last executing test programs: 2m15.862489538s ago: executing program 3 (id=1005): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001ff7feffffff8000000000001000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010067726574617000001400028006000e000100000008000700ac14142208000a00", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x4000) 2m15.607395926s ago: executing program 3 (id=1009): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001000000000000000006112000000000000620000000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=@acquire={0x1e0, 0x17, 0x300, 0x70bd2b, 0x25dfdbfc, {{@in=@loopback, 0x4d3, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {@in=@private=0x946c, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x7, 0x4e20, 0x40, 0xa, 0x0, 0xa0, 0x87, r2, r3}, {{@in6=@empty, @in=@multicast2, 0x4e21, 0x5, 0x4e21, 0x80, 0xa, 0x180, 0xa0, 0x2c, r4, r5}, {0x0, 0x1f47, 0xc0000000000000, 0x8, 0x4, 0x2, 0x7fffffff, 0x5}, {0x8, 0x1, 0x8, 0xc7d}, 0x7, 0x6e6bb6, 0x2, 0x0, 0x3, 0x2}, 0x49, 0x8, 0x7fffffff, 0x70bd27}, [@algo_crypt={0xb8, 0x2, {{'xts(ctr(des3_ede))\x00'}, 0x380, "4826318d7feba8a0be3cce532b79f7e85447e0ec396b7529e774120ef0946537ac67a2e9e4c0ea19f9ab451cdb5531de85c069f98912e8f75eb6c5deccc1d4db448e419d6e21f7740da264cea795adcc99cdebacd1843ee12d0cec90bfca3fa5b4fd9a467b96959a09eb7b910f182dee"}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000840}, 0x4) 2m15.346441377s ago: executing program 3 (id=1011): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x64, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 2m15.283569527s ago: executing program 3 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200090700f1ffffffffffff07000000000000001000008004000000080031"], 0x28}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e4be2ebe", 0x4}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x8080) sendmsg$alg(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) accept$ax25(r3, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 2m13.930459946s ago: executing program 3 (id=1020): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m10.356164931s ago: executing program 3 (id=1054): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 2m9.915722814s ago: executing program 32 (id=1054): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 1m9.051869761s ago: executing program 4 (id=933): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) close(0x3) syz_emit_ethernet(0x44e, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @cipso={0x86, 0x57, 0x3, [{0x6, 0x3, "da"}, {0x2, 0xe, "82c3c3cf5e4e52cb89d3bcf5"}, {0x7, 0x8, "ab27a6f261b2"}, {0x90625418d44da8d4, 0x11, "f2d5d6f9fbbfb2365e7b6efef8908d"}, {0x2, 0xf, "6b62219e81737155bdb0eb0f3b"}, {0x6, 0x10, "571d4a1b2d997679ecb7cee30aab"}, {0x1, 0x8, "8d81ef70632f"}]}, @ssrr={0x89, 0x27, 0x9e, [@empty, @multicast2, @remote, @broadcast, @empty, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x16, 0x1, 0x6}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}, 0x4054) socket(0x6, 0x2, 0x2) 57.011281646s ago: executing program 4 (id=933): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) close(0x3) syz_emit_ethernet(0x44e, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @cipso={0x86, 0x57, 0x3, [{0x6, 0x3, "da"}, {0x2, 0xe, "82c3c3cf5e4e52cb89d3bcf5"}, {0x7, 0x8, "ab27a6f261b2"}, {0x90625418d44da8d4, 0x11, "f2d5d6f9fbbfb2365e7b6efef8908d"}, {0x2, 0xf, "6b62219e81737155bdb0eb0f3b"}, {0x6, 0x10, "571d4a1b2d997679ecb7cee30aab"}, {0x1, 0x8, "8d81ef70632f"}]}, @ssrr={0x89, 0x27, 0x9e, [@empty, @multicast2, @remote, @broadcast, @empty, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x16, 0x1, 0x6}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}, 0x4054) socket(0x6, 0x2, 0x2) 45.963811432s ago: executing program 4 (id=933): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) close(0x3) syz_emit_ethernet(0x44e, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @cipso={0x86, 0x57, 0x3, [{0x6, 0x3, "da"}, {0x2, 0xe, "82c3c3cf5e4e52cb89d3bcf5"}, {0x7, 0x8, "ab27a6f261b2"}, {0x90625418d44da8d4, 0x11, "f2d5d6f9fbbfb2365e7b6efef8908d"}, {0x2, 0xf, "6b62219e81737155bdb0eb0f3b"}, {0x6, 0x10, "571d4a1b2d997679ecb7cee30aab"}, {0x1, 0x8, "8d81ef70632f"}]}, @ssrr={0x89, 0x27, 0x9e, [@empty, @multicast2, @remote, @broadcast, @empty, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x16, 0x1, 0x6}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}, 0x4054) socket(0x6, 0x2, 0x2) 35.040970762s ago: executing program 4 (id=933): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) close(0x3) syz_emit_ethernet(0x44e, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @cipso={0x86, 0x57, 0x3, [{0x6, 0x3, "da"}, {0x2, 0xe, "82c3c3cf5e4e52cb89d3bcf5"}, {0x7, 0x8, "ab27a6f261b2"}, {0x90625418d44da8d4, 0x11, "f2d5d6f9fbbfb2365e7b6efef8908d"}, {0x2, 0xf, "6b62219e81737155bdb0eb0f3b"}, {0x6, 0x10, "571d4a1b2d997679ecb7cee30aab"}, {0x1, 0x8, "8d81ef70632f"}]}, @ssrr={0x89, 0x27, 0x9e, [@empty, @multicast2, @remote, @broadcast, @empty, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x16, 0x1, 0x6}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}, 0x4054) socket(0x6, 0x2, 0x2) 19.535194774s ago: executing program 4 (id=933): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) close(0x3) syz_emit_ethernet(0x44e, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @cipso={0x86, 0x57, 0x3, [{0x6, 0x3, "da"}, {0x2, 0xe, "82c3c3cf5e4e52cb89d3bcf5"}, {0x7, 0x8, "ab27a6f261b2"}, {0x90625418d44da8d4, 0x11, "f2d5d6f9fbbfb2365e7b6efef8908d"}, {0x2, 0xf, "6b62219e81737155bdb0eb0f3b"}, {0x6, 0x10, "571d4a1b2d997679ecb7cee30aab"}, {0x1, 0x8, "8d81ef70632f"}]}, @ssrr={0x89, 0x27, 0x9e, [@empty, @multicast2, @remote, @broadcast, @empty, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x16, 0x1, 0x6}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}, 0x4054) socket(0x6, 0x2, 0x2) 3.588404653s ago: executing program 1 (id=1757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x14b441, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x48, 0x3, 0xc0, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7, 0x3, 0x9}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x115, 0x115, 0x8, [@float={0x4, 0x0, 0x0, 0x10, 0x10}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0x6, [{0xb, 0x5, 0xe95}, {0x9, 0x0, 0x9}, {0x6, 0x2, 0x8001}]}, @datasec={0x1, 0x3, 0x0, 0xf, 0x1, [{0x1}, {0x4, 0x7ff, 0x4}, {0x1, 0x800, 0x7}], "f0"}, @ptr={0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}, @struct={0x4, 0x7, 0x0, 0x4, 0x1, 0x401, [{0xa, 0x5, 0xc}, {0xf, 0x0, 0x8}, {0x4, 0x3, 0xc65}, {0x4, 0x1, 0x7}, {0x4, 0x2, 0x5}, {0x2}, {0x6, 0x0, 0xe}]}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xf, 0x8, 0x2}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x51, 0x2e]}}, &(0x7f0000000740)=""/161, 0x138, 0xa1, 0x1, 0x7}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r0, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000001980)=[0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000001a00)=[{}], 0x8, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x97, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r11}, 0x10) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c80)=@generic={&(0x7f0000001c40)='./file0\x00', 0x0, 0x18}, 0x18) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r15 = openat$cgroup_devices(r14, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) splice(r13, 0x0, r15, 0x0, 0xb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0x25, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x3, 0x7, 0x4, 0xd3, 0xfff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x0, '\x00', r8, @fallback=0x25, r9, 0x8, &(0x7f00000018c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0x3, 0x401, 0x100}, 0x10, r10, r11, 0x2, &(0x7f0000001cc0)=[r12, r13], &(0x7f0000001d00)=[{0x4, 0x4, 0x6, 0x9}, {0x3, 0x2, 0x4, 0xc}]}, 0x94) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x8884}, @void, @mpls={[{0x80, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0xb}, {0xffff, 0x0, 0x1}], @llc={@llc={0xfe, 0xf0, "94"}}}}, 0x17) 3.156441001s ago: executing program 0 (id=1759): socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$ax25(0x3, 0x3, 0x76) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r1], 0x7c}}, 0x80) 3.109413845s ago: executing program 1 (id=1761): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000190000012bbd70000000000000000000000000000000000000000001ac1414aa000000000000000000000000000000004e2100000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000003000000004400050000000000000000000000000000000000000000003c0000000200000064010101000000000000000000006a0106000006000000040300"/183], 0xfc}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2021, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2, 0x80}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {0x0, 0x0, 0x40}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.922145301s ago: executing program 1 (id=1762): r0 = epoll_create(0x81) epoll_wait(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000004900010026bd7000fbdbdf250a008000", @ANYRES32, @ANYBLOB="df530000140001"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x8080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x608, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x4, 0xf0000000, 0x9}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x60]}}, 0x0, 0x37, 0x0, 0x1, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001d80)={'geneve0\x00', &(0x7f0000001d40)=@ethtool_cmd={0xa}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01072fbd7000fcdbdfa50600000008000300", @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x64008851}, 0x4000) r8 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000500)='caif0\x00') ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='mm_vmscan_write_folio\x00', r5, 0x0, 0x7}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24004040}, 0x400d050) r11 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56e41, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x7, 0xffff}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r12 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) writev(r11, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001423191840834b80040d8c560a066f004597ab081378848c8ecaa8b4cf00000000000000580325010ebc000000000000008000f0effeffe809005300f6f5e700000004000000080c", 0x58}], 0x100000000000034b) 2.909091433s ago: executing program 5 (id=1764): socket$inet6(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.658121491s ago: executing program 0 (id=1766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000041000000850000008600000018110000", @ANYRES32=r3, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r4, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x3, 0x9, 0x6, 0x7, 0xb, 0x7f, 0x0, 0x2, 0xc8, 0x5, 0x9, 0x2, 0x9, 0xd5}, 0xe) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x10000, 0x800, {{0xb, 0x4, 0x3, 0x5, 0x2c, 0x64, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, {[@lsrr={0x83, 0xb, 0x57, [@empty, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0xc, 0x19, 0x0, 0x2, [0xfffffff7, 0x6]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x56653b2d02bc5876}, {0x7, 0x4}, {0xfff2, 0xfff2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[], 0xffdd) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'team0\x00'}) 2.6575555s ago: executing program 1 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000040000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000050000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000295"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.566037679s ago: executing program 0 (id=1768): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x35, r1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000002e0000007b02010000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) ioctl(r2, 0x8916, &(0x7f0000000000)) 2.514961625s ago: executing program 1 (id=1769): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2d, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x4}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x20, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x62, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) 2.326187593s ago: executing program 2 (id=1770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_raw(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2.312430823s ago: executing program 2 (id=1771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000015000103000000000000f4ff00000000"], 0x14}}, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000240)="77ad6945a1b60bfa6526cb8722d94b85bef699c996cd30f796584fd29e7924216bdb4f236fd1963691756f0f80fb916e2aa6e6304bf28593da36dcb8911efd316c96706f612717c74e59fd664b5660da861393154a2ded70089e967312ea864743a653d84b58f15b92888642a579d5a0c232d429dce748fd69e83e05dafa8457efd86582245dded27a88427b9a46c7d95ffc173e692ceec4053a05b63876ed0456714eac8c0ea16b463b1fd38ec2526a24cb4632d9e4a268b9db8231c85bc080c49819e42386089f31acce790fc0edc297e8") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071106b000000000095"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 953.600111ms ago: executing program 0 (id=1772): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r2, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f00000000c0)=0x84) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) sendmmsg$inet6(r3, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1}}], 0x1, 0x4000) (async) listen(r3, 0xf5db) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debb386f9dba4a2dba4dbe076c292c28c9"], 0xe0}], 0x1}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000003000000000a0010000800030016"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21100100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r7, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbb53aaaaaaaaaa86dd600100000000000000000000e6baff0200000000000000000000000000014e200e22004890780300000002100000c8b23ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70e13808ca72381f41e5ffd9620915b6f78670dfaf9a2038083179cf6b7931c9b400000000000000000000001589fdf0a0ccaa6e2e1d5a89d582df623537be7ee0587cf7eaee0c769a7bc266c193873cff9444b18260916a61ec16677e4293b18838ae841337814b6d7038a247d132b472cb6a167a4b04587b3074d4d9726e98277f6c0ce5296f6a76b1721130d507ad517ff5dcfdf6db88210b48e8b0060afcd9d955e741def465e6e787d27a1a9c8355f819edb2"], 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 882.382039ms ago: executing program 2 (id=1773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) unshare(0x20040400) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c37900000000000fff0058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x6, 0xfffe, 0x8, 0x27, 'syz0\x00', "342efc98edda6c80931ab42c143b974299d37374550c11721d0f196b8fee6af6", "c2753cb2fda57536cf1f266108c2f4a09fb99853abcab03bd6a4e9d795f179ea", [{0x9, 0x8000, {0x1, 0x2f14}}, {0x9, 0x4, {0x1, 0x6}}, {0x1, 0x1, {0x2}}, {0x268, 0x234, {0x0, 0x401}}, {0x7, 0x7, {0x2, 0x7}}, {0x8, 0x324d, {0x2, 0x100}}, {0x101, 0xf, {0x1, 0x4}}, {0x8, 0x1d0, {0x3}}, {0xd, 0x7ff, {0x3, 0x3}}, {0x7, 0x2, {0x0, 0xce2}}, {0x10}, {0xffff, 0x7fff, {0x2, 0x6}}, {0x4, 0x1, {0x0, 0x4}}, {0x2, 0x1, {0x3, 0x4}}, {0x3, 0x4, {0x0, 0xb5}}, {0x5, 0x7aa1, {0x2, 0x7f}}, {0x3, 0x6, {0x3, 0x1000}}, {0x8000, 0x9, {0x1, 0x6}}, {0x401, 0x5, {0x0, 0x8}}, {0xb4b2, 0x9, {0x0, 0x1}}, {0x9, 0x4, {0x1, 0xf}}, {0x1ff, 0x9, {0x0, 0x6}}, {0x4, 0x1, {0x1, 0x5}}, {0x6, 0xf6, {0x2}}, {0x9, 0x7b, {0x0, 0x3}}, {0x9, 0x1, {0x1, 0x20000000}}, {0x6, 0x4, {0x1, 0x3}}, {0x4, 0x2, {0x3, 0x6}}, {0x401, 0x2, {0x3, 0x3}}, {0x2, 0xfdb5, {0x3, 0x7}}, {0x3, 0x8, {0x1, 0x4}}, {0xfff3, 0x2, {0x3, 0x6}}, {0x6, 0xfffd, {0x2, 0x9}}, {0xa, 0x1}, {0xfffa, 0x6, {0x3, 0x6}}, {0x1, 0x800, {0x1, 0x3}}, {0x9, 0x86b, {0x0, 0x2}}, {0x0, 0x91, {0x2, 0x5db3}}, {0x7, 0x7, {0x0, 0x6}}, {0x9, 0x200, {0x1, 0x8d27}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x6, 0xfffe, 0x8, 0x27, 'syz0\x00', "342efc98edda6c80931ab42c143b974299d37374550c11721d0f196b8fee6af6", "c2753cb2fda57536cf1f266108c2f4a09fb99853abcab03bd6a4e9d795f179ea", [{0x9, 0x8000, {0x1, 0x2f14}}, {0x9, 0x4, {0x1, 0x6}}, {0x1, 0x1, {0x2}}, {0x268, 0x234, {0x0, 0x401}}, {0x7, 0x7, {0x2, 0x7}}, {0x8, 0x324d, {0x2, 0x100}}, {0x101, 0xf, {0x1, 0x4}}, {0x8, 0x1d0, {0x3}}, {0xd, 0x7ff, {0x3, 0x3}}, {0x7, 0x2, {0x0, 0xce2}}, {0x10}, {0xffff, 0x7fff, {0x2, 0x6}}, {0x4, 0x1, {0x0, 0x4}}, {0x2, 0x1, {0x3, 0x4}}, {0x3, 0x4, {0x0, 0xb5}}, {0x5, 0x7aa1, {0x2, 0x7f}}, {0x3, 0x6, {0x3, 0x1000}}, {0x8000, 0x9, {0x1, 0x6}}, {0x401, 0x5, {0x0, 0x8}}, {0xb4b2, 0x9, {0x0, 0x1}}, {0x9, 0x4, {0x1, 0xf}}, {0x1ff, 0x9, {0x0, 0x6}}, {0x4, 0x1, {0x1, 0x5}}, {0x6, 0xf6, {0x2}}, {0x9, 0x7b, {0x0, 0x3}}, {0x9, 0x1, {0x1, 0x20000000}}, {0x6, 0x4, {0x1, 0x3}}, {0x4, 0x2, {0x3, 0x6}}, {0x401, 0x2, {0x3, 0x3}}, {0x2, 0xfdb5, {0x3, 0x7}}, {0x3, 0x8, {0x1, 0x4}}, {0xfff3, 0x2, {0x3, 0x6}}, {0x6, 0xfffd, {0x2, 0x9}}, {0xa, 0x1}, {0xfffa, 0x6, {0x3, 0x6}}, {0x1, 0x800, {0x1, 0x3}}, {0x9, 0x86b, {0x0, 0x2}}, {0x0, 0x91, {0x2, 0x5db3}}, {0x7, 0x7, {0x0, 0x6}}, {0x9, 0x200, {0x1, 0x8d27}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4020940d, &(0x7f0000000c00)) 792.065578ms ago: executing program 0 (id=1774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x250, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xc7, 0x7, 0x1, 0x0, "f7d934a91a36dc1988c547d098680c43a2f296c89e581a87412dca73e7dbb6a3d03a606ad7a29414e8a2d78a57c3c248aa9f9e1468d1898ba727b2c08c2d17de00d2772e90e4d8239cfe5244204ced1c800c3a3a75a65ef5748639ced42dcd5d5c803bccbaf5386a7972af84ff26cb60b2e9888950e4eeca562cbb0125a5936da39306b052506db9c21768c7d468373238b776531d6323f42633102b0b9c8b4a92d2c5fa49ec22a2648c257e5cf913e49e4eff8ef1adaf4ce03b00f7c2584f3f4f3e24"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x104, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}]}}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}]}}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) r1 = accept(r0, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000400)=0x8, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0xc, 0x7, 0x80000000, 0x21, @local, @empty, 0x70f, 0x20, 0xb, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x1c, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc6e, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x0, 0xc, 0x4, 0x7, 0xffffffffffffffe0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @generic={0x6, 0x8, 0x9, 0x5}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0xcb, &(0x7f0000000ac0)=""/203, 0x41100, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x1, 0xd, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xf, &(0x7f0000000480)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000500)='GPL\x00', 0x3, 0x18, &(0x7f0000000540)=""/24, 0x0, 0x2, '\x00', r3, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0x2, 0x81, 0x3}, 0x10, r4, r5, 0x0, &(0x7f0000000e40)=[r6, 0x1, r0, r7, r8, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r9) sendmsg$can_raw(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x1d, r3}, 0x10, &(0x7f0000001040)={&(0x7f0000000fc0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x1f, 0x1, 0x0, 0x0, "ce1beab97f994fad1dd5b1af544f64b3cda0a990fa09e65bd5d826f70137b9c70855cdc9d676418fe7e6be8ed95fde3cfb9e710920f9214f0f1e28431438f412"}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x408d0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r11, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r10, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7d}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x91) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f00000013c0)=[@window={0x3, 0x1ff, 0x5}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", ""]}, 0x14}}, 0x24048080) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000001500)={@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, 0x0, "7fe30d3439f3182340da5cb6fd9eeacf40864f3cb0060534bf044df7e549d80f", 0x3ff, 0x8, 0x1, 0xd6}, 0x3c) r14 = accept(r1, &(0x7f0000001540)=@hci, &(0x7f00000015c0)=0x80) recvfrom(r14, &(0x7f0000001600)=""/143, 0x8f, 0x100, &(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x80, @local, 0x9, 0x2}, 0x80) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001740)=0x30300, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r15, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) 785.080075ms ago: executing program 5 (id=1775): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x0, 0x64000000}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 726.543322ms ago: executing program 2 (id=1776): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x11, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 707.372174ms ago: executing program 5 (id=1777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x30, &(0x7f0000000400)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000480)=0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20f5a4ad8a805049}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtaction={0x4aa8, 0x30, 0x10b, 0x0, 0x0, {}, [{0x4a94, 0x1, [@m_pedit={0x4a90, 0x12, 0x0, 0x0, {{0xa}, {0x3a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x4, 0xf, 0x7, 0x9, 0x1}, 0xc, 0xff, [{0x9, 0x1, 0xddd, 0xfffff219, 0x4, 0x3}, {0x4, 0x4, 0xd, 0x3a4, 0x8, 0xa}, {0x48e, 0x3, 0xfffffffa, 0x6, 0x7fffffff, 0x6}, {0xe6c, 0x5, 0xfff, 0x9, 0xbe06, 0x4}, {0x5, 0xdde, 0xd8, 0xb, 0x9, 0x8}, {0x81, 0x1285, 0x7, 0x3, 0x8bd8, 0x6}]}, [{0x8, 0xe, 0x7, 0x4, 0x7fc, 0x2}, {0x1, 0xecc5, 0xf5d, 0x401, 0xe2df, 0x80}, {0x4, 0x6, 0xd532, 0xffffcd65, 0xc}, {0x27f7, 0x400, 0x1, 0x5, 0x80000000, 0x6}, {0x48b0, 0xa3f, 0x0, 0x9, 0xeec7, 0x7}, {0x1, 0x800, 0x9, 0xb, 0x5, 0xfffffffe}, {0x800, 0x3, 0x7ff, 0x3, 0x2, 0x101}, {0x1000, 0x200, 0x800000, 0x6, 0x8ca4, 0x1}, {0x8, 0x7, 0xd, 0x8, 0x63, 0x1}, {0x5, 0x2, 0xf, 0x6, 0x2}, {0x2, 0x4, 0x4533, 0x5, 0x6, 0x9}, {0x2, 0x6, 0xa10, 0x6, 0x7, 0x6}, {0x3, 0xffff, 0x3, 0x2, 0xa, 0x9}, {0x9, 0x80, 0x94cc, 0x9, 0xe, 0x2}, {0x7, 0x5, 0x8, 0xc, 0x3, 0x9}, {0x100000, 0xb, 0x7, 0xfffffffd, 0x8d, 0x7}, {0x1, 0x40, 0x7fff, 0x1, 0x6}, {0x6, 0x9, 0x4, 0xf87e, 0x2, 0x1b}, {0x4, 0xc0c, 0x5, 0x800, 0x6, 0x20000}, {0xa, 0x0, 0x10, 0xfffff000, 0x9, 0xfffffff7}, {0x8, 0x815d, 0x7, 0x905, 0x9}, {0x10000, 0x1, 0x3, 0x6, 0xf, 0x2}, {0x800, 0x200000, 0x2207, 0x9, 0x5, 0x1}, {0x8, 0xffffff01, 0x8, 0x8, 0x7, 0x887e}, {0x0, 0x7f, 0x86, 0x4, 0x6, 0x6}, {0x2, 0x9c, 0x1, 0x7fffffff, 0x9, 0x2}, {0x9, 0xfffffffa, 0xa0, 0x96e, 0x2, 0xed}, {0x3, 0x7fff, 0x25, 0x5, 0x0, 0x6}, {0xb2, 0x2, 0xe, 0x8000, 0xc08, 0xd}, {0x9aba, 0x5, 0x4, 0x0, 0x0, 0x4}, {0xffff, 0x5, 0x5, 0x9, 0x8, 0x9}, {0x2000000, 0x7fff, 0x4, 0x3, 0x7b27, 0x7}, {0x4, 0xc, 0x5, 0x8, 0x7f, 0x6}, {0x8, 0x0, 0x3, 0xd4, 0x7, 0x81}, {0x800, 0x6000000, 0xfff, 0xc, 0x0, 0x2}, {0x2, 0x4, 0x5, 0xcc1d, 0xa}, {0x401, 0x5, 0x8000, 0x8a8, 0x7, 0x9}, {0x0, 0x880, 0x7fff, 0x4, 0x4d, 0x322101b}, {0x7fff, 0x5, 0x4, 0x0, 0x374, 0x7}, {0x1, 0x7, 0x401, 0x800, 0x0, 0x2}, {0x700000, 0x1ff, 0x0, 0x4, 0x2, 0x9}, {0x4, 0x1, 0xb84, 0x4, 0x5, 0x7b}, {0x9, 0x6, 0x4, 0x3, 0x8, 0x8}, {0x2, 0x2, 0x2, 0xf, 0x3, 0x7}, {0xff, 0x6, 0xfa0, 0x1, 0x29, 0x66}, {0xffffff70, 0x40, 0x52, 0x4, 0x8, 0x7}, {0x400, 0x81, 0x5, 0x766, 0x7, 0x4}, {0x7, 0x2, 0x3, 0x5, 0x0, 0x8}, {0xfff, 0x6, 0x1000, 0x3ff, 0x4, 0xe}, {0x9b, 0x3, 0x0, 0x3, 0xd5cd, 0xf9}, {0x2, 0x7, 0x2, 0x8, 0x101, 0x81}, {0xaac6, 0x9, 0x3e1, 0xe, 0x8001, 0xfff}, {0x9, 0x9a2, 0x3, 0x100, 0x8, 0x10001}, {0x2, 0x2, 0x2, 0x9, 0x1c00000, 0x18}, {0x32d, 0x6, 0xfffffff9, 0x1d, 0x4}, {0x5, 0x5, 0xffffb783, 0x8, 0x4, 0x3}, {0xffffff04, 0x6, 0x8, 0x7f, 0x500, 0x2d12}, {0x4, 0x8, 0xffff2075, 0xfffffffa, 0xfe57, 0x8}, {0x8, 0x3f, 0x79, 0x3a, 0x10000, 0x4}, {0x5, 0x4, 0x101, 0x0, 0x9}, {0xffff, 0xfffffffd, 0x500, 0x8, 0x4, 0x11}, {0x2, 0xfff, 0x10001, 0x4, 0x6}, {0xb9, 0x1, 0x5, 0x7ff, 0x81, 0x10001}, {0xe3fc, 0xdc52, 0xc, 0x5, 0x9fb7, 0x5d4d362a}, {0x10000, 0x7, 0x6, 0x2932, 0x50, 0x5}, {0x4, 0xfffffffc, 0x7, 0x328, 0x3, 0xff}, {0x12, 0xf, 0x6, 0x7f, 0xfff, 0x9b3}, {0x5, 0x6, 0x8, 0x6, 0xffffffff, 0x3}, {0x8, 0x8ec, 0x6, 0x200, 0xf}, {0x3, 0xa3, 0x3, 0x5, 0x8, 0x3}, {0x8001, 0x200, 0x7, 0x5, 0x80000000, 0x9}, {0x9f7, 0x9, 0xfffffffa, 0x3ff, 0x526}, {0x20c, 0xfffffffe, 0x7, 0x7, 0x8, 0x1}, {0xec, 0x2, 0x0, 0x4, 0x9, 0x1}, {0x80000001, 0x4, 0x2, 0x5, 0x5, 0x81}, {0xfffffffa, 0x5, 0xa, 0xd5f4, 0x4, 0x101}, {0x6, 0xfffff328, 0xf, 0x1000, 0xee1a, 0xffff658d}, {0x3, 0xdb9a, 0x9966, 0xfffff801, 0x8, 0x5}, {0x1, 0x0, 0x8, 0x6, 0x80, 0x5}, {0x60, 0x9, 0x3, 0x4, 0x0, 0x6}, {0x31, 0x0, 0x3, 0x6, 0x7f, 0xe1a6}, {0x6, 0x1, 0x80000001, 0x4, 0x3, 0x81}, {0x6, 0x7, 0x1, 0xd, 0x5, 0xe22b}, {0x2, 0x4b, 0x8, 0x3b, 0x5, 0xa}, {0x80000000, 0x2, 0xd, 0x8, 0x800, 0x80000001}, {0x7ff, 0x1, 0x6, 0x7, 0x319, 0x2}, {0x101, 0x0, 0x1, 0x5, 0x5, 0x8}, {0x7ff, 0x7, 0xfffffff7, 0x58, 0x8, 0x8}, {0xc, 0xaad, 0x400, 0x7, 0x9, 0x478}, {0x4, 0x40, 0x8, 0x80, 0x3, 0x75e3}, {0x317, 0x2, 0x200, 0x6, 0x1, 0x5}, {0xd, 0x1, 0xfffffffd, 0x7d, 0x5, 0x7}, {0x7, 0x400, 0x7, 0x0, 0x42c, 0x3}, {0x9f, 0x7, 0xce08, 0x4, 0x8, 0x59a}, {0x501, 0x7f, 0x0, 0x491, 0x1, 0x4}, {0x13, 0x5, 0x1, 0x7, 0xe6b, 0xbefb}, {0x8, 0x8, 0x80000001, 0x30000000, 0x7}, {0xa2, 0x9, 0x3, 0x6, 0x9, 0x1}, {0xeab, 0x54000000, 0xb, 0x6, 0xffff7fff, 0x4}, {0x7692, 0x7fffffff, 0x5, 0xfff, 0x0, 0x800}, {0xfffffffc, 0x2, 0x4, 0x0, 0x7, 0x7fff}, {0x7ff, 0x40, 0x4, 0x9134, 0x400, 0x4}, {0xffff, 0x2, 0x7, 0xfffffffa, 0x8, 0x5}, {0x0, 0x81, 0x7ff, 0x7, 0xc68a, 0xf4}, {0x8, 0x7, 0x0, 0x8001, 0x0, 0x6827}, {0x5, 0x4, 0x5, 0x0, 0xece1, 0x2}, {0x0, 0xfffffffa, 0x8, 0x5, 0x6, 0x1}, {0x0, 0x1, 0x8, 0x1, 0x4, 0x1}, {0x4, 0x5, 0x5a3, 0xe0000000, 0x3c51, 0x5}, {0x5, 0x5, 0x8, 0x7f, 0x8, 0x4c16}, {0xa9ba, 0x100, 0x3, 0x6, 0x7, 0x90}, {0xffff, 0x200, 0x3, 0x99c, 0x7f, 0x6}, {0xe49, 0x1ff, 0x7, 0x0, 0x2, 0x2}, {0x7, 0x6, 0xffff, 0xfffffff7, 0x4, 0x4}, {0x7, 0x0, 0x8, 0x9, 0x7, 0x4}, {0x7, 0x3cc, 0x2, 0x6, 0x9, 0x2}, {0x77, 0xa6f, 0x1000000, 0x2, 0x10001, 0xd}, {0x5, 0x100, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff, 0x8, 0x10, 0x8909, 0x6}, {0x1f, 0x3, 0x5, 0xffffffff, 0xfffff97e, 0x8}, {0x3, 0x5e, 0x1, 0x8, 0xa, 0xffffffff}, {0xfffffff9, 0x4, 0x4, 0x7, 0x8, 0x4}, {0x7fff, 0x7ff, 0x5, 0x9, 0x540, 0x6}, {0x10, 0x1, 0x8100, 0x6, 0x10000, 0x9f4}, {0x5, 0x9, 0x2, 0x7ff, 0x6, 0x8}, {0x200, 0x4, 0xd784, 0x8, 0x5293, 0x9}, {0x9, 0xf, 0x9, 0x6, 0x8, 0x4}, {0x10, 0xffff, 0x8, 0x1, 0xe, 0x40}], [{0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x734095c6b5143b5a, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0xe0d6b1186be149f5}, {0x1}, {0x5}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x1, 0x1}, {0x16a9fc51cf5d4209, 0x1}, {}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x3}, {0x1}, {0x0, 0xe87cdab01c9b5cd9}, {0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x7}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0xb463f2306bd63dc9}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x8, 0x80000000, 0x10000000, 0x3, 0xfff}, 0x8, 0x24, [{0x10, 0xd, 0x3, 0x7, 0x80000000, 0x4}, {0x5, 0x2, 0xff, 0xc, 0x3, 0x3}, {0x8, 0x8, 0x3, 0x2, 0x7fffffff, 0x2}, {0x85c8, 0x5, 0xfffff000, 0xfffff001, 0x9, 0xde62}, {0xfffff8e9, 0x80000001, 0x8000, 0x3, 0xfffffffa, 0x3}, {0xa25, 0x8, 0x80000000, 0x4, 0x160}, {0x35, 0x3, 0x9, 0x4, 0x10000, 0x9}, {0x3, 0xc8a9, 0x400, 0x6, 0x9, 0x6}, {0xd7e, 0xe2, 0x9, 0x92e, 0x1, 0x4}, {0x5, 0x2, 0x0, 0x81, 0x3, 0x1}]}, [{0x200, 0x3, 0x800, 0x6, 0x7ff, 0x3}, {0x81, 0xf63, 0x2526e811, 0x4, 0x67, 0xffffff94}, {0x208d, 0xa31, 0x9, 0x148, 0x7, 0x7f}, {0x10000, 0x8, 0x7, 0x401, 0x1, 0x1000}, {0x9, 0x9, 0x8, 0x8, 0x4, 0x8bc6}, {0xbbac, 0x10, 0x3, 0xeda, 0x6}, {0x7ff, 0x7, 0x6, 0x7, 0xff, 0xf}, {0x401, 0x6, 0x1, 0x2, 0x4}, {0x7, 0x0, 0x9, 0x9, 0x0, 0x5}, {0x2, 0x2, 0x1, 0xf, 0xb, 0x9}, {0x0, 0x75d, 0x0, 0x2, 0x2, 0x5}, {0x3, 0x37e, 0x8000000, 0x9272, 0x2b, 0x4}, {0x4, 0x4, 0x5821, 0x1, 0xdd5d, 0x4}, {0x8, 0x8000, 0x3, 0x6, 0x9, 0xffff}, {0xff, 0x9, 0x0, 0x8000, 0x2, 0x7fffffff}, {0x7, 0x7ff, 0x5, 0x3b, 0x6, 0x8000}, {0xa, 0x9, 0x9, 0x9, 0x3960, 0x2}, {0x5, 0x6, 0x1, 0x5, 0x1000, 0x7}, {0xb1, 0x40, 0x5, 0x9, 0x101, 0x7}, {0x8, 0x0, 0x0, 0x3, 0x0, 0x6}, {0x6, 0x6, 0x2a84, 0x5, 0x8, 0x2}, {0xfffffff6, 0x200, 0xa, 0xf8, 0x7fff, 0x5}, {0x5, 0x80000001, 0x7fff, 0x1289, 0xff, 0xfffffff9}, {0x4, 0xfff, 0xd, 0x68ff, 0x0, 0x7}, {0x3, 0x5, 0x4, 0x1ff, 0x4, 0x1}, {0x7, 0x1, 0x40, 0x928, 0xfffffffd, 0x6}, {0xff, 0xfffffffd, 0xf7, 0x10000, 0x4, 0x8}, {0x10001, 0x1, 0x0, 0x3, 0x1, 0x1}, {0x9, 0x40, 0x7fff, 0x8, 0x7, 0x1}, {0x2, 0x7, 0x8, 0x2, 0xe9314ab, 0x4}, {0x5, 0x0, 0x413, 0x5, 0x3431, 0x81}, {0x9, 0x8, 0x50000, 0x9, 0x1ff, 0x8}, {0x7, 0x1, 0x4, 0x9, 0x8, 0x2}, {0x401, 0x81, 0x401, 0x8, 0x3, 0x7c2}, {0x5c2, 0x2, 0x80000001, 0x6, 0x7, 0x1}, {0x4, 0x81, 0x5c9, 0xfffffffa, 0x4, 0x80000000}, {0x109, 0x9, 0xf332, 0xfffffffa, 0x6, 0x4}, {0x5, 0x200, 0x10001, 0x1, 0x7ff, 0xfffffff8}, {0x7, 0x6, 0x1, 0x5, 0xf7, 0x34e}, {0x0, 0x6, 0x1, 0x4, 0x1000, 0xfffffffa}, {0x81, 0x8, 0x8, 0x1, 0x4, 0xcb96}, {0xffff, 0xa9f3, 0x9, 0xedc1, 0x3, 0x1}, {0x9, 0x0, 0x4, 0xa, 0xb, 0x3}, {0x80000000, 0x3, 0x9, 0xd, 0x0, 0x7}, {0xc1, 0x5, 0x40, 0x4, 0x7, 0x7}, {0xc, 0x686a, 0x3, 0x989b, 0x7fff, 0x400}, {0x2, 0xfffffff7, 0x1, 0x8, 0x4, 0x9}, {0x7, 0x0, 0xfffffff7, 0x401, 0x8, 0x3}, {0x3, 0x85000, 0x3, 0x0, 0x8001, 0x1}, {0x2, 0x8, 0x5, 0x5, 0x3ff, 0x3ff}, {0x6, 0x5, 0x6, 0x4, 0x0, 0xffff}, {0x7fff, 0x62075a87, 0x9f8, 0x4, 0xfffffffb, 0x4}, {0x6, 0x3, 0x8, 0x8, 0x8000, 0x4}, {0x79b, 0x794, 0x7, 0xeda, 0x7, 0xdd}, {0xd, 0x1, 0x1, 0xe, 0x1, 0xe0000}, {0x73e00000, 0x200, 0x9, 0x4, 0x3}, {0x8001, 0x6, 0x4, 0x0, 0x3, 0x5}, {0xff, 0x8, 0x2, 0x9, 0x2, 0x4}, {0x80, 0x40000, 0x7, 0x9, 0x1, 0x9}, {0x0, 0x8, 0x3, 0x101, 0xd, 0x4}, {0x73e3, 0x4, 0x2, 0x1, 0x9, 0x9}, {0x6, 0x400, 0xa9, 0x5, 0x5, 0x53f}, {0x2, 0x8, 0x4, 0x5, 0x3}, {0xffffffff, 0x1, 0x9, 0x7, 0x9, 0x5}, {0xedd, 0x187d, 0x101, 0x1000, 0x80000000, 0x80000001}, {0x9, 0x0, 0x2, 0x2, 0x8, 0x61d2}, {0x3, 0x621b19b4, 0x1b, 0x1467, 0x1800000, 0x6}, {0x2, 0x3, 0x1, 0x8000, 0x80000001, 0x400}, {0x0, 0x9, 0x822, 0xc, 0x3, 0x8}, {0x7, 0xad3, 0x1, 0x7f, 0x1, 0x10000}, {0x1, 0x7, 0xffff, 0x7fff, 0x1, 0x2}, {0x4, 0x3, 0x6, 0x100, 0x4, 0x9}, {0x401, 0x1, 0x6, 0x8, 0x3, 0x5}, {0x4, 0x4, 0x0, 0xb87, 0x9, 0x29e}, {0x7, 0xfffffff7, 0xed, 0x5, 0x81, 0x800}, {0x3, 0x7, 0x57, 0x1, 0x80000000, 0x1ff}, {0x1, 0xfffffbff, 0x4, 0x4af03b1d, 0x3, 0x8}, {0x0, 0x4, 0x1, 0xe, 0x9, 0x71c}, {0x9, 0x9, 0x3, 0x1ad, 0x3ff, 0x7f}, {0x7, 0x602, 0x8001, 0x3, 0x5, 0xff6}, {0x8, 0x3, 0x5, 0xffff0001, 0x9, 0x7fff}, {0x7, 0x1, 0x7, 0xfffff801, 0x6, 0x10}, {0x8001, 0x8001, 0xf5, 0x7, 0x7, 0x5973}, {0x10, 0x80, 0x81, 0x101, 0x5, 0xa55d}, {0xfff, 0x5, 0x9, 0x849, 0x40, 0x9}, {0x1, 0x9, 0x8, 0xffffff2e, 0x5, 0x7}, {0x200, 0x2a1, 0x3, 0x96, 0x6, 0x4}, {0x4, 0x9, 0xfffffff9, 0x3, 0x2, 0x8}, {0x800, 0x9, 0x2, 0x2, 0x3, 0x5}, {0x60c8, 0x7, 0x1, 0x7, 0x8, 0x7fffffff}, {0x92, 0x4, 0xfffffffa, 0x0, 0x5, 0x8000}, {0x3, 0xfffffff9, 0x4, 0xffff, 0x72, 0x6}, {0x2, 0xa94, 0x2, 0x2a0a, 0xad5, 0x9}, {0x1ea0, 0x6, 0x9, 0xfffff8fb, 0x0, 0x4}, {0x1000, 0x0, 0x2770, 0xe2e, 0xffffff81, 0x6}, {0xff, 0x9, 0x4, 0x87, 0x2, 0x2}, {0x6, 0x5, 0x4, 0x0, 0x1835, 0xd81}, {0x9, 0x81, 0x0, 0x800, 0x4, 0x200}, {0xffffffff, 0x8000, 0x80000000, 0x7fff, 0x6, 0x60b}, {0x3, 0x8, 0x5, 0x800, 0x401, 0x20000}, {0x2, 0x0, 0x1, 0xb0e, 0x400, 0x7fff}, {0x2, 0x101, 0x10000, 0x5, 0x6, 0x1}, {0x3, 0xc2d, 0x1, 0x2, 0x445fdfdd, 0x8}, {0x2, 0xffff, 0x8, 0x239, 0x8, 0xce}, {0xffffffff, 0x465d697b, 0x3ff, 0x86}, {0x2, 0x49a, 0x758a, 0x8, 0x80000001, 0xffffffff}, {0x419, 0x7, 0x7, 0xfbd, 0x9f0, 0x9}, {0xffff, 0x8, 0x7fff, 0x7, 0x5, 0x9}, {0x6, 0x6, 0x41cb, 0x1, 0x10, 0x5}, {0x10, 0x1, 0x3, 0xb2, 0x2, 0x9}, {0x0, 0x8, 0x5, 0x200, 0x5, 0x9ce}, {0x6, 0x1, 0x7fff, 0x4, 0x7, 0x5}, {0x3, 0x2, 0x4, 0x0, 0x1000, 0x2}, {0x1, 0x7, 0x5, 0x3, 0x10001, 0x7785}, {0x5, 0x1af, 0x7fff, 0xb, 0xfffffff1, 0x6}, {0x35d5f7c8, 0x7, 0x7e2, 0x5, 0x2e, 0x95f}, {0x7f, 0x1d9, 0xfffffffa, 0x6, 0x5, 0x9}, {0x5, 0x8, 0x6, 0xb3, 0x4e, 0x3}, {0x1, 0x101, 0x1, 0x800, 0x4, 0x4}, {0xbbb, 0x800, 0x8, 0xfffffff9, 0xdb, 0x100000}, {0x6, 0x7, 0xff, 0x9, 0x1, 0xa}, {0xfffffffa, 0xd, 0xa, 0x41, 0x5, 0x7f}, {0x4, 0x9, 0x9, 0x7, 0x4db4, 0x4}, {0x4c7c, 0x88400, 0x20, 0xa043, 0x8}, {0xbf38, 0x2, 0xffffb207, 0x8, 0x6, 0x5}, {0x7fff, 0x5, 0x8, 0x6, 0x6c, 0xfffffffe}, {0xef, 0x0, 0x8fa, 0x8, 0x1, 0x8}, {0x9, 0x8, 0x1ff, 0x7, 0x9, 0x8}], [{0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x4}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3c9c6f65bc71dd08}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x7}, {0x4}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0xce49d4b978a0c1de}, {0x2, 0x1}, {0x3}, {0x38781539f7dfd089, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x7}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0xe9f8b3171791bb48}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x4}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3, 0xfffffff8, 0x10000000, 0xd0d, 0x5}, 0x2, 0xe, [{0x2, 0x5, 0x8, 0x4, 0x7, 0x7f640000}]}, [{0x100, 0xffffffff, 0x100, 0x4, 0x81, 0x9}, {0x1, 0x5, 0xfffffff8, 0x0, 0x0, 0x1}, {0x32c1, 0xd5b, 0xfd, 0x7, 0x4, 0x7}, {0xb, 0xfffffff9, 0x5f2, 0x6, 0xba, 0x2}, {0xfffffe00, 0xa5, 0x4, 0x8bd5, 0x2, 0x9}, {0x5, 0x3f800000, 0x0, 0x0, 0x4, 0x7}, {0x9f, 0x6, 0x3, 0x39f, 0x5, 0x101}, {0xc54e, 0x1, 0xb, 0x4, 0x3, 0x4}, {0x1c000, 0xa650, 0x1ff, 0x8, 0x5, 0x8}, {0x8, 0x2, 0x0, 0xc4b, 0x7, 0x6}, {0xb30, 0xf0, 0x1, 0x3, 0x6, 0x6}, {0x1, 0x20, 0x0, 0x8000000, 0xbc, 0x5}, {0x7fff, 0x62ef, 0x0, 0x4, 0x80000001, 0x9}, {0x3, 0x8000, 0xffff, 0x6, 0x4, 0x2}, {0x10001, 0x9, 0x0, 0x20, 0x7}, {0x3, 0xffff, 0x6, 0x7, 0xa, 0x5}, {0x8, 0x10, 0x4, 0x2, 0x101, 0x9}, {0x8, 0x5, 0x7, 0x3, 0x8, 0x5}, {0x0, 0x800, 0x0, 0x58, 0x2, 0x6}, {0x3, 0xd, 0x5, 0x81, 0x3, 0x7fffffff}, {0x4, 0x4, 0xef3, 0x728, 0x4, 0x3}, {0x7, 0x0, 0x4, 0x1, 0x7, 0x1}, {0x8, 0x7, 0x1, 0xfffffffa, 0x9, 0x2}, {0xccd0, 0x32e, 0x17, 0x8, 0x0, 0x8}, {0x9, 0x9, 0x8, 0x2, 0x6, 0x7}, {0xfffffff9, 0x3, 0x9, 0x690, 0x5, 0xbec}, {0x7, 0x0, 0x3c3, 0xfffffffb, 0xdc, 0xa0}, {0x4, 0xb, 0x851f, 0xf, 0x5, 0x5}, {0xfffffffe, 0x4, 0x0, 0x3ff, 0x401, 0x7f}, {0x10001, 0x5ced1931, 0x5f1, 0x7, 0x3ff, 0xd26}, {0x9fe, 0x2, 0x3, 0x9, 0x6, 0xd}, {0x7, 0x40, 0x2, 0x140000, 0x2, 0x8000}, {0x0, 0x9, 0x401, 0xfff, 0x4, 0xd1d}, {0x352, 0x1d, 0x401, 0x5, 0x8, 0x6f1e}, {0x8, 0x9, 0x0, 0x9, 0x6, 0x2c}, {0x7, 0x2, 0x7, 0x5, 0x81, 0x3}, {0xc636, 0x2, 0x0, 0x7, 0xfffffffb, 0xffffffff}, {0x7, 0x8, 0xd42, 0x7, 0x7f, 0x5}, {0x8, 0x7, 0x101, 0xf, 0x800, 0x9}, {0x1, 0xe, 0x1, 0x43, 0x6, 0x3}, {0xcca2, 0xda, 0x9, 0x10000, 0x4, 0x3}, {0x5, 0x5, 0x6, 0x101, 0x0, 0x8}, {0x10, 0x4, 0x2, 0x9, 0x3e28, 0x81}, {0x8, 0x8d25, 0x0, 0xfffffffa, 0x7, 0x6}, {0x1ff, 0x0, 0x7fff, 0x2, 0x800, 0xc}, {0x6, 0xa873, 0x7, 0x0, 0x3, 0x8a19}, {0x7ff, 0x2, 0xe9, 0x8, 0x5, 0x37}, {0x2, 0x1000, 0x1, 0x1, 0x468, 0xfffffffd}, {0x71, 0x1ff, 0x5, 0xdd, 0x9}, {0xaf3e40bb, 0x3ff, 0x6, 0x7, 0x7, 0x7fffffff}, {0xe55, 0x401, 0x2, 0x5e45, 0x2, 0x6}, {0x9, 0x7, 0x3, 0x0, 0x3, 0x525}, {0x3, 0xffffff6e, 0x1, 0x80, 0x1, 0xffffffc0}, {0x4, 0xfffffff8, 0x3, 0x6, 0x10, 0x8701}, {0xfffffffe, 0x440, 0x9, 0x7, 0x9, 0x40}, {0x0, 0x0, 0x4a, 0x770, 0x2, 0x8}, {0x4, 0x2, 0x4, 0x7, 0x1ff, 0x2}, {0x2, 0x5, 0xa, 0x200, 0x8c, 0x5}, {0xa, 0x5, 0x2d8, 0x101, 0x1, 0x2}, {0x8, 0x9, 0xa8, 0xff, 0x3ff, 0x3}, {0x0, 0x7fff, 0x10001, 0x4f63, 0x10001, 0xffff}, {0x10001, 0x4, 0x8001, 0x2, 0x3, 0x4bc366f2}, {0x0, 0xfffffff9, 0x9, 0x9f38, 0xfffffffd, 0x1}, {0x3, 0x6, 0x3, 0x48000000, 0x9}, {0x9, 0x7, 0x4, 0x6, 0x7eb, 0xd}, {0x3, 0xffff, 0x9, 0x3, 0x7913, 0x8}, {0x5, 0x4, 0x10000, 0x5, 0x1}, {0x1, 0xa2, 0x6, 0x1, 0x1ff, 0x800}, {0xf34, 0x10001, 0x80000000, 0x7, 0x5, 0x4}, {0x1000, 0x3, 0x8, 0x7f4, 0x7, 0xffffffff}, {0x101, 0xeb3, 0x8, 0x1, 0x400}, {0x8000, 0x0, 0x1, 0x8, 0xd1d00f5, 0x6}, {0x6, 0x200, 0x2, 0xffff, 0x4de9, 0x1000}, {0x5, 0x0, 0xb, 0x9, 0x4, 0x4aadffeb}, {0x5, 0xffff, 0xfff, 0x0, 0x60d, 0xfffff801}, {0x5, 0x7, 0x9, 0x40, 0x5, 0x8}, {0x1494, 0x7, 0x5a, 0x3, 0x4, 0x3}, {0x77, 0x3, 0x80, 0x58, 0x0, 0x6}, {0x6, 0x40, 0x4066, 0x80000001, 0xfffffffc, 0x7}, {0x7ff, 0x8398, 0x8, 0x0, 0x8000}, {0x1, 0x3, 0x4, 0x1, 0x6, 0x101}, {0x2, 0x7, 0x101, 0x3, 0x4, 0xdf6}, {0x9, 0x4, 0x200, 0x2, 0x9, 0x2}, {0xf7f, 0x0, 0x8, 0x800, 0x2, 0x3}, {0x1, 0xa9, 0x4, 0x100, 0x8, 0xf}, {0x6, 0x2, 0x9, 0x7, 0x101, 0x5}, {0x8, 0x1000, 0x7, 0x9, 0x2400, 0xffffff81}, {0x5, 0xffff, 0xff, 0x9, 0x0, 0x8}, {0x6, 0x75134995, 0x401, 0x6, 0x1, 0x9}, {0x0, 0x8, 0x4, 0x9, 0x80, 0xffff0000}, {0x1, 0x4, 0x8, 0x0, 0xfffffff8, 0x93}, {0x700, 0x9, 0xc, 0x4, 0xfffffffe, 0x7}, {0x8, 0x7, 0x1f, 0x6, 0x40, 0x3}, {0x4, 0x3ff, 0x7f, 0x6, 0x3, 0x9}, {0x551, 0x1, 0x3, 0x101, 0x8, 0x7f}, {0x1, 0xfffffffd, 0x1, 0xd5a, 0xffffffff, 0x10000}, {0x5df1, 0x6, 0x3, 0x8, 0x600000, 0x9}, {0x3, 0x0, 0x4, 0x3, 0x9, 0x5}, {0x9, 0x1, 0x4, 0x4, 0x0, 0xfffffff8}, {0x8, 0x6, 0x3, 0x0, 0x9, 0x7}, {0x800, 0x400000, 0x1ffe, 0x6, 0x4, 0x400}, {0x35504926, 0x4, 0x80000001, 0x9, 0x3, 0x8}, {0x5, 0x36fe07ba, 0x1ff, 0xffff0000, 0x8, 0x2}, {0x2, 0x1ff, 0x6, 0x9, 0x3, 0x2}, {0x5, 0xfd, 0x6, 0xfff, 0x8, 0xa60}, {0x7, 0x10001, 0x7, 0x3, 0x949, 0x2}, {0x4, 0x2, 0x800000, 0xb201, 0x7, 0xfffffc01}, {0x2, 0x8, 0x2, 0x4, 0x0, 0x5bb}, {0x1, 0x4, 0x4, 0x9, 0x6, 0x3}, {0x7, 0x6, 0x0, 0x0, 0x4, 0x81}, {0x1, 0x9, 0x80, 0x2, 0x1ff, 0x80000001}, {0x7, 0x2, 0xa7, 0x3, 0x80000001, 0x5a}, {0x5596, 0xdb86, 0x400, 0x1562, 0x9d1, 0xb}, {0x0, 0x3, 0x5, 0x5, 0x7ff}, {0x3, 0xe, 0x6, 0x2, 0x3, 0x4}, {0x4, 0x0, 0x7000000, 0x18000000, 0xb, 0x3}, {0x3ff, 0x7ff, 0x8, 0x3, 0x2, 0xb9b3}, {0xffffffb6, 0xd9f, 0x4, 0x2, 0x4, 0x5}, {0x7, 0xf, 0x1, 0x6, 0x80, 0xfffffffc}, {0x1000, 0x6, 0x3959384a, 0x7fff, 0x1, 0x5}, {0x9, 0x9d, 0x10, 0x9, 0x3, 0x9}, {0x3ff, 0x6f1, 0xaf, 0x4, 0x0, 0x52f}, {0x2, 0x8, 0xfffffff8, 0x9051, 0xe, 0x7}, {0xe, 0xd5, 0x0, 0x6, 0x2, 0x2}, {0x4, 0x7, 0x9, 0xe4b4, 0x7, 0x7ff}, {0x6, 0x10, 0x4, 0xc, 0x6520, 0x7}, {0xfffffffc, 0x7a3, 0x7e, 0x3, 0x0, 0x7}, {0x2, 0x4, 0xd, 0xffffff7f, 0x4, 0x4}], [{0x0, 0x1}, {0x1}, {0x4}, {0x2}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x7}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x8855d9d4117e1f56}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5}, {}, {}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1f9c8d97334e8426}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x78f7cd51d76232f}, {0x3}, {}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x755dc58904713fab, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x75a02003ae58fc34}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x0, 0x6, 0x3, 0x8000, 0xe}, 0x2, 0x7, [{0x8, 0xfffffffe, 0x0, 0x6, 0x8001, 0x5271}, {0x6, 0x7, 0x5, 0x6, 0x5, 0xa0d}, {0x7ff, 0x4, 0x1400, 0xf7e, 0x2, 0x6}]}, [{0x6, 0x3, 0x3, 0x5, 0x8, 0x9}, {0x747e0529, 0x7fffffff, 0x1, 0x1300ebf, 0x9746, 0x2}, {0x3, 0x9, 0x0, 0x0, 0x6, 0x1000}, {0x4, 0x721c, 0x8, 0x9, 0x40, 0x2}, {0x3a3ddd4e, 0x800, 0x9, 0x44a6, 0x4, 0xc}, {0x10, 0x2, 0x80, 0x9, 0x7ff, 0x9}, {0x3, 0x6, 0x0, 0x6bb, 0x1, 0xa6}, {0xfff, 0x6, 0x7fffffff, 0x3, 0x6, 0x4}, {0x0, 0x7, 0x80000000, 0x3, 0x3, 0x5}, {0x7, 0x9, 0x59, 0x1, 0x7, 0x42e}, {0x6, 0x5, 0x10000, 0xfffffffe, 0xfffffff8, 0xd}, {0x3, 0x200, 0x4ac, 0x6, 0x8, 0x2f99ade2}, {0x2, 0x5, 0x5, 0x8, 0x4, 0x2}, {0x6, 0x0, 0x4, 0x9, 0xa4d8, 0xcd}, {0x81, 0x3, 0x6, 0x9, 0x4, 0x4}, {0xe0, 0x5, 0x40, 0xb, 0x6, 0xe3d}, {0xd0ec, 0x0, 0x8, 0xee, 0xfffffffa, 0x3}, {0x2, 0x5, 0x0, 0x7, 0x5, 0xb}, {0x5, 0x6dd, 0x7, 0xfffffff6, 0x200, 0x5}, {0x100, 0xd535, 0x0, 0x2d, 0xc3f, 0x7de}, {0x5, 0xff, 0x5, 0x2, 0x94f, 0x2ab}, {0x0, 0x793f, 0x854, 0xb77e, 0xffffff01, 0x6}, {0x6, 0x9, 0x0, 0x1, 0x0, 0x3}, {0x6b6, 0x0, 0x22, 0xd, 0x1e72, 0x40}, {0x40, 0x1, 0x9, 0x10000000, 0x800}, {0x20, 0x3, 0x38, 0xd1e, 0x1000000, 0x6c}, {0x10, 0x5, 0x2, 0x3, 0x71a90728, 0x3f90}, {0x7, 0x80000001, 0x5, 0xfffffff7, 0xfb9c, 0xd3}, {0x2, 0x3ff, 0x7, 0xaf, 0x7ff, 0xb60}, {0x1, 0x7, 0xfffff000, 0x4, 0x801}, {0x969, 0x8000, 0x1, 0x8, 0x0, 0x8}, {0x5, 0x8, 0x3, 0x2, 0x1}, {0x1, 0x4, 0xffffffff, 0x8, 0x1, 0x9}, {0x6, 0xe, 0x38a35426, 0x2da5, 0x5, 0x7}, {0x7, 0xcb26, 0x4, 0x5, 0xd, 0x5}, {0x4, 0xffff, 0x4, 0x2, 0x81, 0x3}, {0x0, 0x5, 0x1, 0x6c, 0xfffffffb, 0x5}, {0x7, 0x8, 0xffffffff, 0x5, 0x9, 0x8}, {0xfc000000, 0x3, 0x2, 0x3, 0x0, 0x6}, {0x200, 0x8, 0x8, 0x7, 0xc9, 0x6}, {0x6, 0x3a9c, 0x6, 0x1, 0x1, 0x2}, {0x7fffffff, 0x1000, 0x5, 0x10, 0x26, 0x4}, {0x5, 0x7, 0x4, 0x9ed, 0x8, 0xc6}, {0xc, 0x6, 0x8, 0x8, 0xc7, 0x2}, {0x401, 0x4, 0x7f, 0x71cb, 0xfffffa2c, 0x1000}, {0x7, 0x1, 0x9, 0x7ff, 0x9, 0x2}, {0x0, 0xffffffa1, 0xf, 0xee, 0x9, 0x5}, {0x800, 0x6, 0x0, 0xc3, 0x9, 0x4}, {0x8, 0x1, 0x6, 0x7, 0x5afe35c, 0x9}, {0x8001, 0x5, 0x8, 0xf69b, 0x2, 0x9}, {0x610e193d, 0x4, 0x101, 0x9, 0x7, 0x1ff}, {0x7, 0x1, 0x5, 0x8001, 0x2, 0xffff7fff}, {0x10, 0xffff, 0x4f0dad96, 0xffffffde, 0xffffff00, 0x40}, {0x4, 0x7, 0x6, 0x5, 0x0, 0x401}, {0x800, 0x7, 0x1, 0x5, 0x6ef1dd4d, 0x2}, {0xc3, 0x2, 0x1, 0x0, 0x8, 0x3}, {0x81, 0x0, 0x9, 0x5, 0x5d, 0x10001}, {0x7fff, 0x23, 0x2, 0x9, 0x43b2, 0x9}, {0x7, 0x49c, 0x10, 0xc, 0xffff, 0x2}, {0x10001, 0x5, 0x7f, 0x8, 0x6, 0x8}, {0xffffffff, 0x3d, 0xffff, 0x3ff, 0xd, 0x5}, {0x0, 0x5, 0x9, 0xd, 0x7fff}, {0x0, 0x2, 0x5, 0x10001, 0x2}, {0x5, 0x2, 0x7, 0x5, 0xc5af, 0x8}, {0x0, 0x3a00000, 0x1882, 0x9b, 0x5, 0x1}, {0xffffffff, 0x6, 0x7, 0x80000000, 0xff, 0x800}, {0x6, 0x100, 0x6, 0x5, 0xffffffff, 0x2}, {0x63aed768, 0x6, 0xc, 0x0, 0xfff, 0x5}, {0x5, 0x80000000, 0xffff51ea, 0x91, 0x800, 0x7}, {0x5, 0x10000, 0x5, 0xfffffffa, 0x1, 0x10}, {0x0, 0x5, 0x7, 0x1, 0x40, 0x5c8f}, {0x0, 0xacbf, 0x5, 0x5, 0xcf5b, 0x1}, {0x10001, 0x1, 0x100, 0x1, 0x4, 0x400}, {0x8, 0xa69e, 0xffffffa0, 0xffff, 0x0, 0x4}, {0xeac6, 0x1, 0x3, 0x8, 0x1ff, 0x82370d5a}, {0x9, 0x3, 0x3ff, 0xb4, 0x1, 0x42}, {0x5, 0x2, 0x0, 0x8, 0x6, 0x8b3}, {0x4, 0x4, 0x3, 0x4, 0x5, 0x8000}, {0xcef, 0xca, 0x2, 0xc, 0x7, 0x9}, {0xd, 0x9, 0x7, 0x563, 0x80000000, 0x5}, {0x3, 0x4, 0x5, 0x1, 0x7, 0x5}, {0x9, 0xfffffffd, 0x1584, 0x0, 0x712b, 0x8}, {0x401, 0x7fffffff, 0x9, 0x4, 0x6, 0x2e}, {0x8, 0x296, 0x6, 0xc56, 0x8000, 0x2}, {0x3, 0x8, 0x80000001, 0x3, 0x1, 0xb}, {0x2, 0x7e, 0x0, 0x7f, 0x8, 0x98c2}, {0x100, 0x7f, 0xd0, 0x4, 0x8, 0x1}, {0x8, 0x5, 0x4, 0x3, 0x3, 0xd}, {0x9, 0x5, 0x3, 0x2, 0x8001, 0x6}, {0x7fffffff, 0xfff, 0x7, 0x3, 0x249, 0x1}, {0x0, 0x0, 0x1, 0x6, 0x4, 0x80}, {0x1000, 0xffff, 0x582, 0xc67, 0x100, 0x2}, {0x9, 0xf7, 0x5, 0x8000, 0x25a, 0x3}, {0x7, 0x6, 0x8, 0x3, 0x400, 0x7}, {0x7, 0x3, 0x2, 0x73, 0x80}, {0x5, 0xfffffffb, 0x40, 0x8, 0xf, 0xc64}, {0x6, 0x8, 0xfffffff2, 0x1b33e9f, 0xb, 0x6}, {0xf, 0x482, 0xa1, 0x800, 0x6, 0x80}, {0x5, 0x6, 0x2, 0x0, 0x75fb, 0x800}, {0x7, 0x10000, 0xf85, 0x9, 0xc6, 0xb09}, {0x1, 0x8, 0x9, 0x5ecf, 0xe, 0x3244}, {0x8, 0x6, 0x8, 0x8, 0x2db8e28e, 0x400}, {0x7, 0xfff, 0x1, 0x8, 0x80, 0x80000001}, {0xcc9, 0x0, 0xc3, 0x4, 0x48c7, 0xfffffd19}, {0x7, 0x0, 0x3, 0x3ff, 0xf68}, {0x5, 0x9b, 0x778, 0x80, 0x4, 0xffffef6d}, {0x8, 0x1d, 0xffffffff, 0x8, 0x200, 0x5}, {0x67c, 0x3, 0x1ff, 0x2, 0x9, 0xfffffffd}, {0x480000, 0x1c9, 0x3, 0x3, 0x6, 0x5}, {0x6, 0x3, 0x8, 0xa8, 0x6, 0x66}, {0x80000000, 0xad, 0x9, 0x2020, 0x2da2ae87, 0x9}, {0x7116, 0x4, 0x8, 0x5, 0x80000000, 0xc54}, {0x8, 0x6, 0x7, 0xfffffff8, 0x9, 0x7}, {0x8, 0x5, 0x34000000, 0xffffffc4, 0x6, 0x8000}, {0x6, 0x5, 0x4, 0x101, 0x3, 0x400}, {0x9, 0x401, 0xffff8000, 0xff, 0x4, 0x3}, {0x6, 0x80000000, 0xffff, 0xffffffff, 0x5, 0x81}, {0xc, 0x418d, 0x3, 0x1, 0x9, 0x7}, {0x6, 0x5, 0x7, 0x5, 0xb3e7, 0xfffffffe}, {0x9, 0x2, 0xfff, 0x1ff, 0x2, 0x800}, {0x40, 0x0, 0x10000, 0x9, 0xffffffff, 0xfffffa40}, {0x5, 0x401, 0x3, 0x5, 0x3ff, 0x101}, {0x1, 0x7, 0x7, 0x4, 0xffffff48, 0x5}, {0xb, 0x9, 0x0, 0x4, 0x5, 0xc690}, {0x3, 0xca, 0xe, 0x4, 0xe1e6, 0x5}, {0xbe7c, 0xc, 0x34, 0x4, 0x7f, 0x200}, {0xa0ed, 0x9, 0x1, 0x6, 0x0, 0x4}, {0x0, 0xb743, 0x80, 0x5, 0x3, 0x5}], [{0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x6, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xaf27f4f33baf0f1f}, {0x0, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0xe25995b0358cd3c4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0xcd4de7206e893f74}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x7}, {0x5}, {0x5}, {0x2}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3a10164f5b738897}, {0x3}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x72f901c642923e91, 0xed88cc481811048e}, {0x3, 0x1}], 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x4aa8}}, 0x0) 526.057758ms ago: executing program 5 (id=1778): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x58, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x6, 0x10, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xd1383000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r9, 0x0) 422.41047ms ago: executing program 0 (id=1779): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r2}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r6, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x1bb18000) 364.473935ms ago: executing program 5 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x8000) (async) epoll_create1(0x0) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'xfrm0\x00', {0x2}, 0x6}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) (async) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 331.262669ms ago: executing program 2 (id=1781): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000050a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="e300"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x7fffffff}, {0x0, 0x0, 0x0, 0xf7ffffffffffffff}, 0x7, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r4}, 0x38) sendto$inet6(r0, &(0x7f0000000280)="1b", 0x1, 0x10, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @loopback, 0xfffffcf6}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xa00}, 0x8) 218.156032ms ago: executing program 1 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$rxrpc(0x21, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'perf_event'}, {0x2b, 'net_prio'}, {0x2b, 'rdma'}, {0x2d, 'freezer'}, {0x13, 'net_cls'}, {0x0, 'blkio'}]}, 0x35) write$tun(r0, &(0x7f0000000e80)={@val={0x0, 0xf7}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@val={0x88a8, 0x0, 0x0, 0xa}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x36) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) splice(r1, &(0x7f0000000040)=0x3, r3, &(0x7f0000000080)=0xce5, 0x2, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x44, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x44}}, 0x20000000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800038008000200080000003e"], 0x44}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r3}) r11 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r11, 0x89f2, &(0x7f0000000000)={'bond0\x00', @ifru_addrs=@hci={0x1f, 0x2}}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) r13 = accept(r1, &(0x7f0000000380)=@phonet, &(0x7f0000000400)=0x80) r14 = socket(0x10, 0x80003, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0500010400000000000e0000001000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ',l'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'freezer'}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20040064) 105.348501ms ago: executing program 5 (id=1783): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r3, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0xb4807000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f0000497000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000037c0000040042800c0001800600060080"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 3.856489ms ago: executing program 4 (id=933): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) close(0x3) syz_emit_ethernet(0x44e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd60d5b33204180000fc000000000000000000000000000000000000000000000000000000000000006253000000000000050200030502000706cc09bf801dc6719ffdcfff23c1667314a2b063736265ab4a7e2e609e98c51c93acdbf11f789062e208bdc6dff340b3fc4ee58d1d9c4af654730b716e3747319eb5f4aa7d6c213136807fe816423f3f3f33016c80d4b9d0c39f6b8ab438bb2dacb429ca0845a308882e5fcff98082a47aac1e7a268ff2603a5edce7f3f812a0db70c2e3696c96c8f0c7ba5b5924fe1359e053551c3eb861c28f7e9de69498dae86bd83be96841421707ec3eea00b8f41b0e85eeff0b8ddb04b6363a9eb587af6e22371e894a1bf4f694bdcc2f98c204", @ANYRESOCT], 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @cipso={0x86, 0x57, 0x3, [{0x6, 0x3, "da"}, {0x2, 0xe, "82c3c3cf5e4e52cb89d3bcf5"}, {0x7, 0x8, "ab27a6f261b2"}, {0x90625418d44da8d4, 0x11, "f2d5d6f9fbbfb2365e7b6efef8908d"}, {0x2, 0xf, "6b62219e81737155bdb0eb0f3b"}, {0x6, 0x10, "571d4a1b2d997679ecb7cee30aab"}, {0x1, 0x8, "8d81ef70632f"}]}, @ssrr={0x89, 0x27, 0x9e, [@empty, @multicast2, @remote, @broadcast, @empty, @empty, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x16, 0x1, 0x6}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}, 0x4054) socket(0x6, 0x2, 0x2) 0s ago: executing program 2 (id=1784): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6}, 0x48) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000000)={0x2, 0x4e20, @empty=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000040)="3272beeac51b48fab0a058a354592ae92b861b3da22cb82a841ff608f2d2a135220296f01e07ad1af5da67d9537887264c0727fbab5a12663c28148cae9a526ab5db94f828de7678d705153dc0cb6ae27e947c3b853ff3bb9efa741d9929e4012609", 0x62, 0x400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.951035][ T6145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.969027][ T9709] veth0_macvtap: entered promiscuous mode [ 216.983782][ T9709] veth1_macvtap: entered promiscuous mode [ 217.019338][ T6145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.046015][ T6145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.080515][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.122807][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.183212][ T6148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.217467][ T6148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.228403][ T6148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.250427][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.314321][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.319615][T10005] netlink: 'syz.2.1144': attribute type 2 has an invalid length. [ 217.337065][ T6148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.428466][T10007] ipvlan2: entered promiscuous mode [ 217.446554][T10007] ipvlan2: entered allmulticast mode [ 217.463338][T10007] hsr0: entered allmulticast mode [ 217.476693][T10007] hsr_slave_0: entered allmulticast mode [ 217.532260][T10007] hsr_slave_1: entered allmulticast mode [ 217.641960][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.670878][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.805443][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.861817][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.943257][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.957428][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.385886][ T6139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.548846][ T6139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.683783][ T6139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.774371][T10035] __nla_validate_parse: 7 callbacks suppressed [ 218.774388][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 218.831244][ T6139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.841889][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 218.882776][T10037] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1152'. [ 218.949299][T10037] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1152'. [ 219.323054][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.351703][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.383634][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.392611][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.400289][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.967941][T10062] netlink: 'syz.2.1159': attribute type 2 has an invalid length. [ 219.981895][ T6139] bridge_slave_1: left allmulticast mode [ 219.989648][ T6139] bridge_slave_1: left promiscuous mode [ 220.005944][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.020119][ T6139] bridge_slave_0: left allmulticast mode [ 220.056391][ T6139] bridge_slave_0: left promiscuous mode [ 220.205236][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.247599][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.259707][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.270801][ T6139] bond0 (unregistering): Released all slaves [ 221.441888][ T51] Bluetooth: hci0: command tx timeout [ 221.455936][T10046] chnl_net:caif_netlink_parms(): no params data found [ 221.698343][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 222.480589][T10111] x_tables: duplicate underflow at hook 2 [ 222.543280][T10046] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.562528][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.569754][T10046] bridge_slave_0: entered allmulticast mode [ 222.578979][T10113] FAULT_INJECTION: forcing a failure. [ 222.578979][T10113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.619761][T10046] bridge_slave_0: entered promiscuous mode [ 222.629487][ T9995] Set syz1 is full, maxelem 65536 reached [ 222.634575][T10113] CPU: 1 UID: 0 PID: 10113 Comm: syz.2.1167 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) [ 222.634608][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.634621][T10113] Call Trace: [ 222.634630][T10113] [ 222.634640][T10113] dump_stack_lvl+0x189/0x250 [ 222.634674][T10113] ? __pfx____ratelimit+0x10/0x10 [ 222.634705][T10113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.634732][T10113] ? __pfx__printk+0x10/0x10 [ 222.634778][T10113] should_fail_ex+0x414/0x560 [ 222.634825][T10113] _copy_to_user+0x31/0xb0 [ 222.634854][T10113] simple_read_from_buffer+0xe1/0x170 [ 222.634889][T10113] proc_fail_nth_read+0x1df/0x250 [ 222.634924][T10113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.634960][T10113] ? rw_verify_area+0x258/0x650 [ 222.634984][T10113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.635018][T10113] vfs_read+0x200/0x980 [ 222.635048][T10113] ? __pfx___mutex_lock+0x10/0x10 [ 222.635081][T10113] ? __pfx_vfs_read+0x10/0x10 [ 222.635108][T10113] ? __fget_files+0x2a/0x420 [ 222.635143][T10113] ? __fget_files+0x3a0/0x420 [ 222.635170][T10113] ? __fget_files+0x2a/0x420 [ 222.635212][T10113] ksys_read+0x145/0x250 [ 222.635232][T10113] ? __fget_files+0x2a/0x420 [ 222.635264][T10113] ? __pfx_ksys_read+0x10/0x10 [ 222.635296][T10113] ? do_syscall_64+0xbe/0x3b0 [ 222.635332][T10113] do_syscall_64+0xfa/0x3b0 [ 222.635360][T10113] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.635389][T10113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.635406][T10113] ? clear_bhb_loop+0x60/0xb0 [ 222.635426][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.635443][T10113] RIP: 0033:0x7f4b0038d33c [ 222.635460][T10113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.635477][T10113] RSP: 002b:00007f4b01236030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.635498][T10113] RAX: ffffffffffffffda RBX: 00007f4b005b5fa0 RCX: 00007f4b0038d33c [ 222.635515][T10113] RDX: 000000000000000f RSI: 00007f4b012360a0 RDI: 0000000000000007 [ 222.635536][T10113] RBP: 00007f4b01236090 R08: 0000000000000000 R09: 0000000000000000 [ 222.635550][T10113] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 222.635563][T10113] R13: 0000000000000000 R14: 00007f4b005b5fa0 R15: 00007ffe0c3c0f78 [ 222.635602][T10113] [ 223.162895][T10046] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.184470][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.210684][T10046] bridge_slave_1: entered allmulticast mode [ 223.230256][T10046] bridge_slave_1: entered promiscuous mode [ 223.429538][T10046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.451277][T10046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.527967][ T51] Bluetooth: hci0: command tx timeout [ 223.596067][ T6139] hsr_slave_0: left promiscuous mode [ 223.607386][ T6139] hsr_slave_1: left promiscuous mode [ 223.613543][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.620930][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.646776][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.666226][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.730751][ T6139] veth1_macvtap: left promiscuous mode [ 223.737140][ T6139] veth0_macvtap: left promiscuous mode [ 223.737193][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1177'. [ 223.743138][ T6139] veth1_vlan: left promiscuous mode [ 223.743292][ T6139] veth0_vlan: left promiscuous mode [ 223.765774][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 223.942639][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 223.997414][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 224.506664][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 224.548048][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 225.261209][T10154] team0 (unregistering): left allmulticast mode [ 225.274425][T10154] team0 (unregistering): left promiscuous mode [ 225.280761][T10154] bridge0: port 2(team0) entered disabled state [ 225.347009][T10046] team0: Port device team_slave_0 added [ 225.374379][T10046] team0: Port device team_slave_1 added [ 225.502754][T10168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1182'. [ 225.505437][T10046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.525798][T10046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.538743][T10168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1182'. [ 225.560376][T10046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.609867][T10046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.616163][ T51] Bluetooth: hci0: command tx timeout [ 225.630768][T10046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.658055][T10046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.942287][T10046] hsr_slave_0: entered promiscuous mode [ 225.948941][T10046] hsr_slave_1: entered promiscuous mode [ 225.975810][T10046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.987907][T10046] Cannot create hsr debugfs directory [ 226.269824][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 226.298557][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 226.648903][T10046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.659878][T10046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.670773][T10046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.684393][T10046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.730913][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 226.866358][T10046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.925529][T10046] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.967797][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.975003][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.004969][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.012168][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.124097][T10046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.163915][T10046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.284045][T10247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.328705][T10252] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 227.381240][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 227.574120][T10274] netlink: 'syz.1.1213': attribute type 3 has an invalid length. [ 227.582123][T10274] netlink: 'syz.1.1213': attribute type 4 has an invalid length. [ 227.609979][T10274] netlink: 'syz.1.1213': attribute type 5 has an invalid length. [ 227.635742][T10046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.643730][T10274] netlink: 'syz.1.1213': attribute type 6 has an invalid length. [ 227.659925][T10274] netlink: 'syz.1.1213': attribute type 7 has an invalid length. [ 227.681854][ T51] Bluetooth: hci0: command tx timeout [ 227.693706][T10281] netlink: 'syz.2.1215': attribute type 64 has an invalid length. [ 227.701419][T10274] netlink: 'syz.1.1213': attribute type 7 has an invalid length. [ 227.718688][T10274] netlink: 12902 bytes leftover after parsing attributes in process `syz.1.1213'. [ 227.837035][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 227.837317][T10284] ip6tnl1: entered promiscuous mode [ 227.857911][T10284] ip6tnl1: entered allmulticast mode [ 227.875876][T10284] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 228.491357][T10310] ip6tnl2: entered promiscuous mode [ 228.497614][T10310] ip6tnl2: entered allmulticast mode [ 228.515010][T10310] team0: Device ip6tnl2 is of different type [ 228.616345][T10319] tipc: Enabling of bearer rejected, failed to enable media [ 228.860488][T10046] veth0_vlan: entered promiscuous mode [ 228.968771][T10337] netlink: 'syz.0.1226': attribute type 21 has an invalid length. [ 228.978577][T10337] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 228.997919][T10337] __nla_validate_parse: 2 callbacks suppressed [ 228.997938][T10337] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1226'. [ 229.049614][T10046] veth1_vlan: entered promiscuous mode [ 229.058420][T10339] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1226'. [ 229.128827][T10046] veth0_macvtap: entered promiscuous mode [ 229.152982][T10046] veth1_macvtap: entered promiscuous mode [ 229.195578][T10046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.224014][T10046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.248290][ T6145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.261683][ T6145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.279946][ T6145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.292591][ T6145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.486283][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.505417][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.538910][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.549247][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.461072][ T6139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.506325][T10396] tipc: Enabling of bearer rejected, failed to enable media [ 230.595863][ T6139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.744830][ T6139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.839092][ T6139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.150802][ T6139] bridge_slave_1: left allmulticast mode [ 231.156877][ T6139] bridge_slave_1: left promiscuous mode [ 231.162906][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.172740][ T6139] bridge_slave_0: left allmulticast mode [ 231.178413][ T6139] bridge_slave_0: left promiscuous mode [ 231.184219][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.385307][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 231.863091][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.876519][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.884345][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.892632][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.905426][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.940932][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.959578][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.972603][ T6139] bond0 (unregistering): Released all slaves [ 232.301147][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1251'. [ 232.470281][T10442] tipc: Enabling of bearer rejected, failed to enable media [ 232.737751][T10454] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1254'. [ 232.749130][T10454] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1254'. [ 232.929975][ T6139] hsr_slave_0: left promiscuous mode [ 232.950913][ T6139] hsr_slave_1: left promiscuous mode [ 232.966851][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.977737][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.988325][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.998489][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.000198][T10471] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1257'. [ 233.039462][ T6139] veth1_macvtap: left promiscuous mode [ 233.045265][ T6139] veth0_macvtap: left promiscuous mode [ 233.050930][ T6139] veth1_vlan: left promiscuous mode [ 233.057301][ T6139] veth0_vlan: left promiscuous mode [ 233.070307][T10473] xt_hashlimit: size too large, truncated to 1048576 [ 233.542577][ T6139] team0 (unregistering): Port device team_slave_1 removed [ 233.579381][ T6139] team0 (unregistering): Port device team_slave_0 removed [ 233.925012][T10467] validate_nla: 2 callbacks suppressed [ 233.925029][T10467] netlink: 'syz.1.1257': attribute type 4 has an invalid length. [ 233.950125][T10475] : renamed from bridge_slave_0 (while UP) [ 234.013145][ T51] Bluetooth: hci0: command tx timeout [ 234.203189][T10487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1262'. [ 234.257597][T10427] chnl_net:caif_netlink_parms(): no params data found [ 234.267409][T10487] netlink: 'syz.5.1262': attribute type 7 has an invalid length. [ 234.280159][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 234.302576][T10491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1261'. [ 234.401103][T10482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1261'. [ 234.605279][T10505] tc_dump_action: action bad kind [ 234.644596][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.654787][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.662066][T10427] bridge_slave_0: entered allmulticast mode [ 234.669832][T10427] bridge_slave_0: entered promiscuous mode [ 234.680814][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1264'. [ 234.683122][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.698994][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.706547][T10427] bridge_slave_1: entered allmulticast mode [ 234.714543][T10427] bridge_slave_1: entered promiscuous mode [ 234.809659][T10509] tipc: Enabled bearer , priority 0 [ 234.835617][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.907136][T10513] syzkaller0: entered promiscuous mode [ 234.913953][T10513] syzkaller0: entered allmulticast mode [ 234.927307][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.029732][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1268'. [ 235.233316][T10527] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1270'. [ 236.091630][ T51] Bluetooth: hci0: command tx timeout [ 236.479858][T10509] tipc: Resetting bearer [ 236.490573][T10427] team0: Port device team_slave_0 added [ 236.496775][T10525] netlink: 'syz.0.1270': attribute type 29 has an invalid length. [ 236.512154][T10507] tipc: Resetting bearer [ 236.552422][T10507] tipc: Disabling bearer [ 236.565845][T10534] tipc: Enabling of bearer rejected, failed to enable media [ 236.602649][T10427] team0: Port device team_slave_1 added [ 236.680565][T10555] No such timeout policy "syz1" [ 236.810078][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.835153][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.870216][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.881309][T10563] netlink: 'syz.0.1276': attribute type 3 has an invalid length. [ 236.923900][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.951719][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.010409][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 237.051374][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.492293][T10427] hsr_slave_0: entered promiscuous mode [ 237.499348][T10427] hsr_slave_1: entered promiscuous mode [ 237.515663][T10590] netlink: 'syz.0.1282': attribute type 2 has an invalid length. [ 237.543833][T10427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.551402][T10427] Cannot create hsr debugfs directory [ 238.144117][T10614] Cannot find map_set index 0 as target [ 238.162171][ T51] Bluetooth: hci0: command tx timeout [ 238.201661][T10609] tipc: Enabling of bearer rejected, failed to enable media [ 238.209237][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 238.238527][T10614] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 238.452482][T10625] tipc: Invalid UDP bearer configuration [ 238.452535][T10625] tipc: Enabling of bearer rejected, failed to enable media [ 238.528031][T10625] nbd: must specify a size in bytes for the device [ 238.547744][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 239.179368][T10427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.233161][T10427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.337356][T10652] __nla_validate_parse: 2 callbacks suppressed [ 239.337378][T10652] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1296'. [ 239.438614][T10427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.486512][T10427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.638498][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.674824][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.687824][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.694973][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.708938][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.716088][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.759958][T10427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.914552][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.129575][T10427] veth0_vlan: entered promiscuous mode [ 240.146132][T10427] veth1_vlan: entered promiscuous mode [ 240.178972][T10427] veth0_macvtap: entered promiscuous mode [ 240.189185][T10427] veth1_macvtap: entered promiscuous mode [ 240.209745][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.223869][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.239355][ T6135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.248196][ T51] Bluetooth: hci0: command tx timeout [ 240.257636][ T6135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.268312][ T6135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.278009][ T6135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.336983][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.352335][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.378129][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.386167][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.754647][ T6135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.609015][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.620244][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.629001][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.637389][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.645879][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.827509][ T6135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.862601][T10689] chnl_net:caif_netlink_parms(): no params data found [ 242.951432][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.958769][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.966279][T10689] bridge_slave_0: entered allmulticast mode [ 242.974020][T10689] bridge_slave_0: entered promiscuous mode [ 242.982398][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.992104][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.999315][T10689] bridge_slave_1: entered allmulticast mode [ 243.006856][T10689] bridge_slave_1: entered promiscuous mode [ 243.044152][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.057588][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.092541][T10689] team0: Port device team_slave_0 added [ 243.100584][T10689] team0: Port device team_slave_1 added [ 243.137261][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.144423][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.170564][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.184542][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.191771][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.218309][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.269610][T10689] hsr_slave_0: entered promiscuous mode [ 243.276441][T10689] hsr_slave_1: entered promiscuous mode [ 243.283118][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.290693][T10689] Cannot create hsr debugfs directory [ 243.425814][ T6135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.475963][ T6135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.589927][ T6135] bridge_slave_1: left allmulticast mode [ 243.596074][ T6135] bridge_slave_1: left promiscuous mode [ 243.601943][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.611085][ T6135] bridge_slave_0: left allmulticast mode [ 243.617364][ T6135] bridge_slave_0: left promiscuous mode [ 243.624101][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.913107][ T6135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.924561][ T6135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.935364][ T6135] bond0 (unregistering): Released all slaves [ 244.178237][ T6135] hsr_slave_0: left promiscuous mode [ 244.184583][ T6135] hsr_slave_1: left promiscuous mode [ 244.190349][ T6135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.198347][ T6135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.209768][ T6135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.218997][ T6135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.243147][ T6135] veth1_macvtap: left promiscuous mode [ 244.249271][ T6135] veth0_macvtap: left promiscuous mode [ 244.256885][ T6135] veth1_vlan: left promiscuous mode [ 244.262888][ T6135] veth0_vlan: left promiscuous mode [ 244.672081][ T6135] team0 (unregistering): Port device team_slave_1 removed [ 244.710731][ T6135] team0 (unregistering): Port device team_slave_0 removed [ 244.721871][ T51] Bluetooth: hci0: command tx timeout [ 245.117761][T10689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.129514][T10689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.148895][T10689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.167058][T10689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.275879][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.301361][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.314308][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.321415][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.340734][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.347860][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.553261][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.774521][T10689] veth0_vlan: entered promiscuous mode [ 245.785552][T10689] veth1_vlan: entered promiscuous mode [ 245.820001][T10689] veth0_macvtap: entered promiscuous mode [ 245.829422][T10689] veth1_macvtap: entered promiscuous mode [ 245.852627][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.866990][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.881348][ T2965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.891075][ T2965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.914730][ T2965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.924996][ T2986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.977517][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.985445][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.024455][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.033140][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.460202][ T6148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.396510][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.404809][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.413972][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.423731][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.431670][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.601030][T10714] chnl_net:caif_netlink_parms(): no params data found [ 248.684786][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.692218][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.699377][T10714] bridge_slave_0: entered allmulticast mode [ 248.707429][T10714] bridge_slave_0: entered promiscuous mode [ 248.715176][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.722728][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.730022][T10714] bridge_slave_1: entered allmulticast mode [ 248.737186][T10714] bridge_slave_1: entered promiscuous mode [ 248.773007][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.786285][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.838712][ T6148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.857476][T10714] team0: Port device team_slave_0 added [ 248.867303][T10714] team0: Port device team_slave_1 added [ 248.899114][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.907403][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.935068][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.947390][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.954593][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.983340][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.033836][T10714] hsr_slave_0: entered promiscuous mode [ 249.040099][T10714] hsr_slave_1: entered promiscuous mode [ 249.047433][T10714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.055125][T10714] Cannot create hsr debugfs directory [ 249.074094][ T6148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.160199][ T6148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.293455][ T6148] bridge_slave_1: left allmulticast mode [ 249.299133][ T6148] bridge_slave_1: left promiscuous mode [ 249.304960][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.314358][ T6148] bridge_slave_0: left allmulticast mode [ 249.319999][ T6148] bridge_slave_0: left promiscuous mode [ 249.326066][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.629397][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.642641][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.652919][ T6148] bond0 (unregistering): Released all slaves [ 249.930064][ T6148] hsr_slave_0: left promiscuous mode [ 249.936838][ T6148] hsr_slave_1: left promiscuous mode [ 249.943105][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.950526][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.958959][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.966478][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.987278][ T6148] veth1_macvtap: left promiscuous mode [ 249.993304][ T6148] veth0_macvtap: left promiscuous mode [ 249.998954][ T6148] veth1_vlan: left promiscuous mode [ 250.004437][ T6148] veth0_vlan: left promiscuous mode [ 250.396054][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 250.431179][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 250.483360][ T5853] Bluetooth: hci0: command tx timeout [ 250.852020][T10714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.869714][T10714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.886615][T10714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.897583][T10714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.005062][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.035365][T10714] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.054781][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.061952][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.080892][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.088080][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.288915][T10714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.507513][T10714] veth0_vlan: entered promiscuous mode [ 251.520012][T10714] veth1_vlan: entered promiscuous mode [ 251.549730][T10714] veth0_macvtap: entered promiscuous mode [ 251.559954][T10714] veth1_macvtap: entered promiscuous mode [ 251.578487][T10714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.594753][T10714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.614798][ T6148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.629231][ T6148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.639492][ T6148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.649397][ T6148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.710217][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.718839][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.748946][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.763004][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.452976][ T2986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.536602][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.545080][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.554140][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.563233][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.570964][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.757732][ T2986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.780054][T10739] chnl_net:caif_netlink_parms(): no params data found [ 254.865490][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.872929][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.880061][T10739] bridge_slave_0: entered allmulticast mode [ 254.887980][T10739] bridge_slave_0: entered promiscuous mode [ 254.908958][ T2986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.924188][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.931341][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.938537][T10739] bridge_slave_1: entered allmulticast mode [ 254.947443][T10739] bridge_slave_1: entered promiscuous mode [ 254.991346][ T2986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.009448][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.023029][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.062655][T10739] team0: Port device team_slave_0 added [ 255.071073][T10739] team0: Port device team_slave_1 added [ 255.105058][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.115607][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.143186][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.155983][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.165118][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.191310][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.279677][T10739] hsr_slave_0: entered promiscuous mode [ 255.287283][T10739] hsr_slave_1: entered promiscuous mode [ 255.293677][T10739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.301235][T10739] Cannot create hsr debugfs directory [ 255.308522][ T2986] bridge_slave_1: left allmulticast mode [ 255.315498][ T2986] bridge_slave_1: left promiscuous mode [ 255.321192][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.331030][ T2986] bridge_slave_0: left allmulticast mode [ 255.337097][ T2986] bridge_slave_0: left promiscuous mode [ 255.343333][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.529473][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.535895][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.644667][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.655515][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.666548][ T2986] bond0 (unregistering): Released all slaves [ 255.916031][ T2986] hsr_slave_0: left promiscuous mode [ 255.926043][ T2986] hsr_slave_1: left promiscuous mode [ 255.935300][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.944050][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.952719][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.960110][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.983295][ T2986] veth1_macvtap: left promiscuous mode [ 255.988841][ T2986] veth0_macvtap: left promiscuous mode [ 255.994616][ T2986] veth1_vlan: left promiscuous mode [ 255.999905][ T2986] veth0_vlan: left promiscuous mode [ 256.408882][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 256.453132][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 256.645271][ T5853] Bluetooth: hci0: command tx timeout [ 257.007098][T10739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.018493][T10739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.028293][T10739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.039202][T10739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.130105][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.154562][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.167803][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.174946][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.193743][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.200916][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.245480][T10739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.409699][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.652172][T10739] veth0_vlan: entered promiscuous mode [ 257.662590][T10739] veth1_vlan: entered promiscuous mode [ 257.694609][T10739] veth0_macvtap: entered promiscuous mode [ 257.703737][T10739] veth1_macvtap: entered promiscuous mode [ 257.724062][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.742493][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.759960][ T6145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.769814][ T6145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.783757][ T6145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.794021][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.859719][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.878619][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.905421][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.913965][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.720413][ T6145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.868447][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.876749][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.886597][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.895957][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.906180][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.083514][T10764] chnl_net:caif_netlink_parms(): no params data found [ 261.177441][ T6145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.208188][T10764] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.215916][T10764] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.223128][T10764] bridge_slave_0: entered allmulticast mode [ 261.230120][T10764] bridge_slave_0: entered promiscuous mode [ 261.238663][T10764] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.246422][T10764] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.255990][T10764] bridge_slave_1: entered allmulticast mode [ 261.263728][T10764] bridge_slave_1: entered promiscuous mode [ 261.284045][ T6145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.327776][T10764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.339845][T10764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.378047][ T6145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.411331][T10764] team0: Port device team_slave_0 added [ 261.419578][T10764] team0: Port device team_slave_1 added [ 261.469626][T10764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.476789][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.503922][T10764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.517097][T10764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.524322][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.550545][T10764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.634077][T10764] hsr_slave_0: entered promiscuous mode [ 261.640294][T10764] hsr_slave_1: entered promiscuous mode [ 261.647375][T10764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.655127][T10764] Cannot create hsr debugfs directory [ 261.660813][ T6145] bridge_slave_1: left allmulticast mode [ 261.667610][ T6145] bridge_slave_1: left promiscuous mode [ 261.674572][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.683940][ T6145] bridge_slave_0: left allmulticast mode [ 261.689580][ T6145] bridge_slave_0: left promiscuous mode [ 261.696037][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.975472][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.986442][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.998725][ T6145] bond0 (unregistering): Released all slaves [ 262.249278][ T6145] hsr_slave_0: left promiscuous mode [ 262.255385][ T6145] hsr_slave_1: left promiscuous mode [ 262.261176][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.271554][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.280812][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.292959][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.313077][ T6145] veth1_macvtap: left promiscuous mode [ 262.318702][ T6145] veth0_macvtap: left promiscuous mode [ 262.324664][ T6145] veth1_vlan: left promiscuous mode [ 262.329959][ T6145] veth0_vlan: left promiscuous mode [ 262.763080][ T6145] team0 (unregistering): Port device team_slave_1 removed [ 262.806641][ T6145] team0 (unregistering): Port device team_slave_0 removed [ 262.963120][ T5853] Bluetooth: hci0: command tx timeout [ 263.494326][T10764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.522465][T10764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.533208][T10764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.545260][T10764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.639842][T10764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.662395][T10764] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.675920][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.683192][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.701341][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.708505][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.909286][T10764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.146816][T10764] veth0_vlan: entered promiscuous mode [ 264.159784][T10764] veth1_vlan: entered promiscuous mode [ 264.194767][T10764] veth0_macvtap: entered promiscuous mode [ 264.206058][T10764] veth1_macvtap: entered promiscuous mode [ 264.227705][T10764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.241227][T10764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.255911][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.265873][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.275482][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.285174][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.347180][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.362922][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.388440][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.396458][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.170708][ T2965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.335991][T10799] xt_l2tp: unknown flags: 10 [ 267.353926][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 267.391323][T10802] tipc: Enabling of bearer rejected, failed to enable media [ 267.554764][T10811] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 267.563077][T10812] vlan0: entered promiscuous mode [ 267.563097][T10812] bond0: entered promiscuous mode [ 267.563112][T10812] bond_slave_0: entered promiscuous mode [ 267.563318][T10812] bond_slave_1: entered promiscuous mode [ 267.563666][T10812] vlan0: entered allmulticast mode [ 267.644573][T10812] bond0: entered allmulticast mode [ 267.660110][T10812] bond_slave_0: entered allmulticast mode [ 267.676053][T10812] bond_slave_1: entered allmulticast mode [ 267.943816][T10818] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.009697][T10818] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 268.028666][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 268.123818][T10821] gretap1: entered promiscuous mode [ 268.156656][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.159122][T10821] bond2: (slave gretap1): making interface the new active one [ 268.177715][T10821] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 268.187174][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.196566][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.208137][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.222032][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.261225][T10811] macvlan2: entered promiscuous mode [ 268.277794][T10811] macvlan2: entered allmulticast mode [ 268.289084][T10811] bond2: entered promiscuous mode [ 268.313995][T10811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.352300][T10811] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 268.385962][T10811] bond2: left promiscuous mode [ 268.453073][ T2965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.576253][T10846] netlink: 'syz.1.1312': attribute type 2 has an invalid length. [ 268.685076][ T2965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.950720][ T2965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.430387][T10835] chnl_net:caif_netlink_parms(): no params data found [ 269.512814][ T2965] bridge_slave_1: left allmulticast mode [ 269.518594][ T2965] bridge_slave_1: left promiscuous mode [ 269.539977][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.577314][ T2965] bridge_slave_0: left allmulticast mode [ 269.598549][ T2965] bridge_slave_0: left promiscuous mode [ 269.608284][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.667361][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 270.030715][ T2965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.044342][ T2965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.055074][ T2965] bond0 (unregistering): Released all slaves [ 270.108798][T10890] tipc: Enabled bearer , priority 0 [ 270.139251][T10891] syzkaller0: entered promiscuous mode [ 270.177079][T10891] syzkaller0: entered allmulticast mode [ 270.243370][T10897] tipc: Resetting bearer [ 270.328012][ T5853] Bluetooth: hci0: command tx timeout [ 270.335976][T10903] Bluetooth: MGMT ver 1.23 [ 270.431837][T10880] tipc: Resetting bearer [ 270.471819][T10914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1329'. [ 270.490420][T10880] tipc: Disabling bearer [ 270.526374][T10916] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1329'. [ 270.606538][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.640978][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.672921][T10922] netlink: 'syz.5.1328': attribute type 4 has an invalid length. [ 270.679205][T10835] bridge_slave_0: entered allmulticast mode [ 270.704271][T10835] bridge_slave_0: entered promiscuous mode [ 270.726598][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.750850][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.774665][T10835] bridge_slave_1: entered allmulticast mode [ 270.798643][T10835] bridge_slave_1: entered promiscuous mode [ 271.053687][T10929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.146093][ T2965] hsr_slave_0: left promiscuous mode [ 271.176341][ T2965] hsr_slave_1: left promiscuous mode [ 271.202348][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.212219][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 271.220613][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.269916][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.307810][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.378909][ T2965] veth1_macvtap: left promiscuous mode [ 271.398868][ T2965] veth0_macvtap: left promiscuous mode [ 271.416250][ T2965] veth1_vlan: left promiscuous mode [ 271.425324][ T2965] veth0_vlan: left promiscuous mode [ 271.939770][T10952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.073639][ T2965] team0 (unregistering): Port device team_slave_1 removed [ 272.111127][ T2965] team0 (unregistering): Port device team_slave_0 removed [ 272.405396][ T5853] Bluetooth: hci0: command tx timeout [ 272.468124][T10835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.491640][T10835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.625848][T10835] team0: Port device team_slave_0 added [ 272.683646][T10835] team0: Port device team_slave_1 added [ 272.820142][T10969] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 272.847634][T10835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.879920][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.935966][T10835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.970210][T10973] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1347'. [ 272.977497][T10835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.007138][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.065629][T10835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.136322][T10978] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 273.273577][T10835] hsr_slave_0: entered promiscuous mode [ 273.287378][T10835] hsr_slave_1: entered promiscuous mode [ 273.301662][T10835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.321565][T10835] Cannot create hsr debugfs directory [ 273.424483][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 274.031845][T11017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'. [ 274.035302][T11019] netlink: 'syz.5.1363': attribute type 11 has an invalid length. [ 274.148934][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 274.181665][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 274.239562][T10835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.272878][T10835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.283245][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1365'. [ 274.320664][T10835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.358898][T10835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.481794][ T5853] Bluetooth: hci0: command tx timeout [ 274.487833][ T30] audit: type=1800 audit(1752477250.976:3): pid=11040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1367" name="memory.events" dev="tmpfs" ino=1648 res=0 errno=0 [ 274.584141][ T30] audit: type=1804 audit(1752477251.086:4): pid=11040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1367" name="/newroot/319/memory.events" dev="tmpfs" ino=1648 res=1 errno=0 [ 274.610019][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.655278][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.686894][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.694105][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.729557][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.736958][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.768400][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'. [ 274.942497][T11050] block nbd2: server does not support multiple connections per device. [ 274.962452][T11050] block nbd2: shutting down sockets [ 274.970971][T11058] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1375'. [ 275.001947][T11058] openvswitch: netlink: Tunnel attr 9995 out of range max 16 [ 275.127656][T11067] netlink: 'syz.1.1376': attribute type 11 has an invalid length. [ 275.452284][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 275.469923][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1379'. [ 275.519590][T11082] Bluetooth: MGMT ver 1.23 [ 275.535354][T10835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.025851][T11096] pim6reg1: entered promiscuous mode [ 276.031192][T11096] pim6reg1: entered allmulticast mode [ 276.571852][ T5853] Bluetooth: hci0: command tx timeout [ 276.691888][T10835] veth0_vlan: entered promiscuous mode [ 276.747721][T10835] veth1_vlan: entered promiscuous mode [ 276.846359][T11134] netlink: 'syz.1.1394': attribute type 21 has an invalid length. [ 276.878104][T11125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.891662][T11125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.920275][T11134] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 277.092289][T11125] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.111259][T11125] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.275439][T11125] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.307124][T11125] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.436818][T11125] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.448257][T11125] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.464136][T11164] netlink: 'syz.1.1401': attribute type 2 has an invalid length. [ 277.556256][T10835] veth0_macvtap: entered promiscuous mode [ 277.599860][T10835] veth1_macvtap: entered promiscuous mode [ 277.666228][T10835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.762542][T10835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.810672][ T2986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.823026][ T2986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.870552][ T2986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.901370][ T2986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.926398][ T2986] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.936775][ T2986] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.983563][ T2986] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.992990][ T2986] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.001267][ T2986] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.010666][ T2986] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.038805][ T2986] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.060827][ T2986] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.103463][T11177] netlink: 'syz.2.1405': attribute type 2 has an invalid length. [ 278.125826][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.145252][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.150381][T11179] __nla_validate_parse: 3 callbacks suppressed [ 278.150397][T11179] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1406'. [ 278.510313][T11179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.522458][T11179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.536547][T11179] bond0 (unregistering): Released all slaves [ 278.568482][T11177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1405'. [ 278.570642][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.589062][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.625309][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 278.956598][ T2986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.038711][ T2986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.148595][ T2986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.242340][ T2986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.390449][ T2986] bridge_slave_1: left allmulticast mode [ 279.396450][ T2986] bridge_slave_1: left promiscuous mode [ 279.402339][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.411628][ T2986] bridge_slave_0: left allmulticast mode [ 279.417382][ T2986] bridge_slave_0: left promiscuous mode [ 279.423670][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.720839][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.735339][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.746283][ T2986] bond0 (unregistering): Released all slaves [ 279.998299][ T2986] hsr_slave_0: left promiscuous mode [ 280.004358][ T2986] hsr_slave_1: left promiscuous mode [ 280.010193][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.017840][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.025971][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.036822][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.058182][ T2986] veth1_macvtap: left promiscuous mode [ 280.063860][ T2986] veth0_macvtap: left promiscuous mode [ 280.069445][ T2986] veth1_vlan: left promiscuous mode [ 280.075190][ T2986] veth0_vlan: left promiscuous mode [ 280.405234][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 280.415430][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 280.430052][T11212] netlink: 'syz.0.1412': attribute type 14 has an invalid length. [ 280.438704][T11212] netlink: 'syz.0.1412': attribute type 11 has an invalid length. [ 280.655724][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.665276][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.674221][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.683379][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.702831][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.779334][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 280.821501][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 281.200367][T11202] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 281.556986][T11231] netlink: 'syz.0.1420': attribute type 2 has an invalid length. [ 281.621203][T11233] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1422'. [ 281.948858][T11244] netlink: 'syz.1.1423': attribute type 12 has an invalid length. [ 281.974161][T11244] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1423'. [ 282.019427][T11235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1420'. [ 282.057170][T11213] chnl_net:caif_netlink_parms(): no params data found [ 282.368896][T11266] @ÿ: renamed from bond_slave_0 [ 282.376559][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.392148][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.422043][T11213] bridge_slave_0: entered allmulticast mode [ 282.442660][T11213] bridge_slave_0: entered promiscuous mode [ 282.492385][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.513515][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.522790][T11213] bridge_slave_1: entered allmulticast mode [ 282.530921][T11213] bridge_slave_1: entered promiscuous mode [ 282.646640][T11279] netem: change failed [ 282.676712][T11213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.705068][T11213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.711547][T11281] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1434'. [ 282.801602][ T51] Bluetooth: hci0: command tx timeout [ 282.866738][T11213] team0: Port device team_slave_0 added [ 282.876218][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1437'. [ 282.940144][T11283] dummy0 (unregistering): left allmulticast mode [ 282.949223][T11283] dummy0 (unregistering): left promiscuous mode [ 282.990426][T11283] bridge0: port 1(dummy0) entered disabled state [ 283.031057][T11213] team0: Port device team_slave_1 added [ 283.049935][T11298] gtp1: entered promiscuous mode [ 283.055729][T11298] gtp1: entered allmulticast mode [ 283.156007][T11213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.171163][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.218536][T11213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.272653][T11213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.280799][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.308756][T11213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.319745][T11306] netlink: 'syz.1.1442': attribute type 2 has an invalid length. [ 283.459807][T11213] hsr_slave_0: entered promiscuous mode [ 283.473355][T11213] hsr_slave_1: entered promiscuous mode [ 283.491693][T11213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.509241][T11213] Cannot create hsr debugfs directory [ 283.517649][T11315] __nla_validate_parse: 6 callbacks suppressed [ 283.517665][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1445'. [ 283.544063][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1445'. [ 283.690667][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1442'. [ 283.978643][T11330] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 284.011721][T11329] netlink: 'syz.1.1451': attribute type 21 has an invalid length. [ 284.062851][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1453'. [ 284.363031][T11348] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1457'. [ 284.374211][T11213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.409813][T11213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.479938][T11213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.534060][T11213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.633667][T11366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1463'. [ 284.759670][T11213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.798788][ T30] audit: type=1800 audit(1752477261.286:5): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1464" name=25705320202020 dev="tmpfs" ino=1526 res=0 errno=0 [ 284.810929][T11213] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.885634][ T51] Bluetooth: hci0: command tx timeout [ 284.936361][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.943613][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.977850][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.985037][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.438640][T11394] tipc: Enabling of bearer rejected, failed to enable media [ 285.605788][T11413] tipc: Enabling of bearer rejected, failed to enable media [ 286.442881][T11213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.414068][T11472] netlink: 'syz.5.1482': attribute type 11 has an invalid length. [ 287.422436][T11472] netlink: 'syz.5.1482': attribute type 4 has an invalid length. [ 287.430176][T11472] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1482'. [ 287.476359][T11472] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1482'. [ 287.719408][T11213] veth0_vlan: entered promiscuous mode [ 287.829513][T11488] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 287.967403][T11213] veth1_vlan: entered promiscuous mode [ 288.234698][T11213] veth0_macvtap: entered promiscuous mode [ 288.337437][T11213] veth1_macvtap: entered promiscuous mode [ 288.435224][T11213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.494128][T11213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.522748][ T6141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.543437][ T6141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.562657][ T6145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.571394][ T6145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.671998][T11475] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 288.731038][T11505] nbd5: detected capacity change from 0 to 63 [ 288.769914][ T51] block nbd5: Receive control failed (result -32) [ 288.997106][T11515] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1494'. [ 289.031735][T11515] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 289.153719][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.173837][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.307605][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.334882][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.981704][T11534] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1501'. [ 290.266055][ T6141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.485447][ T6141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.564345][ T6141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.656973][ T6141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.810243][ T6141] bridge_slave_1: left allmulticast mode [ 290.821292][ T6141] bridge_slave_1: left promiscuous mode [ 290.829979][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.849486][ T6141] bridge_slave_0: left allmulticast mode [ 290.856046][ T6141] bridge_slave_0: left promiscuous mode [ 290.866428][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.209873][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.220911][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.231799][ T6141] bond0 (unregistering): Released all slaves [ 291.439649][ T6141] hsr_slave_0: left promiscuous mode [ 291.445993][ T6141] hsr_slave_1: left promiscuous mode [ 291.454448][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.463411][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.471297][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.478894][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.500470][ T6141] veth1_macvtap: left promiscuous mode [ 291.506442][ T6141] veth0_macvtap: left promiscuous mode [ 291.512367][ T6141] veth1_vlan: left promiscuous mode [ 291.517653][ T6141] veth0_vlan: left promiscuous mode [ 292.086639][T11571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1504'. [ 292.110891][T11573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1509'. [ 292.133813][T11573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1509'. [ 292.297536][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.307521][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.320063][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.333044][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.341072][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.546511][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 292.588580][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 292.987485][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 293.429991][T11577] chnl_net:caif_netlink_parms(): no params data found [ 293.511651][T11601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.550252][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 293.683890][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.707892][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.717133][T11577] bridge_slave_0: entered allmulticast mode [ 293.725512][T11577] bridge_slave_0: entered promiscuous mode [ 293.743183][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.758011][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.765666][T11577] bridge_slave_1: entered allmulticast mode [ 293.773584][T11577] bridge_slave_1: entered promiscuous mode [ 294.376605][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1521'. [ 294.433376][T11628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.449537][T11577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.491109][T11577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.790955][T11577] team0: Port device team_slave_0 added [ 294.816375][T11639] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 294.817354][T11577] team0: Port device team_slave_1 added [ 294.883381][T11643] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 294.899682][T11643] bridge3: entered allmulticast mode [ 294.947000][T11650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.983315][T11577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.990307][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.097720][T11655] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 295.124658][T11577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.206838][T11577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.218530][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.252457][T11661] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1534'. [ 295.263222][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1537'. [ 295.280994][T11662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1537'. [ 295.281277][T11664] Bluetooth: MGMT ver 1.23 [ 295.316828][T11577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.481848][T11674] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1536'. [ 295.526333][ T5853] Bluetooth: hci3: command tx timeout [ 295.560286][T11577] hsr_slave_0: entered promiscuous mode [ 295.601726][T11577] hsr_slave_1: entered promiscuous mode [ 295.608132][T11577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.635397][T11577] Cannot create hsr debugfs directory [ 295.682196][ T64] wlan0: Trigger new scan to find an IBSS to join [ 295.880259][T11689] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1541'. [ 296.161101][ T5853] Bluetooth: hci3: link tx timeout [ 296.167852][ T5853] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 296.178891][ T5853] Bluetooth: hci3: link tx timeout [ 296.184360][ T5853] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 296.279287][T11703] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1550'. [ 296.322871][T11700] IPVS: set_ctl: invalid protocol: 44 172.20.20.45:20000 [ 296.454006][T11710] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 296.636809][T11577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.656222][T11577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.675836][T11577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.683853][T11717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1553'. [ 296.706250][T11718] tipc: Enabled bearer , priority 0 [ 296.723126][T11577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.745296][T11718] bond_slave_0: entered promiscuous mode [ 296.749435][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1555'. [ 296.760176][T11718] bond_slave_0: entered allmulticast mode [ 296.783480][T11716] tipc: Disabling bearer [ 296.812368][T11721] batman_adv: batadv0: Adding interface: dummy0 [ 296.818689][T11721] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.848404][T11721] batman_adv: batadv0: Interface activated: dummy0 [ 297.014983][T11577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.026778][T11735] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 297.065195][T11577] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.107672][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.114994][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.193323][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.200551][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.211340][T11743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1560'. [ 297.590361][T11759] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 297.598984][T11759] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 297.951267][T11774] bridge: RTM_NEWNEIGH with invalid ether address [ 298.146335][T11577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.241987][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 298.634883][T11791] netlink: 'syz.2.1573': attribute type 4 has an invalid length. [ 298.644711][ T64] wlan0: Trigger new scan to find an IBSS to join [ 299.619969][T11577] veth0_vlan: entered promiscuous mode [ 299.663883][T11577] veth1_vlan: entered promiscuous mode [ 299.750312][T11577] veth0_macvtap: entered promiscuous mode [ 299.777153][T11577] veth1_macvtap: entered promiscuous mode [ 299.830541][T11804] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 299.840187][T11577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.879104][T11577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.948890][ T6145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.976582][ T6145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.006578][ T6145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.035645][ T6145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.288551][T11808] tipc: Enabled bearer , priority 0 [ 300.296160][T11809] syzkaller0: entered promiscuous mode [ 300.304877][T11809] syzkaller0: entered allmulticast mode [ 300.322054][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 300.329406][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.350766][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.400485][T11809] tipc: Resetting bearer [ 300.442980][T11809] tipc: Disabling bearer [ 300.496996][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.526571][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.049893][ T6141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.141216][T11826] __nla_validate_parse: 3 callbacks suppressed [ 301.141236][T11826] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1584'. [ 301.273967][ T6141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.423765][ T6141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.654983][ T6141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.865180][ T6141] bridge_slave_1: left allmulticast mode [ 301.870869][ T6141] bridge_slave_1: left promiscuous mode [ 301.892032][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.903980][ T6141] bridge_slave_0: left allmulticast mode [ 301.912499][ T6141] bridge_slave_0: left promiscuous mode [ 301.918290][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.652459][ T6145] wlan0: Trigger new scan to find an IBSS to join [ 302.837011][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.912710][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.944043][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 302.956100][ T6141] bond0 (unregistering): Released all slaves [ 302.973708][T11842] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 302.980986][T11842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.552920][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.562284][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.570400][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.579320][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.587470][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.644756][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.934023][ T6141] hsr_slave_0: left promiscuous mode [ 303.959015][ T6141] hsr_slave_1: left promiscuous mode [ 303.965354][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.981729][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.001289][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.017257][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.113708][ T6141] veth1_macvtap: left promiscuous mode [ 304.125009][ T6141] veth0_macvtap: left promiscuous mode [ 304.136705][ T6141] veth1_vlan: left promiscuous mode [ 304.147650][ T6141] veth0_vlan: left promiscuous mode [ 305.209783][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 305.312054][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 305.691486][ T51] Bluetooth: hci0: command tx timeout [ 306.259058][T11873] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1594'. [ 306.415531][T11873] xt_CT: No such helper "snmp" [ 306.588616][T11881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1597'. [ 306.611581][T11881] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1597'. [ 306.670447][T11886] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 306.945855][T11893] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 306.979567][T11901] netlink: 'syz.5.1601': attribute type 17 has an invalid length. [ 307.033777][T11855] chnl_net:caif_netlink_parms(): no params data found [ 307.052739][T11897] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1601'. [ 307.290923][T11901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.397065][T11915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.761902][ T51] Bluetooth: hci0: command tx timeout [ 308.039194][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.057498][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.073563][T11855] bridge_slave_0: entered allmulticast mode [ 308.090994][T11855] bridge_slave_0: entered promiscuous mode [ 308.130560][T11855] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.140502][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.160536][T11855] bridge_slave_1: entered allmulticast mode [ 308.180102][T11932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'. [ 308.200672][T11855] bridge_slave_1: entered promiscuous mode [ 308.464680][T11855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.481335][T11936] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 308.536650][T11855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.652835][T11855] team0: Port device team_slave_0 added [ 308.671047][T11855] team0: Port device team_slave_1 added [ 308.816387][T11938] netlink: 'syz.0.1608': attribute type 25 has an invalid length. [ 308.832037][T11855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.854826][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.906626][T11855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.951647][T11855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.958634][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.961667][T11938] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1608'. [ 309.022150][T11855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.368096][T11855] hsr_slave_0: entered promiscuous mode [ 309.374820][T11855] hsr_slave_1: entered promiscuous mode [ 309.396866][T11855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.412157][T11855] Cannot create hsr debugfs directory [ 309.841686][ T5853] Bluetooth: hci0: command tx timeout [ 310.154002][T11972] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.225429][T11972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1617'. [ 310.278655][T11943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1610'. [ 310.588612][T11978] syzkaller0: entered promiscuous mode [ 310.601484][T11978] syzkaller0: entered allmulticast mode [ 311.010548][T11987] netlink: 'syz.5.1621': attribute type 2 has an invalid length. [ 311.064985][T11855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.095675][T11855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.110456][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'. [ 311.145372][T11855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.183906][T11855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.503446][T11987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1621'. [ 311.748849][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 311.823047][T11855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.918047][T11855] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.931660][ T5853] Bluetooth: hci0: command 0x0419 tx timeout [ 311.999831][T12025] netlink: 'syz.2.1629': attribute type 13 has an invalid length. [ 312.008145][T12025] netlink: 'syz.2.1629': attribute type 17 has an invalid length. [ 312.068957][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.076217][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.114120][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.121321][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.192251][T12025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.337140][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 312.471117][T12045] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1634'. [ 312.657902][T12054] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1635'. [ 312.841032][T12040] pim6reg1: entered promiscuous mode [ 312.848154][T12040] pim6reg1: entered allmulticast mode [ 312.875142][T12045] wireguard0: entered promiscuous mode [ 312.880879][T12045] wireguard0: entered allmulticast mode [ 313.306233][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 313.334630][T12066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1637'. [ 313.624448][T11855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.933259][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 314.401254][T12112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1648'. [ 314.479835][T12112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1648'. [ 314.524544][T11855] veth0_vlan: entered promiscuous mode [ 314.616540][T11855] veth1_vlan: entered promiscuous mode [ 314.623031][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 314.636147][T12125] netlink: 'syz.1.1647': attribute type 8 has an invalid length. [ 314.789785][T11855] veth0_macvtap: entered promiscuous mode [ 314.879429][T11855] veth1_macvtap: entered promiscuous mode [ 314.986440][T11855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.036107][T11855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.087531][ T6148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.106845][ T6148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.129439][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.198397][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.442370][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.461504][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.551900][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.572860][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.604211][T12149] FAULT_INJECTION: forcing a failure. [ 315.604211][T12149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.619657][T12149] CPU: 1 UID: 0 PID: 12149 Comm: syz.0.1654 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) [ 315.619681][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.619701][T12149] Call Trace: [ 315.619708][T12149] [ 315.619716][T12149] dump_stack_lvl+0x189/0x250 [ 315.619760][T12149] ? __pfx____ratelimit+0x10/0x10 [ 315.619786][T12149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.619808][T12149] ? __pfx__printk+0x10/0x10 [ 315.619834][T12149] ? __might_fault+0xb0/0x130 [ 315.619868][T12149] should_fail_ex+0x414/0x560 [ 315.619899][T12149] _copy_from_iter+0x1db/0x16f0 [ 315.619923][T12149] ? rcu_is_watching+0x15/0xb0 [ 315.619947][T12149] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 315.619971][T12149] ? __pfx__copy_from_iter+0x10/0x10 [ 315.619992][T12149] ? __build_skb_around+0x257/0x3e0 [ 315.620022][T12149] ? netlink_sendmsg+0x642/0xb30 [ 315.620045][T12149] ? skb_put+0x11b/0x210 [ 315.620076][T12149] netlink_sendmsg+0x6b2/0xb30 [ 315.620112][T12149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.620141][T12149] ? aa_sock_msg_perm+0x94/0x160 [ 315.620170][T12149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.620198][T12149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.620224][T12149] __sock_sendmsg+0x219/0x270 [ 315.620250][T12149] ____sys_sendmsg+0x505/0x830 [ 315.620284][T12149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.620322][T12149] ? import_iovec+0x74/0xa0 [ 315.620347][T12149] ___sys_sendmsg+0x21f/0x2a0 [ 315.620367][T12149] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.620422][T12149] ? __fget_files+0x2a/0x420 [ 315.620446][T12149] ? __fget_files+0x3a0/0x420 [ 315.620481][T12149] __x64_sys_sendmsg+0x19b/0x260 [ 315.620502][T12149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.620530][T12149] ? __pfx_ksys_write+0x10/0x10 [ 315.620549][T12149] ? rcu_is_watching+0x15/0xb0 [ 315.620591][T12149] ? do_syscall_64+0xbe/0x3b0 [ 315.620622][T12149] do_syscall_64+0xfa/0x3b0 [ 315.620645][T12149] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.620669][T12149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.620698][T12149] ? clear_bhb_loop+0x60/0xb0 [ 315.620719][T12149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.620735][T12149] RIP: 0033:0x7ff815b8e929 [ 315.620751][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.620765][T12149] RSP: 002b:00007ff816a2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.620783][T12149] RAX: ffffffffffffffda RBX: 00007ff815db5fa0 RCX: 00007ff815b8e929 [ 315.620795][T12149] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000008 [ 315.620806][T12149] RBP: 00007ff816a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 315.620817][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.620827][T12149] R13: 0000000000000000 R14: 00007ff815db5fa0 R15: 00007ffcfbffec68 [ 315.620855][T12149] [ 316.328507][ T6145] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.472473][ T6145] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.512982][ T6145] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.533738][T12163] __nla_validate_parse: 3 callbacks suppressed [ 316.533755][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 316.606161][ T6145] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.697057][ T6141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.838607][ T6141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.978469][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.985088][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.130903][ T6141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.241367][ T6141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.382530][ T6141] bridge_slave_1: left allmulticast mode [ 317.388210][ T6141] bridge_slave_1: left promiscuous mode [ 317.394320][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.404863][ T6141] bridge_slave_0: left allmulticast mode [ 317.410525][ T6141] bridge_slave_0: left promiscuous mode [ 317.416830][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.743914][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.754885][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.767487][ T6141] bond0 (unregistering): Released all slaves [ 317.999781][ T6141] hsr_slave_0: left promiscuous mode [ 318.007160][ T6141] hsr_slave_1: left promiscuous mode [ 318.013826][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.021227][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.030504][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.038417][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.059155][ T6141] veth1_macvtap: left promiscuous mode [ 318.065010][ T6141] veth0_macvtap: left promiscuous mode [ 318.070688][ T6141] veth1_vlan: left promiscuous mode [ 318.076336][ T6141] veth0_vlan: left promiscuous mode [ 318.676916][T12186] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 318.744954][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.756608][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.770556][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.782825][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.797697][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.877036][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 318.915487][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 319.292695][T12181] wg1: entered promiscuous mode [ 319.301956][T12181] wg1: entered allmulticast mode [ 319.389716][T12184] bond4: (slave gretap2): making interface the new active one [ 319.401049][T12184] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 319.489584][T12192] FAULT_INJECTION: forcing a failure. [ 319.489584][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 319.502700][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.2.1667 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) [ 319.502726][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.502737][T12192] Call Trace: [ 319.502744][T12192] [ 319.502752][T12192] dump_stack_lvl+0x189/0x250 [ 319.502778][T12192] ? __pfx____ratelimit+0x10/0x10 [ 319.502804][T12192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.502826][T12192] ? __pfx__printk+0x10/0x10 [ 319.502855][T12192] ? __pfx___might_resched+0x10/0x10 [ 319.502877][T12192] ? fs_reclaim_acquire+0x7d/0x100 [ 319.502908][T12192] should_fail_ex+0x414/0x560 [ 319.502940][T12192] should_failslab+0xa8/0x100 [ 319.502966][T12192] __kmalloc_noprof+0xcb/0x4f0 [ 319.502987][T12192] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 319.503015][T12192] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 319.503044][T12192] genl_family_rcv_msg_doit+0xb8/0x300 [ 319.503072][T12192] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 319.503094][T12192] ? rcu_is_watching+0x15/0xb0 [ 319.503120][T12192] ? apparmor_capable+0x137/0x1b0 [ 319.503143][T12192] ? bpf_lsm_capable+0x9/0x20 [ 319.503163][T12192] ? security_capable+0x7e/0x2e0 [ 319.503196][T12192] genl_rcv_msg+0x60e/0x790 [ 319.503241][T12192] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.503261][T12192] ? __pfx_nfc_genl_se_io+0x10/0x10 [ 319.503302][T12192] netlink_rcv_skb+0x205/0x470 [ 319.503331][T12192] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.503353][T12192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.503408][T12192] ? down_read+0x1ad/0x2e0 [ 319.503441][T12192] genl_rcv+0x28/0x40 [ 319.503459][T12192] netlink_unicast+0x75c/0x8e0 [ 319.503497][T12192] netlink_sendmsg+0x805/0xb30 [ 319.503536][T12192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.503568][T12192] ? aa_sock_msg_perm+0x94/0x160 [ 319.503599][T12192] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.503628][T12192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.503668][T12192] __sock_sendmsg+0x219/0x270 [ 319.503694][T12192] ____sys_sendmsg+0x505/0x830 [ 319.503729][T12192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.503768][T12192] ? import_iovec+0x74/0xa0 [ 319.503795][T12192] ___sys_sendmsg+0x21f/0x2a0 [ 319.503815][T12192] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.503873][T12192] ? __fget_files+0x2a/0x420 [ 319.503897][T12192] ? __fget_files+0x3a0/0x420 [ 319.503932][T12192] __x64_sys_sendmsg+0x19b/0x260 [ 319.503954][T12192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.503982][T12192] ? __pfx_ksys_write+0x10/0x10 [ 319.504001][T12192] ? rcu_is_watching+0x15/0xb0 [ 319.504028][T12192] ? do_syscall_64+0xbe/0x3b0 [ 319.504058][T12192] do_syscall_64+0xfa/0x3b0 [ 319.504082][T12192] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.504106][T12192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.504125][T12192] ? clear_bhb_loop+0x60/0xb0 [ 319.504154][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.504172][T12192] RIP: 0033:0x7f4b0038e929 [ 319.504189][T12192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.504205][T12192] RSP: 002b:00007f4b01236038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.504224][T12192] RAX: ffffffffffffffda RBX: 00007f4b005b5fa0 RCX: 00007f4b0038e929 [ 319.504238][T12192] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000008 [ 319.504250][T12192] RBP: 00007f4b01236090 R08: 0000000000000000 R09: 0000000000000000 [ 319.504261][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.504272][T12192] R13: 0000000000000000 R14: 00007f4b005b5fa0 R15: 00007ffe0c3c0f78 [ 319.504303][T12192] [ 319.566855][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1668'. [ 319.898399][T12196] tipc: Enabled bearer , priority 10 [ 319.905003][T12212] FAULT_INJECTION: forcing a failure. [ 319.905003][T12212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.932516][T12212] CPU: 1 UID: 0 PID: 12212 Comm: syz.0.1669 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) [ 319.932541][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.932551][T12212] Call Trace: [ 319.932559][T12212] [ 319.932566][T12212] dump_stack_lvl+0x189/0x250 [ 319.932592][T12212] ? __pfx____ratelimit+0x10/0x10 [ 319.932616][T12212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.932637][T12212] ? __pfx__printk+0x10/0x10 [ 319.932673][T12212] should_fail_ex+0x414/0x560 [ 319.932704][T12212] _copy_to_user+0x31/0xb0 [ 319.932728][T12212] simple_read_from_buffer+0xe1/0x170 [ 319.932755][T12212] proc_fail_nth_read+0x1df/0x250 [ 319.932783][T12212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.932810][T12212] ? rw_verify_area+0x258/0x650 [ 319.932829][T12212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.932855][T12212] vfs_read+0x200/0x980 [ 319.932879][T12212] ? __pfx___mutex_lock+0x10/0x10 [ 319.932905][T12212] ? __pfx_vfs_read+0x10/0x10 [ 319.932925][T12212] ? __fget_files+0x2a/0x420 [ 319.932953][T12212] ? __fget_files+0x3a0/0x420 [ 319.932975][T12212] ? __fget_files+0x2a/0x420 [ 319.933006][T12212] ksys_read+0x145/0x250 [ 319.933028][T12212] ? __pfx_ksys_read+0x10/0x10 [ 319.933070][T12212] ? do_syscall_64+0xbe/0x3b0 [ 319.933100][T12212] do_syscall_64+0xfa/0x3b0 [ 319.933124][T12212] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.933153][T12212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.933171][T12212] ? clear_bhb_loop+0x60/0xb0 [ 319.933194][T12212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.933212][T12212] RIP: 0033:0x7ff815b8d33c [ 319.933228][T12212] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.933244][T12212] RSP: 002b:00007ff816a0e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.933264][T12212] RAX: ffffffffffffffda RBX: 00007ff815db6080 RCX: 00007ff815b8d33c [ 319.933278][T12212] RDX: 000000000000000f RSI: 00007ff816a0e0a0 RDI: 0000000000000008 [ 319.933289][T12212] RBP: 00007ff816a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 319.933301][T12212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.933312][T12212] R13: 0000000000000000 R14: 00007ff815db6080 R15: 00007ffcfbffec68 [ 319.933352][T12212] [ 320.380332][T12221] atomic_op ffff88807bd53198 conn xmit_atomic 0000000000000000 [ 320.442752][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 320.478725][T12227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1673'. [ 320.547759][T12188] chnl_net:caif_netlink_parms(): no params data found [ 320.555940][T12232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1676'. [ 320.644264][T12232] delete_channel: no stack [ 320.717876][T12234] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.812108][T12242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 320.824210][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1679'. [ 320.882081][ T5853] Bluetooth: hci0: command tx timeout [ 320.895417][T12188] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.903472][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.910725][T12188] bridge_slave_0: entered allmulticast mode [ 320.918862][T12188] bridge_slave_0: entered promiscuous mode [ 320.986674][T12188] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.036623][T12188] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.063324][T12188] bridge_slave_1: entered allmulticast mode [ 321.070766][T12188] bridge_slave_1: entered promiscuous mode [ 321.170545][T12257] FAULT_INJECTION: forcing a failure. [ 321.170545][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 321.185262][T12257] CPU: 0 UID: 0 PID: 12257 Comm: syz.5.1683 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) [ 321.185290][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.185303][T12257] Call Trace: [ 321.185311][T12257] [ 321.185320][T12257] dump_stack_lvl+0x189/0x250 [ 321.185351][T12257] ? __pfx____ratelimit+0x10/0x10 [ 321.185379][T12257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.185403][T12257] ? __pfx__printk+0x10/0x10 [ 321.185435][T12257] ? __pfx___might_resched+0x10/0x10 [ 321.185460][T12257] ? fs_reclaim_acquire+0x7d/0x100 [ 321.185494][T12257] should_fail_ex+0x414/0x560 [ 321.185530][T12257] should_failslab+0xa8/0x100 [ 321.185558][T12257] __kmalloc_cache_noprof+0x70/0x3d0 [ 321.185582][T12257] ? nfc_genl_se_io+0x227/0x680 [ 321.185610][T12257] nfc_genl_se_io+0x227/0x680 [ 321.185639][T12257] genl_family_rcv_msg_doit+0x215/0x300 [ 321.185671][T12257] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 321.185709][T12257] ? bpf_lsm_capable+0x9/0x20 [ 321.185732][T12257] ? security_capable+0x7e/0x2e0 [ 321.185770][T12257] genl_rcv_msg+0x60e/0x790 [ 321.185800][T12257] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.185821][T12257] ? __pfx_nfc_genl_se_io+0x10/0x10 [ 321.185861][T12257] netlink_rcv_skb+0x205/0x470 [ 321.185891][T12257] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.185914][T12257] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.185973][T12257] ? down_read+0x1ad/0x2e0 [ 321.186007][T12257] genl_rcv+0x28/0x40 [ 321.186026][T12257] netlink_unicast+0x75c/0x8e0 [ 321.186065][T12257] netlink_sendmsg+0x805/0xb30 [ 321.186106][T12257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.186152][T12257] ? aa_sock_msg_perm+0x94/0x160 [ 321.186184][T12257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.186223][T12257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.186260][T12257] __sock_sendmsg+0x219/0x270 [ 321.186285][T12257] ____sys_sendmsg+0x505/0x830 [ 321.186318][T12257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.186373][T12257] ? import_iovec+0x74/0xa0 [ 321.186403][T12257] ___sys_sendmsg+0x21f/0x2a0 [ 321.186423][T12257] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.186487][T12257] ? __fget_files+0x2a/0x420 [ 321.186511][T12257] ? __fget_files+0x3a0/0x420 [ 321.186548][T12257] __x64_sys_sendmsg+0x19b/0x260 [ 321.186570][T12257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.186598][T12257] ? __pfx_ksys_write+0x10/0x10 [ 321.186617][T12257] ? rcu_is_watching+0x15/0xb0 [ 321.186644][T12257] ? do_syscall_64+0xbe/0x3b0 [ 321.186675][T12257] do_syscall_64+0xfa/0x3b0 [ 321.186698][T12257] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.186721][T12257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.186740][T12257] ? clear_bhb_loop+0x60/0xb0 [ 321.186763][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.186780][T12257] RIP: 0033:0x7f84e458e929 [ 321.186798][T12257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.186813][T12257] RSP: 002b:00007f84e53bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.186833][T12257] RAX: ffffffffffffffda RBX: 00007f84e47b5fa0 RCX: 00007f84e458e929 [ 321.186846][T12257] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000008 [ 321.186858][T12257] RBP: 00007f84e53bc090 R08: 0000000000000000 R09: 0000000000000000 [ 321.186870][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.186898][T12257] R13: 0000000000000000 R14: 00007f84e47b5fa0 R15: 00007ffdebb264a8 [ 321.186933][T12257] [ 321.556582][T12188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.572150][T12188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.713212][T12275] atomic_op ffff88807d43f998 conn xmit_atomic 0000000000000000 [ 321.804955][T12188] team0: Port device team_slave_0 added [ 321.845305][T12188] team0: Port device team_slave_1 added [ 321.923436][T12188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.930892][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.958669][T12188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.983025][T12286] netlink: 'syz.5.1691': attribute type 13 has an invalid length. [ 321.990859][T12286] netlink: 'syz.5.1691': attribute type 17 has an invalid length. [ 322.155344][T12287] syzkaller0: entered promiscuous mode [ 322.161700][T12287] syzkaller0: entered allmulticast mode [ 322.185361][T12282] tipc: Enabled bearer , priority 0 [ 322.195647][T12188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.209712][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.242312][T12188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.327178][T12304] atomic_op ffff88807e3ed198 conn xmit_atomic 0000000000000000 [ 322.383398][T12309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.426380][T12286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.457998][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 322.652549][T12285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.724597][T12286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.971518][ T5853] Bluetooth: hci0: command tx timeout [ 323.315217][ T3094] tipc: Node number set to 411880948 [ 323.872365][T12302] tipc: Resetting bearer [ 323.896355][T12314] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 323.925448][T12280] tipc: Resetting bearer [ 323.960223][T12280] tipc: Disabling bearer [ 324.121075][T12188] hsr_slave_0: entered promiscuous mode [ 324.139402][T12188] hsr_slave_1: entered promiscuous mode [ 324.155200][T12188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.169653][T12188] Cannot create hsr debugfs directory [ 324.287677][T12333] tipc: Enabled bearer , priority 0 [ 324.361316][T12327] syzkaller0: entered promiscuous mode [ 324.368189][T12327] syzkaller0: entered allmulticast mode [ 324.877477][T12353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.024837][T12362] Bluetooth: MGMT ver 1.23 [ 325.048730][ T5853] Bluetooth: hci0: command tx timeout [ 325.099665][T12363] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 325.117087][T12364] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 326.153624][T12333] tipc: Resetting bearer [ 326.161433][T12325] tipc: Resetting bearer [ 326.178816][T12325] tipc: Disabling bearer [ 326.308970][T12372] netlink: 'syz.1.1713': attribute type 6 has an invalid length. [ 326.328057][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1713'. [ 326.478848][T12382] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1715'. [ 326.493504][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 326.526112][T12378] netlink: 'syz.0.1714': attribute type 2 has an invalid length. [ 326.634672][T12386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.684104][T12389] xt_time: unknown flags 0x4 [ 326.692760][T12390] Unknown options in mask 700 [ 326.872103][T12188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.924732][T12188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.972815][T12188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 327.018510][T12188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.048423][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 327.087100][T12409] tipc: Started in network mode [ 327.092782][T12409] tipc: Node identity , cluster identity 4711 [ 327.108174][T12409] tipc: Failed to obtain node identity [ 327.118442][T12409] tipc: Enabling of bearer rejected, failed to enable media [ 327.131747][ T5853] Bluetooth: hci0: command tx timeout [ 327.180183][T12417] syzkaller0: entered promiscuous mode [ 327.189080][T12417] syzkaller0: entered allmulticast mode [ 327.431322][T12435] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1729'. [ 328.949850][T12188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.016923][T12458] netlink: 'syz.2.1734': attribute type 13 has an invalid length. [ 329.030554][T12188] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.052119][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 329.078550][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.085778][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.118153][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.125531][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.266069][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 329.279971][T12470] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.305565][T12470] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.441338][T12470] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.498202][T12470] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.546659][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 329.550610][T12485] lo: entered promiscuous mode [ 329.615752][T12470] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.664236][T12470] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.766851][T12489] syz_tun (unregistering): left promiscuous mode [ 329.809911][T12470] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.825473][T12470] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.888711][T12188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.901536][T12468] lo: left promiscuous mode [ 330.000157][ T2965] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.023826][ T2965] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.062991][ T2965] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.080167][ T2965] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.101072][ T2965] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.113772][ T2965] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.135259][ T2965] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.163223][ T2965] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.303665][T12510] tipc: Enabled bearer , priority 0 [ 330.419874][T12510] syzkaller0: entered promiscuous mode [ 330.431051][T12510] syzkaller0: entered allmulticast mode [ 330.441177][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1747'. [ 330.524541][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 331.760810][T12514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1747'. [ 331.773837][T12510] tipc: Resetting bearer [ 331.828119][T12506] tipc: Resetting bearer [ 331.917834][T12506] tipc: Disabling bearer [ 332.049033][T12528] netlink: 'syz.0.1749': attribute type 3 has an invalid length. [ 332.080413][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 332.103520][T12188] veth0_vlan: entered promiscuous mode [ 332.125247][T12528] netlink: 'syz.0.1749': attribute type 3 has an invalid length. [ 332.146810][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 332.346811][T12188] veth1_vlan: entered promiscuous mode [ 332.681802][T12188] veth0_macvtap: entered promiscuous mode [ 332.755711][T12188] veth1_macvtap: entered promiscuous mode [ 332.828270][T12188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.919258][T12188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.007144][ T1117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.056508][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 333.069237][ T1117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.102612][ T1117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.121406][ T1117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.266561][T12580] tipc: Started in network mode [ 333.272148][T12580] tipc: Node identity , cluster identity 4711 [ 333.290134][T12580] tipc: Failed to obtain node identity [ 333.300234][T12580] tipc: Enabling of bearer rejected, failed to enable media [ 333.314773][T12584] netlink: 'syz.2.1765': attribute type 10 has an invalid length. [ 333.357473][T12584] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 333.370964][T12584] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 333.394375][T12584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 333.490371][T12580] syzkaller0: entered promiscuous mode [ 333.496587][T12580] syzkaller0: entered allmulticast mode [ 335.224004][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.246006][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.295575][T12623] batadv_slave_0: entered promiscuous mode [ 335.312532][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 335.427490][T12623] batadv_slave_0 (unregistering): left promiscuous mode [ 335.519032][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.528262][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.544384][T12637] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 335.632049][T12637] netlink: 'syz.0.1779': attribute type 1 has an invalid length. [ 335.677178][T12641] 8021q: VLANs not supported on xfrm0 [ 335.795761][T12637] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 335.860226][T12639] bond2: (slave gretap1): Releasing active interface [ 335.883038][T12648] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 335.900183][T12639] bond4: (slave ip6gretap1): Releasing backup interface [ 335.903854][T12648] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1782'. [ 335.950137][T12654] nbd: nbd1 already in use [ 336.118193][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.164481][ T6135] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.183544][ T6135] ------------[ cut here ]------------ [ 336.189037][ T6135] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1230:5 [ 336.197128][ T6135] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 336.218623][ T6135] CPU: 1 UID: 0 PID: 6135 Comm: kworker/u8:15 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) [ 336.218652][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.218666][ T6135] Workqueue: events_unbound cfg80211_wiphy_work [ 336.218707][ T6135] Call Trace: [ 336.218714][ T6135] [ 336.218723][ T6135] dump_stack_lvl+0x189/0x250 [ 336.218752][ T6135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.218775][ T6135] ? __pfx__printk+0x10/0x10 [ 336.218814][ T6135] ubsan_epilogue+0xa/0x40 [ 336.218852][ T6135] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 336.218880][ T6135] ieee80211_request_ibss_scan+0x600/0x8b0 [ 336.218917][ T6135] ieee80211_ibss_work+0xd8a/0x1060 [ 336.218937][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.218962][ T6135] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.218983][ T6135] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.219005][ T6135] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 336.219030][ T6135] ? skb_dequeue+0x10e/0x150 [ 336.219050][ T6135] ? ieee80211_iface_work+0xcdb/0xfe0 [ 336.219075][ T6135] ? ieee80211_iface_work+0xf39/0xfe0 [ 336.219098][ T6135] ? rcu_is_watching+0x15/0xb0 [ 336.219143][ T6135] cfg80211_wiphy_work+0x2df/0x460 [ 336.219169][ T6135] ? process_scheduled_works+0x9ef/0x17b0 [ 336.219194][ T6135] process_scheduled_works+0xae1/0x17b0 [ 336.219248][ T6135] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.219288][ T6135] worker_thread+0x8a0/0xda0 [ 336.219339][ T6135] kthread+0x70e/0x8a0 [ 336.219369][ T6135] ? __pfx_worker_thread+0x10/0x10 [ 336.219390][ T6135] ? __pfx_kthread+0x10/0x10 [ 336.219419][ T6135] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.219440][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.219462][ T6135] ? __pfx_kthread+0x10/0x10 [ 336.219488][ T6135] ret_from_fork+0x3fc/0x770 [ 336.219517][ T6135] ? __pfx_ret_from_fork+0x10/0x10 [ 336.219544][ T6135] ? __switch_to_asm+0x39/0x70 [ 336.219567][ T6135] ? __switch_to_asm+0x33/0x70 [ 336.219589][ T6135] ? __pfx_kthread+0x10/0x10 [ 336.219616][ T6135] ret_from_fork_asm+0x1a/0x30 [ 336.219659][ T6135] [ 336.219666][ T6135] ---[ end trace ]--- [ 336.429713][ T6135] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 336.436961][ T6135] CPU: 1 UID: 0 PID: 6135 Comm: kworker/u8:15 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) [ 336.449218][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.459277][ T6135] Workqueue: events_unbound cfg80211_wiphy_work [ 336.465523][ T6135] Call Trace: [ 336.468790][ T6135] [ 336.471713][ T6135] dump_stack_lvl+0x99/0x250 [ 336.476325][ T6135] ? __asan_memcpy+0x40/0x70 [ 336.480903][ T6135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.486101][ T6135] ? __pfx__printk+0x10/0x10 [ 336.490718][ T6135] panic+0x2db/0x790 [ 336.494645][ T6135] ? __pfx_panic+0x10/0x10 [ 336.499064][ T6135] ? _printk+0xcf/0x120 [ 336.503230][ T6135] ? __pfx__printk+0x10/0x10 [ 336.507842][ T6135] check_panic_on_warn+0x89/0xb0 [ 336.512794][ T6135] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 336.518522][ T6135] ieee80211_request_ibss_scan+0x600/0x8b0 [ 336.524355][ T6135] ieee80211_ibss_work+0xd8a/0x1060 [ 336.529559][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.534767][ T6135] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.540680][ T6135] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.547011][ T6135] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 336.552651][ T6135] ? skb_dequeue+0x10e/0x150 [ 336.557255][ T6135] ? ieee80211_iface_work+0xcdb/0xfe0 [ 336.562633][ T6135] ? ieee80211_iface_work+0xf39/0xfe0 [ 336.568009][ T6135] ? rcu_is_watching+0x15/0xb0 [ 336.572790][ T6135] cfg80211_wiphy_work+0x2df/0x460 [ 336.577910][ T6135] ? process_scheduled_works+0x9ef/0x17b0 [ 336.583642][ T6135] process_scheduled_works+0xae1/0x17b0 [ 336.589212][ T6135] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.595207][ T6135] worker_thread+0x8a0/0xda0 [ 336.599814][ T6135] kthread+0x70e/0x8a0 [ 336.603887][ T6135] ? __pfx_worker_thread+0x10/0x10 [ 336.608999][ T6135] ? __pfx_kthread+0x10/0x10 [ 336.613599][ T6135] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.618801][ T6135] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.624005][ T6135] ? __pfx_kthread+0x10/0x10 [ 336.628611][ T6135] ret_from_fork+0x3fc/0x770 [ 336.633201][ T6135] ? __pfx_ret_from_fork+0x10/0x10 [ 336.638314][ T6135] ? __switch_to_asm+0x39/0x70 [ 336.643075][ T6135] ? __switch_to_asm+0x33/0x70 [ 336.647841][ T6135] ? __pfx_kthread+0x10/0x10 [ 336.652436][ T6135] ret_from_fork_asm+0x1a/0x30 [ 336.657218][ T6135] [ 336.660557][ T6135] Kernel Offset: disabled [ 336.664922][ T6135] Rebooting in 86400 seconds..