last executing test programs: 15.989049778s ago: executing program 2 (id=9374): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x2719, 0xffffffffffffffff, &(0x7f0000000000)) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 15.258877986s ago: executing program 2 (id=9380): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) close(0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x1, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}}], 0x2, 0x60, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4b7e00000000000000002a00000006000400a3aa000005003600000000000c0005000203aaaaaaaaaaaa080002000d"], 0x38}, 0x4, 0x700000000000000}, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r11 = accept$phonet_pipe(r8, &(0x7f0000000000), &(0x7f0000000100)=0x10) connect$phonet_pipe(r11, &(0x7f0000000180)={0x23, 0x1, 0x7f, 0x1b}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x160}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xc0dc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xe647}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x24000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000240)={r12, 0x1, 0x4, 'g+#2'}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) 14.968060652s ago: executing program 2 (id=9384): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x7) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0x7) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 13.24742251s ago: executing program 2 (id=9394): socket$kcm(0xa, 0x1, 0x106) (async) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) (async) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x20000000) shutdown(r3, 0x1) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xfa38}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r4}, 0x10) (async) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r4}, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000100)={0xf, "31e4c5f096284a8dee567f87608a7680fe94c56f77fa5f930f39e15c53793a22170c2206d09f91c21170a71f478d8332f4516f741ba08a09a59f5c50b12447ab2aca24f0639e29bc613fda53dfe43f1ad169e7e8b46a8a1814d26f1c2e6416b711b0d16c2f36136967a682df0551b2d49c5ab5401907ffb830ef9ad4ca5c6653"}) (async) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000100)={0xf, "31e4c5f096284a8dee567f87608a7680fe94c56f77fa5f930f39e15c53793a22170c2206d09f91c21170a71f478d8332f4516f741ba08a09a59f5c50b12447ab2aca24f0639e29bc613fda53dfe43f1ad169e7e8b46a8a1814d26f1c2e6416b711b0d16c2f36136967a682df0551b2d49c5ab5401907ffb830ef9ad4ca5c6653"}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0xf, 0xa}, {0x3, 0xfff3}}}, 0x24}}, 0x80) 13.025486457s ago: executing program 2 (id=9395): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) listen(r1, 0xd) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0xc88c4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20000000) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x6d1}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}}], 0x2, 0x20004801) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r6, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000fc0)=""/127, 0x7f}, {&(0x7f0000001040)=""/105, 0x69}], 0x2}, 0x324}], 0x1, 0x40002022, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000100003040000400000dcdf2500007400", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, 0x0, r7, &(0x7f0000000300)=0xfa5, 0x6, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 12.035835168s ago: executing program 2 (id=9399): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) (fail_nth: 7) 5.907796308s ago: executing program 0 (id=9428): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x17d4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x2, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x40008, 0x4, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, {0x4, 0xfffffffffffffffd, 0x40000000007fff}, 0x4, 0x0, 0x2, 0x0, 0x2}, {{@in6=@dev, 0x1, 0x30}, 0x0, @in6=@private0, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe, 0x100}}, 0xab) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendto$packet(r3, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'sit0\x00'}) r6 = socket(0x2a, 0x803, 0x6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1c, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4b389763a300318e49eb6c6c49b375d669dbb8f0a00f2ebcceae479bf6b7288b", "81ac27256f9798d0f8db5a4d471e635f2e6cb641a25e0071ccf7e2581979802a2042a6a2af47f87c73ad02a024944d77", "2c2ef32ae4092c85b928d2b017c5fb9173aa2ae3bf0614109ed5bff3", {"aa0ff8715f38c5a518371fab9326e096", "e9fe6cc21e5d837a2333c1253fff238d"}}}}}}}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xffffff41) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x64, 0x5}]}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f00000005c0)="afc356bf9b09ff372dada82178d12dd14c1ac86260912511083eff5eb15dbc742feb6d168c4e1469275b63d26b7275c1e17da52aa7074b02fba314002d", 0x3d}], 0x1, 0x0) 3.298075904s ago: executing program 0 (id=9435): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000400)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8a5e322d8e489c231db446dfce5034a3625a1060961a5c8e8ebee289dc9b81c6", "f22ac67c010000000000000000000000004000", "24d1030000001001b36853e70000b4b9f979a100000000f400", "16960bf75c8ad1e4d903c98b4613a024b2f65c2cdd5efe4157a125325c262ce4", "6a272fe447160298c7b816cd3dec35bdef000f00000000000000000000000004", "2600000043125300", 0x2, 0x2, 0xfffffffd, 0x400007ff, 0x6}}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x94, 0x4, 0x24}, &(0x7f00000003c0)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x92, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001640)=ANY=[@ANYRESDEC=r2], 0x84}}, 0x40) pselect6(0x40, &(0x7f0000000480)={0x5, 0x2, 0x3, 0x4, 0x4, 0xe881, 0xc53, 0x5}, &(0x7f0000000600)={0x94e0, 0x8, 0xd, 0x1, 0x569, 0x5, 0x7fffffffffffffff, 0x8}, &(0x7f0000000640)={0x3ff, 0xa, 0x4, 0x8, 0x7, 0x9, 0x6, 0x1}, &(0x7f0000000680)={0x0, 0x989680}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x3]}, 0x8}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000580)='%\x00', 0x200080, &(0x7f0000000080)={@align=0xa7, {0x5657, 0xb5, 0x6, 0x9}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x81}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) 3.296680013s ago: executing program 4 (id=9436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000200000000000000feffffff8500000005000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x4000850) 3.248066969s ago: executing program 1 (id=9437): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x3a, "04000787b64d173dbd210700a6aa0825be6b045c4a935fa5e5cd0516a26df1497941f851669d0000000000000000edd2a751d160302fc4d09b6e"}}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6, @local}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="04002abd7000ffdbdf254f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x7, 0x6}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20) r8 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x20040810) socket$nl_rdma(0x10, 0x3, 0x14) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c280000800050058a3cacc08000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x14c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.995378927s ago: executing program 4 (id=9438): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 2.810028373s ago: executing program 1 (id=9440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x7ff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x10000, 0x6, 0x9, 0x0, 0x3}}]}}}]}, 0x78}}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x15, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) recvmmsg(r11, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 2.596672834s ago: executing program 4 (id=9441): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x40, 0x70, 0x2, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xf}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x40}}, 0xf00ee28a8322a2fa) 2.585212227s ago: executing program 3 (id=9450): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000100fcff0700049a0f000000000000004880c8d7747047161765a669480687b451e5308c709911354b7669c5e74dd7fcaec055428f51fe660200100e247204d5df5c77bd215e871c8e34a94f1c0a8ce959d06b7b5600100001800c001080050008802c0000000c0002000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) unshare(0x22020400) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061125401000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r3, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 2.22923227s ago: executing program 4 (id=9442): r0 = socket(0x2b, 0x80801, 0x1) socket(0x11, 0x5, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)={0x58, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x48080) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0xfffffffe}], 0x1, 0x20, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c055, &(0x7f0000000500)={0xa, 0x4e1e, 0x0, @loopback={0x0, 0xa0211fffe000001}, 0x3}, 0x1c) 1.971723611s ago: executing program 0 (id=9443): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close(r4) 1.907574532s ago: executing program 3 (id=9444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x18000000, 0x8, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB="00000000140000000000003d5342530000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x800000}, 0x38) syz_emit_ethernet(0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="7fc6df1292049a7a215ec5d0e6c517d6ca222950c407c6aaa948225071bb76add9817055cc93f23e26c7d46014d0f0f5b96c40b393721ab43b0e68ef049e091a84dbb909f261e3c502095cb38a733c7baeeb5a237c27b8aa4e894ecd52f96cdba7e12a054dc058314d9e1c8b3f112352c885db9c904bbc11aa787dcd72c0df3f6c7d9661bed173cc3672df43fd413dcb2ee3e4a2cc371f0c9690def10339125b02e9e70c42d27320a0", @ANYBLOB="dcf4563841ebeef1f43c13684b2f547c1c4577cc6a6749067292afbabf53f7674128c28952f8a8f03f0ae2bb4bb5048149400504d7a8e70cee7d728abdda55d4676cb734155fd996ba59b916a85065f8df64aa1e54f29137d66572fba1af5c7395a0c977227389666c778da2e2f55fe519d075", @ANYRES8, @ANYRES16, @ANYRESOCT=0x0, @ANYRES64=0x0], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000100), 0x0}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) 1.758201108s ago: executing program 1 (id=9445): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1.690214717s ago: executing program 3 (id=9446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xc8}, [@call={0x85, 0x0, 0x0, 0xcf}, @call={0x85, 0x0, 0x0, 0x94}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @remote, 0xe61}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.685095911s ago: executing program 1 (id=9447): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1d, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fbc, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xe, 0xdce8, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1]}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x96a4a102f6e0fdf8, 0x9, 0x3, 0x1, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}]}, &(0x7f0000000480)='GPL\x00', 0x67, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xe, 0x8, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x0, 0x5, 0xc, 0x8}, {0x3, 0x5, 0x6, 0x3}, {0x5, 0x1, 0x8}, {0x2, 0x3, 0x9}, {0x1, 0x1, 0x3, 0x4}, {0x2, 0x2, 0x10, 0x7}], 0x10, 0x560000}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440), &(0x7f0000000780)=0x8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@setlink={0x90, 0x13, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21020, 0x40b60}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0xc29f}, @IFLA_CARRIER={0x5, 0x21, 0x9}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}]}, 0x90}}, 0x40) 1.632702909s ago: executing program 0 (id=9448): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r8}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000800)={{r5, &(0x7f0000000200)='syzkaller0\x00', 0x800, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x6]}, {0x0, 0x9, 0xb, 0x4}}, 0x3, &(0x7f0000000380), &(0x7f0000000400)=0xb}, 0x2, &(0x7f00000007c0)=[{0x2, 0x0, &(0x7f00000004c0)='TIPC\x00', &(0x7f0000000500)="6a12f82fbb5f83a37789492e32e95e6a23524022def561b146bdee6aa44ed2ed11d64296292a4393c84123924ac30cce23392d243ad2e1c1f4e0866501f24abf934aaef9e04d662631bf6091e22d8cbb81c92f91d997569e8692d5a1751ac697709fb54a26428720e53d6ff3fb350b5641ccdae21fbc99e73c32faadda8d1f87f41697b7986562bc07a87ae5f18b398275ff83ed1ab15acf1a76d580d5bb5884579d5be45cb71bb3b50c46ebd271ca1b75ab537b26082952bef2fc50c906524960aa837bc7b741af3419e4ce6e4a246aa37e0784b4d26467", 0xd8, 0x8}, {0x1, 0x4, &(0x7f0000000600)='&\x00', &(0x7f00000006c0)="d5d8f406b4589d6fbb1892c2543c7392eb9935c864415e4dec8770b722f5ec5a8b3353653859a1ef32df8a18fe4008ab84c14cce39e257ff45fc6bdba3f06ab4738da7cb577bf767ca05645740cbc10943780f223bbfd6194e50b55e61a770f2a6dc0d05873d3c09b308b5081773126cfb9d4c801c5875b69d3530bc561eed6bd3210a7bf24f79e5f219fa7534d9b3c72788d5a44779d3cf4dd0d81274497e3c4eb71d435581947502ebec855327718f3107497e24ceaf2ed1653be49d22137fa164be76df8d40f1fdab9646f0b24ba122f952126037edfdab1fe778b602ac5bf298f1c06f183a762700a935", 0xec, 0x8}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000800)={{r5, &(0x7f0000000200)='syzkaller0\x00', 0x800, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x6]}, {0x0, 0x9, 0xb, 0x4}}, 0x3, &(0x7f0000000380), &(0x7f0000000400)=0xb}, 0x2, &(0x7f00000007c0)=[{0x2, 0x0, &(0x7f00000004c0)='TIPC\x00', &(0x7f0000000500)="6a12f82fbb5f83a37789492e32e95e6a23524022def561b146bdee6aa44ed2ed11d64296292a4393c84123924ac30cce23392d243ad2e1c1f4e0866501f24abf934aaef9e04d662631bf6091e22d8cbb81c92f91d997569e8692d5a1751ac697709fb54a26428720e53d6ff3fb350b5641ccdae21fbc99e73c32faadda8d1f87f41697b7986562bc07a87ae5f18b398275ff83ed1ab15acf1a76d580d5bb5884579d5be45cb71bb3b50c46ebd271ca1b75ab537b26082952bef2fc50c906524960aa837bc7b741af3419e4ce6e4a246aa37e0784b4d26467", 0xd8, 0x8}, {0x1, 0x4, &(0x7f0000000600)='&\x00', &(0x7f00000006c0)="d5d8f406b4589d6fbb1892c2543c7392eb9935c864415e4dec8770b722f5ec5a8b3353653859a1ef32df8a18fe4008ab84c14cce39e257ff45fc6bdba3f06ab4738da7cb577bf767ca05645740cbc10943780f223bbfd6194e50b55e61a770f2a6dc0d05873d3c09b308b5081773126cfb9d4c801c5875b69d3530bc561eed6bd3210a7bf24f79e5f219fa7534d9b3c72788d5a44779d3cf4dd0d81274497e3c4eb71d435581947502ebec855327718f3107497e24ceaf2ed1653be49d22137fa164be76df8d40f1fdab9646f0b24ba122f952126037edfdab1fe778b602ac5bf298f1c06f183a762700a935", 0xec, 0x8}]}) epoll_wait(r9, &(0x7f0000000940)=[{}], 0x1, 0x0) (async) epoll_wait(r9, &(0x7f0000000940)=[{}], 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.552037957s ago: executing program 3 (id=9449): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000200)=0x5, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b7}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00680900a30232ce575db40000000000000000128009000100626f6efc000000000c000280050011007f000000cb80765f8b6ba62878eed8ea"], 0x3c}}, 0x0) 1.411972219s ago: executing program 3 (id=9451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2d, 0x0, @local}}, 0x24) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r6, 0xc}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x857) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000001ff0)={0x1d, r11}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002000)=@newtfilter={0x2fac, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xffe0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x212}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0x2f5c, 0x2, [@TCA_ROUTE4_POLICE={0x468, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0xfffffffc, 0x435, 0x2, 0x706, 0x5, 0x5, 0xe304, 0x9, 0x5, 0x7, 0xfff, 0x5, 0x4, 0x2, 0x0, 0x9, 0xd3, 0x5, 0x146, 0x5, 0x9, 0x3, 0xf, 0x3, 0x200, 0x5250a9ec, 0x5, 0x9a, 0x401, 0x5, 0x8, 0x9, 0x7, 0x3, 0xfff, 0x8, 0x70, 0xd4b3, 0x5, 0x34, 0xff, 0x5, 0x1, 0xeed, 0x5, 0x8000, 0x7f, 0x8, 0x32, 0x1, 0xb, 0x7fff, 0x9, 0x8, 0x80db, 0x7fff, 0x5, 0x1, 0x8b, 0x1, 0x7, 0x8, 0x8, 0x355, 0x4, 0x7, 0xb8, 0x1, 0x7, 0xfffffff9, 0x1, 0x80000000, 0x20ed, 0xe, 0x400, 0x0, 0x7, 0x0, 0x3ff, 0x4, 0x8, 0x40, 0x7f, 0xfff, 0x2, 0x7ff, 0x0, 0x7, 0xba, 0x0, 0x0, 0xffffffff, 0x10001, 0x3, 0x274, 0xffffffff, 0x8, 0x3, 0x7, 0x4, 0x0, 0x8, 0x9, 0x2, 0x0, 0xede, 0x4, 0x2, 0x502f, 0x3ff, 0xffffffff, 0x9, 0x4, 0x7, 0x641, 0x3, 0x9, 0xff, 0x35e, 0xfff, 0x24b, 0x0, 0x2, 0x800, 0xd, 0x1, 0x2, 0x5, 0x6, 0x4, 0x0, 0x1, 0x0, 0x7ff, 0xb, 0xba, 0x0, 0xc0, 0x7b0, 0x81, 0x12f3, 0x8, 0x101, 0xb, 0x401, 0x57, 0xc, 0x5, 0x3, 0x9, 0x7, 0xa7, 0x3, 0x4, 0x7fffffff, 0xe695, 0x81, 0x101, 0x6, 0xa, 0x243, 0x3, 0x6, 0x9, 0xfffffffe, 0x7, 0x80000001, 0x2476ad11, 0xfffffff7, 0x7e1d, 0x4, 0x9, 0x8000, 0x81, 0x8000, 0x400, 0x2, 0x1, 0xfffffffd, 0x4, 0x2, 0x3, 0x3, 0x6, 0x91cf, 0x2, 0x101, 0x80, 0x2, 0x8, 0x8000, 0x9, 0x259d, 0x6, 0x5, 0x9, 0x8, 0x5, 0x1, 0x6, 0x8001, 0xff, 0xdc, 0x3, 0x3ff, 0x2, 0x6, 0x9, 0x7fff, 0xb2, 0xfffffff8, 0x9, 0xfffffffc, 0x5, 0x3ff, 0x453a, 0x9, 0x7ff, 0xd172, 0x8, 0x10001, 0x9, 0x4, 0x4, 0x6, 0x5, 0x7, 0x10, 0x1, 0x8, 0x8, 0x57, 0xfffffffe, 0xb177, 0x81, 0x3, 0x401, 0x3, 0x2, 0x1f, 0x1ff, 0x81, 0x8, 0x2, 0x9, 0xb75a, 0x8000, 0x418, 0x9, 0xb, 0x10000, 0xff, 0x4, 0xde]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xbbd7, 0x4, 0x7fff, 0x1, 0x1, {0xfd, 0x0, 0x1, 0x3, 0x3, 0x4}, {0x7, 0x1, 0xcc9, 0x5, 0x5, 0x8}, 0x2, 0x8, 0xf}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x28}, @TCA_ROUTE4_ACT={0x2e4, 0x6, [@m_bpf={0x10c, 0xa, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x400, 0x9, 0xc, 0x5}, {0x4c88, 0x7, 0xe, 0xea1}, {0x8000, 0x0, 0x5, 0x4}, {0x1ff, 0x3, 0xf4, 0x8}, {0xd3, 0x6, 0x9, 0xa5}, {0x800, 0x8, 0xd9, 0x200}, {0x5, 0x0, 0x4, 0xfffffffa}, {0xeabc, 0x6, 0xd, 0x5}, {0x7, 0xf2, 0xd4, 0x3}, {0x4, 0x6, 0x8}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x7, 0x1, 0x3, 0x101}, {0x0, 0x5, 0x5, 0x7}, {0x25e5, 0x0, 0x30, 0x80}, {0xfff7, 0x4, 0x7, 0xffffffff}, {0x8, 0x3, 0x4, 0x9}, {0xffa9, 0x9, 0x81, 0x6}, {0x8, 0x4, 0x6, 0x7}, {0x2, 0x4, 0x6, 0x80}]}]}, {0x33, 0x6, "bc946064965900b59b4e30ec160bce4d1691702ce42cf3dc66a64d6e8c0a5e3013771a27a5d1d22315a32febe69287"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0xb8, 0x7, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x7, 0x20000003, 0x5, 0x77}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x3ff, 0x7, 0xf64b, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffffffff, 0x2, 0x4, 0x5, 0x2}, 0x2}}]}, {0x16, 0x6, "9134c374b8058669afa8ac885d4e77a6a5f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xa8, 0x9, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0x75, 0x6, "4e77f5a2a9620a235669f2a924502560a35a9045d82add4a4ce9384ff320fdbddfb7e3dad99662b94bcf890ef9b573e4dc51a8d7aea1d4710fafde00f1530a03bfefb85bd9017ac233a82ee677a5e53bc8869931e7afaf3fabcc4bf13fb5295c8e37004a4213c0cfde1fb3c554d521710f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x74, 0x11, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x5, 0x10000000, 0x1, 0x4}, 0xd}}]}, {0x23, 0x6, "9eaa694a33c010d76b5f0fb911ec0f7f6199f677f3ed79c8f060d863b320ac"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x27}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_ACT={0x27dc, 0x6, [@m_sample={0x11c, 0x1e, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x80000000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}]}, {0xe0, 0x6, "e0d08aa80f568837b01b289ed891ed1440919c3c7aa772f1dadd2ffb4e2ac3263ed21c07a4309d473f8fe5378c14b266631f92363789633c0d0be64fb4cbd08d658f03c1b65d220d239bf65464a8cc50d7139efd59e0970c58436e943360a5de552f80292e1156225ef97c4f4bd5d1a1b97cc369a0d339993ed00eca679a646fd769c006ae4e66f8437f9a32578c9a5a95d71c4394defcdd9c2d36317f9a1ee10384abde3ac022819e543b87aa5439e6b08efea3d6100d8ef0192cf9f4107d9ee87bf6e6c980238b0c83e009475d5e21648d36b6f3fec5f7374c9696"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xc4, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xee7, 0x7, 0x20000000, 0x10}, @local, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x1, 0xfffffffe, 0x8001}, @remote, @multicast1, 0xff000000, 0x1}}]}, {0x4a, 0x6, "4f70df86d8dfa615398f044308f31980516a2077d2a3c4be4cdd5969de4cf8560c15e6cb0a5d9a4942ffb8271a54f7d7dee343e0a5d1f4722e33a1c5df160795c234619a1169"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xd0, 0xf, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4c, 0x4, [{0xc, 0x5, 0x7, 0x3}, {0xdd, 0x0, 0xf8, 0x6}, {0x5, 0xc, 0x1, 0x5}, {0xd2, 0x9, 0x1, 0x3}, {0x7, 0x8, 0x2}, {0x2, 0x4, 0x4, 0x6}, {0x3, 0x7b, 0x31, 0x2}, {0xa4d3, 0xa, 0x20, 0x81b5}, {0x7, 0x81, 0x1}]}]}, {0x5c, 0x6, "6fed9d0af95dda353defed2b428b0f317ce4926f871438d2385a7629f69407786799e1e7a7fd1c458bdc9c88a24b8a5e19a770ae080a808532b80fa82a7d10214fe9ed48c4546e9fff942b3c8b7cd5a484760d648cb6efa1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x90, 0x1e, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa8, 0xd, 0x4, 0x8, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x4, 0x3, 0x8, 0x2}, 0x4ba1}}]}, {0x28, 0x6, "6bb5ec8b6a6734ac3f0218b1ea77233feaced24e9b6e0c5690f12d9ecff34139796b5185"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x118, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0xea, 0x6, "1e7dd271ecea06105f0b2e07a81a1e2d22d7f34d0871e9cc7e88c4248ff5876ebc982bec01eb6fc297d6720e806b22a699f6a54106519505a96994f7cbf3ab738d42f99683c2ab83752a10363831828264ac04194b8f08b53e88ede77ddce8c1f49270af2a29c7739b8304c111ff21de7009e38c9c4cc2a81a6c4bf1646f75d68cf56f2e8ca59217457f1ec82fe006b87714d32f44f738515af9d864ff46fda88cfcd01a6185504cc8ad83663cf9b599abbe9c5798e6a3340b77230ab649c46f2ca0ac14c40e39bec9a7770c43f0dfd5acc802f43e023dfbf7185d3a6e87f507c07711162ebd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x104c, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x6, 0x5, 0x2}, 0xe}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x10a0, 0x1a, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x3, 0xb, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4ba}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0x7, 0x1, 0x2, 0x101}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa3f}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd7b}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x160, 0x9, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x2, 0x20000000, 0x4, 0x9}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x20000000, 0x8, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7fffffff, 0x20000000, 0x8, 0x6}, 0x81}}]}, {0xdb, 0x6, "3ae57c7fc9cbc837ede325df06bd835219530f623a9eaf386d45817addd121c9ca01a8517a881b8a5f275643bd3d8e7d5efb4abbe401742dbd5f11f02c38153943638842359228fad79c86b8f516fb27e9c82251e0d434eca91675827409e458b42f665b251c32d1c08ff8d4317a888423bbb03cf0aa10d7835af354e2f7e1cf71e03921beb628997cc38d45f1fb05a5451433ea48efb4e699a4e30ab7666e90f375e6c3c4a98c084b212b4b7606769c693cc2608c964a266a68a572bcc65968d09108afb4ba5c749bf583e3d2f9c17b17b14ce4089b80"}, {0xc}, {0xc}}}, @m_connmark={0x134, 0x13, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfffffff8, 0x6, 0x792b, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7ff, 0x1, 0x878, 0x7fff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb1c, 0x9, 0x10000000, 0x0, 0xc}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc, 0x9, 0x7, 0x329}, 0x1c7a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xfffffff7, 0x0, 0x7, 0x6}, 0x66e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x10000000, 0x10000, 0x7}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x1, 0x0, 0xfffffff8}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfc000000, 0x1, 0xf0de, 0xfffff171}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x800, 0xfffffffffffffffd, 0xff}, 0x7}}]}, {0x5, 0x6, "c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x2fac}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000040)='ip6gre\x00', 0x400100, &(0x7f0000000100)={@_ha_fsid={[0x25d, 0x7]}, {0x8, 0x2, 0xf, 0xffffffffffffffff}}, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x700000}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r13, @ANYBLOB="001c25bd7000ffdbdf253700000008005700050000000800570003000000050019010b000000080027000200000005001901070000000800570000000000080057000500000008002700010000000800a00005000000080026006c0900000800a10006000000080026006c0900000800220146030000050019010400000008005700ff000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8090) socketpair(0x9, 0x4, 0x6, &(0x7f0000000380)) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 1.304261211s ago: executing program 1 (id=9452): socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x1000, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) listen(0xffffffffffffffff, 0x6f6) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="c58840cb00"/15, 0xf, 0x14040000, &(0x7f0000000140)={0x11, 0xc, r3, 0x1, 0xff, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e1c, @rand_addr=0x64010101}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244744bd4c0b42a21d7214bf92594e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd000000000000001eb9221e00"}, 0xd8) socket$kcm(0x23, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0x9e3d206e4ff0beee}, {0xd, 0x6}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x240480c4) 1.083152935s ago: executing program 4 (id=9453): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251800000008000300", @ANYRES32=r5, @ANYBLOB="08003080040003"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6076b2af00072f00200100000000000000000000001b0001ff0200000000000000000000000000010000883e"], 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f", 0x16e}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)={0x1a0, 0x7, 0x0, 0x101, 0x70bc27, 0x25dfdbfb, {0x7}, [@nested={0x186, 0x10f, 0x0, 0x1, [@generic="bf1d911dfbd0c408160435b32261442ba56516451d7cb56cac4c3c662ea319c5fee97dc91b04168899e1445baff6dc420b26889dc73dd8ff50bae002283b2421426c767ee0dd7d496f6679e74ec4cd0e0a39045a95afa9af8680a8ab9625c91ba449d5f522331ce93372b56edda643e6c88090ac87fe9611d7190a380f8ff1b06c4c50dbe010d043774cd5e3814a69c0723eb9d29bae773ad278b031d8022d210a7afdb60713c865e882be583aa1e322d2edd78b74e1077556188e863d63fb4e004d72131174b6da930a", @generic="215ec2a616a9f43c26314d0f1f130e750ae7fcbbd698aa4c4adea661fdde8cb49dd76d73393a038d77605382ff6fef518383c3cb4c1e3f10eeb5aa8c7c0b037d21946c077c41ea881a464fdd4c3b85bc743780e52458f79e6c0afc5c46f1a5d9e1c5db0da0a09985afc5c7f354509b69c8770bb88d2e7f7b134f6fbbecef0004734026b70de6bd0c91cd15e9a0a294e63cc8c24ac8e2326f0ff8922b381253fdf9e81fefb7c3c2f6690fd9f71862953f", @typed={0x8, 0x123, 0x0, 0x0, @pid=r7}]}, @generic="8a71ef89"]}, 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1.082969888s ago: executing program 0 (id=9454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x16, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}]}, 0x38}}, 0x0) 556.377857ms ago: executing program 0 (id=9455): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61f0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e60, 0x0, @dev={0xfe, 0x80, '\x00', 0x5c}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 309.935589ms ago: executing program 3 (id=9456): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) shutdown(0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x10}}, 0x0) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000001c00)={&(0x7f0000001b80)=[{&(0x7f00000000c0)="184608719e451eadabf8063a6cebcebe8ea3af95a0e294e35c2eaa80119f8c8d100409b14413e8885d4039ff06802ca37a8fd1fd59b88929d916f375e51a8ebeef9c1756de7165d2d91bd85dd8952fd639c2cc2176cb6e5bdb", 0x59}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="8f70e4623caa216f7f76b25dfba5db14ef6ae80f7307580eef347adcce6869298ed0393699a0cc62331c9701fd966216a4f4c578a9d5dd63b0f1c8db8697bee54a10b36107a4f7013ee6251bbfddfd9389fb946205cd9b4959c7a9df9d1d30e60a858c3cf76bade241870cbc4e659ff789cecca9efaaf5d3f588bce06301fd760a17cc4109362002363da5745d8240ff72dc5dcd4f756c787c286cd3abb0c1c1f0954a1a7eb654fcbe39011c678f70d6df7bd9be5e3c15e3f30b47718b4fbbddfeee4be4582724d8e57115513ff3bae218b655ba8f87cf91", 0xd8}, {&(0x7f0000001a40)="652d16a856cf606a21cca99ffc4968ce4b822fcb147c48fa61c846e0ba2738b55ccc9dab700cbdd0f49377f470bf60bf3c21e56f34f617e34adb6637e2a61556364b53a06dcb2e18bb2d930f72cfcdac244ccc6c6a2c35622007321fd227f902ce63074ac72b340d4d27f385b3574b6ee9978faddbdf0e02d129", 0x7a}, {&(0x7f0000001ac0)="dbf6551bcf4420e062e304f8fc17e2b5cd21b355aea71086defab100dcbdabdacc9b348534158d9b225a39b9593909ffbe1ec12b2273533b9a24ff87640d822e8cd7b2c5eccb35828260151ada5fe53478135d8493d56a3489e9d85406531a85848640b41f45c3d3d1a4d04055f37f1d11cca9cbc62a43487983b79e0a29748ec58f5c6dafcc0a99c12008f37f81278d252bbef2973c20137050c97e714722142be5a7f6360a47d93bb74b8bcffe2bb75b248303302a9cb8aa106f794c", 0xbd}], 0x5, 0x1, 0x0, 0x1, 0x2, 0x7, 0x9d9810f031a1f4ae, 0x2}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESOCT=r1], 0x44}}, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000240)='GPL\x00', 0x14, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 65.752482ms ago: executing program 1 (id=9457): r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000000)=""/40, 0x28, 0x401) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={r0, 0x209c, 0x5, "f91c15a51c73e70b15ef7f7d5bdc395bfd2c544c8217783a1bdf4bff889a59665ca7d86ad0c1febc39d81a4576ba9aad26b527126e7660cfe7b8039d90ebf78ba0a77c0093e491b4f273f6fb74bd6d303e787086f865c3fe40cf40e94b38b4db74565e2cced0871f7ed1bf64133e712e8c9815452db035bee8d20f1eb6e4ba34917fef59d3db3ede177b0554a1bb129dd816a553390910868a1f044e4c99fef712bdcacd94f6c04a942a7bf947e17964201e424002c8b9c75b1b4a259ebcbc2ea1a385801df2298232502bcfedfb6f52e2c82931afcace98ff924dc9"}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.freeze\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000180)={0x6, 0x2, 0x4, @random="95375259f132", 'gre0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x10, 0x80, 0x8001, 0x1000, {{0x7, 0x4, 0x3, 0x39, 0x1c, 0x66, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {0xe, 0xffff}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c9}, 0x20000081) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x5, 0x0, r4, 0x1, '\x00', r3, r2, 0x2, 0x0, 0x1}, 0x50) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r4) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xc0, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffff80}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x6}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)=@flushsa={0x190, 0x1c, 0x0, 0x70bd2d, 0x25dfdbff, {0x17}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd2d, 0x70bd28, 0x70bd27, 0x70bd2b, 0x4, [0xfffffff6, 0x1, 0x7, 0x40, 0x186b]}}, @replay_thresh={0x8, 0xb, 0x8}, @tfcpad={0x8, 0x16, 0x9}, @algo_auth={0x139, 0x1, {{'cbcmac-aes-ce\x00'}, 0x788, "1a830deade1564556490f443486a583b0a76e07720606b7c9e4c216228d497871a9a588ab3f466f1b5eb135c1296ff516d18fe77354337a57bb70cbab018a968b4ead0b8e9420b1a8500045b72e4cd075f5751cab9361dfad194dad3b0f7ae867eb5d5257e1ee671a66b9fb393747f58cfc598fca8977631214f34494c7ba05e153c411d7d434d86c53af149599d9cc8ba2df6fe017cc65e9e395ed418e083b8133d8d39f0d68775fe25396dba95d315b735396806b2fc7e52e3dee77ec5d7124584fd4925d1a14f96003fbafc59e21f2b99ad02392d89232475429f07c35a10e0cbd401772648d203004541d173e56539"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40001}, 0x850) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x80, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_STATUS={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x400) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000b40)={'erspan0\x00', &(0x7f0000000a80)={'erspan0\x00', r3, 0x7, 0x10, 0x80, 0xaf, {{0x1f, 0x4, 0x1, 0x5, 0x7c, 0x65, 0x0, 0x80, 0x4, 0x0, @broadcast, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x33, 0x3, 0x7, [{@loopback, 0x8}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x1b, 0x3, 0x5, [{@multicast2, 0x400}, {@broadcast, 0xfffffffa}, {@private=0xa010101}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x2, [{@broadcast}, {@broadcast, 0x1}, {@rand_addr=0x64010102, 0x1}]}, @timestamp={0x44, 0xc, 0xe6, 0x0, 0x8, [0x4, 0xd5]}, @rr={0x7, 0xf, 0xc9, [@private=0xa010101, @remote, @multicast1]}]}}}}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b80)={'syztnl2\x00', r3, 0x728, 0x20, 0x0, 0x2, {{0x7, 0x4, 0x1, 0x4, 0x1c, 0x66, 0x0, 0xb3, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000c00)={0x0, 0x80, 0x20}, &(0x7f0000000c40)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000c80)={r10, 0x6}, &(0x7f0000000cc0)=0x8) connect$pppoe(r4, &(0x7f0000000d00)={0x18, 0x0, {0x0, @random="a8a678f925a2", 'vlan1\x00'}}, 0x1e) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000d40)={r11, @in={{0x2, 0x4e23, @broadcast}}, 0x4}, 0x90) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r4, 0xffffffff, '\x00', r9, r5, 0x4, 0x2, 0x2}, 0x50) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x12, r12, 0x23056000) socket$inet_smc(0x2b, 0x1, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r2) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb0, r13, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x582}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004080}, 0x810) 0s ago: executing program 4 (id=9458): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0xe1d, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5f}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010000180080001000900000004"], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "d09284"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) kernel console output (not intermixed with test programs): rno=0 [ 981.744546][ T29] audit: type=1800 audit(1780085709.694:36): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8478" name="memory.events" dev="tmpfs" ino=2504 res=0 errno=0 [ 981.983613][ T7753] lo speed is unknown, defaulting to 1000 [ 982.022681][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 982.091993][ T7778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 982.255855][ T7765] tipc: Disabling bearer [ 983.133470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 984.245117][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 984.250134][ T7848] tipc: Enabled bearer , priority 0 [ 984.274630][ T7848] syzkaller0: entered promiscuous mode [ 984.280164][ T7848] syzkaller0: entered allmulticast mode [ 984.288264][ T7848] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 984.317077][ T7848] tipc: Resetting bearer [ 984.357543][ T7848] __nla_validate_parse: 70 callbacks suppressed [ 984.357562][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8493'. [ 984.383854][ T7847] tipc: Resetting bearer [ 984.426397][ T7847] tipc: Disabling bearer [ 984.450150][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8495'. [ 984.499407][ T7858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 984.510599][ T7858] ip6gretap2: entered allmulticast mode [ 984.543478][ T7860] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 984.935581][ T7876] netlink: 'syz.4.8503': attribute type 3 has an invalid length. [ 984.943368][ T7876] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8503'. [ 985.043750][ T7885] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8506'. [ 985.056137][ T7885] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 985.062850][ T7885] syzkaller1: Linktype set failed because interface is up [ 985.072664][ T7887] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 985.079077][ T24] syzkaller1: tun_net_xmit 90 [ 985.287112][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 985.812326][ T7909] pim6reg1: entered allmulticast mode [ 986.064696][ T7923] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 986.082871][ T7929] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8517'. [ 986.378834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 986.404321][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8522'. [ 986.429541][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8520'. [ 986.635351][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8527'. [ 986.636076][ T7953] bond13: option tlb_dynamic_lb: invalid value (109) [ 986.652238][ T7953] bond13 (unregistering): Released all slaves [ 986.735871][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8524'. [ 986.788568][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8527'. [ 987.469294][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 987.797328][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 988.372217][ T8030] lo speed is unknown, defaulting to 1000 [ 988.552684][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 988.942667][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 988.949432][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 988.956146][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 988.962856][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.128550][ T8047] dvmrp0: entered allmulticast mode [ 989.134393][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.141622][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.148444][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.155166][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.161890][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.168598][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.175301][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.182016][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.188734][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.195449][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.212288][ T8030] lo speed is unknown, defaulting to 1000 [ 989.277012][ T8051] netlink: 'syz.1.8555': attribute type 15 has an invalid length. [ 989.280844][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.332301][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.362673][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.394174][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.412268][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.427180][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.439272][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.456423][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.473640][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.495721][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.514066][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.536381][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.553993][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.567533][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.584587][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.599832][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.616822][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.634000][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.648587][ T8042] IPVS: set_ctl: invalid protocol: 951 0.0.0.0:34048 [ 989.654552][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 990.727121][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 991.704439][ T8075] netlink: 'syz.2.8560': attribute type 10 has an invalid length. [ 991.712593][ T8075] __nla_validate_parse: 13 callbacks suppressed [ 991.712610][ T8075] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8560'. [ 991.835067][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 992.740265][ T8103] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.8566'. [ 992.781503][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8566'. [ 992.883346][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.890485][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 993.715542][ T8129] netlink: 'syz.1.8571': attribute type 11 has an invalid length. [ 993.917434][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 994.156288][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8577'. [ 994.244950][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8578'. [ 994.286253][ T29] audit: type=1804 audit(1780085722.254:37): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8577" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2371 res=1 errno=0 [ 994.393076][ T29] audit: type=1800 audit(1780085722.254:38): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8577" name="cgroup.controllers" dev="tmpfs" ino=2371 res=0 errno=0 [ 994.485519][ T29] audit: type=1804 audit(1780085722.404:39): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8577" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2371 res=1 errno=0 [ 994.517211][ T8149] netlink: 'syz.3.8581': attribute type 3 has an invalid length. [ 994.560160][ T8149] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8581'. [ 994.578043][ T8148] netlink: 10184 bytes leftover after parsing attributes in process `syz.1.8579'. [ 994.605157][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8579'. [ 994.780153][ T8164] syzkaller0: entered promiscuous mode [ 994.786071][ T8164] syzkaller0: entered allmulticast mode [ 994.977410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 995.132156][ T8171] : renamed from bond0 [ 995.233211][ T8182] lo speed is unknown, defaulting to 1000 [ 995.335865][ T8177] netlink: 'syz.2.8590': attribute type 3 has an invalid length. [ 995.416491][ T8192] netlink: 296 bytes leftover after parsing attributes in process `syz.4.8591'. [ 995.559527][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8592'. [ 995.953898][ T8182] lo speed is unknown, defaulting to 1000 [ 996.072307][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 996.436248][ T8207] x_tables: unsorted underflow at hook 4 [ 996.467332][ T8209] netlink: 'syz.3.8598': attribute type 1 has an invalid length. [ 996.485524][ T8207] netlink: 'syz.3.8598': attribute type 1 has an invalid length. [ 996.956811][ T8231] netlink: 'syz.1.8602': attribute type 11 has an invalid length. [ 996.986897][ T8227] syzkaller1: entered promiscuous mode [ 996.992412][ T8227] syzkaller1: entered allmulticast mode [ 997.003831][ T8234] netlink: 'syz.2.8603': attribute type 1 has an invalid length. [ 997.021117][ T8227] __nla_validate_parse: 39 callbacks suppressed [ 997.021134][ T8227] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8601'. [ 997.084609][ T8234] 8021q: adding VLAN 0 to HW filter on device bond14 [ 997.095729][ T8234] bond13: (slave bond14): making interface the new active one [ 997.103857][ T8234] bond13: (slave bond14): Enslaving as an active interface with an up link [ 997.175256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 997.247772][ T8245] netlink: 'syz.2.8605': attribute type 6 has an invalid length. [ 997.286289][ T8245] bond15: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 997.305943][ T8245] bond15 (unregistering): Released all slaves [ 998.108462][ T8274] netlink: 'syz.4.8610': attribute type 12 has an invalid length. [ 998.299324][ T8282] netlink: 'syz.4.8612': attribute type 2 has an invalid length. [ 998.336220][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 998.535670][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8614'. [ 998.748760][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8617'. [ 999.011776][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8623'. [ 999.024618][ T8309] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8620'. [ 999.114597][ T8320] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.8624'. [ 999.155011][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8624'. [ 999.240565][ T8328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8626'. [ 999.303190][ T8332] netlink: 165 bytes leftover after parsing attributes in process `syz.2.8628'. [ 999.411039][ T8339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8629'. [ 999.439865][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1000.481752][ T29] audit: type=1107 audit(1780085728.424:40): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1000.538788][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1001.178033][ T8448] v: renamed from erspan0 [ 1001.503786][ T8463] netlink: 'syz.4.8656': attribute type 1 has an invalid length. [ 1001.535233][ T8464] C: renamed from veth1_to_team (while UP) [ 1001.577897][ T8464] netlink: 'syz.2.8655': attribute type 2 has an invalid length. [ 1001.595833][ T8464] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1001.642284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1002.370200][ T8498] __nla_validate_parse: 10 callbacks suppressed [ 1002.370220][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8666'. [ 1002.742424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1002.745038][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8674'. [ 1003.033495][ T8534] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.8677'. [ 1003.042861][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8677'. [ 1003.299815][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8679'. [ 1003.318553][ T8541] netlink: 'syz.4.8678': attribute type 2 has an invalid length. [ 1003.379655][ T8541] netlink: 'syz.4.8678': attribute type 2 has an invalid length. [ 1003.503747][ T8541] gre3: entered promiscuous mode [ 1003.785600][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8686'. [ 1003.841627][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1003.884010][ T8564] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1003.886039][ T8559] bond18: entered allmulticast mode [ 1003.914013][ T8565] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1004.040876][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1004.197619][ T8579] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1004.224946][ T8589] 8021q: adding VLAN 0 to HW filter on device  [ 1004.241329][ T8589] bond19: (slave ): Enslaving as an active interface with an up link [ 1004.877263][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1005.394428][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8698'. [ 1005.415700][ T8617] ipvlan0: entered allmulticast mode [ 1005.422331][ T8617] syz_tun: entered allmulticast mode [ 1005.918013][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1006.913286][ T8572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1006.976779][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1006.984559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1007.205209][ T8632] x_tables: duplicate underflow at hook 1 [ 1007.401987][ T8652] netlink: 'syz.1.8705': attribute type 1 has an invalid length. [ 1007.410791][ T8640] bond20: option fail_over_mac: invalid value (127) [ 1007.420883][ T8652] __nla_validate_parse: 3 callbacks suppressed [ 1007.420902][ T8652] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8705'. [ 1007.452171][ T8640] bond20 (unregistering): Released all slaves [ 1007.461551][ T8654] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1007.484201][ T8654] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8709'. [ 1007.898697][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8710'. [ 1007.933254][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8710'. [ 1007.997074][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1008.203854][ T8676] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.8714'. [ 1008.231291][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8714'. [ 1008.397497][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1008.412781][ T8678] syzkaller0: entered promiscuous mode [ 1008.456357][ T8678] syzkaller0: entered allmulticast mode [ 1009.138740][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1009.213770][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8723'. [ 1009.290768][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8723'. [ 1009.470362][ T8701] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1010.215980][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1010.723847][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 1011.294854][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1012.283446][ T8729] netlink: 'syz.0.8727': attribute type 1 has an invalid length. [ 1012.314609][ T8729] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1012.349429][ T8729] bond20: (slave veth11): Enslaving as an active interface with a down link [ 1012.360997][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1012.376068][ T8729] bond20 (unregistering): (slave veth11): Releasing active interface [ 1012.388235][ T8729] bond20 (unregistering): Released all slaves [ 1012.802191][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 1013.416598][ T8753] bond20 (unregistering): Released all slaves [ 1013.437224][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1014.166761][ T8798] gretap1: entered allmulticast mode [ 1014.524812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1014.601949][ T8824] netlink: 'syz.0.8749': attribute type 5 has an invalid length. [ 1014.609747][ T8824] __nla_validate_parse: 5 callbacks suppressed [ 1014.609764][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8749'. [ 1014.680074][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8749'. [ 1014.711439][ T8830] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1015.087697][ T8852] netlink: 324 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1015.222212][ T8857] netlink: 13 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1015.270433][ T8857] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1015.620320][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1016.372880][ T8884] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8766'. [ 1016.464228][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1016.492666][ T8888] netlink: 'syz.1.8767': attribute type 4 has an invalid length. [ 1016.541029][ T8888] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1016.637083][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1016.844983][ T8904] bond0: (slave veth1_to_bond): Device is not bonding slave [ 1016.854325][ T8904] bond0: option active_slave: invalid value (veth1_to_bond) [ 1016.921650][ T8908] bridge0: port 3(vlan4) entered blocking state [ 1016.951793][ T8908] bridge0: port 3(vlan4) entered disabled state [ 1016.971445][ T8908] vlan4: entered allmulticast mode [ 1016.986918][ T8908] bridge0: entered allmulticast mode [ 1017.004202][ T8908] vlan4: left allmulticast mode [ 1017.016164][ T8908] bridge0: left allmulticast mode [ 1017.211025][ T8916] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.8776'. [ 1017.459722][ T8932] netlink: 'syz.0.8781': attribute type 1 has an invalid length. [ 1017.515778][ T8932] bond20: entered promiscuous mode [ 1017.528254][ T8932] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1017.558576][ T8939] netlink: 'syz.3.8782': attribute type 29 has an invalid length. [ 1017.559876][ T8932] ipvlan0: entered allmulticast mode [ 1017.572261][ T8932] bond20: entered allmulticast mode [ 1017.594528][ T8932] ipvlan1: entered allmulticast mode [ 1017.619190][ T8932] bond20: (slave bridge4): making interface the new active one [ 1017.632075][ T8932] bridge4: entered promiscuous mode [ 1017.640824][ T8932] bridge4: entered allmulticast mode [ 1017.650830][ T8932] bond20: (slave bridge4): Enslaving as an active interface with an up link [ 1017.678011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1018.024298][ T8961] netlink: 'syz.1.8790': attribute type 5 has an invalid length. [ 1018.615938][ T8996] netlink: 'syz.3.8800': attribute type 1 has an invalid length. [ 1018.646259][ T8996] bond9: entered promiscuous mode [ 1018.651771][ T8996] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1018.713126][ T8996] bond9: (slave bridge6): making interface the new active one [ 1018.720639][ T8996] bridge6: entered promiscuous mode [ 1018.727321][ T8996] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1018.773258][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1018.887105][ T9013] syzkaller0: refused to change device tx_queue_len [ 1019.320572][ T9029] netlink: zone id is out of range [ 1019.334685][ T9029] netlink: zone id is out of range [ 1019.348707][ T9029] netlink: zone id is out of range [ 1019.367130][ T9029] netlink: zone id is out of range [ 1019.372442][ T9029] netlink: zone id is out of range [ 1019.379082][ T9029] netlink: zone id is out of range [ 1019.393365][ T9029] netlink: zone id is out of range [ 1019.622842][ T9038] bond19: (slave ): Releasing backup interface [ 1019.632748][ T9038]  (unregistering): Released all slaves [ 1020.148966][ T9054] __nla_validate_parse: 73 callbacks suppressed [ 1020.148985][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1020.189816][ T9054] xfrm1: entered promiscuous mode [ 1020.205174][ T9054] xfrm1: entered allmulticast mode [ 1020.289833][ T9064] tc_dump_action: action bad kind [ 1020.311599][ T9064] tc_dump_action: action bad kind [ 1020.319216][ T9064] tc_dump_action: action bad kind [ 1020.324547][ T9064] tc_dump_action: action bad kind [ 1020.335318][ T9064] tc_dump_action: action bad kind [ 1020.342558][ T9064] tc_dump_action: action bad kind [ 1020.350981][ T9064] tc_dump_action: action bad kind [ 1020.357660][ T9064] tc_dump_action: action bad kind [ 1020.363028][ T9064] tc_dump_action: action bad kind [ 1020.368953][ T9064] tc_dump_action: action bad kind [ 1020.375148][ T9064] tc_dump_action: action bad kind [ 1020.380646][ T9064] tc_dump_action: action bad kind [ 1020.410103][ T9064] tc_dump_action: action bad kind [ 1020.425510][ T9064] tc_dump_action: action bad kind [ 1020.434726][ T9064] tc_dump_action: action bad kind [ 1020.444483][ T9064] tc_dump_action: action bad kind [ 1020.452015][ T9064] tc_dump_action: action bad kind [ 1020.457699][ T9064] tc_dump_action: action bad kind [ 1020.463118][ T9064] tc_dump_action: action bad kind [ 1020.476190][ T9064] tc_dump_action: action bad kind [ 1020.482409][ T9064] tc_dump_action: action bad kind [ 1020.492090][ T9064] tc_dump_action: action bad kind [ 1020.502162][ T9064] tc_dump_action: action bad kind [ 1020.532541][ T9064] tc_dump_action: action bad kind [ 1020.551829][ T9064] tc_dump_action: action bad kind [ 1020.587524][ T9064] tc_dump_action: action bad kind [ 1020.592794][ T9064] tc_dump_action: action bad kind [ 1020.598198][ T9064] tc_dump_action: action bad kind [ 1020.603475][ T9064] tc_dump_action: action bad kind [ 1020.608709][ T9064] tc_dump_action: action bad kind [ 1020.613949][ T9064] tc_dump_action: action bad kind [ 1020.619581][ T9064] tc_dump_action: action bad kind [ 1020.624814][ T9064] tc_dump_action: action bad kind [ 1020.645802][ T9064] tc_dump_action: action bad kind [ 1020.651131][ T9064] tc_dump_action: action bad kind [ 1020.656378][ T9064] tc_dump_action: action bad kind [ 1020.661624][ T9064] tc_dump_action: action bad kind [ 1020.666887][ T9064] tc_dump_action: action bad kind [ 1020.672177][ T9064] tc_dump_action: action bad kind [ 1020.677414][ T9064] tc_dump_action: action bad kind [ 1020.682639][ T9064] tc_dump_action: action bad kind [ 1020.687937][ T9064] tc_dump_action: action bad kind [ 1020.693171][ T9064] tc_dump_action: action bad kind [ 1020.698411][ T9064] tc_dump_action: action bad kind [ 1020.703645][ T9064] tc_dump_action: action bad kind [ 1020.713897][ T9064] tc_dump_action: action bad kind [ 1020.721856][ T9064] tc_dump_action: action bad kind [ 1020.727121][ T9064] tc_dump_action: action bad kind [ 1020.796680][ T9072] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.8819'. [ 1021.064471][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8827'. [ 1021.107888][ T9096] batadv_slave_0: entered promiscuous mode [ 1021.121177][ T9095] batadv_slave_0: left promiscuous mode [ 1021.184001][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8827'. [ 1021.249491][ T9105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8827'. [ 1021.277632][ T5630] Bluetooth: hci2: command tx timeout [ 1021.473444][ T9114] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8834'. [ 1021.492330][ T9114] netlink: 'syz.0.8834': attribute type 21 has an invalid length. [ 1021.500204][ T9114] IPv6: NLM_F_CREATE should be specified when creating new route [ 1021.590125][ T9121] netlink: 'syz.2.8836': attribute type 62 has an invalid length. [ 1021.974407][ T9139] lo speed is unknown, defaulting to 1000 [ 1022.082778][ C0] net_ratelimit: 382 callbacks suppressed [ 1022.082796][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1022.156462][ T9151] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3758374474/3758374476 [ 1022.173015][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8845'. [ 1022.281306][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8846'. [ 1022.308539][ T9151] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3758374474/3758374476 [ 1022.317798][ T9151] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3758374474/3758374476 [ 1022.641767][ T9169] FAULT_INJECTION: forcing a failure. [ 1022.641767][ T9169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.667582][ T9169] CPU: 1 UID: 0 PID: 9169 Comm: syz.0.8853 Not tainted syzkaller #0 PREEMPT(full) [ 1022.667608][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1022.667620][ T9169] Call Trace: [ 1022.667628][ T9169] [ 1022.667636][ T9169] dump_stack_lvl+0xe8/0x150 [ 1022.667662][ T9169] should_fail_ex+0x412/0x560 [ 1022.667687][ T9169] _copy_to_user+0x31/0xb0 [ 1022.667711][ T9169] simple_read_from_buffer+0xe1/0x170 [ 1022.667739][ T9169] proc_fail_nth_read+0x1bb/0x230 [ 1022.667766][ T9169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1022.667792][ T9169] ? rw_verify_area+0x2a6/0x4d0 [ 1022.667815][ T9169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1022.667840][ T9169] vfs_read+0x20c/0xa70 [ 1022.667872][ T9169] ? __pfx_vfs_read+0x10/0x10 [ 1022.667899][ T9169] ? do_sys_openat2+0x14c/0x200 [ 1022.667918][ T9169] ? kmem_cache_free+0x182/0x650 [ 1022.667941][ T9169] ? fd_install+0x94/0x3d0 [ 1022.667983][ T9169] ksys_read+0x150/0x270 [ 1022.668009][ T9169] ? __pfx_ksys_read+0x10/0x10 [ 1022.668042][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.668062][ T9169] do_syscall_64+0x174/0x580 [ 1022.668080][ T9169] ? trace_irq_disable+0x3b/0x140 [ 1022.668106][ T9169] ? clear_bhb_loop+0x40/0x90 [ 1022.668128][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.668146][ T9169] RIP: 0033:0x7faa3655d68e [ 1022.668163][ T9169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1022.668178][ T9169] RSP: 002b:00007faa37383fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1022.668196][ T9169] RAX: ffffffffffffffda RBX: 00007faa373846c0 RCX: 00007faa3655d68e [ 1022.668208][ T9169] RDX: 000000000000000f RSI: 00007faa373840a0 RDI: 0000000000000003 [ 1022.668218][ T9169] RBP: 00007faa37384090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.668229][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.668239][ T9169] R13: 00007faa36816038 R14: 00007faa36815fa0 R15: 00007fff1a6880a8 [ 1022.668269][ T9169] [ 1022.774884][ T9139] lo speed is unknown, defaulting to 1000 [ 1022.801245][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8854'. [ 1022.892398][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8854'. [ 1022.989195][ T9177] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1023.184038][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1023.246161][ T9188] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 1024.253284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1024.411960][ T9236] batadv_slave_0: entered promiscuous mode [ 1024.742572][ T9235] batadv_slave_0: left promiscuous mode [ 1024.796658][ T9245] xt_bpf: check failed: parse error [ 1025.078416][ T9251] hsr0: entered promiscuous mode [ 1025.173689][ T9252] __nla_validate_parse: 5 callbacks suppressed [ 1025.173709][ T9252] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8873'. [ 1025.189554][ T9252] hsr_slave_0: left promiscuous mode [ 1025.195942][ T9252] hsr_slave_1: left promiscuous mode [ 1025.204696][ T9252] hsr0 (unregistering): left promiscuous mode [ 1025.277758][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1026.327363][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1026.466312][ T9203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1026.830845][ T9267] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1026.855799][ T9263] netlink: 'syz.1.8877': attribute type 11 has an invalid length. [ 1026.919125][ T9275] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8882'. [ 1026.926254][ T9263] netlink: 'syz.1.8877': attribute type 4 has an invalid length. [ 1026.983323][ T9276] policy can only be matched on NF_INET_PRE_ROUTING [ 1026.983346][ T9276] unable to load match [ 1027.000149][ T9263] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.8877'. [ 1027.011793][ T9278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8883'. [ 1027.101896][ T9278] mac80211_hwsim hwsim89 syzkaller0: entered promiscuous mode [ 1027.136664][ T9278] mac80211_hwsim hwsim89 syzkaller0: entered allmulticast mode [ 1027.271930][ T9288] netlink: 'syz.3.8885': attribute type 1 has an invalid length. [ 1027.282155][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8885'. [ 1027.403286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1027.586092][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8891'. [ 1027.956902][ T9316] xfrm0: entered allmulticast mode [ 1028.256280][ T9328] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1028.263366][ T9328] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1028.378225][ T9332] SET target dimension over the limit! [ 1028.433620][ T9332] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1028.505217][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1028.583078][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1028.616473][ T9344] lo speed is unknown, defaulting to 1000 [ 1029.026556][ T9373] syzkaller0: entered promiscuous mode [ 1029.032120][ T9373] syzkaller0: entered allmulticast mode [ 1029.147177][ T9344] lo speed is unknown, defaulting to 1000 [ 1029.200918][ T9379] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8913'. [ 1029.606811][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1029.746683][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8914'. [ 1029.769632][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8914'. [ 1030.186090][ T9401] __nla_validate_parse: 1 callbacks suppressed [ 1030.186108][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8918'. [ 1030.706561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1030.835203][ T5630] Bluetooth: hci2: link tx timeout [ 1030.845784][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1030.885979][ T5631] Bluetooth: hci2: link tx timeout [ 1030.891146][ T5631] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1031.687326][ T9454] netlink: 'syz.4.8935': attribute type 1 has an invalid length. [ 1031.758720][ T9454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.778083][ T9458] vlan4: entered allmulticast mode [ 1031.783222][ T9458] bond0: entered allmulticast mode [ 1031.804969][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1031.861969][ T9454] bond0: (slave geneve4): making interface the new active one [ 1031.869485][ T9454] geneve4: entered allmulticast mode [ 1031.877180][ T9454] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 1031.888571][T25840] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.908050][T25840] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.937297][ T9462] GUP no longer grows the stack in syz.3.8937 (9462): 200000003000-20000000a000 (200000001000) [ 1031.948841][T25840] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.957559][ T9462] CPU: 1 UID: 0 PID: 9462 Comm: syz.3.8937 Not tainted syzkaller #0 PREEMPT(full) [ 1031.957591][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1031.957602][ T9462] Call Trace: [ 1031.957610][ T9462] [ 1031.957619][ T9462] dump_stack_lvl+0xe8/0x150 [ 1031.957646][ T9462] __get_user_pages+0x2378/0x2730 [ 1031.957692][ T9462] ? __gup_longterm_locked+0xc4e/0x1630 [ 1031.957714][ T9462] ? down_read_killable+0x1bb/0x340 [ 1031.957743][ T9462] __gup_longterm_locked+0xdcf/0x1630 [ 1031.957770][ T9462] ? lock_acquire+0x106/0x350 [ 1031.957807][ T9462] gup_fast_fallback+0x1d84/0x20d0 [ 1031.957863][ T9462] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1031.957883][ T9462] ? futex_unqueue+0x22/0x240 [ 1031.957903][ T9462] ? futex_unqueue+0x22/0x240 [ 1031.957919][ T9462] ? futex_unqueue+0x22/0x240 [ 1031.957937][ T9462] ? is_valid_gup_args+0x11f/0x200 [ 1031.957960][ T9462] ? get_user_pages_fast+0x4d/0xb0 [ 1031.957984][ T9462] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1031.958014][ T9462] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1031.958044][ T9462] iov_iter_get_pages2+0x5e/0xa0 [ 1031.958069][ T9462] __se_sys_vmsplice+0x7c7/0x1620 [ 1031.958115][ T9462] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1031.958139][ T9462] ? __pfx_futex_wait+0x10/0x10 [ 1031.958175][ T9462] ? fdget+0x148/0x1e0 [ 1031.958214][ T9462] ? put_files_struct+0x256/0x350 [ 1031.958233][ T9462] ? 0xffffffffff600000 [ 1031.958283][ T9462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.958304][ T9462] do_syscall_64+0x174/0x580 [ 1031.958322][ T9462] ? trace_irq_disable+0x3b/0x140 [ 1031.958347][ T9462] ? clear_bhb_loop+0x40/0x90 [ 1031.958370][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.958388][ T9462] RIP: 0033:0x7f5144f9ce59 [ 1031.958405][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.958419][ T9462] RSP: 002b:00007f5145edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1031.958438][ T9462] RAX: ffffffffffffffda RBX: 00007f5145215fa0 RCX: 00007f5144f9ce59 [ 1031.958451][ T9462] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010 [ 1031.958463][ T9462] RBP: 00007f5145032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1031.958474][ T9462] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1031.958485][ T9462] R13: 00007f5145216038 R14: 00007f5145215fa0 R15: 00007ffd4aad4d78 [ 1031.958516][ T9462] [ 1031.959370][T25840] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.495902][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8944'. [ 1032.506117][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8944'. [ 1032.524043][ T29] audit: type=1804 audit(1780085760.484:41): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8944" name="/newroot/541/memory.events" dev="tmpfs" ino=2802 res=1 errno=0 [ 1032.573157][ T29] audit: type=1800 audit(1780085760.484:42): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8944" name="memory.events" dev="tmpfs" ino=2802 res=0 errno=0 [ 1032.602888][ T29] audit: type=1804 audit(1780085760.484:43): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8944" name="/newroot/541/memory.events" dev="tmpfs" ino=2802 res=1 errno=0 [ 1032.848845][ T1107] tipc: Resetting bearer [ 1032.905705][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1033.032074][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 1033.077253][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8949'. [ 1033.180385][ T1107] bond14 (unregistering): (slave ip6gretap1): Releasing active interface [ 1033.424652][ T1107] bridge1 (unregistering): left promiscuous mode [ 1033.434630][ T1107] team0: Port device bridge1 removed [ 1033.507573][ T1107] bond10 (unregistering): (slave bridge6): Releasing backup interface [ 1033.536143][ T1107] tipc: Disabling bearer [ 1033.576262][ T1107] bond0 (unregistering): Released all slaves [ 1033.607985][ T1107] bond1 (unregistering): Released all slaves [ 1033.622022][ T1107] bond2 (unregistering): Released all slaves [ 1033.635758][ T1107] bond3 (unregistering): Released all slaves [ 1033.651650][ T1107] bond4 (unregistering): Released all slaves [ 1033.665742][ T1107] bond5 (unregistering): Released all slaves [ 1033.682214][ T1107] bond6 (unregistering): Released all slaves [ 1033.711786][ T1107] bond7 (unregistering): (slave veth3): Releasing active interface [ 1033.753968][ T1107] bond7 (unregistering): Released all slaves [ 1033.775659][ T1107] bond8 (unregistering): (slave veth7): Releasing active interface [ 1033.785983][ T1107] bond8 (unregistering): Released all slaves [ 1033.811662][ T1107] bond9 (unregistering): Released all slaves [ 1033.836113][ T1107] bond10 (unregistering): Released all slaves [ 1033.868160][ T1107] bond11 (unregistering): Released all slaves [ 1033.889412][ T1107] bond12 (unregistering): (slave veth9): Releasing active interface [ 1033.905455][ T1107] bond12 (unregistering): (slave veth11): Releasing active interface [ 1033.917717][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1033.917888][ T1107] bond12 (unregistering): Released all slaves [ 1033.944649][ T1107] bond13 (unregistering): Released all slaves [ 1033.969540][ T1107] bond14 (unregistering): Released all slaves [ 1034.000012][ T1107] bond15 (unregistering): Released all slaves [ 1034.024203][ T1107] bond16 (unregistering): Released all slaves [ 1034.044342][ T1107] bond17 (unregistering): Released all slaves [ 1034.072912][ T1107] bond18 (unregistering): Released all slaves [ 1034.099051][ T1107] bond19 (unregistering): Released all slaves [ 1034.119203][ T1107] bond20 (unregistering): Released all slaves [ 1034.146284][ T1107] bond21 (unregistering): Released all slaves [ 1034.536745][ T9537] vlan0: entered promiscuous mode [ 1034.563846][ T9537] geneve1: entered promiscuous mode [ 1034.578077][ T9537] vlan0: entered allmulticast mode [ 1034.593960][ T9537] geneve1: entered allmulticast mode [ 1034.671453][ T1107] m1Ie5nè‹Ò: left promiscuous mode [ 1034.857636][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8961'. [ 1034.905084][ T1107] tipc: Left network mode [ 1034.957399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1035.238481][ T9564] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1035.312063][ T9568] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20002 [ 1035.554217][ T9578] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8967'. [ 1035.569058][ T9581] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8967'. [ 1035.603682][ T1107] IPVS: stopping backup sync thread 15726 ... [ 1035.903397][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1035.935163][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1036.042518][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1036.199888][ T9590] syzkaller1: entered promiscuous mode [ 1036.211900][ T9590] syzkaller1: entered allmulticast mode [ 1036.375767][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8974'. [ 1036.384674][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8974'. [ 1036.492555][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8974'. [ 1036.501475][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8974'. [ 1036.510402][ T8255] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.546012][ T8255] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.554238][ T8255] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.562604][ T8255] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.890175][ T9624] netlink: 'syz.3.8978': attribute type 1 has an invalid length. [ 1037.117445][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1037.201493][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8980'. [ 1037.292322][ T9641] lo speed is unknown, defaulting to 1000 [ 1037.372017][ T9658] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1037.900162][ T9641] lo speed is unknown, defaulting to 1000 [ 1038.075771][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8988'. [ 1038.223390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1038.819639][ T9690] netlink: 'syz.0.8991': attribute type 13 has an invalid length. [ 1038.857879][ T9690] netlink: 'syz.0.8991': attribute type 17 has an invalid length. [ 1038.954893][ T9690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.981991][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.080829][ T9690] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1039.091044][ T9690] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1039.132545][ T9690] 0·: left allmulticast mode [ 1039.142040][ T9690] hsr_slave_0: left allmulticast mode [ 1039.147473][ T9690] hsr_slave_1: left allmulticast mode [ 1039.154549][ T9690] veth1_macvtap: left promiscuous mode [ 1039.161832][ T9707] netlink: 'syz.2.8995': attribute type 5 has an invalid length. [ 1039.170685][ T9690] veth0_macvtap: left promiscuous mode [ 1039.179395][ T9690] veth0_macvtap: entered promiscuous mode [ 1039.192509][ T9690] veth1_macvtap: entered promiscuous mode [ 1039.203005][ T9690] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1039.307591][ T8255] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.326528][ T8255] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.338825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1039.645822][ T8255] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.685489][ T8255] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.778374][ T9727] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1040.292248][ T9748] veth0: entered promiscuous mode [ 1040.395532][ T9754] nbd: must specify at least one socket [ 1040.424443][ T9747] veth0: left promiscuous mode [ 1040.444809][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1040.641798][ T9765] lo speed is unknown, defaulting to 1000 [ 1041.283715][ T1107] hsr_slave_0: left promiscuous mode [ 1041.364569][ T1107] veth1_macvtap: left promiscuous mode [ 1041.396786][ T1107] veth0_macvtap: left promiscuous mode [ 1041.409849][ T1107] veth1_vlan: left promiscuous mode [ 1041.415222][ T1107] veth0_vlan: left promiscuous mode [ 1041.485982][ T9794] __nla_validate_parse: 8 callbacks suppressed [ 1041.485998][ T9794] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9018'. [ 1041.556284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1042.048730][ T9765] lo speed is unknown, defaulting to 1000 [ 1042.191773][ T9788] lo speed is unknown, defaulting to 1000 [ 1042.251960][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9022'. [ 1042.366096][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9022'. [ 1042.397759][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9022'. [ 1042.576282][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1042.591197][ T9819] netlink: 196 bytes leftover after parsing attributes in process `syz.1.9024'. [ 1042.727454][ T9788] lo speed is unknown, defaulting to 1000 [ 1043.047424][ T9830] tipc: Enabled bearer , priority 0 [ 1043.055598][ T9830] syzkaller0: entered promiscuous mode [ 1043.061681][ T9830] syzkaller0: entered allmulticast mode [ 1043.129149][ T1107] IPVS: stop unused estimator thread 0... [ 1043.131177][ T9830] tipc: Resetting bearer [ 1043.160034][ T9829] tipc: Resetting bearer [ 1043.213429][ T9829] tipc: Disabling bearer [ 1043.607375][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1044.323699][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9036'. [ 1044.499901][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1044.697158][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1044.954861][ T9878] tipc: Enabling of bearer rejected, failed to enable media [ 1044.992497][ T9881] syzkaller0: entered promiscuous mode [ 1044.998014][ T9881] syzkaller0: entered allmulticast mode [ 1045.011195][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9040'. [ 1045.053299][ T9883] pim6reg: entered allmulticast mode [ 1045.094387][ T9881] veth1_to_team: entered promiscuous mode [ 1045.102083][ T9881] veth1_to_team: left promiscuous mode [ 1045.176281][ T9890] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9040'. [ 1045.210512][ T9880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1045.408758][ T9889] mac80211_hwsim hwsim89 syzkaller0: left promiscuous mode [ 1045.415994][ T9889] mac80211_hwsim hwsim89 syzkaller0: left allmulticast mode [ 1045.423392][ T9889] erspan1: left promiscuous mode [ 1045.428342][ T9889] erspan1: left allmulticast mode [ 1045.433449][ T9889] ip6gre1: left promiscuous mode [ 1045.438378][ T9889] ip6gre1: left allmulticast mode [ 1045.443685][ T9889] veth3: left allmulticast mode [ 1045.448632][ T9889] bond0: left promiscuous mode [ 1045.453388][ T9889] bridge2: left promiscuous mode [ 1045.494295][ T9889] vlan2: left allmulticast mode [ 1045.509470][ T9889] bond0: left allmulticast mode [ 1045.514357][ T9889] bridge2: left allmulticast mode [ 1045.519899][ T9889] bond1: left promiscuous mode [ 1045.524688][ T9889] bond1: left allmulticast mode [ 1045.530432][ T9889] bond3: left promiscuous mode [ 1045.535222][ T9889] bridge3: left promiscuous mode [ 1045.540401][ T9889] bond3: left allmulticast mode [ 1045.545261][ T9889] bridge3: left allmulticast mode [ 1045.551705][ T9889] bond7: left promiscuous mode [ 1045.556513][ T9889] bond7: left allmulticast mode [ 1045.562127][ T9889] bond8: left promiscuous mode [ 1045.566907][ T9889] bond8: left allmulticast mode [ 1045.572132][ T9889] bond9: left promiscuous mode [ 1045.576940][ T9889] bond9: left allmulticast mode [ 1045.582242][ T9889] bond10: left promiscuous mode [ 1045.587652][ T9889] bond10: left allmulticast mode [ 1045.592769][ T9889] bond11: left promiscuous mode [ 1045.597705][ T9889] bond11: left allmulticast mode [ 1045.602797][ T9889] bond12: left promiscuous mode [ 1045.607871][ T9889] bond12: left allmulticast mode [ 1045.612984][ T9889] bond13: left promiscuous mode [ 1045.618169][ T9889] bond13: left allmulticast mode [ 1045.623219][ T9889] bond14: left promiscuous mode [ 1045.628291][ T9889] bond14: left allmulticast mode [ 1045.633358][ T9889] bond15: left promiscuous mode [ 1045.638307][ T9889] bond15: left allmulticast mode [ 1045.644016][ T9889] gretap1: left allmulticast mode [ 1045.649857][ T9889] bond18: left allmulticast mode [ 1045.655134][ T9889] bond20: left promiscuous mode [ 1045.660066][ T9889] bridge4: left promiscuous mode [ 1045.665193][ T9889] ipvlan0: left allmulticast mode [ 1045.670540][ T9889] ipvlan1: left allmulticast mode [ 1045.675580][ T9889] bond20: left allmulticast mode [ 1045.681465][ T9889] bridge4: left allmulticast mode [ 1045.687415][ T9896] netlink: 'syz.3.9047': attribute type 12 has an invalid length. [ 1045.695987][ T9897] sch_tbf: peakrate 5120 is lower than or equals to rate 8197 ! [ 1045.706100][ T34] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.758228][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1045.802361][ T34] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.874072][ T9880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1045.972774][ T1107] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.989865][ T1107] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.128220][ T9880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1046.242727][ T9880] netdevsim netdevsim1 €Â (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1046.426160][ T9933] syzkaller0: entered promiscuous mode [ 1046.437674][ T9933] syzkaller0: entered allmulticast mode [ 1046.689197][ T9953] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9062'. [ 1046.702314][ T8256] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1046.714762][ T9942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9064'. [ 1046.715436][ T9952] mac80211_hwsim hwsim89 syzkaller0: entered promiscuous mode [ 1046.732623][ T9952] mac80211_hwsim hwsim89 syzkaller0: entered allmulticast mode [ 1046.770326][ T8256] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1046.795950][ T8258] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1046.804286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1046.882779][T25840] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1046.987838][ T9964] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9069'. [ 1047.041892][ T9973] sctp: [Deprecated]: syz.3.9071 (pid 9973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1047.041892][ T9973] Use struct sctp_sack_info instead [ 1047.080662][ T9969] team0: entered promiscuous mode [ 1047.086601][ T9969] team0: entered allmulticast mode [ 1047.095271][ T9975] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9070'. [ 1047.105175][ T9969] team0: Cannot enslave team device to itself [ 1047.210522][ T9977] netlink: 'syz.1.9072': attribute type 10 has an invalid length. [ 1047.229024][ T9977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9072'. [ 1047.247991][ T9983] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9073'. [ 1047.254148][ T9977] team0: Port device geneve1 added [ 1047.262766][ T9982] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9075'. [ 1047.273651][ T1107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.283335][ T9986] IPv6: Can't replace route, no match found [ 1047.283428][ T1107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.308703][ T9986] IPv6: Can't replace route, no match found [ 1047.316782][ T1107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.330506][T25840] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.537659][T10002] netlink: 'syz.3.9081': attribute type 142 has an invalid length. [ 1047.630461][T10013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1047.672761][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1047.826602][T10023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9084'. [ 1047.838181][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1048.130680][T10035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.179391][T10036] ip6tnl0: entered promiscuous mode [ 1048.442548][T10050] syzkaller0: entered promiscuous mode [ 1048.462759][T10050] syzkaller0: entered allmulticast mode [ 1048.513272][T10055] netlink: 'syz.3.9092': attribute type 1 has an invalid length. [ 1048.877102][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1049.123356][T10069] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20002 [ 1049.304079][T10074] sctp: [Deprecated]: syz.4.9097 (pid 10074) Use of int in max_burst socket option. [ 1049.304079][T10074] Use struct sctp_assoc_value instead [ 1049.607768][T10082] netlink: 'syz.2.9101': attribute type 1 has an invalid length. [ 1049.671419][T10082] bond16: entered promiscuous mode [ 1049.690258][T10082] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1049.928625][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1049.935835][T10102] netlink: 'syz.2.9106': attribute type 1 has an invalid length. [ 1050.965873][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1051.998580][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1052.964079][T10116] __nla_validate_parse: 77 callbacks suppressed [ 1052.964100][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9109'. [ 1052.994023][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9109'. [ 1053.037355][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1053.101241][T10121] x_tables: duplicate underflow at hook 3 [ 1053.129106][T10121] x_tables: duplicate underflow at hook 3 [ 1053.135116][T10121] x_tables: duplicate underflow at hook 3 [ 1053.356253][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9120'. [ 1053.741646][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9123'. [ 1053.805636][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9120'. [ 1053.951716][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1053.953568][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.968973][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1053.969900][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1053.993683][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1054.005508][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1054.077349][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1054.326477][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.440896][T10187] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 1054.713104][T10172] lo speed is unknown, defaulting to 1000 [ 1054.958397][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9129'. [ 1054.965266][T10172] lo speed is unknown, defaulting to 1000 [ 1054.976420][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9129'. [ 1055.127090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1055.815368][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.840681][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.879463][T10172] bridge_slave_0: entered allmulticast mode [ 1055.936619][T10172] bridge_slave_0: entered promiscuous mode [ 1056.002851][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.033803][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.060981][T10172] bridge_slave_1: entered allmulticast mode [ 1056.066286][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1056.105219][T10172] bridge_slave_1: entered promiscuous mode [ 1056.133531][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1056.150117][T10256] netlink: 348 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1056.160903][ T5630] Bluetooth: hci4: command tx timeout [ 1056.167182][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1056.205013][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.219992][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.260436][T10172] team0: Port device team_slave_0 added [ 1056.269182][T10172] team0: Port device team_slave_1 added [ 1056.303463][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.312493][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.340233][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.418270][T10259] bridge9: port 1(gretap3) entered blocking state [ 1056.451853][T10259] bridge9: port 1(gretap3) entered disabled state [ 1056.491314][T10259] gretap3: entered allmulticast mode [ 1056.503597][T10266] nbd: socks must be embedded in a SOCK_ITEM attr [ 1056.510512][T10266] block nbd7: shutting down sockets [ 1056.548676][T10259] gretap3: entered promiscuous mode [ 1056.566847][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.583857][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.653941][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.829769][T10172] hsr_slave_0: entered promiscuous mode [ 1056.846780][T10172] hsr_slave_1: entered promiscuous mode [ 1057.046567][T10297] netlink: 'syz.2.9149': attribute type 1 has an invalid length. [ 1057.104816][T10297] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1057.172214][T10172] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.197504][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1057.228305][T10172] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.283943][T10172] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.332256][T10172] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.237482][ T5630] Bluetooth: hci4: command tx timeout [ 1058.238698][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1059.277134][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1059.736095][T10277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.785556][T10172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1059.863106][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1059.892466][T10172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1059.928139][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1059.973093][T10172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1060.013979][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1060.023061][T10172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1060.034626][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1060.095218][T10317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.112067][T10317] bridge0: port 4(bond0) entered blocking state [ 1060.134534][T10317] bridge0: port 4(bond0) entered disabled state [ 1060.149191][T10327] __nla_validate_parse: 7 callbacks suppressed [ 1060.149209][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9156'. [ 1060.151847][T10317] bond0: entered allmulticast mode [ 1060.173822][T10317] bond0: entered promiscuous mode [ 1060.179586][T10317] bridge0: port 4(bond0) entered blocking state [ 1060.186021][T10317] bridge0: port 4(bond0) entered listening state [ 1060.212407][ T8254] bridge0: port 4(bond0) entered disabled state [ 1060.262863][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9156'. [ 1060.298493][T10327] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1060.317789][ T5630] Bluetooth: hci4: command tx timeout [ 1060.327162][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1060.354894][T10338] gretap0: left promiscuous mode [ 1060.374640][T10338] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9158'. [ 1060.385468][T10338] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1060.405045][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1060.415028][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1060.435730][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1060.445434][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1060.455402][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1060.465499][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1060.465568][T10348] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1060.489721][T10350] tipc: Enabling of bearer rejected, already enabled [ 1060.513009][T10351] tipc: Enabling of bearer rejected, already enabled [ 1060.521765][T10338] lo speed is unknown, defaulting to 1000 [ 1060.655536][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.714375][T10172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.737019][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.744266][ T8256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.771793][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.779055][ T8256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.166786][T10338] lo speed is unknown, defaulting to 1000 [ 1061.259155][T10378] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.9166'. [ 1061.357236][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1061.748937][T10172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.954303][T10414] veth13: entered allmulticast mode [ 1062.086879][T10420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.107565][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.140295][T10420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.153178][T10420] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1062.176933][T25840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.184158][T25840] bridge0: port 1(bridge_slave_0) entered listening state [ 1062.195279][T25840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.202550][T25840] bridge0: port 2(bridge_slave_1) entered listening state [ 1062.276639][T10418] tap0: tun_chr_ioctl cmd 1074025677 [ 1062.282846][T10418] tap0: linktype set to 773 [ 1062.397195][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1062.397280][ T5630] Bluetooth: hci4: command tx timeout [ 1062.427276][T10172] veth0_vlan: entered promiscuous mode [ 1062.446478][T10431] netlink: 'syz.1.9180': attribute type 7 has an invalid length. [ 1062.474176][T10431] netlink: 'syz.1.9180': attribute type 7 has an invalid length. [ 1062.495855][T10172] veth1_vlan: entered promiscuous mode [ 1062.541429][T10436] tunl0: left allmulticast mode [ 1062.604501][T10436] syz_tun: left promiscuous mode [ 1062.646050][T10436] 8021q: adding VLAN 0 to HW filter on device  [ 1062.667975][T10436] team0: left promiscuous mode [ 1062.680381][T10436] team0: left allmulticast mode [ 1062.696406][T10436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.712490][T10436] dummy0: left promiscuous mode [ 1062.740242][T10436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.862383][T10436] veth1_vlan: left promiscuous mode [ 1062.869146][T10436] veth0_vlan: left promiscuous mode [ 1062.875022][T10436] veth0_vlan: entered promiscuous mode [ 1062.886806][T10436] veth1_vlan: entered promiscuous mode [ 1062.895670][T10436] veth1_macvtap: left promiscuous mode [ 1062.902473][T10436] veth0_macvtap: left promiscuous mode [ 1062.909549][T10436] veth1_macvtap: entered promiscuous mode [ 1062.924647][T10436] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1062.952122][ T8256] bridge0: port 1(vlan3) entered blocking state [ 1062.958482][ T8256] bridge0: port 1(vlan3) entered forwarding state [ 1063.011973][T10448] IPVS: Error connecting to the multicast addr [ 1063.094607][T10172] veth0_macvtap: entered promiscuous mode [ 1063.109047][T10172] veth1_macvtap: entered promiscuous mode [ 1063.144033][T10172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.176399][T10172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.186735][T10455] xt_l2tp: invalid flags combination: 8 [ 1063.204909][ T8258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.222639][ T8258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.234510][T10455] netlink: 'syz.1.9188': attribute type 1 has an invalid length. [ 1063.244179][ T8258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.259501][ T8254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.272717][T10455] gre0: entered promiscuous mode [ 1063.279989][T10455] gre0: entered allmulticast mode [ 1063.447932][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1063.573276][ T8254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.605278][ T8254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.701308][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.725234][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.815119][T10480] bridge0: port 1(batadv1) entered blocking state [ 1063.831742][T10480] bridge0: port 1(batadv1) entered disabled state [ 1063.845139][T10480] batadv1: entered allmulticast mode [ 1063.860456][T10480] batadv1: entered promiscuous mode [ 1064.148951][T10496] hsr_slave_1 (unregistering): left promiscuous mode [ 1064.307516][ T8256] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1064.319081][ T8256] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1064.478155][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1064.557258][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1065.006154][T10542] xt_l2tp: v2 sid > 0xffff: 8388608 [ 1065.131445][T10546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.166787][T10547] __nla_validate_parse: 78 callbacks suppressed [ 1065.166808][T10547] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9213'. [ 1065.517123][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1065.611480][T10547] bridge0: port 1(vlan3) entered disabled state [ 1065.667767][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9218'. [ 1065.703579][T10563] l2tp_ppp: sess 2/0: no socket in recv [ 1066.141651][T10574] netlink: 'syz.2.9221': attribute type 1 has an invalid length. [ 1066.519423][T10574] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1066.522061][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9223'. [ 1066.557318][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1066.585528][T10575] bond18: (slave geneve2): making interface the new active one [ 1066.596344][T10575] bond18: (slave geneve2): Enslaving as an active interface with an up link [ 1066.605785][ T8258] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.631950][ T8258] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.710727][ T8258] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.726300][ T8258] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.752583][ T8258] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.782479][ T8258] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.817607][ T8258] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.844981][ T8258] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.886735][T10590] netlink: 'syz.0.9225': attribute type 2 has an invalid length. [ 1066.915078][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9225'. [ 1067.069090][T10594] lo speed is unknown, defaulting to 1000 [ 1067.409116][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1067.433433][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1067.444155][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1067.452421][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1067.460400][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1067.597204][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1067.685707][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9233'. [ 1068.100475][T30102] : (slave syz_tun): Releasing backup interface [ 1068.139379][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9234'. [ 1068.261974][T10648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.285080][T10594] lo speed is unknown, defaulting to 1000 [ 1068.452378][T10618] lo speed is unknown, defaulting to 1000 [ 1068.637390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1069.053157][T10618] lo speed is unknown, defaulting to 1000 [ 1069.153103][T10681] netlink: 'syz.1.9240': attribute type 1 has an invalid length. [ 1069.162186][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9242'. [ 1069.179557][T10681] netlink: 'syz.1.9240': attribute type 2 has an invalid length. [ 1069.202470][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9240'. [ 1069.213882][T10683] ip6gre1: entered promiscuous mode [ 1069.241056][T10683] ip6gre1: entered allmulticast mode [ 1069.412193][T10688] netlink: 10184 bytes leftover after parsing attributes in process `syz.1.9244'. [ 1069.459570][T10688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9244'. [ 1069.517110][ T5631] Bluetooth: hci3: command tx timeout [ 1069.677174][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1069.849683][T10703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.869036][T10703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.110323][T10686] tipc: Resetting bearer [ 1070.483234][T10726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9252'. [ 1070.543551][T10730] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 1070.602917][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9254'. [ 1070.644174][T10735] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9256'. [ 1070.653863][T10735] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1070.717542][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1071.232486][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.241286][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.249600][T10618] bridge_slave_0: entered allmulticast mode [ 1071.256896][T10618] bridge_slave_0: entered promiscuous mode [ 1071.277949][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.286448][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.295991][T10618] bridge_slave_1: entered allmulticast mode [ 1071.309253][T10618] bridge_slave_1: entered promiscuous mode [ 1071.345730][T10772] syzkaller1: entered allmulticast mode [ 1071.366886][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9262'. [ 1071.370728][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.404820][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.493756][T10618] team0: Port device team_slave_0 added [ 1071.503131][T10618] team0: Port device team_slave_1 added [ 1071.569159][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.582580][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.615224][ T5631] Bluetooth: hci3: command tx timeout [ 1071.625769][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.641147][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.652384][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.679598][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.707557][T10755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1071.734366][T10784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1071.755564][T10618] hsr_slave_0: entered promiscuous mode [ 1071.765246][T10618] hsr_slave_1: entered promiscuous mode [ 1071.767199][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1071.772075][T10618] debugfs: 'hsr0' already exists in 'hsr' [ 1071.783744][T10618] Cannot create hsr debugfs directory [ 1071.935035][ T8254] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1072.052559][T10793] netlink: 'syz.2.9268': attribute type 15 has an invalid length. [ 1072.078924][T10793] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9268'. [ 1072.797081][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1073.677179][ T5631] Bluetooth: hci3: command tx timeout [ 1073.837197][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1074.802937][T10787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1074.877071][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1074.883088][T10618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1074.961944][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.990761][T10618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1075.004610][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.023573][T10618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1075.036433][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.053724][T10618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1075.064615][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.111345][T10834] netlink: 165 bytes leftover after parsing attributes in process `syz.0.9278'. [ 1075.169624][T10845] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1075.185105][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9279'. [ 1075.279214][T10852] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1075.405313][T10618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.478933][T10618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.522433][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9283'. [ 1075.533729][T25840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.540951][T25840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.563274][T25840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.570499][T25840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.594852][T10865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1075.758845][ T5631] Bluetooth: hci3: command tx timeout [ 1075.842227][T10882] netlink: 165 bytes leftover after parsing attributes in process `syz.3.9292'. [ 1076.133142][T10897] pim6reg1: entered allmulticast mode [ 1076.226233][ T8256] bond0: (slave bond_slave_0): interface is now down [ 1076.279329][ T8256] bond0: (slave bond_slave_1): interface is now down [ 1076.467329][ T8256] bond0: (slave bond_slave_0): interface is now down [ 1076.498131][ T8256] bond0: (slave bond_slave_1): interface is now down [ 1076.584929][ T8256] bond0: now running without any active interface! [ 1076.595972][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9309'. [ 1076.693514][T10618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.419946][T10960] Cannot find del_set index 3 as target [ 1077.468019][T10618] veth0_vlan: entered promiscuous mode [ 1077.511924][T10618] veth1_vlan: entered promiscuous mode [ 1077.598049][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9311'. [ 1077.641578][T10618] veth0_macvtap: entered promiscuous mode [ 1077.674938][T10618] veth1_macvtap: entered promiscuous mode [ 1077.729353][T10618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.755889][T10618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.785000][ T8254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.803518][ T8254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.832413][ T8254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.851775][ T8254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.961904][T10949] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1078.105397][ T8256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.130678][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9317'. [ 1078.142567][ T8256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.229521][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.256254][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.280278][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1078.295248][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1078.452760][T10998] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1078.632882][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9229'. [ 1078.782754][T11017] netlink: 'syz.3.9325': attribute type 11 has an invalid length. [ 1078.795793][T11004] lo speed is unknown, defaulting to 1000 [ 1079.001777][T11023] netlink: 'syz.4.9328': attribute type 2 has an invalid length. [ 1079.091305][T11027] netlink: 272 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1079.165359][T11035] FAULT_INJECTION: forcing a failure. [ 1079.165359][T11035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.215731][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1079.232431][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1079.242931][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1079.243375][T11035] CPU: 0 UID: 0 PID: 11035 Comm: syz.3.9330 Not tainted syzkaller #0 PREEMPT(full) [ 1079.243397][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1079.243408][T11035] Call Trace: [ 1079.243415][T11035] [ 1079.243423][T11035] dump_stack_lvl+0xe8/0x150 [ 1079.243448][T11035] should_fail_ex+0x412/0x560 [ 1079.243473][T11035] _copy_from_user+0x2d/0xb0 [ 1079.243495][T11035] ___sys_sendmsg+0x1c6/0x360 [ 1079.243521][T11035] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.243545][T11035] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.243597][T11035] ? __fget_files+0x2a/0x420 [ 1079.243617][T11035] ? __fget_files+0x3a0/0x420 [ 1079.243647][T11035] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1079.243670][T11035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1079.243698][T11035] ? __pfx_ksys_write+0x10/0x10 [ 1079.243731][T11035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.243750][T11035] do_syscall_64+0x174/0x580 [ 1079.243768][T11035] ? trace_irq_disable+0x3b/0x140 [ 1079.243792][T11035] ? clear_bhb_loop+0x40/0x90 [ 1079.243813][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.243831][T11035] RIP: 0033:0x7f52d239ce59 [ 1079.243848][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.243862][T11035] RSP: 002b:00007f52d05f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.243881][T11035] RAX: ffffffffffffffda RBX: 00007f52d2616090 RCX: 00007f52d239ce59 [ 1079.243893][T11035] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 1079.243904][T11035] RBP: 00007f52d05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.243915][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.243926][T11035] R13: 00007f52d2616128 R14: 00007f52d2616090 R15: 00007ffd936e9a38 [ 1079.243955][T11035] [ 1079.450311][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1079.464012][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1079.699375][T11004] lo speed is unknown, defaulting to 1000 [ 1079.837405][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.897287][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1080.163396][T11063] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 1080.235392][T11032] lo speed is unknown, defaulting to 1000 [ 1080.241757][ T1107] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1080.361886][T11073] netlink: 'syz.3.9336': attribute type 1 has an invalid length. [ 1080.384528][T11080] netlink: 'syz.3.9336': attribute type 1 has an invalid length. [ 1080.695520][T11032] lo speed is unknown, defaulting to 1000 [ 1080.749482][T11091] netlink: 'syz.0.9338': attribute type 29 has an invalid length. [ 1081.292307][ T8256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1081.304691][ T8256] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1081.529046][ T5630] Bluetooth: hci5: command tx timeout [ 1081.798395][T31749] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1082.041049][T11117] FAULT_INJECTION: forcing a failure. [ 1082.041049][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.055386][T11117] CPU: 1 UID: 0 PID: 11117 Comm: syz.0.9342 Not tainted syzkaller #0 PREEMPT(full) [ 1082.055415][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1082.055425][T11117] Call Trace: [ 1082.055432][T11117] [ 1082.055440][T11117] dump_stack_lvl+0xe8/0x150 [ 1082.055465][T11117] should_fail_ex+0x412/0x560 [ 1082.055486][T11117] should_failslab+0xa8/0x100 [ 1082.055503][T11117] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1082.055534][T11117] ? __alloc_skb+0x186/0x7d0 [ 1082.055550][T11117] ? __alloc_skb+0x1d0/0x7d0 [ 1082.055564][T11117] ? __local_bh_enable_ip+0xd0/0x130 [ 1082.055588][T11117] __alloc_skb+0x1d0/0x7d0 [ 1082.055609][T11117] netlink_sendmsg+0x5d4/0xb40 [ 1082.055639][T11117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.055662][T11117] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1082.055688][T11117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1082.055714][T11117] ____sys_sendmsg+0x972/0x9f0 [ 1082.055733][T11117] ? __might_fault+0xaf/0x130 [ 1082.055757][T11117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1082.055782][T11117] ? import_iovec+0x73/0xa0 [ 1082.055803][T11117] ___sys_sendmsg+0x2a5/0x360 [ 1082.055818][T11117] ? __lock_acquire+0x6b5/0x2cf0 [ 1082.055839][T11117] ? __pfx____sys_sendmsg+0x10/0x10 [ 1082.055895][T11117] ? __fget_files+0x2a/0x420 [ 1082.055914][T11117] ? __fget_files+0x3a0/0x420 [ 1082.055940][T11117] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1082.055960][T11117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1082.055988][T11117] ? __pfx_ksys_write+0x10/0x10 [ 1082.056020][T11117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.056039][T11117] do_syscall_64+0x174/0x580 [ 1082.056057][T11117] ? trace_irq_disable+0x3b/0x140 [ 1082.056081][T11117] ? clear_bhb_loop+0x40/0x90 [ 1082.056104][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.056121][T11117] RIP: 0033:0x7faa3659ce59 [ 1082.056138][T11117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.056153][T11117] RSP: 002b:00007faa37384028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.056171][T11117] RAX: ffffffffffffffda RBX: 00007faa36815fa0 RCX: 00007faa3659ce59 [ 1082.056182][T11117] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 1082.056194][T11117] RBP: 00007faa37384090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.056205][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.056216][T11117] R13: 00007faa36816038 R14: 00007faa36815fa0 R15: 00007fff1a6880a8 [ 1082.056245][T11117] [ 1082.473263][T11126] __nla_validate_parse: 4 callbacks suppressed [ 1082.473280][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1082.515907][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1082.531892][T11032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.539708][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.547430][T11032] bridge_slave_0: entered allmulticast mode [ 1082.555250][T11032] bridge_slave_0: entered promiscuous mode [ 1082.572376][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9345'. [ 1082.597843][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1082.597852][T11032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.597996][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.609136][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1082.616185][T11032] bridge_slave_1: entered allmulticast mode [ 1082.644767][T11032] bridge_slave_1: entered promiscuous mode [ 1082.656692][ T8255] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.668608][ T8255] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.678306][ T8255] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.690939][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9347'. [ 1082.763975][ T8255] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1082.823195][T11032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.873480][T11032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.950409][T11148] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1082.982514][T11032] team0: Port device team_slave_0 added [ 1082.998042][T11032] team0: Port device team_slave_1 added [ 1083.093465][T11032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.107440][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.154113][T11032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.182732][T11032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.191008][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9353'. [ 1083.209615][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.244139][T11032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.314204][T11152] syzkaller0: entered promiscuous mode [ 1083.323618][T11152] syzkaller0: entered allmulticast mode [ 1083.345367][T11175] xt_HMARK: proto mask must be zero with L3 mode [ 1083.431507][T11032] hsr_slave_0: entered promiscuous mode [ 1083.448772][T11032] hsr_slave_1: entered promiscuous mode [ 1083.451225][T11178] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1083.461650][T11032] debugfs: 'hsr0' already exists in 'hsr' [ 1083.461673][T11032] Cannot create hsr debugfs directory [ 1083.597444][ T5630] Bluetooth: hci5: command tx timeout [ 1083.774042][T11191] FAULT_INJECTION: forcing a failure. [ 1083.774042][T11191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.788189][T11191] CPU: 1 UID: 0 PID: 11191 Comm: syz.0.9366 Not tainted syzkaller #0 PREEMPT(full) [ 1083.788214][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1083.788225][T11191] Call Trace: [ 1083.788233][T11191] [ 1083.788241][T11191] dump_stack_lvl+0xe8/0x150 [ 1083.788267][T11191] should_fail_ex+0x412/0x560 [ 1083.788292][T11191] _copy_from_iter+0x1d3/0x1670 [ 1083.788315][T11191] ? rcu_is_watching+0x15/0xb0 [ 1083.788343][T11191] ? __pfx__copy_from_iter+0x10/0x10 [ 1083.788371][T11191] ? netlink_sendmsg+0x650/0xb40 [ 1083.788390][T11191] ? skb_put+0x11b/0x210 [ 1083.788413][T11191] netlink_sendmsg+0x6c0/0xb40 [ 1083.788443][T11191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.788467][T11191] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1083.788495][T11191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1083.788523][T11191] ____sys_sendmsg+0x972/0x9f0 [ 1083.788544][T11191] ? __might_fault+0xaf/0x130 [ 1083.788573][T11191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1083.788603][T11191] ? import_iovec+0x73/0xa0 [ 1083.788635][T11191] ___sys_sendmsg+0x2a5/0x360 [ 1083.788657][T11191] ? __lock_acquire+0x6b5/0x2cf0 [ 1083.788681][T11191] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.788735][T11191] ? __fget_files+0x2a/0x420 [ 1083.788756][T11191] ? __fget_files+0x3a0/0x420 [ 1083.788787][T11191] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1083.788809][T11191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1083.788837][T11191] ? __pfx_ksys_write+0x10/0x10 [ 1083.788869][T11191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.788889][T11191] do_syscall_64+0x174/0x580 [ 1083.788908][T11191] ? trace_irq_disable+0x3b/0x140 [ 1083.788934][T11191] ? clear_bhb_loop+0x40/0x90 [ 1083.788957][T11191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.788975][T11191] RIP: 0033:0x7faa3659ce59 [ 1083.788992][T11191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.789007][T11191] RSP: 002b:00007faa37384028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.789026][T11191] RAX: ffffffffffffffda RBX: 00007faa36815fa0 RCX: 00007faa3659ce59 [ 1083.789039][T11191] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 1083.789051][T11191] RBP: 00007faa37384090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.789062][T11191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.789073][T11191] R13: 00007faa36816038 R14: 00007faa36815fa0 R15: 00007fff1a6880a8 [ 1083.789102][T11191] [ 1084.134177][T11184] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9364'. [ 1084.271006][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9367'. [ 1084.307841][T11032] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1084.320266][T11032] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.446008][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9372'. [ 1084.464973][T11213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.473165][T11213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.492124][T11213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.513236][T11213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.619159][T11032] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1084.654277][T11032] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.775748][T11032] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1084.799438][T11032] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.884262][T11032] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1084.918069][T11032] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.942925][T11236] FAULT_INJECTION: forcing a failure. [ 1084.942925][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.969861][T11236] CPU: 1 UID: 0 PID: 11236 Comm: syz.4.9377 Not tainted syzkaller #0 PREEMPT(full) [ 1084.969886][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1084.969898][T11236] Call Trace: [ 1084.969906][T11236] [ 1084.969914][T11236] dump_stack_lvl+0xe8/0x150 [ 1084.969940][T11236] should_fail_ex+0x412/0x560 [ 1084.969972][T11236] should_failslab+0xa8/0x100 [ 1084.969991][T11236] ? skb_clone+0x212/0x3a0 [ 1084.970011][T11236] kmem_cache_alloc_noprof+0x87/0x650 [ 1084.970037][T11236] ? __netlink_lookup+0xc6/0x8b0 [ 1084.970064][T11236] skb_clone+0x212/0x3a0 [ 1084.970088][T11236] __netlink_deliver_tap+0x404/0x850 [ 1084.970122][T11236] ? netlink_deliver_tap+0x2e/0x1b0 [ 1084.970144][T11236] netlink_deliver_tap+0x19c/0x1b0 [ 1084.970166][T11236] netlink_unicast+0x730/0x8e0 [ 1084.970195][T11236] netlink_sendmsg+0x813/0xb40 [ 1084.970226][T11236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.970251][T11236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1084.970278][T11236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1084.970305][T11236] ____sys_sendmsg+0x972/0x9f0 [ 1084.970324][T11236] ? __might_fault+0xaf/0x130 [ 1084.970352][T11236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.970379][T11236] ? import_iovec+0x73/0xa0 [ 1084.970403][T11236] ___sys_sendmsg+0x2a5/0x360 [ 1084.970423][T11236] ? __lock_acquire+0x6b5/0x2cf0 [ 1084.970446][T11236] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.970506][T11236] ? __fget_files+0x2a/0x420 [ 1084.970527][T11236] ? __fget_files+0x3a0/0x420 [ 1084.970559][T11236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1084.970582][T11236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1084.970613][T11236] ? __pfx_ksys_write+0x10/0x10 [ 1084.970647][T11236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.970667][T11236] do_syscall_64+0x174/0x580 [ 1084.970686][T11236] ? trace_irq_disable+0x3b/0x140 [ 1084.970711][T11236] ? clear_bhb_loop+0x40/0x90 [ 1084.970734][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.970751][T11236] RIP: 0033:0x7fce5fd9ce59 [ 1084.970768][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.970783][T11236] RSP: 002b:00007fce60c9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.970803][T11236] RAX: ffffffffffffffda RBX: 00007fce60016090 RCX: 00007fce5fd9ce59 [ 1084.970815][T11236] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 1084.970827][T11236] RBP: 00007fce60c9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.970837][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.970848][T11236] R13: 00007fce60016128 R14: 00007fce60016090 R15: 00007ffce7768288 [ 1084.970880][T11236] [ 1085.367132][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1085.459106][T11032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.481282][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.491756][T11032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.521171][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.543267][T11032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.590349][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.606710][T11032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.640307][T11032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.683514][ T5630] Bluetooth: hci5: command tx timeout [ 1085.796829][T11252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.811980][T11252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.052446][T11268] Bluetooth: MGMT ver 1.23 [ 1086.120294][T11275] FAULT_INJECTION: forcing a failure. [ 1086.120294][T11275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.156054][T11275] CPU: 0 UID: 0 PID: 11275 Comm: syz.4.9388 Not tainted syzkaller #0 PREEMPT(full) [ 1086.156084][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.156095][T11275] Call Trace: [ 1086.156103][T11275] [ 1086.156110][T11275] dump_stack_lvl+0xe8/0x150 [ 1086.156136][T11275] should_fail_ex+0x412/0x560 [ 1086.156161][T11275] _copy_from_iter+0x1d3/0x1670 [ 1086.156184][T11275] ? rcu_is_watching+0x15/0xb0 [ 1086.156211][T11275] ? __pfx__copy_from_iter+0x10/0x10 [ 1086.156237][T11275] ? netlink_sendmsg+0x650/0xb40 [ 1086.156258][T11275] ? skb_put+0x11b/0x210 [ 1086.156280][T11275] netlink_sendmsg+0x6c0/0xb40 [ 1086.156317][T11275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.156339][T11275] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1086.156365][T11275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1086.156392][T11275] ____sys_sendmsg+0x972/0x9f0 [ 1086.156412][T11275] ? __might_fault+0xaf/0x130 [ 1086.156440][T11275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.156469][T11275] ? import_iovec+0x73/0xa0 [ 1086.156494][T11275] ___sys_sendmsg+0x2a5/0x360 [ 1086.156513][T11275] ? __lock_acquire+0x6b5/0x2cf0 [ 1086.156536][T11275] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.156592][T11275] ? __fget_files+0x2a/0x420 [ 1086.156613][T11275] ? __fget_files+0x3a0/0x420 [ 1086.156644][T11275] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1086.156667][T11275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.156698][T11275] ? __pfx_ksys_write+0x10/0x10 [ 1086.156731][T11275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.156751][T11275] do_syscall_64+0x174/0x580 [ 1086.156769][T11275] ? trace_irq_disable+0x3b/0x140 [ 1086.156794][T11275] ? clear_bhb_loop+0x40/0x90 [ 1086.156817][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.156834][T11275] RIP: 0033:0x7fce5fd9ce59 [ 1086.156852][T11275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.156866][T11275] RSP: 002b:00007fce60c9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.156887][T11275] RAX: ffffffffffffffda RBX: 00007fce60016090 RCX: 00007fce5fd9ce59 [ 1086.156900][T11275] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 1086.156912][T11275] RBP: 00007fce60c9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.156923][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.156934][T11275] R13: 00007fce60016128 R14: 00007fce60016090 R15: 00007ffce7768288 [ 1086.156962][T11275] [ 1086.449500][T11252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.463935][T11252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.519328][T11032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.558120][T11032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.616096][T11252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.628943][T11252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.686276][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.693520][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.729455][T11281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1086.808189][T11252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.820317][T11252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.836769][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.843949][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.919123][T11279] syzkaller0: entered promiscuous mode [ 1086.924902][T11279] syzkaller0: entered allmulticast mode [ 1087.059824][ T8254] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.075573][ T8254] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.141265][ T8254] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.154088][ T8254] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.204235][ T1107] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.216155][ T1107] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.259997][ T1107] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.270790][ T1107] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.771701][ T5630] Bluetooth: hci5: command tx timeout [ 1087.853422][T11327] __nla_validate_parse: 2 callbacks suppressed [ 1087.853443][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1087.912944][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1087.935581][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1087.946715][T11032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.041444][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9397'. [ 1088.046118][T11032] veth0_vlan: entered promiscuous mode [ 1088.069561][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9397'. [ 1088.072136][T11032] veth1_vlan: entered promiscuous mode [ 1088.115244][T11331] xt_hashlimit: max too large, truncated to 1048576 [ 1088.122354][T11032] veth0_macvtap: entered promiscuous mode [ 1088.133386][T11032] veth1_macvtap: entered promiscuous mode [ 1088.172420][T11032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.192403][T11032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.211219][T11313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.231220][T11313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.268313][T11313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.305108][T11313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.459197][T11313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.483776][T11313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.538102][T11313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.556813][T11313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.670452][T11337] FAULT_INJECTION: forcing a failure. [ 1088.670452][T11337] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.707096][T11337] CPU: 1 UID: 0 PID: 11337 Comm: syz.2.9399 Not tainted syzkaller #0 PREEMPT(full) [ 1088.707121][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1088.707132][T11337] Call Trace: [ 1088.707138][T11337] [ 1088.707146][T11337] dump_stack_lvl+0xe8/0x150 [ 1088.707172][T11337] should_fail_ex+0x412/0x560 [ 1088.707196][T11337] should_failslab+0xa8/0x100 [ 1088.707216][T11337] __kmalloc_cache_noprof+0x88/0x660 [ 1088.707240][T11337] ? cls_bpf_init+0x50/0x130 [ 1088.707342][T11337] cls_bpf_init+0x50/0x130 [ 1088.707363][T11337] tcf_proto_create+0x248/0x330 [ 1088.707449][T11337] tc_new_tfilter+0x12ff/0x1780 [ 1088.707494][T11337] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1088.707528][T11337] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1088.707560][T11337] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1088.707580][T11337] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1088.707605][T11337] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1088.707629][T11337] ? netlink_sendmsg+0x5d4/0xb40 [ 1088.707649][T11337] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1088.707666][T11337] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1088.707685][T11337] ? __lock_acquire+0x6b5/0x2cf0 [ 1088.707718][T11337] netlink_rcv_skb+0x232/0x4b0 [ 1088.707740][T11337] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1088.707759][T11337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1088.707792][T11337] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.707812][T11337] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.707839][T11337] netlink_unicast+0x75c/0x8e0 [ 1088.707868][T11337] netlink_sendmsg+0x813/0xb40 [ 1088.707897][T11337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.707922][T11337] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1088.707949][T11337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1088.707976][T11337] ____sys_sendmsg+0x972/0x9f0 [ 1088.707997][T11337] ? __might_fault+0xaf/0x130 [ 1088.708027][T11337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1088.708057][T11337] ? import_iovec+0x73/0xa0 [ 1088.708082][T11337] ___sys_sendmsg+0x2a5/0x360 [ 1088.708102][T11337] ? __lock_acquire+0x6b5/0x2cf0 [ 1088.708125][T11337] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.708183][T11337] ? __fget_files+0x2a/0x420 [ 1088.708204][T11337] ? __fget_files+0x3a0/0x420 [ 1088.708235][T11337] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1088.708258][T11337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1088.708287][T11337] ? __pfx_ksys_write+0x10/0x10 [ 1088.708321][T11337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.708342][T11337] do_syscall_64+0x174/0x580 [ 1088.708362][T11337] ? trace_irq_disable+0x3b/0x140 [ 1088.708387][T11337] ? clear_bhb_loop+0x40/0x90 [ 1088.708410][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.708428][T11337] RIP: 0033:0x7fb43d99ce59 [ 1088.708446][T11337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.708461][T11337] RSP: 002b:00007fb43bbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.708481][T11337] RAX: ffffffffffffffda RBX: 00007fb43dc15fa0 RCX: 00007fb43d99ce59 [ 1088.708494][T11337] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 1088.708505][T11337] RBP: 00007fb43bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.708517][T11337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.708527][T11337] R13: 00007fb43dc16038 R14: 00007fb43dc15fa0 R15: 00007fffe7e14878 [ 1088.708557][T11337] [ 1088.881257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1089.085908][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9400'. [ 1089.382774][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1089.409849][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1089.425330][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1089.437342][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1089.451204][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1090.245063][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1091.524149][ T5630] Bluetooth: hci1: command tx timeout [ 1092.728833][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1092.736166][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1092.793998][T11313] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.854209][T11313] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.022944][T11313] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.038611][T11392] FAULT_INJECTION: forcing a failure. [ 1093.038611][T11392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.052098][T11313] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.090504][T11392] CPU: 1 UID: 0 PID: 11392 Comm: syz.0.9412 Not tainted syzkaller #0 PREEMPT(full) [ 1093.090530][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1093.090541][T11392] Call Trace: [ 1093.090549][T11392] [ 1093.090557][T11392] dump_stack_lvl+0xe8/0x150 [ 1093.090583][T11392] should_fail_ex+0x412/0x560 [ 1093.090610][T11392] _copy_from_user+0x2d/0xb0 [ 1093.090633][T11392] kstrtouint_from_user+0xd6/0x180 [ 1093.090655][T11392] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1093.090691][T11392] proc_fail_nth_write+0x8e/0x210 [ 1093.090715][T11392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1093.090744][T11392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1093.090768][T11392] vfs_write+0x29a/0xb90 [ 1093.090803][T11392] ? __pfx_vfs_write+0x10/0x10 [ 1093.090829][T11392] ? __fget_files+0x2a/0x420 [ 1093.090855][T11392] ? __fget_files+0x3a0/0x420 [ 1093.090876][T11392] ? __fget_files+0x2a/0x420 [ 1093.090906][T11392] ksys_write+0x150/0x270 [ 1093.090934][T11392] ? __pfx_ksys_write+0x10/0x10 [ 1093.090968][T11392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.090989][T11392] do_syscall_64+0x174/0x580 [ 1093.091010][T11392] ? trace_irq_disable+0x3b/0x140 [ 1093.091036][T11392] ? clear_bhb_loop+0x40/0x90 [ 1093.091058][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.091076][T11392] RIP: 0033:0x7faa3655d68e [ 1093.091093][T11392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1093.091108][T11392] RSP: 002b:00007faa37383fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1093.091127][T11392] RAX: ffffffffffffffda RBX: 00007faa373846c0 RCX: 00007faa3655d68e [ 1093.091140][T11392] RDX: 0000000000000001 RSI: 00007faa373840a0 RDI: 0000000000000005 [ 1093.091151][T11392] RBP: 00007faa37384090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.091162][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.091172][T11392] R13: 00007faa36816038 R14: 00007faa36815fa0 R15: 00007fff1a6880a8 [ 1093.091211][T11392] [ 1093.431103][T11313] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.460822][T11313] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.579933][T11409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1093.598000][ T5630] Bluetooth: hci1: command tx timeout [ 1093.600835][T11405] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1093.614386][T11412] netlink: 'syz.0.9418': attribute type 1 has an invalid length. [ 1093.630915][T11405] bond1 (unregistering): Released all slaves [ 1093.699770][T11313] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.731782][T11313] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.790530][T11417] gretap2: entered allmulticast mode [ 1093.800627][T11345] lo speed is unknown, defaulting to 1000 [ 1093.811633][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9420'. [ 1093.863176][T11424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9420'. [ 1093.922640][T11426] netlink: 'syz.0.9421': attribute type 1 has an invalid length. [ 1093.997199][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1094.040193][T11426] bond23: entered promiscuous mode [ 1094.051869][T11426] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1094.083504][T11426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9421'. [ 1094.181636][T11398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1094.202367][T11398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1094.227409][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9421'. [ 1094.294019][T11426] macvtap1: entered allmulticast mode [ 1094.306936][ T34] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.391125][T11485] netlink: 'syz.4.9423': attribute type 3 has an invalid length. [ 1094.401101][T11345] lo speed is unknown, defaulting to 1000 [ 1094.425663][ T8256] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.503803][T11485] nbd: nbd4 already in use [ 1094.516941][ T6702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.529285][T11485] block nbd4: NBD_DISCONNECT [ 1094.534186][T11485] block nbd4: Send disconnect failed -32 [ 1094.603025][T11485] block nbd4: shutting down sockets [ 1094.626735][ T8256] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.691890][T11313] bridge_slave_1: left allmulticast mode [ 1094.704167][T11313] bridge_slave_1: left promiscuous mode [ 1094.726480][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.873194][T11313] bridge_slave_0: left allmulticast mode [ 1094.902915][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.996060][T11313] veth9: left allmulticast mode [ 1095.032857][T11313] tipc: Resetting bearer [ 1095.129188][T11550] siw: device registration error -23 [ 1095.287511][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1095.346370][T11313] bond5 (unregistering): (slave ip6gretap0): Releasing active interface [ 1095.380542][T11313] bond6 (unregistering): (slave ip6gre1): Releasing backup interface [ 1095.392854][T11313] ip6gre1 (unregistering): left promiscuous mode [ 1095.687810][ T5630] Bluetooth: hci1: command tx timeout [ 1095.946344][T11313] bond10 (unregistering): (slave gretap1): Releasing active interface [ 1096.030523][T11313] bond18 (unregistering): (slave geneve2): Releasing active interface [ 1096.264130][T11313] tipc: Disabling bearer [ 1096.369274][T11313] bond1 (unregistering): Released all slaves [ 1096.400540][T11313] bond2 (unregistering): Released all slaves [ 1096.433212][T11313] bond3 (unregistering): Released all slaves [ 1096.452229][T11313] bond4 (unregistering): Released all slaves [ 1096.495510][T11313] bond0 (unregistering): Released all slaves [ 1096.538556][T11313] bond5 (unregistering): Released all slaves [ 1096.559080][T11313] bond6 (unregistering): Released all slaves [ 1096.579995][T11313] bond7 (unregistering): Released all slaves [ 1096.632173][T11313] bond8 (unregistering): (slave batadv1): Releasing backup interface [ 1096.702633][T11313] bond8 (unregistering): Released all slaves [ 1096.723079][T11313] bond9 (unregistering): Released all slaves [ 1096.780777][T11313] bond10 (unregistering): Released all slaves [ 1096.818603][T11313] bond11 (unregistering): (slave bond12): Releasing backup interface [ 1096.848638][T11313] bond11 (unregistering): Released all slaves [ 1096.882499][T11313] bond12 (unregistering): Released all slaves [ 1096.941224][T11313] bond13 (unregistering): (slave bond14): Releasing backup interface [ 1096.972347][T11313] bond13 (unregistering): Released all slaves [ 1096.990532][T11313] bond14 (unregistering): Released all slaves [ 1097.021583][T11313] bond15 (unregistering): Released all slaves [ 1097.073674][T11313] bond16 (unregistering): Released all slaves [ 1097.093629][T11313] bond17 (unregistering): Released all slaves [ 1097.113225][T11313] bond18 (unregistering): Released all slaves [ 1097.236247][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1097.510178][T11594] hsr0: entered promiscuous mode [ 1097.654497][T11313] tipc: Disabling bearer [ 1097.677882][T11313] tipc: Left network mode [ 1097.759604][ T5630] Bluetooth: hci1: command tx timeout [ 1098.045685][T11610] tipc: Started in network mode [ 1098.058096][T11610] tipc: Node identity 3ab0595b9858, cluster identity 4711 [ 1098.084738][T11610] tipc: Enabled bearer , priority 0 [ 1098.240942][T11618] syzkaller0: entered promiscuous mode [ 1098.259131][T11618] syzkaller0: entered allmulticast mode [ 1098.532109][T11630] tipc: Resetting bearer [ 1098.644499][T11608] tipc: Resetting bearer [ 1098.751800][T11608] tipc: Disabling bearer [ 1098.886625][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1099.030621][T11655] netlink: 'syz.1.9447': attribute type 1 has an invalid length. [ 1099.071751][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1099.084186][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1099.124325][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1099.174879][T11655] macvlan2: entered promiscuous mode [ 1099.196911][T11655] macvlan2: entered allmulticast mode [ 1099.231456][T11345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.244309][T11345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.252425][T11345] bridge_slave_0: entered allmulticast mode [ 1099.266678][T11345] bridge_slave_0: entered promiscuous mode [ 1099.321358][T11659] tipc: Enabling of bearer rejected, already enabled [ 1099.356704][T11345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.375944][T11345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.401039][T11345] bridge_slave_1: entered allmulticast mode [ 1099.403124][T11668] netlink: 12172 bytes leftover after parsing attributes in process `syz.3.9451'. [ 1099.438054][T11345] bridge_slave_1: entered promiscuous mode [ 1099.722825][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9452'. [ 1099.991762][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.081887][T11668] bridge_slave_1 (unregistering): left allmulticast mode [ 1100.108581][T11668] bridge_slave_1 (unregistering): left promiscuous mode [ 1100.118170][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.316498][T11693] hsr_slave_0: left promiscuous mode [ 1100.358144][T11693] hsr_slave_1: left promiscuous mode [ 1100.403774][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1100.472524][T11345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.504022][T11345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.756305][T11720] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9459'. [ 1100.857974][T11345] team0: Port device team_slave_0 added [ 1100.944811][T11345] team0: Port device team_slave_1 added [ 1101.248067][T11716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.340708][T11345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.367366][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.414022][T11345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.447878][T11345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.460007][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.523438][T11345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.611713][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1101.634163][T11313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.668361][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.693805][T11313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.739288][T11313] veth0_macvtap: left promiscuous mode [ 1101.772871][T11764] netlink: 'syz.3.9466': attribute type 2 has an invalid length. [ 1102.190595][ T8256] smc: removing ib device syz0 [ 1102.214951][ T8256] smbdirect: ib_dev[syz0] removed [ 1102.240898][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.250916][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.283861][T31704] lo speed is unknown, defaulting to 1000 [ 1102.288719][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1102.297176][T31704] syz0: Port: 1 Link DOWN [ 1102.470060][T11345] hsr_slave_0: entered promiscuous mode [ 1102.487796][T11345] hsr_slave_1: entered promiscuous mode [ 1102.513346][T11345] debugfs: 'hsr0' already exists in 'hsr' [ 1102.529409][T11345] Cannot create hsr debugfs directory [ 1103.200298][T11345] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.535550][T11345] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.743320][T11345] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.934841][T11345] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.239985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.635364][T11345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1104.664536][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.688041][T11345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1104.710428][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.740335][T11345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1104.756537][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.788933][T11345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1104.805948][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.007999][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.048843][T11345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.075174][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.082380][ T6700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.110610][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.117828][ T6700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.030086][T11345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.123148][T11345] veth0_vlan: entered promiscuous mode [ 1106.164801][T11345] veth1_vlan: entered promiscuous mode [ 1106.213449][T11345] veth0_macvtap: entered promiscuous mode [ 1106.230052][T11345] veth1_macvtap: entered promiscuous mode [ 1106.272128][T11345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.291255][T11345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.312428][ T8256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.322686][ T8256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.334368][ T8256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.368469][ T8256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.504200][T11313] IPVS: stop unused estimator thread 0... [ 1106.512040][ T6700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.525586][ T6700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.578235][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.586723][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.619557][T11313] vlan5: left allmulticast mode [ 1106.624513][T11313] dummy0: left allmulticast mode [ 1106.634700][T11313] vlan5: left promiscuous mode [ 1106.639899][T11313] dummy0: left promiscuous mode [ 1106.650975][T11313] bridge0: port 1(vlan5) entered disabled state [ 1106.673136][T11313] bridge_slave_1: left allmulticast mode [ 1106.685818][T11313] bridge_slave_1: left promiscuous mode [ 1106.690026][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9401'. [ 1106.697384][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.732515][T11313] dvmrp0: left allmulticast mode [ 1106.746802][T11313] dvmrp1: left allmulticast mode [ 1106.912164][T11313] tipc: Disabling bearer [ 1106.970662][T11313] erspan0 (unregistering): left promiscuous mode [ 1107.231292][T11313] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 1107.292276][T11313] bond1 (unregistering): Released all slaves [ 1107.320254][T11313] bond2 (unregistering): Released all slaves [ 1107.342908][T11313] bond3 (unregistering): Released all slaves [ 1107.374046][T11313] bond4 (unregistering): Released all slaves [ 1107.416165][ T34] smc: removing ib device syz1 [ 1107.424556][T11313] bond0 (unregistering): Released all slaves [ 1107.460702][T11313] bond5 (unregistering): Released all slaves [ 1107.486751][T11313] bond6 (unregistering): Released all slaves [ 1107.514807][T11313] bond7 (unregistering): Released all slaves [ 1107.540546][T11313] bond8 (unregistering): Released all slaves [ 1107.562722][T11313] bond9 (unregistering): Released all slaves [ 1107.598065][T11313] bond10 (unregistering): Released all slaves [ 1107.620114][T11313] bond11 (unregistering): Released all slaves [ 1107.646813][T11313] bond12 (unregistering): Released all slaves [ 1107.669688][T11313] bond13 (unregistering): Released all slaves [ 1107.700761][T11313] bond14 (unregistering): Released all slaves [ 1107.722602][T11313] bond15 (unregistering): Released all slaves [ 1107.744904][T11313] bond16 (unregistering): Released all slaves [ 1107.775837][T11866] netlink: 'syz.2.9401': attribute type 1 has an invalid length. [ 1107.917826][ T34] smbdirect: ib_dev[syz1] removed [ 1110.584976][T11313] tipc: Disabling bearer [ 1110.601858][T11313] tipc: Disabling bearer [ 1110.610843][T11313] tipc: Left network mode [ 1110.645674][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1111.119644][T11313] ------------[ cut here ]------------ [ 1111.126082][T11313] err [ 1111.126099][T11313] WARNING: net/wireless/core.c:207 at cfg80211_switch_netns+0x574/0x5a0, CPU#0: kworker/u8:3/11313 [ 1111.139755][T11313] Modules linked in: [ 1111.145035][T11313] CPU: 0 UID: 0 PID: 11313 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1111.154854][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1111.165053][T11313] Workqueue: netns cleanup_net [ 1111.170948][T11313] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 1111.177865][T11313] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 b8 27 41 f7 eb 82 e8 01 d2 d5 f6 e9 63 fe ff ff e8 f7 d1 d5 f6 e9 59 fe ff ff e8 ed d1 d5 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 1111.198009][T11313] RSP: 0018:ffffc90004f278a0 EFLAGS: 00010293 [ 1111.204105][T11313] RAX: ffffffff8aefe5e3 RBX: ffff8880aafd0e10 RCX: ffff88806abe0000 [ 1111.212416][T11313] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1111.220481][T11313] RBP: 00000000ffffffef R08: ffffffff903084f7 R09: 1ffffffff206109e [ 1111.229262][T11313] R10: dffffc0000000000 R11: fffffbfff206109f R12: ffff8880aafd0740 [ 1111.237351][T11313] R13: ffff888043f2b3e0 R14: dffffc0000000000 R15: ffff8880aafd0928 [ 1111.245334][T11313] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 1111.254340][T11313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1111.261361][T11313] CR2: 000056500c53a138 CR3: 0000000034544000 CR4: 00000000003526f0 [ 1111.269418][T11313] Call Trace: [ 1111.273836][T11313] [ 1111.276828][T11313] cfg80211_pernet_exit+0x92/0x120 [ 1111.283567][T11313] ops_undo_list+0x49f/0x940 [ 1111.288792][T11313] ? __pfx_ops_undo_list+0x10/0x10 [ 1111.293939][T11313] ? idr_destroy+0x227/0x290 [ 1111.298737][T11313] cleanup_net+0x56b/0x800 [ 1111.303171][T11313] ? __pfx_cleanup_net+0x10/0x10 [ 1111.308173][T11313] ? process_scheduled_works+0xa70/0x1860 [ 1111.313908][T11313] ? process_scheduled_works+0xa70/0x1860 [ 1111.319989][T11313] process_scheduled_works+0xb5d/0x1860 [ 1111.325595][T11313] ? __pfx_process_scheduled_works+0x10/0x10 [ 1111.331673][T11313] ? assign_work+0x3d5/0x5e0 [ 1111.336293][T11313] worker_thread+0xa53/0xfc0 [ 1111.341022][T11313] kthread+0x389/0x470 [ 1111.345124][T11313] ? __pfx_worker_thread+0x10/0x10 [ 1111.350654][T11313] ? __pfx_kthread+0x10/0x10 [ 1111.355293][T11313] ret_from_fork+0x514/0xb70 [ 1111.360057][T11313] ? __pfx_ret_from_fork+0x10/0x10 [ 1111.365180][T11313] ? __switch_to+0xc79/0x1410 [ 1111.369942][T11313] ? __pfx_kthread+0x10/0x10 [ 1111.375597][T11313] ret_from_fork_asm+0x1a/0x30 [ 1111.381577][T11313] [ 1111.384651][T11313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1111.391968][T11313] CPU: 0 UID: 0 PID: 11313 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1111.401514][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1111.411570][T11313] Workqueue: netns cleanup_net [ 1111.416333][T11313] Call Trace: [ 1111.419602][T11313] [ 1111.422522][T11313] vpanic+0x56c/0xa60 [ 1111.426498][T11313] ? __pfx__printk+0x10/0x10 [ 1111.431084][T11313] ? __pfx_vpanic+0x10/0x10 [ 1111.435577][T11313] ? is_bpf_text_address+0x292/0x2b0 [ 1111.440850][T11313] ? is_bpf_text_address+0x26/0x2b0 [ 1111.446046][T11313] panic+0xc5/0xd0 [ 1111.449757][T11313] ? __pfx_panic+0x10/0x10 [ 1111.454169][T11313] ? ret_from_fork_asm+0x1a/0x30 [ 1111.459101][T11313] __warn+0x315/0x4c0 [ 1111.463075][T11313] ? cfg80211_switch_netns+0x574/0x5a0 [ 1111.468532][T11313] ? cfg80211_switch_netns+0x574/0x5a0 [ 1111.473986][T11313] __report_bug+0x29a/0x540 [ 1111.478564][T11313] ? cfg80211_switch_netns+0x574/0x5a0 [ 1111.484035][T11313] ? __pfx___report_bug+0x10/0x10 [ 1111.489094][T11313] ? cfg80211_switch_netns+0x574/0x5a0 [ 1111.494553][T11313] report_bug+0x16a/0x220 [ 1111.498877][T11313] ? cfg80211_switch_netns+0x574/0x5a0 [ 1111.504329][T11313] ? cfg80211_switch_netns+0x576/0x5a0 [ 1111.509781][T11313] handle_bug+0x9c/0x200 [ 1111.514019][T11313] exc_invalid_op+0x1a/0x50 [ 1111.518514][T11313] asm_exc_invalid_op+0x1a/0x20 [ 1111.523353][T11313] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 1111.529414][T11313] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 b8 27 41 f7 eb 82 e8 01 d2 d5 f6 e9 63 fe ff ff e8 f7 d1 d5 f6 e9 59 fe ff ff e8 ed d1 d5 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 1111.549013][T11313] RSP: 0018:ffffc90004f278a0 EFLAGS: 00010293 [ 1111.555073][T11313] RAX: ffffffff8aefe5e3 RBX: ffff8880aafd0e10 RCX: ffff88806abe0000 [ 1111.563033][T11313] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 1111.570996][T11313] RBP: 00000000ffffffef R08: ffffffff903084f7 R09: 1ffffffff206109e [ 1111.578959][T11313] R10: dffffc0000000000 R11: fffffbfff206109f R12: ffff8880aafd0740 [ 1111.586931][T11313] R13: ffff888043f2b3e0 R14: dffffc0000000000 R15: ffff8880aafd0928 [ 1111.594905][T11313] ? cfg80211_switch_netns+0x573/0x5a0 [ 1111.600379][T11313] cfg80211_pernet_exit+0x92/0x120 [ 1111.605486][T11313] ops_undo_list+0x49f/0x940 [ 1111.610074][T11313] ? __pfx_ops_undo_list+0x10/0x10 [ 1111.615180][T11313] ? idr_destroy+0x227/0x290 [ 1111.619766][T11313] cleanup_net+0x56b/0x800 [ 1111.624170][T11313] ? __pfx_cleanup_net+0x10/0x10 [ 1111.629099][T11313] ? process_scheduled_works+0xa70/0x1860 [ 1111.634806][T11313] ? process_scheduled_works+0xa70/0x1860 [ 1111.640520][T11313] process_scheduled_works+0xb5d/0x1860 [ 1111.646085][T11313] ? __pfx_process_scheduled_works+0x10/0x10 [ 1111.652062][T11313] ? assign_work+0x3d5/0x5e0 [ 1111.656645][T11313] worker_thread+0xa53/0xfc0 [ 1111.661249][T11313] kthread+0x389/0x470 [ 1111.665308][T11313] ? __pfx_worker_thread+0x10/0x10 [ 1111.670411][T11313] ? __pfx_kthread+0x10/0x10 [ 1111.674995][T11313] ret_from_fork+0x514/0xb70 [ 1111.679579][T11313] ? __pfx_ret_from_fork+0x10/0x10 [ 1111.684688][T11313] ? __switch_to+0xc79/0x1410 [ 1111.689363][T11313] ? __pfx_kthread+0x10/0x10 [ 1111.693983][T11313] ret_from_fork_asm+0x1a/0x30 [ 1111.698752][T11313] [ 1111.702337][T11313] Kernel Offset: disabled [ 1111.706653][T11313] Rebooting in 86400 seconds..