last executing test programs: 1m54.525960599s ago: executing program 1 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/uts\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000002c0)={0x1d, r4, 0x3, {0x1, 0x1}, 0xfe}, 0x18) 1m42.964510843s ago: executing program 1 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/uts\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000002c0)={0x1d, r4, 0x3, {0x1, 0x1}, 0xfe}, 0x18) 1m30.33324091s ago: executing program 1 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/uts\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000002c0)={0x1d, r4, 0x3, {0x1, 0x1}, 0xfe}, 0x18) 57.328940545s ago: executing program 3 (id=2973): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0xffff, 0x1, 0x0, 0x8, 0x5, 0xb99b}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) 57.004078392s ago: executing program 3 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x3a8, 0x118, 0x3a8, 0x2b8, 0x1e8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1, [], [], 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8002, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x52b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x24221}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0xc000}, 0x0) 41.835662803s ago: executing program 1 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/uts\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000002c0)={0x1d, r4, 0x3, {0x1, 0x1}, 0xfe}, 0x18) 41.261247769s ago: executing program 3 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x3a8, 0x118, 0x3a8, 0x2b8, 0x1e8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1, [], [], 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8002, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x52b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x24221}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0xc000}, 0x0) 27.387210259s ago: executing program 3 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x3a8, 0x118, 0x3a8, 0x2b8, 0x1e8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1, [], [], 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8002, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x52b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x24221}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0xc000}, 0x0) 25.828380786s ago: executing program 1 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/uts\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000002c0)={0x1d, r4, 0x3, {0x1, 0x1}, 0xfe}, 0x18) 13.813067202s ago: executing program 3 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x3a8, 0x118, 0x3a8, 0x2b8, 0x1e8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1, [], [], 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8002, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x52b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x24221}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0xc000}, 0x0) 11.06509766s ago: executing program 1 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/uts\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000002c0)={0x1d, r4, 0x3, {0x1, 0x1}, 0xfe}, 0x18) 2.355997386s ago: executing program 4 (id=3361): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r3, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) r6 = socket(0x2a, 0x2, 0x0) (rerun: 32) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r10, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610c0806000088a800008100000088a8ffff", 0x26, 0x40881, &(0x7f0000000540)={0xc9, 0x8100, r11, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0x9}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}]}]}, 0x28}}, 0x0) (rerun: 32) 2.177043704s ago: executing program 2 (id=3363): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$packet(r0, &(0x7f00000000c0)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x4, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000010c0)={0x0, 0x2, 0x4, "5b5157dc"}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x168, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "24db271f0a78d17f0616c6d9944c7d38c583fc3271caf9dc90"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "89d0f1ae4d2ab5cbfefcfb2f23f980d734fb861fc66198350f3dbe75974ca14b0ece6bff"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "6864732435552c319fec1761beb8b7e7da2a1822c926af7b967e5437354d22f3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "4a73f89553f0a45bf87a44041e1eacfc4c6ef6eb629361b212da"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x463}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8001}, 0x40841) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1) 2.046049194s ago: executing program 0 (id=3364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000003000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.88022076s ago: executing program 0 (id=3365): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@empty, @initdev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x88, 0x10, 0x100, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x6230}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x50, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0xf7}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x9}, @IFLA_HSR_SUPERVISION_ADDR={0xa}, @IFLA_HSR_SUPERVISION_ADDR={0xa}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x2}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}]}}}, @IFLA_ADDRESS={0xa, 0x3, @remote}]}, 0x88}}, 0x0) 1.879006866s ago: executing program 2 (id=3366): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @multicast, 'macvtap0\x00'}}, 0x1e) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000001640), &(0x7f0000001680)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0xba9, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x40000000015, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="89af18f46e4862ed9f62bc759631a9e09c2c0000001300010000000000fb5a354b3eeadb8108f243d12e60db275b132df7d7f9c6dc00000000000000008ae2dbb3fd51b4604297de10975e", @ANYRES32=r6, @ANYBLOB="00000000000104000c001a800800048004000a80"], 0x2c}}, 0x48010) r8 = socket(0x8, 0x800, 0xfffffffe) sendmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xd, 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f00000001c0), 0x4) r9 = socket$rds(0x15, 0x5, 0x0) r10 = epoll_create(0x1) r11 = epoll_create(0x4) r12 = socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r12, 0x84, 0x1, &(0x7f0000001500)=""/4110, &(0x7f0000000000)=0x100e) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x200ff}, &(0x7f0000000180)=0x5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x7f}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000340)={r13, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x4, {r14, @in6={{0xa, 0x4e24, 0xa2a8, @loopback, 0xfffffffa}}, 0x2, 0x6, 0x80036e8b, 0x3, 0xa4}}, &(0x7f0000000400)=0xb0) epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r10) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x4}, 0x20) 1.869374684s ago: executing program 4 (id=3367): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x3d0, 0xd0, 0xd0, 0x1a0, 0x3d0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@dev, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x302}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0, @local}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xd1, &(0x7f0000000340)=""/209, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, r4, 0x8, &(0x7f00000000c0)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000000)={r6}, &(0x7f00000002c0)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000a00)='syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000004c0)={r6, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x84) 1.736127795s ago: executing program 4 (id=3368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000780)={0x0, 0x7}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a302000000014000000020a01030000000000000000010000023c000000090a010400000000000000000100000008000a40ec0000000900020073797a32000000000900010073797a30000000000800054000000006140000001000010000000000000000000000000aff976f20ac885021e6b05569691462da523482f7c598ae429a2a87fd6c94e0fdf9231db71243aaecd6874b25341b73b4a7abb669af95e3b1ab3ad404c746b95ddb1270957e760931dcf43e06b3dc07a14fdec44a356e8a666005"], 0x98}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r8, &(0x7f00000002c0)={&(0x7f0000000240)={0x1d, r5, 0x1, {0x2, 0x1, 0x4}}, 0x18, &(0x7f0000000280)={&(0x7f0000001300)="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", 0x1000}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x9}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@RTM_DELMDB={0x58, 0x55, 0x200, 0x70bd2a, 0x4, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x1, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x3, 0x2, {@ip4=@empty, 0x436e}}}]}, 0x58}}, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r13, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 1.680087037s ago: executing program 0 (id=3369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2b, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = accept4$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80c00) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000300)=@llc={0x1a, 0x30b, 0xdb, 0x53, 0x80, 0x2b, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)="c13dfc1ad45a341f4c77ecc7070369508581821c9eacd83ceacdea0f7b3cdf3f7a9042911d4d3cd5d89ebaa0ce038ed48ff8993beeec2dab1ad6430a73c0cba8799ff56c1d53708062d1985d2a0c19467e2b22e89d592fdda31f65dfac48813f0a47ce09c068463152f8fda63f9d356857e1c154f2f252e7f06ca26f553f9e002253791517ef9d3dc2b2391d68ec068247050c9f04e726b7339c2d5dfe302f39d5a3ac3d90f36f914054ec46cac0aee2406b20f655fe17d7651560e7d499aa8d5e664643a66e2557b3f97595cd1ece2d5bfcb4480d595303e29b0cffa88f32d8544696f4ec64b5d0", 0xe8}, {&(0x7f0000000640)="9cb687321708f698cd8d6cb36bc8e736d1bd11245c95f696e309630379e38b00454b3e151d35bb36c6be97440df9885156b81e1ff4e3def99ae7ceca03533f8f2c3c774b3405d795d9cf86bcd56a6464d20086c43429a821adb29571e3997e489c405a8141346c5416b339fbba10a87bb91cd711118d6abfd82e7036cf618bcb084d87b92b64745007bbcf5e95bf707950abae3646572ea0ba22bfd1c3b0400d05c76717fbea1175b16d1883646d54f10599b550fc693cbff8c0ba53ec50569a872f30811752fae3848ef12a6acc28491e8adc06b8d15354d50a8c6edbe7252523780ec32f6838f428d286f746f4b4eed1256a4353", 0xf5}, {&(0x7f0000000800)="59517cb4f0d5d49d0f813de8436af6744c1380b53e032fd1115fba344ca252f893c420746dc17f83dcc81a49d9a73a21be7f450a193f3d1ccdcc54a918cf39d96b427d74c68747d33382e421d39dc919d57d56cf1538783d6dfe14aeb51f9435ba49f2d15a0befa0e98212240190f8c03421e31e03dd4562c3ddab42437e31862971e8584831fd6f82bd8628969210875e8506ad219d4c9b47452cc633bca7056d55f7a53633791047533983c63ef16a8fa74f6aec99f44a80c6930f919be07e9205de98e53506", 0xc7}, {&(0x7f00000001c0)="b2fbcf278b255c51f098f70bb63547cfb06f", 0x12}], 0x4}, 0x24004014) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x6, 0x9, 0x2, 0x2, 0x6, 0xffffffff}}, {0x4}}]}]}, 0xc8}}, 0x20000041) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000120005010000000000000000050001"], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r6) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}}, 0x20000060) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xd1, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0900b900", @ANYRES16=r7, @ANYBLOB="000226bd7000fedbdf2501000000080002000200000004000480"], 0x20}, 0x1, 0x0, 0x0, 0xc0000c0}, 0x20008014) 1.634791158s ago: executing program 2 (id=3370): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="32003300209c060008021100000108"], 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0xf0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xd}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffff00}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0xf0}}, 0x1) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000580)=0x6, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket(0x2c, 0x80000, 0x2e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "23e33a26de"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d6163736563300000"], 0x40}}, 0x0) 1.453814384s ago: executing program 2 (id=3371): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x6, 0x6, 0x8004, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x0, @value, @void, @void, @value}, 0x50) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x803f, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @alu={0x4, 0x1, 0x3, 0x0, 0xb, 0x6, 0x10}, @ldst={0x0, 0x3, 0x1, 0xb, 0x0, 0x4, 0xfffffffffffffffc}], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x13dabdc9cf519d8f, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x8, 0x3}, 0x10, 0x592d, r3, 0x6, &(0x7f0000000700)=[r4], &(0x7f0000000740)=[{0x2, 0x5, 0x9, 0x4}, {0x5, 0x4, 0x2}, {0x4, 0x4, 0x9, 0x6}, {0x3, 0x5, 0xe, 0x4}, {0x4, 0x1, 0xa}, {0x0, 0x3, 0x3, 0x9}], 0x10, 0x4, @value=r1}, 0x94) 1.364134204s ago: executing program 4 (id=3372): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000000)=""/228, 0x26, 0xe4, 0x1, 0x4fde, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0900000000000000000000000000010000000000f00e087f112fc537b90b211efb47e8b1f169b53bd3f9efc842cd82ba9f137e543b4b795b9e952107539c6097a19b15a451f709d24d18d62c603c99f229ff2675a186c1c48b5d0e191b9aeea04e9f6ea7a6269a5f01f2724d2a00000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="02000000000000000500"/28], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, r6, 0x60b, 0x2000, 0x10000, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1d, 0x2, 0x6) accept$inet(r8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xd7d}, @jmp={0x5, 0x0, 0xd, 0x7, 0x9, 0x100}]}, &(0x7f0000000200)='GPL\x00', 0xff, 0xfd, &(0x7f0000000340)=""/253, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r2, 0xffffffffffffffff, r3], &(0x7f00000004c0)=[{0x1, 0x3, 0xa, 0x2}], 0x10, 0x1, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) 1.357899583s ago: executing program 0 (id=3373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r3, 0x8) accept4$inet(r3, 0x0, 0x0, 0x80800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000009500000000000000a952e0317461ed595924b6ca79d0698c26ee0d250f58455cbe71fc2c073295aa7665eb0f175fdd7ca963600b6fa264b55726b49d88b2c3c8e31e65ca8e1cef2f176552687364ed7fb3aa352b2b6cecf4b4efc9164096cc63ac0baa26b09ebbb78fb8b5a5c9ce72ddff1f7c620ce01a1129eed377588cc454060e9ded838c440f6ea37967b13e3203c899154e00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x9b, &(0x7f00000007c0)={@remote, @local, @void, {@mpls_mc={0x8848, {[{}, {0x101}, {0x6, 0x0, 0x1}], @llc={@snap={0x0, 0x8af6c28bb563318d, "8e23", "b16a31", 0xa00, "f427112eaa9114d995464096de561c130840bc129965f072c7d71fcab5bb4caa6913d13df3b4db1290bb7f162cd4ead9fbbc414f8c529a3e77aa31e6ca2c967f67faf6af45b79ed7ea767f228871282908c8b5fddd01b5982d7106e398041da10e2a8eaded32ce06b812c25c7eb7f071c51d885f49cd3ba7"}}}}}}, &(0x7f0000000740)={0x1, 0x1, [0x7fb, 0x54b, 0x863, 0x2b]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x1c) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x2c, r6, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x40890) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) getsockname$ax25(r7, &(0x7f0000000140)={{0x3, @default}, [@null, @bcast, @bcast, @bcast, @remote, @remote, @rose, @rose]}, &(0x7f00000001c0)=0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.242644661s ago: executing program 2 (id=3374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x20, 0x14c, 0x3, 0x2, 0x4204a, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000480)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x80000000}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) listen(r8, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r6, 0x1, 0x70bd2c, 0x6, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7f}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=ANY=[@ANYBLOB="240000003e000701fcfffff7fdb043f6037c0000040036800c0009"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0x8000) r11 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r12 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 1.209028962s ago: executing program 0 (id=3375): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xbc, r6, 0x7457712e3042ebed, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4041}, 0x4008000) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x25, 0xa, 0x1, &(0x7f0000000080)) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x2d, 0x40085, 0x13}, 0x2c) 912.273255ms ago: executing program 4 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000030500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 911.302231ms ago: executing program 3 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x3a8, 0x118, 0x3a8, 0x2b8, 0x1e8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1, [], [], 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8002, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x52b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x24221}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0xc000}, 0x0) 3.879061ms ago: executing program 0 (id=3377): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000c80)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in=@multicast2, 0x4e23, 0xd, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x3a, r4, 0xee01}, {0x6, 0x2, 0x0, 0x2, 0x1, 0x1, 0x2, 0x9694}, {0x9, 0x1c000000000000, 0xff, 0x4}, 0xfffffffc, 0x6e6bbd}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x1, 0x2, 0x2, 0x40, 0x2, 0x4}}, 0xe8) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000003c0)={r6, 0xcb}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000cc0)={r6, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x2, 0x9, 0x5f7, 0x8}, &(0x7f0000000d80)=0x98) 229.98µs ago: executing program 2 (id=3378): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @multicast2}, 0x8) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x4, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'pimreg1\x00', {'dvmrp0\x00'}, 0x2}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5a, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000240)={0x0, 0x8, 0x91, 0x8001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x14}, @multicast1}, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x1, 'bond0\x00', {}, 0x7}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x8, 0x5, 0xc}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7ff}]}, 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000004c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) r5 = accept4(r3, &(0x7f0000000540)=@un=@abs, &(0x7f00000005c0)=0x80, 0x80800) write$bt_hci(r5, &(0x7f0000000600)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x3}}}, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r3, &(0x7f0000000640)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000b00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x101, 0x0, 0x0, {0x9, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1d8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}]}]}, @NFT_MSG_NEWOBJ={0x58, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x9}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x8}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e21}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e20}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0xa01}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x2f}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x890d}]}}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x811}, 0x24000804) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x6c, 0x0, 0x1, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3a94}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x74c}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000c80)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c840}, 0x88c4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) splice(r0, &(0x7f0000000dc0)=0xfffffffffffffcd1, r8, &(0x7f0000000e40)=0x800, 0x100000001, 0xcc3c692d22ba4460) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e80)={0x3}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched_retired(r3, &(0x7f0000004e40)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e00)={&(0x7f0000000f00)=@newtaction={0x3ecc, 0x30, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{0xd18, 0x1, [@m_ipt={0x2a4, 0x9, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x115, 0x6, {0x5, 'raw\x00', 0x5, 0x8, "3994e3786d87cacec484675b717029ec479095c4f24e2ce9fce7752e0dade8f9c7af473c25fb3bb71a5f1e3ab91f7e505f34dead3bd55dd7cab2a2eac2ff290b067e6f6ef0208d9c0053e1fe03a65235c0a7f2df8e71220ee7e992f9c9f40eafca8ef5dd63cbfe345a733c164277d96424a2ad1416210fa8d18eb90ee2f89e6fcc7fda2f18a66e87937ee27cfb344072dc3f9695419bf6aa0d35343ca82185bc41a9ee25258c639716fcf89d2fbb03f6cc4b33d7ebb6928d801bcba8fd6f16b789f4bba041c0db7c6870a35228d715d505b59b6be46835fb8e03085587e2829b6637322cf17279fd9f5cea"}}, @TCA_IPT_TARG={0x65, 0x6, {0x8e1a, 'security\x00', 0xb, 0xfff, "ca5921516f23e000551b928c582cfae6d3022aaea3c142e6ea72c29a11fee4a908c32959a8d6bdbb01277ad853c70a560af51a92f3c0cd8dbe726c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xeb, 0x6, "83207254d660b640adc577ae2b069dd186803a277f3ceca36924b5f9939602095a7a8ebfc1c5397670257674d212b321f32f0dcc8ed3b3b87bdae6990b345bcac1804dc8780aea1e9cedd91215ded8b01ca648d96dd888001ac23f20cfae5164e155144740be30e6774c26756149d484bbd2ac737f4f945d2c1487829f2519f0fe6b29c40a8d19a2f2661397c3ab528f83ab9b5fdb6d8b049371e18fa3171992a214b9472dda9ff8494709e7204b6b6928d140a72ad91bf27ec6a137789c67e9931fcc65abf16ae2f429908598672333bc108cb469093ff1de4323ccfe48da5581fdf94f8316a7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xa4, 0xe, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x6a, 0x6, "c4def20df69ada3228e9cb0627a835aeacc083f41aaecb92107b7b4a3424c5c142156f3ce71da316f5f7260a1f0408c5a0f7988c21a4e3d2948c624885091a633dc9b4a511ef1b13385b2c2ef127b898d37a675e047c69593888a7ae8e6eb887c3bf54bde597"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x18c, 0x4, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xfa, 0x6, "d09cf97c13d58a80981cf0102077cdf0854358d45661cd9d3e5c2d1c7349e937f4dcefb2b0a0bb2a654356e862c16cb07ed5384d91e5baca33e2f1c14444e304067cb4579d69b0ef8fb8ce1e145a54d1ef7857872aa751d2f54c427d3def79d3c10c3babf1baa1210d633f2fb759515a1b54f80a01355a392b0e934b964379c5a897ee1ef538624cf17a182042e068ef9a0547129abd8c661ed52d0b99c2956d97c9f732da661c459e0f6b9f8784337b0b1e38519695084e318659e2454eff523f8e2435a1a7872ce50344b6ab51319423e98691f7d2a40c2379d3d77173ddc20903e7059bd8ad5e8e8a4bf9addea5e7dbc81d769328"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xa8, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x75, 0x6, "54b63798d071a13d827885767e25da9f9af01d83b54a5ccc882b1e82f3a55595a40e1cd71d3cdd976002931dfd18c5ea0f4d05bb53563b01d0654d687d6fabb2855d2605538335f873ddf46a76c771725956d3df379fefed85588ddd54f7d181b9251ce097fb9e3a9c145d8e3481ab81c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x2a8, 0x1e, 0x0, 0x0, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x9d, 0x6, {0x7, 'security\x00', 0x8, 0x3, "8e13dc7419ca8f6ef8024cd306e951350dd69930260dea8fe9591556ff075a4742d73eac5c39b2602cf67f4a5724d583bb4132d5f066c5edfb8ef083076fbc11e65191de33250af1b4d9dd661f567ad7f3bfab1a0f248b5ba4e5e00a68d209375d0342003aa7961fea1452909fd1a97a999c6f"}}, @TCA_IPT_TARG={0x88, 0x6, {0xc, 'filter\x00', 0xd9, 0xff, "5d622619506b96d91e5a3549a5e94b00bf033f109e131a90b131ca3b91e4d0ac281f23d50c7050cabc4ff6692f7eacd932ac6aaea1d69e6ade278dc154a145bf38b2d7df1a77884a6ebe5c7d03446a46aaacd0f455ca3244bae751011ce7"}}, @TCA_IPT_TARG={0x5b, 0x6, {0x9, 'raw\x00', 0xd, 0x2ab2, "c1f2d1ea2ac3a356ee2f96e490d3b2ebdfb85114a1740d6b0b5880e63e5b0720890852398f3c98a47b34a901cf6ebc41f1"}}]}, {0xd5, 0x6, "e91ba727c764aba8c8d739cabe98f36b0c0a95bf44e01b2a2dd2e8979bb5a68395eaa2a59db1e635ee50020eeb37c85d4e01ec7031d3946bf6590ba815ed175629d356b74651c467a9b24157dc6607c7ec3b9619c296b909aac56b79de3707cbb2149abee9c20cd45b96dfabc8cac4eb9aaf21c2c5e86fe619dc4f4c2f37396650373bfbf3484ee72abee21466474497e87fb12601f812a03a4374f53ec44df84495d9dd329ead81bd4bb3c7f4cab6dca00080af2bf4ba1fc912742e5514b8340fbbfc6b5ddb5ef679ed1e1ab1201422f8"}, {0xc, 0x7, {0x1, 0x97dc1c5f61ffd5f1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x194, 0x9, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xca, 0x6, {0x1ff, 'filter\x00', 0x3, 0x83a8, "e8835b4be4cf5c2e4457b595b0e98099a89bb9fae5ba9ccbebe36ebc8fd4cbf8793fcdd8f4207d3a5b244136d0b79543c3afde2fce1d578502275f453b2bac8e97e91c412a2d97aed0485f6d7783fe21e8aba1cade149c79455744575d4589085a6904d1315fb73ac48cd23396f4d10c2504c623177c38c7649fbfd60b10cad0d86b2d753c9f018e66b7a7b9dfd9599a541fb17c6b155492f9529823ab5b6bae"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x79, 0x6, "e0df111ec346856b51934e061226c0e153339108dbaea51b4570564d995ef946ce62797ca3bd7da043ecfca76caa0669cae34daac63e285fb13f62fd82230957c276e5f25094513158e891c65f5df9a56e575d1c91cb0f4e7f28a5343bcee4e3e6ebf78c47b51d3db6ba87f2e8aea3c547ce116c5a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x35c, 0x1e, 0x0, 0x0, {{0x8}, {0x248, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf2, 0x6, {0xf, 'filter\x00', 0x9, 0x0, "c6cbf8b1fc3315fafdc8ec48e82fa50b5039bf8262c625fc552f8298e1423df89931197088e1dc51b616ffde668117292f951fefe0596acdbf6ea51a6f735debd9bb273180ce70305963d6bff52998ec559dd462bb9f5d23752b662401a1d706322d9e48a1e07d3d4c8c11198f2e84512996d0da2884bd95ddf6e2c67f887a74b55db8e4b8e23a6cb9a24bffa3c07f4974c0e5aa640756c83900a957422611e70bb41b43cd17e7db189108616ac3bbf7f0c2893b9e43575550f1ddaec1b8169f08d17c780984ec3a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0x11b, 0x6, {0x3, 'nat\x00', 0x4, 0x400, "d1b71b03588a03b68976e4f5b06b6948f317f5926b3158f7bb57b2477a946730abb921fdecb4fb1bc1591fc3ac86947ce71783b78d9db840616e72e3445a3dbcbdeb673325e718dba4f11b27674e70f68a083c96f142ac6dfe6b336b59c2b69db0a1ca3b36f2a43c581effb5b7cfc3abc526b587b7a960c750939cbd86fc8c9d802b2f570c20373126a59d2a4aaad70f057f3d13589ddbea6799b2c76535d2698e3c654ebccf3b60d4a82cf121730d76b135d38f65fdb6aecd0949c23f9cd93fbdb89794aee0886860e9586d7606af91d32a0d9bf9e53cf2729e6a9d0c07f992ebdcb54e97bf40273d5bd41da8156974b1"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x55}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xef, 0x6, "9f9101b22829d703b7301514a9c6e260d21b42f44330940f7c2fe6da76511c5083020dcf85314eee239367c5c233820d881ce0b976e354d2bbe066fdcc9d58c294e2cec9c48bb34a33b2b4249e9ea07d8d25e2eb691b6f5a3ca6996dc5471580c3fa01f8755b28180a18dd95b5b80c62a221e5caad69ccf7c0c0247e7400928f6d5be3d67d085e52c27d805fd9a4017a6f1e3fcf43bb32b8eb5735541337035d0191c947e654152cd45cfbd4f4d73faebebf82e71852f4dce7e28e366525f3e046ba5ee696a158789ce02ec2fad2e22a40671c850cbea78f0f10779aac13746a77c4c8006ee7307e5080ba"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x1254, 0x1, [@m_ipt={0x1b8, 0x20, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xaf, 0x6, {0x8000, 'security\x00', 0x8, 0x6, "cb1dd24a992ef5da9fb8357d84024fb50cafa1552af3721a9356d36363723239049f1e3ed1d775427c8cdc8cd3d12b16c949b1d3cdbbc2e4915142e5b40f4478b11b2c40f3fddf3f2830bac51c3d2ab0a647f17fa66c8b46a71db4b1bdc127ed2696c0a402c935fc220a9cf2c6ce9e9731c7981397ccbd753ab7dbfdb9029d6a46e0c6ec43"}}]}, {0xdd, 0x6, "a3cc373ae2320408d0de926730e3cead0f4c24d03788fddb042a8b2e354050bebab5cf777c6cbe1372cfa332a5e303808182ad10364330015d498d976331964c7ce88d76fa3cbdcba655f413bc7cfdca1af82e428c59fda3448668170b7712b9b41c201696f84d50303b41b4f4b672ebc4709e2ebd08758c83da451485f20746f0e3c882f3b3bdea2b2fa703c88f3834b417635fd29102274635665ec3ebe3e092590db056bc6ec2d3e445c7addacbaf6739f1d9fdccbe5bea9c7b5a75a615a1947541444f73efd5d6cba904b4e405f9cef24f4e45e86e0dcb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1098, 0x13, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x1004, 0x6, "89c34ebb1b7cd3f4b7bb8599c0ea620fb91335292477bcbb2f2439bba9332cabaa8749dc66fd33c2db00d2630c0ddb9193db5500c475670c86d6fe3bf5623a6ec85273d6c2f003426d1741c30222096fa92bb0f15c7558dba19d6a15b6593fb9fd7cd65e70ba71c8e5746fc07f23c7fdbe806a03371ff1513ae4dd91c249b21130c5d56891d5e5dfc392c5e7aea60d136665cf076b922e53f7b1688b07df5e1a415f169a0d1dcab06a61393168074884fffff09a12627fe5e1cd8426f082219d5f34d1ad7d18dd3f47b94e0a068628f5757dfebda1b6789d43d9658837e201f3d8370b87665339de80eaafb25fb32c06ca74025e8a18fe6db6cb8ad4205ee2f26b37f8ab3daf3469f07c0e76113ac3b2e8505c6253e73a482e6e978253c287cc5699d9226d985a33a0134678954dff64e58db94de536dbc5290be4a1111b5a0061ca6352dcc89ff33bbb164ffab0180ae544be32e934bfa67512fb444383a4b77fdf6ee1f3b9bee67304cf00613341cc2ff8b9932a161065dba2f16d8b991cf63f4bda67a67ba55969465bef4b7765d328c7be22b9c1102794b84838d37217ab42236d4594ef6d73687ca370d2f8c2279c3413d484384d71b433f172661d1fabe4d290f2c15998e644a5b8670783db2e4db5f0407051fd2306f4941aba6dbf19cf7249bd198b53f4f7b87f7a29cb58433728aafb5c3c1ee3e234ceb4ab2ea57c550f5c716c5567741e785899c284b977a5d9e338133a7a61db6eaec372f0e6f7ffd22357180c99c26ad2f16b40cee9a3ab9c0c2e7c0cef14288d55bc7aeb722c75c47166c00c46889b4c6e805b155ffb386906495149961165be0682741667a2cd3400d9afbc297662faacbb2fa6925ecab5099358af75ee0aadc079338edeec5479d520915ed9eb65ae05fd7a672bafd1944b9edc0e872c2f6882515286e52e269b9e8012bc047e3ed57b4a5adde2c0d6f314c9baedcb0f11d2925ac911b1c0a47393838ef60033e623f470962e1add2c4ed5c711b3aad2ca21377bb0ba940cf4231e82155530c1b6ccdc42c0c881257f9e7ab55047df4aa56044875988e699a24ec2b71927ed89451c6537bbf3b3a57b45a96fd3ec3b4941a29f491ce42218ac77876050f179c11b2a79b54a9be65b75fe90c50e91aadd9ccf5a284d42c1c1dab7247282b6eb6ffed840b56fa7f23ca07822fc7ebe7afc5325208ede3d07cb32301443f985b2868d743418bd38c84ff22a9653c1e90457e4fa7dff7eb673e9f7a3d8772bb3e21502512655c733f3c47a0dc6ba576c2403f6494f1618d5678d7935e628677c02c2e846b77c016a90cb72e4ce88b5d26379903a1abfcdfe9462a045d4078379d33f13e0d3f38d0adee1b95e06be9a9e5bdcd5d7917f09b224592906b67c43b70d1418261182f2168ebcd4b345d843267dc579fe04b0b5d873c349ede30ea5bdbb47c648d0167f1cb082ceb52247ef6698a1bd368fcc54db9f97770c386bc86cd27feef909a6ccf71370ce9db7f7b14d1480b6af45342209b4b6cdbfbbaa506185a1951c4a84f4a585f9ea85b281afa19acea4cd8cece31523474cfce98e51e6329875acbfe31397b5ada51569277e73e68ef53c37a709a32fc7221682af605bac6f29d665bdce675a1e8604d254841bc70ba3570da14139606989ec7487c69df5bf5065caaa2c78d0a0f6807f3771fd8d6781efc92c92690c5eff72be7d44de48c6733df64a65605c5f17aad82db6f868ddecd35a07826cf7335a8e7e981c738ac18adbd50ce63561f6ee75a4938acae43d7c9a776308d844b4587233589547a4bc9af5495e8d97994ab75eb79efc71cccc1a58a2992831dc54f56139b13df09a7fc5b2a626fa6fb9cbe64cd44a1e723f9da12575ba6061040793ed1fcd4de20fca4c92f206fca42f345448740bf130ab2b02d9a3a30dda3f2847ac3ccba89c2adfeb0a0448df96ba9f8df66cbd7a8d2f743b14f6dbc735b062242c76ba18f73502b96ef18242effea5c5b3db90410a38483f84ffb3ff8f2934d6aa77540b6f8ac6e3e40c7d48337601e1abe8f245419949e570f4a9e8334402d10ac478bd24831adcb50786645bb9ff8896c6806749352dc0f03d7501d8495402ef2104e0990e6a2f1329213b753071412148d5044077800bd9f2ede14ec2db2bd49d0b0f8d8dcc83341779cd99a3b69827fae82af8c035f6b5b4175d22f93a908c653a18cfb0e0adee4c30a4071296b2fc1fd35099cc70565631b0d81fc9e2d29cc917012c8758c3b2a867d0ee1ed8bad9c563f4caa788c95042a8de7067782138571ac9ac787273d2ef23bfbd5d0ddd6af42c32413ee8157bd659237f2d32abc56134294d0c1e6d45bac2d3dba67effdc2428082d78ebb1fea3138bf7a5cc64815d2cf2c6acce658a09f358858913b9882b26f5a53e2f9370d0f0936c7bc2feca3a3ad978da0ff5a55407409de0e9183a3242eba3b27956145d10299423db160b4626dc13b95f0326ae0bdc5bf7d059d544a51fa8a5b1c23cb46a5b9cdfba5db5a80f73fa00c7e6d5841e66b1eeb85caa0c0f099cf40ebb4c60aae2daf7a32957a43fc672bf3472edff1a77ba8111e469b91c3381ad9db407f6cf9c9b3a6c2431943c47da5a564b2b6218e53a16b757772f53e2e66903f23b16b13f15a2764aee315aab9886427e12afcf3f77bb1fd6d9d7538b967992cb166b18549c11536e161b321dccc0039abca1d1c9dc4b137f7f0f80a769ebae44e2001b23d7e2396c1fa9720a17f7c47da4049fb8ba2bfa14d98c4f5d9ef2aea7082d16ce97add0c0f654d4c320842a3998b8b0864e0b08b86a87b5c709ed1523eb811c3df1ff05168ef44b3a20a56ce747969f002739e88ff29c8730145cf9e402d9ae9a058fcd7ad02a5015aa6e8995cfbafd9dd19dc06545a8ee510c43e638da7f6c52aab4bfc32022c9338db7d1c4c3d3c4059cd9803af0d80b89fca08025af6200f3c10f8400056d9ab641ecdcb0dd283145cd0c7b8e6d07997dbe5b66303e194466a816418cf4833ee06fb2ed380ab5e44ae3cc3b9d44d75c536cce7df833290cf239b14bab3c14f0223b7626811847101f6732c44f8eea6ccbe93c1759cc6d7af192be1db0489711ac2ec1af60ec4ad00a41b09d1231839d3cb29fc115bf4de3101f334d336bf356fbd5106580972cedd32ba48b3bb422861502099aa510f1dc2fb480b7cd1a9eb103d4275a5bdeae54f7e370ffe13ab6fc78b20c576a8b5b2196a6f49d6aec1f8e4edde3c183edf6323323194956a6f720f553d902f966bf4d6919949b8aa08081672b1c398b8ce2c0093394ccfaf6630e6de6060ee521d4fc582877ef8b8016b41f425ca3a6d3ba3f5cea92685945ab8c435bf3ae19654884cd24876a31367c7a937d86413cb45d80f5546172ec98038cdbd57e6e3a98b597be4187f59342839dcf13a1416af74da1c6734a96b565594771d0d92b2d77e7e3ab59d457f5e4cb314726408843bce453b507491695df9c79f71632b4ea779d8ae5acb8fa8b448c2f36c3f41ed3c48f8c5bcb3f0a270abe7fec7468db7cecaf818ae57f13a257e64053d605a45747e1bab87bc80037dd9a451bee836b3d5bfad22cda1ddc1f8aacc114707789fc6f2b13dcc2a00877f63b7c2c408b8bcab104c5c9e1f4d93faa7abb417a7e129ab216469b75214d051256488a54413f250ca820b10939aa5aee419d2f1352ee557bc1d524921107e1270747c97b3c41a680825544ebb80c398495c036b2e4897dd363e5556be4edb0d925cd87d663be1cbb21af2ba91425920f62371992a743320d5dbb3397c1c1e56b4e0c9a6f93c6f0cdf84063d6f74b9c23000f895dac8a0856a92cb1b8d562c4fd7e48f0a28c70c65d004afbcb48d60a181e7de9aa046abe9f5be86db2e8563f62a0e09b0440ec51fdd182c60d17ea463bfbe1bb639be9f4c3fccfe8bcaacfa28cc3b1298fed5f70c4c2d24d77987848ceef4773dc9de458882c0413dc77300ea228e973b4318c4949523b331010d4746a4c37513da60c23f69ed8f06e6c2f8d623190bd4b1523238c8e46fa1c2def67a3c45a1cb1af9c1ed360a00321081ae511ebb9503b6bbd79b19d587b18307bf300b55524ac3dc02f9cb2b5795e350eb330a48b1410b4deef3d20cdffe9066f8e305a8cf9a30fee4afe7b2ae3bf750e1bf51ed01d20a08c65070ab6e3ab874d41fc1f6d4ff6133a9aab0c542af53e519147af436b7c0cc5f051da775039230699417711c576e4c82523ddf69f5d3e356f0ea5f95267193f027337192af5a77b99c2006ff33c45abe49e9f97f510a3cc4fa0836cb1948ec860dba7a728bc13a0b36ebe0ad86918301c551877d9978d2e58e447e75ea590885bf61212b1ccd703749ad15eac67d20550d9d6ad06721a37df33ea39acb91822f8d37728bd70820e8774a28466c2ef6d6b054647c1c31c64cd02e9df489f1dedf718a58d7a21fd27a592d20029c7c5672ca4c57a1b1c21a7722f7de295b037077133617b966e3774b92debe60692224f900684bc4220370c81e578e5e03ae334fbf31e2c331c6ad0fd5c934de3700ef60826dc2e48f5b269744844e9e98c38b9ba1c015140e30277d62607e6f650058a99533730e23426d3dfbe0ffee82934018346d309a0b482d045d245be8cfaab4b4d602e6bb1ecb68de7e7cf9bdf87033678dddf036ded5c3fef4faf0cca5d1f971f0a085960fe1fd89d31b6aead64dade8e1ca01343226d984676613092630f4f28b6de80c499231666157b6d63ed542303215b9cba1e5d6173da14a59c47a30de6f4a260e5673f259b4a26cb14532260312dd793bf5a3c6432bc4a5dbbe6837575231cb96af1510bcacd7b45b45b530eb17edff98b2bf09612bf66cf1f3bbc5afd0f0b52ea039dc5d7eabea9311cb646db1e4c7fd86f0f9fb0453f959790d701085c93224d3c3750e2e915e3894f2d87a8a67f57477871a66a2a9e6895264c67556cd27aaf75f1b5a87bb21cf6aa2ef5c8ba20361ae9a3b5043a4a08a1f8187ffffe71b6c916c39dc663a263de2c861052571612173939f78906551f92f2c19de2843209f9ac3fed869f931b89d6230fe8f98158928304b81914437c24922cff026b1340708158dca7eb70b498aba212c360d008756b15bcd967856ea9a99839c2a3b950ad5deaad01f647c5392a1003e88e9ccb1cf907f2935955fe352c843eb64aa5b12b4c8894497aa4a9034c6fdf6b8835ce8641f5c5a69c2c28ad8661a4e7872ce66ca662cfc9fcf81389385eb42d7538c9c26d122439796e246b2089224b22650d42f4d3dda299258835b47dce19ade90d434b64dce2b4e93fab4eb7592c6d219a736920e4d5e70c3419cd2dbd9ab7e869e8e6eaaae39461b9af19fabffb4c76625651f5259a7d1f2b43852c13731e2ba5d333e6c0f95ab186d3ed238f372f865e08caa3ad40cdef3eabcaab7cb9e3d673ecfc2416148e86896b8f61bd621f29638db956e47728132ba55993b046d575b3f4f2529daeecaafcae44f7f072f2cb82f52cf9fca4a80264f5acdf1117a1a6273e099ddafcb103112358c22f0ef1e7fcc93cd1a524490803620f0b125b565de8d498e5ce0babab360d139c97964a09f967a9575bdb21098f1502aa64c54224e604c908d6aadda1945a2c4545a9d0d51e310192ad6f5f4582788e81bb4f23b624677e590699ecf6e16eb92af3f2366753ff95572eaa5efa9e9bfe5d68d80b66acc564ff32a33cb72c70d5282bcda60ad36c86abc195a23d92d5655fd5dd47cb4fd266f0a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x690, 0x1, [@m_ipt={0x110, 0x15, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}]}, {0xa4, 0x6, "d37ef7247a90cc8de84767aa298f4a7980cef5ebb967c62c968f0f0d7e6e96ce6a2d758cba7c6044e2af255ff766537f657d6530c26090b338ae3c6c077f93d144ef7609cdf1a3dbbf6b302ed3459bf21739f42507c55d7baefdcc3705f5d5e171f013a2803e96fa2ddd99967c2804ed94f45bfdcbd686a724fca245f005f2d2522834c82e9c4f4064cf8a56a0066fcc407eabe53a03c6a9b35e87abf843550d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x130, 0x6, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xdc, 0x6, "3eed743a50d24cb1da5c5f72b0788973b2d724764cc58c79cee80ead5fdc6450f338745e023304a56cbd979cf8940bb2011a381c4904caca53f3d732d6b26c13cc936c86293f55e3f3228ac1bcca237964790f88d9a09852c3e948ab5e7a0ad9c5c5866018bf530daea6d2dbe2c973bbd002c634829a3e1fba42642ee9de196f0fc8c08bb910278e63ddaa7957be1e4e2b74a30dca752fe085226c96eb50361fd5669caace60688814ecf69c5affdea6d031aa6ca91434267624a1ced32c1b4480863f37351ad7ceae68bc8c9dacdd7f3671d002962ddbd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7}}}}, @m_ipt={0x3e4, 0xc, 0x0, 0x0, {{0x8}, {0x2f0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x129, 0x6, {0x5, 'mangle\x00', 0x3, 0x6, "9dbf881e6db44387799d6c90041c9004f1a6764dc425d25e7e4ed2a1727c4c20974009a031d12d4581b62a5fbdee0d6f32eb4251d5cb74c9eea244dc24e82258a6a576cfe17e03a2591c3daada559db84e7a50d2064403885eeb0e9c2cc4cd6933c23323d49881353c5e4f9ac78e95243148d7eee3799aae6f5753332a6c96340587eafc1c1297af889f4ae63a68e71ce631e51264cccf49acf1159cd8e779c1683bdac3f933e0a2fb343c036c1fcca38fdaac9f402d1c15309fae9c2ca904db374108751a40674b1f57e6892ce5399e72553f9201589ed2ec7552b0d15f89e28fe5e07afdcf22fe4738b547a2fc7b1d4e825e56182753443461e37860689a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x4e, 0x6, {0x20, 'nat\x00', 0x80, 0x101, "1853b8167d2c22e76a31cc2c8361a90a101bb9bb07fcac6fc86acfa49cbadb497d4cee64"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x10f, 0x6, {0xfdd, 'mangle\x00', 0xa, 0x40, "8fe86414a1c2888ff0aa82b8aff304a2125dde14bdf731f3cc7c2f7f7cb1e66406f5d85c36e9b7093a48168eeec213af851f9dd210e073b0daf8a2bc269724b9dd6843a96286ee4c2bfa82aa4d09316bbe8e5891b93d6923cb0d2f2648cd2d58ab3915cee7ca2646f2b4fa25950eaf3e70a729cf7c591f67e5f8d6ad845eb80c95414fa83d7e6dcf1e70abe3dada1f0b34985dc41537f8115437b2477b9234f8e2216ee9d2815d2eb538ef54ab580de0e9e70fa9dafd47efa5ce7f92e61a750d1e1bc29da9780d8263ea28a8e9dfb26b238cf505c5497c8c3eff621ba8399a15dd74fa6af8"}}]}, {0xcd, 0x6, "ee72720777b9eada8348228e3f84b400c638370ab017c46c921da78fb217ae014b07cbb7bd2de6cbcc22457efe19b4a3f145da6d8726ccb602d455dbeed4d525f380c7e2099731787394925fd70065093f9519f489a7fbbd1e7ca074a862d57e59bbf9515e9e7f08b221b6dbc11fb4f224f815e5593dc8e80c70938f614134ad32c9496b42e99e6d31b060afd9d1e1567b20140b40f1d5c191f5f74e5fb93ee85e22b14076e44add7982daeeeb143abe877a603850ae8e64c3d324ba5813e98884074e38496c8e41b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x68, 0x2, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x36, 0x6, "94da575641982980d5d6d5a0ce91b60ba5a4df7cc4cf1279c71c5b2203d0dae9be3f8ef9e4e4db84acb1d5c7d9e7a2d3c9ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x18bc, 0x1, [@m_ipt={0x32c, 0x18, 0x0, 0x0, {{0x8}, {0x208, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xb1, 0x6, {0x3, 'filter\x00', 0x7, 0x1ef2, "253beaa9c567bfa3692aa634a81201b63441d0eff01be0d60d18ff19842047d1ccc6add571956244f0f338ef91e167cbcde79e32e97e5cb6b5dcb3884e18535867fffd3f0e146c705a2a5bb6635735553d94931025dc356e2fd32ab42ce95788442dde202ac2e2514a536a64f03ce6625fba1514a720e26c68256c197b7e2f153e604a1347abec"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xfff}, @TCA_IPT_TARG={0x11a, 0x6, {0x3, 'security\x00', 0xe, 0x9799, "d03dcbcd9f301e5f07ce17631022f4568a961d55cc287fac11ea91e6c1299b9d4d2cb33e203132ba738296d6321788b22e24eafe13fa9499c195af3a6bef43e3f709109c3f0d65d7c1107a121dc0edd13492999024fd956fdb2be49406b1665b79d9d77517931bb89bc2a92a71ff38831f2fdba4d02032d4b67851c69a3a9207695eb80429f9f282a16ef42688873c05d8922c5aca743c6176ff741d2c8e80ff47f671ec858508c8aed710ef6ae7916e359ca73918c74a35e3f2ca64c59491e014a19877c6d10a1e1cc935658169cbaa8bbb127ea0aa3584756e2890a96673b65eb68609bfe720c87438eaa956d7db46"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x174, 0x16, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x509839fbe0974ab}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x12cc, 0xb, 0x0, 0x0, {{0x8}, {0x1220, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xd6, 0x6, {0x4, 'raw\x00', 0xf6, 0x400, "31949b7a83ea1d652748cb4032424e026b8f6802dc28c67dd3f1a7aea4f8fb31e6f88383cf25ae933e813b4e2fc9f1fa23dde01e058ebf7c62f1cb46a23ec0eded2e83b5bec7768817dc85726d4a9c5f5b9eee2d19aa15199cf278ad8a3dc29c411c378d02766c9d5a5faac436c2ace3a51640f7370eab82666c2cefd296ee924a62ff413eb45e80da39199e16b2420c001f5d600933e7068b50e2c115824c26047e9c0123d19d10ef9b0191"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_TARG={0xd9, 0x6, {0x3, 'mangle\x00', 0x9, 0xb, "0d1af22d8a3da2556e46e6e130e1f5c9473aa6771c29fcd7058318f11269a0448b40c7b5bdd73836d255d02367c3c14ff202294e50f4b4ba8b21919c09c4970238adcb06fc9769e522f592b3b3fcdb1916ef07b683dbb6cdfef24fd481622c6d05381fee6dd2bc4b1a5796bbe3c2711846db15e870591771972e634a41a913adbfe2e420cd7c7a8b54f1c38ad08eadd1281c3c4449eee227004c9d30e3a97fc451e4f0d091bef2d3b38f3713565347"}}, @TCA_IPT_TARG={0x102a, 0x6, {0xa000, 'nat\x00', 0x6, 0x5, "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"}}]}, {0x85, 0x6, "52fe08fdbbfb21f0e2c77cb2e53a4f8aad8c6262c8cee23c4d245868191d23daba4bad6cbf48ab4fff26aaa220a8008003792a9258c37f02f92e20cfc33328e17569d6d006276a2dcf72a167c60ac44c88f997b101f9c22dca944cbeae776234c9183bb052f29936494864211f937aaf9e27837b6807c12700fd5111f87bc336bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x14c, 0x1c, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xed, 0x6, "4e593f2b4949006cf76c9090074ba11d7f2e6243555a945bfa1739147d18e9bda2fc1085d594dc9ef4e50cf262d6181d20b165863f3bce32fff08cfa9ad7df94d3ecd84adae3f0ea4450e17e533e333eb62e472dbf7bc8f85698b342ca31f891bcd61908bab7303aa40b8f440f4bb57e86db6bcf0dda60f31c2ea68c33be1139f6cb26e7352c873319e769d630abf225d44f7865489a32b4c16d05382bd04e2c8633ffdc891407489ed8e30102c38899e9c12402eaece41f78dabcbbd0bd8bc890e8c80d6ad13d7efd5bc7fb3021691c994ab9ef318a7d8fc6ce191f94da3669100e9f91337c465780"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x3ecc}}, 0x4000) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000004f40)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004f00)={&(0x7f0000004ec0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) 0s ago: executing program 4 (id=3379): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): : batadv_slave_1 [ 372.795195][T14453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.850210][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2399'. [ 372.864557][T14466] x_tables: duplicate underflow at hook 2 [ 372.876591][T14453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.916401][T14469] netlink: 'syz.4.2400': attribute type 1 has an invalid length. [ 372.925074][T14469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2400'. [ 373.113304][T14453] hsr_slave_0: entered promiscuous mode [ 373.131300][T14453] hsr_slave_1: entered promiscuous mode [ 373.162439][T14453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.171476][T14453] Cannot create hsr debugfs directory [ 373.171501][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'. [ 373.200792][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2402'. [ 373.259945][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2400'. [ 373.384817][T14476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 373.413130][T14476] gretap4: entered promiscuous mode [ 373.418427][T14476] gretap4: entered allmulticast mode [ 373.431426][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.442378][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.459489][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.481426][T14483] netlink: 'syz.2.2403': attribute type 39 has an invalid length. [ 373.493092][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.502047][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.529899][T10095] hsr_slave_0: left promiscuous mode [ 373.538125][T10095] hsr_slave_1: left promiscuous mode [ 373.553750][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.563455][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.576785][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.594703][T10095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.609438][ T5839] Bluetooth: hci2: command tx timeout [ 373.653500][T10095] veth1_macvtap: left promiscuous mode [ 373.673890][T10095] veth0_macvtap: left promiscuous mode [ 373.681052][T10095] veth1_vlan: left promiscuous mode [ 373.686598][T10095] veth0_vlan: left promiscuous mode [ 373.716162][T14492] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 374.185752][T10095] team0 (unregistering): Port device team_slave_1 removed [ 374.230820][T10095] team0 (unregistering): Port device team_slave_0 removed [ 374.693789][T14476] tipc: Enabled bearer , priority 10 [ 375.257980][T14513] netlink: 'syz.2.2412': attribute type 1 has an invalid length. [ 375.286416][T14513] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2412'. [ 375.310591][T14453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.323819][T14513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2412'. [ 375.501512][T14453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.540530][ T5839] Bluetooth: hci4: command tx timeout [ 375.598501][T14453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.634053][T14482] chnl_net:caif_netlink_parms(): no params data found [ 375.688762][ T5839] Bluetooth: hci2: command tx timeout [ 375.714728][T14523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.759273][T14453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.817648][T14527] Cannot find set identified by id 65535 to match [ 375.907131][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.921262][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.938389][T14482] bridge_slave_0: entered allmulticast mode [ 375.946651][T14482] bridge_slave_0: entered promiscuous mode [ 375.964521][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.973545][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.982109][T14482] bridge_slave_1: entered allmulticast mode [ 375.990910][T14482] bridge_slave_1: entered promiscuous mode [ 376.134010][T14482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.155535][T14482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.298326][T14482] team0: Port device team_slave_0 added [ 376.305436][T14453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.321044][T14482] team0: Port device team_slave_1 added [ 376.327166][T14453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.347287][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 376.442573][T14453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.489414][T14482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.501648][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.533298][T14482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.545373][T14453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.573421][T14482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.583957][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.611662][T14482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.760937][T14482] hsr_slave_0: entered promiscuous mode [ 376.768139][T14482] hsr_slave_1: entered promiscuous mode [ 377.425705][T14453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.509238][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'. [ 377.587765][T14453] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.612749][ T5839] Bluetooth: hci4: command tx timeout [ 377.650930][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.658151][T10095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.707633][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.715073][T10095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.768940][ T5839] Bluetooth: hci2: command tx timeout [ 377.862520][T14453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.889945][T14584] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2437'. [ 378.203549][T14482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.247077][T14482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.304094][T14597] macvlan1: entered promiscuous mode [ 378.357137][T14597] macvlan1: left promiscuous mode [ 378.461139][T14482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.481315][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 378.495927][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.554943][T14482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.662472][T14618] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 378.686193][T14453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.752181][T14620] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 378.860805][T14627] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2445'. [ 379.159242][T14453] veth0_vlan: entered promiscuous mode [ 379.173806][T14482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.194822][T14453] veth1_vlan: entered promiscuous mode [ 379.224392][T14482] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.297536][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.305565][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.369135][T14649] batadv0: entered allmulticast mode [ 379.430468][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.437845][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.534267][T14453] veth0_macvtap: entered promiscuous mode [ 379.594301][T14666] sctp: [Deprecated]: syz.4.2454 (pid 14666) Use of int in max_burst socket option. [ 379.594301][T14666] Use struct sctp_assoc_value instead [ 379.595790][T14453] veth1_macvtap: entered promiscuous mode [ 379.613989][T14666] x_tables: duplicate underflow at hook 2 [ 379.677454][T14482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.694771][ T5839] Bluetooth: hci4: command tx timeout [ 379.697392][T14482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.752878][T14668] FAULT_INJECTION: forcing a failure. [ 379.752878][T14668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.816298][T14453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.846777][T14453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.855124][ T5839] Bluetooth: hci2: command tx timeout [ 379.868899][T14668] CPU: 0 UID: 0 PID: 14668 Comm: syz.2.2455 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 379.868933][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.868951][T14668] Call Trace: [ 379.868962][T14668] [ 379.868972][T14668] dump_stack_lvl+0x189/0x250 [ 379.869008][T14668] ? __lock_acquire+0xaac/0xd20 [ 379.869042][T14668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.869071][T14668] ? __pfx__printk+0x10/0x10 [ 379.869092][T14668] ? __might_fault+0xb0/0x130 [ 379.869131][T14668] should_fail_ex+0x414/0x560 [ 379.869158][T14668] _copy_from_user+0x2d/0xb0 [ 379.869190][T14668] ___sys_sendmsg+0x158/0x2a0 [ 379.869224][T14668] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.869295][T14668] ? __fget_files+0x2a/0x420 [ 379.869323][T14668] ? __fget_files+0x3a0/0x420 [ 379.869363][T14668] __x64_sys_sendmsg+0x19b/0x260 [ 379.869410][T14668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.869462][T14668] ? do_syscall_64+0xba/0x210 [ 379.869498][T14668] do_syscall_64+0xf6/0x210 [ 379.869529][T14668] ? clear_bhb_loop+0x60/0xb0 [ 379.869557][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.869579][T14668] RIP: 0033:0x7fc1fd18e969 [ 379.869599][T14668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.869634][T14668] RSP: 002b:00007fc1fdf87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.869658][T14668] RAX: ffffffffffffffda RBX: 00007fc1fd3b5fa0 RCX: 00007fc1fd18e969 [ 379.869674][T14668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 379.869688][T14668] RBP: 00007fc1fdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 379.869701][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.869715][T14668] R13: 0000000000000000 R14: 00007fc1fd3b5fa0 R15: 00007ffc985d9b88 [ 379.869750][T14668] [ 379.878523][T14453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.158736][T14453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.167705][T14453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.178425][T14453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.343737][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.361837][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.454472][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.465576][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.593960][T14482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.727802][T14698] delete_channel: no stack [ 380.736665][T14482] veth0_vlan: entered promiscuous mode [ 380.767787][T14482] veth1_vlan: entered promiscuous mode [ 380.846518][T14482] veth0_macvtap: entered promiscuous mode [ 380.854003][T14700] block nbd0: server does not support multiple connections per device. [ 380.866214][T14700] block nbd0: shutting down sockets [ 380.875918][T14482] veth1_macvtap: entered promiscuous mode [ 380.940376][T14482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.966816][T14482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.010391][T14482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.045919][T14482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.065644][T14482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.099755][T14482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.252246][T14719] netlink: 'syz.0.2472': attribute type 1 has an invalid length. [ 381.355168][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.389636][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.522194][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.552321][T14734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2475'. [ 381.572432][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.768819][ T5839] Bluetooth: hci4: command tx timeout [ 381.910760][T14750] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 382.006081][T14753] tipc: Started in network mode [ 382.015884][T14753] tipc: Node identity 4, cluster identity 4711 [ 382.032301][T14753] tipc: Node number set to 4 [ 382.075703][T14756] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2480'. [ 382.266827][T14767] netlink: 'syz.0.2485': attribute type 1 has an invalid length. [ 382.290833][T14767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2485'. [ 382.418169][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.655976][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.747959][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.945280][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.058048][ T12] bridge_slave_1: left allmulticast mode [ 383.064071][ T12] bridge_slave_1: left promiscuous mode [ 383.070257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.080940][ T12] bridge_slave_0: left allmulticast mode [ 383.086747][ T12] bridge_slave_0: left promiscuous mode [ 383.093296][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.453670][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.465103][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.476535][ T12] bond0 (unregistering): Released all slaves [ 383.732068][ T12] hsr_slave_0: left promiscuous mode [ 383.738309][ T12] hsr_slave_1: left promiscuous mode [ 383.744627][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.755196][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.766627][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.775619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.798070][ T12] veth1_macvtap: left promiscuous mode [ 383.803977][ T12] veth0_macvtap: left promiscuous mode [ 383.809795][ T12] veth1_vlan: left promiscuous mode [ 383.815833][ T12] veth0_vlan: left promiscuous mode [ 384.531330][ T12] team0 (unregistering): Port device team_slave_1 removed [ 384.542512][T14793] FAULT_INJECTION: forcing a failure. [ 384.542512][T14793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.574092][T14793] CPU: 0 UID: 0 PID: 14793 Comm: syz.4.2492 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 384.574123][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.574138][T14793] Call Trace: [ 384.574146][T14793] [ 384.574155][T14793] dump_stack_lvl+0x189/0x250 [ 384.574191][T14793] ? __lock_acquire+0xaac/0xd20 [ 384.574227][T14793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.574259][T14793] ? __pfx__printk+0x10/0x10 [ 384.574280][T14793] ? __might_fault+0xb0/0x130 [ 384.574322][T14793] should_fail_ex+0x414/0x560 [ 384.574350][T14793] _copy_from_iter+0x1db/0x15a0 [ 384.574387][T14793] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 384.574412][T14793] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 384.574442][T14793] ? __pfx__copy_from_iter+0x10/0x10 [ 384.574472][T14793] ? __build_skb_around+0x257/0x3e0 [ 384.574504][T14793] ? netlink_sendmsg+0x642/0xb30 [ 384.574528][T14793] ? skb_put+0x11b/0x210 [ 384.574560][T14793] netlink_sendmsg+0x6b2/0xb30 [ 384.574597][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.574626][T14793] ? aa_sock_msg_perm+0x94/0x160 [ 384.574654][T14793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.574678][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.574705][T14793] __sock_sendmsg+0x219/0x270 [ 384.574732][T14793] ____sys_sendmsg+0x505/0x830 [ 384.574769][T14793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.574809][T14793] ? import_iovec+0x74/0xa0 [ 384.574844][T14793] ___sys_sendmsg+0x21f/0x2a0 [ 384.574877][T14793] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.574948][T14793] ? __fget_files+0x2a/0x420 [ 384.574984][T14793] ? __fget_files+0x3a0/0x420 [ 384.575025][T14793] __x64_sys_sendmsg+0x19b/0x260 [ 384.575058][T14793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.575107][T14793] ? do_syscall_64+0xba/0x210 [ 384.575141][T14793] do_syscall_64+0xf6/0x210 [ 384.575171][T14793] ? clear_bhb_loop+0x60/0xb0 [ 384.575198][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.575217][T14793] RIP: 0033:0x7fa5c298e969 [ 384.575235][T14793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.575254][T14793] RSP: 002b:00007fa5c375f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.575277][T14793] RAX: ffffffffffffffda RBX: 00007fa5c2bb5fa0 RCX: 00007fa5c298e969 [ 384.575292][T14793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 384.575306][T14793] RBP: 00007fa5c375f090 R08: 0000000000000000 R09: 0000000000000000 [ 384.575318][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.575331][T14793] R13: 0000000000000000 R14: 00007fa5c2bb5fa0 R15: 00007ffc0e617778 [ 384.575364][T14793] [ 384.969773][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2493'. [ 385.004140][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.015023][ T12] team0 (unregistering): Port device team_slave_0 removed [ 385.015423][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.039732][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.052777][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.060919][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.548875][T14794] netem: unknown loss type 0 [ 385.557454][T14794] netem: change failed [ 385.994521][T14810] tipc: Enabling of bearer rejected, failed to enable media [ 386.215803][T14799] chnl_net:caif_netlink_parms(): no params data found [ 386.405250][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 386.484513][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 386.645865][T14840] FAULT_INJECTION: forcing a failure. [ 386.645865][T14840] name failslab, interval 1, probability 0, space 0, times 0 [ 386.660886][T14840] CPU: 0 UID: 0 PID: 14840 Comm: syz.2.2503 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 386.660918][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.660932][T14840] Call Trace: [ 386.660941][T14840] [ 386.660950][T14840] dump_stack_lvl+0x189/0x250 [ 386.660991][T14840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.661022][T14840] ? __pfx__printk+0x10/0x10 [ 386.661051][T14840] ? __pfx___might_resched+0x10/0x10 [ 386.661072][T14840] ? fs_reclaim_acquire+0x7d/0x100 [ 386.661111][T14840] should_fail_ex+0x414/0x560 [ 386.661140][T14840] should_failslab+0xa8/0x100 [ 386.661172][T14840] __kmalloc_cache_noprof+0x70/0x3d0 [ 386.661206][T14840] ? rtnl_newlink+0xed/0x1c70 [ 386.661237][T14840] rtnl_newlink+0xed/0x1c70 [ 386.661275][T14840] ? __pfx_rtnl_newlink+0x10/0x10 [ 386.661303][T14840] ? is_bpf_text_address+0x26/0x2b0 [ 386.661341][T14840] ? is_bpf_text_address+0x292/0x2b0 [ 386.661377][T14840] ? __lock_acquire+0xaac/0xd20 [ 386.661422][T14840] ? __lock_acquire+0xaac/0xd20 [ 386.661474][T14840] ? is_bpf_text_address+0x26/0x2b0 [ 386.661511][T14840] ? is_bpf_text_address+0x292/0x2b0 [ 386.661541][T14840] ? is_bpf_text_address+0x26/0x2b0 [ 386.661580][T14840] ? aa_get_newest_label+0xf7/0x5d0 [ 386.661609][T14840] ? __lock_acquire+0xaac/0xd20 [ 386.661666][T14840] ? __pfx_rtnl_newlink+0x10/0x10 [ 386.661690][T14840] rtnetlink_rcv_msg+0x7cf/0xb70 [ 386.661714][T14840] ? kasan_save_track+0x4f/0x80 [ 386.661741][T14840] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 386.661773][T14840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.661799][T14840] ? __lock_acquire+0xaac/0xd20 [ 386.661844][T14840] netlink_rcv_skb+0x219/0x490 [ 386.661870][T14840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.661897][T14840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.661944][T14840] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.661970][T14840] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.662001][T14840] netlink_unicast+0x75b/0x8d0 [ 386.662036][T14840] netlink_sendmsg+0x805/0xb30 [ 386.662073][T14840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.662103][T14840] ? aa_sock_msg_perm+0x94/0x160 [ 386.662131][T14840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.662155][T14840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.662183][T14840] __sock_sendmsg+0x219/0x270 [ 386.662210][T14840] ____sys_sendmsg+0x505/0x830 [ 386.662246][T14840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.662288][T14840] ? import_iovec+0x74/0xa0 [ 386.662323][T14840] ___sys_sendmsg+0x21f/0x2a0 [ 386.662356][T14840] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.662428][T14840] ? __fget_files+0x2a/0x420 [ 386.662466][T14840] ? __fget_files+0x3a0/0x420 [ 386.662506][T14840] __x64_sys_sendmsg+0x19b/0x260 [ 386.662540][T14840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.662590][T14840] ? do_syscall_64+0xba/0x210 [ 386.662623][T14840] do_syscall_64+0xf6/0x210 [ 386.662652][T14840] ? clear_bhb_loop+0x60/0xb0 [ 386.662677][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.662696][T14840] RIP: 0033:0x7fc1fd18e969 [ 386.662716][T14840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.662735][T14840] RSP: 002b:00007fc1fdf87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.662766][T14840] RAX: ffffffffffffffda RBX: 00007fc1fd3b5fa0 RCX: 00007fc1fd18e969 [ 386.662782][T14840] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 386.662795][T14840] RBP: 00007fc1fdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 386.662808][T14840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.662821][T14840] R13: 0000000000000000 R14: 00007fc1fd3b5fa0 R15: 00007ffc985d9b88 [ 386.662854][T14840] [ 387.129214][ T5839] Bluetooth: hci4: command tx timeout [ 387.161577][T14799] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.185522][T14799] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.194767][T14799] bridge_slave_0: entered allmulticast mode [ 387.203506][T14799] bridge_slave_0: entered promiscuous mode [ 387.212876][T14799] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.221941][T14799] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.229924][T14799] bridge_slave_1: entered allmulticast mode [ 387.238244][T14799] bridge_slave_1: entered promiscuous mode [ 387.381715][T14799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.400333][T14799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.415608][T14851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2508'. [ 387.433650][T14852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'. [ 387.443373][T14848] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.471098][T14854] netlink: 'syz.3.2510': attribute type 21 has an invalid length. [ 387.491191][T14854] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.653545][T14863] raw_sendmsg: syz.4.2512 forgot to set AF_INET. Fix it! [ 387.706237][T14799] team0: Port device team_slave_0 added [ 387.771186][T14799] team0: Port device team_slave_1 added [ 387.912079][T14875] veth1_to_batadv: entered promiscuous mode [ 387.940609][T14875] bridge0: port 3(macsec1) entered blocking state [ 387.947329][T14875] bridge0: port 3(macsec1) entered disabled state [ 387.979803][T14875] macsec1: entered allmulticast mode [ 387.992904][T14875] veth1_to_batadv: entered allmulticast mode [ 388.004699][T14875] macsec1: entered promiscuous mode [ 388.016609][T14875] bridge0: port 3(macsec1) entered blocking state [ 388.023851][T14875] bridge0: port 3(macsec1) entered forwarding state [ 388.112881][T14799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.135397][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.189005][T14799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.216594][T14871] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2515'. [ 388.265387][T14799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.283308][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.325099][T14799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.389371][T14901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2521'. [ 388.450510][T14799] hsr_slave_0: entered promiscuous mode [ 388.461989][T14799] hsr_slave_1: entered promiscuous mode [ 388.484551][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 388.582711][T14905] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.591940][T14905] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.600895][T14905] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.609660][T14905] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.802183][T14913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2524'. [ 388.841986][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 389.215522][ T5839] Bluetooth: hci4: command tx timeout [ 389.498418][T14799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.625530][T14799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.718927][T14799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.774305][T14799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.946362][T14957] xt_HMARK: proto mask must be zero with L3 mode [ 390.134729][T14799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.203696][T14799] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.230597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.237853][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.262684][T14967] __nla_validate_parse: 5 callbacks suppressed [ 390.262707][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2544'. [ 390.285982][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.293217][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.678001][T14978] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002 [ 390.970013][T14799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.060634][T14995] xt_CT: No such helper "pptp" [ 391.181691][T14799] veth0_vlan: entered promiscuous mode [ 391.244127][T14799] veth1_vlan: entered promiscuous mode [ 391.291726][ T5839] Bluetooth: hci4: command tx timeout [ 391.361290][T14799] veth0_macvtap: entered promiscuous mode [ 391.388201][T14799] veth1_macvtap: entered promiscuous mode [ 391.412217][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2556'. [ 391.433431][T15011] netlink: 'syz.2.2556': attribute type 5 has an invalid length. [ 391.457390][T14799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.467296][T15011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2556'. [ 391.475781][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 391.484861][T15017] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2558'. [ 391.509495][T14799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.518338][T15020] netlink: 'syz.4.2557': attribute type 2 has an invalid length. [ 391.527461][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2557'. [ 391.579452][T15011] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 391.587838][T15011] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 391.599712][T15011] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 391.618422][T15011] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 391.642986][T15011] geneve4: entered promiscuous mode [ 391.662325][T15011] geneve4: entered allmulticast mode [ 391.731819][T14799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.746452][T14799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.757442][T14799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.770774][T14799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.999239][T15027] syzkaller0: entered promiscuous mode [ 392.005547][T15027] syzkaller0: entered allmulticast mode [ 392.072661][T15042] xt_cgroup: invalid path, errno=-2 [ 392.193995][T15048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2566'. [ 393.368769][ T5839] Bluetooth: hci4: command tx timeout [ 393.847884][T15048] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 393.852406][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 393.872098][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 394.105111][T15053] netlink: 'syz.2.2568': attribute type 8 has an invalid length. [ 394.124758][T10095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.153772][T10095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.154378][T15058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2570'. [ 394.483490][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.533736][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.801667][T15079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2575'. [ 394.859210][T15080] openvswitch: netlink: Message has 4 unknown bytes. [ 394.914544][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 394.964091][T15084] vlan2: entered allmulticast mode [ 394.984307][T15084] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 395.094630][ T1161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.340056][ T1161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.395522][ T1161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.451199][ T1161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.554664][ T1161] bridge_slave_1: left allmulticast mode [ 395.560912][ T1161] bridge_slave_1: left promiscuous mode [ 395.566909][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.576617][ T1161] bridge_slave_0: left allmulticast mode [ 395.583425][ T1161] bridge_slave_0: left promiscuous mode [ 395.590175][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.974465][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.985988][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.000710][ T1161] bond0 (unregistering): Released all slaves [ 396.249994][ T1161] hsr_slave_0: left promiscuous mode [ 396.256235][ T1161] hsr_slave_1: left promiscuous mode [ 396.264875][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.272874][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.284474][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.292574][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.321259][ T1161] veth1_macvtap: left promiscuous mode [ 396.327416][ T1161] veth0_macvtap: left promiscuous mode [ 396.333770][ T1161] veth1_vlan: left promiscuous mode [ 396.340814][ T1161] veth0_vlan: left promiscuous mode [ 396.857081][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 396.908923][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 397.059116][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2584'. [ 397.527234][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.554384][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.565220][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.580314][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.593574][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.345228][T15103] chnl_net:caif_netlink_parms(): no params data found [ 398.553648][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.563140][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.571292][T15103] bridge_slave_0: entered allmulticast mode [ 398.581350][T15103] bridge_slave_0: entered promiscuous mode [ 398.591246][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.598747][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.606115][T15103] bridge_slave_1: entered allmulticast mode [ 398.620940][T15103] bridge_slave_1: entered promiscuous mode [ 398.714033][T15103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.741321][T15103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.766934][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2596'. [ 398.800701][T15149] dvmrp0: entered allmulticast mode [ 398.843441][T15103] team0: Port device team_slave_0 added [ 398.893404][T15103] team0: Port device team_slave_1 added [ 398.960891][T15103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.969390][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.997187][T15103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.008074][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 399.043861][T15103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.052076][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.097763][T15103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.135818][T15154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2597'. [ 399.217397][T15103] hsr_slave_0: entered promiscuous mode [ 399.227360][T15103] hsr_slave_1: entered promiscuous mode [ 399.540173][T15177] netlink: 'syz.2.2602': attribute type 1 has an invalid length. [ 399.673304][T15187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2607'. [ 399.689255][ T5141] Bluetooth: hci4: command tx timeout [ 399.692345][T15177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.747448][T15181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.760687][T15181] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 399.773717][T15181] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 399.872319][T15177] erspan0: entered allmulticast mode [ 399.894838][T15177] bond8: (slave erspan0): making interface the new active one [ 399.922654][T15177] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 400.053326][T15201] batman_adv: batadv0: Adding interface: gretap1 [ 400.060146][T15201] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 400.070805][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 400.319631][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'. [ 400.337798][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2617'. [ 400.352744][T15216] netlink: 'syz.2.2617': attribute type 14 has an invalid length. [ 400.632840][T15231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2622'. [ 400.653689][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 400.700746][T15233] 8021q: adding VLAN 0 to HW filter on device bond8 [ 400.768735][T15233] netlink: 'syz.3.2623': attribute type 3 has an invalid length. [ 400.838429][T15103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.870553][T15103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.911635][T15246] netlink: 'syz.2.2626': attribute type 21 has an invalid length. [ 400.914548][T15103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.949441][T15103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.271458][T15237] infiniband syz2: set active [ 401.276737][T15237] infiniband syz2: added team_slave_0 [ 401.348397][T15237] RDS/IB: syz2: added [ 401.354039][T15237] smc: adding ib device syz2 with port count 1 [ 401.360988][T15237] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 401.474327][T15103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.577870][T15103] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.602469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.609932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.669301][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.676552][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.769476][ T5141] Bluetooth: hci4: command tx timeout [ 401.803268][T15273] FAULT_INJECTION: forcing a failure. [ 401.803268][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 401.850778][T15273] CPU: 0 UID: 0 PID: 15273 Comm: syz.4.2636 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 401.850809][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.850823][T15273] Call Trace: [ 401.850832][T15273] [ 401.850841][T15273] dump_stack_lvl+0x189/0x250 [ 401.850880][T15273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.850912][T15273] ? __pfx__printk+0x10/0x10 [ 401.850941][T15273] ? __pfx___might_resched+0x10/0x10 [ 401.850960][T15273] ? fs_reclaim_acquire+0x7d/0x100 [ 401.850999][T15273] should_fail_ex+0x414/0x560 [ 401.851028][T15273] should_failslab+0xa8/0x100 [ 401.851059][T15273] __kmalloc_noprof+0xcb/0x4f0 [ 401.851084][T15273] ? kfree+0x4d/0x440 [ 401.851107][T15273] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 401.851141][T15273] tomoyo_realpath_from_path+0xe3/0x5d0 [ 401.851170][T15273] ? tomoyo_domain+0xda/0x130 [ 401.851205][T15273] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 401.851227][T15273] tomoyo_path_number_perm+0x1e8/0x5a0 [ 401.851252][T15273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.851294][T15273] ? __lock_acquire+0xaac/0xd20 [ 401.851348][T15273] ? __fget_files+0x2a/0x420 [ 401.851382][T15273] ? __fget_files+0x3a0/0x420 [ 401.851409][T15273] ? __fget_files+0x2a/0x420 [ 401.851442][T15273] security_file_ioctl+0xcb/0x2d0 [ 401.851479][T15273] __se_sys_ioctl+0x47/0x170 [ 401.851513][T15273] do_syscall_64+0xf6/0x210 [ 401.851543][T15273] ? clear_bhb_loop+0x60/0xb0 [ 401.851569][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.851589][T15273] RIP: 0033:0x7fa5c298e969 [ 401.851608][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.851626][T15273] RSP: 002b:00007fa5c375f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.851649][T15273] RAX: ffffffffffffffda RBX: 00007fa5c2bb5fa0 RCX: 00007fa5c298e969 [ 401.851664][T15273] RDX: 0000200000000080 RSI: 0000000040047440 RDI: 0000000000000003 [ 401.851678][T15273] RBP: 00007fa5c375f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.851690][T15273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.851703][T15273] R13: 0000000000000000 R14: 00007fa5c2bb5fa0 R15: 00007ffc0e617778 [ 401.851738][T15273] [ 401.852828][T15273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.913070][T15103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.530193][T15103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.544261][T15291] __nla_validate_parse: 3 callbacks suppressed [ 402.544283][T15291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2641'. [ 402.598211][T15291] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.654362][T15103] veth0_vlan: entered promiscuous mode [ 402.694970][T15103] veth1_vlan: entered promiscuous mode [ 402.736163][T15296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2643'. [ 402.749217][T15296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2643'. [ 402.805515][T15103] veth0_macvtap: entered promiscuous mode [ 402.842235][T15103] veth1_macvtap: entered promiscuous mode [ 402.943852][T15103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.991636][T15103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.023585][T15103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.037080][T15302] netlink: 'syz.2.2645': attribute type 39 has an invalid length. [ 403.058675][T15103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.075310][T15103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.085686][T15103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.427679][T10095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.442942][T10095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.532320][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.550506][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.833308][T15320] blkio.reset_stats is deprecated [ 403.849299][ T5839] Bluetooth: hci4: command tx timeout [ 403.986218][T15328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 404.010387][T15330] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2654'. [ 404.020515][T15330] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2654'. [ 404.094004][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 404.324620][T15335] x_tables: duplicate underflow at hook 1 [ 405.013496][T15350] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 405.021731][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2659'. [ 405.093667][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 405.197550][T15354] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2660'. [ 406.001856][T15389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 406.013543][T15386] netlink: 'syz.0.2670': attribute type 13 has an invalid length. [ 406.073889][T15396] RDS: rds_bind could not find a transport for ::ffff:10.1.0.254, load rds_tcp or rds_rdma? [ 406.408256][T15414] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 406.964778][T15445] openvswitch: netlink: Message has 5 unknown bytes. [ 406.977295][T15446] ip6t_rpfilter: unknown options [ 407.107016][T15450] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 407.433606][T15470] tipc: Enabled bearer , priority 0 [ 407.442585][T15470] syzkaller0: entered promiscuous mode [ 407.449705][T15470] syzkaller0: entered allmulticast mode [ 407.521251][T15475] tipc: Resetting bearer [ 407.580573][T15469] tipc: Resetting bearer [ 407.624378][T15469] tipc: Disabling bearer [ 407.939206][T15502] __nla_validate_parse: 6 callbacks suppressed [ 407.939229][T15502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2703'. [ 407.954807][T15503] x_tables: duplicate underflow at hook 3 [ 408.124813][T15512] GUP no longer grows the stack in syz.0.2706 (15512): 200000006000-20000000a000 (200000005000) [ 408.136089][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.0.2706 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 408.136132][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.136148][T15512] Call Trace: [ 408.136160][T15512] [ 408.136172][T15512] dump_stack_lvl+0x189/0x250 [ 408.136216][T15512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.136250][T15512] ? __pfx__printk+0x10/0x10 [ 408.136271][T15512] ? find_vma+0xe7/0x160 [ 408.136320][T15512] __get_user_pages+0x24e4/0x2a40 [ 408.136392][T15512] ? __pfx___get_user_pages+0x10/0x10 [ 408.136421][T15512] ? __gup_longterm_locked+0xbf7/0x15b0 [ 408.136453][T15512] ? down_read_killable+0x1d1/0x350 [ 408.136486][T15512] ? try_get_folio+0x633/0x660 [ 408.136522][T15512] __gup_longterm_locked+0xd66/0x15b0 [ 408.136558][T15512] ? try_grab_folio_fast+0x19a/0x4d0 [ 408.136603][T15512] ? gup_fast_fallback+0x1672/0x1d60 [ 408.136639][T15512] gup_fast_fallback+0x1843/0x1d60 [ 408.136715][T15512] ? __pfx_gup_fast_fallback+0x10/0x10 [ 408.136742][T15512] ? __mutex_lock+0x330/0xe80 [ 408.136780][T15512] ? is_valid_gup_args+0x11f/0x200 [ 408.136812][T15512] ? get_user_pages_fast+0x4d/0xb0 [ 408.136845][T15512] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 408.136891][T15512] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 408.136929][T15512] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 408.136955][T15512] ? wait_for_space+0x24d/0x2d0 [ 408.136990][T15512] iov_iter_get_pages2+0x5e/0xa0 [ 408.137030][T15512] __se_sys_vmsplice+0x548/0x10e0 [ 408.137087][T15512] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 408.137124][T15512] ? __pfx_futex_wake+0x10/0x10 [ 408.137166][T15512] ? __lock_acquire+0xaac/0xd20 [ 408.137261][T15512] ? rcu_is_watching+0x15/0xb0 [ 408.137296][T15512] ? do_syscall_64+0xba/0x210 [ 408.137333][T15512] do_syscall_64+0xf6/0x210 [ 408.137367][T15512] ? clear_bhb_loop+0x60/0xb0 [ 408.137397][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.137420][T15512] RIP: 0033:0x7fc4cb18e969 [ 408.137453][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.137473][T15512] RSP: 002b:00007fc4cbf35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 408.137514][T15512] RAX: ffffffffffffffda RBX: 00007fc4cb3b5fa0 RCX: 00007fc4cb18e969 [ 408.137531][T15512] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 408.137546][T15512] RBP: 00007fc4cb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 408.137560][T15512] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 408.137573][T15512] R13: 0000000000000000 R14: 00007fc4cb3b5fa0 R15: 00007ffcf8f24458 [ 408.137611][T15512] [ 408.434366][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 408.443643][T15512] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 408.451649][T15512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.895791][T15538] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 408.967288][T15539] ip6t_rpfilter: unknown options [ 409.116177][T15547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2721'. [ 410.267277][T15592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2732'. [ 410.325132][T15594] netlink: 'syz.0.2733': attribute type 14 has an invalid length. [ 410.509613][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 410.542252][T15601] netlink: 'syz.2.2736': attribute type 30 has an invalid length. [ 410.578460][T15607] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 410.603559][T15607] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2734'. [ 410.625018][T15608] x_tables: duplicate underflow at hook 1 [ 410.673070][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 410.684853][T15601] netlink: 'syz.2.2736': attribute type 30 has an invalid length. [ 410.818492][T15618] xt_HMARK: proto mask must be zero with L3 mode [ 411.336691][T15642] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 411.419036][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 411.644040][ T8266] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.919042][ T8266] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.101007][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'. [ 412.198968][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2755'. [ 412.760909][T15718] IPv6: sit2: Disabled Multicast RS [ 412.767640][T15718] sit2: entered allmulticast mode [ 413.020525][T15728] __nla_validate_parse: 2 callbacks suppressed [ 413.020680][T15728] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2764'. [ 413.216754][T15736] netlink: 'syz.0.2767': attribute type 13 has an invalid length. [ 413.225722][T15736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2767'. [ 413.237177][T15736] No such timeout policy "syz0" [ 413.659074][T15752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2774'. [ 413.766656][T15755] netlink: 'syz.4.2776': attribute type 39 has an invalid length. [ 414.441526][T15799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.541955][T15808] netlink: 'syz.2.2791': attribute type 4 has an invalid length. [ 414.579259][T15808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2791'. [ 414.663763][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.674985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.865590][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 415.109738][T15832] x_tables: duplicate underflow at hook 1 [ 415.368213][T15849] pimreg: left allmulticast mode [ 415.374319][T15844] sctp: [Deprecated]: syz.0.2804 (pid 15844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.374319][T15844] Use struct sctp_sack_info instead [ 415.452069][T15852] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 415.956998][T15880] netlink: 'syz.4.2813': attribute type 11 has an invalid length. [ 415.966524][T15880] netlink: 'syz.4.2813': attribute type 11 has an invalid length. [ 415.980161][T15880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2813'. [ 416.044009][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2813'. [ 416.078344][T15886] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 416.113906][T15886] netlink: 'syz.4.2813': attribute type 24 has an invalid length. [ 416.196761][T15889] netlink: 'syz.2.2815': attribute type 21 has an invalid length. [ 416.206964][T15889] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2815'. [ 416.736018][T15897] macvlan4: entered promiscuous mode [ 416.904038][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 416.916269][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 417.111931][T15915] openvswitch: netlink: Missing key (keys=40, expected=80) [ 417.473411][T15934] netlink: 'syz.4.2827': attribute type 1 has an invalid length. [ 418.613667][T15996] xt_policy: neither incoming nor outgoing policy selected [ 418.904302][T16007] __nla_validate_parse: 5 callbacks suppressed [ 418.904324][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 419.005910][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2854'. [ 419.039201][T16012] tipc: Trying to set illegal importance in message [ 420.275345][T16037] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 420.455597][T16042] bond9: entered promiscuous mode [ 420.465070][T16042] bond9: entered allmulticast mode [ 420.475671][T16046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2867'. [ 420.486570][T16042] 8021q: adding VLAN 0 to HW filter on device bond9 [ 420.801441][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2874'. [ 421.086098][T16079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2877'. [ 421.098227][T16079] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2877'. [ 421.112601][T16079] netlink: 'syz.2.2877': attribute type 6 has an invalid length. [ 421.138665][T16079] netlink: 'syz.2.2877': attribute type 5 has an invalid length. [ 421.146630][T16079] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2877'. [ 421.345126][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2880'. [ 421.453158][T16096] dvmrp0: left allmulticast mode [ 421.512832][T16098] netlink: 'syz.4.2882': attribute type 23 has an invalid length. [ 421.628143][T16100] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2883'. [ 421.752907][T16107] sctp: [Deprecated]: syz.2.2884 (pid 16107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.752907][T16107] Use struct sctp_sack_info instead [ 421.957635][T16121] xt_ipcomp: unknown flags B [ 422.177548][T16131] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2892'. [ 423.482921][T16156] veth0_to_bridge: entered promiscuous mode [ 423.518222][T16155] veth0_to_bridge: left promiscuous mode [ 423.903248][T16171] xt_ipcomp: unknown flags B [ 423.928667][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.935959][ C0] bridge0: topology change detected, propagating [ 423.944218][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.952267][ C0] bridge0: topology change detected, propagating [ 424.126161][T16184] netlink: 'syz.4.2912': attribute type 1 has an invalid length. [ 424.188417][T16189] __nla_validate_parse: 4 callbacks suppressed [ 424.188437][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'. [ 424.212108][T16189] bond11: entered allmulticast mode [ 424.218007][T16189] 8021q: adding VLAN 0 to HW filter on device bond11 [ 424.303067][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2912'. [ 424.344121][T16193] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 424.379673][T16193] team0: Device macvtap0 is already an upper device of the team interface [ 424.502610][T16198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2916'. [ 424.517177][T16198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2916'. [ 424.622812][T16203] vlan1: entered promiscuous mode [ 424.647856][ T8265] IPVS: starting estimator thread 0... [ 424.686741][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'. [ 424.740838][T16209] IPVS: using max 28 ests per chain, 67200 per kthread [ 424.917959][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 424.936721][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 425.170972][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2930'. [ 425.182001][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2930'. [ 425.412137][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2931'. [ 426.438217][T16288] openvswitch: netlink: Missing key (keys=40, expected=100) [ 426.557107][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.076489][T16324] nbd: must specify at least one socket [ 427.194367][T16327] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.233779][T16327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.390311][T16338] dvmrp0: entered allmulticast mode [ 427.449179][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.521320][T16347] netlink: 'syz.2.2967': attribute type 1 has an invalid length. [ 428.114220][T16368] batadv0: entered promiscuous mode [ 428.143731][T16368] team0: entered promiscuous mode [ 428.162252][T16368] team_slave_0: entered promiscuous mode [ 428.182335][T16368] team_slave_1: entered promiscuous mode [ 428.203118][T16368] geneve0: entered promiscuous mode [ 428.226894][T16368] hsr1: entered promiscuous mode [ 428.265623][T16368] hsr1: entered allmulticast mode [ 428.286283][T16368] batadv0: entered allmulticast mode [ 428.301348][T16368] team0: entered allmulticast mode [ 428.316941][T16368] team_slave_0: entered allmulticast mode [ 428.337670][T16368] team_slave_1: entered allmulticast mode [ 428.347634][T16368] geneve0: entered allmulticast mode [ 428.493481][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.677872][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.870510][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.968081][T16374] vlan2: entered allmulticast mode [ 428.989426][T16374] bond0: entered allmulticast mode [ 428.994682][T16374] @: entered allmulticast mode [ 429.008693][T16374] bond_slave_1: entered allmulticast mode [ 429.021055][T16374] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 429.038963][T16374] bond5: entered allmulticast mode [ 429.090167][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.327922][ T52] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/1 [ 429.348978][ T52] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22 [ 429.493225][ T1142] macsec4: left allmulticast mode [ 429.513615][ T1142] bridge8: left allmulticast mode [ 429.526362][ T1142] macsec4: left promiscuous mode [ 429.544653][ T1142] bridge8: left promiscuous mode [ 429.555108][ T1142] bridge0: port 1(macsec4) entered disabled state [ 429.581186][ T1142] tipc: Resetting bearer [ 429.615080][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.629577][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.639310][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.649414][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.659706][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.685043][T16414] __nla_validate_parse: 9 callbacks suppressed [ 429.685064][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2985'. [ 431.004008][ T1142] tipc: Disabling bearer [ 431.058897][ T1142] bond3 (unregistering): (slave gretap1): Releasing active interface [ 431.095323][ T1142] bond6 (unregistering): (slave gretap3): Releasing active interface [ 431.223952][ T1142] team0: Port device geneve0 removed [ 431.688973][ T5839] Bluetooth: hci0: command tx timeout [ 431.852991][ T1142] bond1 (unregistering): Released all slaves [ 431.974364][ T1142] bond2 (unregistering): Released all slaves [ 431.990508][ T1142] bond3 (unregistering): Released all slaves [ 432.005774][ T1142] bond4 (unregistering): Released all slaves [ 432.135109][ T1142] bond5 (unregistering): (slave veth3): Releasing active interface [ 432.148071][ T1142] bond5 (unregistering): Released all slaves [ 432.166825][ T1142] bond6 (unregistering): Released all slaves [ 432.294481][ T1142] bond7 (unregistering): Released all slaves [ 432.308660][ T1142] bond0 (unregistering): Released all slaves [ 432.424185][ T1142] bond8 (unregistering): Released all slaves [ 432.438330][ T1142] bond9 (unregistering): Released all slaves [ 432.455409][ T1142] bond10 (unregistering): Released all slaves [ 432.482145][T16414] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 432.496173][T16420] netlink: 'syz.0.2985': attribute type 21 has an invalid length. [ 432.876581][T16444] netlink: 'syz.4.2989': attribute type 1 has an invalid length. [ 432.885460][T16444] netlink: 'syz.4.2989': attribute type 1 has an invalid length. [ 433.230494][T16457] syzkaller1: entered promiscuous mode [ 433.243131][T16457] syzkaller1: entered allmulticast mode [ 433.262556][T16459] openvswitch: netlink: Key type 272 is out of range max 32 [ 433.504346][T16469] syz_tun: entered promiscuous mode [ 433.515266][T16469] vlan3: entered promiscuous mode [ 433.601421][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'. [ 433.632755][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 433.737038][T16408] chnl_net:caif_netlink_parms(): no params data found [ 433.768927][ T5839] Bluetooth: hci0: command tx timeout [ 433.832039][T16492] netlink: 'syz.2.3003': attribute type 18 has an invalid length. [ 433.874531][T16408] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.882109][T16408] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.890679][T16408] bridge_slave_0: entered allmulticast mode [ 433.899866][T16408] bridge_slave_0: entered promiscuous mode [ 433.911563][T16408] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.919201][T16408] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.926519][T16408] bridge_slave_1: entered allmulticast mode [ 433.936267][T16408] bridge_slave_1: entered promiscuous mode [ 433.982837][T16408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.003327][T16408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.059457][T16408] team0: Port device team_slave_0 added [ 434.070835][T16408] team0: Port device team_slave_1 added [ 434.119704][T16408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.126789][T16408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.153962][T16408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.168133][T16408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.176005][T16408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.203171][T16408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.272269][ T1142] : left promiscuous mode [ 434.325075][T16408] hsr_slave_0: entered promiscuous mode [ 434.360000][T16408] hsr_slave_1: entered promiscuous mode [ 434.366455][T16408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.395695][T16408] Cannot create hsr debugfs directory [ 434.403787][ T1142] tipc: Disabling bearer [ 434.410900][ T1142] tipc: Left network mode [ 434.488252][T16511] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 434.509786][T16512] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 434.661188][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.667624][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.674448][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.680817][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.687272][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.723782][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.733866][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.742785][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.778699][T16519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 435.749288][T16563] bridge0: port 1(veth0_to_bridge) entered blocking state [ 435.756689][T16563] bridge0: port 1(veth0_to_bridge) entered disabled state [ 435.784412][T16563] veth0_to_bridge: entered allmulticast mode [ 435.815098][T16563] veth0_to_bridge: entered promiscuous mode [ 435.849250][ T5839] Bluetooth: hci0: command tx timeout [ 436.020802][ T1142] hsr_slave_0: left promiscuous mode [ 436.033475][ T1142] hsr_slave_1: left promiscuous mode [ 436.056788][ T1142] veth1_macvtap: left promiscuous mode [ 436.064943][ T1142] veth0_macvtap: left promiscuous mode [ 436.073314][ T1142] veth1_vlan: left promiscuous mode [ 436.797341][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 436.849230][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 436.860040][T16560] smc: removing ib device syz2 [ 437.308913][T16574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3023'. [ 437.524869][T16408] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 437.590838][T16408] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 437.662862][T16408] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 437.715453][T16408] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 437.776908][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 437.928703][ T5839] Bluetooth: hci0: command tx timeout [ 438.029741][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3030'. [ 438.087721][T16602] netlink: 'syz.4.3030': attribute type 1 has an invalid length. [ 438.116872][T16602] netlink: 'syz.4.3030': attribute type 2 has an invalid length. [ 438.135145][T16604] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 438.152409][T16602] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3030'. [ 438.193915][T16604] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3031'. [ 438.293730][T16408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.376355][T16408] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.408115][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.415725][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.485060][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.492310][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.562093][T16610] @: renamed from bond_slave_0 (while UP) [ 438.734264][T16408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.886708][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'. [ 438.914487][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 439.111290][T16622] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3037'. [ 439.371448][T16408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.442632][T16633] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 439.542178][T16633] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 439.550103][T16633] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3040'. [ 439.566471][T16408] veth0_vlan: entered promiscuous mode [ 439.620465][T16408] veth1_vlan: entered promiscuous mode [ 439.761917][T16408] veth0_macvtap: entered promiscuous mode [ 439.817565][T16641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3042'. [ 439.834467][T16408] veth1_macvtap: entered promiscuous mode [ 440.122458][T16408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.224973][ T1142] IPVS: stop unused estimator thread 0... [ 440.231019][T16408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.254391][T16408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.273785][T16408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.299049][T16408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.320306][T16408] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.392332][T16649] syzkaller0: entered promiscuous mode [ 440.397974][T16649] syzkaller0: entered allmulticast mode [ 440.546908][T16658] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 440.620346][T16661] siw: device registration error -23 [ 440.636168][T16662] bond12: (slave vcan0): The slave device specified does not support setting the MAC address [ 440.657029][T16663] siw: device registration error -23 [ 440.673313][T16662] bond12: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 440.691622][T16662] bond12: (slave vcan0): making interface the new active one [ 440.700954][T16662] bond12: (slave vcan0): Enslaving as an active interface with an up link [ 440.733171][T16658] 8021q: adding VLAN 0 to HW filter on device bond12 [ 440.850302][T10095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.880300][T10095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.926313][T16672] syzkaller0: entered promiscuous mode [ 440.932332][T16672] syzkaller0: entered allmulticast mode [ 442.724078][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.756392][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.843939][T16682] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 442.885816][T16682] __nla_validate_parse: 4 callbacks suppressed [ 442.885835][T16682] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3053'. [ 442.917591][T16685] openvswitch: netlink: Message has 4 unknown bytes. [ 442.944494][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 443.324197][T16698] bond13: entered promiscuous mode [ 443.333958][T16698] bond13: entered allmulticast mode [ 443.341150][T16698] 8021q: adding VLAN 0 to HW filter on device bond13 [ 443.646883][T16698] bond13 (unregistering): Released all slaves [ 443.862823][T16560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.978087][T16560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.135355][T16560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.355366][T16560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.599651][T16731] netlink: 'syz.0.3071': attribute type 21 has an invalid length. [ 444.623907][T16733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3070'. [ 444.669283][T16731] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3071'. [ 444.849145][T16560] bridge_slave_1: left allmulticast mode [ 444.874914][T16560] bridge_slave_1: left promiscuous mode [ 444.897731][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.919668][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3074'. [ 444.940537][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.952523][T16742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.965276][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.975822][T16560] bridge_slave_0: left allmulticast mode [ 444.981867][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 445.002143][T16560] bridge_slave_0: left promiscuous mode [ 445.002512][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 445.007988][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.015965][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.044922][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.064764][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.073467][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.087537][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.100695][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.497379][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.512555][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.523761][T16560] bond0 (unregistering): Released all slaves [ 445.782573][T16759] bridge3: entered promiscuous mode [ 445.788011][T16759] bridge3: entered allmulticast mode [ 446.055795][T16560] hsr_slave_0: left promiscuous mode [ 446.079281][T16560] hsr_slave_1: left promiscuous mode [ 446.085480][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.085516][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3081'. [ 446.126770][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.143366][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.157653][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.213114][T16560] veth1_macvtap: left promiscuous mode [ 446.219080][T16560] veth0_macvtap: left promiscuous mode [ 446.224738][T16560] veth1_vlan: left promiscuous mode [ 446.234684][T16560] veth0_vlan: left promiscuous mode [ 446.671010][T16781] netlink: 'syz.2.3083': attribute type 30 has an invalid length. [ 446.834407][T16560] team0 (unregistering): Port device team_slave_1 removed [ 446.878064][T16560] team0 (unregistering): Port device team_slave_0 removed [ 447.129002][ T5839] Bluetooth: hci4: command tx timeout [ 447.138105][ T5141] Bluetooth: hci0: command tx timeout [ 447.907267][T16799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3088'. [ 447.967582][T16741] chnl_net:caif_netlink_parms(): no params data found [ 448.163176][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 448.321156][T16807] 8021q: adding VLAN 0 to HW filter on device bond13 [ 448.396783][T16814] vlan5: entered allmulticast mode [ 448.403460][T16814] bond13: entered allmulticast mode [ 448.478209][T16817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3093'. [ 448.527160][T16747] chnl_net:caif_netlink_parms(): no params data found [ 448.555813][T16741] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.564706][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.589084][T16741] bridge_slave_0: entered allmulticast mode [ 448.600948][T16741] bridge_slave_0: entered promiscuous mode [ 448.619375][T16741] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.648159][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.665496][T16741] bridge_slave_1: entered allmulticast mode [ 448.680629][T16741] bridge_slave_1: entered promiscuous mode [ 448.754366][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3097'. [ 448.797049][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3097'. [ 448.825219][T16741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.862873][T16741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.061178][T16838] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 449.111068][T16741] team0: Port device team_slave_0 added [ 449.121371][T16741] team0: Port device team_slave_1 added [ 449.209068][ T5141] Bluetooth: hci4: command tx timeout [ 449.209349][ T5839] Bluetooth: hci0: command tx timeout [ 449.251791][T16560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.301572][T16836] pim6reg1: entered promiscuous mode [ 449.307842][T16836] pim6reg1: entered allmulticast mode [ 449.337554][T16741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.358631][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.400855][T16741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.419723][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.428889][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.436186][T16747] bridge_slave_0: entered allmulticast mode [ 449.444338][T16747] bridge_slave_0: entered promiscuous mode [ 449.463288][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.473321][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.473338][T16855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3102'. [ 449.480684][T16747] bridge_slave_1: entered allmulticast mode [ 449.497687][T16747] bridge_slave_1: entered promiscuous mode [ 449.524128][T16560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.574230][T16741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.582009][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.608699][T16741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.842404][T16560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.975240][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.005767][T16860] xt_CT: No such helper "pptp" [ 450.043834][T16560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.121406][T16741] hsr_slave_0: entered promiscuous mode [ 450.129241][T16741] hsr_slave_1: entered promiscuous mode [ 450.153878][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.457351][T16747] team0: Port device team_slave_0 added [ 450.518436][T16747] team0: Port device team_slave_1 added [ 450.632471][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3109'. [ 450.641915][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3109'. [ 450.735261][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.747339][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.775780][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.795275][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.806350][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.839988][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.904837][T16887] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 451.031318][T16560] bridge_slave_1: left allmulticast mode [ 451.037348][T16560] bridge_slave_1: left promiscuous mode [ 451.043815][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.065733][T16560] bridge_slave_0: left allmulticast mode [ 451.071740][T16560] bridge_slave_0: left promiscuous mode [ 451.085514][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.156587][T16901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3115'. [ 451.297785][ T5839] Bluetooth: hci0: command tx timeout [ 451.298746][ T5141] Bluetooth: hci4: command tx timeout [ 451.525570][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.543522][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.554168][T16560] bond0 (unregistering): Released all slaves [ 451.814248][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3117'. [ 451.936044][T16907] vlan5: entered allmulticast mode [ 451.959512][T16907] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 451.992168][T16747] hsr_slave_0: entered promiscuous mode [ 452.015088][T16747] hsr_slave_1: entered promiscuous mode [ 452.036413][T16747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.054865][T16747] Cannot create hsr debugfs directory [ 452.273315][T16560] hsr_slave_0: left promiscuous mode [ 452.284047][T16560] hsr_slave_1: left promiscuous mode [ 452.291497][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.307386][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.315874][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.324297][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.348875][T16560] veth1_macvtap: left promiscuous mode [ 452.354508][T16560] veth0_macvtap: left promiscuous mode [ 452.361443][T16560] veth1_vlan: left promiscuous mode [ 452.366776][T16560] veth0_vlan: left promiscuous mode [ 452.885189][T16560] team0 (unregistering): Port device team_slave_1 removed [ 452.934597][T16560] team0 (unregistering): Port device team_slave_0 removed [ 453.369071][ T5141] Bluetooth: hci0: command tx timeout [ 453.378782][ T5141] Bluetooth: hci4: command tx timeout [ 453.616603][T16940] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 453.645257][T16941] __nla_validate_parse: 5 callbacks suppressed [ 453.645277][T16941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3128'. [ 453.735160][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3129'. [ 453.820156][T16944] macsec1: left allmulticast mode [ 453.825599][T16944] veth1_to_batadv: left allmulticast mode [ 453.877397][T16944] macsec1: left promiscuous mode [ 453.885986][T16944] bridge0: port 3(macsec1) entered disabled state [ 453.900352][T16944] bridge_slave_1: left allmulticast mode [ 453.914587][T16944] bridge_slave_1: left promiscuous mode [ 453.923072][T16944] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.938239][T16944] bridge_slave_0: left allmulticast mode [ 453.944794][T16944] bridge_slave_0: left promiscuous mode [ 453.952973][T16944] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.177396][T16741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.235189][T16741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.269529][T16741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.311636][T16741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.647169][T16741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.734511][T16741] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.792449][T16747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 454.821734][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.829677][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.862741][T16747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 454.886854][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.896412][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.928010][T16747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 454.960208][T16747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 454.977832][T16989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.991245][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.007622][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.036596][T16986] netlink: 'syz.2.3142': attribute type 4 has an invalid length. [ 455.334373][T16747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.422309][T16747] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.457441][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.465057][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.473746][T17000] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3145'. [ 455.508408][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.515793][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.541052][T17002] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 455.578793][T17002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.586084][T17002] IPv6: NLM_F_CREATE should be set when creating new route [ 455.647501][T17004] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 455.669462][T17004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.780786][T17009] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3148'. [ 455.815998][T17010] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3148'. [ 455.828254][T17009] 1: renamed from c0 (while UP) [ 455.874056][T17009] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 455.902357][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 455.936120][T16741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.965173][T17010] 0: renamed from c1 (while UP) [ 455.991312][T17010] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 456.233884][T16741] veth0_vlan: entered promiscuous mode [ 456.331523][T16741] veth1_vlan: entered promiscuous mode [ 456.485539][T16741] veth0_macvtap: entered promiscuous mode [ 456.522697][T16741] veth1_macvtap: entered promiscuous mode [ 456.643257][T16747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.669457][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3156'. [ 456.703106][T16741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.738483][T16741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.761658][T16741] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.788977][T16741] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.797844][T16741] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.815481][T16741] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.114463][T17057] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 457.137550][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.151293][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.190248][T16747] veth0_vlan: entered promiscuous mode [ 457.256697][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.262863][T16747] veth1_vlan: entered promiscuous mode [ 457.300762][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.334922][T17065] bond7: entered promiscuous mode [ 457.343043][T17065] bond7: entered allmulticast mode [ 457.356603][T17065] 8021q: adding VLAN 0 to HW filter on device bond7 [ 457.412219][T17071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3164'. [ 457.515691][T17075] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 457.585823][T16747] veth0_macvtap: entered promiscuous mode [ 457.644542][T16747] veth1_macvtap: entered promiscuous mode [ 457.659773][T17075] can: request_module (can-proto-0) failed. [ 457.794641][T16747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.798023][T17083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3169'. [ 457.828117][T17083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3169'. [ 457.841262][T16747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.974520][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.045516][T17092] geneve3: entered promiscuous mode [ 458.059291][T17092] geneve3: entered allmulticast mode [ 458.075806][T16747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.086906][T16747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.118966][T16747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.139250][T16747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.253311][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.401454][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.539140][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.572971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.684061][T16560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.714272][T16560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.794920][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.996401][T17114] __nla_validate_parse: 4 callbacks suppressed [ 458.996423][T17114] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3179'. [ 459.100857][T17114] netlink: 'syz.2.3179': attribute type 1 has an invalid length. [ 459.162779][T17120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3182'. [ 459.205777][T17120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3182'. [ 459.232091][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.242867][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.251384][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.266238][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.275177][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.404248][ T1102] bridge_slave_1: left allmulticast mode [ 459.415773][ T1102] bridge_slave_1: left promiscuous mode [ 459.424874][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.451442][ T1102] bridge_slave_0: left allmulticast mode [ 459.467460][ T1102] bridge_slave_0: left promiscuous mode [ 459.477778][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.153408][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.166788][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.178164][ T1102] bond0 (unregistering): Released all slaves [ 460.494333][T17121] chnl_net:caif_netlink_parms(): no params data found [ 460.554027][ T1102] hsr_slave_0: left promiscuous mode [ 460.562031][ T1102] hsr_slave_1: left promiscuous mode [ 460.567946][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.576126][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.587102][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.595217][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.621133][ T1102] veth1_macvtap: left promiscuous mode [ 460.626753][ T1102] veth0_macvtap: left promiscuous mode [ 460.632889][ T1102] veth1_vlan: left promiscuous mode [ 460.638217][ T1102] veth0_vlan: left promiscuous mode [ 461.148431][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 461.194198][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 461.369081][ T5141] Bluetooth: hci0: command tx timeout [ 461.797874][T17121] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.842356][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.858108][T17121] bridge_slave_0: entered allmulticast mode [ 461.866997][T17121] bridge_slave_0: entered promiscuous mode [ 461.884442][T17121] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.897156][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.946190][T17121] bridge_slave_1: entered allmulticast mode [ 461.961280][T17121] bridge_slave_1: entered promiscuous mode [ 462.115427][T17147] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3189'. [ 462.145816][T17121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.186805][T17121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.415209][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.419691][T17121] team0: Port device team_slave_0 added [ 462.439802][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.442357][T17121] team0: Port device team_slave_1 added [ 462.461631][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3194'. [ 462.478115][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.485932][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3194'. [ 462.513913][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.527965][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.599962][T17121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.612791][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.643216][T17121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.660744][T17121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.668166][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.696100][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3197'. [ 462.709774][T17171] openvswitch: netlink: IP tunnel dst address not specified [ 462.721839][T17121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.803928][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 462.814217][T17183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3199'. [ 462.832692][T17181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3198'. [ 462.900691][T17121] hsr_slave_0: entered promiscuous mode [ 462.917733][T17121] hsr_slave_1: entered promiscuous mode [ 463.030709][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.091314][T17190] sctp: [Deprecated]: syz.2.3201 (pid 17190) Use of int in maxseg socket option. [ 463.091314][T17190] Use struct sctp_assoc_value instead [ 463.268684][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.424321][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.451020][ T5141] Bluetooth: hci0: command tx timeout [ 463.611991][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.000148][ T1102] bridge_slave_1: left allmulticast mode [ 464.024646][ T1102] bridge_slave_1: left promiscuous mode [ 464.042658][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.067598][ T1102] bridge_slave_0: left allmulticast mode [ 464.087737][ T1102] bridge_slave_0: left promiscuous mode [ 464.103604][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.526564][T17236] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 464.575605][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.587804][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.602308][ T1102] bond0 (unregistering): Released all slaves [ 464.652599][ T5141] Bluetooth: hci4: command tx timeout [ 464.656817][T17161] chnl_net:caif_netlink_parms(): no params data found [ 464.892467][T17241] __nla_validate_parse: 6 callbacks suppressed [ 464.892488][T17241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 465.036960][T17247] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3219'. [ 465.183249][T17253] netlink: 'syz.0.3221': attribute type 12 has an invalid length. [ 465.220037][T17253] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 465.248051][T17161] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.266613][T17161] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.274264][T17161] bridge_slave_0: entered allmulticast mode [ 465.282518][T17161] bridge_slave_0: entered promiscuous mode [ 465.299686][T17161] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.306870][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.323572][T17161] bridge_slave_1: entered allmulticast mode [ 465.343729][T17161] bridge_slave_1: entered promiscuous mode [ 465.453682][T17260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'. [ 465.474530][ T1102] hsr_slave_0: left promiscuous mode [ 465.481033][ T1102] hsr_slave_1: left promiscuous mode [ 465.490036][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.500875][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.510255][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.528036][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.542229][ T5839] Bluetooth: hci0: command tx timeout [ 465.589074][ T1102] veth1_macvtap: left promiscuous mode [ 465.594824][ T1102] veth0_macvtap: left promiscuous mode [ 465.608289][ T1102] veth1_vlan: left promiscuous mode [ 465.615866][ T1102] veth0_vlan: left promiscuous mode [ 466.329583][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 466.392370][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 466.740300][ T5839] Bluetooth: hci4: command tx timeout [ 466.866568][T17161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.909973][T17283] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 466.912088][T17121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.956629][T17121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.993055][T17161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.083054][T17121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.122315][T17161] team0: Port device team_slave_0 added [ 467.153034][T17161] team0: Port device team_slave_1 added [ 467.200136][T17121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.393591][T17161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.408694][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.452614][T17161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.476604][T17161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.484621][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.530162][T17161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.608948][ T5839] Bluetooth: hci0: command tx timeout [ 467.753295][T17161] hsr_slave_0: entered promiscuous mode [ 467.771125][T17161] hsr_slave_1: entered promiscuous mode [ 467.777690][T17161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.808037][T17161] Cannot create hsr debugfs directory [ 468.127174][T17121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.225015][T17339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3247'. [ 468.257731][T17121] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.293751][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.301045][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.372745][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.380089][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.476469][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.503641][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 468.520509][T17349] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 468.545288][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.634758][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.714715][T17350] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 468.774610][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.783936][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.795880][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.806912][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.815505][ T5839] Bluetooth: hci4: command tx timeout [ 468.863642][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.875306][T17350] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.965164][T17367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3256'. [ 469.114353][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 469.166099][T17377] netlink: 'syz.2.3260': attribute type 1 has an invalid length. [ 469.174256][T17375] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 469.190401][T17377] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3260'. [ 469.328475][T17161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 469.383656][T17161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 469.429987][T17161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 469.440386][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3263'. [ 469.457853][T17161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 469.558401][T17121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.577180][T17389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3264'. [ 469.649235][T17396] nbd: device at index 64 is going down [ 469.807854][T17121] veth0_vlan: entered promiscuous mode [ 469.891621][T17121] veth1_vlan: entered promiscuous mode [ 469.942748][T17401] : renamed from vlan0 (while UP) [ 470.066953][T17121] veth0_macvtap: entered promiscuous mode [ 470.100201][T17121] veth1_macvtap: entered promiscuous mode [ 470.131008][T17161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.166555][T17161] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.174216][T17413] __nla_validate_parse: 1 callbacks suppressed [ 470.174238][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3271'. [ 470.225046][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.232258][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.261911][T17121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.315392][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.322644][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.357399][T17121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.398197][T17121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.416473][T17121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.426393][T17121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.442917][T17121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.501365][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'. [ 470.520181][T17425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3274'. [ 470.561248][T17425] netlink: zone id is out of range [ 470.586912][T17425] netlink: zone id is out of range [ 470.606341][T17425] netlink: zone id is out of range [ 470.633987][T17425] netlink: zone id is out of range [ 470.685815][T17425] netlink: zone id is out of range [ 470.699988][T17425] netlink: zone id is out of range [ 470.732449][T17425] netlink: zone id is out of range [ 470.745791][T17425] netlink: zone id is out of range [ 470.775716][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.798979][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.802478][T17425] netlink: zone id is out of range [ 470.889119][ T5839] Bluetooth: hci4: command tx timeout [ 470.966071][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.975737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.084192][T17443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3279'. [ 471.424199][T17161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.537198][T10095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.698488][T10095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.795480][T10095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.826203][T17161] veth0_vlan: entered promiscuous mode [ 471.872187][T10095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.912433][T17161] veth1_vlan: entered promiscuous mode [ 471.961589][T17161] veth0_macvtap: entered promiscuous mode [ 471.972851][T17161] veth1_macvtap: entered promiscuous mode [ 471.994384][T17161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.010669][T17161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.024550][T17161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.033744][T17161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.043395][T17161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.052633][T17161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.170477][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.178460][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.222190][T10095] bridge_slave_1: left allmulticast mode [ 472.227908][T10095] bridge_slave_1: left promiscuous mode [ 472.234448][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.246188][T10095] bridge_slave_0: left allmulticast mode [ 472.253097][T10095] bridge_slave_0: left promiscuous mode [ 472.259429][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.419826][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3288'. [ 472.446892][T17471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3286'. [ 472.864255][T10095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.881281][T10095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.898046][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.910854][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.921797][T10095] bond0 (unregistering): Released all slaves [ 472.928000][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.939764][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.948028][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.030378][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.038991][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.114547][T17477] virt_wifi0 speed is unknown, defaulting to 1000 [ 473.365668][T17481] can: request_module (can-proto-0) failed. [ 473.391458][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 474.457230][T10095] hsr_slave_0: left promiscuous mode [ 474.468146][T10095] hsr_slave_1: left promiscuous mode [ 474.477722][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.486647][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.510745][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.518434][T10095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.555887][T10095] veth1_macvtap: left promiscuous mode [ 474.564808][T10095] veth0_macvtap: left promiscuous mode [ 474.575689][T10095] veth1_vlan: left promiscuous mode [ 474.581783][T10095] veth0_vlan: left promiscuous mode [ 475.050372][ T5141] Bluetooth: hci0: command tx timeout [ 475.118195][T10095] team0 (unregistering): Port device team_slave_1 removed [ 475.172458][T10095] team0 (unregistering): Port device team_slave_0 removed [ 475.763908][T17477] chnl_net:caif_netlink_parms(): no params data found [ 475.874393][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.884455][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.893841][T17477] bridge_slave_0: entered allmulticast mode [ 475.902104][T17477] bridge_slave_0: entered promiscuous mode [ 475.913051][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.920724][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.928067][T17477] bridge_slave_1: entered allmulticast mode [ 475.937077][T17477] bridge_slave_1: entered promiscuous mode [ 475.977934][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.993270][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.040440][T17477] team0: Port device team_slave_0 added [ 476.051101][T17477] team0: Port device team_slave_1 added [ 476.087824][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.098830][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.125198][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.157794][T10095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.180502][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.187513][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.214609][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.251678][T10095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.303814][T17477] hsr_slave_0: entered promiscuous mode [ 476.310792][T17477] hsr_slave_1: entered promiscuous mode [ 476.362008][T10095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.432539][T10095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.592822][T10095] bridge_slave_1: left allmulticast mode [ 476.598849][T10095] bridge_slave_1: left promiscuous mode [ 476.604827][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.615914][T10095] bridge_slave_0: left allmulticast mode [ 476.622168][T10095] bridge_slave_0: left promiscuous mode [ 476.628028][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.844580][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3299'. [ 477.130046][ T5141] Bluetooth: hci0: command tx timeout [ 477.144838][T17530] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 477.177807][T17530] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3302'. [ 477.190347][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.205775][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.209172][T17530] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 477.216546][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.230895][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.239402][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.251685][T17530] netlink: 'syz.0.3302': attribute type 2 has an invalid length. [ 477.265619][T17530] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3302'. [ 477.403631][T10095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.416690][T10095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.427839][T10095] bond0 (unregistering): Released all slaves [ 477.466947][T17517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3298'. [ 477.635076][T17535] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 477.697103][T17542] netlink: 'syz.0.3304': attribute type 1 has an invalid length. [ 477.724099][T17542] sctp: [Deprecated]: syz.0.3304 (pid 17542) Use of int in maxseg socket option. [ 477.724099][T17542] Use struct sctp_assoc_value instead [ 477.853417][T17531] virt_wifi0 speed is unknown, defaulting to 1000 [ 477.899747][T17545] gre1: entered promiscuous mode [ 477.906634][T17545] gre1: entered allmulticast mode [ 478.006274][T10095] hsr_slave_0: left promiscuous mode [ 478.028992][T10095] hsr_slave_1: left promiscuous mode [ 478.039097][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.046761][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.055667][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.064423][T10095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.106098][T10095] veth1_macvtap: left promiscuous mode [ 478.127491][T10095] veth0_macvtap: left promiscuous mode [ 478.134539][T10095] veth1_vlan: left promiscuous mode [ 478.140517][T10095] veth0_vlan: left promiscuous mode [ 478.683747][T10095] team0 (unregistering): Port device team_slave_1 removed [ 478.731295][T10095] team0 (unregistering): Port device team_slave_0 removed [ 479.214702][ T5839] Bluetooth: hci0: command tx timeout [ 479.267710][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3310'. [ 479.288906][ T5839] Bluetooth: hci4: command tx timeout [ 479.508197][T17477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.567806][T17477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.609752][T17477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.659207][T17477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.033486][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3323'. [ 480.151587][T17531] chnl_net:caif_netlink_parms(): no params data found [ 480.240332][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 480.446743][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.553752][T17531] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.606767][T17531] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.627318][T17531] bridge_slave_0: entered allmulticast mode [ 480.641171][T17531] bridge_slave_0: entered promiscuous mode [ 480.661641][T17531] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.669975][T17531] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.677849][T17531] bridge_slave_1: entered allmulticast mode [ 480.690579][T17531] bridge_slave_1: entered promiscuous mode [ 480.795976][T17531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.828165][T17531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.993561][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.028000][T17531] team0: Port device team_slave_0 added [ 481.052529][T16560] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.059843][T16560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.114431][T16560] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.121781][T16560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.145341][T17531] team0: Port device team_slave_1 added [ 481.231037][T17531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.238042][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.283239][T17531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.299018][ T5839] Bluetooth: hci0: command tx timeout [ 481.330142][T17531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.338752][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.367674][T17531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.378975][ T5839] Bluetooth: hci4: command tx timeout [ 481.511527][T17531] hsr_slave_0: entered promiscuous mode [ 481.522035][T17531] hsr_slave_1: entered promiscuous mode [ 481.528891][T17531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.552798][T17531] Cannot create hsr debugfs directory [ 482.035153][T17683] vlan1: entered allmulticast mode [ 482.055097][T17683] veth0_vlan: entered allmulticast mode [ 482.450808][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.585716][T17477] veth0_vlan: entered promiscuous mode [ 482.657410][T17477] veth1_vlan: entered promiscuous mode [ 482.668926][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e45d400: rx timeout, send abort [ 482.775608][ T30] audit: type=1107 audit(1747487627.607:11): pid=17717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='y A(,\pwGr7zUfk _hh1ŤL0%EPjlb݅PcsB"i a@;ckaOrkyk*J7_~[PTUF [ 482.775608][ T30] ' [ 482.785030][T17531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 482.848722][T17531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 482.869783][T17531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 482.892834][T17531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 482.959267][T17477] veth0_macvtap: entered promiscuous mode [ 483.001266][T17477] veth1_macvtap: entered promiscuous mode [ 483.045600][T17477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.112060][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.154477][T17477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.164279][T17477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.173438][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e45e800: rx timeout, send abort [ 483.182325][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e45d400: abort rx timeout. Force session deactivation [ 483.194792][T17477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.240861][T17477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.433861][T17531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.451076][ T5839] Bluetooth: hci4: command tx timeout [ 483.491493][T17740] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3367'. [ 483.541876][T17531] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.612058][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.636143][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.645283][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.652711][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.673536][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e45e800: abort rx timeout. Force session deactivation [ 483.697912][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.705258][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.766124][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.791940][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.225248][T17765] netlink: 'syz.0.3375': attribute type 7 has an invalid length. [ 484.404850][T17765] : entered promiscuous mode [ 484.467969][T17763] net_ratelimit: 395 callbacks suppressed [ 484.467995][T17763] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 484.582114][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.724623][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.766646][T17531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.821885][T17531] veth0_vlan: entered promiscuous mode [ 484.843286][T17531] veth1_vlan: entered promiscuous mode [ 484.878296][T17531] veth0_macvtap: entered promiscuous mode [ 484.891715][T17531] veth1_macvtap: entered promiscuous mode [ 484.924020][T17531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.950968][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.980288][T17531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.994429][T17531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.005435][T17531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.018944][T17531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.027984][T17531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.068261][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.169667][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.177526][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.238357][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.247033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.337375][ T12] bridge_slave_1: left allmulticast mode [ 485.360470][ T12] bridge_slave_1: left promiscuous mode [ 485.375211][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.400437][ T12] bridge_slave_0: left allmulticast mode [ 485.416444][ T12] bridge_slave_0: left promiscuous mode [ 485.426819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.817504][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.835931][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.851633][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.862118][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.871748][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.017216][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.031143][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.041871][ T12] bond0 (unregistering): Released all slaves [ 486.071649][T17779] ================================================================== [ 486.079785][T17779] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 486.087978][T17779] Read of size 8 at addr ffff888057a14c50 by task syz.0.3377/17779 [ 486.095880][T17779] [ 486.098222][T17779] CPU: 0 UID: 0 PID: 17779 Comm: syz.0.3377 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 486.098245][T17779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.098258][T17779] Call Trace: [ 486.098268][T17779] [ 486.098277][T17779] dump_stack_lvl+0x189/0x250 [ 486.098306][T17779] ? __virt_addr_valid+0x18c/0x540 [ 486.098331][T17779] ? rcu_is_watching+0x15/0xb0 [ 486.098347][T17779] ? __kasan_check_byte+0x12/0x40 [ 486.098371][T17779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.098395][T17779] ? rcu_is_watching+0x15/0xb0 [ 486.098411][T17779] ? lock_release+0x4b/0x3e0 [ 486.098438][T17779] ? __virt_addr_valid+0x18c/0x540 [ 486.098462][T17779] ? __virt_addr_valid+0x469/0x540 [ 486.098488][T17779] print_report+0xb4/0x290 [ 486.098512][T17779] ? cfusbl_device_notify+0x150/0x6a0 [ 486.098542][T17779] kasan_report+0x118/0x150 [ 486.098567][T17779] ? cfusbl_device_notify+0x150/0x6a0 [ 486.098600][T17779] cfusbl_device_notify+0x150/0x6a0 [ 486.098629][T17779] ? net_generic+0x1e/0x240 [ 486.098656][T17779] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 486.098684][T17779] ? caif_device_notify+0x250/0xfc0 [ 486.098713][T17779] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 486.098733][T17779] notifier_call_chain+0x1b3/0x3e0 [ 486.098755][T17779] register_netdevice+0x121c/0x1af0 [ 486.098781][T17779] ? __mutex_lock+0x51b/0xe80 [ 486.098814][T17779] ? __pfx_register_netdevice+0x10/0x10 [ 486.098845][T17779] ? __asan_memset+0x22/0x50 [ 486.098862][T17779] ? dev_addr_mod+0x2ce/0x3d0 [ 486.098887][T17779] register_netdev+0x40/0x60 [ 486.098913][T17779] bnep_add_connection+0x6bf/0xbf0 [ 486.098941][T17779] ? __pfx_bnep_add_connection+0x10/0x10 [ 486.098964][T17779] ? __fget_files+0x3a0/0x420 [ 486.098994][T17779] do_bnep_sock_ioctl+0x40e/0x640 [ 486.099019][T17779] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 486.099047][T17779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 486.099066][T17779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 486.099097][T17779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 486.099116][T17779] ? call_rcu+0x6dd/0x990 [ 486.099136][T17779] sock_do_ioctl+0xd9/0x300 [ 486.099155][T17779] ? __pfx_sock_do_ioctl+0x10/0x10 [ 486.099172][T17779] ? __lock_acquire+0xaac/0xd20 [ 486.099204][T17779] sock_ioctl+0x576/0x790 [ 486.099221][T17779] ? __pfx_sock_ioctl+0x10/0x10 [ 486.099241][T17779] ? __fget_files+0x3a0/0x420 [ 486.099264][T17779] ? __fget_files+0x2a/0x420 [ 486.099289][T17779] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.099313][T17779] ? __pfx_sock_ioctl+0x10/0x10 [ 486.099328][T17779] __se_sys_ioctl+0xf9/0x170 [ 486.099349][T17779] do_syscall_64+0xf6/0x210 [ 486.099373][T17779] ? clear_bhb_loop+0x60/0xb0 [ 486.099393][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.099411][T17779] RIP: 0033:0x7fc4cb18e969 [ 486.099429][T17779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.099445][T17779] RSP: 002b:00007fc4cbf35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.099465][T17779] RAX: ffffffffffffffda RBX: 00007fc4cb3b5fa0 RCX: 00007fc4cb18e969 [ 486.099479][T17779] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000005 [ 486.099491][T17779] RBP: 00007fc4cb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 486.099502][T17779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.099512][T17779] R13: 0000000000000000 R14: 00007fc4cb3b5fa0 R15: 00007ffcf8f24458 [ 486.099535][T17779] [ 486.099541][T17779] [ 486.440608][T17779] Allocated by task 5141: [ 486.445028][T17779] kasan_save_track+0x3e/0x80 [ 486.449816][T17779] __kasan_kmalloc+0x93/0xb0 [ 486.454511][T17779] __kmalloc_cache_noprof+0x230/0x3d0 [ 486.459900][T17779] __hci_conn_add+0x1ed/0x1aa0 [ 486.464680][T17779] hci_conn_request_evt+0x528/0xb50 [ 486.469914][T17779] hci_event_packet+0x7fb/0x1270 [ 486.474869][T17779] hci_rx_work+0x46a/0xe80 [ 486.479303][T17779] process_scheduled_works+0xade/0x17a0 [ 486.484858][T17779] worker_thread+0x8a0/0xda0 [ 486.489459][T17779] kthread+0x711/0x8a0 [ 486.493539][T17779] ret_from_fork+0x4b/0x80 [ 486.498052][T17779] ret_from_fork_asm+0x1a/0x30 [ 486.502825][T17779] [ 486.505153][T17779] Freed by task 17531: [ 486.509225][T17779] kasan_save_track+0x3e/0x80 [ 486.513913][T17779] kasan_save_free_info+0x46/0x50 [ 486.518952][T17779] __kasan_slab_free+0x62/0x70 [ 486.523730][T17779] kfree+0x193/0x440 [ 486.527637][T17779] device_release+0x9c/0x1c0 [ 486.532258][T17779] kobject_put+0x22b/0x480 [ 486.536695][T17779] hci_conn_del+0x8f5/0xca0 [ 486.541208][T17779] hci_conn_hash_flush+0x191/0x230 [ 486.546338][T17779] hci_dev_close_sync+0xaef/0x1330 [ 486.551458][T17779] hci_unregister_dev+0x206/0x500 [ 486.556524][T17779] vhci_release+0x80/0xd0 [ 486.560909][T17779] __fput+0x44c/0xa70 [ 486.565000][T17779] task_work_run+0x1d4/0x260 [ 486.569625][T17779] do_exit+0x8d6/0x2550 [ 486.573822][T17779] do_group_exit+0x21c/0x2d0 [ 486.578443][T17779] __x64_sys_exit_group+0x3f/0x40 [ 486.583492][T17779] x64_sys_call+0x21ba/0x21c0 [ 486.588183][T17779] do_syscall_64+0xf6/0x210 [ 486.592699][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.598600][T17779] [ 486.600928][T17779] Last potentially related work creation: [ 486.606668][T17779] kasan_save_stack+0x3e/0x60 [ 486.611373][T17779] kasan_record_aux_stack+0xbc/0xd0 [ 486.616589][T17779] insert_work+0x3d/0x330 [ 486.620958][T17779] __queue_work+0xcfc/0xfe0 [ 486.625501][T17779] queue_delayed_work_on+0x18b/0x280 [ 486.630808][T17779] l2cap_chan_del+0x285/0x5e0 [ 486.635501][T17779] l2cap_conn_del+0x388/0x680 [ 486.640197][T17779] hci_conn_hash_flush+0x10a/0x230 [ 486.645319][T17779] hci_dev_close_sync+0xaef/0x1330 [ 486.650436][T17779] hci_unregister_dev+0x206/0x500 [ 486.655476][T17779] vhci_release+0x80/0xd0 [ 486.659818][T17779] __fput+0x44c/0xa70 [ 486.663805][T17779] task_work_run+0x1d4/0x260 [ 486.668427][T17779] do_exit+0x8d6/0x2550 [ 486.672596][T17779] do_group_exit+0x21c/0x2d0 [ 486.677195][T17779] __x64_sys_exit_group+0x3f/0x40 [ 486.682241][T17779] x64_sys_call+0x21ba/0x21c0 [ 486.686970][T17779] do_syscall_64+0xf6/0x210 [ 486.691491][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.697393][T17779] [ 486.699723][T17779] The buggy address belongs to the object at ffff888057a14000 [ 486.699723][T17779] which belongs to the cache kmalloc-8k of size 8192 [ 486.713792][T17779] The buggy address is located 3152 bytes inside of [ 486.713792][T17779] freed 8192-byte region [ffff888057a14000, ffff888057a16000) [ 486.727777][T17779] [ 486.730110][T17779] The buggy address belongs to the physical page: [ 486.736533][T17779] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57a10 [ 486.745299][T17779] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 486.753806][T17779] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 486.761706][T17779] page_type: f5(slab) [ 486.765720][T17779] raw: 00fff00000000040 ffff88801a042280 ffffea0001723000 0000000000000003 [ 486.774361][T17779] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 486.782971][T17779] head: 00fff00000000040 ffff88801a042280 ffffea0001723000 0000000000000003 [ 486.791658][T17779] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 486.800423][T17779] head: 00fff00000000003 ffffea00015e8401 00000000ffffffff 00000000ffffffff [ 486.809104][T17779] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 486.817814][T17779] page dumped because: kasan: bad access detected [ 486.824263][T17779] page_owner tracks the page as allocated [ 486.829987][T17779] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16741, tgid 16741 (syz-executor), ts 454581187809, free_ts 453580133505 [ 486.851841][T17779] post_alloc_hook+0x1d8/0x230 [ 486.856640][T17779] get_page_from_freelist+0x21ce/0x22b0 [ 486.862377][T17779] __alloc_frozen_pages_noprof+0x181/0x370 [ 486.868198][T17779] alloc_pages_mpol+0x232/0x4a0 [ 486.873096][T17779] allocate_slab+0x8a/0x3b0 [ 486.877710][T17779] ___slab_alloc+0xbfc/0x1480 [ 486.882417][T17779] __kvmalloc_node_noprof+0x411/0x5e0 [ 486.887816][T17779] pfifo_fast_init+0x363/0x6b0 [ 486.892593][T17779] qdisc_create_dflt+0x11f/0x470 [ 486.897712][T17779] dev_activate+0x378/0x1150 [ 486.902317][T17779] __dev_open+0x69c/0x880 [ 486.906920][T17779] __dev_change_flags+0x1ea/0x6d0 [ 486.912046][T17779] netif_change_flags+0x88/0x1a0 [ 486.917013][T17779] do_setlink+0xcb9/0x40d0 [ 486.921464][T17779] rtnl_newlink+0x160b/0x1c70 [ 486.926185][T17779] rtnetlink_rcv_msg+0x7cf/0xb70 [ 486.931505][T17779] page last free pid 5830 tgid 5830 stack trace: [ 486.937887][T17779] __free_frozen_pages+0xb0e/0xcd0 [ 486.943396][T17779] __slab_free+0x326/0x400 [ 486.947829][T17779] qlist_free_all+0x9a/0x140 [ 486.952454][T17779] kasan_quarantine_reduce+0x148/0x160 [ 486.958293][T17779] __kasan_slab_alloc+0x22/0x80 [ 486.963233][T17779] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 486.968837][T17779] vm_area_dup+0x2b/0x5c0 [ 486.973244][T17779] copy_mm+0xbe1/0x2100 [ 486.977435][T17779] copy_process+0x16d3/0x3b80 [ 486.982143][T17779] kernel_clone+0x21e/0x870 [ 486.986664][T17779] __x64_sys_clone+0x18b/0x1e0 [ 486.991448][T17779] do_syscall_64+0xf6/0x210 [ 486.996408][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.002415][T17779] [ 487.004746][T17779] Memory state around the buggy address: [ 487.010378][T17779] ffff888057a14b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.018445][T17779] ffff888057a14b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.026944][T17779] >ffff888057a14c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.035046][T17779] ^ [ 487.041753][T17779] ffff888057a14c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.049822][T17779] ffff888057a14d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.057888][T17779] ================================================================== [ 487.088784][T17779] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 487.096050][T17779] CPU: 1 UID: 0 PID: 17779 Comm: syz.0.3377 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 487.108157][T17779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.118253][T17779] Call Trace: [ 487.121547][T17779] [ 487.124576][T17779] dump_stack_lvl+0x99/0x250 [ 487.129191][T17779] ? __asan_memcpy+0x40/0x70 [ 487.133806][T17779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.139031][T17779] ? __pfx__printk+0x10/0x10 [ 487.143643][T17779] panic+0x2db/0x790 [ 487.147667][T17779] ? __pfx_panic+0x10/0x10 [ 487.152138][T17779] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 487.158075][T17779] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.164424][T17779] ? print_memory_metadata+0x314/0x400 [ 487.169907][T17779] ? cfusbl_device_notify+0x150/0x6a0 [ 487.175312][T17779] check_panic_on_warn+0x89/0xb0 [ 487.180269][T17779] ? cfusbl_device_notify+0x150/0x6a0 [ 487.185670][T17779] end_report+0x78/0x160 [ 487.189932][T17779] kasan_report+0x129/0x150 [ 487.194454][T17779] ? cfusbl_device_notify+0x150/0x6a0 [ 487.199856][T17779] cfusbl_device_notify+0x150/0x6a0 [ 487.205078][T17779] ? net_generic+0x1e/0x240 [ 487.209610][T17779] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 487.215376][T17779] ? caif_device_notify+0x250/0xfc0 [ 487.220610][T17779] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 487.226087][T17779] notifier_call_chain+0x1b3/0x3e0 [ 487.231221][T17779] register_netdevice+0x121c/0x1af0 [ 487.236444][T17779] ? __mutex_lock+0x51b/0xe80 [ 487.241587][T17779] ? __pfx_register_netdevice+0x10/0x10 [ 487.247199][T17779] ? __asan_memset+0x22/0x50 [ 487.251804][T17779] ? dev_addr_mod+0x2ce/0x3d0 [ 487.256526][T17779] register_netdev+0x40/0x60 [ 487.261592][T17779] bnep_add_connection+0x6bf/0xbf0 [ 487.266761][T17779] ? __pfx_bnep_add_connection+0x10/0x10 [ 487.272415][T17779] ? __fget_files+0x3a0/0x420 [ 487.277133][T17779] do_bnep_sock_ioctl+0x40e/0x640 [ 487.282205][T17779] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 487.287779][T17779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 487.293427][T17779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 487.299079][T17779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 487.304740][T17779] ? call_rcu+0x6dd/0x990 [ 487.309093][T17779] sock_do_ioctl+0xd9/0x300 [ 487.313696][T17779] ? __pfx_sock_do_ioctl+0x10/0x10 [ 487.318817][T17779] ? __lock_acquire+0xaac/0xd20 [ 487.323691][T17779] sock_ioctl+0x576/0x790 [ 487.328043][T17779] ? __pfx_sock_ioctl+0x10/0x10 [ 487.332992][T17779] ? __fget_files+0x3a0/0x420 [ 487.337693][T17779] ? __fget_files+0x2a/0x420 [ 487.342324][T17779] ? bpf_lsm_file_ioctl+0x9/0x20 [ 487.347311][T17779] ? __pfx_sock_ioctl+0x10/0x10 [ 487.352172][T17779] __se_sys_ioctl+0xf9/0x170 [ 487.356784][T17779] do_syscall_64+0xf6/0x210 [ 487.361400][T17779] ? clear_bhb_loop+0x60/0xb0 [ 487.366093][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.371999][T17779] RIP: 0033:0x7fc4cb18e969 [ 487.376427][T17779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.396154][T17779] RSP: 002b:00007fc4cbf35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.404591][T17779] RAX: ffffffffffffffda RBX: 00007fc4cb3b5fa0 RCX: 00007fc4cb18e969 [ 487.412574][T17779] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000005 [ 487.420745][T17779] RBP: 00007fc4cb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 487.428823][T17779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.436815][T17779] R13: 0000000000000000 R14: 00007fc4cb3b5fa0 R15: 00007ffcf8f24458 [ 487.444922][T17779] [ 487.451442][T17779] Kernel Offset: disabled [ 487.455783][T17779] Rebooting in 86400 seconds..