last executing test programs: 6.545822919s ago: executing program 3 (id=4263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x700, 0x70bd2d, 0x25dfdbfd, "", [@mark={0xc, 0x15, {0xc3ca, 0x2}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblc\x00', 0xe, 0x81, 0x39}, {@loopback, 0x4e25, 0x2, 0xfe47, 0xfffffff8, 0x12d5c}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000020202000900010073797a09"], 0x2c}, 0x1, 0x40030000000000}, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xb8}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x2}}, 0xb8}}, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x30, 0x49, 0xc05, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3b}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r10) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000300)=""/117, &(0x7f0000000380)=0x75) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r11, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x408c9}, 0x4800) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x28, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}}, 0x4000008) 5.682435014s ago: executing program 1 (id=4275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200), 0x1f}}], 0x2, 0x40010000, 0x0) 5.4645872s ago: executing program 3 (id=4277): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x20008800) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.398107714s ago: executing program 4 (id=4279): r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000a0000000000000000000000030006000900000002000000ffffffffbc000000000001000200010000000000000000fe00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffff33}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r12 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) 4.828805314s ago: executing program 4 (id=4283): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@getchain={0x2c, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0x3, 0x9}, {0x8}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x881) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 4.697271257s ago: executing program 1 (id=4286): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='pie\x00', 0x400000, &(0x7f00000000c0)={@align=0xa288, {0x3, 0x7, 0x6, 0x9}}, 0x8001, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x81}) write$rfkill(r1, &(0x7f0000000200)={0x9, 0x7, 0x1}, 0x8) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db1", 0x4a}, {&(0x7f0000001400)="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", 0xf0d}, {&(0x7f00000000c0)="3d9def0b", 0x4}], 0x3}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRES16=r4, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020", @ANYRES16=r3], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf1}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) 4.659435321s ago: executing program 4 (id=4287): socket$pppl2tp(0x18, 0x1, 0x1) listen(0xffffffffffffffff, 0x8) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 11) 4.567575525s ago: executing program 1 (id=4288): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x9, [0x0, 0x0, 0x8, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0]}, 0x1a) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x1000, "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"}, &(0x7f00000010c0)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001100)={0x2, 0x0, 0x201, 0x7, 0xd, 0x1ff, 0x101, 0x1, r2}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001180), &(0x7f00000011c0)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001340)={r2, 0x6f6}, &(0x7f0000001380)=0x8) r6 = accept4(r1, &(0x7f00000013c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001440)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001480)={r2, 0x8}, &(0x7f00000014c0)=0x8) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001500)=""/139, &(0x7f00000015c0)=0x8b) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001640), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x48, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000017c0), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000001800)={[{0x2b, 'net'}, {0x2d, 'cpu'}, {0x2d, 'pids'}, {0x2b, 'net'}, {0x2d, 'cpuset'}, {0x2b, 'cpu'}]}, 0x22) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000001840)={r1, 0x4, 0x100, "72b043c761533010c91e071dddceb03279339cf994de364f59bb7c1c763e6afe16366fefa29012feb68ff86d6b433f484d7418d585bbde340db1"}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000018c0)={r5, @in={{0x2, 0x4e24, @multicast1}}, 0xcd, 0x6, 0x2, 0x2, 0x81, 0x19f}, &(0x7f0000001980)=0x9c) syz_genetlink_get_family_id$tipc(&(0x7f00000019c0), r8) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x4, &(0x7f0000001a00)=""/202, &(0x7f0000001b00)=0xca) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000001b40), &(0x7f0000001bc0)=0x68) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000001c00)='tunl0\x00') 4.25250785s ago: executing program 4 (id=4291): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000400)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000340)=0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0) 4.002643987s ago: executing program 2 (id=4295): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0xf, 0x4, 0x7, 0x48, @dev={0xfe, 0x80, '\x00', 0x10}, @rand_addr=' \x01\x00', 0x8, 0x8000, 0x20000, 0x800}}) bind$packet(r0, &(0x7f00000005c0)={0x11, 0x8, r1, 0x1, 0x2, 0x6, @remote}, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a960b1c552dd0c694cfb9602293ae990ec006080f3939c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r5, 0x2}, &(0x7f00000001c0)=0x8) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async, rerun: 32) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, 0x0) (rerun: 32) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0xa0, 0x1, 0x0, 0x1, [@nested={0x9c, 0x129, 0x0, 0x1, [@generic="5a5d82cf", @nested={0x89, 0xa8, 0x0, 0x1, [@generic="61fef901a3223f8425eabb0fb47319b3a099cabd5b5bd36ca78d9715f905fe129e76517489717c4f7ded3ce5e8ddac662f6e4b0e9646050611e128daca7052bfcc7aa9b2eec25a6ac6dafe", @nested={0x4, 0x31}, @generic="156be09d72c63c3fbf6146fd7d6ee7", @generic="bc080db12eb141ed8d6af59e15c733e5ae5fcebde94a75e5f78b94916a6e77", @typed={0x8, 0x63, 0x0, 0x0, @fd=r7}]}, @nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0x116}]}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x1c000) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2aafdd44e4da27375ea5de51d826a34a13a0d0fc0739c9a3e8272ec689d79beb388f96c730868ab9", @ANYRES8=r2, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r2, @ANYRES8=r6, @ANYBLOB="1d76ca8992abfe8fdcc0ed77b39ff4266347a69fa91c78421dbe2f2ab8909d05a49cdc5e0e0218aee7818f24b8c3b8de6261f8fc066a944e17e10d2b70a2acbcf9c4338b11986830aeb47b287356bd5f9b383548ef0105c981d4146c9850a964afcea3cb0ee943d9589f362987fb741e880850089af127f04fa5670b7e6ee6c6bfd4b93f7cae6b84a0e8f0c7c9da77da4727c43534419f659522dea0ae736e84db8d", @ANYBLOB="b898728b0cad10c310b4ae0a930effff22445afdc0e5fc69ed552ccbc014f4bbfb3baba81907b1e76355379e5061fdc2de6c4cd92cb6469452093a367134113de2386bd6e6c05e656d6551ad95a380dcebdd74a9b340a75d026dc594f7f026e55070fd360d715c38b86e0bf11ea815a4dc855ed300514de6bcfac3d09cb88fd3cfe0df2365d4bbc9240a66113d041fb37544173532a25e7013528d87d7d34df4f192"], 0x2c}, 0x1, 0x0, 0x0, 0x10008957}, 0x0) (rerun: 64) 3.929027943s ago: executing program 2 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001900010000000000000000001d01000008000900", @ANYRES32=0x0, @ANYBLOB="072076d1d2433569b2a1d6a8e0918381350e163c9a85170618eae8551a02ee77be8fc622705fc16dcdc26f899a1b735fbcb767bc16e1d8f0c2773e04b4b5310b002f6e8bcfdaddfaea45fb92c401c8b127f161801c660db263eaf0f71e75150de90679034322084676719248f8441e7fd32a26f1479fd72fcf38abead060c9ee0b86532f227b48db2d1684c23ab9972d8afa40d2d341805f749b0779a838eceed4485cb49c61ba4afa4d68ded42e5bb5a82becc173a2488c12f4324706653191a834d1ff04bca4ef61f8b488503d93ab8218"], 0x1c}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async, rerun: 32) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async, rerun: 32) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (rerun: 32) 3.719584319s ago: executing program 0 (id=4300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000000), 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="041c2a06584fcfdbdf25050000c067ee09c5cb9b5db1dff2bad5682b00"], 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x800) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000080)={0x3b, 0x6, 0x6, 0x9, 0x2}) 3.593222419s ago: executing program 0 (id=4301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x204, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40bce3ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x777a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x473e5d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x726b8abb}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4692fe2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf229ada}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x695d544e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x735e6bf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000005) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) (async) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) 3.59104768s ago: executing program 2 (id=4302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=r0], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r7) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0xa7, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100100086dd6000a8bc006d0600fc000000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYBLOB="6002000090780000fe04f989c6ad29fffa63"], 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) (async) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.549707233s ago: executing program 0 (id=4303): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003b082201714042cc47a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021007d000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4008840) 3.535053894s ago: executing program 2 (id=4304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x3, 0xf1, [0x228d, 0x80000000000000, 0x5, 0x401, 0x7, 0x85], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/241}, &(0x7f0000000400)=0x78) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000580)=0x2c, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000001080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x800) sendto$l2tp6(r11, &(0x7f0000000340)="1fa1", 0x2, 0x408c0, 0x0, 0x0) recvmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/77, 0x4d}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xf}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000070000000c0001800600010002000000e93a584820c26a736f0d4e6dd017583dc214e14e8fcb44a3c56a78af2bbb57cc84c9ecf35f1ebc410736edcfda1e78ee3c1174041044de8368728d47bacb705f9fe802598e4bc2d20bf7c700d2e2c36d0b9c"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="30000400100025000000007ae179fc8a6f457a04b082d2f2d84a3d6aef1da57d3c5ade87df0572bbb37d480f39c146f5e3", @ANYRES32=0x0, @ANYRES16=r6], 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) 3.391451612s ago: executing program 3 (id=4305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000e2ff0000000000000000be5dda891200feffffff5c1619f90000715913daf948a9b25f54b6961d018f3800a8c4026f000000000000000000000000000000000000000000000000000000000001000000ffffffff000000000000000000000000000000000000000000000000000000000000065410677bd64b2be4f58eb9d9d0d40000000000000000000002000000ffffffff0000000066acd84b9753d80bf5ed432b24cf1330835e164552353db1ffda5f9b6a319e22819736d27d057ac1a45557d2392983db69d1089a9d515792daffdc52292b6cd02158a00da29cdd5f9e441827e6f6416326196dfca243cbc0d75d554b9add0d302c"]}, 0x18d) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200), 0x3}, 0x2000) 3.390080902s ago: executing program 0 (id=4306): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x26, 0x4, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fddbdf25efffffff07003700020000004400508004000600070004004597d600090001007dce0d8b090000000c000400d8473c885abe3af511000100b5bc1ab3d23dbf0d319fefba540000000800030001ac0f00"], 0x60}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x0, 0x1, 0x0, {0x2, 0x3930, 0x2}}, {0x100, 0x0, 0x0, {0x400, 0xd, 0x6d7a2213ab7ec699}}, {0x8, 0x3, 0x0, {0x4, 0x7}}, {0x8000000000000001, 0x2, 0x0, {0x2a0, 0x9}}, {0x2, 0x1, 0x0, {0x2, 0x6146, 0x2}}, {0x5, 0x2, 0x0, {0x8, 0x5, 0x2}}], 0x6, 0x20, 0x200, 0x10}) 3.313240821s ago: executing program 3 (id=4307): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x1, 0xa, [@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @multicast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @multicast, @multicast, @random="9f107219dd83", @broadcast]}) sendto$inet(r1, 0x0, 0x0, 0x563de1c6eba3ad61, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.312614389s ago: executing program 1 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 3.269514139s ago: executing program 4 (id=4309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 3.220252421s ago: executing program 2 (id=4310): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xd4000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000010) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4004800, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080003000000000008000400"], 0x58}}, 0x0) 3.100246356s ago: executing program 4 (id=4311): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x400261f2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd4c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r11}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) getpeername$llc(r11, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000180)=0x10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r7}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x884) 3.098620705s ago: executing program 0 (id=4312): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffddf, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8, @ANYRESDEC=r0], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.097986028s ago: executing program 1 (id=4313): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080005802d"], 0x44}}, 0x2000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x40) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) pread64(r7, &(0x7f0000001840)=""/4096, 0x1003, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) 209.250382ms ago: executing program 1 (id=4314): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 168.230984ms ago: executing program 3 (id=4315): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x80000000}, 0x4) sendto$inet6(r0, &(0x7f0000000080)="d9652af848b29095d90e211e3c2e71f9c9c0e17fc6012386005d5f0dd1e3e9cb287c66ffce52f0032a5e26499e5d042883463775b37e1f7cb759826bb6402209b383434071a244b0ee07958fc0c5006f91f09f1019158d198f147961a2b2a1ff111c1b9895bbf6c3f1f9a2988f56edc4afaba5c61f4b2e337a41a0c9ec13a69e5dd963ed39fb9db2acb60fe44c736dcf80d004f3c68c5c1bcac38641bc8ade3f7e2a7c287c3d219c93051d1353bdf8bb8d8575b9f11b654f05830c91572afe7dbed0b9708c308961c172ec434fa3ae9f8b6294665384df1a213d0b3e236b96b0aa869074a41cf057e92fda", 0xeb, 0x41, 0x0, 0x0) r2 = accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) sendto$inet6(r2, &(0x7f0000000200)="3c8f774aa75b88ba6e49d07aff2bee6ce3a67a75e76b7c30c350c0c1cb6e698e2efa0cebb0be6dcedd405ec2b33c1c6c71b8aef7975a81cf129d6d964277e632b85c21b682a3a1e4839ec386278028d2a70f26c5e1c457a6b9db738246b18d80e91d864f124de2cf33e7a3ffbd095b04361908fe9a376d539c6680726e08f69b8b9a66f12f3a563ef8db30ef84460f98dd40d0737e6d1316e96e9676109c4fb7343f6397e32215b8cb1bfef3971e87bfcec335d47dadd968a49726603f18b324617d08efd69cadfa082e7a18903a245d8cc4bfb0fbdd4df0914a34ef7bbe723cdf67bea34c5e", 0xe6, 0x4840, &(0x7f0000000300)={0xa, 0x4e24, 0xff, @mcast1, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f0000000340)="377afb4a4f0c3b89d7f29e92700dcd297e3c24125a80fa00d82cfd3b2a2213d385ad", 0x22, 0x4080, 0x0, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000003c0)) (async) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) getsockopt(r2, 0x1, 0xd077, &(0x7f0000000440)=""/166, &(0x7f0000000500)=0xa6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x1}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000640)={r5, 0x34, "35172d6d009574edff03b5fa88ab032a2c643095e21539e23332d364b0b9e95b10816167528cc1415c840d6bb7718e7393f5c42b"}, &(0x7f0000000680)=0x3c) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000700)={r6, 0x8, 0x30, 0x5a, 0x2f8aeb6a}, &(0x7f0000000740)=0x18) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000780)={0x200000, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x89}}, 0x0, 0x3, [{{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}}, {{0xa, 0x4e21, 0x3, @private0, 0x4}}, {{0xa, 0x5026, 0x3, @mcast1, 0x5}}]}, 0x210) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000009c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a00)={'bridge0\x00', 0x100}) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000a40)={0x8, 0x2, 0x3}) (async) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40010) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000b80), &(0x7f0000000bc0)=0x14) bind$qrtr(r8, &(0x7f0000000c00)={0x2a, 0x2, 0x3fff}, 0xc) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000c40)=0x1, 0x2) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000c80)=0xfffffffe, 0x4) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000cc0)={0x0, 0x7}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000d00)={'team_slave_1\x00', {0x2, 0x4e24, @broadcast}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000d40)=0x4, 0x4) (async) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000d80)=0x1, 0x4) 60.647065ms ago: executing program 2 (id=4316): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003b082201714042cc47a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021007d000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4008840) 19.3314ms ago: executing program 0 (id=4317): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000040)='GPL\x00', 0x60900, &(0x7f00000000c0)={@align=0x20000000000000f8, {0x2, 0xb, 0x4, 0x1}}, 0x6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000200)=0x400}, 0x3, &(0x7f00000003c0)=[{0x1, 0xdc, &(0x7f0000000240)='GPL\x00', &(0x7f0000000280)="89b44cd5154f6369bf0a05f5c74d1e61bb00caa6a20aa8", 0x17, 0x12}, {0x2, 0x6, &(0x7f00000002c0)='[(\\[%/.\'@\x00', &(0x7f0000000800)="d86c11ce1cbf32faba8f48014ab01710fa9df68d5608edb9ad62fa3a97cf92d9064aa3529e22fdf21c7e03ad5c4fe192363041678f1ca939024883", 0x3b, 0x20}, {0x1, 0x8, &(0x7f0000000340)='\x00', &(0x7f0000000780)="0a526a04009f806d91a7da38173be2338e68d5d4eb5ff69595bc0b61e4ddc4a1349728b7e4275fc0280e05fdd33a17fcefbafaf76518ac5f84939b67c2cbba7b2ef568420f392f4b7493869a862668bce424bd9ab747d443fc4cd618a6a33f1e47de5afdb48d7f3006ef1cfc84e24cfe20e3d35ff8930addd5623a336cc018d8", 0x80, 0x8}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24, r0}, 0x94) 0s ago: executing program 3 (id=4318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x3930, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x61}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x9b}, @filter_kind_options=@f_u32={{0x8}, {0x38dc, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x3, 0xc, 0x0, 0x9, 0x9, 0xc2, 0x7, [{0x6, 0x800, 0x9, 0x10001}, {0x4, 0x8, 0xa2b, 0x3}, {0x6, 0x2, 0x23b, 0x7be3}, {0x9, 0x1, 0xfffffffd, 0x8000}, {0x8, 0xc411, 0xb629, 0x7}, {0x8, 0x143a5487, 0xdd70, 0x7}, {0x80000001, 0x4, 0x5589, 0xf3}, {0x0, 0x0, 0x10001, 0x15c}, {0x2, 0x6, 0x9, 0x81}, {0xd, 0x36, 0x96e5, 0x4}, {0x9, 0xffffffff, 0x10000, 0x7}, {0x4, 0x7fffffff, 0x668, 0x5}, {0x2, 0xbe, 0x8000, 0x4}]}}, @TCA_U32_POLICE={0x86c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x1, 0x1, 0x7fff, {0xff, 0x3, 0xa, 0x9, 0x2, 0x5}, {0x4, 0x0, 0x7, 0x3, 0x538a, 0x1}, 0x2, 0x6, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x0, 0x401, 0x3, 0xb, 0x3, 0x7c5, 0x8, 0x7, 0x40, 0x5, 0x5, 0x2, 0x8e, 0xfffffffa, 0xfff, 0x80000001, 0x9, 0x1, 0x2, 0xfffffff7, 0x9, 0x2, 0xb46, 0x7, 0x7ff, 0xa, 0x71, 0x5, 0x6, 0x1, 0x81, 0x4, 0x4, 0x7, 0x6, 0xb, 0x7f, 0xfffffffb, 0xa7c, 0xba7, 0x2, 0x1, 0x5, 0x13, 0x0, 0x0, 0x8, 0x7, 0xfffffff8, 0x3, 0x1, 0x400, 0xe, 0x6, 0x4, 0x0, 0x91aea515, 0x4, 0x10001, 0x3, 0x7, 0x4, 0x0, 0x3, 0x3, 0x67f, 0x71, 0x1, 0x3, 0x8, 0x0, 0x10000, 0x5, 0x7, 0x2400, 0x4, 0x4, 0x4, 0x1, 0x59, 0x3, 0x0, 0x3, 0x28e, 0x0, 0x80000001, 0x1, 0x2, 0x4, 0x9, 0x0, 0x3, 0x7, 0x2, 0x4, 0x6, 0x5, 0x3452, 0x65ba29c2, 0x3, 0x7, 0x7fffffff, 0x6, 0x1ff, 0x2, 0x0, 0x10, 0x8, 0x80, 0x4, 0x7f19, 0xfffffff8, 0x2, 0x3, 0xf, 0x7f, 0x2, 0x1, 0x3, 0x29b, 0x7f, 0x7f, 0x6, 0x80000001, 0x9, 0x4, 0x0, 0x8, 0x40, 0xfffff001, 0x2, 0x52b4, 0x151, 0x1, 0x364f, 0x0, 0xb964, 0x1ff, 0x9, 0x2549, 0xffff, 0x280, 0xa, 0x8, 0x2, 0x4, 0x60, 0x1, 0x9, 0x9, 0x900000, 0xffff7fff, 0x1ff, 0x9, 0x3, 0xae, 0x1c8b, 0x800, 0x0, 0x40, 0xbdc5f216, 0xffffffff, 0x1, 0x81, 0x401, 0xffffffff, 0x4, 0x8, 0x7, 0x1, 0x81, 0x4, 0x6, 0x4, 0xb9, 0x7, 0x5, 0xfff, 0x375f, 0x64b09af1, 0x1000, 0x1, 0x2, 0xd, 0x2, 0xc, 0x6, 0xfffffffd, 0x83, 0xc1, 0x8000, 0x5, 0xec, 0x1, 0x10, 0x3459fc31, 0x7, 0x5, 0x6, 0x8, 0xffff1185, 0x3, 0x0, 0x1, 0x9, 0x6, 0x304d, 0x1000, 0xfffffff7, 0x4, 0x9, 0xf0, 0x4, 0x3, 0xd5, 0x7, 0x9, 0xc23, 0x0, 0x1, 0xc55, 0x1, 0x9, 0xe39, 0x7ff, 0x8, 0x1, 0xa, 0x0, 0x8000, 0xa7d, 0x1, 0x1ff, 0x3, 0x7, 0x6, 0x80000000, 0x8c8f, 0x2, 0xbe, 0xdb65, 0x80, 0x80000000, 0x1, 0x7e0a0, 0x49, 0x8000, 0x0, 0x2, 0x7fff, 0x7, 0x8, 0x8, 0xc, 0xfffffc01]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfd25e16}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1ff, 0x200, 0x50, 0x2a3, 0x4, 0x0, 0x0, 0x6, 0x579a, 0x5, 0xfffffff0, 0x1, 0x63, 0x1, 0x9, 0x4, 0x6, 0x80000000, 0x2, 0x7ff, 0x8000, 0xfffffff9, 0x94, 0x0, 0x3ef, 0x7, 0x8, 0x1, 0x4, 0x36de, 0x24e, 0x2, 0x8, 0x7fff, 0x4c9, 0xfffffffb, 0x9, 0x3, 0x1, 0x7, 0x10000, 0xfffffffa, 0x3, 0x0, 0x0, 0x2bdf, 0xa, 0x7, 0x3, 0x7, 0x8f, 0x1, 0x9, 0x101, 0x8, 0x40, 0xda, 0x401, 0x10001, 0xffffb821, 0x0, 0x7, 0x40a9, 0x4, 0x10000, 0xbd, 0x9, 0x10, 0x3, 0x9, 0xb7b0, 0x200, 0xd, 0x8, 0x6, 0x1, 0x40000, 0xffff, 0x7ff, 0x7fff, 0x0, 0x5, 0x81ab, 0xe, 0x3ff, 0xfff, 0x3, 0x9, 0x0, 0x2, 0xf9b, 0xedc, 0x8, 0x8, 0x80000001, 0x8, 0xfc96, 0x9, 0x7, 0x101, 0xa, 0x9555, 0x7fffffff, 0x4, 0xffffffff, 0x2, 0x9, 0x10000, 0xffffffff, 0x3, 0x8, 0x20000000, 0xc, 0x8, 0xa940, 0xf2, 0x38, 0xd, 0x3, 0xe482, 0x6, 0x8001, 0x5, 0x5, 0x6, 0x4, 0x99f1, 0x3, 0x0, 0xeb9f, 0x0, 0xff, 0x3, 0xffff, 0x2e94, 0x6, 0x1ff, 0x2, 0x200, 0x1, 0x7, 0x4, 0xffffffff, 0x2, 0x100, 0x800, 0x1, 0x8, 0x0, 0xc991, 0x8, 0x1, 0x80000000, 0x3, 0x2, 0x401, 0x80, 0x2, 0x7, 0x7, 0xfffffffb, 0x2940, 0x1, 0x3bf, 0x7, 0x6, 0x7f04, 0x7, 0xfffffe00, 0x6, 0x7f, 0xb9, 0x416, 0x0, 0xfff, 0x2, 0x5, 0x1, 0x9, 0x8, 0x3, 0x0, 0x6, 0x8000, 0x6, 0x0, 0x9, 0x884, 0x2, 0x800, 0x8, 0x0, 0x7fffffff, 0x8, 0xe8c4, 0x1, 0xeef, 0x48, 0x4, 0xfffffeff, 0xc, 0x5, 0xa56003e1, 0x58a, 0x5, 0x9, 0x1, 0x0, 0x76a, 0xcf, 0x5, 0x7, 0x3, 0x4, 0x200, 0x1, 0x91, 0x88d, 0xfffffff9, 0x7, 0xf992, 0x81e, 0x98e, 0x72a00000, 0xc1, 0x9, 0x1f, 0x100, 0xf9, 0x227a1c91, 0x10, 0xa990, 0x0, 0x1000, 0xd, 0x288, 0x1, 0xd9, 0xffff5f9d, 0x6, 0x5, 0xfffffffb, 0x1, 0x2, 0x7fff, 0x12, 0x2, 0x7, 0x321dada8, 0xfffffffb, 0xb, 0x0, 0x9, 0x7, 0x52]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_U32_HASH={0x8, 0x2, 0xffff}, @TCA_U32_ACT={0x2f80, 0x7, [@m_sample={0x134, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xd0, 0x18000000, 0x10000000, 0x6, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x79}]}, {0xe8, 0x6, "a8e964bfdd3d800e6326167151e5618ff6ed1ab1be467166ac9ed7280b10acf13faa1708bef3ea45ff43a9b795eaec5af9de7956149b4adec6c7eff238bad9a77d6f3ddcde49b3ea8b19fd247de38a69cc336e282e33a4991f7d062a2a472d01f04e5b68a86b4cb0cb2749422fa805b607b966103f7d0b3437999bdd11e6f750f84ce6e7b344154258affb073f7f839f494101a06a9f691e2c1fd2aa96c865b348cab20234f39e24a085c91cbbb431a21829f315cd84e446ff39842eefb92e4c80cff9a74369147427ad7af6c70a3ea648f018c32afe740b0069a6f87d2adcad12bb2ec5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x13c, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xbc, 0x7, 0x1, 0x5, 0x5}, @multicast1, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x0, 0x1, 0x5b}, @private=0xa010101, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x5, 0x488, 0x5}, @loopback, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffa, 0x4, 0x10000000, 0x8}, @local, @dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x5, 0x5, 0x80}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x4b, 0x6, "a681266e9d82d532b125be085728acb5bf379c4af66536b890213b415f101a2a5652547e1201dee53b8562e5b559abf6c37f97181745007dabefef94f67313785a75e1c2923131"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xd4, 0x8, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x5, 0x8, 0x0, 0x7f}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x5, 0x1, 0x5}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x7, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x99, 0xf9b, 0xffffffffffffffff, 0xfffffffb, 0x5}, 0x8}}]}, {0x31, 0x6, "d9066c4706ef8a583606d5ca4fb21e24ac90fcbe712178e61e650410f034e8a2792f9e7d00cf75d90b1c8b8476"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_tunnel_key={0x13c, 0x6, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0xc0, 0x6, "8c117147dd9a088e2768ee482bfd863413f921ec05030cd3143cccffc1b00d34176e631c748fbc4277ff5d5d2c9ca2f67e85d72d770c9f1096d29eac841a35127d3d4c8e186f9dd6c6f4108e82042f8ca4d2ea2f14d8040e43b09f2163158c1f1295bb19a8da6a2d23360b9255d6cedae0d9df1ca4cc7e87cf8dc6b4f451826823eb7a980a1df3d509d604e597d4b7e577bfb303cb68e79210ed5d23d6723e7a6d43216052e8661e89ef4cfc296644518653d62bfc0b084c62ae2099"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xe0, 0xe, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0xffffffffffffffff, 0x8, 0x3ff}, 0x80}}]}, {0x94, 0x6, "f4f727d95f483376fb984c4b2d9b0c71d7ce7ecf09665c8c2b00adf597cb379f4df0296f7fb0c3a305a9ecd0ee2245579440c8c6b109613690597d77b796d46ce17fd23af3788672a62e5202ef5f10540b75881241fd1222b9a5ec990f8adbe58481e6f9005d268b848b945cdfcb8f99390cfdcf8fade32ee06f81f1360f5c6696a02aa92bd027454d501998ddc19a10"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x2a1c, 0x16, 0x0, 0x0, {{0xb}, {0x29b0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x6, 0x7, 0x9, 0x3, 0x530, 0xfffffffd, 0x2, 0x800, 0x2, 0xf9906b24, 0x60ff, 0x8, 0x7f, 0x8, 0xbae4, 0x9, 0xfffffe01, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x5, 0x2, 0x7f, 0x7f, 0x7, 0x200, 0xfffffb8c, 0x4, 0x2, 0x1, 0x401, 0x6, 0x80000000, 0x80000000, 0x6, 0x0, 0x9, 0x4, 0x9, 0x7, 0x130, 0x3, 0x3, 0x24a, 0x1, 0xfff, 0x976, 0x7ff, 0x0, 0x3, 0x9, 0xc51e5492, 0x47cf, 0xc0000, 0xe892, 0xbd4a, 0x8, 0xfffffffb, 0x3, 0x1, 0x7, 0x6, 0x7, 0x80000000, 0x8, 0x6, 0x658db6f0, 0xe6, 0x53dce108, 0x2, 0x10, 0x4, 0x6, 0x7, 0x2, 0xff, 0x0, 0xfff, 0x7fff, 0xffffffff, 0x5, 0x2, 0x1000, 0x0, 0x7fffffff, 0xfffffffb, 0x77f, 0x8, 0x80, 0x6, 0x4, 0x7ef0, 0x1, 0x200, 0x1, 0xff, 0x7, 0x40, 0x9, 0x2, 0x5, 0x0, 0x7, 0x29, 0x9, 0x9, 0x6, 0xb8fb, 0x2, 0x4, 0x8, 0x6, 0x0, 0x4, 0x2, 0x2, 0x6, 0x7f, 0x0, 0x1, 0x0, 0x2, 0xc, 0xfffffffb, 0x0, 0x7, 0x8, 0x2, 0x2, 0x6, 0x1800000, 0x5, 0xe436, 0x5, 0xf0, 0xda, 0x3, 0x81, 0x1ff, 0x8, 0xfff, 0xfffffff9, 0x10000, 0xff, 0xffffb5b3, 0x4, 0x101, 0xccd, 0x80, 0xb7, 0x1, 0x81, 0x9, 0x0, 0x5, 0x20000, 0xf9cc, 0x6, 0x6, 0x7, 0x8, 0x23e8, 0x5, 0x3, 0x7, 0x7, 0x400, 0x81, 0xe, 0xcb, 0xf7c, 0x83, 0x968, 0xf, 0x9, 0xd, 0x8d, 0x8, 0x8, 0x532, 0x0, 0x3, 0x9, 0xff, 0x4, 0x7, 0xb409, 0x6, 0xee8f, 0x3, 0x4, 0x2d4, 0xcfbd, 0xfffff800, 0x6, 0x100, 0x0, 0x8, 0xe3, 0x4247, 0x7, 0xf, 0x2, 0x8, 0x3, 0x6, 0x23c8e966, 0x2, 0x6, 0x4, 0x71d, 0xca89, 0x94d, 0x8000, 0x101, 0x0, 0x5, 0x1, 0x3, 0x0, 0xfffffff8, 0x0, 0x28400, 0x5, 0xffffffff, 0x101, 0x5, 0x6, 0xa5, 0x8, 0x7ff, 0x8, 0x525, 0x43, 0x800, 0x0, 0x3, 0x9, 0x1, 0x80, 0x7, 0x3, 0x6, 0x6, 0x8, 0x5, 0x1e5d, 0x3, 0x5, 0xd, 0x7cd800, 0x2, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xbf}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xf8ba2b2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x5, 0x3, 0x80000001, {0x0, 0x2, 0x9, 0x3, 0x10, 0x7}, {0x9, 0x0, 0xd, 0x7, 0x1, 0xfffff001}, 0x2ffdd568, 0x3, 0xc8}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4782}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x800000, 0x1, 0x8, 0x5735, 0x7fffffff, 0x1, 0x10000, 0x7, 0x7f, 0x40, 0x2a98ed93, 0x8, 0x20b0000, 0x35, 0xfffffff9, 0x784, 0x6, 0xffffffb1, 0x7, 0xdfa, 0x0, 0x40, 0x9, 0x849, 0x8, 0x1ff, 0x7, 0x9, 0x9, 0x4, 0x7fff, 0x7fff, 0x1000, 0x10001, 0x15, 0x4, 0x6, 0x9, 0x8, 0x369f01ba, 0x6, 0x0, 0x3, 0x7, 0x5, 0xb, 0x2, 0x8, 0x4, 0x6, 0x1000, 0x7bd, 0x0, 0x5, 0x6b65, 0x5, 0x6, 0x7, 0x4, 0x2, 0x3, 0x3, 0x101, 0x8000, 0x1, 0x0, 0x8, 0xfffffff9, 0xfffffffd, 0x3, 0x8, 0x8000, 0xff, 0x338, 0x800, 0x1, 0x3, 0x3, 0x80000000, 0x137f, 0x6, 0x8, 0x2, 0xc8, 0x3fffc00, 0xffffffff, 0x80, 0xd3, 0x3, 0x80000000, 0x6, 0xb35b, 0x3, 0x6, 0x4, 0x2, 0x1, 0x7, 0xa, 0x9, 0x8, 0x7, 0x5, 0x1, 0x2, 0x79a1, 0x3, 0xcd, 0x8, 0x3ff, 0x401, 0x5, 0x9, 0x8, 0x4, 0x8, 0x4, 0x7, 0x0, 0x2, 0x3, 0x8, 0x0, 0x80000001, 0x3e0c, 0x1, 0x7ff, 0x7, 0x1, 0x1, 0xfffffd4c, 0x200, 0x1ff, 0x6, 0x4, 0x9, 0x7ff, 0x7fff, 0x7, 0x7, 0x3, 0x8, 0xfffffffa, 0xfffff800, 0x9, 0x3, 0x24fe, 0x5, 0x8, 0x3, 0x9fb, 0x6, 0x7, 0x6, 0x60, 0x3ff, 0x4, 0x6, 0xd0, 0xffffffff, 0x8, 0x4, 0x9, 0x10, 0x5, 0x7, 0x0, 0x5, 0x1, 0x6, 0x7, 0xde, 0x5, 0x4, 0x4, 0x6, 0x2, 0x8, 0xfc35, 0x0, 0x8000, 0xc, 0x0, 0x80000000, 0x0, 0x97, 0x5, 0x80000000, 0x7, 0x9, 0xff, 0x3ff, 0xc4ae, 0x2, 0x80000001, 0x5, 0x3, 0x101, 0x7fffffff, 0x936, 0x8, 0x81, 0x9, 0xff, 0x5, 0x7, 0x5, 0x9, 0x8, 0x8e5a, 0x9, 0x80000000, 0x10001, 0x1, 0x7f, 0x80000000, 0xfffffffc, 0x7fff, 0x80, 0x3, 0x5, 0x0, 0x4, 0x1eae, 0x5, 0x6ab97fcb, 0x200, 0x1, 0x800, 0x6, 0x7, 0x6, 0x5, 0xca, 0x9, 0x8, 0x2, 0x0, 0x5, 0x1, 0x8, 0x4dd, 0x9, 0x6, 0x9285, 0xc17, 0x80, 0x9, 0x284, 0xd, 0x101, 0x9f, 0x2, 0x1fa, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf8f7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0xfffffffa, 0x200, 0x9, 0x7e, 0x7ff, 0x0, 0x4, 0xfcb, 0x3, 0x5, 0xcbdb, 0x8, 0x2, 0x7, 0x8, 0x0, 0xfff, 0x7f, 0x1, 0x8, 0x6, 0x5c9, 0xa2, 0x1, 0xfffffffc, 0x0, 0x8, 0x6, 0x101, 0x9, 0x40, 0x5, 0x0, 0x2edb, 0x4, 0x811, 0x8, 0x21, 0xee2a, 0x7, 0xd6, 0x3, 0xd, 0x5, 0xa, 0x401, 0x7, 0xd, 0x8001, 0x5, 0x6, 0x3, 0x4, 0x7020aa4, 0x80000001, 0xffff, 0x8, 0x4, 0x2, 0xfff, 0xc0000000, 0x8, 0x401, 0x1, 0x6, 0x8, 0x9, 0x10000, 0x100, 0x9, 0x4, 0x5, 0x7, 0x81, 0x1, 0x1, 0xd4d, 0x80000000, 0x0, 0x7, 0x0, 0x5, 0x2, 0xd38, 0x4, 0x4, 0x72bd, 0x1000, 0x8, 0x1, 0x5, 0x9cac, 0x2, 0x9, 0x9, 0x9, 0xffffffff, 0x4, 0x9, 0x5, 0x8001, 0xc36, 0x80000001, 0x7, 0x3, 0x8, 0x2, 0x739, 0x7ff, 0x66, 0x0, 0x1, 0x7f, 0x10, 0x8, 0x433, 0xfffffff5, 0x0, 0x1, 0x3, 0x7, 0x1, 0x6, 0xff, 0x4, 0xffff, 0x8000, 0x4, 0x5, 0x1000, 0x1, 0x6, 0x7, 0x3, 0x0, 0xfffffffe, 0x5, 0x3ff, 0x1, 0x23d8, 0x10, 0x9, 0x4, 0x6, 0x80, 0x7, 0x7, 0xce, 0xfff, 0x1000, 0x3, 0x3, 0x100, 0x8001, 0x6, 0x3, 0x1, 0x401, 0x6, 0x6, 0xfff, 0x9, 0x8, 0x1, 0x8, 0x4, 0x8, 0x5, 0xa3f4, 0xffffffff, 0x3, 0x0, 0x7fffffff, 0x5, 0x8001, 0x1, 0x3, 0x3, 0x0, 0x3, 0x1, 0x5, 0x9, 0xf, 0x8, 0x5, 0x3, 0x9d, 0x7467, 0x10, 0xfffffff9, 0x6, 0x5, 0x7, 0x1, 0x5, 0x3, 0x80, 0x1, 0x8, 0x4, 0x9, 0x7, 0x5, 0x9, 0x9, 0x0, 0x3, 0x100, 0x401, 0x80000001, 0xfffffff7, 0x4c, 0x9, 0x401, 0x400, 0xb77, 0x5, 0x2, 0x1, 0x3, 0x7fff, 0xd33, 0x3, 0x0, 0x8, 0x8, 0x1, 0x6, 0x0, 0x3, 0x2, 0xfffffffc, 0x7, 0xfb5, 0x100, 0x6, 0xfffffff0, 0x7, 0x8d, 0x3, 0x401, 0x80000001, 0x2, 0x17d9, 0x1, 0x14, 0x81, 0x0, 0xc838, 0x4, 0x8, 0x9, 0xe, 0x6d3b35b5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0xfffff738, 0x4, 0x7ff, 0x9, 0x6, 0xfffffc01, 0x9, 0x1d8000, 0x6, 0xffffffff, 0x6, 0x5, 0xb, 0x2, 0x0, 0x4, 0x1, 0x6, 0x401, 0xa5, 0x9, 0x4, 0x7ff, 0x7, 0xffffffff, 0x2, 0x7, 0x0, 0x1, 0x0, 0x8, 0x80000000, 0x4, 0x14abde3e, 0xd, 0xfff, 0x7, 0x1, 0x3, 0x7, 0x6, 0x2, 0x81, 0x1, 0x80000000, 0x7, 0x1, 0x3, 0x8, 0x4, 0x4, 0x8, 0x3, 0x1, 0x9, 0x3, 0x3, 0x2, 0x8560, 0x943, 0x160, 0x101, 0x7, 0x400000, 0x1, 0x3, 0x5, 0xfffffffc, 0x5, 0x9, 0x3a, 0x8001, 0x6, 0x2, 0x3, 0xb6, 0xf3, 0x6, 0x9, 0x1, 0x8001, 0x4c5, 0x81, 0x30, 0xfffffff7, 0x10000, 0x0, 0x4, 0x2, 0xd0, 0x9, 0x3, 0xa021, 0x2, 0x4fd8, 0x3ce, 0xa9, 0xffffffff, 0x3, 0x6, 0x8, 0xffff7fff, 0x8a10b42, 0x7, 0x9e4c, 0x2, 0x6, 0x4, 0x8000, 0x0, 0x4, 0x800, 0x4, 0x10000, 0xffff5f94, 0x24, 0x3, 0x2, 0x1ff, 0xd3d, 0x1, 0x4, 0xff, 0xd, 0x1, 0x3, 0x8, 0x1, 0x0, 0x1, 0x33d, 0x0, 0x7, 0x7ff, 0xeb, 0x5, 0x4, 0x101, 0x9, 0x7, 0xb02, 0x1, 0x5, 0xfff, 0x80000000, 0x5c22, 0x7, 0x7, 0x0, 0x0, 0x0, 0x7281, 0x9, 0x1, 0x3, 0x7, 0x1, 0x7, 0x101, 0xc5, 0x8cf7, 0x7ff, 0x1, 0x8000, 0x2, 0x100, 0xff, 0x7, 0xb, 0x10000, 0xd3b7, 0x5, 0x3, 0x401, 0x3, 0xe85c, 0xffff121c, 0x0, 0x6, 0x2, 0x1, 0x9, 0x10000, 0x7, 0xf7, 0x5, 0x4, 0x7, 0x1, 0x6, 0x0, 0x2, 0x100, 0x5, 0x4, 0x4, 0x2, 0x10001, 0x6, 0x463dd130, 0x0, 0x5, 0x7ff, 0x6, 0x5, 0x2, 0x8, 0xc, 0xd, 0x2, 0x1, 0x1, 0x6de4, 0x5, 0xb, 0x0, 0xfffff941, 0x7, 0x5, 0x80, 0x4, 0x1, 0x9, 0xfff, 0x0, 0x7, 0x1, 0x500, 0x8, 0xfffffffe, 0x1, 0x1, 0x9, 0x401, 0xfffffffd, 0xd, 0x400, 0xfffffff9, 0x2, 0x7fffffff, 0x2, 0x3, 0x7, 0xffffffc0, 0x6, 0xd, 0xc4, 0x0, 0x9, 0x0, 0x2, 0x8000, 0x8, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0x8, 0x8, 0xfb, 0xaf95, 0x4, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x4, 0x1, 0x7, 0x4, 0x7, 0x8000, 0x2d, 0x576, 0x4, 0xddf, 0xfcb, 0x3ff, 0x4, 0xa, 0x5, 0x200, 0x4, 0x6000000, 0x4, 0x81, 0x7, 0x1790, 0xff, 0x5, 0x1, 0x10001, 0x600, 0x7ff, 0x145, 0x80, 0x9b94, 0x0, 0x4, 0x6, 0x0, 0x4059afd, 0x7f, 0xfffffffa, 0x8, 0xd50, 0x0, 0x3, 0x8, 0x0, 0xfff, 0x800, 0x5, 0x2, 0x1, 0x81, 0x7, 0x450a, 0xe13, 0x8, 0xff, 0x3, 0x8cf, 0x2, 0xfff, 0x10001, 0x10000000, 0x40, 0xee, 0x3, 0x1ff, 0x100, 0x35d, 0x800, 0x5f8, 0x27, 0x6, 0xffff, 0xf, 0x4, 0x6, 0xe, 0x8000, 0xcd54, 0xffffff47, 0x8000, 0xfffffffe, 0x3, 0x7, 0x7, 0x8, 0x1, 0x2, 0x10, 0xb4cd, 0xffff, 0xbc, 0x1, 0x1, 0x1430bd90, 0xff, 0x76a4, 0x401, 0x1, 0xa91, 0x81, 0x3, 0x5, 0xf, 0x8, 0x9, 0x3, 0x7ff, 0x5, 0x5, 0x4, 0x3, 0x6, 0x80000000, 0x10001, 0x1, 0x5, 0x3, 0x8001, 0x9cc3, 0x4, 0x3, 0xc, 0x8, 0x4, 0xbf9, 0x1, 0xa09, 0x5, 0xfffffffa, 0x8, 0x9cfb, 0x3, 0x8, 0x0, 0xffff9c1e, 0x1, 0x1, 0xe6, 0xae, 0xd, 0x3ff, 0x8, 0x400, 0x4, 0xc, 0x7ff, 0xd, 0x7, 0x5, 0x9, 0x7, 0x3, 0x7ae, 0x3, 0x5, 0x100, 0x93, 0x2, 0x3, 0x5, 0xa, 0x1, 0x1, 0x9, 0x1, 0x1, 0x0, 0x6, 0x1, 0x3ff, 0x200, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0x7, 0x2, 0x3, 0xfffffffe, 0x8000, 0x3, 0x6, 0x3, 0x0, 0x9, 0x4b, 0x98d, 0x101, 0x3ff, 0x40, 0x7, 0x800, 0x7e, 0x7, 0x101, 0x4, 0xffffffff, 0x9, 0x7, 0xfff, 0x10000, 0x400, 0x7, 0x1, 0x10000, 0x7, 0x6, 0x5, 0x2, 0x2, 0x11, 0xd04, 0x9, 0x666, 0x0, 0x1, 0xd970, 0x3, 0x401, 0x7, 0x10, 0x2d24e897, 0x4d, 0x2a, 0xfffffff0, 0x2, 0x3, 0x729a, 0xc, 0x8, 0xfffffff7, 0xc5b, 0x7, 0x3, 0x4, 0x1ff, 0x0, 0x10, 0xd2b7, 0xcc0, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x1, 0xecc, 0x1, {0x7, 0x37ac2183f91e87d0, 0xa, 0x8, 0x9, 0x8001}, {0x8, 0x0, 0x2, 0x2, 0x3, 0x7}, 0xb00000, 0x1, 0x80000000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffffa, 0x1, 0x106, 0xff, 0xa11, 0x2, 0xffffffff, 0xeb61, 0x4, 0x3, 0x3, 0x3, 0x5a21, 0xc, 0x9, 0x4, 0x2, 0xd, 0x2, 0xe01f, 0x5, 0xf, 0xffffffff, 0xb, 0x7, 0x3, 0x2, 0x2, 0x1, 0x5, 0x1ff, 0x0, 0x3, 0x100, 0x400, 0x8702, 0x8f35, 0x400, 0x6, 0xf7ac, 0x662e, 0x380000, 0x6, 0x7fff, 0x3, 0x0, 0x3, 0x0, 0xcb80000, 0xa7, 0xa848, 0x7, 0x2, 0x6, 0x6, 0x1, 0x2, 0x9, 0x0, 0x0, 0xc84b, 0x1, 0x40, 0x1, 0x7, 0x9, 0x10000, 0x10, 0xc58, 0x6, 0x80000000, 0x9, 0x10001, 0x0, 0x9b, 0x7, 0x1000, 0xfffffeff, 0x400, 0x8b86, 0xc7, 0x3, 0x80, 0x8001, 0x6, 0xc, 0x8, 0x4, 0x0, 0x1, 0x5, 0x2, 0x2a, 0x0, 0x5fb6, 0x2, 0x1, 0x800, 0x7, 0x7, 0x81, 0x8, 0xfffffff8, 0x0, 0x8, 0x1ff, 0x9, 0xfffffffc, 0xc6000000, 0x80000001, 0x1, 0x0, 0x8, 0xa673, 0x9, 0xff82, 0x3, 0x2, 0x2, 0x5, 0x1, 0x10, 0xf, 0x1cb9, 0x9, 0x1, 0x2, 0xffff, 0x1, 0x3, 0x800, 0x7697, 0xe, 0x4, 0x81, 0x8, 0x319c, 0x0, 0xff, 0x6, 0xfffff000, 0x0, 0x8000, 0xdc, 0x7, 0x4, 0x800, 0x2, 0x1ff, 0xfffffffe, 0x93f, 0x5, 0x1a70, 0x8, 0x10, 0x5, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffffa, 0x2, 0x5, 0x3, 0x7, 0x3, 0xfffffffe, 0x7, 0x6, 0x9, 0x1cfb, 0x9, 0x6, 0x9, 0xc137, 0x401, 0x7, 0x7, 0xf6a1, 0x100, 0x0, 0x4, 0x5, 0x3, 0x2, 0xed, 0x7f, 0x1ff, 0x6, 0xffffffff, 0x6, 0x6, 0xf200, 0x7, 0x6, 0x1, 0x7ff, 0x3, 0x40, 0xe, 0x8, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x7ff, 0x2a, 0x3, 0x1ff, 0x5, 0x7f, 0x10001, 0x3, 0x8001, 0x4, 0xfffffffc, 0x9, 0x10, 0x2, 0x5, 0x6, 0x81, 0x9, 0xae, 0x244a, 0x3, 0x4, 0x400, 0x5, 0xb0, 0x7fffffff, 0x101, 0x3f, 0x5, 0x5, 0x3, 0xf608, 0x2, 0x99, 0xf43a, 0x1, 0x1, 0x0, 0xa, 0x2, 0xf19, 0x3, 0x6, 0x600, 0x7122, 0x80000001, 0xfff, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xc47, 0x3, 0x5c4, 0x2, 0x9, 0x100, 0x7c, 0x3, 0xfffffff7, 0x83, 0x80000001, 0x1f75, 0x442, 0xe2, 0x81, 0x3, 0x7c91, 0x401, 0x10001, 0x2, 0x80000001, 0x2, 0xb, 0x1ff, 0x2, 0x7fffffff, 0x4, 0x0, 0x3, 0x7fffffff, 0x2, 0x0, 0x81, 0x2, 0xfffffffb, 0x841, 0x4, 0x3, 0xd, 0x8, 0xc904, 0x1d, 0x3, 0x2, 0x7, 0x2, 0x5, 0x2, 0x11a5, 0x718, 0x2, 0xd, 0x0, 0x5, 0xb5f, 0x7, 0x0, 0x2, 0x7, 0x5, 0x3, 0x2, 0xffffffff, 0x5, 0x8, 0x7f, 0x4, 0x0, 0x0, 0x3f, 0xfffffff7, 0x8, 0x8, 0x2, 0x8, 0xd5, 0x401, 0x5, 0x2, 0x10000, 0x0, 0x5, 0x3, 0xeb69, 0x4, 0x7102, 0x1, 0x3, 0x7, 0xc6e4355b, 0x9, 0xffffff00, 0x0, 0x10000, 0x5, 0x2, 0x9, 0x9, 0xe0c, 0x3, 0xffffffc0, 0x1ff, 0x2, 0x2, 0x5, 0x6, 0xfffffffb, 0xb5a, 0x56, 0x0, 0x1, 0x4000000, 0x5, 0x8, 0x200, 0x0, 0x4, 0x3, 0x7, 0x4, 0x4, 0x7, 0xdce, 0xaa, 0x3, 0xd3ac, 0x7, 0x7, 0x5, 0x6, 0x0, 0x101, 0x7, 0x20, 0x2, 0x0, 0x1000, 0x8, 0xfff, 0x3, 0x40, 0x7fffffff, 0x1, 0x6, 0x2, 0x100, 0x8, 0x6d, 0xfffffff7, 0x80, 0x9, 0x839, 0x9, 0xfffffff0, 0xffffff2a, 0x3, 0x272, 0x7ff, 0x10, 0x1, 0x400, 0x81, 0x6, 0x3, 0x7, 0xde5, 0x6, 0x1000, 0xfc, 0xb, 0x9aaf, 0x3, 0x2, 0x4, 0xb9b7, 0x8, 0x3fba, 0x4, 0x3d43, 0x5, 0x8, 0x0, 0x84b, 0x6, 0x7, 0x279c3835, 0x6, 0x3e, 0x1, 0x401, 0x4, 0x9, 0x80, 0xc, 0x7f, 0x8, 0xfffffff9, 0x6a6c356e, 0x8000, 0x3, 0x4, 0x5, 0x0, 0x1, 0x7, 0x6, 0x1, 0x42, 0x1, 0x0, 0xb29, 0xfffffff7, 0x9, 0xf3b, 0x3ff, 0x1, 0x101, 0x3, 0x3, 0xfffffff2, 0x7, 0x3, 0x16, 0x8001, 0x8, 0x3, 0x4, 0x8, 0x401, 0xffffffff, 0x400, 0x10, 0x4, 0x401, 0x8, 0x10001, 0xdd1, 0x6, 0x8, 0xf, 0x4, 0x3, 0x0, 0x100, 0x1, 0x2, 0x9, 0x0, 0x8001, 0xb3c, 0x6, 0x4, 0x1, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x6, 0x5, 0xf1, {0xf5, 0x0, 0x5, 0x1000, 0xa, 0x10001}, {0x2, 0x2, 0x5, 0x5, 0x1, 0x7fffffff}, 0xc, 0x200}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xd8, 0x1, 0xfff, 0x80000000, 0x0, 0x7fff, 0x1, 0x5, 0xf, 0x0, 0x0, 0x3, 0x2, 0x7, 0xc, 0xfffeffff, 0x7, 0x5, 0x3, 0x1, 0x3ff, 0xfffffffc, 0x3, 0x1, 0x1, 0x6, 0xf, 0x3, 0x200, 0x6, 0x1, 0x7, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xc, 0x9, 0x3, 0xfffffff9, 0x3ff, 0xfffffff8, 0x9, 0x1, 0xe1, 0xb, 0xa66, 0xffffffff, 0x8, 0x7bb, 0x8, 0x0, 0x3, 0x4, 0xff, 0x2, 0x1, 0x19, 0x7ab7, 0x10, 0xfffffff1, 0xffffffff, 0x5, 0x1000, 0x1, 0xffffffff, 0x6, 0xfffff001, 0x7, 0x100, 0x3c3e, 0x6, 0x81, 0x0, 0x5, 0x80000001, 0x81, 0x7aa1, 0x3, 0x800, 0x200, 0x4, 0x4, 0x81, 0x8001, 0xfffffffb, 0x8, 0x0, 0x7, 0x14, 0x3, 0x40, 0x8, 0xdc, 0xcbc, 0xff, 0x2, 0x101, 0xa, 0x5b, 0xffff, 0xfffffff9, 0x800, 0x7, 0x29, 0x5, 0x0, 0x401, 0x1, 0x10000, 0x9, 0x5, 0x5, 0x7d9, 0x3, 0x1000, 0x1, 0x2, 0x2, 0x151, 0x4, 0xf, 0x1ff, 0xc1f, 0x3, 0x5, 0x2, 0xd, 0x5, 0x4, 0x8, 0x94c, 0x0, 0x9, 0x3, 0x80000000, 0x6, 0x6, 0x9, 0x0, 0xe, 0x8, 0x7, 0x8001, 0x570, 0x6, 0x40, 0x200, 0xdd2, 0x6, 0x8001, 0x4, 0x9, 0x0, 0xfffff03b, 0x0, 0x3, 0x7f, 0xfffffffe, 0x1ff, 0x8, 0x53a, 0x2, 0x5, 0x1, 0x2000, 0x9, 0x8001, 0x4, 0x5101, 0x9, 0x400, 0x9, 0x7fff, 0xfff, 0x9, 0x0, 0x9, 0xff, 0x8, 0x3, 0x3, 0x6, 0xfffffffd, 0x6, 0x1, 0x5c, 0x5, 0x3, 0x8, 0xc, 0x3, 0x7, 0x4, 0x5, 0xfcc, 0x1c, 0x6, 0x3ff, 0x6, 0x2, 0x4, 0x6, 0xd05a, 0x9, 0xfffffffe, 0x40, 0xffffffbe, 0x2eaf9a44, 0x0, 0x4, 0x9, 0x8, 0x6, 0x5, 0x1, 0x43, 0x6, 0x10, 0x77, 0x5, 0x1, 0x0, 0xcb40, 0xeb98, 0x80000000, 0x6, 0x4, 0x8, 0xf, 0xa000000, 0x9, 0x5, 0x3, 0x0, 0xf3ab, 0x4, 0x1, 0x5, 0xfffffffa, 0x0, 0x80, 0x1, 0x6, 0x2df4, 0x80, 0x844, 0x6, 0x1ff, 0x3, 0x2, 0x4, 0x1, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x466dcd13, 0x0, 0x3, 0x9, 0x7fffffff, {0x2c, 0x0, 0x3, 0xff, 0x65, 0x1}, {0x4, 0x2, 0x6, 0x1, 0x2, 0x4}, 0x7f, 0x7, 0x5}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x418, 0x2, 0x0, 0x1, 0x4, 0x9, 0x2, 0x4, 0x400, 0x7f, 0x5, 0x5, 0x8, 0x2, 0xc, 0x8000, 0x1, 0x3, 0x7, 0x7, 0x4, 0x3ff, 0xd, 0x7, 0xffff, 0x1, 0x72e, 0xfffffffd, 0x0, 0x0, 0x5, 0x2, 0x4, 0xc, 0x800, 0x80, 0x7, 0x3, 0x101, 0x7, 0xf, 0x9, 0xf3, 0x3, 0x20e33ef6, 0x9, 0x2b42, 0xd, 0x5, 0x4, 0x6, 0x7ff, 0x6, 0x7, 0xdab, 0x8001, 0x7f, 0x4, 0x3, 0xfffff457, 0x2, 0x1, 0x8001, 0xfffffff5, 0xf, 0x80000000, 0x8000, 0x9, 0x0, 0x3, 0x7, 0x1, 0x8, 0xffff, 0x4, 0x2, 0xe, 0x7, 0x4e, 0x4, 0x8, 0x8, 0x7, 0x8, 0x15, 0xfffffffa, 0x5, 0xffffffff, 0xfffffffb, 0xfffffffd, 0x6, 0x8, 0x101, 0x7, 0x8, 0x7, 0x4, 0x9, 0x7, 0x8, 0x7, 0x9, 0x9, 0x4, 0x5262, 0xfff, 0x10000, 0x5, 0xfffffffd, 0x4, 0x9, 0x80, 0xad, 0x1, 0x3, 0x8, 0xfff, 0x9, 0x1, 0x7ff, 0x3, 0x0, 0x5, 0x9, 0x24d, 0x5, 0x4, 0x10000, 0x2, 0x53, 0x5, 0x6, 0x2, 0xa, 0x7, 0x98, 0x3, 0x7, 0x0, 0xffff, 0x2, 0x7ff, 0x10001, 0x7ff, 0x10001, 0x1, 0x2, 0x8000, 0x10000, 0x2, 0x5, 0xfc, 0xffffa5d5, 0x468, 0x7, 0x0, 0x1, 0x200, 0xc, 0x5, 0x7fff, 0xa8a0, 0x2, 0x10, 0x5, 0x9, 0x26, 0x9, 0x9a58, 0x6, 0x8, 0x8, 0x4, 0x5, 0xa0, 0x3, 0x10, 0xf, 0x3, 0x3, 0xe, 0x6, 0xad, 0xfffffe01, 0x8, 0x7ff, 0x9, 0x7, 0x2, 0xa, 0x8, 0x7, 0x1, 0x1ff, 0x2, 0x7, 0xef, 0x0, 0x1, 0xc000, 0x7, 0x2950, 0x3, 0x8, 0x1ff, 0x8, 0xfffffffd, 0xfffff056, 0x5, 0x0, 0x7, 0x80000000, 0x1000, 0x4, 0x6, 0x8, 0x7, 0xff, 0x2, 0x8001, 0x3bb3, 0xffff, 0xb1, 0x2, 0x100, 0x2, 0x3ff, 0x800, 0x7, 0x2, 0x9, 0x3, 0x1, 0x7, 0x7, 0x0, 0xfffffffc, 0x1ff, 0x8, 0x6, 0x6627, 0x2, 0x7ff, 0x9, 0x6, 0x47, 0x8, 0x6, 0x100, 0x7fff, 0x5a, 0x9, 0x7fffffff, 0x5, 0x100, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x33, 0x0, 0xc, 0x3, 0x0, 0x6, 0x8, 0x57, 0x4, 0xfffffffd, 0x2, 0xa6, 0x7, 0xfe0c, 0x1, 0x7fff, 0x7f, 0x0, 0x3, 0x5, 0x0, 0xffffff00, 0x2, 0x5a5, 0x7, 0x1, 0x101, 0x5, 0x8, 0x200, 0x7, 0x3, 0xddc, 0x2, 0x1, 0x8, 0x8, 0x5, 0x0, 0xfffffffa, 0x921, 0x400, 0x2, 0x6, 0x57b, 0x1, 0x1, 0x18b, 0x38, 0x7, 0x8, 0x80, 0x9, 0x8001, 0x6, 0x2, 0x9, 0x9, 0x4, 0x2313, 0x200, 0xb, 0x9, 0x4, 0x9a9b, 0x7, 0x101, 0x6, 0x0, 0x5, 0xf7, 0xa, 0x6, 0x80000001, 0x4, 0x5, 0xfc, 0x9c12, 0x4, 0x9, 0x10, 0x80000001, 0x0, 0x7, 0x3, 0x5, 0x100, 0x2, 0x1, 0x6, 0x6, 0x0, 0x0, 0xd, 0x9, 0x8, 0x8, 0xb, 0x7, 0x1ff, 0x3, 0x4a, 0x10, 0x6, 0x7, 0x7, 0x8, 0xffffffff, 0x7, 0x2, 0x0, 0x4, 0x7c00, 0x3ff, 0x9, 0x427710ee, 0x8, 0x0, 0x3, 0x7ff, 0x100, 0x1000, 0xf7, 0x6734fff1, 0x8, 0x2, 0x7, 0x8001, 0x5, 0x10001, 0x4, 0x4, 0x2e606d37, 0x8, 0x4, 0x4, 0x21d, 0x0, 0x7f, 0x5, 0x7, 0x7, 0x8, 0x701, 0x4, 0x1, 0x1, 0x2, 0x6, 0x0, 0x3, 0x8, 0x0, 0x3, 0xfffffffd, 0x2e282c4c, 0x1, 0x4, 0x346a4136, 0x7, 0x1, 0x4, 0xfd20, 0xd, 0x8, 0x8, 0x7fff, 0xffff, 0x401, 0x1, 0x6, 0x8, 0x7, 0x5, 0x9, 0x7, 0x5, 0x4, 0x0, 0x7f, 0x2, 0x8, 0xad, 0x2, 0x77, 0x3, 0x24, 0xfffffff3, 0x4, 0x6, 0x9, 0xc, 0x0, 0x9, 0x3ff, 0x1ff, 0x1, 0xfffff633, 0x6497a193, 0x2, 0x6, 0xfffffffb, 0x2, 0x7, 0x4, 0x2, 0x7727, 0x8, 0x401, 0x2, 0x81, 0x8, 0x6, 0x6, 0x6, 0x26, 0x5c, 0x7, 0x3a800000, 0x0, 0x80000000, 0x101, 0x43c7, 0xc3, 0x7e4, 0xb55f, 0x9, 0x4, 0x6, 0x9, 0x6, 0x2, 0x8, 0x55, 0x7, 0x4, 0x43, 0x5, 0x1, 0x2, 0xf, 0x6, 0x5, 0xfffffff6, 0x274, 0x2, 0x5, 0xd, 0x6, 0x5, 0xe5, 0x1, 0x4, 0x6, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1fec9700}]]}, {0x42, 0x6, "390f0904d70e7fee9fc258a1e358473d9470e9118532074eb093f52348c8b1cab94d95e92beaf449d5b72f046cf45b2b7530d6c6a749f6918a15bab09fe1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x3930}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) accept4$tipc(r3, 0x0, 0x0, 0x800) (async) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x370a3e077a6d5772) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) (async) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x3e8, 0x0, 0x70bd28, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008040}, 0x8800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = accept4(r6, 0x0, &(0x7f0000003cc0), 0x80800) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000003d00)=""/146, &(0x7f0000003dc0)=0x92) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): asing backup interface [ 396.400490][ T7378] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 396.416508][ T7378] bond0 (unregistering): Released all slaves [ 396.438445][ T7378] bond1 (unregistering): Released all slaves [ 396.457644][ T7378] bond2 (unregistering): (slave veth3): Releasing backup interface [ 396.478052][ T7378] bond2 (unregistering): Released all slaves [ 396.495192][ T7378] bond3 (unregistering): Released all slaves [ 396.512557][ T7378] bond4 (unregistering): Released all slaves [ 396.528227][ T7378] bond5 (unregistering): Released all slaves [ 396.547690][ T7378] bond6 (unregistering): Released all slaves [ 396.568116][ T7378] bond7 (unregistering): Released all slaves [ 396.601606][ T7378] bond8 (unregistering): Released all slaves [ 396.620238][ T7378] bond9 (unregistering): Released all slaves [ 396.648795][ T7378] bond10 (unregistering): Released all slaves [ 396.720100][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.754484][ T5733] lo speed is unknown, defaulting to 1000 [ 396.801092][ T5733] syz0: Port: 1 Link DOWN [ 396.963474][ T9494] lo speed is unknown, defaulting to 1000 [ 397.209742][T16674] bond0: Caught tx_queue_len zero misconfig [ 397.445895][T16691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.545691][T16697] netlink: 'syz.1.2981': attribute type 1 has an invalid length. [ 397.554991][T16697] netlink: 'syz.1.2981': attribute type 2 has an invalid length. [ 397.571904][T16699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2979'. [ 397.694301][T16498] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.702053][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.710038][T16498] bridge_slave_0: entered allmulticast mode [ 397.718197][T16498] bridge_slave_0: entered promiscuous mode [ 397.727540][T16498] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.735127][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.742525][T16498] bridge_slave_1: entered allmulticast mode [ 397.750675][T16498] bridge_slave_1: entered promiscuous mode [ 397.826529][T16498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.857742][T16498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.958123][T16498] team0: Port device team_slave_0 added [ 398.020396][T16498] team0: Port device team_slave_1 added [ 398.217742][T16498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.250623][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.290666][T16736] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2988'. [ 398.303834][ T50] Bluetooth: hci5: command tx timeout [ 398.310835][T16498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.323282][T16726] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 398.331229][T16498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.385583][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.417071][T16498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.568947][T16498] hsr_slave_0: entered promiscuous mode [ 398.576032][T16498] hsr_slave_1: entered promiscuous mode [ 398.595674][T16498] debugfs: 'hsr0' already exists in 'hsr' [ 398.611847][T16498] Cannot create hsr debugfs directory [ 398.627466][T16743] veth0_to_bond: entered allmulticast mode [ 398.920244][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 398.935980][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'. [ 398.951654][T16765] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 399.474473][T16782] IPVS: set_ctl: invalid protocol: 106 224.0.0.1:20000 [ 399.767833][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 399.906631][T16812] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3011'. [ 400.057337][T16817] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 400.083781][T16817] IPVS: fo: FWM 3 0x00000003 - no destination available [ 400.122412][T16817] IPVS: fo: FWM 3 0x00000003 - no destination available [ 400.122412][T16818] IPVS: fo: FWM 3 0x00000003 - no destination available [ 400.232404][T16828] 8021q: VLANs not supported on tunl0 [ 400.778256][T16856] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3022'. [ 400.965561][T16867] erspan0: entered allmulticast mode [ 400.991615][T16867] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.999698][T16498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.047468][T16498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.072109][T16498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.118713][T16498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.148492][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'. [ 401.208655][T16498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.222061][T16881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3029'. [ 401.251768][T16498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.292986][T16498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.318694][T16498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.598760][T16498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.661027][T16498] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.698841][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.706140][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.735169][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.742451][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.803273][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 401.845330][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 401.912641][T16908] vcan0 (unregistering): left allmulticast mode [ 401.969770][T16916] bond3: (slave lo): Releasing backup interface [ 401.992184][T16916] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 402.059128][T16916] team0: Port device H removed [ 402.103325][T16916] ¾x9ÿ: left allmulticast mode [ 402.110289][T16916] ¾x9ÿ: left promiscuous mode [ 402.122878][T16916] bridge0: port 1(0¾x9ÿ) entered disabled state [ 402.145743][T16916] bridge_slave_1: left promiscuous mode [ 402.159615][T16916] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.240866][T16916] bond9: (slave veth0_to_bond): Releasing active interface [ 402.288142][T16916] bond0: (slave bond_slave_0): Releasing backup interface [ 402.311896][T16916] bond0: (slave bond_slave_1): Releasing backup interface [ 402.338850][T16916] team0: Port device team_slave_1 removed [ 402.362979][T16916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.395596][T16916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 403.318008][T16962] bridge0: left promiscuous mode [ 403.337964][T16962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.353590][T16962] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.388743][ T5626] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 60 sec [ 403.835480][T16992] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 404.217664][T17011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3055'. [ 404.385872][T17017] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3056'. [ 404.462763][T16498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.758667][T17034] netlink: 'syz.4.3061': attribute type 63 has an invalid length. [ 405.074303][T16498] veth0_vlan: entered promiscuous mode [ 405.136487][T16498] veth1_vlan: entered promiscuous mode [ 405.282591][T16498] veth0_macvtap: entered promiscuous mode [ 405.346653][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 405.410197][T16498] veth1_macvtap: entered promiscuous mode [ 405.539109][T16498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.588360][T16498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.602366][T17065] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3068'. [ 405.639333][ T615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.672205][ T615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.710728][ T615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.758870][ T615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.870802][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'. [ 405.942187][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 406.303380][ T7376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.316808][T17097] FAULT_INJECTION: forcing a failure. [ 406.316808][T17097] name failslab, interval 1, probability 0, space 0, times 0 [ 406.346793][ T7376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.362733][T17097] CPU: 1 UID: 0 PID: 17097 Comm: syz.0.3072 Not tainted syzkaller #0 PREEMPT(full) [ 406.362763][T17097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.362785][T17097] Call Trace: [ 406.362798][T17097] [ 406.362808][T17097] dump_stack_lvl+0xe8/0x150 [ 406.362839][T17097] should_fail_ex+0x412/0x560 [ 406.362872][T17097] should_failslab+0xa8/0x100 [ 406.362907][T17097] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 406.362939][T17097] ? __alloc_skb+0x1d0/0x7d0 [ 406.362961][T17097] ? __local_bh_enable_ip+0xd0/0x130 [ 406.362989][T17097] __alloc_skb+0x1d0/0x7d0 [ 406.363020][T17097] netlink_dump+0x1d8/0xe10 [ 406.363049][T17097] ? __netlink_lookup+0xc6/0x8b0 [ 406.363083][T17097] ? __netlink_lookup+0x7e4/0x8b0 [ 406.363110][T17097] ? __pfx_netlink_dump+0x10/0x10 [ 406.363149][T17097] ? netlink_lookup+0x30/0x200 [ 406.363174][T17097] ? netlink_lookup+0x30/0x200 [ 406.363195][T17097] ? netlink_lookup+0x30/0x200 [ 406.363225][T17097] __netlink_dump_start+0x5cb/0x7e0 [ 406.363260][T17097] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 406.363283][T17097] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 406.363311][T17097] ? __pfx_rtnl_dump_all+0x10/0x10 [ 406.363335][T17097] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 406.363378][T17097] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.363401][T17097] ? __pfx_rtnl_dumpit+0x10/0x10 [ 406.363425][T17097] ? __pfx_rtnl_dump_all+0x10/0x10 [ 406.363466][T17097] netlink_rcv_skb+0x232/0x4b0 [ 406.363495][T17097] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.363523][T17097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.363566][T17097] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.363593][T17097] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.363627][T17097] netlink_unicast+0x75c/0x8e0 [ 406.363672][T17097] netlink_sendmsg+0x813/0xb40 [ 406.363715][T17097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.363747][T17097] ? aa_sock_msg_perm+0xf1/0x1b0 [ 406.363778][T17097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.363810][T17097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.363835][T17097] sock_write_iter+0x49b/0x4f0 [ 406.363871][T17097] ? __pfx_sock_write_iter+0x10/0x10 [ 406.363916][T17097] ? bpf_lsm_file_permission+0x9/0x20 [ 406.363947][T17097] ? security_file_permission+0x75/0x260 [ 406.363985][T17097] vfs_write+0x61d/0xb90 [ 406.364026][T17097] ? __pfx_vfs_write+0x10/0x10 [ 406.364068][T17097] ? __fget_files+0x2a/0x420 [ 406.364105][T17097] ksys_write+0x150/0x270 [ 406.364139][T17097] ? __pfx_ksys_write+0x10/0x10 [ 406.364181][T17097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.364205][T17097] do_syscall_64+0x15f/0xf80 [ 406.364232][T17097] ? trace_irq_disable+0x3b/0x140 [ 406.364264][T17097] ? clear_bhb_loop+0x40/0x90 [ 406.364292][T17097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.364314][T17097] RIP: 0033:0x7f88b2d9cdd9 [ 406.364334][T17097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.364354][T17097] RSP: 002b:00007f88b3bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.364378][T17097] RAX: ffffffffffffffda RBX: 00007f88b3015fa0 RCX: 00007f88b2d9cdd9 [ 406.364394][T17097] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000005 [ 406.364408][T17097] RBP: 00007f88b3bac090 R08: 0000000000000000 R09: 0000000000000000 [ 406.364420][T17097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.364433][T17097] R13: 00007f88b3016038 R14: 00007f88b3015fa0 R15: 00007ffe43212ea8 [ 406.364468][T17097] [ 406.872989][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.880975][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.086847][T17110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3073'. [ 408.012042][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.027664][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.049161][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.063767][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.083495][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.549569][T17173] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 408.618369][T17149] lo speed is unknown, defaulting to 1000 [ 409.048723][T17149] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.055979][T17149] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.063210][T17149] bridge_slave_0: entered allmulticast mode [ 409.072045][T17149] bridge_slave_0: entered promiscuous mode [ 409.080476][T17149] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.087801][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.095325][T17149] bridge_slave_1: entered allmulticast mode [ 409.102803][T17149] bridge_slave_1: entered promiscuous mode [ 409.136328][T17149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.149215][T17149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.190933][T17149] team0: Port device team_slave_0 added [ 409.198919][T17149] team0: Port device team_slave_1 added [ 409.238467][T17149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.245573][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.271635][T17149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.286240][T17149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.293234][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.322578][T17149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.382061][T17149] hsr_slave_0: entered promiscuous mode [ 409.391019][T17149] hsr_slave_1: entered promiscuous mode [ 409.397767][T17149] debugfs: 'hsr0' already exists in 'hsr' [ 409.403560][T17149] Cannot create hsr debugfs directory [ 410.185496][ T5633] Bluetooth: hci2: command tx timeout [ 410.384955][T17125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.419949][T17149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 410.508303][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.565614][T17149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 410.612766][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.648876][T17149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 410.695896][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.707691][T17149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 410.722947][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 410.748216][T17149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.786716][T17192] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 410.799698][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 410.803229][T17192] bond9 (unregistering): Released all slaves [ 410.826770][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 410.990367][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'. [ 411.024550][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'. [ 411.064078][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 411.412223][T17149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.447222][T17227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.463431][T17149] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.504211][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.511497][ T7370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.568202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.575476][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.691104][T17236] Bluetooth: MGMT ver 1.23 [ 411.922523][T17252] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 411.935565][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 411.984392][T17252] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.139032][T17256] bond9: (slave veth5): Enslaving as an active interface with a down link [ 412.178147][T17253] netlink: 'syz.3.3109': attribute type 1 has an invalid length. [ 412.270613][ T5633] Bluetooth: hci2: command tx timeout [ 412.898805][T17297] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3121'. [ 413.032546][T17306] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3122'. [ 413.061473][T17306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3122'. [ 413.091008][T17149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.300751][T17313] bridge_slave_0: default FDB implementation only supports local addresses [ 413.352226][T17149] veth0_vlan: entered promiscuous mode [ 413.403066][T17149] veth1_vlan: entered promiscuous mode [ 413.521052][T17149] veth0_macvtap: entered promiscuous mode [ 413.538082][T17322] netlink: 'syz.4.3128': attribute type 10 has an invalid length. [ 413.563951][T17149] veth1_macvtap: entered promiscuous mode [ 413.617716][T17149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.665081][T17149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.710981][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.753662][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.779341][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.800243][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.931928][T17340] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 413.966081][T17340] netlink: 'syz.0.3135': attribute type 11 has an invalid length. [ 414.092451][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.132101][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.161366][T17347] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 414.256349][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.274530][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.344966][ T5633] Bluetooth: hci2: command tx timeout [ 414.422912][T17357] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 414.445391][T17357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.248974][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.267997][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.276521][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.291079][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.301067][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.878358][T17401] __nla_validate_parse: 10 callbacks suppressed [ 415.878378][T17401] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3155'. [ 416.376248][T17382] lo speed is unknown, defaulting to 1000 [ 416.392847][T17416] netlink: 'syz.1.3159': attribute type 11 has an invalid length. [ 416.408697][T17415] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3160'. [ 416.425708][ T50] Bluetooth: hci2: command tx timeout [ 416.533594][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 417.047974][T17438] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 417.174235][T17445] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3166'. [ 417.385950][ T5633] Bluetooth: hci4: command tx timeout [ 417.809182][T17382] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.816652][T17382] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.824014][T17382] bridge_slave_0: entered allmulticast mode [ 417.832691][T17382] bridge_slave_0: entered promiscuous mode [ 417.842143][T17382] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.849717][T17382] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.857109][T17382] bridge_slave_1: entered allmulticast mode [ 417.865660][T17382] bridge_slave_1: entered promiscuous mode [ 417.941138][T17382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.986351][T17469] netlink: 'syz.1.3173': attribute type 26 has an invalid length. [ 417.994408][T17382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.019044][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 418.098424][T17469] netlink: 'syz.1.3173': attribute type 26 has an invalid length. [ 418.120176][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 418.159392][T17471] syzkaller0: entered promiscuous mode [ 418.177503][T17471] syzkaller0: entered allmulticast mode [ 418.213510][T17382] team0: Port device team_slave_0 added [ 418.226927][T17479] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3176'. [ 418.240631][T17382] team0: Port device team_slave_1 added [ 418.345276][T17382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.365405][T17382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.409883][T17382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.446218][T17382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.453807][T17382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.480397][T17382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.632873][T17382] hsr_slave_0: entered promiscuous mode [ 418.652335][T17382] hsr_slave_1: entered promiscuous mode [ 418.663823][T17382] debugfs: 'hsr0' already exists in 'hsr' [ 418.673801][T17382] Cannot create hsr debugfs directory [ 418.713663][T17499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3180'. [ 419.095529][T17509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3185'. [ 419.137886][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 419.474314][ T5633] Bluetooth: hci4: command 0x041b tx timeout [ 419.603983][T17527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.059626][T17546] netlink: 'syz.1.3197': attribute type 5 has an invalid length. [ 420.416678][T17382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.443142][T17382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.480042][T17382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.496951][T17382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.519567][T17382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.539600][T17382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.548214][T17382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.560139][T17382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.627187][T17583] veth0: entered promiscuous mode [ 420.748989][T17382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.766369][T17583] veth0: left promiscuous mode [ 420.801661][T17382] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.830441][ T615] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.837674][ T615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.940789][ T615] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.948099][ T615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.080906][T17601] __nla_validate_parse: 11 callbacks suppressed [ 421.080927][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 421.291250][T17613] netlink: 'syz.4.3217': attribute type 11 has an invalid length. [ 421.301491][T17613] netlink: 'syz.4.3217': attribute type 11 has an invalid length. [ 421.325995][T17613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3217'. [ 421.547276][ T5633] Bluetooth: hci4: command 0x041b tx timeout [ 421.827450][T17634] syzkaller0: entered promiscuous mode [ 421.866614][T17634] syzkaller0: entered allmulticast mode [ 421.879277][T17635] syzkaller0: tun_net_xmit 14 [ 421.917260][T17641] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3222'. [ 422.006088][T17646] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 422.040496][T17646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.313113][T17655] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 422.421575][T17659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.446580][T17664] netlink: 'syz.2.3228': attribute type 3 has an invalid length. [ 422.511280][T17382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.712788][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3230'. [ 422.782981][T17382] veth0_vlan: entered promiscuous mode [ 422.878528][T17382] veth1_vlan: entered promiscuous mode [ 422.960622][T17686] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3233'. [ 422.972064][T17686] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 423.028493][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 423.139140][T17382] veth0_macvtap: entered promiscuous mode [ 423.188929][T17382] veth1_macvtap: entered promiscuous mode [ 423.223007][T17698] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3234'. [ 423.300636][T17382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.323680][T17382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.375667][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.407188][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.427089][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.452186][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.483726][T17705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3238'. [ 423.533488][T17707] netlink: 'syz.4.3239': attribute type 10 has an invalid length. [ 423.625499][ T5633] Bluetooth: hci4: command 0x041b tx timeout [ 423.745909][T17714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.764732][T17714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.773433][T17714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.783287][T17714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.869157][T17717] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 423.881881][T17717] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 425.641371][T17675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.708050][ T5633] Bluetooth: hci4: command 0x041b tx timeout [ 425.790453][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.822558][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.959672][T17721] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3242'. [ 425.970161][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.013161][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.359146][T17738] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.838244][T17766] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 426.999253][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.017013][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.028764][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.041835][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.057593][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.521167][T17789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3256'. [ 427.556798][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3256'. [ 427.727929][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 427.824345][ T5624] bond0: (slave syz_tun): Releasing backup interface [ 427.884207][T17796] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3258'. [ 427.913600][T17796] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3258'. [ 427.946326][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 428.152762][T17808] netlink: 'syz.1.3261': attribute type 5 has an invalid length. [ 428.184308][T17809] netlink: 'syz.1.3261': attribute type 5 has an invalid length. [ 428.405219][T17769] lo speed is unknown, defaulting to 1000 [ 428.428250][T17822] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3266'. [ 428.789777][T17837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3268'. [ 428.860337][T17837] ip6erspan0: entered allmulticast mode [ 428.870984][T17841] netlink: 54 bytes leftover after parsing attributes in process `syz.3.3268'. [ 428.895891][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'. [ 429.152410][ T5633] Bluetooth: hci1: command tx timeout [ 429.463210][T17869] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 429.548459][T17880] netlink: 'syz.1.3281': attribute type 1 has an invalid length. [ 429.556599][T17880] netlink: 'syz.1.3281': attribute type 7 has an invalid length. [ 429.564479][T17880] netlink: 'syz.1.3281': attribute type 8 has an invalid length. [ 429.572514][T17880] NCSI netlink: No device for ifindex 65584 [ 429.931465][T17886] gretap0: entered promiscuous mode [ 430.055053][T17769] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.062356][T17769] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.070525][T17769] bridge_slave_0: entered allmulticast mode [ 430.079645][T17769] bridge_slave_0: entered promiscuous mode [ 430.089522][T17769] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.097277][T17769] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.109947][T17769] bridge_slave_1: entered allmulticast mode [ 430.118742][T17769] bridge_slave_1: entered promiscuous mode [ 430.148652][T17903] netlink: 'syz.1.3290': attribute type 11 has an invalid length. [ 430.215824][T17769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.231521][T17769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.335709][T17769] team0: Port device team_slave_0 added [ 430.358486][T17769] team0: Port device team_slave_1 added [ 430.416012][T17769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.423271][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.454477][T17769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.487938][T17920] netlink: 'syz.0.3296': attribute type 16 has an invalid length. [ 430.525203][T17769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.540274][T17920] netlink: 'syz.0.3296': attribute type 17 has an invalid length. [ 430.556605][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.584137][T17769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.849584][T17769] hsr_slave_0: entered promiscuous mode [ 430.865849][T17769] hsr_slave_1: entered promiscuous mode [ 430.882702][T17769] debugfs: 'hsr0' already exists in 'hsr' [ 430.899388][T17769] Cannot create hsr debugfs directory [ 431.051600][T17948] netlink: 'syz.0.3303': attribute type 20 has an invalid length. [ 431.059648][T17948] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.225639][ T5633] Bluetooth: hci1: command tx timeout [ 431.462743][T17969] x_tables: duplicate underflow at hook 3 [ 431.526984][T17969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.580380][T17969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.741197][T17981] netlink: 'syz.0.3313': attribute type 2 has an invalid length. [ 431.809213][T17769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.843618][T17769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.128360][T17769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.166822][T17769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.325951][T17769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.358106][T17769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.455689][T17769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.459024][T18019] x_tables: duplicate underflow at hook 3 [ 432.492929][T17769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.559882][T18021] __nla_validate_parse: 16 callbacks suppressed [ 432.559905][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 432.576326][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 432.886832][T17769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.904180][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.917203][T17769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.938845][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.955200][T17769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.972299][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.988485][T17769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.007110][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.070077][T18041] netlink: 'syz.3.3329': attribute type 1 has an invalid length. [ 433.177469][T18051] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 433.285776][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 433.295056][T18055] netlink: 'syz.3.3333': attribute type 5 has an invalid length. [ 433.304052][T18055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3333'. [ 433.315174][ T5633] Bluetooth: hci1: command tx timeout [ 433.329477][T18055] geneve2: entered promiscuous mode [ 433.338696][T18055] geneve2: entered allmulticast mode [ 433.354482][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 433.373225][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 433.412197][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 433.442401][T18062] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3334'. [ 433.458336][T18058] bond0: entered promiscuous mode [ 433.475420][T18058] bond_slave_0: entered promiscuous mode [ 433.495812][T18058] bond_slave_1: entered promiscuous mode [ 433.527220][T18058] bond0: left promiscuous mode [ 433.539920][T18058] bond_slave_0: left promiscuous mode [ 433.551298][T18058] bond_slave_1: left promiscuous mode [ 433.574264][T18069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3337'. [ 433.588912][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 433.603269][T18070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3335'. [ 433.649541][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 433.759596][T17769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.832118][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3339'. [ 433.868811][T17769] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.892100][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 433.928875][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.936180][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.006347][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.013591][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.248369][T18095] bridge_slave_0: left allmulticast mode [ 434.257547][T18095] bridge_slave_0: left promiscuous mode [ 434.264329][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.319742][T18095] bridge_slave_1: left allmulticast mode [ 434.352315][T18095] bridge_slave_1: left promiscuous mode [ 434.366938][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.390765][T18095] bond0: (slave bond_slave_0): Releasing backup interface [ 434.425374][ T9494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.446613][T18095] bond0: (slave bond_slave_1): Releasing backup interface [ 434.468948][T18095] team0: Port device team_slave_0 removed [ 434.485781][T18095] team0: Port device team_slave_1 removed [ 434.493023][T18095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.500960][T18095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.532711][T18095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.544339][T18095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.563537][T18095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 434.675734][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.959133][T18117] IPv6: sit1: Disabled Multicast RS [ 435.394921][ T5633] Bluetooth: hci1: command tx timeout [ 435.545867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.558413][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.710549][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.978648][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.072613][T18177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.081040][T18175] bridge_slave_0: left allmulticast mode [ 436.125528][T18175] bridge_slave_0: left promiscuous mode [ 436.138648][T18175] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.173684][T18175] bridge_slave_1: left promiscuous mode [ 436.181535][T18175] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.191997][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.222365][T18175] bond0: (slave bond_slave_0): Releasing backup interface [ 436.248545][T18175] bond0: (slave bond_slave_1): Releasing backup interface [ 436.264458][T18175] team0: Port device team_slave_0 removed [ 436.277611][T18175] team0: Port device team_slave_1 removed [ 436.287062][T18175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.583764][T17769] veth0_vlan: entered promiscuous mode [ 436.613941][T17769] veth1_vlan: entered promiscuous mode [ 436.668949][T17769] veth0_macvtap: entered promiscuous mode [ 436.693253][T17769] veth1_macvtap: entered promiscuous mode [ 436.723465][T17769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.747167][T17769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.769959][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.791592][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.835382][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.878537][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.152749][ T7374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.188137][ T7374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.297000][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.322876][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.433295][T18213] only policy match revision 0 supported [ 437.433318][T18213] unable to load match [ 437.780270][T18226] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.827562][T18226] __nla_validate_parse: 7 callbacks suppressed [ 437.827594][T18226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3379'. [ 438.466864][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'. [ 438.587291][ T807] net_ratelimit: 4 callbacks suppressed [ 438.587949][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.825722][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.079810][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.091506][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.101766][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.126530][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.136495][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.379569][T18289] netlink: 'syz.3.3397': attribute type 4 has an invalid length. [ 439.393962][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.872916][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.029482][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.917331][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.236156][ T5633] Bluetooth: hci0: command tx timeout [ 441.306990][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.948825][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.070003][T18318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.079920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.140126][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3406'. [ 442.251087][T18323] netlink: 'syz.4.3408': attribute type 21 has an invalid length. [ 442.535093][T18332] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3410'. [ 442.593718][T18279] lo speed is unknown, defaulting to 1000 [ 442.793901][T18342] tipc: Started in network mode [ 442.799507][T18348] x_tables: duplicate underflow at hook 4 [ 442.813872][T18349] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3414'. [ 442.825198][T18342] tipc: Node identity 7ef8deb9dba8, cluster identity 4711 [ 442.856387][T18342] tipc: Enabled bearer , priority 0 [ 442.889150][T18334] syzkaller0: MTU too low for tipc bearer [ 442.922631][T18334] tipc: Disabling bearer [ 442.945900][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 442.964813][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 442.976762][T18342] syzkaller1: entered promiscuous mode [ 443.007322][T18342] syzkaller1: entered allmulticast mode [ 443.314898][ T5633] Bluetooth: hci0: command tx timeout [ 443.830210][T18392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 443.867024][ T807] net_ratelimit: 1 callbacks suppressed [ 443.867046][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.901986][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 443.933509][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 443.978425][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 443.998909][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 444.008343][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 444.025048][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.031852][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 444.070419][T18389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 444.295131][T18407] macsec1: entered promiscuous mode [ 444.319086][T18407] bridge0: entered promiscuous mode [ 444.346106][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.348434][T18414] xt_TCPMSS: Only works on TCP SYN packets [ 444.362657][T18407] macsec1: entered allmulticast mode [ 444.369203][T18407] bridge0: entered allmulticast mode [ 444.375832][T18407] bridge0: port 1(macsec1) entered blocking state [ 444.382488][T18407] bridge0: port 1(macsec1) entered disabled state [ 444.393243][T18407] bridge0: left allmulticast mode [ 444.417243][ T9486] bridge0: left promiscuous mode [ 444.538184][T18279] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.545836][T18279] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.553234][T18279] bridge_slave_0: entered allmulticast mode [ 444.568044][T18279] bridge_slave_0: entered promiscuous mode [ 444.577462][T18279] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.585400][T18279] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.592692][T18279] bridge_slave_1: entered allmulticast mode [ 444.601586][T18279] bridge_slave_1: entered promiscuous mode [ 444.763589][T18279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.781000][T18279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.850054][T18429] team0: Device gtp0 is of different type [ 444.877400][T18428] team0: Device gtp0 is of different type [ 444.928694][T18279] team0: Port device team_slave_0 added [ 444.941496][T18279] team0: Port device team_slave_1 added [ 445.028497][T18279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.035698][T18279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.065029][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.073895][T18279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.100466][T18279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.107685][T18279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.138694][T18279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.221394][T18279] hsr_slave_0: entered promiscuous mode [ 445.233991][T18279] hsr_slave_1: entered promiscuous mode [ 445.241215][T18279] debugfs: 'hsr0' already exists in 'hsr' [ 445.248015][T18279] Cannot create hsr debugfs directory [ 445.386737][ T5633] Bluetooth: hci0: command tx timeout [ 445.429752][T18279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.505259][T18279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.566815][T18279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.646207][T18279] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.787809][T18279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 445.806756][T18279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.816387][T18279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 445.829555][T18279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.838560][T18279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 445.849312][T18279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.857812][T18279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 445.877459][T18279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.964323][T18279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.986641][T18279] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.001401][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.008565][ T7370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.027068][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.034271][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.106778][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.472755][T18279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.534445][T18279] veth0_vlan: entered promiscuous mode [ 446.552757][T18279] veth1_vlan: entered promiscuous mode [ 446.620779][T18279] veth0_macvtap: entered promiscuous mode [ 446.635727][T18279] veth1_macvtap: entered promiscuous mode [ 446.654061][T18279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.670023][T18279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.684284][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.694137][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.713363][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.734894][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.870092][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.878638][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.933987][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.942523][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.028040][T18452] netlink: 'syz.1.3390': attribute type 8 has an invalid length. [ 447.065184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.145381][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.385439][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.465459][ T5633] Bluetooth: hci0: command tx timeout [ 448.185218][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.226959][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.272458][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.426332][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.305305][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.547012][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.348081][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.385555][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.465823][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.106084][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.425104][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.590647][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.465712][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.505153][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.545118][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.626766][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.597104][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.626472][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.665042][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.673230][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.705554][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.746502][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.707216][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.717786][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.784933][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.826314][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.866987][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.268621][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.542328][T18469] __nla_validate_parse: 25 callbacks suppressed [ 466.542350][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 466.571811][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 466.746298][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.855143][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 466.907481][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.303555][T18503] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 467.321471][T18503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3451'. [ 467.515037][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 467.528553][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 467.560781][T18519] syzkaller0: entered promiscuous mode [ 467.570883][T18519] syzkaller0: entered allmulticast mode [ 467.663754][T18527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3460'. [ 467.674486][T18527] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 467.851571][T18539] FAULT_INJECTION: forcing a failure. [ 467.851571][T18539] name failslab, interval 1, probability 0, space 0, times 0 [ 467.872352][T18539] CPU: 0 UID: 0 PID: 18539 Comm: syz.2.3464 Not tainted syzkaller #0 PREEMPT(full) [ 467.872382][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.872395][T18539] Call Trace: [ 467.872403][T18539] [ 467.872411][T18539] dump_stack_lvl+0xe8/0x150 [ 467.872440][T18539] should_fail_ex+0x412/0x560 [ 467.872473][T18539] should_failslab+0xa8/0x100 [ 467.872504][T18539] ? skb_clone+0x212/0x3a0 [ 467.872532][T18539] kmem_cache_alloc_noprof+0x87/0x650 [ 467.872559][T18539] ? sk_filter_trim_cap+0x19e/0xce0 [ 467.872596][T18539] skb_clone+0x212/0x3a0 [ 467.872628][T18539] __netlink_deliver_tap+0x404/0x850 [ 467.872667][T18539] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.872698][T18539] netlink_deliver_tap+0x19c/0x1b0 [ 467.872726][T18539] netlink_dump+0x8ed/0xe10 [ 467.872762][T18539] ? __pfx_netlink_dump+0x10/0x10 [ 467.872797][T18539] ? netlink_recvmsg+0x5d6/0xa50 [ 467.872816][T18539] ? kmem_cache_free+0x182/0x650 [ 467.872849][T18539] netlink_recvmsg+0x690/0xa50 [ 467.872885][T18539] ? __pfx_netlink_recvmsg+0x10/0x10 [ 467.872917][T18539] ? __lock_acquire+0x6b5/0x2cf0 [ 467.872947][T18539] ? __pfx_netlink_recvmsg+0x10/0x10 [ 467.872982][T18539] sock_recvmsg_nosec+0x10c/0x140 [ 467.873006][T18539] ____sys_recvmsg+0x3e3/0x4a0 [ 467.873045][T18539] ? __pfx_____sys_recvmsg+0x10/0x10 [ 467.873091][T18539] ? import_iovec+0x73/0xa0 [ 467.873125][T18539] ___sys_recvmsg+0x215/0x590 [ 467.873160][T18539] ? __pfx____sys_recvmsg+0x10/0x10 [ 467.873196][T18539] ? ktime_get_ts64+0xa9/0x410 [ 467.873259][T18539] do_recvmmsg+0x334/0x800 [ 467.873297][T18539] ? __pfx_do_recvmmsg+0x10/0x10 [ 467.873340][T18539] ? _copy_from_user+0x94/0xb0 [ 467.873387][T18539] __x64_sys_recvmmsg+0x1b7/0x250 [ 467.873420][T18539] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 467.873459][T18539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.873483][T18539] do_syscall_64+0x15f/0xf80 [ 467.873509][T18539] ? trace_irq_disable+0x3b/0x140 [ 467.873541][T18539] ? clear_bhb_loop+0x40/0x90 [ 467.873568][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.873588][T18539] RIP: 0033:0x7ff22cf9cdd9 [ 467.873607][T18539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.873625][T18539] RSP: 002b:00007ff22ddda028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 467.873647][T18539] RAX: ffffffffffffffda RBX: 00007ff22d215fa0 RCX: 00007ff22cf9cdd9 [ 467.873663][T18539] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 467.873677][T18539] RBP: 00007ff22ddda090 R08: 0000200000003700 R09: 0000000000000000 [ 467.873691][T18539] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 467.873704][T18539] R13: 00007ff22d216038 R14: 00007ff22d215fa0 R15: 00007ffdd7a429f8 [ 467.873739][T18539] [ 468.164801][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.417104][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3465'. [ 468.442700][T18553] netlink: 'syz.2.3468': attribute type 1 has an invalid length. [ 468.627109][T18563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3471'. [ 468.901339][T18578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3476'. [ 469.029749][T18584] FAULT_INJECTION: forcing a failure. [ 469.029749][T18584] name failslab, interval 1, probability 0, space 0, times 0 [ 469.065364][T18584] CPU: 1 UID: 0 PID: 18584 Comm: syz.0.3477 Not tainted syzkaller #0 PREEMPT(full) [ 469.065395][T18584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.065408][T18584] Call Trace: [ 469.065417][T18584] [ 469.065427][T18584] dump_stack_lvl+0xe8/0x150 [ 469.065458][T18584] should_fail_ex+0x412/0x560 [ 469.065492][T18584] should_failslab+0xa8/0x100 [ 469.065525][T18584] ? skb_clone+0x212/0x3a0 [ 469.065555][T18584] kmem_cache_alloc_noprof+0x87/0x650 [ 469.065583][T18584] ? sk_filter_trim_cap+0x19e/0xce0 [ 469.065624][T18584] skb_clone+0x212/0x3a0 [ 469.065657][T18584] __netlink_deliver_tap+0x404/0x850 [ 469.065700][T18584] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.065728][T18584] netlink_deliver_tap+0x19c/0x1b0 [ 469.065762][T18584] netlink_dump+0x8ed/0xe10 [ 469.065803][T18584] ? __pfx_netlink_dump+0x10/0x10 [ 469.065842][T18584] ? netlink_recvmsg+0x5d6/0xa50 [ 469.065875][T18584] ? kmem_cache_free+0x182/0x650 [ 469.065941][T18584] netlink_recvmsg+0x690/0xa50 [ 469.066001][T18584] ? __pfx_netlink_recvmsg+0x10/0x10 [ 469.066033][T18584] ? __lock_acquire+0x6b5/0x2cf0 [ 469.066064][T18584] ? __pfx_netlink_recvmsg+0x10/0x10 [ 469.066093][T18584] sock_recvmsg_nosec+0x10c/0x140 [ 469.066118][T18584] ____sys_recvmsg+0x3e3/0x4a0 [ 469.066156][T18584] ? __pfx_____sys_recvmsg+0x10/0x10 [ 469.066202][T18584] ? import_iovec+0x73/0xa0 [ 469.066237][T18584] ___sys_recvmsg+0x215/0x590 [ 469.066271][T18584] ? __pfx____sys_recvmsg+0x10/0x10 [ 469.066306][T18584] ? ktime_get_ts64+0xa9/0x410 [ 469.066373][T18584] do_recvmmsg+0x334/0x800 [ 469.066411][T18584] ? __pfx_do_recvmmsg+0x10/0x10 [ 469.066455][T18584] ? _copy_from_user+0x94/0xb0 [ 469.066503][T18584] __x64_sys_recvmmsg+0x1b7/0x250 [ 469.066535][T18584] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 469.066575][T18584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.066597][T18584] do_syscall_64+0x15f/0xf80 [ 469.066624][T18584] ? trace_irq_disable+0x3b/0x140 [ 469.066655][T18584] ? clear_bhb_loop+0x40/0x90 [ 469.066681][T18584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.066702][T18584] RIP: 0033:0x7f605cd9cdd9 [ 469.066721][T18584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.066739][T18584] RSP: 002b:00007f605dcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 469.066761][T18584] RAX: ffffffffffffffda RBX: 00007f605d015fa0 RCX: 00007f605cd9cdd9 [ 469.066777][T18584] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 469.066791][T18584] RBP: 00007f605dcef090 R08: 0000200000003700 R09: 0000000000000000 [ 469.066805][T18584] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 469.066818][T18584] R13: 00007f605d016038 R14: 00007f605d015fa0 R15: 00007fffda3087c8 [ 469.066860][T18584] [ 469.414727][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.768177][T18602] Bluetooth: MGMT ver 1.23 [ 469.785292][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.447259][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.478462][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.270896][T18602] netlink: 'syz.1.3486': attribute type 2 has an invalid length. [ 472.429305][T18621] __nla_validate_parse: 1 callbacks suppressed [ 472.429336][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'. [ 472.493877][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 472.537442][T18628] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3490'. [ 472.550016][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.618075][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3494'. [ 472.637154][ T615] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.660080][ T615] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.693839][ T615] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.718572][ T615] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.811690][T18639] vlan2: entered allmulticast mode [ 472.825219][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.847439][T18639] bond0: entered allmulticast mode [ 473.010569][T18653] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3497'. [ 473.309363][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.402565][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 473.470845][T18676] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3506'. [ 473.566896][T18679] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3503'. [ 473.592559][T18683] netlink: 'syz.1.3505': attribute type 16 has an invalid length. [ 473.606874][T18687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3507'. [ 473.618986][T18683] netlink: 'syz.1.3505': attribute type 17 has an invalid length. [ 473.637072][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.921924][T18667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.409156][T18712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3512'. [ 474.523863][T18724] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 474.683023][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.839390][T18729] geneve0: entered promiscuous mode [ 475.721764][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.788837][ T807] IPVS: starting estimator thread 0... [ 475.868254][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.914760][T18774] IPVS: using max 24 ests per chain, 57600 per kthread [ 476.147047][T18784] sctp: [Deprecated]: syz.3.3536 (pid 18784) Use of int in max_burst socket option. [ 476.147047][T18784] Use struct sctp_assoc_value instead [ 476.346296][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.527384][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.750308][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.821656][T18821] netlink: 'syz.4.3546': attribute type 39 has an invalid length. [ 477.541484][T18836] syzkaller0: entered promiscuous mode [ 477.566295][T18836] syzkaller0: entered allmulticast mode [ 477.574162][T18838] __nla_validate_parse: 11 callbacks suppressed [ 477.574188][T18838] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3551'. [ 477.792182][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.846667][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3553'. [ 478.102370][T18861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3559'. [ 478.161677][T18863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3560'. [ 478.172171][T18863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3560'. [ 478.412306][T18873] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3563'. [ 478.830347][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.382114][T18798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.394396][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.665806][T18886] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 479.694404][T18894] openvswitch: netlink: Key type 223 is out of range max 32 [ 479.767485][T18886] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 479.813714][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3570'. [ 479.839427][T18886] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 479.875509][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.885119][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 479.897184][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 479.908220][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 479.946017][T18886] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 479.991425][T18886] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.052275][T18886] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.078638][T18886] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.110153][T18886] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.151144][T18886] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.214042][T18886] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.239467][T18886] bridge14: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.284522][T18886] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.310622][T18886] bridge16: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.354218][T18886] bridge17: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.370051][ T807] IPVS: starting estimator thread 0... [ 480.379227][T18916] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 480.394311][T18886] bridge18: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.497993][T18918] IPVS: using max 26 ests per chain, 62400 per kthread [ 480.689172][T18931] netlink: 'syz.2.3582': attribute type 1 has an invalid length. [ 480.751713][T18931] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 480.926735][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.179348][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.210118][ T807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.223197][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.625436][ T9490] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.921866][T18995] veth3: entered allmulticast mode [ 481.945555][ T9490] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.974963][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.261482][T19019] netlink: 'syz.1.3609': attribute type 10 has an invalid length. [ 482.426323][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.542964][T19036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.574282][T19036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.584504][T19034] syzkaller0: entered promiscuous mode [ 482.607447][T19034] syzkaller0: entered allmulticast mode [ 482.621880][T19036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.671069][T19038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.676799][T19039] netlink: 'syz.4.3614': attribute type 3 has an invalid length. [ 482.710101][T19038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.719656][T19039] __nla_validate_parse: 19 callbacks suppressed [ 482.719677][T19039] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3614'. [ 482.721668][T19038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.748195][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.762373][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3617'. [ 482.867934][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3617'. [ 483.056338][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3620'. [ 483.138361][T19052] tipc: Started in network mode [ 483.143914][T19052] tipc: Node identity 4, cluster identity 4711 [ 483.151052][T19052] tipc: Node number set to 4 [ 483.368563][T19073] xt_l2tp: invalid flags combination: 8 [ 483.400147][T19073] xt_l2tp: invalid flags combination: 8 [ 483.496260][T19081] netlink: 650 bytes leftover after parsing attributes in process `syz.4.3626'. [ 483.619430][T19085] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3628'. [ 483.650606][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3629'. [ 483.716480][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3631'. [ 483.729148][T19092] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3630'. [ 483.785715][T19092] netlink: 320 bytes leftover after parsing attributes in process `syz.4.3630'. [ 483.930339][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.939608][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.117017][T19091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.133645][T19091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.421275][T19089] vlan3: entered allmulticast mode [ 484.443757][T19089] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 484.468777][T19110] netlink: 'syz.2.3635': attribute type 3 has an invalid length. [ 484.492463][ T7370] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.528661][ T7370] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.570920][ T7370] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.614415][ T7370] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.809436][T19132] syzkaller0: entered promiscuous mode [ 484.827246][T19132] syzkaller0: entered allmulticast mode [ 485.017783][T19142] vlan2: entered allmulticast mode [ 485.022990][T19142] veth1_virt_wifi: entered allmulticast mode [ 485.927572][T19197] batadv_slave_0: entered promiscuous mode [ 485.945387][T19191] net_ratelimit: 44 callbacks suppressed [ 485.945413][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.960322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.028596][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.108716][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.133177][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.224836][T19205] FAULT_INJECTION: forcing a failure. [ 486.224836][T19205] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 486.261492][T19205] CPU: 0 UID: 0 PID: 19205 Comm: syz.2.3669 Not tainted syzkaller #0 PREEMPT(full) [ 486.261521][T19205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.261535][T19205] Call Trace: [ 486.261543][T19205] [ 486.261552][T19205] dump_stack_lvl+0xe8/0x150 [ 486.261583][T19205] should_fail_ex+0x412/0x560 [ 486.261615][T19205] _copy_from_iter+0x1d3/0x1670 [ 486.261646][T19205] ? sock_alloc_send_pskb+0x896/0x990 [ 486.261683][T19205] ? __pfx__copy_from_iter+0x10/0x10 [ 486.261720][T19205] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 486.261754][T19205] skb_copy_datagram_from_iter+0xf5/0x710 [ 486.261790][T19205] ? skb_put+0x11b/0x210 [ 486.261819][T19205] tun_get_user+0xc5e/0x43e0 [ 486.261862][T19205] ? aa_file_perm+0x192/0x15e0 [ 486.261896][T19205] ? aa_file_perm+0x50e/0x15e0 [ 486.261925][T19205] ? __pfx_tun_get_user+0x10/0x10 [ 486.261960][T19205] ? __lock_acquire+0x6b5/0x2cf0 [ 486.261986][T19205] ? kstrtoull+0x12f/0x1d0 [ 486.262019][T19205] ? ref_tracker_alloc+0x35c/0x4c0 [ 486.262050][T19205] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 486.262079][T19205] ? tun_get+0x1c/0x2f0 [ 486.262104][T19205] ? tun_get+0x1c/0x2f0 [ 486.262134][T19205] ? tun_get+0x1c/0x2f0 [ 486.262158][T19205] ? tun_get+0x1c/0x2f0 [ 486.262187][T19205] tun_chr_write_iter+0x113/0x200 [ 486.262216][T19205] vfs_write+0x61d/0xb90 [ 486.262256][T19205] ? __pfx_vfs_write+0x10/0x10 [ 486.262297][T19205] ? __fget_files+0x2a/0x420 [ 486.262332][T19205] ksys_write+0x150/0x270 [ 486.262364][T19205] ? __pfx_ksys_write+0x10/0x10 [ 486.262403][T19205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.262427][T19205] do_syscall_64+0x15f/0xf80 [ 486.262454][T19205] ? trace_irq_disable+0x3b/0x140 [ 486.262485][T19205] ? clear_bhb_loop+0x40/0x90 [ 486.262515][T19205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.262536][T19205] RIP: 0033:0x7ff22cf5d60e [ 486.262556][T19205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 486.262574][T19205] RSP: 002b:00007ff22ddd9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.262598][T19205] RAX: ffffffffffffffda RBX: 00007ff22ddda6c0 RCX: 00007ff22cf5d60e [ 486.262613][T19205] RDX: 0000000000000fc0 RSI: 00002000000004c0 RDI: 00000000000000c8 [ 486.262627][T19205] RBP: 00007ff22ddda090 R08: 0000000000000000 R09: 0000000000000000 [ 486.262640][T19205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.262652][T19205] R13: 00007ff22d216038 R14: 00007ff22d215fa0 R15: 00007ffdd7a429f8 [ 486.262687][T19205] [ 486.598026][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.743050][T19220] netlink: 'syz.3.3674': attribute type 39 has an invalid length. [ 486.756484][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.821931][T19217] syzkaller1: entered promiscuous mode [ 486.835914][T19217] syzkaller1: entered allmulticast mode [ 486.984477][T19229] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 487.075675][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.092457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.161501][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.307984][T19249] tap0: tun_chr_ioctl cmd 2148553947 [ 487.326090][T19249] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 487.947907][T19289] __nla_validate_parse: 15 callbacks suppressed [ 487.947930][T19289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 488.297360][T19303] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 488.314437][T19303] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 488.349429][T19303] tipc: Started in network mode [ 488.371786][T19303] tipc: Node identity 080211000001, cluster identity 4711 [ 488.412145][T19303] tipc: Enabled bearer , priority 0 [ 488.806606][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3704'. [ 488.838726][T19328] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3704'. [ 488.898243][T19328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3704'. [ 489.201072][T19344] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3707'. [ 489.248852][T19346] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3707'. [ 489.289699][T19343] netlink: 'syz.0.3708': attribute type 1 has an invalid length. [ 489.469791][T19343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.564454][T19343] bond1: (slave ip6gretap1): making interface the new active one [ 489.635535][T19343] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 489.669199][ T807] tipc: Node number set to 134418688 [ 489.819995][T19355] bridge1: entered promiscuous mode [ 489.906294][T19355] bridge1: entered allmulticast mode [ 490.657586][T19401] netlink: 'syz.1.3716': attribute type 4 has an invalid length. [ 490.689360][T19404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3717'. [ 490.856846][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'. [ 490.893822][T19415] netlink: 'syz.0.3720': attribute type 1 has an invalid length. [ 490.902830][T19360] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 490.959410][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 490.996287][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 491.029464][T19417] netlink: 'syz.1.3721': attribute type 58 has an invalid length. [ 491.212538][T19426] netlink: 'syz.3.3723': attribute type 2 has an invalid length. [ 491.232733][ T9486] net_ratelimit: 12 callbacks suppressed [ 491.232755][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.246962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.320452][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.534342][T19440] netlink: 'syz.2.3727': attribute type 21 has an invalid length. [ 491.638435][T19443] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 491.869024][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.876464][T19455] netlink: 'syz.2.3732': attribute type 1 has an invalid length. [ 491.932218][T19455] netlink: 'syz.2.3732': attribute type 11 has an invalid length. [ 492.022210][T19459] bridge2: port 1(vlan2) entered blocking state [ 492.038982][T19459] bridge2: port 1(vlan2) entered disabled state [ 492.057889][T19459] vlan2: entered allmulticast mode [ 492.072368][T19459] bridge2: entered allmulticast mode [ 492.096754][T19459] vlan2: left allmulticast mode [ 492.112040][T19459] bridge2: left allmulticast mode [ 492.266894][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.275292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.367539][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.377734][T19477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.581674][T19486] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 492.615297][T19486] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 492.665331][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.020367][T19510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.085381][T19509] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 493.323434][T19529] FAULT_INJECTION: forcing a failure. [ 493.323434][T19529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.340961][T19529] CPU: 1 UID: 0 PID: 19529 Comm: syz.2.3755 Not tainted syzkaller #0 PREEMPT(full) [ 493.340991][T19529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 493.341004][T19529] Call Trace: [ 493.341012][T19529] [ 493.341021][T19529] dump_stack_lvl+0xe8/0x150 [ 493.341056][T19529] should_fail_ex+0x412/0x560 [ 493.341089][T19529] _copy_from_user+0x2d/0xb0 [ 493.341120][T19529] __sys_connect+0x156/0x450 [ 493.341147][T19529] ? __pfx___sys_connect+0x10/0x10 [ 493.341185][T19529] ? __pfx_ksys_write+0x10/0x10 [ 493.341220][T19529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.341242][T19529] __x64_sys_connect+0x7a/0x90 [ 493.341267][T19529] do_syscall_64+0x15f/0xf80 [ 493.341294][T19529] ? trace_irq_disable+0x3b/0x140 [ 493.341323][T19529] ? clear_bhb_loop+0x40/0x90 [ 493.341349][T19529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.341369][T19529] RIP: 0033:0x7ff22cf9cdd9 [ 493.341389][T19529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.341406][T19529] RSP: 002b:00007ff22ddda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 493.341427][T19529] RAX: ffffffffffffffda RBX: 00007ff22d215fa0 RCX: 00007ff22cf9cdd9 [ 493.341442][T19529] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 493.341455][T19529] RBP: 00007ff22ddda090 R08: 0000000000000000 R09: 0000000000000000 [ 493.341468][T19529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.341480][T19529] R13: 00007ff22d216038 R14: 00007ff22d215fa0 R15: 00007ffdd7a429f8 [ 493.341513][T19529] [ 493.610874][T19533] tipc: Enabled bearer , priority 0 [ 493.649001][T19532] tipc: Disabling bearer [ 493.659719][T19535] __nla_validate_parse: 11 callbacks suppressed [ 493.659741][T19535] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3758'. [ 494.031097][T19555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3765'. [ 494.065160][T19547] bond2: Removing last arp target with arp_interval on [ 494.514201][T19585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 494.562879][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3772'. [ 494.767803][T19603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3779'. [ 494.796346][T19603] netlink: 'syz.1.3779': attribute type 7 has an invalid length. [ 494.929153][T19603] netlink: 'syz.1.3779': attribute type 7 has an invalid length. [ 495.031009][T19614] netlink: 'syz.4.3782': attribute type 11 has an invalid length. [ 495.108328][T19618] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3784'. [ 495.321947][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3787'. [ 495.376249][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3787'. [ 495.412334][T19627] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3787'. [ 495.751413][T19651] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 495.891861][T19669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3795'. [ 495.928029][T19668] netlink: 'syz.1.3796': attribute type 10 has an invalid length. [ 496.091896][T19668] syz_tun: entered promiscuous mode [ 496.151588][T19668] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 496.357979][ T9493] net_ratelimit: 18 callbacks suppressed [ 496.358000][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.426569][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.435684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.465843][T19700] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 496.750217][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.466252][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.474719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.789268][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.946603][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.505278][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.513707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.628203][T19644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.983853][T19731] __nla_validate_parse: 4 callbacks suppressed [ 498.983877][T19731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3811'. [ 499.190666][T19738] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3812'. [ 499.226376][T19742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.260482][T19742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.278278][T19747] sctp: [Deprecated]: syz.3.3816 (pid 19747) Use of int in max_burst socket option. [ 499.278278][T19747] Use struct sctp_assoc_value instead [ 499.304187][T19742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.311519][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'. [ 499.321161][T19742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.329384][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3816'. [ 499.469164][T19755] bridge_slave_0: left allmulticast mode [ 499.475267][T19755] bridge_slave_0: left promiscuous mode [ 499.481206][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.500375][T19755] bridge_slave_1: left allmulticast mode [ 499.509077][T19755] bridge_slave_1: left promiscuous mode [ 499.522855][T19755] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.654152][T19755] bond0: (slave bond_slave_0): Releasing backup interface [ 499.680217][T19755] bond0: (slave bond_slave_1): Releasing backup interface [ 499.707690][T19755] team0: Port device team_slave_0 removed [ 499.721519][T19755] team0: Port device team_slave_1 removed [ 499.728516][T19772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3822'. [ 499.732159][T19755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.767210][T19755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.794067][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3823'. [ 499.906967][T19779] netlink: 'syz.4.3824': attribute type 3 has an invalid length. [ 499.941065][T19779] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 499.978081][T19779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3824'. [ 500.038933][T19785] netlink: 'syz.4.3824': attribute type 3 has an invalid length. [ 500.099811][T19785] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 500.182048][T19794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3828'. [ 500.369756][T19804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3830'. [ 500.436583][T19810] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3834'. [ 500.898290][T19845] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.907413][T19845] netlink: 'syz.0.3845': attribute type 9 has an invalid length. [ 501.469278][ T1312] net_ratelimit: 16 callbacks suppressed [ 501.469301][ T1312] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.629641][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.638280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.708026][T19887] netlink: 'syz.1.3855': attribute type 4 has an invalid length. [ 501.790357][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.956261][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.667261][ T9486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.675775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.990270][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.143258][ T7381] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.173039][ T7381] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.232157][ T7381] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.275258][ T7381] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.610047][T19986] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 503.708243][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.716713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.020238][T20007] __nla_validate_parse: 21 callbacks suppressed [ 504.020292][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3892'. [ 504.218318][T20018] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3896'. [ 504.442045][ T5762] IPVS: starting estimator thread 0... [ 504.454472][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3901'. [ 504.537030][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3902'. [ 504.553992][T20031] IPVS: using max 25 ests per chain, 60000 per kthread [ 504.564021][T20035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3903'. [ 504.814499][T20046] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3908'. [ 504.963705][T20050] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 505.044177][T20056] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 505.072944][T20054] netlink: 'syz.3.3913': attribute type 1 has an invalid length. [ 505.150148][T20054] bond5: entered promiscuous mode [ 505.155851][T20054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.204987][T20063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3915'. [ 505.260108][T20062] netlink: 'syz.3.3913': attribute type 3 has an invalid length. [ 505.298611][T20054] bond5: (slave bridge19): making interface the new active one [ 505.307746][T20054] bridge19: entered promiscuous mode [ 505.331435][T20054] bridge19: left promiscuous mode [ 505.501505][T20078] xt_cgroup: path and classid specified [ 505.513404][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'. [ 505.561356][T20085] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3921'. [ 505.573469][T20076] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3918'. [ 506.242578][T20116] IPVS: length: 125 != 24 [ 506.275078][T20108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 506.758805][T20142] bond0: entered allmulticast mode [ 506.764172][T20142] bond_slave_0: entered allmulticast mode [ 506.779777][T20142] bond_slave_1: entered allmulticast mode [ 506.795001][T20142] syz_tun: entered allmulticast mode [ 506.826428][ T5762] net_ratelimit: 14 callbacks suppressed [ 506.826449][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.840593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.986641][T20150] netlink: 'syz.1.3941': attribute type 32 has an invalid length. [ 507.026196][T20153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.036913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.067440][ T9490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.088900][T20155] netlink: 'syz.1.3941': attribute type 32 has an invalid length. [ 507.127856][T20150] bond1: option coupled_control: invalid value (192) [ 507.148102][T20150] bond1 (unregistering): Released all slaves [ 507.168139][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.201089][T20160] netlink: 'syz.2.3943': attribute type 10 has an invalid length. [ 507.324279][T20155] bond1: option coupled_control: invalid value (192) [ 507.350435][T20155] bond1 (unregistering): Released all slaves [ 507.383598][T20160] macvlan1: entered promiscuous mode [ 507.394006][T20160] macvlan1: entered allmulticast mode [ 507.407256][T20160] veth1_vlan: entered allmulticast mode [ 507.439576][T20160] team0: Port device macvlan1 added [ 507.852375][T20192] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 507.868500][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.868703][ T9493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.877604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.931878][T20197] xt_hashlimit: overflow, try lower: 3/0 [ 507.965114][T20197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.040535][T20201] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 508.178136][T20209] netlink: 'syz.4.3956': attribute type 11 has an invalid length. [ 508.203166][T20209] netlink: 'syz.4.3956': attribute type 11 has an invalid length. [ 508.711857][T20237] gtp0: entered promiscuous mode [ 508.725128][T20237] gtp0: entered allmulticast mode [ 509.208518][T20268] __nla_validate_parse: 16 callbacks suppressed [ 509.208539][T20268] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3973'. [ 509.307020][T20264] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 509.358238][T20264] bond6 (unregistering): Released all slaves [ 510.000005][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3979'. [ 510.240380][T20312] netlink: 'syz.1.3983': attribute type 13 has an invalid length. [ 510.856642][T20320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3986'. [ 511.095293][T20344] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3990'. [ 511.293805][T20348] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3992'. [ 511.326695][T20346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3991'. [ 511.337902][T20348] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3992'. [ 511.365336][T20348] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3992'. [ 511.897418][T20375] syzkaller1: entered promiscuous mode [ 511.909088][T20375] syzkaller1: entered allmulticast mode [ 512.458935][T20418] FAULT_INJECTION: forcing a failure. [ 512.458935][T20418] name failslab, interval 1, probability 0, space 0, times 0 [ 512.489438][ T5762] net_ratelimit: 17 callbacks suppressed [ 512.489462][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.512373][T20419] tipc: Started in network mode [ 512.529669][T20419] tipc: Node identity 4, cluster identity 4711 [ 512.535121][T20418] CPU: 1 UID: 0 PID: 20418 Comm: syz.1.4011 Not tainted syzkaller #0 PREEMPT(full) [ 512.535197][T20418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.535239][T20418] Call Trace: [ 512.535263][T20418] [ 512.535294][T20418] dump_stack_lvl+0xe8/0x150 [ 512.535388][T20418] should_fail_ex+0x412/0x560 [ 512.535472][T20418] should_failslab+0xa8/0x100 [ 512.535569][T20418] __kmalloc_cache_noprof+0x88/0x660 [ 512.535655][T20418] ? nft_pernet+0x23/0x240 [ 512.535711][T20418] ? nf_tables_commit+0x936/0xa7c0 [ 512.535819][T20418] nf_tables_commit+0x936/0xa7c0 [ 512.535927][T20418] ? __pfx_nf_tables_commit+0x10/0x10 [ 512.535981][T20418] ? __pfx___nla_validate_parse+0x10/0x10 [ 512.536016][T20418] ? nfnetlink_rcv+0x8bc/0x27b0 [ 512.536060][T20418] ? nfnl_pernet+0x23/0x240 [ 512.536107][T20418] nfnetlink_rcv+0x1c19/0x27b0 [ 512.536169][T20418] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 512.536211][T20418] ? ref_tracker_free+0x693/0x840 [ 512.536272][T20418] ? __netlink_deliver_tap+0x807/0x850 [ 512.536309][T20418] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.536334][T20418] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.536365][T20418] netlink_unicast+0x75c/0x8e0 [ 512.536400][T20418] netlink_sendmsg+0x813/0xb40 [ 512.536491][T20418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.536588][T20418] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.536685][T20418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.536794][T20418] ____sys_sendmsg+0x972/0x9f0 [ 512.536872][T20418] ? __might_fault+0xaf/0x130 [ 512.536966][T20418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.537074][T20418] ? import_iovec+0x73/0xa0 [ 512.537170][T20418] ___sys_sendmsg+0x2a5/0x360 [ 512.537246][T20418] ? __lock_acquire+0x6b5/0x2cf0 [ 512.537332][T20418] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.537506][T20418] ? __fget_files+0x2a/0x420 [ 512.537572][T20418] ? __fget_files+0x3a0/0x420 [ 512.537679][T20418] __x64_sys_sendmsg+0x1bd/0x2a0 [ 512.537771][T20418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.537887][T20418] ? __pfx_ksys_write+0x10/0x10 [ 512.538023][T20418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.538088][T20418] do_syscall_64+0x15f/0xf80 [ 512.538162][T20418] ? trace_irq_disable+0x3b/0x140 [ 512.538256][T20418] ? clear_bhb_loop+0x40/0x90 [ 512.538323][T20418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.538385][T20418] RIP: 0033:0x7fcf15d9cdd9 [ 512.538439][T20418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.538485][T20418] RSP: 002b:00007fcf16b93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.538542][T20418] RAX: ffffffffffffffda RBX: 00007fcf16015fa0 RCX: 00007fcf15d9cdd9 [ 512.538586][T20418] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 512.538639][T20418] RBP: 00007fcf16b93090 R08: 0000000000000000 R09: 0000000000000000 [ 512.538672][T20418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.538741][T20418] R13: 00007fcf16016038 R14: 00007fcf16015fa0 R15: 00007ffdeb5fa0e8 [ 512.538819][T20418] [ 512.895707][T20419] tipc: Node number set to 4 [ 512.908838][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4013'. [ 512.951308][T20427] netlink: 'syz.2.4014': attribute type 8 has an invalid length. [ 513.082188][T20437] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 513.148998][T20437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.382213][T20447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4017'. [ 513.405661][T20443] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 513.427672][T20443] bond4 (unregistering): Released all slaves [ 513.552792][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.585615][T20447] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 513.588517][T20455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.630871][T20454] bridge2: entered promiscuous mode [ 513.638914][T20454] bridge2: entered allmulticast mode [ 513.655481][T20459] IPv6: sit1: Disabled Multicast RS [ 513.788249][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 514.217707][ T5633] Bluetooth: hci0: link tx timeout [ 514.227258][ T5633] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 514.689562][T20507] xt_connbytes: Forcing CT accounting to be enabled [ 514.873180][T20506] bridge3: entered promiscuous mode [ 514.908971][T20506] bridge3: entered allmulticast mode [ 515.533129][T20539] bridge3: entered promiscuous mode [ 515.545937][T20539] bridge3: entered allmulticast mode [ 515.992117][T20569] tipc: Enabled bearer , priority 0 [ 516.007528][T20569] __nla_validate_parse: 1 callbacks suppressed [ 516.007550][T20569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4051'. [ 516.167409][T20574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4055'. [ 516.210318][T20578] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4057'. [ 516.265380][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 516.372752][T20582] lo: Caught tx_queue_len zero misconfig [ 516.442187][T20582] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 516.464101][T20582] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 516.488605][T20590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4061'. [ 516.587461][ T807] IPVS: starting estimator thread 0... [ 516.654515][T20606] xt_hashlimit: size too large, truncated to 1048576 [ 516.675078][T20604] IPVS: using max 28 ests per chain, 67200 per kthread [ 517.248575][ T9490] tipc: Node number set to 2773540537 [ 517.341855][T20635] tipc: Started in network mode [ 517.359217][T20635] tipc: Node identity 4, cluster identity 4711 [ 517.380195][T20635] tipc: Node number set to 4 [ 517.580843][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4077'. [ 517.630736][T20652] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4078'. [ 517.723732][T20650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4077'. [ 518.135553][T20677] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4087'. [ 518.167003][T20666] bridge0: port 3(batadv0) entered blocking state [ 518.173923][T20666] bridge0: port 3(batadv0) entered disabled state [ 518.182225][T20666] batadv0: entered allmulticast mode [ 518.196897][T20666] batadv0: entered promiscuous mode [ 518.238851][T20675] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 518.262564][T20675] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 518.332781][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4088'. [ 518.444241][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'. [ 518.458269][T20693] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 518.469019][T20690] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 518.479613][T20693] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 518.490482][T20690] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 518.635736][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 518.645684][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 518.932794][T20721] veth0: Caught tx_queue_len zero misconfig [ 519.002557][T20718] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 519.158146][T20731] netlink: 'syz.1.4102': attribute type 21 has an invalid length. [ 519.359873][T20735] syzkaller0: entered promiscuous mode [ 519.377021][T20735] syzkaller0: entered allmulticast mode [ 519.474738][T20735] netlink: 'syz.0.4104': attribute type 10 has an invalid length. [ 519.483247][T20744] netlink: 'syz.0.4104': attribute type 10 has an invalid length. [ 519.519815][T20735] macvlan1: entered promiscuous mode [ 519.545445][T20735] macvlan1: entered allmulticast mode [ 519.569583][T20735] veth1_vlan: entered allmulticast mode [ 519.592753][T20735] team0: Port device macvlan1 added [ 519.601764][T20744] veth1_vlan: left allmulticast mode [ 519.796390][T20754] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 519.899805][T20754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.929933][T20763] bond1: (slave ip6erspan0): making interface the new active one [ 519.941232][T20763] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 520.213027][T20781] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 520.236627][T20781] bond0: (slave lo): Error: Device can not be enslaved while up [ 522.366757][T20809] bridge2: entered promiscuous mode [ 522.408273][T20809] bridge2: entered allmulticast mode [ 522.532691][T20816] veth1_macvtap: left promiscuous mode [ 522.769778][T20824] __nla_validate_parse: 12 callbacks suppressed [ 522.769801][T20824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4133'. [ 523.076026][T20828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.113413][T20828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.140955][T20828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 523.283945][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'. [ 523.315939][T20828] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 523.347294][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'. [ 523.435990][ T9490] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 523.515929][ T9490] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 523.605231][ T1145] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 524.001190][T20877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4147'. [ 524.228020][T20886] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4148'. [ 524.321302][T20891] FAULT_INJECTION: forcing a failure. [ 524.321302][T20891] name failslab, interval 1, probability 0, space 0, times 0 [ 524.374653][T20891] CPU: 1 UID: 0 PID: 20891 Comm: syz.0.4151 Not tainted syzkaller #0 PREEMPT(full) [ 524.374682][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.374696][T20891] Call Trace: [ 524.374705][T20891] [ 524.374713][T20891] dump_stack_lvl+0xe8/0x150 [ 524.374745][T20891] should_fail_ex+0x412/0x560 [ 524.374778][T20891] should_failslab+0xa8/0x100 [ 524.374812][T20891] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 524.374841][T20891] ? __alloc_skb+0x186/0x7d0 [ 524.374866][T20891] ? __alloc_skb+0x1d0/0x7d0 [ 524.374888][T20891] ? __local_bh_enable_ip+0xd0/0x130 [ 524.374918][T20891] __alloc_skb+0x1d0/0x7d0 [ 524.374943][T20891] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 524.374979][T20891] netlink_sendmsg+0x5d4/0xb40 [ 524.375018][T20891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.375050][T20891] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.375080][T20891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.375113][T20891] ____sys_sendmsg+0x972/0x9f0 [ 524.375141][T20891] ? __might_fault+0xaf/0x130 [ 524.375177][T20891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.375215][T20891] ? import_iovec+0x73/0xa0 [ 524.375250][T20891] ___sys_sendmsg+0x2a5/0x360 [ 524.375277][T20891] ? __lock_acquire+0x6b5/0x2cf0 [ 524.375305][T20891] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.375374][T20891] ? __fget_files+0x2a/0x420 [ 524.375399][T20891] ? __fget_files+0x3a0/0x420 [ 524.375437][T20891] __x64_sys_sendmsg+0x1bd/0x2a0 [ 524.375468][T20891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.375516][T20891] ? __pfx_ksys_write+0x10/0x10 [ 524.375558][T20891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.375581][T20891] do_syscall_64+0x15f/0xf80 [ 524.375608][T20891] ? trace_irq_disable+0x3b/0x140 [ 524.375641][T20891] ? clear_bhb_loop+0x40/0x90 [ 524.375667][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.375689][T20891] RIP: 0033:0x7f605cd9cdd9 [ 524.375709][T20891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.375728][T20891] RSP: 002b:00007f605dcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.375751][T20891] RAX: ffffffffffffffda RBX: 00007f605d015fa0 RCX: 00007f605cd9cdd9 [ 524.375770][T20891] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 524.375784][T20891] RBP: 00007f605dcef090 R08: 0000000000000000 R09: 0000000000000000 [ 524.375797][T20891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.375810][T20891] R13: 00007f605d016038 R14: 00007f605d015fa0 R15: 00007fffda3087c8 [ 524.375845][T20891] [ 524.713390][T12458] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 524.736132][T20897] netlink: 'syz.1.4152': attribute type 3 has an invalid length. [ 524.750967][T12458] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 525.007958][T20863] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 525.034458][T20863] bond6 (unregistering): Released all slaves [ 525.461549][T20932] veth0: entered promiscuous mode [ 525.500178][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 525.518583][T20935] sctp: [Deprecated]: syz.1.4162 (pid 20935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.518583][T20935] Use struct sctp_sack_info instead [ 525.717485][ T42] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 525.880842][T20956] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4167'. [ 525.895448][T20956] ip6tnl0: Caught tx_queue_len zero misconfig [ 526.110254][T20966] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4169'. [ 526.173969][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4172'. [ 526.210581][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4172'. [ 526.444694][ T29] audit: type=1804 audit(1777993155.116:7): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4176" name="/newroot/228/cgroup.controllers" dev="tmpfs" ino=1171 res=1 errno=0 [ 526.493945][ T29] audit: type=1800 audit(1777993155.156:8): pid=20987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4176" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=0 [ 526.635364][T20997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.653608][T20998] netlink: 'syz.1.4180': attribute type 6 has an invalid length. [ 526.661848][T20998] netlink: 'syz.1.4180': attribute type 5 has an invalid length. [ 526.693279][ T1145] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.726322][ T1145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.737035][T20994] netlink: 'syz.0.4178': attribute type 21 has an invalid length. [ 526.746414][ T1145] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.762426][ T1145] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.786841][T20994] netlink: 'syz.0.4178': attribute type 4 has an invalid length. [ 526.806989][T20994] netlink: 'syz.0.4178': attribute type 5 has an invalid length. [ 526.807377][T20999] netlink: 'syz.0.4178': attribute type 21 has an invalid length. [ 526.834880][T20999] netlink: 'syz.0.4178': attribute type 4 has an invalid length. [ 526.844217][T20999] netlink: 'syz.0.4178': attribute type 5 has an invalid length. [ 526.869507][T20994] wireguard0: entered promiscuous mode [ 526.885527][T20994] wireguard0: entered allmulticast mode [ 527.206548][T21017] netlink: zone id is out of range [ 527.211792][T21017] netlink: zone id is out of range [ 527.217311][T21017] netlink: zone id is out of range [ 527.224130][T21017] netlink: zone id is out of range [ 527.243671][T21017] netlink: zone id is out of range [ 527.273222][T21017] netlink: zone id is out of range [ 527.281366][T21023] sctp: [Deprecated]: syz.0.4189 (pid 21023) Use of int in max_burst socket option. [ 527.281366][T21023] Use struct sctp_assoc_value instead [ 527.296928][T21017] netlink: zone id is out of range [ 527.302196][T21017] netlink: zone id is out of range [ 527.302637][T21023] x_tables: duplicate underflow at hook 1 [ 527.498580][ T50] block nbd0: Receive control failed (result -1) [ 527.969476][T21056] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 528.057946][T21056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.173577][T21065] xt_hashlimit: overflow, rate too high: 0 [ 528.180550][T21038] __nla_validate_parse: 15 callbacks suppressed [ 528.180570][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4194'. [ 528.236976][T21070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4202'. [ 528.433759][T21074] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4204'. [ 528.452010][T21075] netem: change failed [ 528.745126][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 528.775051][T21095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4210'. [ 529.021013][T21107] bond6: entered promiscuous mode [ 529.031715][T21107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 529.166144][T21114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 529.188452][T21114] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 529.213660][T21114] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 529.286608][T21130] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4219'. [ 529.336636][T21114] bond6: (slave vcan1): making interface the new active one [ 529.357420][T21114] vcan1: entered promiscuous mode [ 529.383531][T21114] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 529.540331][T21107] bond7 (unregistering): Released all slaves [ 529.811892][T21143] macsec0: entered promiscuous mode [ 529.835706][T21143] macsec0: entered allmulticast mode [ 529.860992][T21144] macsec0: left promiscuous mode [ 529.882094][T21144] macsec0: left allmulticast mode [ 529.964529][T21148] wireguard1: entered promiscuous mode [ 529.980867][T21148] wireguard1: entered allmulticast mode [ 530.377663][T21166] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4229'. [ 530.419608][T21166] validate_nla: 4 callbacks suppressed [ 530.419627][T21166] netlink: 'syz.1.4229': attribute type 1 has an invalid length. [ 530.436342][T21170] netlink: 'syz.0.4228': attribute type 2 has an invalid length. [ 530.525755][T21166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.544344][T21180] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4232'. [ 530.553512][T21178] bond3: (slave geneve2): making interface the new active one [ 530.562878][T21179] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4228'. [ 530.596081][T21178] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 530.709601][T21185] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4234'. [ 530.833244][T21190] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4236'. [ 530.871939][T21190] FAULT_INJECTION: forcing a failure. [ 530.871939][T21190] name failslab, interval 1, probability 0, space 0, times 0 [ 530.885831][T21190] CPU: 0 UID: 0 PID: 21190 Comm: syz.0.4236 Not tainted syzkaller #0 PREEMPT(full) [ 530.885859][T21190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.885885][T21190] Call Trace: [ 530.885893][T21190] [ 530.885902][T21190] dump_stack_lvl+0xe8/0x150 [ 530.885931][T21190] should_fail_ex+0x412/0x560 [ 530.885963][T21190] should_failslab+0xa8/0x100 [ 530.885996][T21190] ? skb_clone+0x212/0x3a0 [ 530.886025][T21190] kmem_cache_alloc_noprof+0x87/0x650 [ 530.886062][T21190] skb_clone+0x212/0x3a0 [ 530.886096][T21190] __netlink_deliver_tap+0x404/0x850 [ 530.886137][T21190] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.886166][T21190] netlink_deliver_tap+0x19c/0x1b0 [ 530.886193][T21190] netlink_sendskb+0x68/0x140 [ 530.886220][T21190] netlink_rcv_skb+0x2b6/0x4b0 [ 530.886269][T21190] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 530.886306][T21190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.886352][T21190] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.886378][T21190] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.886408][T21190] xfrm_netlink_rcv+0x79/0x90 [ 530.886442][T21190] netlink_unicast+0x75c/0x8e0 [ 530.886479][T21190] netlink_sendmsg+0x813/0xb40 [ 530.886517][T21190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.886549][T21190] ? aa_sock_msg_perm+0xf1/0x1b0 [ 530.886579][T21190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.886612][T21190] ____sys_sendmsg+0x972/0x9f0 [ 530.886640][T21190] ? __might_fault+0xaf/0x130 [ 530.886675][T21190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.886730][T21190] ? import_iovec+0x73/0xa0 [ 530.886766][T21190] ___sys_sendmsg+0x2a5/0x360 [ 530.886792][T21190] ? __lock_acquire+0x6b5/0x2cf0 [ 530.886821][T21190] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.886892][T21190] ? __fget_files+0x2a/0x420 [ 530.886917][T21190] ? __fget_files+0x3a0/0x420 [ 530.886956][T21190] __x64_sys_sendmsg+0x1bd/0x2a0 [ 530.886988][T21190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.887028][T21190] ? __pfx_ksys_write+0x10/0x10 [ 530.887071][T21190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.887094][T21190] do_syscall_64+0x15f/0xf80 [ 530.887122][T21190] ? trace_irq_disable+0x3b/0x140 [ 530.887153][T21190] ? clear_bhb_loop+0x40/0x90 [ 530.887181][T21190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.887202][T21190] RIP: 0033:0x7f605cd9cdd9 [ 530.887221][T21190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.887240][T21190] RSP: 002b:00007f605dcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.887261][T21190] RAX: ffffffffffffffda RBX: 00007f605d015fa0 RCX: 00007f605cd9cdd9 [ 530.887277][T21190] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 530.887290][T21190] RBP: 00007f605dcef090 R08: 0000000000000000 R09: 0000000000000000 [ 530.887304][T21190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.887316][T21190] R13: 00007f605d016038 R14: 00007f605d015fa0 R15: 00007fffda3087c8 [ 530.887352][T21190] [ 531.694420][T21214] netlink: 'syz.0.4245': attribute type 4 has an invalid length. [ 533.227733][T21287] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 533.252212][T21289] __nla_validate_parse: 5 callbacks suppressed [ 533.252231][T21289] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4268'. [ 533.287122][T21296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4268'. [ 533.515532][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4274'. [ 533.678347][T21308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4274'. [ 533.812089][T21318] xt_l2tp: unknown flags: 10 [ 534.271138][T21313] Bluetooth: hci2: command 0x0406 tx timeout [ 534.595635][T21357] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 534.614711][T21357] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 534.633034][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4285'. [ 534.652816][T21357] block nbd1: Unsupported socket: should be TCP or UNIX. [ 534.663892][T21363] FAULT_INJECTION: forcing a failure. [ 534.663892][T21363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.680671][T21363] CPU: 0 UID: 0 PID: 21363 Comm: syz.4.4287 Not tainted syzkaller #0 PREEMPT(full) [ 534.680699][T21363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.680712][T21363] Call Trace: [ 534.680720][T21363] [ 534.680729][T21363] dump_stack_lvl+0xe8/0x150 [ 534.680759][T21363] should_fail_ex+0x412/0x560 [ 534.680792][T21363] _copy_from_user+0x2d/0xb0 [ 534.680824][T21363] kstrtouint_from_user+0xd6/0x180 [ 534.680854][T21363] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 534.680898][T21363] proc_fail_nth_write+0x8e/0x210 [ 534.680925][T21363] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 534.680959][T21363] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 534.680997][T21363] vfs_write+0x29a/0xb90 [ 534.681037][T21363] ? __pfx_vfs_write+0x10/0x10 [ 534.681069][T21363] ? __fget_files+0x2a/0x420 [ 534.681099][T21363] ? __fget_files+0x3a0/0x420 [ 534.681122][T21363] ? __fget_files+0x2a/0x420 [ 534.681157][T21363] ksys_write+0x150/0x270 [ 534.681189][T21363] ? __pfx_ksys_write+0x10/0x10 [ 534.681229][T21363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.681252][T21363] do_syscall_64+0x15f/0xf80 [ 534.681301][T21363] ? clear_bhb_loop+0x40/0x90 [ 534.681328][T21363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.681349][T21363] RIP: 0033:0x7ffa6b95d60e [ 534.681369][T21363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.681386][T21363] RSP: 002b:00007ffa6c891fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.681408][T21363] RAX: ffffffffffffffda RBX: 00007ffa6c8926c0 RCX: 00007ffa6b95d60e [ 534.681425][T21363] RDX: 0000000000000001 RSI: 00007ffa6c8920a0 RDI: 0000000000000006 [ 534.681437][T21363] RBP: 00007ffa6c892090 R08: 0000000000000000 R09: 0000000000000000 [ 534.681451][T21363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.681463][T21363] R13: 00007ffa6bc16038 R14: 00007ffa6bc15fa0 R15: 00007ffc2ffcbea8 [ 534.681501][T21363] [ 535.041220][T21372] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4292'. [ 535.084430][T21373] IPVS: length: 139 != 24 [ 535.209849][T21381] netlink: 'syz.0.4294': attribute type 21 has an invalid length. [ 535.218063][T21381] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4294'. [ 535.231257][T21381] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4294'. [ 535.303082][T21388] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4296'. [ 535.562872][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4300'. [ 535.705150][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 535.964798][T21422] net_ratelimit: 3 callbacks suppressed [ 535.964821][T21422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.033186][T21427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.294927][T21431] netlink: 'syz.4.4311': attribute type 13 has an invalid length. [ 537.309619][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 538.928910][T21438] __nla_validate_parse: 3 callbacks suppressed [ 538.929475][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4313'. [ 539.214807][ T7378] unregister_netdevice: waiting for bond0 to become free. Usage count = 2 [ 539.342694][T21466] netlink: 'syz.1.4319': attribute type 21 has an invalid length. [ 539.385073][ T5633] Bluetooth: hci4: command 0x041b tx timeout [ 539.473419][T21469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4319'.