last executing test programs: 7.725579553s ago: executing program 1 (id=3825): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x40, 0x0, 0x0, 0x9000}]}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6.459104574s ago: executing program 1 (id=3832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000670000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x5}, 0x4) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4002}, 0x2}}, 0x10) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) connect$can_j1939(r9, &(0x7f0000000240)={0x1d, r12, 0x2, {0x1, 0x0, 0x4}, 0xfe}, 0x18) bind$tipc(r3, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x30, r13, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x4000004) 5.869246896s ago: executing program 2 (id=3835): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) unshare(0x26020480) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r1}, &(0x7f0000000100)=0x8) 5.511455456s ago: executing program 2 (id=3837): mmap(&(0x7f00003f6000/0x1000)=nil, 0x1000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.49746079s ago: executing program 1 (id=3838): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000020c0)={0x14, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x40c0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (fail_nth: 5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x1, 0x6, 0x7, 0x10}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001400010000000000000000000100000a44000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d0800044000000003140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4004051}, 0x4000000) shutdown(r3, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000040)=0xffffffff, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x11, {{@in=@multicast1, @in=@broadcast, 0x4e22, 0xb, 0x3, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x6, 0x80}, 0x4000000}, [@tmpl={0x184, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x0, 0x1, 0x0, 0x0, 0x80000004, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffff9, 0x2, 0x3, 0x0, 0x7, 0x803, 0x2}, {{@in6=@loopback, 0x0, 0x3c}, 0x0, @in6=@empty, 0x2, 0x1, 0x5, 0x0, 0x8}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x4, 0x0, 0xabb}, {{@in=@local, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x7, 0x1, 0x7, 0x0, 0x0, 0x400}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@multicast2, 0xffffffff, 0x1, 0x2, 0x0, 0x10000, 0x2, 0x1}]}]}, 0x23c}}, 0x8044) 5.247448393s ago: executing program 2 (id=3840): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x2000000, {0x0, 0x0, 0x0, r3, 0x50083, 0x2c01}, [@IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "f2f2402ecb8a4f33345d4ffbf3dbc62d"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "699a7f1a932e9a5f7358857e1c636f5d"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_VF={0x0, 0x1, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40850) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@bridge_newvlan={0x24, 0x70, 0x100, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket(0x2, 0x2, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000002f00)={0x7, [0x731e, 0x8001], 0x8000}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f0000002fc0)) recvmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/237, 0xed}], 0x1}, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000850000006100000018010000646c000400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x7c70ca3927fb97ad, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x6, 0x83, 0x6ff5, 0x5, 0x2, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f0000000680)={r5, &(0x7f0000000200)='dummy0\x00', 0x401, &(0x7f00000005c0)={@_ha_fsid={[0x7ff, 0x8bd]}, {0xd, 0x0, 0x1, 0x8}}, 0xe, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6gre0\x00', r9, 0x29, 0xbc, 0x2, 0xde, 0x13, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x400, 0x51}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'dummy0\x00', 0x2}) 4.924441682s ago: executing program 4 (id=3841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) 4.801614452s ago: executing program 4 (id=3842): mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) r3 = socket(0x26, 0xa, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0) r5 = openat$cgroup_int(r2, &(0x7f0000000840)='cgroup.clone_children\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000880)=0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000008c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="fe6436d921d60ba6c3bbc379ab55bf81a890f3a1c675d68becc7bb3b1854c5cefa7ab563bbdf890b3fe026c6f1a2912aeb4b2b690bf370bf7369c8adffaf762ac8e2f489dc87b81fb9767db7a11e5121aa873d5719ec04f2be216534a188516a2ecf8a8e98c38eff2ce7b5e9eb2447987ed851d6", 0x74}, {&(0x7f0000000240)="e34db39e7301b09f18a0c6e918c9c182611ac81a2ee29b11f3c29bcfd82bb946f5846f183ba0bd9c8e60a9af390e902ba275bdd490db8ad1d5f30ee7159e8cbfc341aa8f496ff1feac41fe93b843153cf98382947e62e28d698de9b71ede59424d7ec1579594a300", 0x68}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="e68e6f67a8b384107c4a61c417421ec5867cba9f9e0c2512c6c89b0476eaed56640ca4bfbd49aaa850b6bad4701e784bd15d084da8d6c3c685b8e3262b4170515c843f2ac97d254027842b10ebf26b37399096020536b830d7dec7894ec5e1469cf245215e287d8cf9aba968f31619b9", 0x70}, {&(0x7f0000000380)="fe9102e11fc3f948e8b8231923c24e2e5197de3cfcf0495b044cd8b0d9d4f0b96b97528e2afa602966119e5aa2461dcb655f5824b790347568ef56a3ea0d452199e23f8541a1cf4cc6c98a2f2d0254051aa54cc87f2842d4d8ec7ae90ace12514acd9775535f97a3676db78cb2549483948caa2762ab6cf09cdd1b4766e35ce8ee4b3cea032936f7a4a45acb6b908132b69d70a1d1e19dcfb6da8a3d37915e9b3495ce2ad710cd67a96eb3bf8600a49240537bf5f19e47e627b541fa", 0xbc}, {&(0x7f0000000440)="40c483310026e97ad977dae1bf6c47f634aed28f6d93051eb92ead6e1f555f75b05e1e2c4768e19d6f000c80a00c9a3d50d79ad673c716", 0x37}, {&(0x7f0000000480)="59379d166155b5651ebe98546d6ea90e9ecc37f0c4ec0b77c20bad36de44a1d9dc59e98ff94e3bf60dd3f791c2be43d6b9b0948f63e0309a915e4430bb254c74917aaa4e130691352e0d58d42ebafd585c79332aa22dff981799e1a393c379d40321a31b31f513267fd9ed50d19371a4627a13ac99cd3f38ffb6829a9af8157bb94435bc1a38e1373300abd702c30cb785f5e408e84577b1097a1f85141df992737c8684b28606a1ced8115f6e6f", 0xae}], 0x7, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r3, r0, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r1, r0, r0, r1, r1, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r4]}}], 0x80, 0x10}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000740)="8dbc09cc31244d4f2377dd95b703dcd65a155e149e687d65a0bbcce36a717e31aca12b46c8d971ff0a2a887d66cc119672ed43baacbdcff4711ba9f513fa0ea8ef6ee28b6abaf1361c3464b754e1d4e69bfefbf5301826538b7636fe104a74feac3a7ea1a62f63152bc71a146ca0a8358b04e604f9397acb8ccb8a834923a3c96730ad31a6bdc1e7f7601232703479d82155ce341c052af84bba7b7bc201625d2ad44f086fd97d6de60a7bd157e182cb", 0xb0}], 0x1, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [r5, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}], 0x50, 0x4000}}], 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) setsockopt$packet_int(r11, 0x107, 0x10, &(0x7f00000002c0)=0xef, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f000085a000/0x4000)=nil, 0x4000, 0xb635773f06ebbee4, 0x50, r0, 0x7e923000) 4.515508825s ago: executing program 2 (id=3843): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 4.461226209s ago: executing program 2 (id=3845): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000044000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002c00070100000000ffdbdf25017c00008040000000040002800066407575ff4e2f96fffb086c17cd29981b786822175e27bffbc61aad07f9123e4c6969aa2e54d38364cdf698ac7ed4e408b053e085d095d4d516a84c5b88c2b7eff7d4d441bb030bdabf3b7cf039b440b1817537aa07414db4dd36cb1179ede82f52ed8c62be6e7f7774dbf3c55b39f9b6a06af3c8eee787a0f8427ab82287ec6599d37c6e9936c8b562e226430834b98f29120d9ccf3d85153f131e7a29cdf24646a554431b521faca1663619a1ddd8b458f7b7cd6826584108626ee34dbfd5398e5f96fe3934d1d1243231387ae9b7bf4b54e0"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3, @ANYBLOB="89c677693ef50c86134ee93f9d75b4aa5adf8bff626f"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r6, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5d4}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_LLC_PARAM_LTO={0x5}]}, 0x3c}}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0xe, '\x00', 0x0, 0x38, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4.407270228s ago: executing program 1 (id=3846): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) unshare(0x20000400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socket$can_raw(0x1d, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 4.276722919s ago: executing program 1 (id=3847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x121, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009b00000000000000000000000000000000000000fc700e84102a160e954c6fabe40cfcd77a44abf90a9cb369acde436d74fdf6b596a182af3965dae73ecefd"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r5, 0x4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r5}, 0x38) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)=""/78, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800460000240000000000119078000000000000000044045e00c5014e20000c907801000000"], 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) close(r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 3.88530484s ago: executing program 4 (id=3848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x6c8) pipe(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140092e7", @ANYRES16=r5, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c"], 0xe0}], 0x1}, 0x0) sendmsg$netlink(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c001180090001"], 0xb0}, 0x1, 0x0, 0x0, 0x40014}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYBLOB="e76a8f2c9c6893a8e621a65464a12c55d66a3cbc6b26c8d0e5c5"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet(r0, &(0x7f0000000080)="81efcdc3412b", 0x6, 0x0, 0x0, 0x0) 2.957153989s ago: executing program 0 (id=3854): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800ffff00004000000000000a0000c20f006800fe00fd0900000000"], 0x1c}}, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 64) r4 = socket(0x11, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x8, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xf, &(0x7f0000001040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x40004) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r12 = openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000001c0), 0x12) openat$cgroup_devices(r11, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) 2.917044766s ago: executing program 0 (id=3855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x2, 0x4, 0x6, 0xb, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc848}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="abcf65131347837282041394003d", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001b00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.790679429s ago: executing program 0 (id=3856): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0xffffffff000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x22dc, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x22a8, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2250, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0x7, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x70e, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x7ff, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x6, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x2, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0x8, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3002}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x0, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x3, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x7f, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45127, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x6, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0x8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x114, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x22dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 1.927500881s ago: executing program 3 (id=3859): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.916945463s ago: executing program 3 (id=3860): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2057, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0xffffffffffffffff) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) (async) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180)=0x10000, 0x4) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0xf04, 0x0, 0x0, {0x7, 0x0, 0x8}, [""]}, 0x14}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x40000) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async, rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e1e, @broadcast}, 0x10) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) (async) shutdown(r7, 0x1) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) unshare(0x6020400) (async) socket(0x15, 0x5, 0x0) 1.842627838s ago: executing program 3 (id=3861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x1, 0x7840, 0x9, 0x2, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1a, 0x0, [{0x6, 0x12, "0f90ed69689225413ca80c1204e15c0d"}, {0x0, 0x2}]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {}, {}, 0x2}], 0x140) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x94) 1.718256153s ago: executing program 3 (id=3862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x4c}}, 0x40) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd2b, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000854}, 0x84) r3 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0xb, 0x0, 0x0, 0x2, 0x20, 0x20, 0x8}, {0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2e0}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x5, 0x0, 0xff, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff}, {{@in6=@private2, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0xff}, 0x2, @in=@empty, 0xffffffff, 0x1, 0x0, 0x5, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x1d, 0x0, 0x0, 0xfffff022}, {0x6}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030200000000000008000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x802, 0x10000) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000003c40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cf4f3163c9c2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) connect$inet6(r10, &(0x7f0000001fc0)={0xa, 0x4e22, 0x5, @remote, 0x3}, 0x1c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r9) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x80, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x80}, 0x1, 0x0, 0x0, 0x4804}, 0x20004811) r12 = getpid() sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000003}, 0xc, &(0x7f0000002040)=[{&(0x7f0000000680)={0x14b0, 0x41, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x4, 0x93}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@loopback}, @generic="fa031f558d2bbec86c8af44d3f6be5e63e1d21fb090c47a9e2312f4f7a9b14272bc19cf86763dd6a96e88aa7a77550c80df387780c5b1c1a5a0ae07dd151223c22a6521401d9f0b92778bc0d36a74ae0b18adb12aa036822b17eed5a321dc0853836250be39cedba725602e30cb82f791c01606013afcb1255526ba6f19f034ac27e856efc228874ee39deb6357a3d3a674adadcb98dec23270e1c6aa652cc55a3ae8703adb37e3c7c63566646410fa473e92324fbcd29d223e989182df17b4d762d68f80e24a92cbfe5e24e657604537e2986", @generic="9a042431986b2078e438fcd350e61fe493587ae8e7d2c8d8c5e6fd6c2422ba4eebbf7eab9f17311f92c318791f59e2c0847b365315ec15ec13aec8e7b7b5ea9b58727058aed13db451ce7e31ff6781dbcbfbc46392bf62a2608aaec788fddedc9027489e2f2dd237189483c1a582bfc024ead0eb8e16f6eb83c00eec101dec88386a36f7d9dd379931dc974cf38fd454163c6c104cd8b98ca9ffd293d20c8b7f3b101ee157431ca378d375ad8e6113a8680c8295721489e2358916ce747d9e587029c33adf4cf7ba9f819875a3e6380b2f3ccbc894f21c95079852ef8152d7311184fbb9b01e6a2d620a2638b9971b72bafa70d9fc70", @nested={0x106, 0x2b, 0x0, 0x1, [@nested={0x4, 0xff}, @nested={0x4, 0x13a}, @generic="cd152f69d55e017b28618da7c603bb983d401b21bdb8d501097fb3c51a7f1286d333ae7268559843f1abe1378b5cd4c92ea0e048c05344e6a2bfbb89dac440b2cda596d62b73e303c27314751105a8b9b72d2b52993a4e85ad757dc5c5d74dece2b23c768263355669a74d0a3219f5947f141829082db1344503c20d8f873cb8f4a702f8d7806102f9c8e0865a8497da572b79", @generic="9754e175148159c5a90d2f22c08a7f", @generic="508f485bd94b75b8cca72ad86007d0acc8f21ca81cf73d1e96d5284e36116ef0e2b3ebe1dd96500c1bc45ccc6554e8b63f051894436e5f13db2747f64fdd0f74eea248a5c0a99759695aa797e0ef1885a34ab337d8f307da"]}, @nested={0xfa, 0x15a, 0x0, 0x1, [@generic="ed8cf3f675d7ba0fbf11e0416aff01040c1e4b065dfedc4c5e66bc0ca6260d3542ad258c4ff1373f83f6d8ed5f384b6839377de3760fa2a9be57992cb58c699f0438ca002e98373060f1673862cd4384b9cc129e2695d6a7865bc92336c7298b6f77e41f505e03f4ce716805d7c3ea67bc7f80b276032a8f6b52377d573ac25b79e0ebb1c150dd653614bf22f65aa6be6fd982775bb51a14a199fe514453c0041aa581986c7be645d8c7b292d02452ef66d80670adfa5f811d0859142c4416d8237f2820c9e37b7c61eefb00beed9329be3c2f4113e24acae76d2416d8e1739dbd5cd10d1d518c1347137168fa88e45024fa", @nested={0x4, 0x107}]}, @nested={0x10b7, 0x114, 0x0, 0x1, [@typed={0xc, 0x143, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x129, 0x0, 0x0, @uid}, @nested={0x4, 0x12}, @generic="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", @generic, @nested={0x4, 0x93}, @generic="dac39006bb63c65edff9438647aa822905651483bfadd2686e9dc71525594fe0bc07b6a461f3af02ad257ca3375a5a85ad29fc04a9f599efc274d3b04670bbeb7cc77cba5c5e26d9811d7c9ae49b4041dd0f1ecb27c194c82dac9ebf7bb08a505a4e54a32ee47b0ae56fa95ad79174c9ea22e4e6b1bd01170255160e1eeea91553676b75aacca8", @nested={0x4, 0xf1}, @typed={0xc, 0x5c, 0x0, 0x0, @u64=0x8}]}]}, 0x14b0}, {&(0x7f0000001c00)={0x3a8, 0xb, 0x20, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x165, 0x0, 0x0, @pid=r12}, @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @nested={0xdd, 0xf9, 0x0, 0x1, [@nested={0x4, 0x7f}, @nested={0x4, 0x162}, @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=0xee01}, @generic="32f19074f90f72a4a7a99a992ebe421aecee126f42d48e154b7c3a94088e2e92697a2ce64ebebfc273ff76da916ed4e00d43baa14401297f35fc2d3ff4a801d4c54cd06113bbdd95329d572d158612ed9480fe33bb261724cb70b46cb54deed85b9cce3336a64f5135429c938859e05a7c9daca6edc97d6dbd6bef1a40a0783e0fff4f876467c0b4ae31acb45e4bb7349290be160f0d32c1d7321e35aebdcf5a7d0413b61e26bdc4fcfaca4110643c9904320213b9"]}, @generic="2045c86235e163a022f8462d35e078650e7b5c9dfafaa63ac7427497799f1beab1f9cbb535c3f94399780d3e3955fc97fc052aa6a3ff87825cbebdaadfc874778042935d2d44b0c335d3878de976c7a459e34e36e3510128787882914a8c3ed0c0578560a777d10ad2123317a0e5ac42106e9be5b18d06aa28ea86190643996eae2ddb159080b005b168655f88b4b718dd74db280e04e3b04b84c47054501e8cfc74acc22d78547109ae11d85779dcf490c05fb53682244b6d8856368cbf", @generic="7f3ba664df061ff12ef62e30ed0a043d2aae5737dcc138f17c5792ff9d76d5a45be015499e7fc5decfc5964eb66b9b54df50e294fe9b8d636b6d5fe80ada13d10e38531d43d37500e0126f923be19ce53bb24c171c42375597f770a496735b234b5a6ff6350d7683090b73865d04bdd98c9bdc71e62d38bdccaa38f537a500918c1dd40b9c56d623ac41f3b572662f3be504b8284eedb9670d2e22de5db0bc83a7498d7db24cbf50502567fc701bc9eda0736a5a97d50685809009259cc6771c9b93a5010f80a8fb", @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@mcast2}, @generic="6f1b9eac44399fc3cb30915aff9457a95bf76918fdeab7bbbbb7c6ae1c8bc4b4de3c2623d3b471fd1eeef11eb1af0b992b4819aa8c3523bd37531bb3a79aa763f25876642d1a49f9e62c831c84ad234cad5aecc49df4a3ea2b6ecea9c99cb38104e7e961bf6ad850a2ce283d31cccfc309babe942ba76d9b2aef93", @generic="7962c95e802cfe2afcdc85b4f05b176cca9cbd58ac1ed64328ba6f028e0186f32386913ccc4ab87b3a6b975bf55a75f9e457e3896f35f001e611f5c8b7d93d9f6a8f90fb54819f308675044839998bee10b1ad3b640356c3bf38e045448724ec1301c4e79f07175acdc3b855a82e53db6f7f92bec95e2133", @typed={0xc, 0x10b, 0x0, 0x0, @u64=0x3ff}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x40010c5}, 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100008}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="d4ca10628f21b1f7bc0e10a8663f167c96abdcacba486f4eba6e", 0x1a}], 0x1, &(0x7f0000002200)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @iv={0x18, 0x117, 0x2, 0x1, 'B'}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x40004}], 0x1, 0x4000048) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r16, 0x0) sendmsg$netlink(r0, &(0x7f0000001d00)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc, &(0x7f0000001b40)=[{&(0x7f0000003c80)={0xa6c, 0x29, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@typed={0xc, 0x57, 0x0, 0x0, @u64=0xe7c}, @generic="6ff06e8cdcc2fbb9080c07b62ed2459a24915fa53505e0b1f54a5681c873dc27f582c56b121f77562dcccac3298efec91728201db74908c18740c6be9686586bbc3346f9ea837ecc7d66a9876f96169ed64f5d9bf517efdc271bfe9a03518ec5ec9ad02fd6ffc8552ede1191f0e7d5837c916858dff68196a1d493df3087e1beb15fa42524361cdb295ca12b1ae8fd4eca6aa1eeef62b0162e37b9b1de4c64a26223a046104693a989ae798c12b9a06152dd295445da9205d1cb09cb2ba6ba7a67", @nested={0x213, 0x3, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x139}, @generic="5e171e5915245cd71a074ce3d2a2b95d688625096e398aa0d6e76a394861f81255a87b73b1244f15b98d2fd41a5d5345dda631e67ddb4e02864ffa5f415e3f6ec598ec666a8dc1b4c0fc2f37585a6b8e2816e622df43ad8d70cbacde528ced0967627290a117d42582772d819c963e", @nested={0x4, 0x11b}, @generic="b645345dc90bcfa04ab3e45ee3f88b08e632cbb02e43f65a5211e88ee6c98fbda055b0f845431685726f0c538d00513959be5893a93d7757f31b981e3a3a944919e86679ed9c1bb44980438b13eac8817c3803e8e65e45f625c5b65b718b14d0de63f97fdd9e4c8014c8e0c773c72ec4df9f4b541ba30ffe8a74c635d9cbac9be3056240e456c6e591af65495c4c0baef0280170cd6f051408893736504f6935633d2e474cfd544ac1ce175d54fcc3bf8d4b76a882438b82243894c9c9a3027492dabc", @typed={0x4, 0xa}, @nested={0x4, 0xad}, @generic="e7a6c51b64055d18b9d83643e9d08481cdea97ef3f89b4b112a18cc452d91379f19520dd6822e64027e05c45f83f103677566e83a99c4608fc5214d3c57aeb3fd859a0e6bd69ef53791fabd02812c402c5420aa6d042844f16c6bd2a074cfd78e8b501dc6f11022072220b72dbf0d2b5870b1273ea964fe1ba45c82f3d05bec7034ecc1bbb6774e8d30ff30b3a0cefd5bf71eb26974e22f965cde607544e84d783fcb61639481ae3fa5c09b034695c3e27f07e3c3d79ddf3228241bbd0226dc653e1859820"]}, @nested={0x345, 0xd3, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0xba, 0x0, 0x0, @u64=0x9}, @nested={0xea, 0x28, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @uid}, @typed={0x8, 0x8, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x46}, @nested={0x4, 0x155}, @nested={0x4, 0xc2}, @generic="92e02b9158a5bac19e4e29739ffd627f642c010538b1c6a6b525135fc0e34e301da2d5a98487ccb5b880495e1c56ca5e10e21b511122ff72f2e6886e71f448d304b3471eecccf35b2d4db79d02f2b10cd6f02822d4d92c6d2005ecc82e21126c753f91a3fdf22febbcdd1011996a5c6c8811cb6360f955f48035d4ac5b6c536be0714eae4f54e3a27c6e389f0b9807a61cbba102da6b49ad0784b772588b6a38b47353cf684dc5ad8fb795703cae5b08bda9e17de1cbb027d4b2", @nested={0x4, 0xcc}, @nested={0x4, 0x5d}]}, @generic="4e99d8843dd7160ecb181c535680e34f671cb88edf38f32459dc2467b7dafb92c3cae9a8335bfb4a059448d3d3c63e3d9ba2821bc4", @nested={0xf8, 0x51, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @pid=r3}, @generic="3136311480e72727c993c19bc66d9b2495d6483856c67c3df6f8e5f1aedf34aaa409d8b79d68f7e71bf39935775c2062ed5169c74ae85aeaa105ad4c2202488765d1b2d23438e69f89a728f5e1690ca7ad9eacd3ad0019d9e2511e9473b1b28a8c6435d32821c9ab589e773428925cb8696f34ae0c2880a35b4aceeef8780bf5bb971f16691c8082cea1937817ff2724636de7c191307020a68000f4da7a0a86a5782a4eb4d11b2d61382cf27d747b0472b9ff93ab06c349ab8be87f1c5b6810ff725e2ec67136d26f35ba190f328736ccd5b7b176a11bc789ca66b6a0be64ad8b1ae4980a48cd270f26b6b2"]}, @generic="dbfa390d6f7f4d1c48780a3ad7fcbdacdc504a43b4ba2692c3105c2af47748280fb277d9fbc64c75bf09f2ed94de512a8b0775a07edde2e5ca0dd1d23c9ecb013c8756dc83dd73d36bf8546abd8ffbde6152efd678e50af7f5161a4a000586aa81fd7952955919121b5e9327bd6bbdce4f0a2a8af21d6287193892c9d54fa274d48e0176f7d0bbee2c2c90fafe010ed4e4b6f88b373e2419bbd0148979fbdc54723865417d7ee813606831215e92e998201f7184f1f8387097", @generic="6f00062620efdb6f79952dae3ecfca6ea674af8e4b6eaaa71f0398c2f6628a05994b05c7062040af18fcdf397d01d5b666d24cc92039bd790b7e04643c4fb92d85430360820d60f49cf429407fdd7a0470c8aaa36b77af159f9886"]}, @nested={0x1f0, 0x94, 0x0, 0x1, [@generic="59c5caf7f8831313c71c383bbbe7a729bc20d437ee6bcd9f30c73fb091e0413b69d461d39dd9c7eb60b68c3430ac03219ce11e76ec80bc3d1016c549ab5e93bfe984815dd5424ae856b1ffea0a24128186b0862decb1e1c7a0968c140157498cd24d7493a7b44941659255474d5609ed943109186174", @nested={0x4, 0x15b}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x141}, @nested={0x4, 0x154}, @generic="2ec78025445118da56e1ce2e119c903fcec96bc2c93651e4bd68c525d60da7346a86470c9b17ae9536e0be28eeb26e1fffb3adb1d7f4e7b4747c112a0f0fa809342739041b726b06c9b4657b2b4db3bbc13dd51e92a5c0898467ad44e12b9eae3a740596362eecdd38aaf3700d15784cf15ffd973fca707ef76720b3048dba9cd1b99bdc5091cbc3f153e69731de9ff93371452b42b161fa3c9783fa3a1d1247234648c1c5f49260f6b56df4c88defbcc0ab1e94fa9b1c7dcd6b2790cfd391d3c85a9859ee09", @generic="87583570cc623623167ad9bac8583a5ada7bf56305d8ce013e10195ff2cd0ca9e4005a43796b7f9ad8085022bbe37474bbd86638cb39f89bf1c1a8c8c4021e740089161c472e09cae12288ab0a215a95d68f2d43421187ff61e79326382cfaca0466cd3106a703ef076d0573e305f2212bc5e954292004769c6c81970fdd1d9eecd141bc55e2e3e436a1f42ffc9c4fb9", @nested={0x4, 0x3a}, @nested={0x4, 0x153}, @nested={0x4, 0x31}]}, @typed={0x8, 0xfa, 0x0, 0x0, @uid=r4}, @nested={0x64, 0xd4, 0x0, 0x1, [@nested={0x4, 0x43}, @generic="1bc0edec6f0a649f4847a8bfffdefebee499cc1199492d224c1ccedc24e61b11ab645be64648d6f331885465b77642228f846ab7d30563e3095b661604f6c06a7e2341535ed79997735b31b1a4a6391108989889b15ccc26", @nested={0x4, 0xa3}]}, @nested={0x1d3, 0x6, 0x0, 0x1, [@typed={0x4, 0x117}, @generic="ab82ee892d1dbec6c387023f48eb443cafb15953f3ce75007dcc2b42852194eada81b219f863fd3ec0ebd6e8ce99b89b8e91301beaffc67084999646905c6e0cac7b0a94e524a9fb9f76db253bd3fc31231010a7527ed85b21ade18a39d799b0a64295d69b68a123d533ea2353f0e5f3cded07f068a36cc9c0b698a7c9", @nested={0x4, 0x13a}, @generic="af72eb29b53664c9bac2394486dac4abb0ad751a30988e7a6a133d8d92f49d591968c15c45d1b9fdb931ced29768edf43b873b568c2677c3364b5cab872386565f50c00559db9e0a372e8558b2a5b0fa3b22e61ef6bebbc9ea2c7e16edcc79834b47e659220f3f4cd7d042008f800b7183eb942bd10c930e32e525d753fa8f62ad6e1dba0dab764490c7434db406881f4f2da4ef1a8bdd7a1ae19d6c9caba8f73698af463c75c0ad327926cfae7ce5dcd2fc4dea8961d1c3f65e5a165544f7c6bf2f344116c75cf57b3b3651d00aa9cb641890dbe7614fe7d414b790a12f57c919c274b65ff14252d05889f09f4eb8d8039d692180cb5cffab", @typed={0x8, 0xb9, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x95}, @typed={0x8, 0xff, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xb4, 0x0, 0x0, @u32=0x3ff8}, @generic="7e925f36fc59dec203d3ba6fd0528be23635021dd06300aba3b35dbc75d00f4bc68e81a899bda3eabf3dc43b7df4ad9d2be71ebc5e"]}]}, 0xa6c}], 0x1, &(0x7f00000002c0)=[@rights={{0x30, 0x1, 0x1, [r5, r1, r8, r15, r16, r5, r7, r14]}}], 0x30, 0x80}, 0x0) 1.261767928s ago: executing program 4 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r1) epoll_create1(0x80000) write$cgroup_subtree(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="1600c7000c08b2010005010700"], 0x34}}, 0xf7f85815488cd7c0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000004850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.207445391s ago: executing program 1 (id=3864): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000400000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000030000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)) shutdown(r7, 0x0) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x2000200b}) socket$unix(0x1, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0xff, 0x0, 0xfffffffd, 0x0, 0x51, 0x1000005, 0xd4}, 0x9c) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, 0x0, 0x20048041) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c300)={0x40000000000, [], 0x2, "f35cdffa4c22ce"}) 1.179674917s ago: executing program 3 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000080000014001280090001007665746800000001000002800800200001"], 0x3c}, 0x1, 0x0, 0x4100000000000000}, 0x0) 1.176993247s ago: executing program 2 (id=3866): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000044000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002c00070100000000ffdbdf25017c00008040000000040002800066407575ff4e2f96fffb086c17cd29981b786822175e27bffbc61aad07f9123e4c6969aa2e54d38364cdf698ac7ed4e408b053e085d095d4d516a84c5b88c2b7eff7d4d441bb030bdabf3b7cf039b440b1817537aa07414db4dd36cb1179ede82f52ed8c62be6e7f7774dbf3c55b39f9b6a06af3c8eee787a0f8427ab82287ec6599d37c6e9936c8b562e226430834b98f29120d9ccf3d85153f131e7a29cdf24646a554431b521faca1663619a1ddd8b458f7b7cd6826584108626ee34dbfd5398e5f96fe3934d1d1243231387ae9b7bf4b54e0"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3, @ANYBLOB="89c677693ef50c86134ee93f9d75b4aa5adf8bff626f"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r6, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5d4}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_LLC_PARAM_LTO={0x5}]}, 0x3c}}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0xe, '\x00', 0x0, 0x38, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.131680936s ago: executing program 0 (id=3867): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047452, 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x42) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @window={0x3, 0x91, 0x7}, @sack_perm, @mss={0x2, 0x400}], 0x4) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, &(0x7f0000000100)="f3f4a3aeb2f4e1", 0x7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x1000, @empty, 0x697d}}, 0x6, 0x3, 0x20080000, 0x9, 0x2, 0x10, 0x1}, 0x9c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f0000000400)=[{r6, 0x201}], 0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c0018"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c344499902356fe555b769ad074a9c8526831ea54da16a35cf6ba9"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 911.350737ms ago: executing program 3 (id=3868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000b80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000680)={0x60, 0x1403, 0x4, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004080) write$rfkill(r1, &(0x7f0000004c00)={0x3, 0x8, 0x2, 0x1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x1000}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x5, 0x2, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x20, 0x10, 0x1, 0x7}}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000008000000ff07000003820100", @ANYRES32=r0, @ANYBLOB="ff0700"/20, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0500000002000000030000000f00000000000000", @ANYRES32=r5, @ANYBLOB="2c7abd95940aac8cec4ba8f1d7313fd2e6d664ec74ccc2daf4a320bb940bc5af96f65695ba024bb2535c6e892f9134cccb0424fb880e8a2b963e5c23cfc9bcbd3a78fb90d2a418cc42805266eede673061d0c29cf3809be74ef0cc5c7d8845a84f4013c429ad86f0c297d91018341a5d6e1243b6b3686321edd6efffc9b72f13718108d5518f740e313d36aaf4537469102e6db31962eafa5fbf06eb4881b81e46c6a537", @ANYRES32=r6, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b00)={&(0x7f0000000800)="46aa1116d06c204eb1cf9ecd5118094f204e35450b4247fd15ff4faa25957864ddfa08fc1c956a2fe19131a46a64b92e9d1e221128a0e3bdd40a567a3878338d5868cf1ea5511ca4e7b89aa1fb6111e40498d3b49add0d233067d12784fdca12e6e84f698166dae27aa097006c2ed9678ad00182a7c29d239078f8d57ca9fbc2ba8399ea8392c5cbdff19da5fcab0642ee0a8fb5a25a0a6dea3b3c2889c9cc15e8b857895c83b139171bdf09bcb99bacded67bf7916223cafc5688937c7d4f0adb6951802b343bbd0e779ec8b5390f79a381cfa15c5f75663186dfa4af1b62533ece6654e6472567f97803fdfd71", &(0x7f0000000900)=""/191, &(0x7f00000009c0)="1799adfc", &(0x7f0000000a00)="922a68c426ccf90cd816e3fd773ec59ac9a1721855fc9f0d20d5157b0460314a3e520d73911793c8e6e224b7eecfb1dddbf79fbdefbea74aa3ae7b8de2d51b68b5c4624b4b85bdc4931570e8e1577003953db08f70941cd8148604020d517a4e17b8e4887074bf161d18178f0946803b18e36138ff64cc69936afe033b9ebc1dbb2ff35bcc194e6b0067f907d0eac4dec7fbccdc21dad0d23baf49909162ab2b14726c00967e039cc8c24727800268af0754038761aaf264e476a72ca311495ab1ef921e8721aa9955ec3483de5e071b372973d3e4c5deb503d388a2c5eda0ab6a93b95e", 0x7f, r0, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7, 0x0, 0x8000000}, 0x27) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000580)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r9, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0xb78, 0x3, 0x5, 0xbe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f0000000000)={0xf, 0x9, 0x0, 0x4, 0x9}) recvmmsg(r8, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000001880)=""/4104, 0x1008}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/229, 0xe5}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2030, 0x0) 910.694949ms ago: executing program 4 (id=3869): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000000100005ff00000040000000000000004a", @ANYRES32=0x0, @ANYBLOB="0002010000000000340012800b000100677265746170000024000280060010004e24000008000600e00000020500160001000000050016000100000008000a00", @ANYRES32=r6], 0x5c}}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 238.730084ms ago: executing program 0 (id=3870): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000080ff7f00b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000840000ec59f806e80001000000000000000c00"/49, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 118.923513ms ago: executing program 4 (id=3871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@map_fd={0x18, 0xb}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (fail_nth: 1) 0s ago: executing program 0 (id=3872): pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x41, 0x6, "6c3a46eb8eac38846c7c4d8b504acc9f1edf134a4c4385dbe852e1e935800add8e9c0d72ca2aca12f95dab5c6d5391f3ea6b0e916ada1cbd40a3452fd3"}]}, @NFT_MSG_NEWRULE={0x144, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "6de6726d2a4cf7f81b61c3979dbf16a64ab91c5d4520ae2da49ff76ae53e7602c8b710ed96aa61a0c0fdc5c1e1866b5a2cbd93c27e52faa69c7ffce145cc162644b3ad1f1ac3261a29c205a2f5dd8855ac98d55ea4123b667737dc26bc162ef41566b48db8bc10a893f1bcf9231b4c6e63200f195b385c26bcd78ee8742fce59f1286c070e805ce03018d23c8c7f4e98dbcd7dde240294acc8e61970fb731eebc06a72906105d4ed5c2c6c73e4ecb07d9387ea605589da6867628056139ce72f003b1d192490392277809a26ddd12b449aa0"}, @NFTA_RULE_USERDATA={0x56, 0x7, 0x1, 0x0, "4899ad2492e1a340f723b3a4f72e8dfe3346bbd4129d48a2e1486ea24470a38db191c8a6e76ea9dae14fd94f9be862c8499a4ecafadde66db6db27a76a4fb1f0d763db32c471f65d75533a45429a7626c8bc"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1e0}, 0x1, 0x0, 0x0, 0x8842}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb4, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="67d0fa27", 0x4}, {0x0, 0x38}], 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x300, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="4c66e0ffffffffff180000000900000000000000a8020000187090a0eff7c8a1ce6ae0919d4b492e53000001acda0000000000002e8743744851f9c028fa685a77bd932a4e22f60b2c41b6fae0f3c01b7a8cf329946fbaaf0cb4d6d9c9d8deede3c83ca1b14db1b4c09054599579538c9abef2b0385a5ed1d55dd557d24b82ae4125ba62e191c52750b2fa5fb4449a2470562559e252153c0fcc4f14725e324cb894f30400fd75ac0e2e0800"/186], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc0e00}, 0x94) kernel console output (not intermixed with test programs): me changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 443.865638][T16700] tipc: Failed to remove unknown binding: 66,0,0/0:1160136470/1160136472 [ 443.902900][T16700] tipc: Failed to remove unknown binding: 66,0,0/0:1160136470/1160136471 [ 443.958110][T16670] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 443.965648][T16670] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 444.000562][T12635] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.007855][T12635] bridge0: port 1(bridge_slave_0) entered listening state [ 444.039836][T12635] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.047115][T12635] bridge0: port 2(bridge_slave_1) entered listening state [ 444.140607][T12637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.156745][T12637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.502853][T12637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.538182][T12637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.015913][T16771] bridge_slave_0: left allmulticast mode [ 446.031904][T16771] bridge_slave_0: left promiscuous mode [ 446.038081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.066343][T16773] netlink: 'syz.4.2884': attribute type 3 has an invalid length. [ 446.071975][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.085373][T16773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2884'. [ 446.101591][T16771] bridge_slave_1: left allmulticast mode [ 446.109584][T16771] bridge_slave_1: left promiscuous mode [ 446.111981][T16777] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2886'. [ 446.115752][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.145382][T16777] nbd: must specify a device to reconfigure [ 446.155948][T16771] bond0: (slave bond_slave_0): Releasing backup interface [ 446.172387][T16771] bond_slave_0: left allmulticast mode [ 446.184247][T16771] bond_slave_0: left promiscuous mode [ 446.217830][T16771] bond0: (slave bond_slave_1): Releasing backup interface [ 446.249669][T16771] bond_slave_1: left allmulticast mode [ 446.256315][T16771] bond_slave_1: left promiscuous mode [ 446.304104][T16771] team0: Port device team_slave_0 removed [ 446.357962][T16771] team0: Port device team_slave_1 removed [ 446.387011][T16771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.394690][T16771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.407731][T16771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.418429][T16786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2889'. [ 446.428459][T16771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.458643][T16771] bond7: (slave macvlan0): Releasing active interface [ 446.502873][T16771] bond0: (slave netdevsim1): Releasing backup interface [ 446.514416][T16771] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 446.553191][T16771] bond0: left allmulticast mode [ 446.576950][T16771] team0: Port device macvlan2 removed [ 446.636863][T16775] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 446.649711][T16775] bond11 (unregistering): Released all slaves [ 446.721884][T16789] tipc: Enabling of bearer rejected, already enabled [ 446.812750][T16798] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2891'. [ 447.014319][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2891'. [ 447.479446][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 447.851998][T16829] dummy0: left promiscuous mode [ 447.938050][T16844] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 447.955614][T16844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.006875][T16829] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 448.036116][T16829] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 448.075914][T16832] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.2898'. [ 448.102199][T16840] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2900'. [ 448.152978][T16837] syzkaller0: entered promiscuous mode [ 448.183760][T16837] syzkaller0: entered allmulticast mode [ 448.787467][T16863] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 448.806906][T16863] netlink: 'syz.1.2905': attribute type 3 has an invalid length. [ 448.830400][T16863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2905'. [ 448.860888][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 449.609475][T16897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2916'. [ 449.725034][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2918'. [ 449.873572][T16903] gretap0: entered promiscuous mode [ 449.899683][T16903] vlan2: entered promiscuous mode [ 449.919153][T16909] netlink: 'syz.4.2920': attribute type 1 has an invalid length. [ 450.043130][T16909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 450.109605][T16913] bond8: (slave geneve3): making interface the new active one [ 450.122247][T16913] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 450.348112][T16927] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2927'. [ 450.702890][T16935] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2929'. [ 450.757646][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 451.125516][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 451.289582][T16931] netlink: 'syz.4.2925': attribute type 15 has an invalid length. [ 451.296610][T16948] pim6reg: entered allmulticast mode [ 451.311481][T16948] netlink: 'syz.1.2934': attribute type 1 has an invalid length. [ 451.321392][T16948] netlink: 'syz.1.2934': attribute type 1 has an invalid length. [ 451.331961][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2933'. [ 451.358143][T16931] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2925'. [ 451.410484][T16941] xt_CT: No such helper "netbios-ns" [ 451.460658][T16948] 8021q: adding VLAN 0 to HW filter on device bond10 [ 451.490768][T16948] bond9: (slave bond10): making interface the new active one [ 451.502791][T16948] bond9: (slave bond10): Enslaving as an active interface with an up link [ 451.806729][T16969] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 452.068883][T16973] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 452.297870][T16975] erspan0: entered promiscuous mode [ 454.216304][T16949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.545782][T16988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2944'. [ 454.786784][T16996] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 454.878802][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.895459][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.907150][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.923446][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.938268][T17007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2948'. [ 454.938587][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.060727][T16996] 8021q: adding VLAN 0 to HW filter on device bond8 [ 455.254298][T17001] bond8: (slave veth17): Enslaving as an active interface with a down link [ 455.844818][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 455.879502][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 456.284100][T16999] lo speed is unknown, defaulting to 1000 [ 456.385109][T17043] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2959'. [ 456.415840][T17040] netlink: 'syz.2.2958': attribute type 8 has an invalid length. [ 456.417517][T17043] nbd: must specify at least one socket [ 456.497907][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 456.589468][T17043] hsr_slave_1 (unregistering): left promiscuous mode [ 457.013234][ T5645] Bluetooth: hci5: command tx timeout [ 457.665612][T17071] bridge11: entered promiscuous mode [ 457.690919][T17071] bridge11: entered allmulticast mode [ 458.207741][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.217542][T16999] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.228603][T16999] bridge_slave_0: entered allmulticast mode [ 458.238193][T16999] bridge_slave_0: entered promiscuous mode [ 458.248135][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.256588][T16999] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.264240][T16999] bridge_slave_1: entered allmulticast mode [ 458.273737][T16999] bridge_slave_1: entered promiscuous mode [ 458.388097][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.420717][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.509946][T17102] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 458.546154][T16999] team0: Port device team_slave_0 added [ 458.585863][T16999] team0: Port device team_slave_1 added [ 458.673929][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.694580][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.753159][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.781068][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.788491][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.823758][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.992023][T16999] hsr_slave_0: entered promiscuous mode [ 459.011456][T16999] hsr_slave_1: entered promiscuous mode [ 459.036645][T16999] debugfs: 'hsr0' already exists in 'hsr' [ 459.052689][T16999] Cannot create hsr debugfs directory [ 459.092925][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 459.093808][ T5645] Bluetooth: hci5: command tx timeout [ 459.130955][T17119] netlink: 'syz.2.2976': attribute type 27 has an invalid length. [ 459.414545][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 459.421883][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 459.768731][T16999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.910665][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'. [ 459.922181][T16999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.932061][T17134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2983'. [ 460.141788][T16999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.337565][T16999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.523024][T17154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2985'. [ 461.183509][ T5645] Bluetooth: hci5: command tx timeout [ 462.613011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.889733][T17136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.901016][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'. [ 463.031866][T17159] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2989'. [ 463.046737][T16999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.091881][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.140597][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'. [ 463.154459][T16999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.180183][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.253020][ T5645] Bluetooth: hci5: command tx timeout [ 463.287679][T16999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.332457][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.357869][T16999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.386826][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.643534][T17196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2996'. [ 463.687619][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2996'. [ 463.727569][T17196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2996'. [ 463.787294][T16999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.836507][T16999] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.870742][T12635] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.877987][T12635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.907596][T12635] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.914921][T12635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.921489][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2999'. [ 464.116708][T17204] syzkaller0: entered promiscuous mode [ 464.123398][T17204] syzkaller0: entered allmulticast mode [ 464.167547][T17204] tipc: Enabled bearer , priority 0 [ 464.194725][T17203] tipc: Resetting bearer [ 464.263677][T17203] tipc: Disabling bearer [ 464.305517][T17210] netlink: 'syz.4.3001': attribute type 8 has an invalid length. [ 464.327557][T17210] netlink: 'syz.4.3001': attribute type 9 has an invalid length. [ 464.573555][T17218] openvswitch: netlink: Multiple metadata blocks provided [ 464.596115][T17218] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 464.619133][T17218] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 464.685120][T17221] syzkaller1: entered promiscuous mode [ 464.690747][T17221] syzkaller1: entered allmulticast mode [ 465.219881][T17241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.320059][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.552034][T16999] veth0_vlan: entered promiscuous mode [ 465.580915][T16999] veth1_vlan: entered promiscuous mode [ 465.685253][T16999] veth0_macvtap: entered promiscuous mode [ 465.705062][T16999] veth1_macvtap: entered promiscuous mode [ 465.745094][T16999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.774043][T16999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.795226][T12656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.819238][T12656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.828353][T12656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.852775][T12656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.014876][T12656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.031184][T17261] __nla_validate_parse: 4 callbacks suppressed [ 466.031205][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 466.036208][T12656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.256455][T12656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.276275][T12656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.735157][T17275] syzkaller0: entered promiscuous mode [ 466.739485][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 466.758935][T17275] syzkaller0: entered allmulticast mode [ 466.823516][T17280] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 466.861682][ T4945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.885228][ T4945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.896930][ T4945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.905208][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.913298][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.766156][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3026'. [ 467.799236][T12655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.827732][T12655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.176411][T12655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.224478][T12655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.349425][T17325] syzkaller0: entered promiscuous mode [ 468.364124][T17325] syzkaller0: entered allmulticast mode [ 468.440999][T12655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.469059][T12655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.526364][T17287] lo speed is unknown, defaulting to 1000 [ 468.873566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.014070][ T5645] Bluetooth: hci4: command tx timeout [ 469.137817][T12655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.166290][T12655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.362083][T17352] xt_limit: Overflow, try lower: 324382443/0 [ 469.379301][T17347] syzkaller0: entered promiscuous mode [ 469.390740][T17347] syzkaller0: entered allmulticast mode [ 469.482115][T17354] netlink: 'syz.1.3039': attribute type 27 has an invalid length. [ 469.495564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.967719][T17374] netlink: 'syz.0.3045': attribute type 1 has an invalid length. [ 469.981339][T17368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3043'. [ 469.990625][T17374] netlink: 'syz.0.3045': attribute type 3 has an invalid length. [ 469.999287][T17368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3043'. [ 470.010679][T17374] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3045'. [ 470.031381][T17368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3043'. [ 470.078230][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'. [ 470.278970][T17381] netlink: 'syz.2.3046': attribute type 1 has an invalid length. [ 470.300200][T17381] netlink: 'syz.2.3046': attribute type 3 has an invalid length. [ 470.312636][T17381] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3046'. [ 470.359813][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 470.467695][T12655] pim6reg: left allmulticast mode [ 471.094611][ T5645] Bluetooth: hci4: command tx timeout [ 471.465323][T12655] bond8 (unregistering): (slave geneve3): Releasing active interface [ 471.550105][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 471.603280][T12655] bond0 (unregistering): Released all slaves [ 471.617416][T12655] bond1 (unregistering): Released all slaves [ 471.632339][T12655] bond2 (unregistering): Released all slaves [ 471.661645][T12655] bond3 (unregistering): Released all slaves [ 471.680260][T12655] bond4 (unregistering): Released all slaves [ 471.695153][T12655] bond5 (unregistering): Released all slaves [ 471.710749][T12655] bond6 (unregistering): Released all slaves [ 471.725807][T12655] bond7 (unregistering): Released all slaves [ 471.740899][T12655] bond8 (unregistering): Released all slaves [ 471.800143][T17429] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 471.815535][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 472.096313][T12655] tipc: Left network mode [ 472.207330][T17443] block nbd3: not configured, cannot reconfigure [ 472.266449][T17453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3059'. [ 472.418421][T17439] lo speed is unknown, defaulting to 1000 [ 472.682039][T17467] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 472.725021][T17467] nbd: illegal input index 871591272 [ 473.041701][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 473.173864][ T5645] Bluetooth: hci4: command tx timeout [ 473.437913][T17485] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 473.558422][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 473.751042][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 473.792156][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.801647][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.810533][T17287] bridge_slave_0: entered allmulticast mode [ 473.818415][T17287] bridge_slave_0: entered promiscuous mode [ 473.956256][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'. [ 473.978763][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.989789][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.997657][T17287] bridge_slave_1: entered allmulticast mode [ 474.024643][T17287] bridge_slave_1: entered promiscuous mode [ 474.291388][T17287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.355176][T17287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.752299][ T278] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 474.772856][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.780153][ C0] bridge0: topology change detected, propagating [ 474.786909][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.794179][ C0] bridge0: topology change detected, propagating [ 475.058208][T17287] team0: Port device team_slave_0 added [ 475.097620][T17287] team0: Port device team_slave_1 added [ 475.111590][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 475.209915][T12655] veth1_macvtap: left promiscuous mode [ 475.224514][T12655] veth0_macvtap: left promiscuous mode [ 475.241129][T12655] veth1_vlan: left promiscuous mode [ 475.254123][ T5645] Bluetooth: hci4: command tx timeout [ 475.264077][T12655] veth0_vlan: left promiscuous mode [ 476.286976][T17549] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 476.304474][T17565] netlink: 'syz.0.3080': attribute type 2 has an invalid length. [ 476.326087][T17287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.346268][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.419334][T17287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.455063][T17287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.465498][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.503339][T17287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.700630][T17287] hsr_slave_0: entered promiscuous mode [ 476.737611][T17287] hsr_slave_1: entered promiscuous mode [ 476.750117][T17287] debugfs: 'hsr0' already exists in 'hsr' [ 476.768924][T17287] Cannot create hsr debugfs directory [ 477.144202][T17595] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3090'. [ 477.161731][T17595] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3090'. [ 477.456797][T12655] IPVS: stop unused estimator thread 0... [ 477.746036][T17624] syzkaller1: entered promiscuous mode [ 477.775814][T17624] syzkaller1: entered allmulticast mode [ 478.304365][T17643] netlink: 'syz.1.3103': attribute type 1 has an invalid length. [ 478.325458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.352565][T17643] netlink: 'syz.1.3103': attribute type 3 has an invalid length. [ 478.377672][T17643] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3103'. [ 478.379468][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 478.429803][T17636] veth0_macvtap: left allmulticast mode [ 478.513119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.572269][T17636] bond7: left allmulticast mode [ 478.589765][T17636] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.639554][T12662] bond8: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 478.669928][T12662] bond8: (slave veth17): making interface the new active one [ 478.686646][T12662] bond8: active interface up! [ 478.694924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.727913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.746268][T12655] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.753541][T12655] bridge0: port 2(bridge_slave_1) entered listening state [ 478.920694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 479.109988][T17671] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3106'. [ 479.136776][T17657] syzkaller1: entered promiscuous mode [ 479.144426][T17657] syzkaller1: entered allmulticast mode [ 479.968531][T17696] bridge1: entered promiscuous mode [ 479.996004][T17696] bridge1: entered allmulticast mode [ 480.016488][T17696] team0: Port device bridge1 added [ 480.029389][T17698] syzkaller1: entered promiscuous mode [ 480.044929][T17698] syzkaller1: entered allmulticast mode [ 480.703176][T17287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 480.763130][T17287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.796148][T17287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 480.832282][T17287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.887894][T17287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 480.965580][T17287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.014082][T17287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 481.130226][T17287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.735036][T17287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.778160][T17783] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3125'. [ 481.821805][T17287] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.924413][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.931768][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.102743][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.110024][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.854202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.958414][T17822] lo speed is unknown, defaulting to 1000 [ 483.919890][T17287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.876204][T17287] veth0_vlan: entered promiscuous mode [ 484.904280][T17287] veth1_vlan: entered promiscuous mode [ 484.988437][T17287] veth0_macvtap: entered promiscuous mode [ 485.015074][T17287] veth1_macvtap: entered promiscuous mode [ 485.039097][T17287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.051832][T17287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.084462][T12637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.094478][T12637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.139886][T12637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.192809][T12637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.601185][T12659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.613674][T12659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.850022][T12665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.858753][T12665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.423444][T17900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3138'. [ 486.585810][ T29] bridge0: entered promiscuous mode [ 486.689812][T17713] Set syz1 is full, maxelem 65536 reached [ 487.124520][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.144943][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.156052][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.164258][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.176224][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.287118][T17923] netlink: 'syz.1.3144': attribute type 1 has an invalid length. [ 488.582331][T17918] lo speed is unknown, defaulting to 1000 [ 488.629422][T17984] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 488.663188][T17984] netlink: 'syz.4.3155': attribute type 3 has an invalid length. [ 488.696030][T17984] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3155'. [ 489.131789][T18005] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 489.148756][T18005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3158'. [ 489.215730][T18012] openvswitch: netlink: Message has 4 unknown bytes. [ 489.234937][T18012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.254995][ T4945] Bluetooth: hci1: command tx timeout [ 490.097919][T18028] Unsupported essiv instantiation: essiv(ecb(tea),wp384) [ 490.266617][T17918] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.274480][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.281824][T17918] bridge_slave_0: entered allmulticast mode [ 490.290858][T17918] bridge_slave_0: entered promiscuous mode [ 490.301402][T17918] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.309289][T17918] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.317535][T17918] bridge_slave_1: entered allmulticast mode [ 490.326094][T17918] bridge_slave_1: entered promiscuous mode [ 490.371524][T17918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.388352][T17918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.488746][T17918] team0: Port device team_slave_0 added [ 490.498759][T17918] team0: Port device team_slave_1 added [ 490.541898][T17918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.559848][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.603608][T17918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.620898][T17918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.631777][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.678364][T17918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.831109][T17918] hsr_slave_0: entered promiscuous mode [ 490.848362][T17918] hsr_slave_1: entered promiscuous mode [ 490.869279][T17918] debugfs: 'hsr0' already exists in 'hsr' [ 490.885647][T17918] Cannot create hsr debugfs directory [ 491.332700][ T4945] Bluetooth: hci1: command tx timeout [ 491.418155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.577976][T17985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.792119][T17918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.866818][T17918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.306582][T17918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.346073][T17918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.629368][T17918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.649101][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 492.663074][T17918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.743517][T12665] bond0: (slave bond_slave_0): interface is now down [ 492.794494][T12665] bond0: (slave bond_slave_1): interface is now down [ 492.861071][T12665] bond0: now running without any active interface! [ 492.958982][T17918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.990985][T17918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.412602][ T4945] Bluetooth: hci1: command tx timeout [ 493.601049][T18134] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3182'. [ 493.646555][T18134] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3182'. [ 493.717778][T18138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3183'. [ 493.828517][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 493.830007][T17918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 493.861460][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.884651][T17918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 493.908142][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.968238][T17918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 493.975245][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 494.115358][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.148010][T17918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 494.185716][T17918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.964782][T18191] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 495.019952][T18191] bond9 (unregistering): Released all slaves [ 495.256371][ T4945] Bluetooth: hci3: command 0x0406 tx timeout [ 495.502523][ T4945] Bluetooth: hci1: command tx timeout [ 496.671265][T18141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.035150][T17918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.119795][T17918] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.157755][T12665] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.165049][T12665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.210439][T12664] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.217768][T12664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.521858][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 497.539333][T18242] lo speed is unknown, defaulting to 1000 [ 498.061624][T18259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.567544][T18276] syzkaller0: entered promiscuous mode [ 498.573356][T18276] syzkaller0: entered allmulticast mode [ 498.610826][T17918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.796120][T17918] veth0_vlan: entered promiscuous mode [ 498.912043][T17918] veth1_vlan: entered promiscuous mode [ 499.160871][T17918] veth0_macvtap: entered promiscuous mode [ 499.204253][T17918] veth1_macvtap: entered promiscuous mode [ 499.334175][T17918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.379826][T17918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.430518][ T278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.472157][ T278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.516311][ T278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.553387][ T278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.622483][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'. [ 499.699369][T18306] hsr_slave_0: left promiscuous mode [ 499.752344][T18306] hsr_slave_1: left promiscuous mode [ 499.908728][T12665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.934123][T12665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.049826][T18320] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 500.067485][T12659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.086407][T12659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.088031][T18322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3226'. [ 500.117470][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'. [ 500.484950][T18335] netlink: 'syz.4.3231': attribute type 1 has an invalid length. [ 500.502825][T18335] netlink: 'syz.4.3231': attribute type 3 has an invalid length. [ 500.531490][T18335] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3231'. [ 500.578503][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 501.280990][T18360] netlink: 'syz.1.3236': attribute type 16 has an invalid length. [ 501.324690][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.344722][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.356755][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.364119][T18360] netlink: 'syz.1.3236': attribute type 17 has an invalid length. [ 501.378357][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.388396][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.398126][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.414272][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.447980][T18369] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 501.587030][T18375] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 501.772125][T18360] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.779430][T18360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.799200][T18360] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.806501][T18360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.861354][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'. [ 501.871699][T18382] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 501.880491][T18382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3240'. [ 501.912183][T18360] bridge1: left promiscuous mode [ 501.918477][T18360] bridge1: left allmulticast mode [ 501.926899][T18360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.152654][T18393] netlink: 'syz.1.3245': attribute type 10 has an invalid length. [ 502.189815][T18389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3245'. [ 502.253621][T18389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3245'. [ 502.287415][T18393] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.330940][T18393] bond0: (slave team0): Enslaving as an active interface with an up link [ 502.342665][T12641] bond0: (slave team0): interface is now down [ 502.374588][T12641] bond0: (slave team0): interface is now down [ 502.422928][T12641] bond0: (slave team0): interface is now down [ 502.442733][T12637] bond0: (slave team0): interface is now down [ 502.473098][T12641] bond0: (slave team0): interface is now down [ 502.509266][T12641] bond0: (slave team0): interface is now down [ 502.542582][T12641] bond0: (slave team0): interface is now down [ 502.545815][T12659] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.560201][T12659] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.575184][T12637] bond0: (slave team0): interface is now down [ 502.607899][T12637] bond0: (slave team0): interface is now down [ 502.632853][T12663] bond0: (slave team0): interface is now down [ 502.665073][T12641] bond0: (slave team0): interface is now down [ 502.688370][T18407] syzkaller0: entered promiscuous mode [ 502.713075][T12640] bond0: (slave team0): interface is now down [ 502.729204][T18407] syzkaller0: entered allmulticast mode [ 502.753070][T12640] bond0: (slave team0): interface is now down [ 502.776971][T18407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3249'. [ 502.786448][T12664] bond0: (slave team0): interface is now down [ 502.815287][T12637] bond0: (slave team0): interface is now down [ 502.852287][T12664] bond0: (slave team0): interface is now down [ 502.882945][T12663] bond0: (slave team0): interface is now down [ 502.910002][T12663] bond0: (slave team0): interface is now down [ 502.911929][T12659] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.927320][T12659] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.944270][T12663] bond0: (slave team0): interface is now down [ 502.962806][T12663] bond0: (slave team0): interface is now down [ 502.993924][T12637] bond0: (slave team0): interface is now down [ 503.023476][T12637] bond0: (slave team0): interface is now down [ 503.044486][T12637] bond0: (slave team0): interface is now down [ 503.063740][ T278] bond0: (slave team0): interface is now down [ 503.084948][ T278] bond0: now running without any active interface! [ 503.249828][T12659] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.290453][T18434] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 503.298689][T12659] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.336913][T18434] netlink: 'syz.0.3256': attribute type 3 has an invalid length. [ 503.492660][ T4945] Bluetooth: hci2: command tx timeout [ 503.548497][T18362] lo speed is unknown, defaulting to 1000 [ 503.698409][T12659] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.711241][T12659] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.717326][T18451] xt_hashlimit: max too large, truncated to 1048576 [ 503.736249][T18451] No such timeout policy "syz1" [ 504.127633][ T9] bridge0: entered promiscuous mode [ 504.875501][T18484] pimreg: entered allmulticast mode [ 504.921720][T18493] __nla_validate_parse: 4 callbacks suppressed [ 504.921742][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3269'. [ 504.977901][T18489] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 505.310556][T12659] bridge_slave_1: left allmulticast mode [ 505.327197][T12659] bridge_slave_1: left promiscuous mode [ 505.336052][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.378586][T18506] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3272'. [ 505.391084][T12659] bridge_slave_0: left allmulticast mode [ 505.411845][T12659] bridge_slave_0: left promiscuous mode [ 505.432368][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.574862][ T4945] Bluetooth: hci2: command tx timeout [ 505.698712][T18520] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3275'. [ 505.738580][T12659] dummy0: left allmulticast mode [ 505.955648][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 506.850647][T12659] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 507.068680][T12659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.086944][T12659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.100876][T12659] bond0 (unregistering): (slave team0): Releasing backup interface [ 507.114697][T12659] bond0 (unregistering): Released all slaves [ 507.131926][T12659] bond1 (unregistering): Released all slaves [ 507.159772][T12659] bond2 (unregistering): Released all slaves [ 507.189538][T12659] bond3 (unregistering): Released all slaves [ 507.225211][T12659] bond4 (unregistering): Released all slaves [ 507.250662][T12659] bond5 (unregistering): (slave veth9): Releasing active interface [ 507.264376][T12659] bond5 (unregistering): (slave veth11): Releasing active interface [ 507.275111][T12659] bond5 (unregistering): Released all slaves [ 507.309580][T12659] bond6 (unregistering): Released all slaves [ 507.335080][T12659] bond7 (unregistering): Released all slaves [ 507.368703][T12659] bond8 (unregistering): (slave veth17): Releasing active interface [ 507.380460][T12659] bond8 (unregistering): Released all slaves [ 507.464162][T18521] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.472141][T18521] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.520070][T18523] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.527342][T18523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.534973][T18523] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.542261][T18523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.561906][T18523] bridge0: entered allmulticast mode [ 507.653160][ T4945] Bluetooth: hci2: command tx timeout [ 507.665419][T12659] 5Ò: left promiscuous mode [ 507.763256][T18514] lo speed is unknown, defaulting to 1000 [ 507.967871][T12659] tipc: Disabling bearer [ 508.000711][T12659] tipc: Left network mode [ 508.404976][T18574] syzkaller0: entered promiscuous mode [ 508.415727][T18574] syzkaller0: entered allmulticast mode [ 509.424531][T18620] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3289'. [ 509.608520][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3289'. [ 509.733191][ T4945] Bluetooth: hci2: command tx timeout [ 511.467160][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 511.514980][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.522328][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.552727][T18622] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.560012][T18622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.567772][T18622] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.575012][T18622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.198547][T12659] hsr_slave_0: left promiscuous mode [ 512.211922][T12659] hsr_slave_1: left promiscuous mode [ 512.233243][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.246907][T12659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.258768][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.267267][T12659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.289208][T12659] veth1_macvtap: left promiscuous mode [ 512.292633][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3296'. [ 512.942270][T12659] team0 (unregistering): Port device team_slave_1 removed [ 512.977691][T12659] team0 (unregistering): Port device team_slave_0 removed [ 513.487904][T18677] syzkaller0: entered promiscuous mode [ 513.493737][T18677] syzkaller0: entered allmulticast mode [ 513.505780][T18362] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.513674][T18362] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.521040][T18362] bridge_slave_0: entered allmulticast mode [ 513.529850][T18362] bridge_slave_0: entered promiscuous mode [ 513.668499][T18690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3301'. [ 513.854430][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'. [ 514.568122][T18643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.167851][T18362] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.175585][T18362] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.183071][T18362] bridge_slave_1: entered allmulticast mode [ 516.190269][T18362] bridge_slave_1: entered promiscuous mode [ 516.211068][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.218414][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.269742][T18692] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.277017][T18692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.284616][T18692] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.291816][T18692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.502319][T12659] IPVS: stop unused estimator thread 0... [ 516.504658][T18362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.577395][T18362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.778954][T18362] team0: Port device team_slave_0 added [ 516.811586][T18362] team0: Port device team_slave_1 added [ 516.926865][T18729] netlink: 'syz.1.3309': attribute type 9 has an invalid length. [ 516.959873][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 517.027438][T18729] erspan0: entered promiscuous mode [ 517.058662][T18729] macvlan2: entered promiscuous mode [ 517.096756][T18729] macvlan2: entered allmulticast mode [ 517.110430][T18729] erspan0: entered allmulticast mode [ 517.150336][T18362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.185857][T18362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.195158][T18745] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 517.227997][T18745] netlink: 'syz.4.3313': attribute type 3 has an invalid length. [ 517.242968][T18745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3313'. [ 517.276773][T18362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.290799][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3313'. [ 517.419707][T18738] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 517.484270][T18362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.509158][T18362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.529407][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 517.569382][T18757] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3315'. [ 517.592609][T18362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.807279][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 517.844890][T18760] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.852367][T18760] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.930309][T18753] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.937616][T18753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.945238][T18753] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.952510][T18753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.114784][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 518.194349][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 518.247342][T18779] v: renamed from gre0 (while UP) [ 518.276769][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 518.296571][T18779] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 518.348730][T18362] hsr_slave_0: entered promiscuous mode [ 518.365214][T18362] hsr_slave_1: entered promiscuous mode [ 518.571920][T18793] sctp: [Deprecated]: syz.4.3323 (pid 18793) Use of int in maxseg socket option. [ 518.571920][T18793] Use struct sctp_assoc_value instead [ 518.665883][T18797] FAULT_INJECTION: forcing a failure. [ 518.665883][T18797] name failslab, interval 1, probability 0, space 0, times 0 [ 518.745349][T18797] CPU: 1 UID: 0 PID: 18797 Comm: syz.0.3324 Not tainted syzkaller #0 PREEMPT(full) [ 518.745379][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.745391][T18797] Call Trace: [ 518.745399][T18797] [ 518.745408][T18797] dump_stack_lvl+0xe8/0x150 [ 518.745440][T18797] should_fail_ex+0x40c/0x560 [ 518.745480][T18797] should_failslab+0xa8/0x100 [ 518.745504][T18797] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 518.745534][T18797] ? __alloc_skb+0x1d7/0x7a0 [ 518.745697][T18797] ? __local_bh_enable_ip+0xd0/0x130 [ 518.745725][T18797] __alloc_skb+0x1d7/0x7a0 [ 518.745760][T18797] netlink_dump+0x1e7/0xee0 [ 518.745838][T18797] ? __pfx_netlink_dump+0x10/0x10 [ 518.745856][T18797] ? __kasan_kmalloc+0x93/0xb0 [ 518.745900][T18797] ? genl_start+0x497/0x6d0 [ 518.745970][T18797] __netlink_dump_start+0x589/0x7b0 [ 518.746001][T18797] genl_family_rcv_msg_dumpit+0x213/0x310 [ 518.746034][T18797] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 518.746071][T18797] ? __pfx_genl_start+0x10/0x10 [ 518.746095][T18797] ? __pfx_genl_dumpit+0x10/0x10 [ 518.746119][T18797] ? __pfx_genl_done+0x10/0x10 [ 518.746151][T18797] ? bpf_lsm_capable+0x9/0x20 [ 518.746169][T18797] ? security_capable+0x7e/0x2c0 [ 518.746230][T18797] genl_rcv_msg+0x5e1/0x7a0 [ 518.746265][T18797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.746292][T18797] ? __pfx_nl80211_dump_mpath+0x10/0x10 [ 518.746390][T18797] ? __pfx_ref_tracker_free+0x10/0x10 [ 518.746466][T18797] netlink_rcv_skb+0x226/0x4a0 [ 518.746489][T18797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.746518][T18797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.746559][T18797] ? down_read+0x270/0x2e0 [ 518.746584][T18797] ? genl_rcv+0xd/0x40 [ 518.746612][T18797] genl_rcv+0x28/0x40 [ 518.746637][T18797] netlink_unicast+0x7bb/0x940 [ 518.746682][T18797] netlink_sendmsg+0x813/0xb40 [ 518.746717][T18797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.746744][T18797] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.746801][T18797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.746825][T18797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.746851][T18797] ____sys_sendmsg+0x9b9/0xa20 [ 518.746893][T18797] ? __might_fault+0xaf/0x130 [ 518.746927][T18797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.746958][T18797] ? import_iovec+0x73/0xa0 [ 518.747008][T18797] ___sys_sendmsg+0x2a5/0x360 [ 518.747027][T18797] ? __lock_acquire+0x683/0x2cd0 [ 518.747053][T18797] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.747118][T18797] ? __fget_files+0x2a/0x420 [ 518.747143][T18797] ? __fget_files+0x3a2/0x420 [ 518.747181][T18797] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.747206][T18797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.747238][T18797] ? __pfx_ksys_write+0x10/0x10 [ 518.747276][T18797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.747300][T18797] do_syscall_64+0x174/0x580 [ 518.747333][T18797] ? trace_irq_disable+0x3b/0x140 [ 518.747362][T18797] ? clear_bhb_loop+0x40/0x90 [ 518.747387][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.747407][T18797] RIP: 0033:0x7fa510f9ce59 [ 518.747428][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.747444][T18797] RSP: 002b:00007fa511f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.747466][T18797] RAX: ffffffffffffffda RBX: 00007fa511215fa0 RCX: 00007fa510f9ce59 [ 518.747481][T18797] RDX: 000000000400c040 RSI: 0000200000000000 RDI: 0000000000000003 [ 518.747494][T18797] RBP: 00007fa511f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 518.747507][T18797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.747520][T18797] R13: 00007fa511216038 R14: 00007fa511215fa0 R15: 00007fff035fc988 [ 518.747555][T18797] [ 519.319932][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 519.346730][T12664] tipc: Subscription rejected, illegal request [ 520.090082][T18835] lo speed is unknown, defaulting to 1000 [ 521.947490][T18914] vlan0: entered promiscuous mode [ 522.972295][T18853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.997778][T18914] netlink: 'syz.0.3344': attribute type 10 has an invalid length. [ 523.011717][T18362] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 523.024711][T18914] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3344'. [ 523.062302][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.210766][T18362] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 523.245886][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.268803][T18362] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 523.306157][T18938] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 523.312042][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.376152][T18362] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 523.440993][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.830898][T18362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.927873][T18362] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.996013][T12641] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.003299][T12641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.082279][T12664] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.089554][T12664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.834411][T18960] syzkaller0: entered promiscuous mode [ 524.839998][T18960] syzkaller0: entered allmulticast mode [ 524.904428][T19002] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 525.372098][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 525.405210][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 525.770263][T18362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.921875][T18362] veth0_vlan: entered promiscuous mode [ 525.958171][T18362] veth1_vlan: entered promiscuous mode [ 526.065925][T18362] veth0_macvtap: entered promiscuous mode [ 526.082051][T18362] veth1_macvtap: entered promiscuous mode [ 526.105435][T18362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.126028][T18362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.146174][T12663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.156866][T12663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.176656][T12663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.195378][T12663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.638110][T19055] xt_bpf: check failed: parse error [ 526.848772][T19062] can: request_module (can-proto-5) failed. [ 527.257403][T18979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.444061][T12641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.468635][T12641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.520400][T19070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3369'. [ 527.545354][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3369'. [ 527.580779][T12665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.604890][T12665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.686878][T19081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3371'. [ 527.730836][T19081] netlink: 'syz.1.3371': attribute type 3 has an invalid length. [ 527.768083][T19081] netlink: 'syz.1.3371': attribute type 7 has an invalid length. [ 527.771106][T19083] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 527.865273][T19083] tap0: tun_chr_ioctl cmd 1074025672 [ 527.882970][T19083] tap0: ignored: set checksum disabled [ 527.914129][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3372'. [ 528.647263][T19116] netlink: 'syz.4.3383': attribute type 1 has an invalid length. [ 528.669218][T19116] netlink: 'syz.4.3383': attribute type 3 has an invalid length. [ 528.687494][T19116] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3383'. [ 528.714519][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 528.746490][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.760497][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.774658][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.790736][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.803491][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 529.418676][T19141] lo speed is unknown, defaulting to 1000 [ 529.535382][T12665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.547257][T12665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.759247][T19162] bond1: entered allmulticast mode [ 529.791349][T12665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.828027][T12665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.849955][T19165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3393'. [ 529.879154][T19166] ip6gretap1: entered allmulticast mode [ 529.890740][T19166] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 529.949912][T12665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.964490][T12665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.014204][T19121] lo speed is unknown, defaulting to 1000 [ 530.125273][T12665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.145714][T12665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.205548][T19176] netlink: 'syz.4.3395': attribute type 32 has an invalid length. [ 530.476821][T12665] bridge_slave_1: left allmulticast mode [ 530.482902][T12665] bridge_slave_1: left promiscuous mode [ 530.489156][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.501756][T12665] bridge_slave_0: left allmulticast mode [ 530.507608][T12665] bridge_slave_0: left promiscuous mode [ 530.514042][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.858474][ T4945] Bluetooth: hci3: command tx timeout [ 530.866777][T12665] bond5 (unregistering): (slave gretap2): Releasing active interface [ 531.019409][T12665] team0: Port device bridge9 removed [ 531.047585][T12665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.058663][T12665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.069063][T12665] bond0 (unregistering): Released all slaves [ 531.079542][T12665] bond1 (unregistering): Released all slaves [ 531.106000][T12665] bond2 (unregistering): Released all slaves [ 531.120814][T12665] bond3 (unregistering): Released all slaves [ 531.135623][T12665] bond4 (unregistering): Released all slaves [ 531.151326][T12665] bond5 (unregistering): Released all slaves [ 531.170243][T12665] bond6 (unregistering): Released all slaves [ 531.190352][T12665] bond7 (unregistering): Released all slaves [ 531.214500][T12665] bond8 (unregistering): (slave veth13): Releasing active interface [ 531.227365][T12665] bond8 (unregistering): Released all slaves [ 531.245515][T12665] bond9 (unregistering): (slave veth17): Releasing backup interface [ 531.256012][T12665] bond9 (unregistering): Released all slaves [ 531.271739][T12665] bond10 (unregistering): Released all slaves [ 531.316989][T19185] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3395'. [ 531.432710][T12665] tipc: Disabling bearer [ 531.440056][T12665] tipc: Left network mode [ 531.808218][T19127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.849703][T12665] IPVS: stopping master sync thread 8921 ... [ 532.519785][T19121] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.540056][T19121] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.553231][T19121] bridge_slave_0: entered allmulticast mode [ 532.564810][T19121] bridge_slave_0: entered promiscuous mode [ 532.659627][T19121] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.682054][T19121] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.707395][T19121] bridge_slave_1: entered allmulticast mode [ 532.724551][T19121] bridge_slave_1: entered promiscuous mode [ 532.865006][T19224] team0: entered allmulticast mode [ 532.875475][T19224] team_slave_0: entered allmulticast mode [ 532.899354][T19224] team_slave_1: entered allmulticast mode [ 532.935765][ T4945] Bluetooth: hci3: command tx timeout [ 533.124860][T19121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.176656][T19121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.190995][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 533.334261][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'. [ 533.598943][T19243] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 533.652263][T19243] team0: Failed to send options change via netlink (err -105) [ 533.667598][T19243] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 533.678208][T19243] team0: Port device team_slave_0 removed [ 533.731337][T19121] team0: Port device team_slave_0 added [ 533.746016][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.759280][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.770137][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.784011][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.797342][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.817874][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.838413][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.855220][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.870509][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 533.881726][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3410'. [ 534.070584][T19121] team0: Port device team_slave_1 added [ 534.253122][T19258] hmó3)ó€: entered promiscuous mode [ 534.556647][T19269] gre1: entered allmulticast mode [ 534.673528][T19121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.709741][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.772252][T19121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.837237][T12665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.845314][T12665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.859743][T12665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.868367][T12665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.896957][T12665] veth1_vlan: left promiscuous mode [ 535.014062][ T4945] Bluetooth: hci3: command tx timeout [ 535.488660][T19316] Bluetooth: MGMT ver 1.23 [ 535.501579][T12665] team0 (unregistering): Port device team_slave_1 removed [ 535.552293][T12665] team0 (unregistering): Port device team_slave_0 removed [ 535.620069][T19318] Cannot find del_set index 0 as target [ 535.844201][T19121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.851344][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.878023][T19121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.903112][T19327] x_tables: duplicate underflow at hook 2 [ 536.207029][T19328] syzkaller0: entered promiscuous mode [ 536.250186][T19328] syzkaller0: entered allmulticast mode [ 536.403260][T19121] hsr_slave_0: entered promiscuous mode [ 536.412626][T19346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.419192][T19121] hsr_slave_1: entered promiscuous mode [ 536.431712][T19121] debugfs: 'hsr0' already exists in 'hsr' [ 536.437887][T19121] Cannot create hsr debugfs directory [ 536.444659][T19326] lo speed is unknown, defaulting to 1000 [ 536.461235][T19337] syzkaller1: entered promiscuous mode [ 536.489735][T19337] syzkaller1: entered allmulticast mode [ 536.781494][T12665] IPVS: stop unused estimator thread 0... [ 536.967663][T19357] netlink: 'syz.1.3438': attribute type 1 has an invalid length. [ 537.094586][ T4945] Bluetooth: hci3: command tx timeout [ 537.168681][T19357] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 537.297003][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 537.380256][T16718] bridge0: entered promiscuous mode [ 538.506251][T19413] netlink: 'syz.1.3447': attribute type 2 has an invalid length. [ 539.136320][T19434] __nla_validate_parse: 70 callbacks suppressed [ 539.136342][T19434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3451'. [ 539.190934][T19436] netlink: 'syz.2.3451': attribute type 27 has an invalid length. [ 539.459363][T19447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.649538][T19121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.665806][T19121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.674283][T19121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 539.689923][T19121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.702329][T19121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 539.730008][T19121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.748291][T19455] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 539.766902][T19121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 539.781515][T19452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3455'. [ 539.810364][T19121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.890578][T19440] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 539.909071][T19440] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 539.994388][T19121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.030639][T19440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 540.036258][T19121] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.038502][T19440] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 540.067137][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.074399][T12659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.101641][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.108927][T12659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.165378][T19440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.176738][T19440] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 540.238823][T19440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 540.246706][T19440] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 540.335598][T19440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.353035][T19440] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 540.665497][T19481] netlink: 'syz.4.3458': attribute type 1 has an invalid length. [ 540.688177][T19481] netlink: 'syz.4.3458': attribute type 3 has an invalid length. [ 540.720113][T19481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3458'. [ 540.740506][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3458'. [ 541.281343][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3463'. [ 541.599895][T19121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.764972][T19529] netlink: 'syz.1.3466': attribute type 1 has an invalid length. [ 541.837292][T19530] netlink: 'syz.3.3468': attribute type 1 has an invalid length. [ 541.851746][T19121] veth0_vlan: entered promiscuous mode [ 541.855398][T19530] netlink: 'syz.3.3468': attribute type 3 has an invalid length. [ 541.884168][T19530] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3468'. [ 541.929668][T19540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.933110][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 542.236164][T19529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.307992][T19121] veth1_vlan: entered promiscuous mode [ 542.458012][T19121] veth0_macvtap: entered promiscuous mode [ 542.571196][T19121] veth1_macvtap: entered promiscuous mode [ 542.652618][T19121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.700448][T19121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.740739][T12637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.771486][T12637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.809607][T12637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.844965][T12637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.215330][T12664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.248543][T19583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3479'. [ 543.262951][T12664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.376494][T12637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.405229][T12637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.471747][T19583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.583709][T19583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.117820][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 544.137840][T19609] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.250855][T19622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 544.308319][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 544.743575][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'. [ 546.711954][T19604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.503950][T19755] lo speed is unknown, defaulting to 1000 [ 547.804006][T19772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.029857][T19775] Bluetooth: MGMT ver 1.23 [ 548.046915][T19775] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3502'. [ 548.053663][T19778] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 548.095395][T19775] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 548.716488][T19798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3505'. [ 548.758291][T19798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3505'. [ 548.867773][T19798] netlink: 'syz.1.3505': attribute type 4 has an invalid length. [ 549.043953][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3510'. [ 549.101895][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 549.482596][T19826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3512'. [ 549.517352][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3513'. [ 549.608983][T19826] gretap1: entered allmulticast mode [ 550.073363][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3516'. [ 550.142680][T19863] netlink: 'syz.3.3516': attribute type 1 has an invalid length. [ 550.527126][T19860] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.3516'. [ 550.945375][T19888] netlink: 'syz.1.3520': attribute type 4 has an invalid length. [ 550.987384][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.995269][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.009187][T19892] netlink: 'syz.1.3520': attribute type 4 has an invalid length. [ 551.089268][T19895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3520'. [ 551.134344][T19870] bridge_slave_0: left allmulticast mode [ 551.157091][T19870] bridge_slave_0: left promiscuous mode [ 551.170564][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.205543][T19870] bridge_slave_1: left allmulticast mode [ 551.216375][T19870] bridge_slave_1: left promiscuous mode [ 551.222426][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.249776][T19904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.278404][T19870] bond0: (slave bond_slave_0): Releasing backup interface [ 551.326493][T19870] bond0: (slave bond_slave_1): Releasing backup interface [ 551.351349][T19870] team_slave_0: left allmulticast mode [ 551.359119][T19870] team0: Port device team_slave_0 removed [ 551.393114][T19870] team_slave_1: left allmulticast mode [ 551.406633][T19870] team0: Port device team_slave_1 removed [ 551.427450][T19870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.451144][T19870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.498893][T19870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.677988][T19915] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.685881][T19915] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.729410][T19919] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.736690][T19919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.744340][T19919] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.751780][T19919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.809187][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'. [ 551.845254][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 551.860271][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'. [ 552.686352][T19965] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 553.059578][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3534'. [ 553.069574][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3534'. [ 554.727766][T19923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.065401][T20015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.269103][T20028] netlink: 'syz.4.3543': attribute type 1 has an invalid length. [ 555.271956][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3545'. [ 555.346420][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'. [ 555.349924][T20028] bond1: entered promiscuous mode [ 555.361801][T20028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.395263][T20031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.403019][T20031] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 555.419179][T20031] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 555.435086][T20031] bond1: (slave ipip0): making interface the new active one [ 555.443002][T20031] ipip0: entered promiscuous mode [ 555.449918][T20031] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 555.876951][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 556.010290][T20047] bond0: (slave ip6tnl0): refused to change device type [ 556.667073][T20074] xt_CT: No such helper "snmp_trap" [ 559.004669][T20047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.335961][ T5760] IPVS: starting estimator thread 0... [ 559.367104][T20103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.443172][T20101] IPVS: using max 25 ests per chain, 60000 per kthread [ 562.489724][T20122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.824660][T20174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.971792][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 563.366715][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3592'. [ 563.380755][T20195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3592'. [ 563.627206][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 563.731662][T20208] netlink: 'syz.3.3597': attribute type 1 has an invalid length. [ 563.782050][T20208] netlink: 'syz.3.3597': attribute type 13 has an invalid length. [ 563.825331][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3597'. [ 563.965674][T20220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3598'. [ 564.337012][T20239] netlink: 'syz.3.3605': attribute type 1 has an invalid length. [ 564.410558][T20239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.456821][T20243] vlan1: entered allmulticast mode [ 564.462615][T20243] veth0_to_bond: entered allmulticast mode [ 564.489422][T20243] bond2: (slave vlan1): Opening slave failed [ 564.603122][T20242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3606'. [ 564.757021][T20259] syzkaller0: entered promiscuous mode [ 564.767514][T20259] syzkaller0: entered allmulticast mode [ 565.231309][T20275] netlink: 'syz.0.3613': attribute type 1 has an invalid length. [ 565.446443][T20291] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3617'. [ 565.493142][T20291] tipc: Enabling of bearer rejected, failed to enable media [ 565.625744][T20298] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3619'. [ 566.446007][T20339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3629'. [ 569.398307][T20339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.411594][T20450] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 569.645053][T20462] __nla_validate_parse: 2 callbacks suppressed [ 569.645073][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3661'. [ 569.694866][T20465] pimreg: entered allmulticast mode [ 569.809072][T20457] pimreg: left allmulticast mode [ 570.000698][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3665'. [ 570.672296][T20502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3671'. [ 570.945619][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.953522][T20507] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.985854][T20513] netlink: 'syz.3.3676': attribute type 1 has an invalid length. [ 570.995522][T20513] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.3676'. [ 570.997554][T20507] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.011975][T20507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.019645][T20507] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.026983][T20507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.053177][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'. [ 571.178275][T20507] bridge0: entered promiscuous mode [ 571.232550][T20507] bridge0: entered allmulticast mode [ 572.204880][T20565] netlink: 'syz.0.3687': attribute type 12 has an invalid length. [ 572.250530][T20571] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 572.492117][T20585] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3692'. [ 572.554183][T20585] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.561855][T20585] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.602951][T20585] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.610205][T20585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.617832][T20585] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.625085][T20585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.679543][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 572.705870][T20589] IPVS: Unknown mcast interface: _ridge_slave_0 [ 572.993806][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 573.255028][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 573.748514][T20622] geneve0: entered promiscuous mode [ 573.778677][T20622] geneve0: left promiscuous mode [ 574.292186][T20654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3710'. [ 574.356756][T20658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.420108][T20662] FAULT_INJECTION: forcing a failure. [ 574.420108][T20662] name failslab, interval 1, probability 0, space 0, times 0 [ 574.448166][T20662] CPU: 1 UID: 0 PID: 20662 Comm: syz.3.3713 Not tainted syzkaller #0 PREEMPT(full) [ 574.448198][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.448210][T20662] Call Trace: [ 574.448219][T20662] [ 574.448229][T20662] dump_stack_lvl+0xe8/0x150 [ 574.448264][T20662] should_fail_ex+0x40c/0x560 [ 574.448305][T20662] should_failslab+0xa8/0x100 [ 574.448332][T20662] __kmalloc_noprof+0xe8/0x750 [ 574.448370][T20662] ? bpf_test_init+0x9f/0x150 [ 574.448403][T20662] bpf_test_init+0x9f/0x150 [ 574.448429][T20662] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 574.448467][T20662] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 574.448499][T20662] ? __fget_files+0x2a/0x420 [ 574.448529][T20662] ? __fget_files+0x2a/0x420 [ 574.448552][T20662] ? __fget_files+0x3a2/0x420 [ 574.448575][T20662] ? __fget_files+0x2a/0x420 [ 574.448605][T20662] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 574.448629][T20662] bpf_prog_test_run+0x2c5/0x340 [ 574.448657][T20662] __sys_bpf+0x643/0x950 [ 574.448688][T20662] ? __pfx___sys_bpf+0x10/0x10 [ 574.448734][T20662] ? ksys_write+0x242/0x270 [ 574.448768][T20662] ? __pfx_ksys_write+0x10/0x10 [ 574.448799][T20662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.448823][T20662] __x64_sys_bpf+0x7c/0x90 [ 574.448851][T20662] do_syscall_64+0x174/0x580 [ 574.448877][T20662] ? trace_irq_disable+0x3b/0x140 [ 574.448906][T20662] ? clear_bhb_loop+0x40/0x90 [ 574.448931][T20662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.448962][T20662] RIP: 0033:0x7fc86899ce59 [ 574.448983][T20662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.449001][T20662] RSP: 002b:00007fc869844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 574.449023][T20662] RAX: ffffffffffffffda RBX: 00007fc868c15fa0 RCX: 00007fc86899ce59 [ 574.449037][T20662] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 574.449050][T20662] RBP: 00007fc869844090 R08: 0000000000000000 R09: 0000000000000000 [ 574.449061][T20662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.449073][T20662] R13: 00007fc868c16038 R14: 00007fc868c15fa0 R15: 00007ffd0c8a5038 [ 574.449104][T20662] [ 574.782845][T20668] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3714'. [ 574.808761][T20668] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.816677][T20668] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.888079][T20668] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.895380][T20668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.903029][T20668] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.910299][T20668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.935212][T20668] bridge0: entered allmulticast mode [ 575.005826][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 575.252051][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 575.750599][T20719] FAULT_INJECTION: forcing a failure. [ 575.750599][T20719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.770211][T20719] CPU: 1 UID: 0 PID: 20719 Comm: syz.2.3726 Not tainted syzkaller #0 PREEMPT(full) [ 575.770241][T20719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.770253][T20719] Call Trace: [ 575.770261][T20719] [ 575.770269][T20719] dump_stack_lvl+0xe8/0x150 [ 575.770302][T20719] should_fail_ex+0x40c/0x560 [ 575.770341][T20719] _copy_from_user+0x2d/0xb0 [ 575.770366][T20719] bpf_test_init+0xd8/0x150 [ 575.770395][T20719] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 575.770434][T20719] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 575.770463][T20719] ? __fget_files+0x2a/0x420 [ 575.770492][T20719] ? __fget_files+0x2a/0x420 [ 575.770516][T20719] ? __fget_files+0x3a2/0x420 [ 575.770539][T20719] ? __fget_files+0x2a/0x420 [ 575.770570][T20719] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 575.770596][T20719] bpf_prog_test_run+0x2c5/0x340 [ 575.770622][T20719] __sys_bpf+0x643/0x950 [ 575.770655][T20719] ? __pfx___sys_bpf+0x10/0x10 [ 575.770702][T20719] ? ksys_write+0x242/0x270 [ 575.770745][T20719] ? __pfx_ksys_write+0x10/0x10 [ 575.770780][T20719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.770804][T20719] __x64_sys_bpf+0x7c/0x90 [ 575.770833][T20719] do_syscall_64+0x174/0x580 [ 575.770858][T20719] ? trace_irq_disable+0x3b/0x140 [ 575.770888][T20719] ? clear_bhb_loop+0x40/0x90 [ 575.770914][T20719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.770935][T20719] RIP: 0033:0x7f1e25d9ce59 [ 575.770957][T20719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.770975][T20719] RSP: 002b:00007f1e26b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.770999][T20719] RAX: ffffffffffffffda RBX: 00007f1e26015fa0 RCX: 00007f1e25d9ce59 [ 575.771013][T20719] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 575.771027][T20719] RBP: 00007f1e26b76090 R08: 0000000000000000 R09: 0000000000000000 [ 575.771039][T20719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.771052][T20719] R13: 00007f1e26016038 R14: 00007f1e26015fa0 R15: 00007ffcbbc0d768 [ 575.771084][T20719] [ 576.663358][T20754] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3734'. [ 576.673652][T20754] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.680867][T20754] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.694368][T20754] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.701640][T20754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.709283][T20754] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.716456][T20754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.732910][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 577.136778][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3736'. [ 577.160937][T20766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.160499][T20690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.396499][T20785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3742'. [ 578.731613][T20806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3748'. [ 578.766507][T20806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3748'. [ 578.792128][T20810] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 578.873370][T20813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3748'. [ 578.922479][T20816] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 578.958013][T20816] netlink: 'syz.1.3747': attribute type 2 has an invalid length. [ 578.974511][T20802] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.246260][ T10] bridge0: entered promiscuous mode [ 579.344050][T20830] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.351929][T20830] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.409863][T20826] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.417161][T20826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.424868][T20826] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.432099][T20826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.631737][T20843] sctp: [Deprecated]: syz.0.3755 (pid 20843) Use of int in max_burst socket option deprecated. [ 579.631737][T20843] Use struct sctp_assoc_value instead [ 579.880422][T20839] "syz.0.3755" (20839) uses obsolete ecb(arc4) skcipher [ 579.987072][T20859] __nla_validate_parse: 3 callbacks suppressed [ 579.987099][T20859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 580.110632][T20862] FAULT_INJECTION: forcing a failure. [ 580.110632][T20862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.172627][T20862] CPU: 0 UID: 0 PID: 20862 Comm: syz.3.3761 Not tainted syzkaller #0 PREEMPT(full) [ 580.172660][T20862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.172673][T20862] Call Trace: [ 580.172681][T20862] [ 580.172689][T20862] dump_stack_lvl+0xe8/0x150 [ 580.172732][T20862] should_fail_ex+0x40c/0x560 [ 580.172770][T20862] _copy_from_user+0x2d/0xb0 [ 580.172797][T20862] tipc_setsockopt+0x49c/0x9a0 [ 580.172915][T20862] ? __pfx_tipc_setsockopt+0x10/0x10 [ 580.172973][T20862] ? __fget_files+0x2a/0x420 [ 580.172996][T20862] ? aa_sock_opt_perm+0xff/0x1a0 [ 580.173032][T20862] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 580.173063][T20862] ? __pfx_tipc_setsockopt+0x10/0x10 [ 580.173096][T20862] do_sock_setsockopt+0x17c/0x1b0 [ 580.173129][T20862] __x64_sys_setsockopt+0x13d/0x1b0 [ 580.173156][T20862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.173180][T20862] do_syscall_64+0x174/0x580 [ 580.173203][T20862] ? trace_irq_disable+0x3b/0x140 [ 580.173234][T20862] ? clear_bhb_loop+0x40/0x90 [ 580.173261][T20862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.173283][T20862] RIP: 0033:0x7fc86899ce59 [ 580.173304][T20862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.173323][T20862] RSP: 002b:00007fc869844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 580.173347][T20862] RAX: ffffffffffffffda RBX: 00007fc868c15fa0 RCX: 00007fc86899ce59 [ 580.173362][T20862] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 580.173376][T20862] RBP: 00007fc869844090 R08: 0000000000000010 R09: 0000000000000000 [ 580.173390][T20862] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.173404][T20862] R13: 00007fc868c16038 R14: 00007fc868c15fa0 R15: 00007ffd0c8a5038 [ 580.173440][T20862] [ 580.386709][T20865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3762'. [ 580.847678][T20889] netlink: 'syz.4.3768': attribute type 1 has an invalid length. [ 580.879369][T20889] netlink: 'syz.4.3768': attribute type 4 has an invalid length. [ 580.902564][T20889] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3768'. [ 580.930549][T20893] netlink: 'syz.4.3768': attribute type 1 has an invalid length. [ 580.992901][T20893] netlink: 'syz.4.3768': attribute type 4 has an invalid length. [ 581.027605][T20893] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3768'. [ 581.403847][T20918] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3775'. [ 581.583278][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 581.805444][T20926] bridge0: entered allmulticast mode [ 582.104494][T20936] syzkaller1: entered promiscuous mode [ 582.126664][T20946] FAULT_INJECTION: forcing a failure. [ 582.126664][T20946] name failslab, interval 1, probability 0, space 0, times 0 [ 582.127991][T20936] syzkaller1: entered allmulticast mode [ 582.141731][T20946] CPU: 1 UID: 0 PID: 20946 Comm: syz.0.3779 Not tainted syzkaller #0 PREEMPT(full) [ 582.141760][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.141771][T20946] Call Trace: [ 582.141778][T20946] [ 582.141786][T20946] dump_stack_lvl+0xe8/0x150 [ 582.141814][T20946] should_fail_ex+0x40c/0x560 [ 582.141850][T20946] should_failslab+0xa8/0x100 [ 582.141870][T20946] __kmalloc_cache_noprof+0x88/0x660 [ 582.141897][T20946] ? tipc_group_create+0x9b/0x4f0 [ 582.141927][T20946] tipc_group_create+0x9b/0x4f0 [ 582.141954][T20946] tipc_sk_join+0x25d/0x6a0 [ 582.141979][T20946] ? __pfx_tipc_sk_join+0x10/0x10 [ 582.141996][T20946] ? tipc_setsockopt+0x731/0x9a0 [ 582.142016][T20946] ? __local_bh_enable_ip+0xd0/0x130 [ 582.142042][T20946] tipc_setsockopt+0x73e/0x9a0 [ 582.142065][T20946] ? __pfx_tipc_setsockopt+0x10/0x10 [ 582.142093][T20946] ? __fget_files+0x2a/0x420 [ 582.142114][T20946] ? aa_sock_opt_perm+0xff/0x1a0 [ 582.142143][T20946] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 582.142168][T20946] ? __pfx_tipc_setsockopt+0x10/0x10 [ 582.142197][T20946] do_sock_setsockopt+0x17c/0x1b0 [ 582.142222][T20946] __x64_sys_setsockopt+0x13d/0x1b0 [ 582.142243][T20946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.142264][T20946] do_syscall_64+0x174/0x580 [ 582.142285][T20946] ? trace_irq_disable+0x3b/0x140 [ 582.142311][T20946] ? clear_bhb_loop+0x40/0x90 [ 582.142342][T20946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.142365][T20946] RIP: 0033:0x7f086f19ce59 [ 582.142384][T20946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.142398][T20946] RSP: 002b:00007f086ff7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 582.142419][T20946] RAX: ffffffffffffffda RBX: 00007f086f415fa0 RCX: 00007f086f19ce59 [ 582.142432][T20946] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 582.142443][T20946] RBP: 00007f086ff7f090 R08: 0000000000000010 R09: 0000000000000000 [ 582.142454][T20946] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.142466][T20946] R13: 00007f086f416038 R14: 00007f086f415fa0 R15: 00007fffd0358f78 [ 582.142497][T20946] [ 583.145330][T20976] netlink: 'syz.1.3789': attribute type 1 has an invalid length. [ 583.310984][T20978] C: renamed from veth1_to_team (while UP) [ 583.355577][T20978] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 583.375448][T20988] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 583.406107][T20978] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3790'. [ 583.429910][T20988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.469821][T20978] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 583.890005][T21000] syzkaller0: entered promiscuous mode [ 583.914292][T21000] syzkaller0: entered allmulticast mode [ 584.122030][T21022] openvswitch: netlink: Flow actions may not be safe on all matching packets. Stopping sshd: stopped /usr/sbin/sshd (pid 5383) OK [ 584.871666][T21050] bridge0: port 3(vlan2) entered blocking state Stopping crond: [ 584.910552][T21050] bridge0: port 3(vlan2) entered disabled state [ 584.942166][T21050] vlan2: entered allmulticast mode [ 584.987153][T21050] geneve0: entered allmulticast mode [ 585.030475][T21050] vlan2: entered promiscuous mode [ 585.056166][T21059] syz.2.3810: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 585.085557][T21050] geneve0: entered promiscuous mode stopped /usr/sbin/crond (pid 5368) [ 585.121354][T21059] CPU: 0 UID: 0 PID: 21059 Comm: syz.2.3810 Not tainted syzkaller #0 PREEMPT(full) [ 585.121385][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 585.121397][T21059] Call Trace: [ 585.121405][T21059] [ 585.121414][T21059] dump_stack_lvl+0xe8/0x150 [ 585.121445][T21059] warn_alloc+0x249/0x340 [ 585.121475][T21059] ? __pfx_stack_trace_save+0x10/0x10 [ 585.121542][T21059] ? __pfx_warn_alloc+0x10/0x10 [ 585.121577][T21059] ? __kasan_kmalloc+0x93/0xb0 [ 585.121604][T21059] ? __kmalloc_cache_noprof+0x318/0x660 [ 585.121629][T21059] ? xskq_create+0x56/0x170 [ 585.121700][T21059] ? xsk_init_queue+0x8a/0xe0 [ 585.121747][T21059] ? xsk_setsockopt+0x52a/0x960 [ 585.121774][T21059] ? do_sock_setsockopt+0x17c/0x1b0 [ 585.121793][T21059] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 585.121812][T21059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.121841][T21059] __vmalloc_node_range_noprof+0x12c/0x1730 [ 585.121903][T21059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 585.121940][T21059] ? __kasan_kmalloc+0x93/0xb0 [ 585.121976][T21059] vmalloc_user_noprof+0xad/0xe0 [ 585.122005][T21059] ? xskq_create+0xbf/0x170 [ 585.122026][T21059] xskq_create+0xbf/0x170 [ 585.122051][T21059] xsk_init_queue+0x8a/0xe0 [ 585.122084][T21059] xsk_setsockopt+0x52a/0x960 [ 585.122117][T21059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 585.122144][T21059] ? __sys_connect+0x107/0x460 [ 585.122173][T21059] ? __pfx_aa_sk_perm+0x10/0x10 [ 585.122217][T21059] ? aa_sock_opt_perm+0xff/0x1a0 [ 585.122251][T21059] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 585.122278][T21059] ? __pfx_xsk_setsockopt+0x10/0x10 OK[ 585.122310][T21059] do_sock_setsockopt+0x17c/0x1b0 [ 585.122337][T21059] __x64_sys_setsockopt+0x13d/0x1b0 [ 585.122366][T21059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.122387][T21059] do_syscall_64+0x174/0x580 [ 585.122409][T21059] ? trace_irq_disable+0x3b/0x140 [ 585.122438][T21059] ? clear_bhb_loop+0x40/0x90 [ 585.122464][T21059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.122484][T21059] RIP: 0033:0x7f1e25d9ce59 [ 585.122505][T21059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.122522][T21059] RSP: 002b:00007f1e26b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 585.122546][T21059] RAX: ffffffffffffffda RBX: 00007f1e26015fa0 RCX: 00007f1e25d9ce59 [ 585.122561][T21059] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 585.122573][T21059] RBP: 00007f1e25e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 585.122585][T21059] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.122598][T21059] R13: 00007f1e26016038 R14: 00007f1e26015fa0 R15: 00007ffcbbc0d768 [ 585.122633][T21059] [ 585.142341][T12664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.153754][T21059] Mem-Info: [ 585.228187][T12664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.317343][T21065] macvlan2: entered allmulticast mode [ 585.331241][T21059] active_anon:5932 inactive_anon:0 isolated_anon:0 [ 585.331241][T21059] active_file:3540 inactive_file:40172 isolated_file:0 [ 585.331241][T21059] unevictable:768 dirty:38 writeback:0 [ 585.331241][T21059] slab_reclaimable:12043 slab_unreclaimable:114739 [ 585.331241][T21059] mapped:29881 shmem:1287 pagetables:1284 [ 585.331241][T21059] sec_pagetables:0 bounce:0 [ 585.331241][T21059] kernel_misc_reclaimable:0 [ 585.331241][T21059] free:1306964 free_pcp:10158 free_cma:0 [ 585.430383][T21072] netlink: 'syz.4.3812': attribute type 3 has an invalid length. [ 585.531240][T21059] Node 0 active_anon:23828kB inactive_anon:0kB active_file:14160kB inactive_file:160492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119524kB dirty:152kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14544kB pagetables:5128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 585.613143][T21059] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 585.723156][T21072] netlink: 'syz.4.3812': attribute type 3 has an invalid length. [ 585.737145][T21059] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.753562][T21072] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3812'. [ 585.793212][T21059] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 585.809002][T21059] Node 0 DMA32 free:1267436kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23728kB inactive_anon:0kB active_file:14160kB inactive_file:160492kB unevictable:1536kB writepending:152kB zspages:0kB present:3129332kB managed:2552916kB mlocked:0kB bounce:0kB free_pcp:40436kB local_pcp:21224kB free_cma:0kB [ 585.933500][T21059] lowmem_reserve[]: 0 0 0 0 0 [ 585.945954][T21059] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 585.988199][T21088] netlink: 'syz.3.3816': attribute type 4 has an invalid length. [ 586.008716][T21088] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 586.029892][T21059] lowmem_reserve[]: 0 0 0 0 0 [ 586.036669][T21059] Node 1 Normal free:3945260kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Stopping dhcpcd... [ 586.115553][T21059] lowmem_reserve[]: 0 0 0 0 0 [ 586.141975][T21092] gretap1: entered allmulticast mode [ 586.152012][T21059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB stopped /sbin/dhcpcd (pid 5290) [ 586.181054][T21059] Node 0 DMA32: 8098*4kB (UM) 5057*8kB (UME) 3069*16kB (UME) 198*32kB (UM) 479*64kB (UME) 541*128kB (UM) 401*256kB (UM) 203*512kB (UME) 103*1024kB (UME) 43*2048kB (UME) 156*4096kB (UM) = 1267296kB [ 586.208367][T21100] netlink: 336 bytes leftover after parsing attributes in process `syz.4.3819'. [ 586.223835][T21059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 586.250021][T21059] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 9*16kB (UM) 8*32kB (UM) 4*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3945260kB [ 586.281305][T21059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.314864][T21059] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.343455][T21059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.373813][T21059] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.404196][T21059] 44995 total pagecache pages [ 586.418283][T21059] 0 pages in swap cache Stopping network[ 586.432870][T21059] Free swap = 124996kB : [ 586.440639][T21059] Total swap = 124996kB [ 586.458203][T21059] 2097051 pages RAM [ 586.464193][T21059] 0 pages HighMem/MovableOnly [ 586.472607][T21059] 427036 pages reserved [ 586.476993][T21059] 0 pages cma reserved [ 586.868627][T21112] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 586.978506][T21123] netlink: 212152 bytes leftover after parsing attributes in process `syz.2.3824'. [ 587.010371][T21126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3825'. [ 587.181425][T21138] netlink: 'syz.1.3825': attribute type 10 has an invalid length. [ 587.215665][T21138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3825'. [ 587.277930][T21112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.358253][T21124] bond2: (slave dummy0): making interface the new active one [ 587.382695][T21124] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 587.529086][T21138] team0: Port device geneve1 added [ 587.551143][T21149] FAULT_INJECTION: forcing a failure. [ 587.551143][T21149] name failslab, interval 1, probability 0, space 0, times 0 [ 587.605096][T21149] CPU: 0 UID: 0 PID: 21149 Comm: syz.2.3829 Not tainted syzkaller #0 PREEMPT(full) [ 587.605128][T21149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.605152][T21149] Call Trace: [ 587.605160][T21149] [ 587.605168][T21149] dump_stack_lvl+0xe8/0x150 [ 587.605200][T21149] should_fail_ex+0x40c/0x560 [ 587.605240][T21149] should_failslab+0xa8/0x100 [ 587.605261][T21149] ? skb_clone+0x212/0x3a0 [ 587.605285][T21149] kmem_cache_alloc_noprof+0x87/0x650 [ 587.605322][T21149] skb_clone+0x212/0x3a0 [ 587.605349][T21149] __netlink_deliver_tap+0x413/0x860 [ 587.605387][T21149] ? netlink_deliver_tap+0x2e/0x1b0 [ 587.605412][T21149] netlink_deliver_tap+0x19c/0x1b0 [ 587.605436][T21149] netlink_dump+0x95b/0xee0 [ 587.605472][T21149] ? __pfx_netlink_dump+0x10/0x10 [ 587.605509][T21149] ? netlink_recvmsg+0x5bf/0xa50 [ 587.605531][T21149] ? kmem_cache_free+0x182/0x650 [ 587.605568][T21149] netlink_recvmsg+0x683/0xa50 [ 587.605602][T21149] ? __pfx_netlink_recvmsg+0x10/0x10 [ 587.605630][T21149] ? __lock_acquire+0x683/0x2cd0 [ 587.605658][T21149] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 587.605684][T21149] ? security_socket_recvmsg+0x7e/0x2c0 [ 587.605707][T21149] ? __pfx_netlink_recvmsg+0x10/0x10 [ 587.605735][T21149] sock_recvmsg_nosec+0x10c/0x140 [ 587.605766][T21149] ____sys_recvmsg+0x3e3/0x4a0 [ 587.605800][T21149] ? __pfx_____sys_recvmsg+0x10/0x10 [ 587.605842][T21149] ? import_iovec+0x73/0xa0 [ 587.605872][T21149] ___sys_recvmsg+0x213/0x590 [ 587.605902][T21149] ? __pfx____sys_recvmsg+0x10/0x10 [ 587.605930][T21149] ? __fget_files+0x2a/0x420 [ 587.605992][T21149] do_recvmmsg+0x329/0x810 [ 587.606027][T21149] ? __pfx_do_recvmmsg+0x10/0x10 [ 587.606065][T21149] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 587.606113][T21149] __x64_sys_recvmmsg+0x198/0x250 [ 587.606150][T21149] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 587.606185][T21149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.606209][T21149] do_syscall_64+0x174/0x580 [ 587.606232][T21149] ? trace_irq_disable+0x3b/0x140 [ 587.606262][T21149] ? clear_bhb_loop+0x40/0x90 [ 587.606288][T21149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.606308][T21149] RIP: 0033:0x7f1e25d9ce59 [ 587.606328][T21149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.606347][T21149] RSP: 002b:00007f1e23ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 587.606369][T21149] RAX: ffffffffffffffda RBX: 00007f1e26016090 RCX: 00007f1e25d9ce59 [ 587.606384][T21149] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003 [ 587.606397][T21149] RBP: 00007f1e23ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.606409][T21149] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000002 [ 587.606422][T21149] R13: 00007f1e26016128 R14: 00007f1e26016090 R15: 00007ffcbbc0d768 [ 587.606458][T21149] [ 588.259608][T21161] tipc: Started in network mode [ 588.283299][T21161] tipc: Node identity ac14140f, cluster identity 4711 [ 588.308065][T21161] tipc: New replicast peer: 255.255.255.255 [ 588.333855][T21161] tipc: Enabled bearer , priority 10 OK [ 588.846418][T21183] sctp: [Deprecated]: syz.2.3835 (pid 21183) Use of int in max_burst socket option. [ 588.846418][T21183] Use struct sctp_assoc_value instead Stopping iptables: OK [ 589.214785][T21194] FAULT_INJECTION: forcing a failure. [ 589.214785][T21194] name failslab, interval 1, probability 0, space 0, times 0 [ 589.286329][T21194] CPU: 1 UID: 0 PID: 21194 Comm: syz.1.3838 Not tainted syzkaller #0 PREEMPT(full) [ 589.286360][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.286373][T21194] Call Trace: [ 589.286381][T21194] [ 589.286391][T21194] dump_stack_lvl+0xe8/0x150 [ 589.286423][T21194] should_fail_ex+0x40c/0x560 [ 589.286463][T21194] should_failslab+0xa8/0x100 [ 589.286487][T21194] __kmalloc_cache_noprof+0x88/0x660 [ 589.286516][T21194] ? tipc_sub_subscribe+0x114/0x690 [ 589.286611][T21194] tipc_sub_subscribe+0x114/0x690 [ 589.286652][T21194] tipc_conn_rcv_sub+0x14f/0x370 [ 589.286683][T21194] tipc_topsrv_kern_subscr+0x188/0x250 [ 589.286707][T21194] ? tipc_own_addr+0x45/0x2a0 [ 589.286734][T21194] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 589.286762][T21194] ? tipc_own_addr+0x45/0x2a0 [ 589.286790][T21194] ? __asan_memset+0x22/0x50 [ 589.286819][T21194] tipc_group_create+0x35b/0x4f0 [ 589.286852][T21194] tipc_sk_join+0x25d/0x6a0 [ 589.286881][T21194] ? __pfx_tipc_sk_join+0x10/0x10 [ 589.286900][T21194] ? tipc_setsockopt+0x731/0x9a0 [ 589.286923][T21194] ? __local_bh_enable_ip+0xd0/0x130 [ 589.286951][T21194] tipc_setsockopt+0x73e/0x9a0 [ 589.286977][T21194] ? __pfx_tipc_setsockopt+0x10/0x10 [ 589.287009][T21194] ? __fget_files+0x2a/0x420 [ 589.287033][T21194] ? aa_sock_opt_perm+0xff/0x1a0 [ 589.287068][T21194] ? bpf_lsm_socket_setsockopt+0x9/0x20 Stopping system [ 589.287095][T21194] ? __pfx_tipc_setsockopt+0x10/0x10 message bus: [ 589.287128][T21194] do_sock_setsockopt+0x17c/0x1b0 [ 589.287157][T21194] __x64_sys_setsockopt+0x13d/0x1b0 [ 589.287181][T21194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.287205][T21194] do_syscall_64+0x174/0x580 [ 589.287229][T21194] ? trace_irq_disable+0x3b/0x140 [ 589.287259][T21194] ? clear_bhb_loop+0x40/0x90 [ 589.287286][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.287306][T21194] RIP: 0033:0x7f5aedd9ce59 [ 589.287328][T21194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.287346][T21194] RSP: 002b:00007f5aeec9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 589.287369][T21194] RAX: ffffffffffffffda RBX: 00007f5aee015fa0 RCX: 00007f5aedd9ce59 [ 589.287385][T21194] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 589.287398][T21194] RBP: 00007f5aeec9a090 R08: 0000000000000010 R09: 0000000000000000 [ 589.287412][T21194] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.287425][T21194] R13: 00007f5aee016038 R14: 00007f5aee015fa0 R15: 00007ffff76ab2e8 [ 589.287461][T21194] [ 589.291605][T21194] tipc: Subscription rejected, no memory [ 589.352580][ T5728] tipc: Node number set to 2886997007 [ 589.382908][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'. [ 589.604395][T21204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3840'. [ 589.669227][T21204] netlink: zone id is out of range [ 589.689664][T21204] netlink: zone id is out of range [ 589.712240][T21204] netlink: zone id is out of range [ 589.731485][T21204] netlink: zone id is out of range [ 589.745433][T21204] netlink: zone id is out of range [ 589.765779][T21204] netlink: zone id is out of range [ 589.779325][T21204] netlink: zone id is out of range [ 589.791920][T21204] netlink: zone id is out of range [ 589.807771][T21204] netlink: zone id is out of range [ 589.921682][T21204] netlink: set zone limit has 4 unknown bytes [ 590.255660][T21217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3845'. done [ 590.378413][T21227] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 590.899966][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3848'. [ 590.994029][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3848'. Stopping klogd: [ 591.198418][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3848'. OK Stopping acpid: [ 591.401473][T21256] batadv0: entered promiscuous mode [ 591.510743][T21262] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 591.530295][T21262] bond3 (unregistering): Released all slaves [ 592.387109][T21282] FAULT_INJECTION: forcing a failure. [ 592.387109][T21282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.400505][T21282] CPU: 1 UID: 0 PID: 21282 Comm: syz.3.3858 Not tainted syzkaller #0 PREEMPT(full) [ 592.400531][T21282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.400539][T21282] Call Trace: [ 592.400545][T21282] [ 592.400552][T21282] dump_stack_lvl+0xe8/0x150 [ 592.400572][T21282] should_fail_ex+0x40c/0x560 [ 592.400595][T21282] _copy_from_user+0x2d/0xb0 [ 592.400610][T21282] __sys_bpf+0x229/0x950 [ 592.400630][T21282] ? __pfx___sys_bpf+0x10/0x10 [ 592.400657][T21282] ? ksys_write+0x242/0x270 [ 592.400676][T21282] ? __pfx_ksys_write+0x10/0x10 [ 592.400697][T21282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.400710][T21282] __x64_sys_bpf+0x7c/0x90 [ 592.400727][T21282] do_syscall_64+0x174/0x580 [ 592.400743][T21282] ? trace_irq_disable+0x3b/0x140 [ 592.400760][T21282] ? clear_bhb_loop+0x40/0x90 [ 592.400784][T21282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.400805][T21282] RIP: 0033:0x7fc86899ce59 [ 592.400825][T21282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.400842][T21282] RSP: 002b:00007fc869844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.400864][T21282] RAX: ffffffffffffffda RBX: 00007fc868c15fa0 RCX: 00007fc86899ce59 [ 592.400874][T21282] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 592.400882][T21282] RBP: 00007fc869844090 R08: 0000000000000000 R09: 0000000000000000 [ 592.400890][T21282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.400897][T21282] R13: 00007fc868c16038 R14: 00007fc868c15fa0 R15: 00007ffd0c8a5038 [ 592.400916][T21282] OK Stopping syslogd: stopped /sbin/syslogd (pid 4978) OK umount: can't remount debugfs read-only [ 593.192915][T21217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.619888][T21311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3866'. [ 593.751136][T21312] lo speed is unknown, defaulting to 1000 [ 593.957803][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3869'. [ 594.098249][T21323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 594.261202][T21325] gretap1: entered allmulticast mode [ 594.304744][T21325] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 594.543257][T21334] FAULT_INJECTION: forcing a failure. [ 594.543257][T21334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.579819][T21334] CPU: 0 UID: 0 PID: 21334 Comm: syz.4.3871 Not tainted syzkaller #0 PREEMPT(full) [ 594.579850][T21334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.579863][T21334] Call Trace: [ 594.579872][T21334] [ 594.579881][T21334] dump_stack_lvl+0xe8/0x150 [ 594.579912][T21334] should_fail_ex+0x40c/0x560 [ 594.579950][T21334] _copy_from_user+0x2d/0xb0 [ 594.579976][T21334] __sys_bpf+0x229/0x950 [ 594.580009][T21334] ? __pfx___sys_bpf+0x10/0x10 [ 594.580057][T21334] ? ksys_write+0x242/0x270 [ 594.580090][T21334] ? __pfx_ksys_write+0x10/0x10 [ 594.580125][T21334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.580148][T21334] __x64_sys_bpf+0x7c/0x90 [ 594.580177][T21334] do_syscall_64+0x174/0x580 [ 594.580201][T21334] ? trace_irq_disable+0x3b/0x140 [ 594.580230][T21334] ? clear_bhb_loop+0x40/0x90 [ 594.580256][T21334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.580285][T21334] RIP: 0033:0x7fdf1559ce59 [ 594.580306][T21334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.580324][T21334] RSP: 002b:00007fdf16512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 594.580346][T21334] RAX: ffffffffffffffda RBX: 00007fdf15815fa0 RCX: 00007fdf1559ce59 [ 594.580363][T21334] RDX: 0000000000000094 RSI: 0000200000000a40 RDI: 0000000000000005 [ 594.580376][T21334] RBP: 00007fdf16512090 R08: 0000000000000000 R09: 0000000000000000 [ 594.580390][T21334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.580403][T21334] R13: 00007fdf15816038 R14: 00007fdf15815fa0 R15: 00007fff8fab3298 [ 594.580438][T21334] [ 595.137880][T21347] net_ratelimit: 1 callbacks suppressed [ 595.137903][T21347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.389312][T21351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3878'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 596.194520][T21311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 Sent SIGTERM to all processes Connection to 10.128.0.136 closed by remote host. Sent SIGKILL to all processes [ 597.596583][T12641] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Requesting system poweroff [ 597.697087][T12641] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.782050][T12641] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.861217][T12641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.951009][T12641] vlan2: left allmulticast mode [ 597.956069][T12641] geneve0: left allmulticast mode [ 597.961153][T12641] vlan2: left promiscuous mode [ 597.966830][T12641] geneve0: left promiscuous mode [ 597.972215][T12641] bridge0: port 3(vlan2) entered disabled state [ 597.981861][T12641] bridge_slave_1: left allmulticast mode [ 597.987648][T12641] bridge_slave_1: left promiscuous mode [ 597.994841][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.005933][T12641] bridge_slave_0: left allmulticast mode [ 598.011580][T12641] bridge_slave_0: left promiscuous mode [ 598.017533][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.182748][T12641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.194429][T12641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.207922][T12641] bond0 (unregistering): Released all slaves [ 598.222074][T12641] bond1 (unregistering): Released all slaves [ 598.238137][T12641] bond2 (unregistering): (slave dummy0): Releasing active interface [ 598.249044][T12641] bond2 (unregistering): Released all slaves [ 598.346889][T12641] ================================================================== [ 598.355016][T12641] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 598.362918][T12641] Read of size 8 at addr ffff88804ec4c680 by task kworker/u8:21/12641 [ 598.371072][T12641] [ 598.373663][T12641] CPU: 0 UID: 0 PID: 12641 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 598.373684][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.373696][T12641] Workqueue: netns cleanup_net [ 598.373786][T12641] Call Trace: [ 598.373793][T12641] [ 598.373800][T12641] dump_stack_lvl+0xe8/0x150 [ 598.373821][T12641] print_address_description+0x55/0x1e0 [ 598.373845][T12641] ? fib_rules_lookup+0x15e/0xeb0 [ 598.373862][T12641] print_report+0x58/0x70 [ 598.373876][T12641] kasan_report+0x117/0x150 [ 598.373903][T12641] ? fib_rules_lookup+0x15e/0xeb0 [ 598.373922][T12641] ? fib_rules_lookup+0x99/0xeb0 [ 598.373938][T12641] fib_rules_lookup+0x15e/0xeb0 [ 598.373956][T12641] ? fib_rules_lookup+0x99/0xeb0 [ 598.373976][T12641] ? __pfx_fib_rules_lookup+0x10/0x10 [ 598.373993][T12641] ? l3mdev_update_flow+0x26/0x610 [ 598.374034][T12641] ? l3mdev_update_flow+0x4ad/0x610 [ 598.374054][T12641] __fib_lookup+0x106/0x210 [ 598.374127][T12641] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.374147][T12641] ? __pfx___fib_lookup+0x10/0x10 [ 598.374165][T12641] ? __schedule+0x1856/0x57a0 [ 598.374181][T12641] ? arch_stack_walk+0x11b/0x150 [ 598.374219][T12641] ? fib_lookup+0x49/0x440 [ 598.374268][T12641] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 598.374312][T12641] ip_route_output_key_hash_rcu+0x294/0x2720 [ 598.374339][T12641] ? ip_route_output_key_hash+0xd8/0x2a0 [ 598.374362][T12641] ? ip_route_output_key_hash+0xd8/0x2a0 [ 598.374387][T12641] ip_route_output_key_hash+0x18d/0x2a0 [ 598.374412][T12641] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 598.374438][T12641] ? lock_acquire+0x106/0x350 [ 598.374458][T12641] ip_route_output_flow+0x2a/0x150 [ 598.374482][T12641] ip4_datagram_release_cb+0x89d/0xbe0 [ 598.374528][T12641] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 598.374550][T12641] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 598.374572][T12641] ? do_raw_spin_lock+0x12b/0x2f0 [ 598.374597][T12641] ? release_sock+0x2f/0x260 [ 598.374621][T12641] release_sock+0x206/0x260 [ 598.374645][T12641] inet_shutdown+0x2b1/0x390 [ 598.374705][T12641] udp_tunnel_sock_release+0x6d/0x80 [ 598.374749][T12641] fou_exit_net+0x17d/0x1f0 [ 598.374775][T12641] ops_undo_list+0x43d/0x8d0 [ 598.374802][T12641] ? __pfx_ops_undo_list+0x10/0x10 [ 598.374827][T12641] ? idr_destroy+0x218/0x290 [ 598.374865][T12641] ? do_raw_spin_unlock+0xf5/0x210 [ 598.374889][T12641] cleanup_net+0x572/0x810 [ 598.374914][T12641] ? __pfx_cleanup_net+0x10/0x10 [ 598.374941][T12641] ? rcu_is_watching+0x15/0xb0 [ 598.374961][T12641] ? process_scheduled_works+0xa20/0x14e0 [ 598.374978][T12641] process_scheduled_works+0xa8e/0x14e0 [ 598.375004][T12641] ? __pfx_process_scheduled_works+0x10/0x10 [ 598.375023][T12641] ? assign_work+0x3cf/0x5d0 [ 598.375040][T12641] worker_thread+0xa47/0xfb0 [ 598.375066][T12641] kthread+0x389/0x470 [ 598.375087][T12641] ? __pfx_worker_thread+0x10/0x10 [ 598.375103][T12641] ? __pfx_kthread+0x10/0x10 [ 598.375123][T12641] ret_from_fork+0x514/0xb70 [ 598.375141][T12641] ? __pfx_ret_from_fork+0x10/0x10 [ 598.375157][T12641] ? __switch_to+0xc89/0x1420 [ 598.375181][T12641] ? __pfx_kthread+0x10/0x10 [ 598.375202][T12641] ret_from_fork_asm+0x1a/0x30 [ 598.375226][T12641] [ 598.375233][T12641] [ 598.687205][T12641] Allocated by task 19121: [ 598.691621][T12641] kasan_save_track+0x3e/0x80 [ 598.696316][T12641] __kasan_kmalloc+0x93/0xb0 [ 598.700932][T12641] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 598.707355][T12641] kmemdup_noprof+0x2b/0x70 [ 598.711886][T12641] fib_rules_register+0x2f/0x400 [ 598.716824][T12641] fib4_rules_init+0x21/0x160 [ 598.721502][T12641] fib_net_init+0x17a/0x3e0 [ 598.726150][T12641] ops_init+0x35d/0x5d0 [ 598.730314][T12641] setup_net+0x118/0x350 [ 598.734560][T12641] copy_net_ns+0x4f9/0x720 [ 598.738989][T12641] create_new_namespaces+0x3f0/0x6b0 [ 598.744276][T12641] unshare_nsproxy_namespaces+0x149/0x190 [ 598.749995][T12641] ksys_unshare+0x57d/0xa00 [ 598.754502][T12641] __x64_sys_unshare+0x38/0x50 [ 598.759270][T12641] do_syscall_64+0x174/0x580 [ 598.763862][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.769844][T12641] [ 598.772166][T12641] Freed by task 12641: [ 598.776229][T12641] kasan_save_track+0x3e/0x80 [ 598.780911][T12641] kasan_save_free_info+0x40/0x50 [ 598.785947][T12641] __kasan_slab_free+0x5c/0x80 [ 598.790720][T12641] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 598.796266][T12641] rcu_free_sheaf+0x31/0x200 [ 598.800865][T12641] rcu_core+0x78b/0x10a0 [ 598.805200][T12641] handle_softirqs+0x225/0x840 [ 598.809965][T12641] do_softirq+0x76/0xd0 [ 598.814146][T12641] __local_bh_enable_ip+0xf8/0x130 [ 598.819263][T12641] unregister_netdevice_many_notify+0x1874/0x2150 [ 598.825761][T12641] ops_undo_list+0x391/0x8d0 [ 598.830360][T12641] cleanup_net+0x572/0x810 [ 598.834786][T12641] process_scheduled_works+0xa8e/0x14e0 [ 598.840332][T12641] worker_thread+0xa47/0xfb0 [ 598.844925][T12641] kthread+0x389/0x470 [ 598.848998][T12641] ret_from_fork+0x514/0xb70 [ 598.853593][T12641] ret_from_fork_asm+0x1a/0x30 [ 598.858370][T12641] [ 598.860693][T12641] The buggy address belongs to the object at ffff88804ec4c600 [ 598.860693][T12641] which belongs to the cache kmalloc-192 of size 192 [ 598.874750][T12641] The buggy address is located 128 bytes inside of [ 598.874750][T12641] freed 192-byte region [ffff88804ec4c600, ffff88804ec4c6c0) [ 598.888549][T12641] [ 598.890873][T12641] The buggy address belongs to the physical page: [ 598.897294][T12641] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ec4c [ 598.906056][T12641] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 598.913170][T12641] page_type: f5(slab) [ 598.917155][T12641] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 598.925741][T12641] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 598.934443][T12641] page dumped because: kasan: bad access detected [ 598.940865][T12641] page_owner tracks the page as allocated [ 598.946582][T12641] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13856, tgid 13853 (syz.3.2144), ts 351172300879, free_ts 351133053454 [ 598.967531][T12641] post_alloc_hook+0x22d/0x280 [ 598.972309][T12641] get_page_from_freelist+0x24ae/0x2530 [ 598.977867][T12641] __alloc_frozen_pages_noprof+0x18d/0x380 [ 598.983685][T12641] allocate_slab+0x77/0x660 [ 598.988277][T12641] refill_objects+0x336/0x3d0 [ 598.992963][T12641] __pcs_replace_empty_main+0x320/0x720 [ 598.998541][T12641] __kmalloc_noprof+0x464/0x750 [ 599.003415][T12641] __register_sysctl_table+0xc02/0x1370 [ 599.008981][T12641] neigh_sysctl_register+0x9b1/0xa90 [ 599.014358][T12641] addrconf_sysctl_register+0xb3/0x1c0 [ 599.019876][T12641] ipv6_add_dev+0xd26/0x13a0 [ 599.024471][T12641] addrconf_notify+0x771/0x1050 [ 599.029330][T12641] notifier_call_chain+0x1a5/0x3d0 [ 599.034451][T12641] register_netdevice+0x18db/0x1f00 [ 599.039651][T12641] macsec_newlink+0x706/0x1200 [ 599.044485][T12641] rtnl_newlink_create+0x310/0xb00 [ 599.049627][T12641] page last free pid 12657 tgid 12657 stack trace: [ 599.056124][T12641] __free_frozen_pages+0xc0d/0xd20 [ 599.061244][T12641] tlb_remove_table_rcu+0x85/0x100 [ 599.066368][T12641] rcu_core+0x78b/0x10a0 [ 599.070612][T12641] handle_softirqs+0x225/0x840 [ 599.075376][T12641] __irq_exit_rcu+0xca/0x220 [ 599.079965][T12641] irq_exit_rcu+0x9/0x30 [ 599.084215][T12641] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 599.089852][T12641] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.095867][T12641] [ 599.098192][T12641] Memory state around the buggy address: [ 599.103826][T12641] ffff88804ec4c580: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 599.111887][T12641] ffff88804ec4c600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 599.119961][T12641] >ffff88804ec4c680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 599.128044][T12641] ^ [ 599.132124][T12641] ffff88804ec4c700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 599.140289][T12641] ffff88804ec4c780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 599.148360][T12641] ================================================================== [ 599.156565][T12641] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 599.163822][T12641] CPU: 0 UID: 0 PID: 12641 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 599.173484][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.183562][T12641] Workqueue: netns cleanup_net [ 599.188380][T12641] Call Trace: [ 599.191671][T12641] [ 599.194614][T12641] vpanic+0x56c/0xa60 [ 599.198613][T12641] ? rcu_is_watching+0x15/0xb0 [ 599.203394][T12641] ? __pfx_vpanic+0x10/0x10 [ 599.207904][T12641] panic+0xc5/0xd0 [ 599.211630][T12641] ? __pfx_panic+0x10/0x10 [ 599.216223][T12641] ? fib_rules_lookup+0x15e/0xeb0 [ 599.221255][T12641] ? fib_rules_lookup+0x15e/0xeb0 [ 599.226281][T12641] check_panic_on_warn+0x89/0xb0 [ 599.231242][T12641] ? fib_rules_lookup+0x15e/0xeb0 [ 599.236278][T12641] end_report+0x73/0x170 [ 599.240534][T12641] ? fib_rules_lookup+0x15e/0xeb0 [ 599.245573][T12641] kasan_report+0x128/0x150 [ 599.250096][T12641] ? fib_rules_lookup+0x15e/0xeb0 [ 599.255472][T12641] ? fib_rules_lookup+0x99/0xeb0 [ 599.260412][T12641] fib_rules_lookup+0x15e/0xeb0 [ 599.265270][T12641] ? fib_rules_lookup+0x99/0xeb0 [ 599.270212][T12641] ? __pfx_fib_rules_lookup+0x10/0x10 [ 599.275600][T12641] ? l3mdev_update_flow+0x26/0x610 [ 599.280746][T12641] ? l3mdev_update_flow+0x4ad/0x610 [ 599.285968][T12641] __fib_lookup+0x106/0x210 [ 599.290486][T12641] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.295716][T12641] ? __pfx___fib_lookup+0x10/0x10 [ 599.300840][T12641] ? __schedule+0x1856/0x57a0 [ 599.305526][T12641] ? arch_stack_walk+0x11b/0x150 [ 599.310473][T12641] ? fib_lookup+0x49/0x440 [ 599.314986][T12641] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 599.321151][T12641] ip_route_output_key_hash_rcu+0x294/0x2720 [ 599.327145][T12641] ? ip_route_output_key_hash+0xd8/0x2a0 [ 599.332790][T12641] ? ip_route_output_key_hash+0xd8/0x2a0 [ 599.338446][T12641] ip_route_output_key_hash+0x18d/0x2a0 [ 599.344002][T12641] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 599.350078][T12641] ? lock_acquire+0x106/0x350 [ 599.354763][T12641] ip_route_output_flow+0x2a/0x150 [ 599.360525][T12641] ip4_datagram_release_cb+0x89d/0xbe0 [ 599.366721][T12641] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 599.372306][T12641] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 599.378307][T12641] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.383355][T12641] ? release_sock+0x2f/0x260 [ 599.387975][T12641] release_sock+0x206/0x260 [ 599.392547][T12641] inet_shutdown+0x2b1/0x390 [ 599.397169][T12641] udp_tunnel_sock_release+0x6d/0x80 [ 599.402477][T12641] fou_exit_net+0x17d/0x1f0 [ 599.407004][T12641] ops_undo_list+0x43d/0x8d0 [ 599.411618][T12641] ? __pfx_ops_undo_list+0x10/0x10 [ 599.416751][T12641] ? idr_destroy+0x218/0x290 [ 599.421432][T12641] ? do_raw_spin_unlock+0xf5/0x210 [ 599.426558][T12641] cleanup_net+0x572/0x810 [ 599.430989][T12641] ? __pfx_cleanup_net+0x10/0x10 [ 599.435942][T12641] ? rcu_is_watching+0x15/0xb0 [ 599.440715][T12641] ? process_scheduled_works+0xa20/0x14e0 [ 599.446438][T12641] process_scheduled_works+0xa8e/0x14e0 [ 599.452011][T12641] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.458000][T12641] ? assign_work+0x3cf/0x5d0 [ 599.462605][T12641] worker_thread+0xa47/0xfb0 [ 599.467301][T12641] kthread+0x389/0x470 [ 599.471386][T12641] ? __pfx_worker_thread+0x10/0x10 [ 599.476513][T12641] ? __pfx_kthread+0x10/0x10 [ 599.481113][T12641] ret_from_fork+0x514/0xb70 [ 599.485712][T12641] ? __pfx_ret_from_fork+0x10/0x10 [ 599.490830][T12641] ? __switch_to+0xc89/0x1420 [ 599.495517][T12641] ? __pfx_kthread+0x10/0x10 [ 599.500119][T12641] ret_from_fork_asm+0x1a/0x30 [ 599.504894][T12641] [ 599.508203][T12641] Kernel Offset: disabled [ 599.512551][T12641] Rebooting in 86400 seconds..