last executing test programs: 3.089375244s ago: executing program 1 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x21d4, 0x30, 0xb, 0x0, 0x0, {}, [{0x21c0, 0x1, [@m_police={0x21bc, 0x13, 0x0, 0x0, {{0xb}, {0x20f0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2000000a, 0x3, 0x1a, 0xf5, {0x40, 0x0, 0x8, 0x200, 0x2, 0x131f2000}, {0xa5, 0x2, 0x9, 0x100, 0x0, 0xc}, 0x4, 0x7, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0xf0bb, 0x0, 0x8, 0x6, 0x10000, 0x8, 0x9, 0x1, 0x6, 0x3, 0xfffffffc, 0x7f, 0x7, 0x800, 0x3, 0xf69, 0x3, 0x101, 0x1, 0xa, 0x6, 0x2, 0x1, 0x1, 0x3, 0x200, 0x1ff, 0x4, 0x6, 0x0, 0x1000, 0xe, 0x7, 0xb1f, 0x3, 0x8, 0x0, 0x6, 0x7, 0x153f, 0x6, 0xffffffff, 0xffffff80, 0x0, 0xffffff48, 0xffffffff, 0xfffffff8, 0x0, 0xda, 0x2, 0x0, 0x8, 0x4, 0x1, 0xd44, 0x101, 0xffffffff, 0x0, 0x3, 0xf0f, 0xffff7fff, 0xf, 0x3ff, 0x9, 0x3, 0xffffffff, 0xe2, 0x3, 0x8, 0x9, 0x5, 0xed4c, 0x1000, 0x5, 0x3, 0xfffffff7, 0x81, 0x87, 0x3, 0x8001, 0x8, 0xc73b, 0x5be, 0x2, 0x7, 0xa173bcb, 0x0, 0x8f4, 0x7d, 0xa8, 0x8, 0xffff, 0x84d0, 0x6, 0x5, 0xb0, 0xffffad5b, 0x6, 0xc05721e6, 0x1, 0x7, 0xd9a, 0x3, 0x2, 0x79, 0x800, 0x6, 0x80, 0x6, 0xe7, 0x8, 0x0, 0x1, 0x72, 0x7, 0xa, 0x10, 0xa1b6, 0x7ba, 0x8, 0x1ff, 0x7fffffff, 0x1, 0x0, 0x9, 0x5, 0x1, 0x8000, 0xf, 0x9, 0x1, 0xca, 0x7, 0x1, 0x7, 0x2, 0x1, 0x9, 0x7, 0x4fb, 0x9, 0x51699846, 0x8, 0x7940, 0xfdc, 0x19, 0x3, 0xffffff80, 0x1, 0x4, 0x4, 0x0, 0x10000, 0x8, 0x1e, 0x1000, 0x293, 0x344, 0x1, 0x1, 0x6, 0x6, 0x0, 0x4, 0x4, 0x38, 0x4, 0xa, 0x7, 0x9, 0x7, 0x8, 0x100, 0xe, 0x7, 0x4, 0x4a, 0xffffffff, 0x5, 0xf, 0x74, 0x9, 0x5, 0x1, 0x80, 0x56, 0x0, 0xee, 0x8, 0x1, 0x3, 0x9, 0x200, 0x708d, 0x4, 0xff, 0x4, 0x3, 0xe982, 0x100, 0xc, 0x5, 0x2, 0x1, 0x7ff, 0x7ff, 0x5, 0x10000, 0x1, 0x6, 0xb, 0x7, 0x7890, 0x5, 0xd7, 0x0, 0x2886, 0xfffffff9, 0xcf17, 0xcc, 0x36b8, 0x400, 0x1000, 0x800, 0x1, 0x7c38, 0x1, 0xf7e, 0x6, 0x4, 0x7, 0x8, 0xed26, 0x5, 0x9, 0x7fff, 0x5, 0x7, 0x4, 0xfffff801, 0x0, 0x1, 0x5, 0x7fff, 0x8, 0x936, 0x5, 0xbf, 0x1, 0x6, 0x0, 0x0, 0x4, 0x206]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x4dff, 0x4, 0x4000000, 0xcc, 0x800, 0x10, 0x4, 0x8a41, 0x8, 0x9, 0x3ff, 0xe6, 0x4, 0x400, 0x101, 0x4, 0xffffffb8, 0x2, 0x2, 0xfffffffc, 0x6, 0x1, 0xd271, 0x8d25, 0x6, 0x4, 0x9, 0x5, 0x5, 0x9, 0xd, 0xe, 0x1, 0x3, 0x1d, 0xc, 0xffffffff, 0x8, 0x35cd, 0x6, 0xb, 0x57, 0xb7, 0x588, 0x5, 0x400, 0x1, 0x3, 0x806f, 0x2, 0x47da, 0x7ff, 0x9, 0x8, 0x6, 0xa, 0x9a2, 0x2, 0x80000001, 0x8001, 0x800, 0x8, 0x8001, 0x54a0, 0xffffffff, 0x9, 0x4d0e2620, 0x8, 0x6, 0x3, 0x0, 0xdb, 0x4, 0x6, 0x8, 0x1, 0x5, 0xffffffff, 0x0, 0xfffffff8, 0x4, 0x2, 0x0, 0x7, 0x2, 0x39, 0x3, 0x3, 0xfffffffd, 0x6, 0x8, 0x2, 0x3, 0xfffffffe, 0x3, 0x7fff, 0x0, 0x4, 0x7, 0x4, 0xfffff180, 0xb, 0x3a, 0x4, 0xb, 0x10001, 0xf, 0xc2b8, 0x6, 0x8, 0x53aa, 0x101, 0x2, 0x9, 0xb691, 0x3, 0x0, 0x1, 0x14, 0x7ff, 0x7, 0x0, 0x3e3, 0x1, 0x7fffffff, 0xf, 0xffffd894, 0x7fffffff, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffff3c2, 0x5, 0x40000000, 0x1, 0x80000001, 0x6, 0x3ff, 0x5, 0x80, 0xa, 0x0, 0x5, 0xb, 0x3, 0xf2, 0x7, 0x200, 0x4, 0xeb, 0x800, 0xdd, 0x4, 0x4, 0x10001, 0x10001, 0x4, 0x200, 0x8, 0x1, 0xf4, 0x8, 0x9, 0x6, 0x46, 0x2, 0x5, 0x6, 0x101, 0x8001, 0x10001, 0x4, 0x3, 0xd85, 0x3, 0x81ef, 0x4bbd, 0x7, 0xfffffff7, 0x6, 0x8, 0x4, 0x9, 0x6, 0x240, 0x6, 0x2, 0x5, 0x7a8a, 0x5, 0x0, 0xd, 0x7, 0x9, 0x7, 0x1ff, 0xbc2f, 0x2, 0x2, 0x12, 0x200, 0x8, 0x10000, 0x0, 0x7ff, 0x0, 0x2e6, 0x908, 0x99, 0x5, 0x200, 0x8, 0x2, 0x4, 0x9, 0x3, 0x7, 0xc, 0xc, 0x3, 0x1ce, 0x1, 0x7, 0x2800, 0x9, 0x638, 0x5, 0x86, 0xaf, 0x3, 0x80, 0x6, 0x8, 0x187, 0x80000000, 0x9, 0x665, 0xdcb, 0x9, 0xffffffff, 0x5, 0xfffffeff, 0x5, 0x5, 0xf, 0x5, 0x7, 0x400, 0xfffffffe, 0xb, 0x934, 0x4, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x1, 0x200, 0x10000, 0xc817, 0x1, 0x2, 0xe, 0x7, 0x401, 0x200, 0x2, 0x1, 0xf560, 0x3, 0x4, 0x5, 0x9343, 0x6, 0x3ebf, 0x7, 0x9a7, 0x6d93, 0x7f, 0x6, 0x420, 0x8000, 0x8, 0x5, 0x4, 0x10000, 0x8, 0x2, 0xa3, 0x8, 0x4, 0x6, 0xae, 0x0, 0x1, 0x800, 0x8000, 0x7ff, 0x48f4f927, 0x0, 0x5, 0x8001, 0x3, 0x7fff, 0x2, 0x10000, 0xcddde687, 0x7f, 0x401, 0xbf6, 0x80, 0x7, 0x7c, 0x140000, 0x4, 0x1, 0xd, 0x4, 0xfffffff9, 0x1, 0x7, 0x401, 0x401, 0x8, 0x9, 0xfffffffe, 0x7fffffff, 0x1, 0x2d, 0x6, 0x4, 0x3, 0x5, 0x800, 0x3, 0x8, 0x5, 0x7, 0x10001, 0x4, 0x16, 0x4, 0x0, 0x9, 0x7, 0x8001, 0x9, 0x200, 0x5, 0x5, 0x8, 0x73e, 0x0, 0x7, 0x0, 0x911, 0x8, 0xc01b, 0x2, 0x7, 0x6, 0xe90e, 0x5, 0x8, 0x4, 0x1da00, 0x2, 0x5, 0xe188, 0x6, 0x1000, 0x3, 0x1, 0x4, 0x8, 0x3, 0x6, 0x7, 0x1c, 0x1, 0x9, 0x101, 0x7a3a, 0x3ff, 0x7, 0x9, 0x10000, 0x5, 0x24000000, 0x6, 0x8, 0x87, 0x9, 0x1, 0x0, 0xcad, 0xfffffff7, 0xa845, 0x6, 0x10, 0x9, 0xb64, 0x6, 0x2, 0x0, 0x5, 0x5, 0xf465, 0x9, 0x4, 0x7fffffff, 0xfffffff9, 0x5, 0x100, 0x3, 0x3, 0x2, 0xc52, 0x2, 0x1, 0xf9a, 0xeb8, 0x93d2, 0xff800000, 0x0, 0x0, 0x33fd, 0x100, 0x7, 0x9, 0x4, 0x7fffffff, 0x80, 0x7fff, 0x4, 0xc0, 0x7fffffff, 0x7fffffff, 0x10000, 0x5, 0x0, 0x7, 0x1, 0x2, 0x40, 0x18, 0xe8, 0x7, 0x3, 0xffffffff, 0xbb3, 0x9c, 0x7fff, 0x1174c71e, 0x1, 0x9, 0xffffffff, 0x6, 0x6, 0x7, 0x737, 0x2, 0xaee, 0x4, 0xff, 0x5, 0x6, 0x8, 0xf2, 0x800, 0x400, 0x10001, 0x3, 0x2, 0x400, 0x8, 0x30e, 0x0, 0x1, 0x4, 0xfffffffe, 0x1, 0x2, 0x1, 0x9, 0x2, 0x25460617, 0x8, 0x2, 0x800, 0x1, 0x1, 0xffff, 0x3, 0x1000, 0x7, 0x5, 0x878, 0xfffffff3, 0x1, 0x0, 0x3, 0x1, 0x5, 0xffffffff, 0x30000000, 0xda6, 0x30000000, 0x7, 0xa]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0xea1, 0x1ff, 0x6c, 0x7, 0xf, 0x3, 0x7d, 0x9, 0x6, 0x2, 0x5, 0xfff, 0x401, 0x1, 0x7, 0x8, 0x1, 0xfffffff7, 0x10d, 0xff, 0x79, 0x3ff, 0xffffffff, 0xe, 0xfffffeff, 0xfb5, 0x1, 0x9, 0x4, 0x7, 0x3, 0x528a, 0x5, 0xfffffffc, 0x0, 0x79c, 0x23b, 0x4, 0x1, 0xd1e, 0x5, 0x7, 0xc, 0xc17, 0x1, 0x7, 0x6, 0xa7, 0x20, 0x10000, 0x741, 0x7, 0x7e0a, 0x6, 0x80, 0x4, 0x7, 0x9, 0x5, 0x2c62, 0x7, 0x3, 0x7, 0x81, 0x0, 0x7, 0x1, 0x8f4d, 0x8, 0x8, 0xffffffff, 0x7, 0x80000000, 0xb903, 0xfff, 0x6, 0x9, 0x9, 0x6, 0x2, 0x1000, 0x9, 0x9, 0x7fffffff, 0x0, 0xfff, 0x9, 0x7, 0x1, 0xa2e, 0x5, 0x7, 0x28000000, 0x3ff, 0xffff, 0x8, 0x1, 0x2a, 0x4, 0x7, 0x40, 0x7f, 0xffffffff, 0x0, 0xc9, 0x7fff, 0xd4b3, 0x3ff, 0x62b, 0x1, 0xe, 0xfffffff8, 0x0, 0x4, 0x7, 0x8, 0x70f0, 0xbb, 0x9, 0x4000, 0xcd4, 0x9, 0x89, 0x4, 0x100, 0x7ff, 0x10001, 0xcdf8, 0x3, 0x2, 0x8, 0xffff, 0x3, 0x3, 0x3, 0x1, 0x5, 0x1, 0x1, 0x5, 0x0, 0x17, 0xc00000, 0x2ff, 0xc10, 0xe7aa, 0x3, 0x9, 0xa, 0x6, 0x8001, 0x5, 0x3ff, 0x6, 0x0, 0x7, 0x9, 0x2, 0xeed, 0xb, 0xdbeb, 0x6239e8c1, 0x1890, 0x3ff, 0x1, 0x5, 0xfff, 0x1000000, 0x345734d2, 0x3, 0x2, 0x80000000, 0x71, 0x0, 0x3, 0x9, 0x1, 0xe, 0x3, 0x7, 0x0, 0x8, 0x20, 0x8000, 0x6, 0xe, 0x5, 0x0, 0x9, 0x88, 0x5, 0x0, 0x9, 0xffff, 0x8, 0x9, 0x8, 0x6, 0x89, 0x9, 0x9, 0xea8b, 0x6, 0x9, 0x3, 0x27a8, 0x7, 0xc, 0x101, 0x81, 0x1, 0x3628f471, 0x6107, 0x0, 0x7, 0x1, 0x6, 0x0, 0x7, 0x8c1, 0x5, 0x7, 0x7fff, 0x7, 0x45e2, 0x8, 0x766, 0x5, 0x4, 0x81, 0xfffffff3, 0x3, 0x7fff, 0x0, 0x0, 0x53fe, 0xdaeb, 0x6, 0x9, 0xd1b, 0x509, 0xfffffffc, 0x75, 0x200, 0x3, 0xb1, 0x0, 0x5, 0x9, 0x7, 0x0, 0xffffffb1, 0x0, 0x7fff, 0x3]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xa71}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1477, 0x10000000, 0x8, 0x2, 0x66b4, {0x5, 0x1, 0x9, 0x7, 0x25, 0x1000}, {0x40, 0x1, 0x4, 0x9, 0x9}, 0x3ff, 0x3, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x78e, 0x151, 0xe, 0x681, 0x3, 0x3, 0x10000, 0x3, 0x7, 0xe070, 0x3ff, 0x4, 0x9, 0x12925e96, 0x7, 0x1000, 0xc, 0x0, 0xea, 0x401, 0x100, 0x3, 0x1, 0x8, 0x7f, 0xf77, 0x7ff, 0x5, 0x4, 0x7, 0x4, 0x53a4, 0xfffffffc, 0x8, 0x8, 0x81, 0x83, 0x3, 0x4, 0x5, 0x92, 0x9, 0xeeb, 0x3, 0x7, 0x1c00000, 0x3, 0x200, 0xd5c, 0x3, 0x1, 0x813, 0x2, 0x3, 0x5, 0x5, 0x8, 0xf, 0x1000, 0x1, 0x1000, 0x5, 0x5, 0x28a6, 0x5, 0x10001, 0x9, 0x88, 0x2000000, 0x5, 0xa, 0x1, 0x0, 0x10001, 0x8, 0xfbb, 0x5, 0x3, 0x6, 0xa, 0x3d8, 0xfffffffc, 0x1, 0x2, 0x5, 0x66, 0x2, 0x2, 0x9, 0x1, 0xff, 0x800, 0x3, 0x1, 0x1, 0x4, 0xfff, 0x7, 0x4, 0x5, 0x5be0, 0x9, 0x7cc0, 0x8001, 0x9, 0x9, 0x8, 0x8, 0x0, 0x80, 0x6, 0x2, 0x47, 0x9, 0x80000001, 0x0, 0x3, 0xd, 0x4, 0x7, 0x8, 0xe, 0x0, 0x3ff, 0x6, 0x4, 0x2, 0x2c2a, 0x1, 0xffff, 0x9, 0x0, 0x5, 0x0, 0x9, 0x4, 0x3, 0x2, 0x9, 0x19, 0xfffffffe, 0x5, 0x7, 0x0, 0x7, 0x40, 0x7, 0x1, 0x8, 0x8, 0x81, 0x8, 0x4, 0x9141, 0x2, 0x5, 0x3, 0x6, 0x1, 0x9, 0x7f, 0x8543, 0x3, 0x465, 0x3ff, 0x10001, 0x100, 0x100, 0x5, 0x80000001, 0x101, 0x5, 0xffff7fff, 0x2, 0x7359, 0x61a, 0x7fff, 0x0, 0x39b, 0x5, 0x5, 0x7f, 0x9, 0x2, 0x61d, 0x5, 0x101, 0xc8, 0x3, 0x68000, 0x1ff, 0x101, 0x5, 0x9, 0x8, 0x4, 0x0, 0x4, 0x5, 0x7, 0x2, 0x5, 0x4, 0x81, 0xfffff51c, 0x3ff, 0x400, 0x1, 0x5, 0x0, 0x2008000, 0x80000000, 0xc690, 0x5, 0x8, 0x5, 0x4, 0x8f04, 0x4, 0x79, 0x1ff, 0x10000, 0x2, 0x800, 0x4, 0x4, 0x401, 0x3, 0x2013, 0x10000, 0x1, 0x8, 0x0, 0x6, 0x401, 0x4, 0xd, 0x2, 0x9, 0xdbc, 0x9, 0x2673, 0x3, 0x1, 0xffffff8d, 0x8, 0x2, 0x35, 0xe, 0x7f, 0x9, 0x0, 0x0, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff9}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x7, 0x101, 0x8, 0xff, 0x7, 0x7ff, 0x5, 0x1, 0xc1, 0x2, 0x5, 0x8, 0x57e2, 0x70c8, 0x5, 0x5, 0x101, 0xc, 0xffffffff, 0x7, 0x7, 0xea11, 0xffffffff, 0x5ce, 0x30000000, 0x0, 0x0, 0x10000, 0x7, 0x7, 0x8001, 0x0, 0x1ff, 0x5, 0xb, 0x3, 0x8, 0x8, 0xb, 0x1, 0xd, 0x400, 0x0, 0x1, 0x81, 0x5, 0x8, 0x8, 0x0, 0x2, 0x2, 0x9, 0x0, 0x1, 0x6, 0x986, 0x5, 0x66, 0x7, 0x80, 0x6, 0xc, 0x39, 0x1a, 0x3, 0x7, 0x10000, 0x3c, 0x2, 0x200, 0x5, 0x2, 0x1, 0x1, 0x0, 0x7, 0xbb, 0xff, 0x5, 0x8, 0x52e, 0x5, 0xea97, 0x3, 0xffff0000, 0x101, 0x1, 0x938, 0x77, 0xb63, 0x2, 0x0, 0xb7af, 0xb, 0x39, 0x5, 0x7, 0x6, 0x7, 0x2, 0x9614, 0x0, 0x8, 0x1, 0xa14, 0x5, 0x800, 0x3, 0x40, 0x2, 0x522, 0x10001, 0x0, 0x6, 0x6, 0xff, 0x7, 0xe, 0x4, 0x4, 0xd, 0x7fff, 0x7, 0x4, 0x8, 0x0, 0x800, 0x1, 0x2, 0x8, 0x1, 0x1, 0x0, 0xa, 0xda, 0xb16f, 0x2, 0x8c7, 0x4, 0x3, 0x40, 0x5, 0x10000, 0x2a01c20e, 0x5, 0x1, 0xb, 0x8, 0x8b1e, 0x7, 0xa, 0xb85, 0x95f, 0x4ae3, 0x9, 0x7, 0x9d76, 0x3, 0xfffffffb, 0x4, 0x9406, 0x5, 0x3, 0x271, 0x10001, 0xf, 0x1, 0x6, 0xfffffff1, 0xffffffff, 0x5, 0x7f, 0x7, 0x240, 0x0, 0x7, 0x6, 0x2, 0x2, 0x8, 0x6, 0x0, 0x7, 0x5, 0x5, 0x8, 0x0, 0x1, 0x4, 0x5, 0x5, 0x1, 0x8000, 0x6, 0x40, 0xdf, 0xdfd, 0xd, 0x7, 0x7fffffff, 0xffee, 0xfffff001, 0xff, 0x2, 0x3, 0x5, 0x10000, 0x8, 0x9, 0xc2e, 0x1, 0x5, 0x4, 0x2, 0x8, 0x5, 0x6, 0xb, 0x9, 0x7ff, 0x8, 0x7, 0xe, 0x7, 0x5, 0x8000, 0x7f, 0x8, 0x5, 0x5, 0xffffff7f, 0x7348000, 0x7, 0xfffffff5, 0x16f, 0x1, 0x4, 0x917, 0x9, 0x8, 0xff, 0x101, 0x6, 0x8, 0x9, 0x7fff, 0xe, 0x5, 0xff, 0x800, 0x7fffffff, 0x0, 0x8000, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x800, 0xfc4, 0x80000001, 0x7, 0x7, 0x1, 0x7, 0x3, 0x1af, 0x2, 0xfffffffe, 0x4, 0x401, 0x3, 0x6, 0x1, 0x2, 0x0, 0x6, 0x9, 0x4f5, 0x40, 0x5, 0x7, 0x1, 0x0, 0x33d911f2, 0x6, 0x80000000, 0xfffffffd, 0x5, 0xffffffff, 0x0, 0x6, 0x11, 0x8001, 0x9, 0x9, 0x2000000, 0x4, 0x8, 0x3, 0x963, 0xfff, 0xcc9d, 0x43b5, 0x3a9f, 0x7fffffff, 0x4, 0x80000000, 0x10, 0x1ff, 0x5, 0x4, 0x0, 0x3, 0x3, 0xfffffff8, 0x2, 0x2, 0x4, 0x1, 0x4, 0x6, 0x4, 0x100000, 0x1, 0x10, 0x3, 0x6, 0x7, 0x1, 0xfff, 0x3, 0x80, 0x6, 0x6, 0xfffffff3, 0x3b18e784, 0x3b, 0x2, 0xbb, 0x100, 0x26091642, 0x2, 0x1a, 0x4, 0x1000, 0x3, 0x4, 0x2, 0x0, 0xef26, 0x800, 0xfff, 0x2, 0x1000, 0x8001, 0xfff, 0xa613, 0x1ff, 0x0, 0x2, 0x5, 0x2, 0x8001, 0x3, 0x7ff, 0x5954, 0x1, 0x200, 0x259, 0x286, 0x6, 0x1, 0x1, 0xa, 0x6, 0x0, 0x3, 0x3c728952, 0xe4de, 0x81, 0x101, 0x6, 0x1, 0x9, 0x10001, 0xeeb2, 0xf, 0x8, 0x6, 0x3, 0xfffffff8, 0x3, 0x6, 0x6, 0x5, 0x3, 0x1, 0x6, 0x81, 0xa, 0x1ff, 0x4, 0xfffffff8, 0xffff0513, 0xffffff4c, 0x0, 0x4c42, 0x5, 0x0, 0x6, 0x7, 0x1, 0x2, 0x9, 0x9, 0xa899, 0x0, 0x9, 0x5, 0x8, 0x0, 0xf54, 0x1, 0x6, 0x6, 0xac, 0x101, 0xc000000, 0x4, 0x8000, 0x4, 0xbaf1, 0xd, 0x80000000, 0x1, 0x6, 0x5, 0x2, 0x0, 0x3, 0x7, 0x6, 0x1, 0x69, 0xf, 0xf, 0x9, 0xbff, 0x9, 0xffff, 0xb18, 0xfffffffe, 0x80000001, 0x0, 0xd, 0x1000, 0x2, 0x3, 0x3ff, 0xfffffff9, 0x1, 0x3, 0x5, 0x7, 0x68b, 0x9, 0x3, 0x6, 0x3, 0xffff, 0x3, 0x7, 0x7fffffff, 0x2, 0x2321, 0x0, 0xac8d, 0x4, 0x10000, 0x6, 0x4, 0x4, 0x40, 0xa, 0x2cb, 0x49d6, 0x2, 0x2, 0x4, 0x7, 0x3, 0x8, 0x9619, 0xcb, 0xe5a0, 0x7, 0xb17, 0x7, 0xfffffff2, 0x0, 0xffffffff, 0x93, 0x7, 0x800, 0x4, 0x0, 0x0, 0xf, 0xa9dd, 0x7f, 0x7ff, 0x101]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x81, 0x6, 0x3, 0x2, 0x9, 0x10001, 0x4, 0x3, 0x6, 0x8, 0x4, 0x204, 0x6, 0x5, 0x3, 0x8, 0x2, 0x0, 0x6, 0x6, 0x4, 0x5, 0x0, 0xc11, 0x4, 0x10000, 0x300, 0x2, 0x1, 0x3, 0x5, 0x0, 0x0, 0x7, 0x8, 0x4, 0x3, 0x7, 0xfef, 0x2, 0xffffffff, 0x5a, 0x5, 0x5, 0x5, 0x6, 0x1, 0x9, 0xfffffffe, 0x1, 0x4, 0xfffffc96, 0x1, 0x5, 0x8, 0x8, 0xffffffff, 0x8, 0x3, 0x10, 0x81, 0x9, 0x1b2, 0x4, 0x0, 0xf, 0x9, 0x40, 0x4, 0x3, 0x7533e12e, 0x6, 0x3, 0x7, 0x4, 0xd, 0x20000000, 0x1, 0x4, 0xd16, 0x3, 0x0, 0x800, 0x3, 0x306, 0xc, 0xfffffffd, 0x7cba, 0xaf2, 0x7f, 0xff, 0x8000, 0xa, 0xfffffffc, 0x1000, 0x7e, 0x4, 0x7, 0x3, 0x2, 0x4, 0x5d, 0x5, 0x7, 0x40, 0x1, 0x6, 0x5, 0x6, 0xf20, 0x5, 0x80, 0x200, 0x0, 0x5, 0xae, 0x0, 0x7, 0x56, 0x10000, 0x200, 0x4, 0x96, 0x7, 0x100000, 0x8, 0x0, 0x2, 0xeb5, 0x4, 0x1, 0x1, 0xffffffff, 0x7fff, 0x3, 0x2, 0x3, 0x767, 0x8001, 0x4, 0x80000000, 0xffff, 0x3, 0x9d5, 0x3, 0x7c, 0xa, 0x4, 0x2, 0x7, 0xc, 0x100, 0x0, 0x80000001, 0x7, 0x6, 0x665, 0xffff, 0x2, 0xe8, 0xa3a1, 0x8, 0x4, 0x7, 0x91, 0x7fff, 0x5, 0x8001, 0xe2e1, 0x6e9, 0x4, 0x6, 0x6, 0x8001, 0x9, 0x8, 0x10, 0xd, 0x81, 0x1, 0x4, 0x80000001, 0x61, 0x7, 0x6, 0x5, 0x64f, 0x7c, 0x3, 0x1, 0x4, 0x8, 0xfffffff9, 0x4, 0x9, 0x81, 0x6, 0x8, 0x2a, 0x6, 0x3, 0x6, 0x4, 0xaa, 0x2, 0x2, 0x8, 0x3, 0x8, 0x80, 0x0, 0x7ff, 0x3, 0x5, 0xa0000000, 0x81, 0xfffffffc, 0x400, 0x9, 0xbb, 0x2, 0x6, 0xb4b, 0x89b0, 0xc000000, 0x0, 0x5, 0x7, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x6, 0x6, 0x0, 0x9, 0x2, 0x55, 0x6, 0x0, 0x0, 0xc547, 0x8, 0x9, 0x9, 0x2, 0x4, 0x5, 0x2, 0x5, 0xfffffff8, 0x9, 0x3]}]]}, {0xa3, 0x6, "1f9559f74999a41d234430a4d1dc3279b354b48b1c4483cefa0743d1acca8c9e57d9ab390b66de1470b5103ada94fb7b830fbeafa845f30c031749d89c68899c6856d7b162db2920ee1424b9ee384312841797e2e3992f2836da91b535e0ef0f1c24f8f3bb24a7e90b5119b9977757f93bf4f456a176f07b15d020c382613dc3c1817471de1a79abf288b74af90d19d5716c9cca9f3405590235fdcaf4f1fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x21d4}}, 0x0) 2.600507791s ago: executing program 1 (id=1266): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf255300000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @loopback}, 0x4, 0x1, 0x4, 0x2}}, 0x26) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffffd, 0x2, @TCA_ETF_PARMS={0x10}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xe, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x804) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "008c04", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @remote, {[@hopopts={0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x7f}, @pad1, @padn]}]}}}}}, 0x0) r11 = socket(0x15, 0x5, 0x0) getsockname$llc(r11, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000140)) 2.022859368s ago: executing program 0 (id=1275): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 2.021940018s ago: executing program 2 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010031bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80210000010000001400030065727370616e300000000000000000000800168004050180"], 0x3c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0b00000000000500000000000000000000000000be55baf979128fc866037df303feea6e435b566ab3045c5c041f5d7b3474f6c1491c772e95c78bda0d19ce5e397f8d54218fc5d00f030093f5b0ba1f99215ac18b1817ee9507b60bad16df920eb8f333e38e589100c4dc2fa8970512ef147bf6bd9b88c6b269fb19966d5803c15e9c64093d67df56d41144270f35f72ffc44d3b3a39db79fca71f6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0b00000000000500000000000000000000000000be55baf979128fc866037df303feea6e435b566ab3045c5c041f5d7b3474f6c1491c772e95c78bda0d19ce5e397f8d54218fc5d00f030093f5b0ba1f99215ac18b1817ee9507b60bad16df920eb8f333e38e589100c4dc2fa8970512ef147bf6bd9b88c6b269fb19966d5803c15e9c64093d67df56d41144270f35f72ffc44d3b3a39db79fca71f6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000340)=0x30) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r10, 0x0, 0x1}, 0x18) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x60) (async) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x60) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 1.857511097s ago: executing program 3 (id=1277): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000008000000000000000000000300000000010000000200000000000000009ac55a50"], 0x0, 0x52}, 0x20) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) 1.811604691s ago: executing program 0 (id=1279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a0900001400020000000000000000000000000000000000140003"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x88c1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) (async) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001740)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) recvmmsg$unix(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000440)=""/212, 0xd4}], 0x2}}], 0x1, 0x40000100, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) 1.646579486s ago: executing program 4 (id=1280): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) sendmsg$sock(r3, &(0x7f0000000440)={&(0x7f0000000180)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="6152e9bf6ae4b5405940652fafc013b94c45db2beef91d1b17bd520c4341807f50647eaeb995e6fa220aa28d2956f4fa8ca38c753af3d07f22052fe3410079887492c237509172b70b70bfd21c5fac033669d0c0477c3093b2d834d189823c47c068a884deb5dd1cafbd1a5ab6dbca3016ce3d1b2cd091195d72be114523f8a648705235c96a100c762bc9c8a157d22dee8ce18a7229f25be5057fb57cad3906ee53d441352c2423e890339c8ffab338c109d21e6fac4ed096954b15c3e443d1c6d7deaab7a4b8a2671a218c955ffcf31397a168cdba1273af35eb4b61daac9e1689b781cf", 0xe5}, {&(0x7f0000000200)="a1ecb39559cc9b940ec7ba1885746c5b57b7a5377bae45ba45488ae79131372a058bbd480d063d0bf3c46a9689d3181d8c15565aa09c37e1babf014498de9fe129a840319ccdcfa8dce418bd378177e19258a55925c158aec2ca8ae55756", 0x5e}], 0x2}, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) socket$netlink(0x10, 0x3, 0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000500)='q\x82\xaa^J\xed\xac+\xa8U\xfe^G;K\xa3\x9c\\\x81U\xbe\xc6\xc3\xc1\fgE2~o\xb5L%\x92\xe2\xdb\xc8\x9d\xfe\xb8\xca|\x1e6r\x05\xd6\xd6\x11\x97\xf6\xa4\x0e\xda\xb2\x01\xd3G\xf6\x1bRD\xedu]\xd3\xe7\xe3\xf0\x880\x1b\xc0\xac\xa2\xe2F\xf0\x9b1\x96M\xf8$\xd53\xd8\xa3\x85r=)`]\x7f\xd6\x17\xed\xdc\"n#\x9a\xb5\xcfg\x01\xdb\xb4\x16-\xd4\xfd\x05.]\xef\xc5\\\x91\xa8!*\xc5\xf2M\xbfe\x9e4\'\xa3;\xbd$P\xc2:Q\x80\xb6nw\xf11\xd6\x8b\x05\xa0\xd4P\xbd\xc8\x96\x19F\xb56\xc8\xb5\x12\xc9B\xe7\xb0:]@\xc6\x13\xe5z\x16\xe4mG4\x1d\xee\a\x8c\x10^\xb2\xe5@\x9f\x86G\x1d\xd1U\x05\xe2\xd9\xb3\xce\xe2I\xd9\xa9GNS\xb0\xa6\xff\xe7-A\x97\xd2\xc08\x85m\xe1\xd1\x8bI\xd5\x99\x14f\xa3\x06\xcawR\xfd9\x15\bd\xef\xc2\xf6j\xe8z\xc4\x00\xa4\xd7C\x82\xd5\xd6\xf0\x91\x7f\xe0\xeb\xf3\xdcU\xc5\xbc1z5\xdaw\xd8C\xcb\xdc\xa78\xc4V$\xb5\xb8\x18\x8c\x84\xd4\x13\x8a8 \x17\xd6TU\xc4\x99\xc7\x01\x85\xfb^=\x82\v\xe0\xad\xfc\xf2\xcf\xd7\xa8\x14\xd6X1\'\x9a\xadb\x17\xad\xc9i4gK\xbb\x16\xf4p\xecw\xce\x01r\xbbhl\xef\xa6\xc4\x0e\x91\x83\xde\x90\x89\x8e(]\x94\xb4?\x88\xc8\b\x00\x00\x00\x00\x00\x00\x00\x02\xba\xc7=\xe7X\xe2\x1c\x16\xffI\xd4*\x87\xb1\x9ek7\x96{|nXmr\\t\xa7\x7f\xa5S\f\xaab\x95:S\xc7\x86\xcd\x1f\x98|\xd8k\x9d\xfb\r\x13:\x1dQ9\xbe\xce\rF\xe84i\x8e\xa0%\x93\x8b\xc7\xd8_\r\x1e\xd2z\xf4\xa8M\x01\x12o\xee\x98\xaf60\x8e.g\xac\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\x18\xea\xbbG\x9c\x97gy\xf5eH\xed\x98\xe2\x80\xdcp\xfdU\x19\xea\x17\x03x\x05w\xdd(4\xf0\x198\x12\xa0O\x89\xca\x8a\xc5XYs\xc2\xbf}\x1f^\vC\b\xe0*\xda\x9f\xab>\x06\x97\x87;\x15fE\xb6\xcdg`d\xa1\xdaMO{\xcc\xf8\x89/;\xe6\xc4\xd0\xbc\x15\v\xbc\x8c\xd9+\xad\xd0Q\xc3?k\x8dC\x02\b\xb9&$\xd7\xb7s=\xcb\xc7\xd8-\x81\xbd9 \xc8%\x02\xdek;\xeb\xdf\xc6\x96\xa9\xc2 \x19Bu-'}, 0x18) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r4], 0x6) 1.645900666s ago: executing program 3 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000005000500940000000800030000000000"], 0x24}}, 0x0) 1.499177992s ago: executing program 2 (id=1282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xe}, {0xe, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x2a, 0x2, 0x9) bind$bt_hci(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x2a, 0x0, 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0xffff}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) 1.484284838s ago: executing program 0 (id=1283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) 1.334258611s ago: executing program 3 (id=1284): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x7c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x6}, {0xc, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_ACT={0x4c, 0x1, [@m_tunnel_key={0x48, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}}]}, 0x7c}}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x8, 0x6, 0x5, {{0x28, 0x4, 0x0, 0x1, 0xa0, 0x68, 0x0, 0xa7, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x4b, [@local]}, @rr={0x7, 0x13, 0x6e, [@multicast2, @broadcast, @remote, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x7}, {@remote, 0x2}, {@loopback, 0x5}]}, @end, @timestamp={0x44, 0x24, 0x30, 0x0, 0x7, [0x3, 0xfffffffc, 0x1, 0x8, 0x3, 0xc6d, 0x9, 0x5]}, @rr={0x7, 0x1b, 0xf, [@local, @loopback, @multicast1, @empty, @local, @broadcast]}, @generic={0x86, 0x3, 'r'}, @lsrr={0x83, 0xf, 0x1d, [@multicast1, @remote, @multicast1]}, @end]}}}}}) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffed}, {0x4, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r12 = gettid() r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffe0adf2500007400", @ANYRES32=r11, @ANYBLOB="049c01000750050008001300", @ANYRES32=r12, @ANYBLOB="140003007665"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x9, 0x25, {{0x10, 0x4, 0x2, 0x1b, 0x40, 0x64, 0x0, 0x76, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0x7, [{@local, 0x400}, {@rand_addr=0x64010102, 0x800}]}, @noop, @timestamp_addr={0x44, 0x14, 0x50, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x9, 0x25, {{0x10, 0x4, 0x2, 0x1b, 0x40, 0x64, 0x0, 0x76, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0x7, [{@local, 0x400}, {@rand_addr=0x64010102, 0x800}]}, @noop, @timestamp_addr={0x44, 0x14, 0x50, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x7}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x1ec, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x8840) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x1ec, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x8840) splice(r3, &(0x7f0000000000)=0x6, r0, &(0x7f0000000040)=0x6, 0x80000000, 0x1) (async) splice(r3, &(0x7f0000000000)=0x6, r0, &(0x7f0000000040)=0x6, 0x80000000, 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) 1.261987081s ago: executing program 0 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10010, r1, 0xe4c7a000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x1faa0798ba42b6a8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10010, r1, 0xe4c7a000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async) close(r3) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x1faa0798ba42b6a8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 1.209140787s ago: executing program 4 (id=1286): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 1.106886486s ago: executing program 2 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000081700010014000200fc02000000769ed69a09956e79000001080018004e224e221400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.013949084s ago: executing program 4 (id=1288): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0xfa, 0x3, 0x100000000080}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/164, 0xa4, 0x0, &(0x7f0000000100)=""/122, 0x7a}}, 0x10) 871.407235ms ago: executing program 1 (id=1289): r0 = socket(0x1f, 0x5, 0xa) ioctl(r0, 0x8936, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x5014}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)={0x44, r6, 0xb97534d5fe9704cf, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x581}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8852) (async) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)={0x44, r6, 0xb97534d5fe9704cf, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x581}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8852) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) close(r7) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) read(r9, 0x0, 0x0) (async) read(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xa, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x80000000}, {0x0, 0x1, 0x7, 0x6ab, 0x7f, 0x9}, 0xa6, 0x7, 0x34}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xa, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x80000000}, {0x0, 0x1, 0x7, 0x6ab, 0x7f, 0x9}, 0xa6, 0x7, 0x34}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0xd, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008011}, 0x4008010) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 810.921796ms ago: executing program 4 (id=1290): syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) (async) 750.667761ms ago: executing program 3 (id=1291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0003009bc67da35fb4e0cbd7ec5e43027e4974221a6fab41ef4a1433a467f76068206e44000000008e0556e0d0b03521844f7d07e90dc7b0cfe1107be1ba779cf5740c4f9079c3509335a82a975429e434ceb45cbc5a81217f003ed6f10c99e3f153d1aea1389176373d725068fb7c5b02b0d08d3deb7fecd21f64a7a817f728000000007903cfeabf99cf16af9ec2d8e5fe6a982dc768cf539e15c09efa27a0"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r0, 0x0, 0x40080) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0) 668.523568ms ago: executing program 2 (id=1292): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x40001) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000016c0)={0x1c, r3, 0x3caa77006f5e2423, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r7, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}]}, 0x4c}}, 0x804) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r11}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000850) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x45fd}]}}]}, 0x4c}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x1b4, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x188, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x154, 0x1, [@m_csum={0x150, 0x1a, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x0, 0x7f, 0x7}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x80000000, 0x9d6}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x91d6, 0x0, 0x7, 0x1, 0xc}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0xffffffffffffffff, 0x30, 0x40}, 0x2c}}]}, {0xb3, 0x6, "e24e5cb9457367a03c7bab13e71b99307390d98833a19af91491f5692e9353a2bda69b046d6a23b4df9e2c687a969b6c5cf2084e028e3b7152712d4c46d777af81a8cb73b822329bb42ea23e003b6b33059e1f5c40d6ab4b2f1cc264f7f1be10f12240188ed05eb2cafbe35e2286b4037942e6e9e584ac4435b5547bf06ff99319435c76c11859c30a13740b0a39cab8347777cadf2850914989d7e1ce2b0b21062ef546c2233c7f7aaa3d85730dde"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x3, 0x1a, 0x52, 0x1}, {0xf3, 0x7, 0x5, 0x5c9}]}}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 578.760109ms ago: executing program 3 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 549.157903ms ago: executing program 3 (id=1294): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @link_local, @val={@val={0x88a8, 0x3}, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@snap={0x1, 0xab, "48a6", "c2f183", 0x8847, "8afa2588c9aba5da1d93759ef78cb34e13e9143e5aeaeeaf62f4106033afa450046a5a168141f872b9c103665d4e29d3704a8b299d1b94835d0ee592e23bf84628f706f3420bb54862947618bd47bfef73b365e456655e386536f46fe47e0cd1a69a4878853bab3785ecf92f392c15f0a958a31c5f5ab697d22a94d3"}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x468, 0xf15, 0xfc, 0xf8b]}) 400.384759ms ago: executing program 0 (id=1295): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 395.523949ms ago: executing program 4 (id=1296): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast1}}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast1}}]}, 0x30}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x38, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 326.916322ms ago: executing program 1 (id=1297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 311.474078ms ago: executing program 2 (id=1298): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)={0x3, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) syz_emit_ethernet(0x17, &(0x7f0000000140)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@llc={0x4, {@llc={0x42, 0xf4, 'j', '|@'}}}}}, &(0x7f0000000180)={0x0, 0x3, [0xda5, 0xb2b, 0x980, 0x64]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0x0, 0x7, 0x0, [{0x100000001, 0x1000, 0x83e7, '\x00', 0x40a}, {0x6, 0x9, 0x1, '\x00', 0x806}, {0x2deb, 0x101, 0x2f7, '\x00', 0x1}, {0x1000, 0x6, 0x7c4, '\x00', 0x200}, {0x2, 0x0, 0x5, '\x00', 0x400}, {0x7f, 0x5, 0x6, '\x00', 0x1402}, {0x5, 0x5, 0xffffffffffffffff, '\x00', 0x800}]}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000380)={r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa29}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8b45}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000044) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f00000007c0)={0xa, 0x0, 0xf, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x6, 0x4}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000880)=r7, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f6, 0x400, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendto$inet6(r6, &(0x7f00000009c0)="e3d3772fded2925e2028b9d1e13c3fa5946a9c8b46f5a9ece4c0c1717329d9e4aa8b706a5be9f45b245bb096c049acbccc8855ba3a0c86627977d968807ec697e234307323d9db006dd3d561b99bfd0bc312099c48d7308a87c85a3d5080ceee2c28397db8fc471ee04068cfdd74713872531e0850ceed611de3b7f3c2a748eee63197632f974f15e72d0ed062d743b99611cc4f360ba92e00bc0781df67c1bece97361916ccaa4bad4efffb", 0xac, 0x10, &(0x7f0000000a80)={0xa, 0x4e22, 0x1000, @private0, 0x80000001}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) clock_gettime(0x7, &(0x7f0000000b80)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x24d4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6b24}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x76b8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000d40)) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000d80)) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000dc0)={0x14, 0x5, {0x5, @struct={0x0, 0xfffffffa}, 0x0, 0x6, 0xe99, 0x3, 0x7, 0x6450, 0x0, @struct={0x7fff, 0xf36d}, 0x3ff, 0xef2, [0x4, 0x5, 0xfffffffffffffffa, 0x1, 0x100000001, 0x7]}, {0x9, @struct={0xe, 0x3}, 0x0, 0x2, 0x1, 0xbe, 0xffff, 0x3, 0x40, @usage=0x100, 0x7fff, 0x9, [0x7, 0x1, 0x6, 0x49a, 0x9, 0x6323]}, {0x3ff, @struct={0x8000, 0x5}, 0x0, 0x7, 0x101, 0xb6, 0x8001, 0x9, 0x10, @usage=0xd, 0x200, 0xc, [0x4, 0xc75e, 0xfffffffffffff801, 0x3, 0x5]}, {0x81, 0x4a, 0x3}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000011c0)={{}, 0x0, 0x1c, @unused=[0x3ff, 0x77b, 0x60a, 0x3], @devid=r11}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000021c0)) 195.525594ms ago: executing program 1 (id=1299): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) 131.568102ms ago: executing program 4 (id=1300): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x2, 0x73) (async) 82.581516ms ago: executing program 0 (id=1301): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x8}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044090}, 0x4040) 63.715958ms ago: executing program 2 (id=1302): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) close(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 0s ago: executing program 1 (id=1303): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001380)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) (async) socket$tipc(0x1e, 0x2, 0x0) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001380)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 81.687197][ T5852] cgroup: Unknown subsys name 'net' [ 81.794972][ T5852] cgroup: Unknown subsys name 'cpuset' [ 81.803904][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.494092][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.174843][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.183467][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.191218][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.212649][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.219877][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.228952][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.251340][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.261114][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.281654][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.282539][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.297117][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.297161][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.313007][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.316667][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.320516][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.334149][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.334760][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.342985][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.362048][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.363621][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.369367][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.378949][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.391837][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.392338][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.409056][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.074148][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 87.387879][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 87.469531][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 87.504405][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 87.564616][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 87.606992][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.614297][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.621802][ T5871] bridge_slave_0: entered allmulticast mode [ 87.629035][ T5871] bridge_slave_0: entered promiscuous mode [ 87.682636][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.689845][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.697517][ T5871] bridge_slave_1: entered allmulticast mode [ 87.704800][ T5871] bridge_slave_1: entered promiscuous mode [ 87.852107][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.874496][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.881850][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.889002][ T5875] bridge_slave_0: entered allmulticast mode [ 87.896604][ T5875] bridge_slave_0: entered promiscuous mode [ 87.919326][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.949649][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.957191][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.964877][ T5875] bridge_slave_1: entered allmulticast mode [ 87.973357][ T5875] bridge_slave_1: entered promiscuous mode [ 87.979935][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.987573][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.995112][ T5873] bridge_slave_0: entered allmulticast mode [ 88.003222][ T5873] bridge_slave_0: entered promiscuous mode [ 88.075773][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.083318][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.090505][ T5873] bridge_slave_1: entered allmulticast mode [ 88.099608][ T5873] bridge_slave_1: entered promiscuous mode [ 88.119491][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.126796][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.134576][ T5863] bridge_slave_0: entered allmulticast mode [ 88.142273][ T5863] bridge_slave_0: entered promiscuous mode [ 88.165654][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.191610][ T5871] team0: Port device team_slave_0 added [ 88.211956][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.219641][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.227355][ T5863] bridge_slave_1: entered allmulticast mode [ 88.235164][ T5863] bridge_slave_1: entered promiscuous mode [ 88.242118][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.249246][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.256676][ T5862] bridge_slave_0: entered allmulticast mode [ 88.263836][ T5862] bridge_slave_0: entered promiscuous mode [ 88.274708][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.298290][ T5871] team0: Port device team_slave_1 added [ 88.306743][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.330183][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.337497][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.344972][ T5862] bridge_slave_1: entered allmulticast mode [ 88.352120][ T5862] bridge_slave_1: entered promiscuous mode [ 88.371486][ T5879] Bluetooth: hci1: command tx timeout [ 88.394203][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.446734][ T5875] team0: Port device team_slave_0 added [ 88.451206][ T5879] Bluetooth: hci0: command tx timeout [ 88.457949][ T5879] Bluetooth: hci4: command tx timeout [ 88.459059][ T5883] Bluetooth: hci3: command tx timeout [ 88.471409][ T5875] team0: Port device team_slave_1 added [ 88.508184][ T5873] team0: Port device team_slave_0 added [ 88.516964][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.531019][ T5883] Bluetooth: hci2: command tx timeout [ 88.556178][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.563462][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.589617][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.603214][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.610184][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.636606][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.649565][ T5873] team0: Port device team_slave_1 added [ 88.658080][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.686695][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.747760][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.773545][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.780506][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.806485][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.819852][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.827325][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.853514][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.879105][ T5863] team0: Port device team_slave_0 added [ 88.888475][ T5863] team0: Port device team_slave_1 added [ 88.912184][ T5862] team0: Port device team_slave_0 added [ 88.926947][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.933992][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.960369][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.987350][ T5862] team0: Port device team_slave_1 added [ 89.008954][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.016372][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.042536][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.122528][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.129498][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.156512][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.201097][ T5871] hsr_slave_0: entered promiscuous mode [ 89.207575][ T5871] hsr_slave_1: entered promiscuous mode [ 89.231006][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.237981][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.264006][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.277120][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.284211][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.310179][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.323686][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.330836][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.357637][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.394842][ T5875] hsr_slave_0: entered promiscuous mode [ 89.402689][ T5875] hsr_slave_1: entered promiscuous mode [ 89.408775][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 89.414651][ T5875] Cannot create hsr debugfs directory [ 89.487135][ T5873] hsr_slave_0: entered promiscuous mode [ 89.496855][ T5873] hsr_slave_1: entered promiscuous mode [ 89.503563][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 89.509316][ T5873] Cannot create hsr debugfs directory [ 89.735089][ T5862] hsr_slave_0: entered promiscuous mode [ 89.742152][ T5862] hsr_slave_1: entered promiscuous mode [ 89.748297][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 89.754129][ T5862] Cannot create hsr debugfs directory [ 89.766576][ T5863] hsr_slave_0: entered promiscuous mode [ 89.777500][ T5863] hsr_slave_1: entered promiscuous mode [ 89.784552][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 89.790310][ T5863] Cannot create hsr debugfs directory [ 90.312597][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.325812][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.357593][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.377545][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.427988][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.441907][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.451035][ T5883] Bluetooth: hci1: command tx timeout [ 90.474579][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.490987][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.531296][ T5883] Bluetooth: hci3: command tx timeout [ 90.536760][ T5883] Bluetooth: hci4: command tx timeout [ 90.542298][ T5879] Bluetooth: hci0: command tx timeout [ 90.590359][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.602982][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.614079][ T5879] Bluetooth: hci2: command tx timeout [ 90.616436][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.636155][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.787091][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.808268][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.831715][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.873137][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.968922][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.986959][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.997491][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.022896][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.047382][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.062807][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.076230][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.116274][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.123580][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.158463][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.187165][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.209100][ T3966] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.216235][ T3966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.238905][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.246097][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.280638][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.287792][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.320209][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.343271][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.350379][ T751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.393158][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.400306][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.526415][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.646283][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.740403][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.747618][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.766957][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.774265][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.795316][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.946699][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.982290][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.017887][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.025152][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.069369][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.076659][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.090402][ T24] cfg80211: failed to load regulatory.db [ 92.270381][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.318377][ T5871] veth0_vlan: entered promiscuous mode [ 92.347258][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.412038][ T5871] veth1_vlan: entered promiscuous mode [ 92.533092][ T5879] Bluetooth: hci1: command tx timeout [ 92.562404][ T5875] veth0_vlan: entered promiscuous mode [ 92.614148][ T5879] Bluetooth: hci4: command tx timeout [ 92.614177][ T5883] Bluetooth: hci0: command tx timeout [ 92.620761][ T5184] Bluetooth: hci3: command tx timeout [ 92.639723][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.669534][ T5875] veth1_vlan: entered promiscuous mode [ 92.693286][ T5184] Bluetooth: hci2: command tx timeout [ 92.708932][ T5871] veth0_macvtap: entered promiscuous mode [ 92.740511][ T5873] veth0_vlan: entered promiscuous mode [ 92.775695][ T5871] veth1_macvtap: entered promiscuous mode [ 92.791669][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.808969][ T5873] veth1_vlan: entered promiscuous mode [ 92.886644][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.937399][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.963545][ T5875] veth0_macvtap: entered promiscuous mode [ 92.993576][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.007324][ T5873] veth0_macvtap: entered promiscuous mode [ 93.027511][ T5875] veth1_macvtap: entered promiscuous mode [ 93.045434][ T5863] veth0_vlan: entered promiscuous mode [ 93.061708][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.079715][ T5873] veth1_macvtap: entered promiscuous mode [ 93.114775][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.125901][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.155870][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.186149][ T5863] veth1_vlan: entered promiscuous mode [ 93.231519][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.255973][ T3966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.276511][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.285554][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.306305][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.330041][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354571][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.410138][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.427668][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.459619][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.468639][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.504118][ T751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.513179][ T751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.540768][ T3966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.549546][ T3966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.563947][ T5863] veth0_macvtap: entered promiscuous mode [ 93.607326][ T5863] veth1_macvtap: entered promiscuous mode [ 93.657182][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.660431][ T5862] veth0_vlan: entered promiscuous mode [ 93.695481][ T5862] veth1_vlan: entered promiscuous mode [ 93.764488][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.793392][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.809592][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.856324][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.887883][ T5988] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 93.909397][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.926267][ T751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.935559][ T751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.962487][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.995332][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.998551][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.021066][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.048747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.062150][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.106738][ T5862] veth0_macvtap: entered promiscuous mode [ 94.120147][ T5862] veth1_macvtap: entered promiscuous mode [ 94.205449][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.316156][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.379797][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.405473][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.453021][ T751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.466549][ T751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.529000][ T751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.552354][ T751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.602112][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.609985][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.610865][ T5184] Bluetooth: hci1: command tx timeout [ 94.690926][ T5184] Bluetooth: hci0: command tx timeout [ 94.696401][ T5184] Bluetooth: hci3: command tx timeout [ 94.700688][ T5883] Bluetooth: hci4: command tx timeout [ 94.730895][ T5999] netlink: 'syz.2.8': attribute type 6 has an invalid length. [ 94.773665][ T5883] Bluetooth: hci2: command tx timeout [ 95.054247][ T3966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.088716][ T3966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.143241][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.349581][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.394379][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.482027][ T6023] netlink: 'syz.0.12': attribute type 6 has an invalid length. [ 95.638430][ T6028] Zero length message leads to an empty skb [ 96.244842][ T6049] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 96.454045][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 96.554037][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 96.627032][ T6065] netlink: 'syz.3.24': attribute type 17 has an invalid length. [ 96.662343][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.720918][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.823743][ T6074] Bluetooth: MGMT ver 1.23 [ 96.847090][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 96.899132][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 96.903686][ T6076] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 96.927773][ T6076] netlink: 228 bytes leftover after parsing attributes in process `syz.4.27'. [ 96.945889][ T6073] IPv6: sit1: Disabled Multicast RS [ 96.947837][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 96.978410][ T6073] sit1: entered allmulticast mode [ 97.579720][ T6107] netlink: 'syz.3.35': attribute type 83 has an invalid length. [ 97.768430][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.930144][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 98.092571][ T6127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.689450][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 98.851087][ T5883] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 98.852496][ T5184] Bluetooth: hci2: command 0x0401 tx timeout [ 99.154693][ T6175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 99.329160][ T6189] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 99.365648][ T6189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.917805][ T6216] trusted_key: syz.3.65 sent an empty control message without MSG_MORE. [ 99.926572][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.940185][ T1115] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.959691][ T1115] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.003176][ T1115] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.386643][ T6233] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.467744][ T6237] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 100.670061][ T6238] veth3: entered promiscuous mode [ 101.239678][ T6280] macvtap1: entered allmulticast mode [ 101.266292][ T6280] veth0_macvtap: entered allmulticast mode [ 101.532257][ T6291] __nla_validate_parse: 12 callbacks suppressed [ 101.532277][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 101.543858][ T6296] raw_sendmsg: syz.2.89 forgot to set AF_INET. Fix it! [ 101.624587][ T6304] sctp: [Deprecated]: syz.0.92 (pid 6304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.624587][ T6304] Use struct sctp_sack_info instead [ 101.643030][ T6304] sctp: [Deprecated]: syz.0.92 (pid 6304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.643030][ T6304] Use struct sctp_sack_info instead [ 102.040145][ T6311] syzkaller1: entered promiscuous mode [ 102.050090][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 102.068846][ T6311] syzkaller1: entered allmulticast mode [ 102.077845][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.157197][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.654090][ T6332] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 102.672359][ T6332] netlink: 220 bytes leftover after parsing attributes in process `syz.2.101'. [ 102.693389][ T6335] Bluetooth: MGMT ver 1.23 [ 102.711118][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 102.784303][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 103.032973][ T6332] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.524313][ T6378] netlink: 'syz.4.114': attribute type 2 has an invalid length. [ 103.945180][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 103.945200][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 103.973621][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 104.004410][ T6394] netlink: 128 bytes leftover after parsing attributes in process `syz.3.118'. [ 104.034151][ T6396] netlink: 128 bytes leftover after parsing attributes in process `syz.3.118'. [ 104.209520][ T6414] gretap1: entered promiscuous mode [ 104.227418][ T6414] gretap1: entered allmulticast mode [ 104.597900][ T6427] netlink: 'syz.3.126': attribute type 4 has an invalid length. [ 104.953619][ T6427] geneve2: entered promiscuous mode [ 104.958901][ T6427] geneve2: entered allmulticast mode [ 105.696273][ T6478] netlink: 'syz.3.140': attribute type 29 has an invalid length. [ 106.113070][ T6493] ip6erspan0: entered promiscuous mode [ 106.151668][ T6493] ip6erspan0: entered allmulticast mode [ 106.319903][ T6512] netlink: 'syz.2.150': attribute type 3 has an invalid length. [ 107.064941][ T6527] nbd: must specify an index to disconnect [ 107.117777][ T6527] C: renamed from lo (while UP) [ 107.421386][ T6530] tipc: Started in network mode [ 107.427459][ T6530] tipc: Node identity 16675f509cb6, cluster identity 4711 [ 107.527091][ T6530] tipc: Enabled bearer , priority 0 [ 108.167211][ T6536] syzkaller0: entered promiscuous mode [ 108.189242][ T6536] syzkaller0: entered allmulticast mode [ 108.218706][ T6536] tipc: Resetting bearer [ 108.396141][ T6540] team0: Device gtp0 is of different type [ 108.460437][ T6543] __nla_validate_parse: 8 callbacks suppressed [ 108.460457][ T6543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.158'. [ 108.519542][ T6543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.158'. [ 108.535262][ T5957] tipc: Node number set to 2328977232 [ 108.601150][ T6529] tipc: Resetting bearer [ 108.873212][ T6554] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 108.913407][ T6554] netlink: 'syz.1.162': attribute type 11 has an invalid length. [ 108.968176][ T6554] netlink: 224 bytes leftover after parsing attributes in process `syz.1.162'. [ 110.178396][ T6529] tipc: Disabling bearer [ 110.197847][ T6547] tipc: MTU too low for tipc bearer [ 110.208674][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 110.235592][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 110.259262][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 110.287590][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 110.405582][ T6564] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 110.634723][ T6573] netlink: 132 bytes leftover after parsing attributes in process `syz.0.169'. [ 110.727293][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'. [ 110.845464][ T6573] bond1: entered promiscuous mode [ 110.850562][ T6573] bond1: entered allmulticast mode [ 110.926975][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.472768][ T6559] infiniband syz2: set active [ 111.481657][ T6559] infiniband syz2: added vxcan1 [ 111.495276][ T6559] syz2: rxe_create_cq: returned err = -12 [ 111.518592][ T6559] infiniband syz2: Couldn't create ib_mad CQ [ 111.526835][ T6559] infiniband syz2: Couldn't open port 1 [ 111.555494][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.566824][ T5868] vxcan1 speed is unknown, defaulting to 1000 [ 111.591697][ T6606] warning: `syz.4.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.634893][ T6559] RDS/IB: syz2: added [ 111.643528][ T6559] smc: adding ib device syz2 with port count 1 [ 111.654152][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.659808][ T6559] smc: ib device syz2 port 1 has pnetid [ 111.675110][ T6608] netlink: 52 bytes leftover after parsing attributes in process `syz.4.180'. [ 111.809712][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.181'. [ 111.864219][ T3966] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.908823][ T3966] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.938402][ T3966] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.961881][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 111.964047][ T3966] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.030049][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 112.117241][ T6619] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 112.162268][ T6628] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 112.405185][ T6620] netlink: 'syz.1.183': attribute type 4 has an invalid length. [ 112.444954][ T6631] nbd: nbd0 already in use [ 112.615127][ T6645] sctp: [Deprecated]: syz.4.187 (pid 6645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.615127][ T6645] Use struct sctp_sack_info instead [ 112.828858][ T5922] udevd[5922]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 113.928780][ T6648] __nla_validate_parse: 1 callbacks suppressed [ 113.928799][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 113.944508][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 113.953867][ T6648] netlink: 'syz.0.188': attribute type 3 has an invalid length. [ 113.971434][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 114.159988][ T6660] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 114.195442][ T6660] netlink: 244 bytes leftover after parsing attributes in process `syz.1.193'. [ 114.231253][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.709104][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 114.710404][ T6678] nbd: couldn't find device at index 0 [ 114.741729][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 114.758305][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 115.171788][ T6687] netlink: 'syz.3.200': attribute type 11 has an invalid length. [ 115.179580][ T6687] netlink: 228 bytes leftover after parsing attributes in process `syz.3.200'. [ 115.532710][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 115.589106][ T6705] netlink: 'syz.1.208': attribute type 2 has an invalid length. [ 115.601027][ T6704] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 115.657812][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 115.894758][ T6719] netlink: 'syz.4.211': attribute type 4 has an invalid length. [ 115.904594][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 116.035529][ T6724] tipc: Started in network mode [ 116.040497][ T6724] tipc: Node identity c27625b73946, cluster identity 4711 [ 116.090473][ T6724] tipc: Enabled bearer , priority 0 [ 116.153826][ T6726] team_slave_0: entered promiscuous mode [ 116.159709][ T6726] team_slave_1: entered promiscuous mode [ 116.179265][ T6727] syzkaller0: entered promiscuous mode [ 116.190824][ T6727] syzkaller0: entered allmulticast mode [ 116.255495][ T6724] tipc: Resetting bearer [ 116.324125][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 116.354097][ T6723] tipc: Resetting bearer [ 116.454426][ T6723] tipc: Disabling bearer [ 116.712969][ T6754] netlink: 100 bytes leftover after parsing attributes in process `syz.4.219'. [ 116.826850][ T6751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.858301][ T6757] netlink: 'syz.0.221': attribute type 18 has an invalid length. [ 116.998831][ T6559] vxcan1 speed is unknown, defaulting to 1000 [ 117.517275][ T6785] netlink: 'syz.4.231': attribute type 6 has an invalid length. [ 117.619706][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.627889][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.635882][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.643844][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.651835][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.659767][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.667763][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.675747][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.683728][ T6788] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.715916][ T5184] Bluetooth: hci4: command 0x0401 tx timeout [ 117.837666][ T6800] netlink: 'syz.0.234': attribute type 30 has an invalid length. [ 117.966746][ T6804] netlink: 'syz.4.235': attribute type 3 has an invalid length. [ 118.326548][ T6817] vlan2: entered promiscuous mode [ 118.337750][ T6817] bridge0: entered promiscuous mode [ 118.592628][ T6836] netlink: 'syz.3.243': attribute type 29 has an invalid length. [ 118.608634][ T6839] netlink: 'syz.3.243': attribute type 29 has an invalid length. [ 118.708993][ T6841] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 118.762225][ T6841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.786841][ T6842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.796608][ T6842] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 118.809292][ T6842] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 118.904817][ T6850] bridge0: entered promiscuous mode [ 118.912008][ T6850] batadv_slave_1: entered promiscuous mode [ 118.977678][ T6854] netlink: 'syz.3.248': attribute type 39 has an invalid length. [ 119.300000][ T6864] __nla_validate_parse: 10 callbacks suppressed [ 119.300021][ T6864] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.253'. [ 119.739295][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 119.897038][ T6909] netlink: 52 bytes leftover after parsing attributes in process `syz.4.261'. [ 120.151724][ T6916] netlink: 'syz.4.265': attribute type 4 has an invalid length. [ 120.287445][ T6918] netlink: 'syz.3.266': attribute type 12 has an invalid length. [ 120.523097][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 120.572864][ T6939] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 120.605136][ T6933] syzkaller0: entered promiscuous mode [ 120.610803][ T6933] syzkaller0: entered allmulticast mode [ 120.618680][ T6936] netem: incorrect gi model size [ 120.622525][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 120.628446][ T6936] netem: change failed [ 120.749680][ T6944] bond3: (slave bridge1): making interface the new active one [ 120.782677][ T6944] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 121.099561][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 121.259858][ T6967] tipc: Started in network mode [ 121.266472][ T6967] tipc: Node identity ac14140f, cluster identity 4711 [ 121.274297][ T6967] tipc: New replicast peer: 255.255.255.255 [ 121.305025][ T6967] tipc: Enabled bearer , priority 10 [ 121.362660][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 121.390822][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 121.504434][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 121.541289][ T6978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.285'. [ 121.857161][ T6998] dvmrp8: entered allmulticast mode [ 122.184916][ T7008] tipc: Enabled bearer , priority 0 [ 122.247952][ T7008] syzkaller0: entered promiscuous mode [ 122.256040][ T7008] syzkaller0: entered allmulticast mode [ 122.314759][ T7008] tipc: Resetting bearer [ 122.354864][ T7001] tipc: Resetting bearer [ 122.411748][ T5983] tipc: Node number set to 2886997007 [ 122.460237][ T7001] tipc: Disabling bearer [ 123.263692][ T7055] tipc: Enabled bearer , priority 0 [ 123.292159][ T7055] veth0_to_hsr: entered promiscuous mode [ 123.308868][ T7055] veth0_to_hsr: entered allmulticast mode [ 123.329509][ T7055] netlink: 'syz.2.305': attribute type 7 has an invalid length. [ 123.338745][ T5883] Bluetooth: hci3: command 0x0405 tx timeout [ 123.361394][ T7055] netlink: 'syz.2.305': attribute type 8 has an invalid length. [ 123.527014][ T7066] tipc: Resetting bearer [ 123.583317][ T7054] tipc: Disabling bearer [ 123.585262][ T7068] netlink: 'syz.0.310': attribute type 6 has an invalid length. [ 123.599909][ T7071] netlink: 'syz.3.309': attribute type 2 has an invalid length. [ 123.630032][ T7071] nbd: must specify a device to reconfigure [ 124.536933][ T7110] __nla_validate_parse: 12 callbacks suppressed [ 124.536955][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'. [ 124.785265][ T7120] net_ratelimit: 45 callbacks suppressed [ 124.785286][ T7120] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 124.822350][ T7122] netlink: 830 bytes leftover after parsing attributes in process `syz.2.329'. [ 124.862124][ T7120] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 124.867233][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 125.091926][ T7137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.362782][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 125.412232][ T5883] Bluetooth: hci3: command 0x0405 tx timeout [ 125.537575][ T7165] netlink: 'syz.3.337': attribute type 21 has an invalid length. [ 125.713977][ T7175] pim6reg1: entered promiscuous mode [ 125.727520][ T7175] pim6reg1: entered allmulticast mode [ 126.475693][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 128.339578][ T751] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.388964][ T751] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.410146][ T751] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.582627][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 128.631370][ T7255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.857369][ T7275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.373'. [ 128.866828][ T7269] netlink: 64 bytes leftover after parsing attributes in process `syz.4.373'. [ 128.926807][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 128.938731][ T7262] vxcan1: tx address claim with dlc 0 [ 129.166860][ T7288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 129.249307][ T7293] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 129.580331][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 129.629298][ T7305] netlink: 544 bytes leftover after parsing attributes in process `syz.3.385'. [ 129.630881][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 129.669449][ T7310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.386'. [ 129.811372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.841994][ T7321] nbd: couldn't find a device at index 0 [ 130.310091][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.384152][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 130.426026][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 130.532520][ T7358] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 130.750300][ T7358] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.970171][ T7378] tipc: Failed to obtain node identity [ 131.012587][ T7378] tipc: Enabling of bearer rejected, failed to enable media [ 131.267833][ T7382] vxcan1 speed is unknown, defaulting to 1000 [ 131.331099][ T7389] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.406'. [ 132.265991][ T7397] veth0_macvtap: left promiscuous mode [ 132.555872][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'. [ 132.729228][ T7417] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 132.797817][ T7418] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 132.981080][ T7421] netlink: 'syz.2.417': attribute type 29 has an invalid length. [ 133.018898][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.026319][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.037689][ T7421] netlink: 'syz.2.417': attribute type 29 has an invalid length. [ 133.048488][ T7421] netlink: 80 bytes leftover after parsing attributes in process `syz.2.417'. [ 133.922177][ T7446] netlink: 'syz.4.426': attribute type 24 has an invalid length. [ 134.686813][ T7488] __nla_validate_parse: 6 callbacks suppressed [ 134.686834][ T7488] netlink: 72 bytes leftover after parsing attributes in process `syz.3.440'. [ 134.832489][ T7490] netlink: 163944 bytes leftover after parsing attributes in process `syz.1.441'. [ 134.854198][ T7490] netlink: 'syz.1.441': attribute type 8 has an invalid length. [ 134.904882][ T7501] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.441'. [ 135.017542][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 135.031552][ T7508] netlink: 50 bytes leftover after parsing attributes in process `syz.4.446'. [ 135.060664][ T7508] netlink: 50 bytes leftover after parsing attributes in process `syz.4.446'. [ 135.408218][ T7530] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 135.444130][ T7531] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 135.508202][ T7530] gretap1: entered promiscuous mode [ 135.552761][ T7530] bond1: (slave gretap1): making interface the new active one [ 135.609027][ T7530] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 135.686988][ T7531] macvlan3: entered promiscuous mode [ 135.700035][ T7531] macvlan3: entered allmulticast mode [ 135.734934][ T7531] bond1: entered promiscuous mode [ 135.757885][ T7531] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 135.776634][ T7531] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 135.845136][ T7531] bond1: left promiscuous mode [ 135.989160][ T7549] openvswitch: netlink: Key type 29 is not supported [ 136.043852][ T7549] openvswitch: netlink: Key type 29 is not supported [ 136.337322][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 136.419378][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 136.483625][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 136.513823][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 137.000384][ T7597] netlink: 'syz.4.476': attribute type 21 has an invalid length. [ 137.145174][ T7606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.691831][ T7608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.748628][ T7614] vlan2: entered allmulticast mode [ 137.754944][ T7614] bond1: entered allmulticast mode [ 139.759261][ T7654] tipc: Enabled bearer , priority 0 [ 140.238917][ T7664] tipc: Disabling bearer [ 140.389729][ T7683] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 140.474063][ T7691] __nla_validate_parse: 33 callbacks suppressed [ 140.474083][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'. [ 140.476409][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'. [ 140.728292][ T7701] xt_HMARK: spi-set and port-set can't be combined [ 140.830187][ T7711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.505'. [ 141.002204][ T7721] netlink: 144 bytes leftover after parsing attributes in process `syz.2.509'. [ 141.347390][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'. [ 141.437958][ T7739] netlink: 'syz.4.513': attribute type 6 has an invalid length. [ 141.450258][ T7739] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.513'. [ 142.633047][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.514'. [ 142.673699][ T7752] batadv1: entered allmulticast mode [ 142.710178][ T7755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.517'. [ 142.821260][ T7753] tipc: Started in network mode [ 142.826189][ T7753] tipc: Node identity eab363712ec3, cluster identity 4711 [ 142.850353][ T7753] tipc: Enabled bearer , priority 0 [ 142.862603][ T7764] syzkaller0: entered promiscuous mode [ 142.868139][ T7764] syzkaller0: entered allmulticast mode [ 142.888465][ T7765] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 142.924068][ T7752] tipc: Resetting bearer [ 142.965122][ T7750] tipc: Resetting bearer [ 143.052054][ T7750] tipc: Disabling bearer [ 143.225266][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 144.028526][ T7832] vlan0: entered promiscuous mode [ 144.097504][ T7831] netlink: 84 bytes leftover after parsing attributes in process `syz.2.529'. [ 144.101439][ T7832] team0: Port device vlan0 added [ 144.893850][ T7871] pim6reg: entered allmulticast mode [ 144.934322][ T7871] pim6reg: left allmulticast mode [ 145.035691][ T7879] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 145.369952][ T7894] IPv6: sit1: Disabled Multicast RS [ 145.419526][ T7894] sit1: entered allmulticast mode [ 146.137188][ T7923] __nla_validate_parse: 11 callbacks suppressed [ 146.137207][ T7923] netlink: 68 bytes leftover after parsing attributes in process `syz.3.556'. [ 146.213557][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'. [ 146.304348][ T7936] netlink: 165 bytes leftover after parsing attributes in process `syz.0.558'. [ 146.324067][ T7935] netlink: 348 bytes leftover after parsing attributes in process `syz.2.559'. [ 146.389699][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'. [ 146.477418][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 146.481113][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 146.504631][ T7945] geneve2: entered promiscuous mode [ 146.520859][ T7945] geneve2: entered allmulticast mode [ 146.521966][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.561'. [ 146.694991][ T7804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.736656][ T5868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.749681][ T7804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.939454][ T7964] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 146.999600][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 147.408491][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 147.650943][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.658687][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.433553][ T8035] openvswitch: netlink: Unknown nsh attribute 0 [ 148.460920][ T8037] openvswitch: netlink: Unknown nsh attribute 0 [ 148.467239][ T8037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.520695][ T8035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.836997][ T8048] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 148.839602][ T8054] netlink: 'syz.1.597': attribute type 6 has an invalid length. [ 148.891082][ T8055] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 149.155813][ T8068] netlink: 'syz.1.601': attribute type 21 has an invalid length. [ 149.189121][ T8068] netlink: 'syz.1.601': attribute type 6 has an invalid length. [ 149.595817][ T10] IPVS: starting estimator thread 0... [ 149.711663][ T8086] IPVS: using max 23 ests per chain, 55200 per kthread [ 150.338858][ T8118] pimreg: entered allmulticast mode [ 150.545096][ T8133] sock: sock_set_timeout: `syz.1.618' (pid 8133) tries to set negative timeout [ 150.676863][ T8144] siw: device registration error -23 [ 150.770879][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.747742][ T8199] netlink: 'syz.4.637': attribute type 13 has an invalid length. [ 151.899702][ T8209] __nla_validate_parse: 15 callbacks suppressed [ 151.899722][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 152.054803][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 152.079545][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 152.472499][ T8233] netlink: 'syz.4.643': attribute type 2 has an invalid length. [ 152.530253][ T8233] netlink: 244 bytes leftover after parsing attributes in process `syz.4.643'. [ 152.816505][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 153.078211][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 153.230051][ T8268] bridge_slave_0: left allmulticast mode [ 153.267393][ T8268] bridge_slave_0: left promiscuous mode [ 153.276552][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.300009][ T8279] netlink: 44 bytes leftover after parsing attributes in process `syz.3.656'. [ 153.302923][ T8268] bridge_slave_1: left allmulticast mode [ 153.328511][ T8268] bridge_slave_1: left promiscuous mode [ 153.334911][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.358843][ T8268] bond0: (slave bond_slave_0): Releasing backup interface [ 153.407205][ T8268] bond0: (slave bond_slave_1): Releasing backup interface [ 153.429954][ T8268] team0: Port device team_slave_0 removed [ 153.445666][ T8268] team0: Port device team_slave_1 removed [ 153.456898][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.464648][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.478784][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.486712][ T8289] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 153.494840][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.506058][ T8289] netlink: 'syz.4.660': attribute type 4 has an invalid length. [ 153.514791][ T8289] netlink: 188 bytes leftover after parsing attributes in process `syz.4.660'. [ 153.524228][ T8289] NCSI netlink: No device for ifindex 458760 [ 153.570960][ T5868] vxcan1 speed is unknown, defaulting to 1000 [ 153.602674][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.674185][ T8293] netlink: 'syz.0.662': attribute type 10 has an invalid length. [ 153.718255][ T8293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.662'. [ 153.760907][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.963180][ T8304] netlink: 108 bytes leftover after parsing attributes in process `syz.2.663'. [ 154.196407][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.204326][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.665847][ T8290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.701253][ T8290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.090012][ T8293] batman_adv: batadv0: Adding interface: virt_wifi0 [ 155.114141][ T8293] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.157713][ T8293] batman_adv: batadv0: Interface activated: virt_wifi0 [ 155.178779][ T8299] netlink: 'syz.2.663': attribute type 3 has an invalid length. [ 155.263771][ T3966] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.286890][ T8345] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 155.305158][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.348761][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.368398][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.531874][ T8351] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 155.539604][ T8351] netlink: 'syz.2.672': attribute type 2 has an invalid length. [ 156.573072][ T8405] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 156.593600][ T8400] syzkaller0: entered promiscuous mode [ 156.607993][ T8400] syzkaller0: entered allmulticast mode [ 156.773227][ T8411] IPVS: ip_vs_edit_dest(): server weight less than zero [ 156.797532][ T8327] IPVS: starting estimator thread 0... [ 156.900696][ T8417] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.031873][ T8427] __nla_validate_parse: 17 callbacks suppressed [ 157.031894][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 157.311805][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.701'. [ 157.370817][ T8441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.701'. [ 157.465996][ T8446] netlink: 112 bytes leftover after parsing attributes in process `syz.0.703'. [ 157.504293][ T8441] gretap1: entered promiscuous mode [ 157.509558][ T8441] gretap1: entered allmulticast mode [ 157.516131][ T8448] validate_nla: 1 callbacks suppressed [ 157.516149][ T8448] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 157.530757][ T8448] netlink: 224 bytes leftover after parsing attributes in process `syz.4.704'. [ 157.801301][ T8458] team0: Device vti0 is of different type [ 158.202042][ T8481] syz.0.714 uses old SIOCAX25GETINFO [ 158.532055][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'. [ 158.572295][ T8501] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 158.611123][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.709743][ T8509] sctp: [Deprecated]: syz.2.720 (pid 8509) Use of int in maxseg socket option. [ 158.709743][ T8509] Use struct sctp_assoc_value instead [ 158.822561][ T8507] netlink: 'syz.0.718': attribute type 2 has an invalid length. [ 159.095320][ T12] wlan0: Trigger new scan to find an IBSS to join [ 159.379448][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.726'. [ 159.878613][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 160.192948][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 160.206685][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 160.218572][ T8555] tipc: Enabling of bearer rejected, failed to enable media [ 160.230928][ T8555] tipc: Enabling of bearer rejected, failed to enable media [ 160.260931][ T8560] netlink: 'syz.3.738': attribute type 21 has an invalid length. [ 160.603475][ T8574] netlink: 'syz.1.741': attribute type 13 has an invalid length. [ 161.006522][ T3966] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 161.100007][ T8596] IPv6: sit1: Disabled Multicast RS [ 161.123026][ T8596] sit1: entered allmulticast mode [ 162.238505][ T8643] __nla_validate_parse: 7 callbacks suppressed [ 162.238524][ T8643] netlink: 52 bytes leftover after parsing attributes in process `syz.1.759'. [ 162.344531][ T8648] netlink: 48 bytes leftover after parsing attributes in process `syz.2.762'. [ 162.627617][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 163.724463][ T8691] vxcan1 speed is unknown, defaulting to 1000 [ 164.051358][ T12] wlan0: Trigger new scan to find an IBSS to join [ 164.211263][ T5184] Bluetooth: hci3: command 0x0405 tx timeout [ 164.279847][ T8709] tipc: Enabled bearer , priority 0 [ 164.307141][ T8709] syzkaller0: entered promiscuous mode [ 164.339964][ T8709] syzkaller0: entered allmulticast mode [ 164.542326][ T8713] tipc: Resetting bearer [ 164.858334][ T8730] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.791'. [ 164.915822][ T8732] netlink: 'syz.2.792': attribute type 29 has an invalid length. [ 164.975284][ T8732] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 165.290775][ T12] wlan0: Creating new IBSS network, BSSID 56:66:d9:14:f1:74 [ 165.328099][ T8708] tipc: Resetting bearer [ 165.421517][ T8708] tipc: Disabling bearer [ 165.440251][ T8750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.795'. [ 165.949415][ T8763] netlink: 68 bytes leftover after parsing attributes in process `syz.0.802'. [ 166.019634][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.801'. [ 166.265455][ T8771] tipc: Enabled bearer , priority 0 [ 166.309471][ T8776] ªªªªª: renamed from geneve0 (while UP) [ 166.352842][ T8771] tipc: Disabling bearer [ 166.732259][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.4.809'. [ 166.765305][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.4.809'. [ 166.817637][ T8793] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 166.931199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.035770][ T8804] tipc: Enabled bearer , priority 0 [ 167.067011][ T8798] syzkaller0: entered promiscuous mode [ 167.086508][ T8798] syzkaller0: entered allmulticast mode [ 167.165670][ T8798] tipc: Resetting bearer [ 167.295159][ T8797] tipc: Resetting bearer [ 167.325958][ T8797] tipc: Disabling bearer [ 167.462223][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 167.481750][ T8824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.751823][ T8832] netlink: 'syz.4.821': attribute type 21 has an invalid length. [ 167.788791][ T8832] netlink: 152 bytes leftover after parsing attributes in process `syz.4.821'. [ 167.825241][ T8841] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 (while UP) [ 168.221557][ T8854] tipc: Started in network mode [ 168.230167][ T8854] tipc: Node identity caa4ef4aa37d, cluster identity 4711 [ 168.237716][ T8854] tipc: Enabled bearer , priority 0 [ 168.257886][ T8854] syzkaller0: entered promiscuous mode [ 168.264888][ T8857] netlink: 304 bytes leftover after parsing attributes in process `syz.3.828'. [ 168.268709][ T8854] syzkaller0: entered allmulticast mode [ 168.308918][ T8854] tipc: Resetting bearer [ 168.324715][ T8853] tipc: Resetting bearer [ 168.346035][ T8853] tipc: Disabling bearer [ 168.517624][ T8869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.831'. [ 168.521377][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.832'. [ 168.527319][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.831'. [ 168.545153][ T8869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.831'. [ 168.555872][ T8869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.831'. [ 169.248741][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.836'. [ 169.308401][ T8886] team_slave_0: mtu greater than device maximum [ 169.327232][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 169.510169][ T8898] pim6reg527: entered allmulticast mode [ 171.003176][ T8964] netlink: 'syz.0.858': attribute type 12 has an invalid length. [ 171.325101][ T8986] netlink: 'syz.2.864': attribute type 3 has an invalid length. [ 171.356682][ T8989] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 171.377095][ T8986] netlink: 'syz.2.864': attribute type 2 has an invalid length. [ 171.602317][ T8989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.771843][ T8989] vlan2: entered allmulticast mode [ 171.805862][ T8989] veth1: entered allmulticast mode [ 172.402227][ T9041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.759782][ T9059] __nla_validate_parse: 9 callbacks suppressed [ 172.759803][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 172.952315][ T9058] netlink: 152 bytes leftover after parsing attributes in process `syz.3.885'. [ 172.999885][ T9058] nbd: couldn't find a device at index 0 [ 173.165487][ T9076] bridge3: entered promiscuous mode [ 173.174869][ T9076] bridge3: entered allmulticast mode [ 173.201985][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 173.244437][ T9070] vxcan1 speed is unknown, defaulting to 1000 [ 173.252291][ T9082] IPv6: NLM_F_REPLACE set, but no existing node found! [ 173.330887][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.366207][ T9088] tipc: Can't bind to reserved service type 0 [ 173.392233][ T9088] netlink: 9 bytes leftover after parsing attributes in process `syz.1.894'. [ 173.403626][ T9082] netlink: 576 bytes leftover after parsing attributes in process `syz.0.893'. [ 173.430049][ T9088] gretap0: entered promiscuous mode [ 173.628069][ T9093] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 173.652184][ T9093] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 173.776127][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 173.983229][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 174.106040][ T9108] openvswitch: netlink: Message has 4 unknown bytes. [ 174.140249][ T9109] openvswitch: netlink: Message has 4 unknown bytes. [ 174.172834][ T9109] netlink: 'syz.0.899': attribute type 5 has an invalid length. [ 174.174703][ T9108] netlink: 'syz.0.899': attribute type 5 has an invalid length. [ 174.184002][ T9111] netlink: 244 bytes leftover after parsing attributes in process `syz.2.900'. [ 174.488881][ T9125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.904'. [ 174.663250][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 174.760046][ T9137] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 174.853523][ T9140] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 175.271162][ T9159] netlink: 'syz.2.915': attribute type 11 has an invalid length. [ 175.447656][ T9171] netlink: 'syz.3.920': attribute type 11 has an invalid length. [ 175.506423][ T9171] netlink: 'syz.3.920': attribute type 11 has an invalid length. [ 176.288626][ T9208] tipc: Enabled bearer , priority 12 [ 176.569969][ T9215] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 177.038878][ T9235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.264231][ T9257] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.294737][ T9252] netlink: 'syz.0.940': attribute type 11 has an invalid length. [ 177.781491][ T9282] sctp: [Deprecated]: syz.3.950 (pid 9282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.781491][ T9282] Use struct sctp_sack_info instead [ 177.804627][ T9282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.829237][ T9286] __nla_validate_parse: 10 callbacks suppressed [ 177.829257][ T9286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.951'. [ 177.964256][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.0.954'. [ 178.071257][ T9295] netlink: 'syz.0.954': attribute type 21 has an invalid length. [ 178.080920][ T9298] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 178.106828][ T9295] netlink: 'syz.0.954': attribute type 6 has an invalid length. [ 178.136281][ T9295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.954'. [ 178.394617][ T9317] delete_channel: no stack [ 178.557979][ T9329] netlink: 'syz.4.962': attribute type 11 has an invalid length. [ 178.587730][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 178.668174][ T9338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.964'. [ 178.911294][ T9346] openvswitch: netlink: IPv4 tun info is not correct [ 178.954097][ T9344] nbd1: detected capacity change from 0 to 63 [ 179.033170][ T5184] block nbd1: Receive control failed (result -104) [ 179.208359][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 179.582721][ T9375] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.980'. [ 179.716880][ T9379] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.982'. [ 183.092194][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 183.122515][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 183.141784][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 183.532694][ T9420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.550317][ T9420] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.578919][ T9420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.596323][ T9415] vxcan1 speed is unknown, defaulting to 1000 [ 183.699885][ T9422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.964914][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 183.992289][ T9451] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 184.446972][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 184.558555][ T9476] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 184.568120][ T9476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1009'. [ 184.678991][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 184.936199][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1014'. [ 185.116884][ T9495] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1016'. [ 185.614710][ T9518] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1020'. [ 185.921326][ T9526] tap0: tun_chr_ioctl cmd 2148553947 [ 186.248895][ T9539] syzkaller1: entered promiscuous mode [ 186.262847][ T9539] syzkaller1: entered allmulticast mode [ 186.284656][ T9556] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 186.371519][ T9559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 187.116223][ T9593] netlink: 'syz.4.1040': attribute type 1 has an invalid length. [ 187.137101][ T9595] netlink: 'syz.0.1041': attribute type 4 has an invalid length. [ 187.222871][ T9595] tipc: Enabled bearer , priority 0 [ 187.239539][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.257341][ T9595] syzkaller0: entered promiscuous mode [ 187.263564][ T9595] syzkaller0: entered allmulticast mode [ 187.287940][ T9595] tipc: Resetting bearer [ 187.351662][ T9594] tipc: Resetting bearer [ 187.413479][ T9594] tipc: Disabling bearer [ 187.669508][ T9618] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 188.178953][ T9649] vxcan1 speed is unknown, defaulting to 1000 [ 188.219019][ T9652] __nla_validate_parse: 9 callbacks suppressed [ 188.219039][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 188.250530][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 188.260082][ T9652] netlink: 'syz.2.1059': attribute type 3 has an invalid length. [ 188.467865][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 188.482260][ T9663] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1062'. [ 189.066149][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 189.539077][ T9713] IPv6: NLM_F_REPLACE set, but no existing node found! [ 190.093230][ T9719] delete_channel: no stack [ 190.368628][ T9735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1083'. [ 190.752245][ T9739] netlink: 'syz.3.1082': attribute type 29 has an invalid length. [ 190.791037][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 193.634210][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 193.647137][ T9757] dvmrp1: entered allmulticast mode [ 193.703883][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 193.708629][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 193.742202][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 193.820756][ T9771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1090'. [ 194.160472][ T9791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1097'. [ 194.171267][ T9791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.435778][ T9807] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 194.625469][ T9815] netlink: 'syz.0.1105': attribute type 10 has an invalid length. [ 194.648043][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1105'. [ 194.657910][ T9815] dummy0: entered promiscuous mode [ 194.678135][ T9815] bridge0: port 3(dummy0) entered blocking state [ 194.691846][ T9815] bridge0: port 3(dummy0) entered disabled state [ 194.698602][ T9815] dummy0: entered allmulticast mode [ 194.715956][ T9815] bridge0: port 3(dummy0) entered blocking state [ 194.722789][ T9815] bridge0: port 3(dummy0) entered forwarding state [ 195.148828][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 195.160807][ T9835] netlink: 'syz.0.1112': attribute type 3 has an invalid length. [ 195.209979][ T9835] IPv6: sit1: Disabled Multicast RS [ 195.280487][ T9844] tunl0: entered promiscuous mode [ 195.306229][ T9844] netlink: 'syz.3.1115': attribute type 3 has an invalid length. [ 195.341086][ T9844] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1115'. [ 195.422724][ T9846] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1117'. [ 195.939606][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.956312][ T9882] bridge_slave_0: left allmulticast mode [ 195.996478][ T9882] bridge_slave_0: left promiscuous mode [ 196.006482][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.093833][ T9891] netlink: 'syz.3.1131': attribute type 5 has an invalid length. [ 196.422028][ T9902] netlink: 'syz.2.1135': attribute type 15 has an invalid length. [ 196.467580][ T9902] netlink: 'syz.2.1135': attribute type 15 has an invalid length. [ 196.476348][ T6902] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 196.496011][ T6902] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 196.514302][ T6902] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 196.899181][ T9923] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 197.202802][ T9946] netlink: 'syz.2.1149': attribute type 10 has an invalid length. [ 197.262376][ T9949] netlink: 'syz.2.1149': attribute type 10 has an invalid length. [ 197.279129][ T9946] team0: Port device dummy0 added [ 197.309036][ T9949] team0: Port device dummy0 removed [ 197.377307][ T9946] bridge0: port 1(vlan3) entered blocking state [ 197.385536][ T9946] bridge0: port 1(vlan3) entered disabled state [ 197.400471][ T9946] vlan3: entered allmulticast mode [ 197.406302][ T9946] bridge0: entered allmulticast mode [ 197.415461][ T9946] vlan3: left allmulticast mode [ 197.425618][ T9946] bridge0: left allmulticast mode [ 197.440038][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.463204][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.476010][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.499197][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.645552][T10011] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 199.064936][T10038] tipc: Enabled bearer , priority 0 [ 199.171532][ T5883] Bluetooth: hci3: command 0x0405 tx timeout [ 199.185794][T10042] syzkaller0: entered promiscuous mode [ 199.235886][T10042] syzkaller0: entered allmulticast mode [ 199.284959][T10029] tipc: Resetting bearer [ 199.435055][T10029] tipc: Disabling bearer [ 199.942037][T10080] __nla_validate_parse: 22 callbacks suppressed [ 199.942061][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 200.030882][T10080] tc_dump_action: action bad kind [ 200.119016][T10087] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 200.175419][T10090] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 200.428898][T10101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1190'. [ 200.439681][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 200.960427][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 200.989520][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 201.005260][T10135] netlink: 'syz.3.1199': attribute type 39 has an invalid length. [ 201.079914][T10134] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 201.113070][T10137] netlink: 'syz.4.1198': attribute type 1 has an invalid length. [ 201.208735][T10132] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 201.285282][T10149] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1203'. [ 201.343973][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1204'. [ 201.389440][T10152] tipc: Enabling of bearer rejected, failed to enable media [ 202.045882][T10182] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1214'. [ 202.094819][T10187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1216'. [ 202.268219][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'. [ 202.865563][T10218] netlink: 'syz.4.1226': attribute type 19 has an invalid length. [ 202.928678][T10222] netlink: 'syz.1.1227': attribute type 32 has an invalid length. [ 202.979697][T10222] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 203.109570][T10226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.127454][T10226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.163666][T10226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.192214][T10226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.215963][T10231] netlink: 'syz.0.1231': attribute type 7 has an invalid length. [ 203.353843][T10231] : entered promiscuous mode [ 203.410790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.586311][T10244] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 204.251718][T10272] tipc: Enabled bearer , priority 0 [ 204.295132][T10272] syzkaller0: entered promiscuous mode [ 204.333299][T10272] syzkaller0: entered allmulticast mode [ 204.345831][T10273] tipc: Resetting bearer [ 204.446059][T10278] syz_tun: entered allmulticast mode [ 204.519740][T10278] dvmrp8: entered allmulticast mode [ 204.555972][T10271] tipc: Resetting bearer [ 204.610493][T10271] tipc: Disabling bearer [ 204.670522][T10276] syz_tun: left allmulticast mode [ 204.755087][T10292] netlink: 'syz.3.1248': attribute type 10 has an invalid length. [ 205.115216][T10309] __nla_validate_parse: 13 callbacks suppressed [ 205.115237][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 205.226396][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 205.492628][T10315] batadv_slave_1 (unregistering): left promiscuous mode [ 205.535720][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 205.603502][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 205.883651][T10344] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 205.956548][T10344] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 205.986672][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 206.003388][T10353] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 206.035781][T10353] veth0_vlan: entered allmulticast mode [ 206.072948][T10353] tipc: Resetting bearer [ 206.160282][T10353] team0: Device veth0_vlan is already a lower device of the team interface [ 206.229595][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 206.508136][T10372] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1278'. [ 206.949325][T10392] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 206.983119][T10392] tc_dump_action: action bad kind [ 207.568036][T10412] syzkaller0: entered promiscuous mode [ 207.578408][T10412] syzkaller0: entered allmulticast mode [ 207.656597][T10427] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1291'. [ 207.672772][T10427] nbd: couldn't find a device at index 0 [ 207.838723][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 208.499247][T10471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1303'. [ 208.624508][T10464] svc: failed to register nfsdv3 RPC service (errno 111). [ 208.645062][T10464] svc: failed to register nfsaclv3 RPC service (errno 111). [ 208.765275][T10481] tipc: Enabled bearer , priority 0 [ 208.783145][T10481] syzkaller0: entered promiscuous mode [ 208.789046][T10481] syzkaller0: entered allmulticast mode [ 208.864945][T10481] tipc: Resetting bearer [ 208.901415][T10481] netlink: 'syz.3.1306': attribute type 2 has an invalid length. [ 208.952315][T10479] tipc: Resetting bearer [ 209.030492][T10479] tipc: Disabling bearer [ 209.080321][T10489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.154597][T10493] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 209.172906][ T11] block nbd1: Possible stuck request ffff88802568e000: control (read@0,1024B). Runtime 30 seconds [ 209.185402][ T11] block nbd1: Possible stuck request ffff88802568e1c0: control (read@1024,1024B). Runtime 30 seconds [ 209.196448][ T11] block nbd1: Possible stuck request ffff88802568e380: control (read@2048,1024B). Runtime 30 seconds [ 209.207957][ T11] block nbd1: Possible stuck request ffff88802568e540: control (read@3072,1024B). Runtime 30 seconds [ 210.611073][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 211.892791][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 211.897912][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 211.898860][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 211.904932][ T5881] Bluetooth: hci2: command 0x0401 tx timeout [ 214.586189][ C0] ================================================================== [ 214.594294][ C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 214.602364][ C0] Write of size 8 at addr ffff8880580b88b0 by task swapper/0/0 [ 214.609897][ C0] [ 214.612212][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 214.612226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.612233][ C0] Call Trace: [ 214.612244][ C0] [ 214.612251][ C0] dump_stack_lvl+0x189/0x250 [ 214.612266][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 214.612279][ C0] ? rcu_is_watching+0x15/0xb0 [ 214.612289][ C0] ? __kasan_check_byte+0x12/0x40 [ 214.612304][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.612315][ C0] ? rcu_is_watching+0x15/0xb0 [ 214.612325][ C0] ? lock_release+0x4b/0x3e0 [ 214.612340][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 214.612352][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 214.612365][ C0] print_report+0xca/0x240 [ 214.612375][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 214.612384][ C0] kasan_report+0x118/0x150 [ 214.612398][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 214.612410][ C0] __xfrm_state_delete+0x696/0xca0 [ 214.612423][ C0] xfrm_timer_handler+0x18f/0xa00 [ 214.612434][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 214.612443][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 214.612458][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.612473][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.612487][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.612504][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 214.612513][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 214.612522][ C0] __hrtimer_run_queues+0x529/0xc60 [ 214.612538][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 214.612547][ C0] ? read_tsc+0x9/0x20 [ 214.612562][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 214.612574][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 214.612586][ C0] handle_softirqs+0x283/0x870 [ 214.612597][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 214.612608][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 214.612619][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 214.612632][ C0] __irq_exit_rcu+0xca/0x1f0 [ 214.612642][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 214.612653][ C0] irq_exit_rcu+0x9/0x30 [ 214.612662][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 214.612677][ C0] [ 214.612680][ C0] [ 214.612685][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 214.612696][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 214.612711][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 214.612720][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 214.612731][ C0] RAX: 4a8e602a0351e000 RBX: ffffffff819683f8 RCX: 4a8e602a0351e000 [ 214.612739][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b8d2c RDI: ffffffff8be33880 [ 214.612746][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 214.612754][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39830 [ 214.612761][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 214.612769][ C0] ? do_idle+0x1e8/0x510 [ 214.612781][ C0] default_idle+0x13/0x20 [ 214.612791][ C0] default_idle_call+0x74/0xb0 [ 214.612801][ C0] do_idle+0x1e8/0x510 [ 214.612812][ C0] ? __pfx_do_idle+0x10/0x10 [ 214.612820][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 214.612835][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.612847][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.612863][ C0] cpu_startup_entry+0x44/0x60 [ 214.612872][ C0] rest_init+0x2de/0x300 [ 214.612883][ C0] start_kernel+0x3a9/0x410 [ 214.612899][ C0] x86_64_start_reservations+0x24/0x30 [ 214.612911][ C0] x86_64_start_kernel+0x143/0x1c0 [ 214.612922][ C0] common_startup_64+0x13e/0x147 [ 214.612940][ C0] [ 214.612943][ C0] [ 214.978573][ C0] Allocated by task 8557: [ 214.982891][ C0] kasan_save_track+0x3e/0x80 [ 214.987559][ C0] __kasan_slab_alloc+0x6c/0x80 [ 214.992401][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 214.997856][ C0] xfrm_state_alloc+0x24/0x2f0 [ 215.002612][ C0] __find_acq_core+0x8a7/0x1c00 [ 215.007451][ C0] xfrm_find_acq+0x78/0xa0 [ 215.011880][ C0] xfrm_alloc_userspi+0x6b3/0xc90 [ 215.016911][ C0] xfrm_user_rcv_msg+0x7a0/0xab0 [ 215.021839][ C0] netlink_rcv_skb+0x208/0x470 [ 215.026598][ C0] xfrm_netlink_rcv+0x79/0x90 [ 215.031263][ C0] netlink_unicast+0x82c/0x9e0 [ 215.036013][ C0] netlink_sendmsg+0x805/0xb30 [ 215.040767][ C0] __sock_sendmsg+0x219/0x270 [ 215.045455][ C0] ____sys_sendmsg+0x505/0x830 [ 215.050212][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 215.054879][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 215.059816][ C0] do_syscall_64+0xfa/0x3b0 [ 215.064306][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.070186][ C0] [ 215.072503][ C0] Freed by task 5957: [ 215.076469][ C0] kasan_save_track+0x3e/0x80 [ 215.081133][ C0] kasan_save_free_info+0x46/0x50 [ 215.086160][ C0] __kasan_slab_free+0x5b/0x80 [ 215.090910][ C0] kmem_cache_free+0x18f/0x400 [ 215.095666][ C0] xfrm_state_gc_task+0x52d/0x6b0 [ 215.100677][ C0] process_scheduled_works+0xae1/0x17b0 [ 215.106216][ C0] worker_thread+0x8a0/0xda0 [ 215.110793][ C0] kthread+0x70e/0x8a0 [ 215.114855][ C0] ret_from_fork+0x3fc/0x770 [ 215.119431][ C0] ret_from_fork_asm+0x1a/0x30 [ 215.124181][ C0] [ 215.126544][ C0] The buggy address belongs to the object at ffff8880580b8880 [ 215.126544][ C0] which belongs to the cache xfrm_state of size 928 [ 215.140495][ C0] The buggy address is located 48 bytes inside of [ 215.140495][ C0] freed 928-byte region [ffff8880580b8880, ffff8880580b8c20) [ 215.154194][ C0] [ 215.156510][ C0] The buggy address belongs to the physical page: [ 215.162902][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880580b8880 pfn:0x580b8 [ 215.172948][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.181431][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 215.188959][ C0] page_type: f5(slab) [ 215.192929][ C0] raw: 00fff00000000040 ffff8881426bec80 dead000000000122 0000000000000000 [ 215.201502][ C0] raw: ffff8880580b8880 00000000800f000b 00000000f5000000 0000000000000000 [ 215.210153][ C0] head: 00fff00000000040 ffff8881426bec80 dead000000000122 0000000000000000 [ 215.218805][ C0] head: ffff8880580b8880 00000000800f000b 00000000f5000000 0000000000000000 [ 215.227461][ C0] head: 00fff00000000002 ffffea0001602e01 00000000ffffffff 00000000ffffffff [ 215.236114][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 215.244766][ C0] page dumped because: kasan: bad access detected [ 215.251163][ C0] page_owner tracks the page as allocated [ 215.256862][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6645, tgid 6641 (syz.4.187), ts 112699409356, free_ts 112296889945 [ 215.276033][ C0] post_alloc_hook+0x240/0x2a0 [ 215.280795][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 215.286322][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 215.292112][ C0] alloc_pages_mpol+0x232/0x4a0 [ 215.296952][ C0] allocate_slab+0x8a/0x370 [ 215.301439][ C0] ___slab_alloc+0xbeb/0x1420 [ 215.306111][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 215.311556][ C0] xfrm_state_alloc+0x24/0x2f0 [ 215.316304][ C0] xfrm_add_acquire+0xf7/0xb20 [ 215.321060][ C0] xfrm_user_rcv_msg+0x7a0/0xab0 [ 215.325996][ C0] netlink_rcv_skb+0x208/0x470 [ 215.330790][ C0] xfrm_netlink_rcv+0x79/0x90 [ 215.335461][ C0] netlink_unicast+0x82c/0x9e0 [ 215.340216][ C0] netlink_sendmsg+0x805/0xb30 [ 215.344966][ C0] __sock_sendmsg+0x219/0x270 [ 215.349635][ C0] ____sys_sendmsg+0x505/0x830 [ 215.354388][ C0] page last free pid 6620 tgid 6618 stack trace: [ 215.360701][ C0] __free_frozen_pages+0xbc4/0xd30 [ 215.365807][ C0] stack_depot_save_flags+0x436/0x860 [ 215.371167][ C0] kasan_save_track+0x4f/0x80 [ 215.375837][ C0] __kasan_kmalloc+0x93/0xb0 [ 215.380413][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 215.385256][ C0] fib6_info_alloc+0x30/0xf0 [ 215.389831][ C0] ip6_route_info_create+0x142/0x860 [ 215.395104][ C0] ip6_route_add+0x49/0x1b0 [ 215.399594][ C0] addrconf_add_dev+0x24f/0x340 [ 215.404431][ C0] addrconf_init_auto_addrs+0x57c/0xa30 [ 215.409978][ C0] addrconf_notify+0xacc/0x1010 [ 215.414824][ C0] notifier_call_chain+0x1b3/0x3e0 [ 215.419922][ C0] __dev_notify_flags+0x18d/0x2e0 [ 215.424946][ C0] netif_change_flags+0xe8/0x1a0 [ 215.429869][ C0] dev_change_flags+0x130/0x260 [ 215.434700][ C0] dev_ioctl+0x7b4/0x1150 [ 215.439034][ C0] [ 215.441348][ C0] Memory state around the buggy address: [ 215.446971][ C0] ffff8880580b8780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 215.455016][ C0] ffff8880580b8800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 215.463073][ C0] >ffff8880580b8880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.471126][ C0] ^ [ 215.476832][ C0] ffff8880580b8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.484882][ C0] ffff8880580b8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.493456][ C0] ================================================================== [ 215.501684][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.508900][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 215.517866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.527941][ C0] Call Trace: [ 215.531227][ C0] [ 215.534065][ C0] dump_stack_lvl+0x99/0x250 [ 215.538652][ C0] ? __asan_memcpy+0x40/0x70 [ 215.543235][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.548526][ C0] ? __pfx__printk+0x10/0x10 [ 215.553128][ C0] vpanic+0x281/0x750 [ 215.557102][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.562304][ C0] ? __pfx_vpanic+0x10/0x10 [ 215.566822][ C0] ? asm_common_interrupt+0x26/0x40 [ 215.572014][ C0] panic+0xb9/0xc0 [ 215.575732][ C0] ? __pfx_panic+0x10/0x10 [ 215.580134][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 215.586019][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.592349][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 215.597643][ C0] check_panic_on_warn+0x89/0xb0 [ 215.602585][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 215.607865][ C0] end_report+0x78/0x160 [ 215.612110][ C0] kasan_report+0x129/0x150 [ 215.616636][ C0] ? __xfrm_state_delete+0x696/0xca0 [ 215.621916][ C0] __xfrm_state_delete+0x696/0xca0 [ 215.627033][ C0] xfrm_timer_handler+0x18f/0xa00 [ 215.632048][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 215.637595][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 215.643482][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.648674][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 215.654558][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.660884][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 215.666437][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 215.671974][ C0] __hrtimer_run_queues+0x529/0xc60 [ 215.677168][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.682870][ C0] ? read_tsc+0x9/0x20 [ 215.686954][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 215.692750][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 215.697849][ C0] handle_softirqs+0x283/0x870 [ 215.702602][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 215.707353][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.712640][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 215.717852][ C0] __irq_exit_rcu+0xca/0x1f0 [ 215.722430][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.727625][ C0] irq_exit_rcu+0x9/0x30 [ 215.731850][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.737482][ C0] [ 215.740399][ C0] [ 215.743321][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.749288][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 215.754999][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 215.774597][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 215.780679][ C0] RAX: 4a8e602a0351e000 RBX: ffffffff819683f8 RCX: 4a8e602a0351e000 [ 215.788637][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b8d2c RDI: ffffffff8be33880 [ 215.796597][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 215.804567][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39830 [ 215.812533][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 215.820514][ C0] ? do_idle+0x1e8/0x510 [ 215.824777][ C0] default_idle+0x13/0x20 [ 215.829094][ C0] default_idle_call+0x74/0xb0 [ 215.833844][ C0] do_idle+0x1e8/0x510 [ 215.837899][ C0] ? __pfx_do_idle+0x10/0x10 [ 215.842546][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 215.848431][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 215.854331][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.860659][ C0] cpu_startup_entry+0x44/0x60 [ 215.865519][ C0] rest_init+0x2de/0x300 [ 215.869754][ C0] start_kernel+0x3a9/0x410 [ 215.874251][ C0] x86_64_start_reservations+0x24/0x30 [ 215.879697][ C0] x86_64_start_kernel+0x143/0x1c0 [ 215.884794][ C0] common_startup_64+0x13e/0x147 [ 215.889741][ C0] [ 215.893004][ C0] Kernel Offset: disabled [ 215.897341][ C0] Rebooting in 86400 seconds..