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.801137][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.809108][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.883206][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 196.115371][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.127237][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.138121][ T3494] bond0 (unregistering): Released all slaves [ 196.439039][ T3494] hsr_slave_0: left promiscuous mode [ 196.445457][ T3494] hsr_slave_1: left promiscuous mode [ 196.461925][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.469532][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.479977][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.488190][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.507791][ T3494] veth1_macvtap: left promiscuous mode [ 196.513330][ T3494] veth0_macvtap: left promiscuous mode [ 196.519342][ T3494] veth1_vlan: left promiscuous mode [ 196.524767][ T3494] veth0_vlan: left promiscuous mode [ 196.534528][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.634747][ T61] wlan0: Trigger new scan to find an IBSS to join [ 197.122658][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.133020][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.142966][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.157067][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.174541][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.195744][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.370017][ T3494] team0 (unregistering): Port device team_slave_1 removed [ 197.418864][ T3494] team0 (unregistering): Port device team_slave_0 removed [ 197.574493][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.905012][ T5837] Bluetooth: hci1: command tx timeout [ 198.029208][T10257] chnl_net:caif_netlink_parms(): no params data found [ 198.232584][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 198.428333][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.448725][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.468850][T10257] bridge_slave_0: entered allmulticast mode [ 198.486547][T10257] bridge_slave_0: entered promiscuous mode [ 198.558823][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.566198][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.573626][T10257] bridge_slave_1: entered allmulticast mode [ 198.581445][T10257] bridge_slave_1: entered promiscuous mode [ 198.614487][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 198.675610][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 198.717332][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 198.735858][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 198.736994][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.754586][T10324] netlink: 'syz.0.995': attribute type 8 has an invalid length. [ 198.754608][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 198.780930][T10283] chnl_net:caif_netlink_parms(): no params data found [ 198.789373][T10322] netlink: 'syz.0.995': attribute type 2 has an invalid length. [ 198.832708][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.873607][ T3494] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.033720][ T3494] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.053164][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 199.074667][T10257] team0: Port device team_slave_0 added [ 199.081954][T10332] netlink: 'syz.3.997': attribute type 21 has an invalid length. [ 199.093226][T10330] openvswitch: netlink: Invalid VLAN frame [ 199.117624][T10332] netlink: 128 bytes leftover after parsing attributes in process `syz.3.997'. [ 199.127368][T10332] netlink: 3 bytes leftover after parsing attributes in process `syz.3.997'. [ 199.236750][ T3494] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.265515][ T5837] Bluetooth: hci4: command tx timeout [ 199.273953][T10343] ip6t_srh: unknown srh match flags 536B [ 199.282141][T10257] team0: Port device team_slave_1 added [ 199.401547][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 199.421218][ T3494] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.530073][T10359] trusted_key: syz.4.1003 sent an empty control message without MSG_MORE. [ 199.595324][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.613861][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.654616][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.657103][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.672943][ T12] wlan0: Trigger new scan to find an IBSS to join [ 199.682373][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.689581][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.723882][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.738052][T10283] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.746419][T10283] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.753794][T10283] bridge_slave_0: entered allmulticast mode [ 199.762701][T10283] bridge_slave_0: entered promiscuous mode [ 199.771734][T10283] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.779301][T10283] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.787583][T10283] bridge_slave_1: entered allmulticast mode [ 199.795856][T10283] bridge_slave_1: entered promiscuous mode [ 199.974821][ T5837] Bluetooth: hci1: command tx timeout [ 200.012042][T10257] hsr_slave_0: entered promiscuous mode [ 200.039149][T10257] hsr_slave_1: entered promiscuous mode [ 200.064775][T10257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.072705][T10257] Cannot create hsr debugfs directory [ 200.096405][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.120697][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.301985][T10371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.340416][ T3494] bridge_slave_1: left allmulticast mode [ 200.349557][ T3494] bridge_slave_1: left promiscuous mode [ 200.362422][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.380499][ T3494] bridge_slave_0: left allmulticast mode [ 200.398613][ T3494] bridge_slave_0: left promiscuous mode [ 200.404930][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.589453][ T6140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.694467][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.988248][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.030167][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.042039][ T3494] bond0 (unregistering): Released all slaves [ 201.065634][T10283] team0: Port device team_slave_0 added [ 201.132692][T10283] team0: Port device team_slave_1 added [ 201.270479][T10399] gretap2: entered promiscuous mode [ 201.278612][T10403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.329078][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.344657][ T5837] Bluetooth: hci4: command tx timeout [ 201.354930][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.400946][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.428846][T10412] __nla_validate_parse: 2 callbacks suppressed [ 201.428865][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 201.489335][T10412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.516655][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.534198][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.568204][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.735907][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.761937][ T3494] hsr_slave_0: left promiscuous mode [ 201.778609][ T3494] hsr_slave_1: left promiscuous mode [ 201.790165][T10423] netlink: 'syz.4.1021': attribute type 13 has an invalid length. [ 201.798917][T10423] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'. [ 201.799094][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.816030][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.824900][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.832635][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.854000][ T3494] veth1_macvtap: left promiscuous mode [ 201.860057][ T3494] veth0_macvtap: left promiscuous mode [ 201.865785][ T3494] veth1_vlan: left promiscuous mode [ 201.871059][ T3494] veth0_vlan: left promiscuous mode [ 202.054751][ T5837] Bluetooth: hci1: command tx timeout [ 202.486801][ T3494] team0 (unregistering): Port device team_slave_1 removed [ 202.540646][ T3494] team0 (unregistering): Port device team_slave_0 removed [ 202.774496][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.102731][T10283] hsr_slave_0: entered promiscuous mode [ 203.110827][T10283] hsr_slave_1: entered promiscuous mode [ 203.125448][T10283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.133327][T10283] Cannot create hsr debugfs directory [ 203.146542][T10422] netlink: 'syz.0.1022': attribute type 12 has an invalid length. [ 203.155007][T10422] netlink: 'syz.0.1022': attribute type 29 has an invalid length. [ 203.162856][T10422] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1022'. [ 203.172092][T10422] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1022'. [ 203.195242][T10423] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 203.415176][ T5837] Bluetooth: hci4: command tx timeout [ 203.462489][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 203.518530][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 203.698607][T10440] netlink: zone id is out of range [ 203.704123][T10440] netlink: zone id is out of range [ 203.718470][T10440] netlink: zone id is out of range [ 203.723770][T10440] netlink: zone id is out of range [ 203.736564][T10440] netlink: zone id is out of range [ 203.889790][T10257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.924796][T10450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1030'. [ 203.946194][T10257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.961480][T10257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.978463][T10257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.037222][T10455] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 204.137578][ T5837] Bluetooth: hci1: command tx timeout [ 204.238018][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.280735][T10257] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.347156][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.354304][ T6140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.436868][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.444011][ T6140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.528053][T10257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.567718][T10283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.597391][T10283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.623814][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 204.660572][T10283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.665332][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 204.690039][T10479] team0: No ports can be present during mode change [ 204.704837][T10283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.905800][T10491] netlink: 'syz.3.1041': attribute type 12 has an invalid length. [ 204.921946][T10491] netlink: 'syz.3.1041': attribute type 29 has an invalid length. [ 204.930856][T10491] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1041'. [ 204.942227][T10491] netlink: 'syz.3.1041': attribute type 2 has an invalid length. [ 204.954931][T10491] netlink: 'syz.3.1041': attribute type 2 has an invalid length. [ 204.977369][T10283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.028779][T10257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.073401][T10257] veth0_vlan: entered promiscuous mode [ 205.095689][T10257] veth1_vlan: entered promiscuous mode [ 205.141374][T10257] veth0_macvtap: entered promiscuous mode [ 205.154515][T10257] veth1_macvtap: entered promiscuous mode [ 205.170231][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.181394][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.191688][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.202815][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.212908][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.223516][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.233654][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.244177][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.261258][T10257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.277230][T10283] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.327839][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.338556][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.348687][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.364841][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.384503][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.399453][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.409893][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.504705][ T5837] Bluetooth: hci4: command tx timeout [ 205.524932][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.581914][T10257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.681443][T10257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.710956][T10257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.740029][T10257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.769382][T10257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.807132][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.814299][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.871499][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.878679][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.939688][T10515] pimreg: entered allmulticast mode [ 206.231395][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.244573][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.351712][ T6140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.373716][ T6140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.506437][T10537] __nla_validate_parse: 1 callbacks suppressed [ 206.506458][T10537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1053'. [ 206.537194][T10283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.648150][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 206.657950][T10540] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1055'. [ 206.711638][T10283] veth0_vlan: entered promiscuous mode [ 206.753641][T10283] veth1_vlan: entered promiscuous mode [ 206.780885][T10283] veth0_macvtap: entered promiscuous mode [ 206.791136][T10283] veth1_macvtap: entered promiscuous mode [ 206.808685][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.819692][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.829990][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.841143][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.851344][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.862358][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.872309][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.883214][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.893206][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.903846][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.917081][T10283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.927015][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.938047][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.948358][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.959026][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.969002][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.979526][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.989873][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.000639][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.010616][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.021303][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.032265][T10283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.059563][T10283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.068813][T10283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.077793][T10283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.098139][T10283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.160265][T10559] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1060'. [ 207.177189][T10559] nbd: illegal input index 61504 [ 207.204091][T10559] net_ratelimit: 3 callbacks suppressed [ 207.204110][T10559] openvswitch: netlink: Flow actions attr not present in new flow. [ 207.296577][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.321073][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.370685][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.434538][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.548693][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1066'. [ 207.690518][T10580] ================================================================== [ 207.698825][T10580] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 207.706503][T10580] Read of size 8 at addr ffff8880798f8060 by task syz.4.1065/10580 [ 207.714418][T10580] [ 207.716752][T10580] CPU: 1 UID: 0 PID: 10580 Comm: syz.4.1065 Not tainted 6.13.0-rc7-syzkaller-00108-g70d81f25cc92 #0 [ 207.727518][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 207.737788][T10580] Call Trace: [ 207.741073][T10580] [ 207.744022][T10580] dump_stack_lvl+0x241/0x360 [ 207.748714][T10580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.753922][T10580] ? __pfx__printk+0x10/0x10 [ 207.758522][T10580] ? _printk+0xd5/0x120 [ 207.762695][T10580] ? __virt_addr_valid+0x183/0x530 [ 207.767825][T10580] ? __virt_addr_valid+0x183/0x530 [ 207.772952][T10580] print_report+0x169/0x550 [ 207.777548][T10580] ? __virt_addr_valid+0x183/0x530 [ 207.782683][T10580] ? __virt_addr_valid+0x183/0x530 [ 207.787800][T10580] ? __virt_addr_valid+0x45f/0x530 [ 207.792907][T10580] ? __phys_addr+0xba/0x170 [ 207.798179][T10580] ? __mutex_lock+0x7fb/0xee0 [ 207.802998][T10580] kasan_report+0x143/0x180 [ 207.807865][T10580] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 207.813862][T10580] ? __mutex_lock+0x7fb/0xee0 [ 207.818750][T10580] __mutex_lock+0x7fb/0xee0 [ 207.823358][T10580] ? __mutex_lock+0x5ef/0xee0 [ 207.828045][T10580] ? l2cap_register_user+0x6d/0x1e0 [ 207.833261][T10580] ? __pfx___mutex_lock+0x10/0x10 [ 207.838375][T10580] ? dev_set_name+0xd5/0x120 [ 207.843066][T10580] ? __pfx_dev_set_name+0x10/0x10 [ 207.848095][T10580] l2cap_register_user+0x6d/0x1e0 [ 207.853823][T10580] hidp_connection_add+0x144b/0x18c0 [ 207.859637][T10580] hidp_sock_ioctl+0x446/0x870 [ 207.864412][T10580] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 207.869725][T10580] ? tomoyo_path_number_perm+0x6f9/0x860 [ 207.875442][T10580] ? __lock_acquire+0x1397/0x2100 [ 207.880467][T10580] ? tomoyo_path_number_perm+0x206/0x860 [ 207.886101][T10580] sock_do_ioctl+0x158/0x460 [ 207.890695][T10580] ? __pfx_sock_do_ioctl+0x10/0x10 [ 207.895958][T10580] sock_ioctl+0x626/0x8e0 [ 207.900394][T10580] ? __pfx_sock_ioctl+0x10/0x10 [ 207.905331][T10580] ? __fget_files+0x2a/0x410 [ 207.909939][T10580] ? __fget_files+0x2a/0x410 [ 207.914703][T10580] ? __pfx_sock_ioctl+0x10/0x10 [ 207.919554][T10580] __se_sys_ioctl+0xf5/0x170 [ 207.924137][T10580] do_syscall_64+0xf3/0x230 [ 207.928645][T10580] ? clear_bhb_loop+0x35/0x90 [ 207.933316][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.939221][T10580] RIP: 0033:0x7f7014985d29 [ 207.943649][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.963501][T10580] RSP: 002b:00007f701577e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.972320][T10580] RAX: ffffffffffffffda RBX: 00007f7014b75fa0 RCX: 00007f7014985d29 [ 207.980296][T10580] RDX: 00000000200000c0 RSI: 00000000400448c8 RDI: 0000000000000006 [ 207.988349][T10580] RBP: 00007f7014a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 207.996334][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.005479][T10580] R13: 0000000000000000 R14: 00007f7014b75fa0 R15: 00007ffd20b6cea8 [ 208.013717][T10580] [ 208.016732][T10580] [ 208.019045][T10580] Allocated by task 10283: [ 208.023464][T10580] kasan_save_track+0x3f/0x80 [ 208.028137][T10580] __kasan_kmalloc+0x98/0xb0 [ 208.032738][T10580] __kmalloc_noprof+0x285/0x4c0 [ 208.037603][T10580] hci_alloc_dev_priv+0x27/0x2030 [ 208.042644][T10580] vhci_create_device+0x116/0x6a0 [ 208.047671][T10580] vhci_write+0x3cf/0x490 [ 208.052086][T10580] vfs_write+0xaeb/0xd30 [ 208.056325][T10580] ksys_write+0x18f/0x2b0 [ 208.060650][T10580] do_syscall_64+0xf3/0x230 [ 208.065154][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.071048][T10580] [ 208.073360][T10580] Freed by task 10283: [ 208.077449][T10580] kasan_save_track+0x3f/0x80 [ 208.082120][T10580] kasan_save_free_info+0x40/0x50 [ 208.087156][T10580] __kasan_slab_free+0x59/0x70 [ 208.091916][T10580] kfree+0x196/0x430 [ 208.095835][T10580] hci_release_dev+0x1525/0x16b0 [ 208.100936][T10580] bt_host_release+0x83/0x90 [ 208.105608][T10580] device_release+0x99/0x1c0 [ 208.110333][T10580] kobject_put+0x22f/0x480 [ 208.114830][T10580] vhci_release+0x88/0xd0 [ 208.119153][T10580] __fput+0x23c/0xa50 [ 208.123130][T10580] task_work_run+0x24f/0x310 [ 208.127739][T10580] do_exit+0xa2a/0x28e0 [ 208.131884][T10580] do_group_exit+0x207/0x2c0 [ 208.136468][T10580] __x64_sys_exit_group+0x3f/0x40 [ 208.141493][T10580] x64_sys_call+0x26a8/0x26b0 [ 208.146165][T10580] do_syscall_64+0xf3/0x230 [ 208.150711][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.156601][T10580] [ 208.158930][T10580] Last potentially related work creation: [ 208.164650][T10580] kasan_save_stack+0x3f/0x60 [ 208.169438][T10580] __kasan_record_aux_stack+0xac/0xc0 [ 208.175255][T10580] insert_work+0x3e/0x330 [ 208.179584][T10580] __queue_work+0xb66/0xf50 [ 208.184079][T10580] queue_work_on+0x1c2/0x380 [ 208.188661][T10580] process_scheduled_works+0xa66/0x1840 [ 208.194203][T10580] worker_thread+0x870/0xd30 [ 208.198816][T10580] kthread+0x2f0/0x390 [ 208.202892][T10580] ret_from_fork+0x4b/0x80 [ 208.207328][T10580] ret_from_fork_asm+0x1a/0x30 [ 208.212620][T10580] [ 208.214942][T10580] Second to last potentially related work creation: [ 208.221548][T10580] kasan_save_stack+0x3f/0x60 [ 208.226238][T10580] __kasan_record_aux_stack+0xac/0xc0 [ 208.231719][T10580] insert_work+0x3e/0x330 [ 208.236053][T10580] __queue_work+0xc8b/0xf50 [ 208.240552][T10580] call_timer_fn+0x187/0x650 [ 208.245155][T10580] __run_timer_base+0x695/0x8e0 [ 208.250030][T10580] run_timer_softirq+0xb7/0x170 [ 208.254885][T10580] handle_softirqs+0x2d4/0x9b0 [ 208.259671][T10580] __irq_exit_rcu+0xf7/0x220 [ 208.264275][T10580] irq_exit_rcu+0x9/0x30 [ 208.268694][T10580] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 208.274328][T10580] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.280324][T10580] [ 208.283092][T10580] The buggy address belongs to the object at ffff8880798f8000 [ 208.283092][T10580] which belongs to the cache kmalloc-8k of size 8192 [ 208.297145][T10580] The buggy address is located 96 bytes inside of [ 208.297145][T10580] freed 8192-byte region [ffff8880798f8000, ffff8880798fa000) [ 208.311026][T10580] [ 208.313375][T10580] The buggy address belongs to the physical page: [ 208.319783][T10580] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x798f8 [ 208.328642][T10580] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 208.337131][T10580] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 208.344665][T10580] page_type: f5(slab) [ 208.348647][T10580] raw: 00fff00000000040 ffff88801ac42280 ffffea0001fb2e00 dead000000000002 [ 208.357442][T10580] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 208.366039][T10580] head: 00fff00000000040 ffff88801ac42280 ffffea0001fb2e00 dead000000000002 [ 208.374977][T10580] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 208.383653][T10580] head: 00fff00000000003 ffffea0001e63e01 ffffffffffffffff 0000000000000000 [ 208.392398][T10580] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 208.401084][T10580] page dumped because: kasan: bad access detected [ 208.407785][T10580] page_owner tracks the page as allocated [ 208.413575][T10580] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5655, tgid 5655 (dhcpcd-run-hook), ts 47841906834, free_ts 47801738586 [ 208.434518][T10580] post_alloc_hook+0x1f3/0x230 [ 208.439320][T10580] get_page_from_freelist+0x365c/0x37a0 [ 208.444946][T10580] __alloc_pages_noprof+0x292/0x710 [ 208.450136][T10580] alloc_pages_mpol_noprof+0x3e1/0x780 [ 208.455597][T10580] alloc_slab_page+0x6a/0x110 [ 208.460297][T10580] allocate_slab+0x5a/0x2b0 [ 208.464792][T10580] ___slab_alloc+0xc27/0x14a0 [ 208.469464][T10580] __slab_alloc+0x58/0xa0 [ 208.473798][T10580] __kmalloc_cache_noprof+0x27b/0x390 [ 208.479179][T10580] tomoyo_init_log+0x11cd/0x2050 [ 208.484108][T10580] tomoyo_supervisor+0x38a/0x11f0 [ 208.489142][T10580] tomoyo_env_perm+0x178/0x210 [ 208.493903][T10580] tomoyo_find_next_domain+0x146e/0x1d40 [ 208.499533][T10580] tomoyo_bprm_check_security+0x117/0x180 [ 208.505249][T10580] security_bprm_check+0x86/0x250 [ 208.510265][T10580] bprm_execve+0xa53/0x17a0 [ 208.514767][T10580] page last free pid 5650 tgid 5650 stack trace: [ 208.521080][T10580] free_unref_page+0xd3f/0x1010 [ 208.525928][T10580] __put_partials+0x160/0x1c0 [ 208.530608][T10580] put_cpu_partial+0x17c/0x250 [ 208.535386][T10580] __slab_free+0x290/0x380 [ 208.540334][T10580] qlist_free_all+0x9a/0x140 [ 208.544919][T10580] kasan_quarantine_reduce+0x14f/0x170 [ 208.550376][T10580] __kasan_slab_alloc+0x23/0x80 [ 208.555219][T10580] kmem_cache_alloc_noprof+0x1d9/0x380 [ 208.560671][T10580] getname_flags+0xb7/0x540 [ 208.565181][T10580] vfs_fstatat+0x3f/0x130 [ 208.569505][T10580] __x64_sys_newfstatat+0x11d/0x1a0 [ 208.574700][T10580] do_syscall_64+0xf3/0x230 [ 208.579204][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.585099][T10580] [ 208.587417][T10580] Memory state around the buggy address: [ 208.593031][T10580] ffff8880798f7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.601233][T10580] ffff8880798f7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.609576][T10580] >ffff8880798f8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.617643][T10580] ^ [ 208.624826][T10580] ffff8880798f8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.632909][T10580] ffff8880798f8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.641063][T10580] ================================================================== [ 208.651700][T10580] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.659028][T10580] CPU: 1 UID: 0 PID: 10580 Comm: syz.4.1065 Not tainted 6.13.0-rc7-syzkaller-00108-g70d81f25cc92 #0 [ 208.669876][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 208.680022][T10580] Call Trace: [ 208.683298][T10580] [ 208.686248][T10580] dump_stack_lvl+0x241/0x360 [ 208.690937][T10580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.696152][T10580] ? __pfx__printk+0x10/0x10 [ 208.700752][T10580] ? vscnprintf+0x5d/0x90 [ 208.705084][T10580] panic+0x349/0x880 [ 208.708976][T10580] ? check_panic_on_warn+0x21/0xb0 [ 208.714081][T10580] ? __pfx_panic+0x10/0x10 [ 208.718495][T10580] ? mark_lock+0x9a/0x360 [ 208.722918][T10580] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 208.729098][T10580] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 208.735448][T10580] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.741888][T10580] ? print_report+0x502/0x550 [ 208.746741][T10580] check_panic_on_warn+0x86/0xb0 [ 208.751680][T10580] ? __mutex_lock+0x7fb/0xee0 [ 208.756375][T10580] end_report+0x77/0x160 [ 208.760761][T10580] kasan_report+0x154/0x180 [ 208.765268][T10580] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 208.771158][T10580] ? __mutex_lock+0x7fb/0xee0 [ 208.775929][T10580] __mutex_lock+0x7fb/0xee0 [ 208.780434][T10580] ? __mutex_lock+0x5ef/0xee0 [ 208.785122][T10580] ? l2cap_register_user+0x6d/0x1e0 [ 208.790854][T10580] ? __pfx___mutex_lock+0x10/0x10 [ 208.795885][T10580] ? dev_set_name+0xd5/0x120 [ 208.800684][T10580] ? __pfx_dev_set_name+0x10/0x10 [ 208.805728][T10580] l2cap_register_user+0x6d/0x1e0 [ 208.810762][T10580] hidp_connection_add+0x144b/0x18c0 [ 208.816148][T10580] hidp_sock_ioctl+0x446/0x870 [ 208.820910][T10580] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 208.826210][T10580] ? tomoyo_path_number_perm+0x6f9/0x860 [ 208.831842][T10580] ? __lock_acquire+0x1397/0x2100 [ 208.836866][T10580] ? tomoyo_path_number_perm+0x206/0x860 [ 208.842497][T10580] sock_do_ioctl+0x158/0x460 [ 208.847090][T10580] ? __pfx_sock_do_ioctl+0x10/0x10 [ 208.852202][T10580] sock_ioctl+0x626/0x8e0 [ 208.856534][T10580] ? __pfx_sock_ioctl+0x10/0x10 [ 208.861380][T10580] ? __fget_files+0x2a/0x410 [ 208.866024][T10580] ? __fget_files+0x2a/0x410 [ 208.870730][T10580] ? __pfx_sock_ioctl+0x10/0x10 [ 208.875591][T10580] __se_sys_ioctl+0xf5/0x170 [ 208.880196][T10580] do_syscall_64+0xf3/0x230 [ 208.884727][T10580] ? clear_bhb_loop+0x35/0x90 [ 208.889489][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.895474][T10580] RIP: 0033:0x7f7014985d29 [ 208.899914][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.919620][T10580] RSP: 002b:00007f701577e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.928056][T10580] RAX: ffffffffffffffda RBX: 00007f7014b75fa0 RCX: 00007f7014985d29 [ 208.936030][T10580] RDX: 00000000200000c0 RSI: 00000000400448c8 RDI: 0000000000000006 [ 208.944417][T10580] RBP: 00007f7014a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 208.952431][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.960451][T10580] R13: 0000000000000000 R14: 00007f7014b75fa0 R15: 00007ffd20b6cea8 [ 208.968441][T10580] [ 208.971746][T10580] Kernel Offset: disabled [ 208.976070][T10580] Rebooting in 86400 seconds..