last executing test programs: 6.308897061s ago: executing program 1 (id=13503): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r3, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.989300702s ago: executing program 3 (id=13506): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}, 0xe0000000}], 0x2, 0x0) 5.98877207s ago: executing program 4 (id=13507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 5.987181386s ago: executing program 1 (id=13508): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x7, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8, 0x401, {{0xe, 0x4, 0x3, 0x5, 0x38, 0x68, 0x0, 0xd, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x5, "619538"}, @generic={0x89, 0xc, "4e6f64fb4a98272345cd"}]}}}}}) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7c1, 0x15a, 0x33, 0x20000, {{0xe, 0x4, 0x3, 0x1, 0x38, 0x64, 0x0, 0x4, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x7c, [@rand_addr=0x64010100, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010102, @private=0xa010101]}]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @broadcast}, &(0x7f0000000280)=0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000100)={0x0, 0xffffffffffffff03, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd2b}}]}, 0x3c}}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_vlan\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f00000003c0)=0x14) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r12, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40004) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44814}, 0x40001) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@delneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r13, 0x10, 0xff, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x7f00, 0xa, 0x3e, {{0x1d, 0x4, 0x1, 0x39, 0x74, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0x81, [@rand_addr=0x64010100, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @loopback]}, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0x2, [{@multicast1, 0x4}, {@broadcast, 0xfff}]}, @timestamp_prespec={0x44, 0x14, 0xb5, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x9}, {@private=0xa010102, 0x27}]}, @timestamp_prespec={0x44, 0x1c, 0x2c, 0x3, 0x8, [{@multicast1, 0x3ff}, {@multicast1, 0x9}, {@local, 0x1456}]}]}}}}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006f80)={&(0x7f0000002a80)=@deltfilter={0x44e0, 0x2d, 0x0, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0xe}, {0xb, 0x9}, {0x8, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0xc40, 0x2, [@TCA_ROUTE4_POLICE={0xc3c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4c, 0x5, 0x5, 0x2, 0x6, 0x0, 0x3a5, 0x704283ec, 0x9, 0x400, 0xffff, 0x9, 0x9, 0x1, 0x7fffffff, 0xffffffff, 0x48d, 0x9, 0xf3, 0x4, 0x4, 0xc, 0x0, 0x2, 0x1, 0x7, 0x8, 0x400, 0x8, 0xfffffff5, 0x3, 0x7fff, 0x5345, 0x9, 0x100000, 0x6, 0x91a, 0x7, 0x4, 0xffffff81, 0xfff, 0x1, 0x0, 0x551f913d, 0x9, 0x3, 0x10001, 0x6, 0x7, 0x1ff, 0xf1d, 0x624, 0x10000, 0x0, 0xa3, 0x9f64, 0xff, 0x4, 0x3ad, 0x4, 0x2, 0x10, 0x101, 0x2, 0x3, 0x8, 0x7, 0xd, 0x0, 0x5, 0x7fffffff, 0xff, 0x8dca, 0x101, 0x8, 0x1, 0x80000000, 0x9, 0x8, 0x1, 0x9, 0x60000000, 0xdb5c, 0x1, 0xe, 0x80, 0xe, 0x0, 0xc, 0x10001, 0x7, 0x7, 0x5, 0x6, 0x9, 0x6, 0x0, 0xf, 0x0, 0x6, 0xb9, 0x8000, 0x2, 0xffffff01, 0x4, 0x1, 0x7, 0x100, 0x6, 0x0, 0x400, 0x9, 0x1, 0x2, 0x5, 0x8, 0x64e, 0x153, 0x7fff, 0x3, 0x7ff, 0x9, 0x5, 0x8, 0xc, 0x1ff, 0x5, 0x7, 0x400, 0x81, 0x91, 0x2, 0xfffffff9, 0xfffff800, 0xffff, 0x7adc, 0xff, 0xf, 0x2, 0xa2bca9c, 0x40, 0x0, 0x1, 0xc, 0x6, 0x5, 0x8000000, 0x0, 0x80, 0x80000001, 0x97ce, 0x101, 0xc, 0xfffffff9, 0x5, 0x2, 0x1, 0x39, 0xfffffffa, 0x3fc, 0x800, 0x3f8, 0x4, 0x8, 0x5, 0x200, 0xfffffff2, 0xc43, 0x8, 0x1, 0x0, 0x4, 0x0, 0x368, 0x500, 0x7, 0x0, 0x1eabf560, 0x4, 0x6, 0xffff, 0xc, 0x4, 0x9, 0x1, 0x8, 0x80000000, 0x6, 0x8, 0x8, 0x1ff, 0xd000000, 0x0, 0x6, 0xffffff01, 0x1ff, 0x7, 0x0, 0x0, 0x8, 0x1ff, 0x1, 0x3ff, 0x1000, 0x2, 0xfff, 0x1, 0x1, 0x2, 0x81, 0x4, 0x6, 0x5, 0x6, 0x8, 0x8, 0x1, 0x4, 0x101, 0x1, 0x8, 0x5, 0x1000, 0x3, 0x2, 0x5, 0x8, 0xfffffffd, 0x6, 0x400, 0x200, 0x9, 0xffffffff, 0x3, 0x15, 0x400, 0x8, 0x0, 0x1000, 0x9, 0xb, 0x0, 0xe, 0x0, 0x2, 0x2, 0x80, 0x5, 0xa, 0xc, 0x6, 0x4, 0xfff, 0xe2a, 0x1ff, 0x6759]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x137a}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x3, 0x401, 0x0, 0x6, 0x1, 0x7fff, 0x3, 0x9, 0x4ca, 0x6, 0x533, 0x7, 0x0, 0xbb4c, 0xfffffff8, 0x7fffffff, 0x3, 0x1, 0x6, 0x2, 0x1, 0xfff, 0x10000, 0x1, 0x1, 0x0, 0x7, 0x2, 0x8ca2, 0xdb6, 0x2, 0x10000, 0x177, 0x7, 0x5, 0x80, 0xff, 0x5, 0x8, 0x5, 0x9, 0x1ff, 0x2, 0xfffffff7, 0x10, 0xfffffff8, 0x9, 0xffffffff, 0x0, 0x8, 0x1ff, 0x5, 0x6, 0x45581556, 0x9, 0xffffff00, 0xfffffffe, 0x2, 0x4, 0x3, 0x7fffffff, 0x5b0d2ef1, 0x10001, 0xd, 0xfffffff8, 0x0, 0x43d4, 0x10, 0x40, 0xf, 0x4, 0x9, 0x9, 0x0, 0x3, 0x6, 0x2, 0xfff, 0x5, 0x80, 0x1, 0x2, 0x46000000, 0x1, 0x56b5, 0xf, 0x80, 0x10000, 0x9, 0x8, 0x8, 0x9bcf, 0x6, 0x9, 0x6, 0x7, 0x7, 0x7, 0x6, 0x5, 0x8, 0x8, 0x503f, 0x9, 0x6, 0x7, 0x9, 0x6, 0xfffffffe, 0xb, 0x8, 0x6, 0x30d, 0xa, 0x738, 0x1, 0x6, 0x10001, 0x4, 0x9, 0x7, 0x7, 0x3, 0x0, 0x9, 0x1ff, 0x5e73, 0x6, 0xfffffffa, 0x6, 0x1, 0xfffffbff, 0x8, 0xa, 0xfffffffe, 0x0, 0xb, 0x6, 0x5, 0x1, 0x4, 0x18d, 0x22, 0x0, 0x8b, 0x4, 0x0, 0xd78, 0x3, 0xcf02, 0x4, 0x8, 0x5, 0xffffffff, 0xffff, 0x75b, 0x1, 0x647b, 0x60, 0xd, 0x5, 0x1, 0x80, 0x2f, 0x1000, 0x3, 0x9, 0x17805750, 0x1, 0xe7, 0x5, 0x7d05, 0x9, 0xe48, 0x80000001, 0x1, 0x0, 0x5, 0x10000, 0x7, 0x5, 0x4b07, 0x0, 0x8000, 0x7fff, 0xa, 0x80, 0x5, 0x0, 0x4, 0x6, 0x1, 0x5, 0x6, 0x7fffffff, 0x7ff, 0x0, 0xc, 0x8, 0x5, 0x9, 0xfffffffa, 0x9, 0x8, 0x1, 0x9, 0x4, 0x10001, 0xd6, 0x0, 0x4c5, 0x3, 0xc5c, 0x4, 0x7fff, 0x1, 0x0, 0x400, 0x226, 0x5, 0x200, 0x7, 0x10001, 0x4, 0x8, 0x9, 0x5, 0x9234, 0x2, 0x180, 0x8, 0x8, 0x8, 0x0, 0x7, 0x6, 0x6, 0x7, 0x0, 0xa, 0x7, 0xd, 0xffffe503, 0x8, 0x101, 0x4, 0x7, 0x400, 0x8001, 0xffff, 0x0, 0x7ff, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x8, 0x2, 0x2912, 0xffffff4b, 0x2, 0xfffffff7, 0x175c400, 0x8, 0x2, 0x2, 0x9, 0x6, 0x4, 0x2, 0x5, 0x9, 0xd, 0x6, 0xee, 0x401, 0xb9, 0xb8, 0x9, 0xfe, 0x9, 0x5, 0x1, 0x7, 0x4, 0x1, 0x100, 0xfc5, 0x8, 0xfffffff7, 0x0, 0x10000, 0x6, 0x1, 0xffffffe6, 0xd, 0x5, 0x1000, 0xd46, 0x7fffffff, 0x9, 0xd, 0x800, 0x9, 0x400, 0x0, 0x40, 0x1000, 0x1, 0x80, 0xf61, 0x5, 0x5, 0xb, 0x49, 0x4, 0x81, 0xbf67, 0x1ff, 0x1000, 0x315f, 0x7, 0x5c6c, 0x4, 0xc, 0x7, 0xd6e, 0x7, 0xffffffff, 0x7, 0x4, 0x413f, 0x1, 0xba3f, 0xfffffff8, 0x4, 0x8, 0x1ff, 0x2, 0x343d, 0x4, 0x5, 0x3a5a, 0x7, 0xfc, 0xde2, 0x9b, 0x2, 0x0, 0x25, 0x9, 0x7, 0x10001, 0x4d, 0x7, 0x10, 0xfffffffa, 0xe, 0x10, 0x9, 0x40, 0x9, 0x8, 0x2, 0x8, 0x4, 0x80000001, 0x1, 0x3, 0x81, 0x1ff, 0x382, 0x5, 0xffff8000, 0x815c, 0x7fffffff, 0x1ff, 0x8, 0x7fff, 0x9, 0x9, 0x9, 0x6, 0x6, 0x3, 0x7, 0x5, 0x800, 0x6, 0x9, 0x100, 0x5, 0x0, 0x4, 0x9, 0x9, 0x7, 0xb0, 0xb, 0x8, 0xc0000000, 0xff, 0x2a, 0xfffffbff, 0x8, 0x3b3f, 0x2, 0x6, 0x8, 0x3, 0x4, 0x3ff, 0x8903, 0x9, 0x6, 0x816c, 0xfffffffb, 0x4, 0x0, 0x2, 0x4, 0x6, 0x3, 0x2, 0xfffffffe, 0x1, 0x9, 0x1c9, 0x401, 0x40000, 0x7, 0x1, 0x6, 0xe4fe, 0x7, 0x1, 0x9, 0x9, 0x7, 0x1, 0x5, 0xefa, 0x0, 0x80000001, 0x6, 0x7, 0x10, 0x0, 0x9, 0x1d, 0x8, 0x4, 0xfffffffc, 0x9, 0x3, 0xec52, 0x2d, 0x3, 0x3, 0x2, 0x1000, 0x7, 0x4, 0xa, 0xb, 0xfff, 0x5, 0xf430, 0x4, 0xfffffe01, 0x7f, 0xc577, 0xff, 0x0, 0x4, 0x1, 0x16, 0x7, 0x3, 0xfffffffe, 0x9, 0x0, 0x8, 0x9, 0x1ff, 0x2, 0x727, 0x7, 0x5, 0x9, 0xfffffffa, 0x2, 0x9, 0x2, 0x7fffffff, 0x3, 0x3ff, 0x7, 0xb, 0x8, 0x1, 0x7, 0xfffffffc, 0x800, 0x7ff, 0x2, 0xffff, 0x7, 0x39, 0xecb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x144, 0x2, [@TCA_BASIC_ACT={0x140, 0x3, [@m_ctinfo={0x13c, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x3, 0x8, 0x6ac, 0x7ff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x4, 0x3, 0x1, 0xca5}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10001}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x9f, 0x6, "e38f343c925e2e02bd371e0d5c2e3cce76b4263850e932e627525fa0823d12749db3ace762f5241160d90588509c425d1342f1daf0cf29bfad259934faf64df9d3c0acc21bce81d2bb0e1a8bbccaa886bcdd8fb600ce6932443606d48986844752c7fb78ddd10423e1086b3dff005720fb97f4ac50d716f73943a888e4d6c60c5e1cb153a03e220df5ba209d9368c3f8ea99ce8c03c3d0cfe8b2de"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0xf4, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xfffff867}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x350d}, @TCA_CHAIN={0x8, 0xb, 0x54}, @filter_kind_options=@f_cgroup={{0xb}, {0x36e4, 0x2, [@TCA_CGROUP_EMATCHES={0x78, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xffff}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="0600e6"]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x7}, {0x9, 0x2, 0x9, 0x5}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x4}, {0x1, 0x64, 0xb071, 0x2}}}]}]}, @TCA_CGROUP_ACT={0x348, 0x1, [@m_sample={0x70, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x40}]}, {0x39, 0x6, "c29aad5686adf94967fdc454e1eebb976af0310329df4d58b921c87cbb29a8814672c10ed2c58a6b44d8c2d844cca61ad5c42514cd"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x17c, 0x7, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x8, 0x8, 0x0, 0x4bc}}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x2c8a}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xdf2d}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xdc, 0x6, "7a082fb3cde06cdaed23f07b327a65700d5c6a7a5fe499ee54dc0eb4ed2dda03bceea72c69766a41a895082ae105742c0592fef33149872b8a01093e9e27bcd5c7dd120bb65e9c29e2b15d84b24989ab88f99aee8a62b27daddd3161808a73c5629c0d11104b0d029974b9979c51f27a987f527bbfe56b214199b8d6ebb5b621f919ed0bacf6a6dcb709c6480810023952b7eeb45040ae0961d331801bff93203031b4c752b02bb95f17ab9a2a0b026be787d91bad0ffe71baa8273c8648e695ce1f2358ac057a435ac3650615aeef403d9558236612c74a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_simple={0x158, 0x1, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3ff, 0x7, 0x7, 0x3}}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0x6, 0x3a, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x8, 0x0, 0x8}}, @TCA_DEF_DATA={0x7, 0x3, '$@\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff3, 0x1b6, 0x0, 0x545, 0x3}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xb2, 0x6, "197fbc3047fbe289214ddca853277c13c81d6b3dd3f287e648ddbb30701527d702d7944f73948b6f7cdc13e2fd2156500973c7f41e14a321229f525f60ac73805bb17c83c4971fbba2d65bfc49589972fc51be0ccee5f10216a53fc440443237d803bb8abb52c24947dbde98f47cfbc8f68ac196123c9ce0b585df135639573bef77c5956b1963944342959313cd1c152222beb5f6db407861cbddcc39ee984a194b27cdcd78ca5fd2a57ec58881"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x8}, {0xc, 0x9, 0x100, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_CGROUP_EMATCHES={0x2d4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf19f}}, @TCA_EMATCH_TREE_LIST={0x2b0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x9e3e}, "eb8fd6d9c14b794db71f76018e338d8bdf27cca40faeb3380ceab3aa5b20e000660c01aac670f6f40b84e703bd1ba166ecec544946c520ce97a9d8f4fc7b3f397923289c1bad327a92034069ba2059d12079433282d2296bf08327ea6ca5f368faf7dcb40c0b2c67bb88c6f54515af3bdfd6f31b8a65fd5e8f184c7b740b1b4d9aa59cdd1f3a2265cb4e1ffcf607acb2ca514e83b1853c42a101b9ad3e7f9ef16de1e9b4015dcb426f68dbe0e23ef8edfd270f92c6dfe34536dd0f3cbb4736d182d0bbb1b3cec0e27be599a703c6aaafba069228c78b66"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb7, 0x3, 0xc}, {0xfffffffa, 0x9, 0x5, 0xfffffff7}}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x7}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="761e", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}, {0x8ee1, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR='r', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="b82d", @TCF_META_TYPE_VAR='uty', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="5958c4237862", @TCF_META_TYPE_VAR="cfacc7803b4c648c", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="f3c8833442df509b"]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="01a3"]}]}}, @TCF_EM_CONTAINER={0x44, 0x3, 0x0, 0x0, {{0xfe00, 0x0, 0x8}, "1c36b30fc82073f34094a66961a6bbb27b5a8a307850475c7ba673a2211349e9913fa3024eb15a761ad748098648d2137aaf03e7ab6e0ef0"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x7f, 0x0, 0x8, 0x4, 0xf, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0xc8, 0x1, 0x0, 0x0, {{0xb, 0x0, 0x9}, "628d6f415be28697499d2167555ed870f996d44e7aa2ff7aa08950bfc2db56ec472923f0067ce1247f04eb3241898a3f17b63f2f43dc7fae901d559d55d64684b9d2aca207ed527ef9185deb969a3feb57f455aef050756e3c8f4f8f79f638605dbc3e41ef425dd6a9368333284296f7b2285ecb6bdddaeebfeeaa5a66822969b322b8742ee8d47d02c0b426195dc3a18f0057397672b5a51ceef284fe2a46e12b1e083ff68b0c4924d9f3984b46362a163cc13f2507b49f0421"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x10}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_ACT={0x1d28, 0x1, [@m_pedit={0x1d24, 0x14, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x9, 0xfffffff3, 0x4, 0x8, 0x8001}, 0x0, 0x6, [{0x609, 0x8, 0xb, 0x0, 0x2, 0x4}]}, [{0x7, 0x3, 0x5, 0x9, 0x1, 0x100}, {0xffff, 0x5, 0x38b3, 0x5cb, 0x1e, 0x401}, {0x0, 0x14, 0x81866f88, 0x3ff, 0x4, 0x800}, {0x0, 0x0, 0x8, 0x0, 0x2, 0x9}, {0x0, 0x1, 0x8, 0x1, 0x80000001}, {0xe1e3, 0x96, 0x3, 0x4, 0x101, 0x9}, {0x9, 0x3, 0x9, 0x80, 0x1, 0x9}, {0x1, 0x1, 0x7, 0x6305, 0x1, 0x1}, {0x1, 0xb, 0x881, 0x10000, 0x10000, 0x100}, {0x7, 0xdcaa, 0x80000001, 0x6, 0xee5}, {0x8, 0x6, 0x2, 0x6f51, 0x80000000, 0x4}, {0x8, 0x4, 0xfffffff5, 0x1, 0x8000, 0xd06}, {0x1800, 0x2, 0x100, 0xfffffff2, 0x4, 0x81}, {0xe, 0x7, 0xb69a, 0x101, 0x401, 0x4}, {0x0, 0xff, 0x7, 0xfffffffc, 0xb, 0x8000}, {0xff, 0x7, 0x0, 0xfffffff8, 0x3, 0x1}, {0x3, 0x3, 0x9, 0x81f4, 0x8, 0x2}, {0x6, 0xe, 0x0, 0x200, 0x7fff, 0x5}, {0xfffffff4, 0x80000000, 0x3, 0x0, 0x40000}, {0x5, 0xb98c, 0x6, 0x7ff, 0x10000, 0x7fffffff}, {0x4, 0x10001, 0x1000, 0x4, 0x0, 0x5}, {0x0, 0x6, 0xe, 0x5, 0x7, 0xfffffffd}, {0x7, 0xf2ac, 0x5, 0x7fff, 0x9a2, 0xcf0}, {0x110, 0x3, 0xbb, 0x1, 0x7, 0x1000}, {0x9, 0xffff601c, 0x3, 0x2, 0x7fffffff, 0x4}, {0x2, 0x9, 0x5, 0xe, 0x80000000, 0xcb}, {0x401, 0x9, 0xffff, 0x7, 0x10000000, 0x4e}, {0x311, 0x6, 0x4, 0x0, 0xfffffff4, 0x5}, {0x5, 0x5, 0x5, 0x2, 0x1}, {0x81, 0x4, 0x7f, 0x81, 0x763, 0x28e6}, {0xdc, 0x80, 0x80000000, 0x7, 0x0, 0xd}, {0x8, 0x0, 0x7, 0x10, 0x7f, 0x1}, {0x9, 0xb2, 0x4, 0xd, 0xff1, 0xb48}, {0x9, 0x4, 0xfffffffc, 0x9, 0x800, 0x2}, {0x10000, 0x5d0d, 0x9438, 0xa00, 0x1ff, 0x4aae}, {0x101, 0x7, 0x5, 0x3, 0xc, 0x800}, {0xfffffeff, 0x3, 0x6, 0x6, 0x4, 0x9}, {0x6, 0xffff5fe3, 0x3, 0x7, 0x4, 0xfffffff7}, {0x8, 0x5, 0x3, 0x9, 0x9, 0x4}, {0x0, 0x6, 0xa05, 0x0, 0x75, 0x8}, {0xffffffff, 0x1800000, 0x0, 0x5, 0x1000, 0xfffffff7}, {0x6, 0x5, 0xe, 0x8, 0x3, 0x2}, {0x7, 0x7, 0xffffffff, 0x400, 0xaa76}, {0xe000000, 0x0, 0x1, 0xffff2cb7, 0x8, 0xf9}, {0xb, 0x9, 0x8000, 0x7, 0x6, 0x9}, {0x4, 0xcc42, 0xe1b, 0x9, 0x0, 0xb}, {0x6, 0x7, 0x3, 0xffffffff, 0x0, 0x9}, {0x3, 0x9, 0x2, 0x7fffffff, 0x1000, 0x1}, {0x4, 0x1, 0x4, 0xfffffffe, 0x5, 0x8000}, {0xda06, 0x81, 0x400, 0x288, 0x9, 0x3}, {0xfffffff7, 0x8, 0x1, 0x7, 0x9}, {0x1, 0xb2, 0x101, 0x4, 0x8001, 0x6}, {0x1800, 0x8a2, 0x4af1, 0x4, 0x9}, {0x101, 0xc, 0x7f, 0x8001, 0x1, 0x5}, {0x7b, 0x5, 0x4, 0x1, 0xf292, 0x7}, {0x2, 0x0, 0x7, 0x5, 0x9ff7, 0x81}, {0x8, 0x8, 0x101, 0x1, 0x8000, 0x41e}, {0x5, 0x0, 0x150, 0x1, 0x1ff, 0x5}, {0x5, 0xfffffffb, 0x4, 0x8, 0xffffff5e, 0x400}, {0x2, 0x1, 0x1ff, 0x2, 0x7, 0x8}, {0x401, 0x0, 0x7, 0x401, 0x6, 0x710}, {0x1, 0x7, 0xfffffffa, 0xfffeffff, 0x70, 0x9}, {0xfff, 0x1, 0x9, 0x48, 0x1, 0x9}, {0x0, 0x7ff, 0x1, 0x8, 0x2, 0x6}, {0x9, 0x1, 0x8, 0xb23, 0x1, 0x3}, {0x6, 0xc, 0x7, 0x6, 0x8, 0x5}, {0x6b4a, 0x3, 0x401, 0xb8, 0x9, 0x956}, {0xffff, 0x9, 0x1, 0x7, 0x0, 0x80}, {0x4, 0x5, 0x7, 0x3, 0xf70, 0x1}, {0x4, 0xfffffff7, 0x7, 0x8, 0x40, 0x1000}, {0xa9d, 0x0, 0x596, 0xc, 0x8000, 0xfff}, {0x74, 0xc06, 0x5, 0x4, 0xfffffff7, 0x379e341}, {0x638, 0x8, 0x0, 0xfffffff9, 0x0, 0x7fff}, {0x8, 0x66d, 0x9, 0x25c9354a, 0x5, 0x3ba00}, {0x8, 0x2, 0xfff, 0x4dc6, 0xa81, 0x100}, {0x3, 0x80, 0x2, 0xfffffffd, 0x2, 0x3}, {0x2, 0x0, 0xeaee, 0x0, 0x4, 0x568}, {0x5, 0x0, 0xfffff542, 0x0, 0x5, 0xfffffff7}, {0x4, 0xaf06, 0x7, 0x5, 0x100, 0x1}, {0xe, 0x5, 0x7d, 0x7, 0xfffffeff, 0x9}, {0x3, 0xffff, 0x9, 0xfffffffd, 0x7, 0xfffffffa}, {0x6, 0x3, 0x4, 0xc, 0x9, 0x8}, {0x64, 0x47, 0x0, 0x80, 0x5, 0x3}, {0x5, 0xfffffffc, 0x8d, 0x8, 0x4, 0x9}, {0x4, 0x3, 0x40, 0x0, 0x401}, {0x1, 0x3ff, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x80000000, 0x3, 0x1, 0x1000, 0x2c80}, {0x5, 0x10, 0x9, 0x6, 0x45ca}, {0x1, 0xfffffff7, 0x6, 0x6, 0xe8af, 0x5}, {0xf8000000, 0x0, 0x10, 0x5, 0x6, 0x8}, {0x6, 0x1, 0x0, 0xf135, 0x2c8e, 0x6}, {0x7, 0x0, 0xd, 0x4, 0x4, 0x5}, {0x783, 0xffffffff, 0x5, 0x1, 0x3, 0x1}, {0x8, 0x9, 0x80000, 0x9, 0x0, 0xfff}, {0x8, 0x803a, 0x3ff, 0x5a41, 0x7, 0x3c}, {0x16, 0x9, 0x80, 0x0, 0x10000, 0x2}, {0xe8b6, 0x9, 0xf297, 0x7, 0x774, 0x1}, {0x2, 0x20, 0x8000, 0x6, 0x6, 0x2}, {0x8, 0x4677, 0x0, 0x80, 0x8001, 0x4}, {0x1ff, 0xa3ab, 0x6, 0x0, 0x3}, {0x401, 0x6, 0x7, 0x7, 0xeb, 0xad29}, {0x2, 0x0, 0x3, 0x5, 0xf3f9, 0x5}, {0x80000000, 0x0, 0x9, 0x7, 0xa29, 0xa}, {0x9, 0x6, 0x7, 0x9, 0x7, 0x401}, {0x1000, 0x5, 0x0, 0xa, 0xffff2390, 0x10000}, {0x7, 0x0, 0x2, 0x10, 0x9, 0x3}, {0x6, 0x0, 0x3, 0x4, 0xcc, 0x5}, {0x1, 0xb1, 0x44, 0x9, 0x100, 0x4c10}, {0x7, 0x2, 0x9, 0x1520, 0xfffffffb, 0x8}, {0x1, 0x7, 0x8, 0x856, 0x1ff, 0x8}, {0x7, 0x0, 0x5, 0x400, 0x7, 0x92}, {0x9, 0x1, 0x4, 0x8000, 0x4, 0x9}, {0x4f2c, 0xef6f, 0x6, 0x3, 0x0, 0x28}, {0x3, 0x7, 0x8000, 0x5, 0x1, 0x7}, {0x1, 0x6, 0x3, 0x1, 0xca5f, 0x3daa}, {0x2, 0xd17, 0x0, 0x1, 0xffff, 0x7}, {0x1ff, 0x1000, 0x4, 0x5, 0x9, 0x5}, {0x8, 0x5, 0x9, 0xe000, 0x0, 0x9}, {0x80000001, 0x9, 0x4, 0x6, 0x2, 0xa}, {0x80000001, 0x4969, 0x7ff, 0x0, 0x62e, 0x4}, {0x6, 0x8000, 0x0, 0xf, 0xc0000000, 0x3}, {0x8, 0x7, 0x4bb2, 0x40, 0x800, 0xffffffff}, {0x3, 0xf, 0x83, 0x10000, 0x6119, 0x2}, {0x81, 0x1fd, 0x0, 0x0, 0x8001, 0x5}, {0x4, 0x8000, 0x3, 0x4, 0x65, 0x10}, {0xffff, 0x3a6, 0x0, 0x8, 0x101, 0x10000}, {0x1000, 0x6, 0x5, 0x6f1dc0d6, 0xfffffffa, 0x9}, {0xfe, 0xbd6, 0x2, 0xffff, 0x5, 0x8}], [{0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4}, {0x3}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x2}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0xdef628edf1c35e73, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x82c11d9f1e7b4075}, {0x5, 0x1}, {0x0, 0x1}, {0x7db0cd94b72b1fc7, 0x1}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x2}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x2}, {0x5, 0x2}, {0x3}, {0x4}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xa, 0x8d9, 0x6, 0x8, 0x8}, 0x9, 0x8, [{0x6, 0x56, 0x6f2, 0x9, 0x0, 0x9}, {0x1, 0x6, 0x494d, 0x3b, 0x8}, {0xfffffff3, 0x5, 0xffffffa7, 0x0, 0x1, 0x2}]}, [{0x7fff, 0xa, 0x0, 0x1ff, 0x1, 0x2ea}, {0x4, 0x6, 0x7, 0x80, 0x7, 0x1}, {0x4, 0x3, 0x12, 0xb, 0xfffffffa, 0xffe00000}, {0x159, 0xa, 0x4, 0xb4, 0xa, 0x81}, {0x2, 0xe, 0x0, 0x3, 0x0, 0x81}, {0x8, 0x9, 0xfffff863, 0x0, 0x0, 0x2}, {0x3, 0xff, 0x0, 0xfffffff9, 0xfffffff0, 0x3}, {0x3, 0x0, 0x6, 0xb, 0x6}, {0x8612, 0x1, 0xb, 0x1, 0x5, 0x3}, {0x6, 0x9, 0xfffffff9, 0x42a, 0xfffff108, 0xfffffffc}, {0x1000, 0x9, 0xfff, 0x2, 0x1, 0x250}, {0x81, 0xe, 0xfffffff0, 0xf8e, 0x1, 0x2}, {0x3, 0x1000, 0x72a, 0x7, 0xff, 0x6cfc}, {0x8, 0xd2, 0x5a, 0x0, 0x9, 0x1743}, {0x7, 0x38000000, 0xbc, 0x314f, 0x401, 0x7}, {0x6, 0x7, 0x2, 0xfffffffb, 0x200, 0x1}, {0x3ff, 0x7fff, 0xd1, 0x552a, 0x8, 0xf}, {0x2b92, 0x3, 0x2, 0x4, 0x4, 0xf}, {0x7, 0x1, 0xbb, 0x6, 0x8, 0x7}, {0xbfbb, 0x9, 0x9, 0x800, 0x8, 0x4}, {0x4, 0xc0, 0xfffffff7, 0x2, 0x1, 0x2b22ca4f}, {0xc, 0x8, 0x11, 0x0, 0x9, 0x1}, {0xe897, 0xd, 0x6, 0x5, 0xfffffffa, 0x1ff}, {0x6, 0x7ed5, 0x7, 0x1cd7, 0x8, 0x3}, {0x6, 0x8, 0x5, 0xd, 0x8001, 0x6}, {0x3, 0x6, 0x70000, 0x4, 0x7, 0x8001}, {0x7, 0xd, 0xc00000, 0x0, 0x3, 0x2}, {0xdbef, 0x80, 0x5, 0x3ffc0000, 0x9, 0x5}, {0xfffffffa, 0x9, 0x5, 0x0, 0x12, 0xf}, {0x2, 0x3, 0x81, 0x2, 0x5, 0x1}, {0x7fff, 0x8000, 0xfffff53c, 0x8, 0x6, 0x40}, {0x2, 0x4, 0x1, 0x85, 0x1, 0xc55}, {0x9, 0xffff, 0x9, 0x3, 0x1, 0x1}, {0x400, 0x9f4, 0xafe7, 0x400, 0xffff, 0xfffffffc}, {0x8, 0x1, 0x7fff, 0x8000, 0x7bd79e4d, 0x5}, {0x0, 0x57e0, 0x6e5, 0x20, 0x5, 0x98}, {0x800, 0xd, 0xab5, 0xfffffffb, 0x1, 0x10}, {0x6, 0x7, 0x8, 0x9, 0xb22, 0x5}, {0x0, 0x4, 0x0, 0x5, 0x4, 0x80000000}, {0x8, 0xb, 0xc, 0x10000, 0xe, 0x5}, {0x9, 0x2, 0xf94d, 0xffffffff, 0x5, 0x3}, {0x8, 0xc, 0x3, 0x4, 0x6, 0x7fffffff}, {0x7fffffff, 0x8, 0x6808, 0xb, 0x0, 0x7}, {0xca, 0x0, 0x6, 0x1235deaf, 0x7, 0xf084}, {0x7ff, 0x4, 0x1, 0x1, 0x1, 0xe741}, {0x7f, 0xfffffffe, 0x0, 0x5, 0x3, 0x3}, {0xff8, 0x2, 0x47, 0x3, 0x7, 0x8}, {0xffff, 0x4, 0x0, 0x5aa5fc3b, 0x0, 0xd7}, {0xffff, 0x8, 0x3, 0x8, 0x80000000, 0x6}, {0x9, 0x7fff, 0x80000001, 0x0, 0xfffffeff, 0x9}, {0x8353, 0x200, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffff31d, 0x1e, 0x69, 0xaddc, 0xfffffff7, 0x10}, {0x2, 0x3, 0x7, 0x1, 0x7, 0x1d}, {0x2, 0x0, 0x8, 0x8, 0x10, 0x952a}, {0xf111416, 0x800, 0x8, 0xff, 0x7fffffff, 0xfffffbc5}, {0x2, 0x9, 0x5, 0x8, 0x8, 0x4}, {0xb27b, 0x0, 0x8, 0xff, 0x6, 0x99}, {0xf, 0x6, 0x0, 0x4, 0x5ca, 0x80000001}, {0xffffffff, 0x6, 0x2, 0x4, 0x0, 0x100}, {0x4, 0x2, 0x0, 0x7, 0x5, 0x2624}, {0xfff, 0x8000, 0x5, 0x6, 0xa, 0x6}, {0x4, 0x7fffffff, 0xfffffffb, 0xfffffffd, 0x5, 0x9}, {0x8, 0x6b, 0x5, 0x3, 0xfffffffe, 0x1}, {0x887, 0xb, 0x80000001, 0x4, 0x7, 0xbd}, {0x7, 0x2, 0x200000, 0xb0, 0x2, 0x2f}, {0xab, 0x100, 0x74d6, 0xf, 0x3d, 0x2}, {0xb, 0x5, 0x5, 0x8, 0x5, 0xd9d6}, {0x7fffffff, 0xb, 0x2, 0x2, 0x2e7e, 0x7}, {0x2, 0x6, 0x5, 0x4f4, 0x0, 0x5}, {0x6, 0x3, 0x0, 0x5, 0x8, 0xd994}, {0x40, 0x233578d0, 0x8, 0x6, 0x1000, 0xe}, {0x26, 0x1763, 0x0, 0x43c0, 0x9, 0x3}, {0x0, 0x7, 0x3ff, 0x4, 0x4, 0xe42}, {0x2359, 0x0, 0x81, 0x6, 0x5, 0x6}, {0xfffffff7, 0x9, 0x800, 0x7fff, 0x8, 0x5}, {0x10000, 0x1, 0x2, 0x80000001, 0x0, 0x40}, {0x80000000, 0x1, 0x5, 0x1, 0x6, 0x7f}, {0x8000, 0x5, 0x7fffffff, 0x5, 0x2, 0x6}, {0x67cb, 0x10000, 0x2, 0x591, 0x9, 0x200}, {0x6c18a131, 0x9, 0x0, 0x4, 0xdafa, 0x1}, {0x0, 0x9, 0x5, 0x0, 0x0, 0x7}, {0x7, 0x3, 0x2, 0x0, 0x1, 0x10000}, {0x1ca, 0x6, 0x3, 0x6e, 0x5, 0x6}, {0x9, 0x5, 0x2, 0x8, 0x101, 0xe59}, {0x81, 0x24c, 0x40, 0x23, 0x77d, 0x1}, {0x7, 0x8000, 0x0, 0x9, 0xee, 0x78d}, {0xff, 0x2, 0x800, 0x4cd, 0x7}, {0x6, 0x4, 0x3, 0x4e, 0xfffffff8, 0x4}, {0x1, 0xf4fd, 0x9, 0x0, 0x7, 0x7}, {0x5, 0x0, 0x9, 0x3, 0x27, 0x1}, {0xffffff38, 0x6, 0x1, 0x9, 0xb1, 0xffff}, {0x2, 0xffffffff, 0x4, 0x200, 0x1, 0x2}, {0x200, 0x2, 0xc, 0x5, 0x6, 0x5c}, {0x6c545bcc, 0x1, 0x2, 0x9, 0x3, 0x2}, {0x3, 0x4, 0xb, 0x9, 0x7, 0x6}, {0x8, 0xfffffffd, 0x6, 0xf, 0x5fc}, {0x8, 0x80000000, 0x10001, 0x7f, 0x2, 0x101}, {0x5d7a, 0xfffffff9, 0xffff, 0x4, 0x8d3, 0x7}, {0x5, 0x2, 0x9, 0x8, 0xfffff39d, 0x4a7e}, {0x200, 0x950c, 0x5, 0xdae, 0x7, 0x8}, {0x3, 0x4, 0x0, 0x9, 0x6, 0x4}, {0x7fffffff, 0x0, 0x8, 0x6, 0x1, 0x7fffffff}, {0x2, 0x800, 0x9, 0x9, 0x3ff, 0xff}, {0x64d, 0x9, 0x8, 0x7ff, 0x5, 0x2f6c20e8}, {0x2, 0x4, 0x3, 0x9, 0x2, 0x7}, {0x83a, 0x8001, 0x9, 0xc, 0x3, 0x7}, {0x8, 0x8000, 0x3, 0x6, 0x1, 0x9}, {0xc, 0x2, 0xb72, 0x8, 0x1, 0xffffffff}, {0x8643, 0xfffffffd, 0x7, 0x100, 0x6, 0x7}, {0x17, 0xa9f, 0x100, 0x1, 0x8001, 0x2}, {0xfa, 0x7fffffff, 0xf, 0x1, 0x8, 0x100}, {0x1, 0x6, 0x1, 0x5, 0x4a847b44, 0x8}, {0x6, 0x1, 0x2, 0x0, 0xfffffff9, 0x9}, {0x5, 0x9, 0x0, 0xffff453d, 0x6, 0x7}, {0x0, 0x9, 0x8b, 0x27bd, 0x3, 0x8}, {0x1000, 0x7, 0x9, 0x2, 0x4, 0x2}, {0x5, 0xc, 0x10, 0x6, 0x3, 0x3c7}, {0x45, 0x4, 0x10000, 0xb, 0x1}, {0xfff, 0x8, 0x7, 0x7, 0x5, 0x80000000}, {0x2, 0x3, 0x6, 0x7, 0x6, 0xffffffff}, {0x81, 0x9, 0x9, 0x3, 0x3, 0x7}, {0x7, 0x8001, 0x8000000, 0xd4f, 0x4, 0x6d}, {0xcdd, 0xf22, 0x6, 0x3, 0x5, 0x1}, {0x7, 0x0, 0x2, 0x8, 0xe71, 0x9}, {0x0, 0x4, 0x5024b0a0, 0x1, 0x2, 0x7}, {0x8d8d, 0xfff, 0x43, 0x80000001, 0x7fff, 0x7f}, {0x8, 0x7ff, 0x4, 0x4, 0x50bf, 0x7}, {0x0, 0x9, 0xffffffff, 0x6, 0x3, 0x7fffffff}], [{0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x4}, {}, {0x4}, {0x5}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x6}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4951af4e8cddd4d5, 0x1}, {0x7}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0xbe74ec8451093666, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x55, 0x6, "b1bd5c90f54292f236e97b5b3308e7414143633514b57c58587d6f15183b7dfb09ad68a9c56e289f7cce2b0174b910adb6cc8a8900765b764cffe5f7c8486fb51e92ab93a642eed876126ce8375e3630fd"}, {0xc, 0x7, {0x1, 0x620fa380b91ea9c8}}, {0xc, 0x8, {0x4, 0x2}}}}]}, @TCA_CGROUP_ACT={0x8a8, 0x1, [@m_bpf={0x198, 0x7, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80000000, 0x1, 0xc, 0x80000000, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x8aa, 0x1}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x401, 0x20000000, 0x6, 0x6000}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffff, 0x1000, 0x6, 0x3ff, 0xfffffffa}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xfd, 0x6, "d5b471bc0576b0af729765a4dc4b9c19ee2077f9f0d4ed793661fff5a9f0c43ef842ee0fd99ceaf7538b6f151431bd709709e533df7d7c1f5ffdca7e1a245c2ae74be70a0a10522c9aad29a0f220757fa231b174d2ac0f947ac198c136ebb603e04821b1a08318fd6278be4b46cdab72ab8e4395584ba542c4d72d9e4d2035e35daee450ffe844a9f546ddaa745e816b409e70055a6c5617f432d2d99701985ca140efcb3907ce5b0a97d9913afe656e9097827dc3281c5b85d0d55a75521bbef3438e2024a850c2ae749c78e48139cd05d7a2d7bbd80d6c32b4939d8ff0614c1ceab9eb9a41fb80a948698b716c835d037f83a2dff2bef938"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_gact={0x164, 0x20, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x800, 0xfff, 0x1, 0x3, 0x730a}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16aa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x1, 0x9, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x40, 0x4, 0xffffbc6d, 0x4}}]}, {0xe4, 0x6, "467785576c56f90a446229df40fba2dd678cd3ff3f0243ba8f4c66b40c975a87f5d398d6899592bf5bc8e5296f9e5fa057b999a3c5e664197dc6cef0b1bc481e1edcf21dd0d51210b512e650566a723b555ed354252ae3472713c441522a1c3178f9d9d75c2bdb6927d5ce996788326d42e5cf7f401ebcb40e05d19e6952c9a8b98ed2decc14d2027a3f7a9cdd38aa47baa509725d5726d0bcd5079da1883146f1ae27e3a8e492c8b856b451e6fa23b60c4a0ec618fca9db2ace9b250e3b9322a6b5d405203b9f548e4d5729a41d215510fee46f4c666ebc818f9fecdc2cab82"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x12c, 0x4, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xfff5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0xc7, 0x6, "ee6bd7a3ee0c6383999516aca06f4c36ec1c667d5084bae9834235e06db3a610eba62217d995c27a38863207e2ba0906aabc97b8ae13fefae8c20568aa17cb18a888f50036198fb50e63a88b7c64920c04777a1b18dc637c166c11a2631d6145ec3ee1661644d7cef09193c9555e0773d50a1a1f97d96cc6994c7cb540a3a07cb602e8450bb5852f014429099e50a9b44d9538146520850367844151543fe3116b8a1708b759b071b0dd21480816f044c5710f5cd4b6ea615d7c796b7c1b93c2a8af63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xf8, 0xb, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc8, 0x6, 0x5, 0x4, 0x7}, 0x100}}]}, {0xaa, 0x6, "2c71339642e40d75b1f93cac4da013f2e19581c46d40b4b08d8631575c906be9427a250196fc237a91aac96426e44b3f2c78a4ff759e6ccdb3d9475e2c53f6608dc5bdf45d6ce460a355853fb131157ef5430fa60331c42c5d9d1b254aa96c5ae45d720eedda52a21eec221119e663768526fcfb49aaef14590f15c88a8dcda2cc5b4f8fffd098f579cbdd1e763a544e7f64086189f1d78487c0e4e1284b96bf19b56aaeccc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x20c, 0x10, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x9, 0x8, 0x7f}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x5, 0x3, 0x2ead, 0x564}, 0xd97b41a99e66191, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x41a, 0x4, 0x9, 0x8fbd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x6, 0xfff, 0x36ac}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfe, 0x5, 0x7fff, 0xffff}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x20000000, 0xa, 0x400}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x0, 0x4, 0x80, 0xe978}, 0x1, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x2, 0x8, 0x1}, 0x3, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x78000000, 0x3, 0xffffffffffffffff, 0x6, 0x1800000}, 0x3, r15}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x7, 0x4, 0x5, 0x2}, 0x4, r16}}]}, {0x9e, 0x6, "9896921c86faa033e52d62320b820ec9ce4bfded18ca346449bc3d2f73009429aa342d429182ba7ef54b974da26273bd26b1886c196b81ab258fc0378259246ff5bbfe8d7e483e84a3bd223cea4d05bd542a53483b2a7d61fa5e717814f6793f27b637de210caf63342dd66ad325aceb99e09e0d94f7b263ee0a6b7b67ce0b7b4328890d922bd7ed323adb2b62f1a08c8095d7df85e8e9e8c9ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x178, 0x1b, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x29c}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7f, 0x4, 0x4f, 0x55}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1292, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x8, 0x2, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xbe, 0x6, 0x9, 0x3ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5696, 0x7ff, 0x1, 0x73, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x14, 0x5, 0x0, 0xa80}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf09, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe7a, 0x2}}]}, {0xa3, 0x6, "3df2b99a78e61e28e0231bee5406c63800c92c66db2aabf074b896679fd95866d21b368cd7dee924410718503afc7c09a0f66d707c810179aca3c181c7b32fba5600b4ae963c200a7b8bf3a245c63d33c4a7fe8fdc1a99501871a2223160fd59dc2d385f195560c999d8b5e416ab48d99621e1609c47a6757e506317e5dc3b4b147c6de6d1ae831db8ea56d822cc0e8248915455cc8f3b8bf215af42a9a069"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_ACT={0x224, 0x1, [@m_vlan={0x118, 0x1e, 0x0, 0x0, {{0x9}, {0x84, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xa6ee, 0x8, 0x20000000, 0x8, 0x1}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfffffff7, 0x1, 0x5, 0x2}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff, 0x7, 0xffffffffffffffff, 0x0, 0x10000}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffd, 0x100, 0x10000000, 0x6, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x6b, 0x6, "e948ae5055c143ea2f6654529c2f937a8248b536a159172466b4b49341cb304c97ed29cb272e48008478184274aa858d47a96ff2d2c78f62890ba242457f3bdbb86b198f58b4b19de71143741885d1106a30905cdc5ccf61788c68eca8f6a5a99bcd39f327d536"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x108, 0xc, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x322}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x466}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x1, 0xfffffffe, 0x4}, 0x3}}]}, {0xa7, 0x6, "89cf0957db4bd89cc9e1a35246d1eb88a53baaf4209b712a14511f27ad7c659c83c49845e8ab221d7eace58a883e5e45bd7287df3008a51b19020451096fda274f70cfde8fd2d941bf7c79dda0e8f33fff05cc05e4ee62ac944605f85f8e6155e541b11a2a8f9b3990830514b4282ba92f812092a89720b7f3b62d0cc69b824b6a2ffc5f6e5df4dc79b2d8ee30b29bf1b3185b0158384f4a0592e9b25618c95b27d973"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x82c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd00000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x400, 0x7fffffff, 0x1, 0xff, 0x0, 0x9, 0x4, 0xfffffff8, 0x7f, 0x2000, 0x2, 0x4, 0x1, 0x97, 0x9, 0x9, 0x80000000, 0x0, 0xfffffff9, 0x1, 0x9, 0xf1, 0xffff7fff, 0x3, 0x2, 0x0, 0x9, 0x0, 0x5, 0x1000, 0x5, 0x9, 0x5, 0x8001, 0x6, 0x8, 0x3ff, 0x1, 0x1, 0x2, 0x7cf2, 0x1, 0xffff, 0xe31, 0x2b59d4d5, 0x9, 0x1, 0x9d6, 0x6, 0x246, 0x4, 0x3, 0xfffffbf5, 0x3, 0x8, 0xce12, 0x7, 0xd21f, 0xd, 0x80, 0x1, 0x1, 0x8, 0x468, 0x1ff, 0x7, 0x3, 0x9d, 0x9, 0x2, 0x184a715, 0x9, 0x1, 0x26542494, 0xdca5, 0x7fff, 0xc4, 0x2a, 0x9, 0x0, 0x4f800, 0x4, 0x41c1f10, 0x503, 0x7f, 0x5fe, 0x3, 0x6, 0x401, 0x5, 0xc5, 0x4, 0x0, 0x426, 0x1000, 0x0, 0x7, 0x7, 0x4, 0x6, 0x6, 0xfffffff8, 0x8, 0x63, 0x3, 0x4, 0x9, 0x401, 0x9, 0x5, 0x80000001, 0x3, 0xffff0000, 0x7, 0x1, 0x9, 0x1, 0x200, 0xb8, 0x7fffffff, 0x8, 0x3, 0x6, 0x7, 0x4, 0x3, 0x8, 0x7, 0x1, 0x200, 0x8001, 0x5, 0x8, 0xffff, 0x4, 0x1fdeadc0, 0x7429efdc, 0x9, 0x0, 0x9, 0x8, 0x7c, 0x80000001, 0x9, 0x2, 0x10, 0x3ff, 0x7fff, 0x9, 0x8, 0x9e, 0x9523, 0xe, 0xffffffff, 0x80000000, 0x4, 0x1, 0x6525, 0x68ed, 0x9, 0x401, 0xe65, 0x80000000, 0xfffffffc, 0x5, 0x3, 0x3, 0xfbc, 0x6, 0x8001, 0x5, 0x101, 0x80000000, 0x200, 0x7ff, 0x7, 0x58, 0x770, 0x5, 0x7f, 0x8e74, 0xff, 0xc9ba0000, 0x6, 0x4, 0xcbf4, 0x4, 0x9, 0x9, 0x80000001, 0x4, 0x0, 0x2f7e, 0x1, 0x0, 0x3, 0xfff, 0x81, 0x2, 0x7, 0x0, 0x2, 0xfffffffa, 0x1, 0x5, 0x0, 0x4d6d, 0x5e2, 0x9, 0x5, 0x3, 0x1ff, 0x2, 0x7a, 0x5, 0x1, 0x8, 0x3, 0x6, 0x4, 0x1, 0x1, 0x7fffffff, 0xffffffff, 0x7, 0x6, 0x80000000, 0x4, 0x4, 0x400, 0x1, 0x800, 0x7, 0x8, 0x8, 0x0, 0xb97, 0x9, 0xfffeffff, 0x4, 0x8ba, 0x9, 0x4, 0x80000000, 0x3, 0x6, 0x10000, 0x6, 0x1, 0x1, 0x1, 0x105, 0x8, 0xb109, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff9, 0x4, 0x6, 0x8, 0x5, 0x8, 0x27dc, 0x7, 0x9, 0x8, 0xffffffcd, 0x3200000, 0xfff00000, 0x7, 0xc1, 0x7, 0x6, 0x9, 0x6, 0x411, 0x3ff, 0x4, 0x7, 0x5, 0x5, 0xe93, 0x9, 0x0, 0x2, 0x7, 0x4, 0x2, 0x0, 0x9, 0x5, 0x65f0, 0x5, 0x3, 0x400, 0x101, 0x6, 0x1, 0x1ff, 0xa, 0x80, 0x80000000, 0xe51, 0x0, 0xb43, 0x7ff, 0x3, 0x0, 0xffffff15, 0x0, 0x3c, 0x7, 0x1, 0xa9, 0x9, 0x1, 0x6, 0x822, 0xe, 0xdc, 0x5, 0x7, 0x0, 0xfd9, 0x4, 0x7fff, 0x6, 0x2, 0x1000, 0xc6c, 0x7, 0x10001, 0x6, 0x2, 0x2, 0x9, 0x0, 0x1, 0x6, 0x0, 0x2000, 0x4, 0x3, 0xffffe78b, 0x6, 0x3, 0x11e9, 0x2, 0x33ad, 0xbc9, 0xc, 0x2, 0xfffffffd, 0x0, 0x246, 0x84, 0x982, 0x1000, 0x1ff, 0xecd, 0x7, 0xe37, 0x7fffffff, 0x4, 0xb9f, 0x401, 0x80000000, 0xffffff81, 0x1, 0x0, 0x7, 0x5, 0xfffffffd, 0x9, 0x11, 0x9, 0x348, 0x6, 0x4904, 0xffffff80, 0xfffffffa, 0x7f, 0x2, 0x0, 0x0, 0x91f, 0x3, 0x1, 0x60f, 0x5, 0x5, 0xe9d, 0x9, 0x32, 0x5000c98f, 0x3, 0x5, 0x9, 0x7, 0x0, 0x3cad, 0x5, 0x1, 0xe00, 0xec1d, 0x3, 0xc, 0x8, 0x5, 0x7, 0x8000, 0x80, 0xfffffbff, 0x5645, 0xff, 0x9d, 0xfffffffc, 0x2, 0x6, 0x8, 0x6, 0x5, 0xffffffff, 0x5, 0xffff, 0x7, 0x4, 0x6, 0xfffff800, 0x10000, 0x3, 0x6, 0x3, 0x9, 0xa, 0x8, 0x40000, 0xa000, 0x4, 0x8, 0x3, 0x4, 0x4, 0x6, 0x5, 0x54ab, 0x3, 0x80000000, 0xa, 0x5, 0x3, 0x1, 0x0, 0x4, 0x80000001, 0x6, 0x6, 0x6f1, 0xcc, 0x2, 0x9, 0x7, 0x34a8aca8, 0x9, 0x6, 0x0, 0xfffffffd, 0x7fffffff, 0x0, 0xffff, 0x5, 0xe, 0x1660, 0x0, 0x5, 0x2, 0x52, 0x0, 0x9, 0xc0fd, 0xfffffff3, 0x40, 0xffff, 0x3, 0xffffffe9, 0xfffffff9, 0x80000000, 0x8, 0x100, 0x1, 0x0, 0x167f1458, 0x7, 0x200, 0xf, 0xc15, 0xfff, 0x7, 0x1, 0x7fff, 0x2, 0x8, 0xd, 0x1000, 0x1, 0x7, 0x3, 0x3, 0x53, 0x9, 0xfffffff9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}]}}]}, 0x44e0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 5.92776802s ago: executing program 2 (id=13509): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5.852706203s ago: executing program 3 (id=13510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 5.776511004s ago: executing program 0 (id=13511): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 5.776301071s ago: executing program 4 (id=13512): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040) sendto$packet(r0, 0x0, 0x0, 0x4004004, 0x0, 0x0) 5.650143479s ago: executing program 1 (id=13513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x488d1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e) 5.469900164s ago: executing program 1 (id=13514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000"], 0x340a) 5.381432151s ago: executing program 2 (id=13515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x488d1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e) (fail_nth: 1) 5.381001018s ago: executing program 4 (id=13516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x8, 0xfff7, 0x1, 0x3}, {0xa5, 0x0, 0xfff8, 0x7, 0x8001, 0x4}, 0xd860, 0x7c, 0x1c75}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x50c2c3d35d16a8e7}, @TCA_TBF_BURST={0x8, 0x6, 0x194b}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x240048e4}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x88e43, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt(r6, 0x10, 0x0, &(0x7f0000000440)="e27565529aec848f326c4279d3b17442a6e927d30db628f3b0654f193a6fad0ca5eab4e1c1dce0ea8ef463798f202b6c36734939407945d63b8e264e2bfcb42851b3c20cde334965968fe0fa36f15258c0d9ff95ca7f4a9599a70a6a2b207c20c475906d0da082eda8ce04c0ed5ccb24a411ef6ad9ea724c60e6da83c6c4d9282d568da9d7cc4a247be35463b2038a57912cf727a96c", 0x96) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.071604352s ago: executing program 2 (id=13517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @remote}, &(0x7f0000000380)=0xc) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20030c2}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1d0, 0x12, 0x4, 0x70bd2b, 0x25dfdbfc, {0x1a, 0x9, 0x90, 0x4, {0x4e20, 0x4e21, [0xe887, 0x70f0, 0x2, 0x7], [0x4, 0xac, 0x3, 0x2], r5, [0x7, 0x80]}, 0x5, 0x684}, [@INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "d0a0ff54e695648b3bce80d94c01e6c810f6444fbf83e75345ea2d66358461d2e0c8f77cfe45cfefd01de53447490f64a0ac6e9c28e27c995c97926004df5b560d98fee5f4ebdb0489e54811ff792b58233f1db57d6025acedb171b5635864e1cd8dd6bd8a6b27c55442df91d100477354dad2061b150e7146b46cc73ba6edc95f7edf99e12262598c3b99db0b025f2733dd7e6c0248b75d5bebf0d4965774945a29cee04e7dee7b79dfaae31552295f49a9c8423b1fc50b1fd4acec46af45"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "1087153573557cb47596c460265129402b07fed37bc379503ccabfb774099e13e59ae81bbd8249f992466f49bac57bab5c38ca431e65569d7487a9de37eb20d2c9990fbd668e903bd93a481925294e34ace87fee9a8f4a7c5802cd9f492089a05769c594d054f17906db77fa2d7fdaa41af331a14a36a3a7538ab3c4bb26bcdab658b43a45fcf91583a4d64c7dfb2150be311765a22a1bf9fd870626e0100eaeb4d4da2a3d271d4586aa96a3a22f5f135858e8f846dfbda315"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20004014}, 0x1) sendmsg$alg(0xffffffffffffffff, 0x0, 0x488d1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'veth0_macvtap\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYRESOCT=0x0], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e) 4.739057544s ago: executing program 0 (id=13518): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 854.708955ms ago: executing program 3 (id=13519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) 749.510145ms ago: executing program 2 (id=13520): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x817, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 749.230181ms ago: executing program 0 (id=13521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500004000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x94) 746.930872ms ago: executing program 1 (id=13522): r0 = socket$inet(0x2, 0x5, 0x200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl2\x00', r4, 0x10, 0x700, 0x8, 0x2, {{0x12, 0x4, 0x1, 0x3, 0x48, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @remote, {[@lsrr={0x83, 0x1f, 0x18, [@rand_addr=0x64010102, @local, @empty, @broadcast, @multicast1, @multicast1, @remote]}, @ssrr={0x89, 0x13, 0x3f, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async, rerun: 64) r8 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$OCFS2_IOC_RESVSP64(r9, 0x4030582a, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x3, 0xffff, 0x3}) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) (async, rerun: 64) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async, rerun: 64) r11 = socket$inet(0x2, 0x80000, 0x5) (rerun: 64) sendmsg$inet(r11, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000000300)="9f3384c5d7c5ed835d784b801f4ca25b4c0f5551986a256e174186bda4608be741e5bcd3e9c6d12febc75de2295c4bcda99b43121963eb110d17c87f90e318a0f5e7f13f80c4004ea72b51f0e703838b5e823dec015fb8897f43557f2035903500fce3b35a1d5f8bf025c36eae5e370fff86a0f9ed4dc79f7e42792a8894d5c5df32848b96", 0x85}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="11000000000000000000000001000000060000000000000014000000000000000000000002000000010100000000000014000000000000000000000001000000f8ffffff0000000070000000040000000000000007000000831f380a010102e00000010a010102ac1e0001ac1414bb7f00000164010100442431010a01010100000000ffffffff00008001ac1e0001000000097f00000100000000831bcee0000002e0000001ac1414aaac14143dffffffff640101010000"], 0xb8}, 0x800) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r13, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404}, 0x40) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000bda64fe4e3f3aaca97828903baa05cc16cb805f920c1d1000100000005000500010000000800040000000000050006000000"], 0x34}}, 0x0) 714.748204ms ago: executing program 3 (id=13523): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}, 0xffff0000}], 0x2, 0x0) 632.303182ms ago: executing program 4 (id=13524): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000080)='hash:ip,mac\x00', 0x40000, &(0x7f0000000100)={@_ha_fsid={[0x9, 0x1000]}, {0x7, 0xff, 0x5, 0xe}}, 0x570, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, 0x453, 0x8, 0x70bd25, 0x25dfdbfe, "9278be6f1f65a3bb06718a2b43de803fbeaed7cca223a5e4a8126167df42888699dc9ecd8a1d996e3dbd11c5c8083ad6b21c0f9ddcdab4d843d915eb42c420fe5301a0497efb4df62c3a8fd940e597eda0621aae16fab02b95f0b44ee335a91323ad0e4691fb6743b31dda2697a4c09c0189da697866398d173f56799db9db1808c2aaf1d060cb56183e07b2c2d1b78addb730dc7dbd8b29a5716cb9e31f6a6dda2fb3be37c7d1d675b39a396b594edb2ec26d5af18eeacc12610d05d4d0b8a022d1b2419d4f924f43", [""]}, 0xdc}}, 0x40000) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x8}, 0x2) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0xb, "836a64", 0x8, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xafa2}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 529.544326ms ago: executing program 0 (id=13525): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'gre0\x00'}}, 0x1e) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) writev(r1, &(0x7f0000003580)=[{&(0x7f00000002c0)="97", 0x1}], 0x13) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 529.274991ms ago: executing program 2 (id=13526): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040) sendto$packet(r0, 0x0, 0x0, 0x4004004, 0x0, 0x0) 502.70041ms ago: executing program 3 (id=13527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567812345678}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8765432187654321}]}]}, 0x30}}, 0x0) recvmmsg(r0, &(0x7f0000008e40)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/235, 0xeb}], 0x1}, 0xd}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/58, 0x3a}, {&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000000640)=""/73, 0x49}], 0x3, &(0x7f0000000700)=""/120, 0x78}, 0x8}, {{&(0x7f0000000780)=@ieee802154, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/75, 0x4b}], 0x1}, 0x6c3}, {{&(0x7f00000008c0)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @default, @netrom, @remote, @bcast, @null]}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/107, 0x6b}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/224, 0xe0}, {&(0x7f0000001c40)=""/87, 0x57}], 0x6, &(0x7f0000001d40)=""/215, 0xd7}, 0xe21}, {{&(0x7f0000001e40)=@qipcrtr, 0x80, &(0x7f0000002080)=[{&(0x7f0000001ec0)=""/206, 0xce}, {&(0x7f0000001fc0)=""/178, 0xb2}], 0x2, &(0x7f00000020c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000002100)=@generic, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002180)=""/43, 0x2b}, {&(0x7f00000021c0)=""/111, 0x6f}, {&(0x7f0000002240)=""/124, 0x7c}, {&(0x7f00000022c0)=""/238, 0xee}, {&(0x7f00000023c0)=""/230, 0xe6}], 0x5}, 0x400}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000002540)=""/39, 0x27}, {&(0x7f0000002580)=""/244, 0xf4}, {&(0x7f0000002680)=""/161, 0xa1}, {&(0x7f0000002740)=""/230, 0xe6}, {&(0x7f0000002840)=""/43, 0x2b}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/27, 0x1b}, {&(0x7f00000038c0)=""/15, 0xf}, {&(0x7f0000003900)=""/73, 0x49}, {&(0x7f0000003980)=""/4096, 0x1000}], 0xa}, 0x8001}, {{&(0x7f0000004a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/88, 0x58}, {&(0x7f0000005b40)=""/4096, 0x1000}], 0x3}, 0x2}, {{&(0x7f0000006b80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006c00)=""/49, 0x31}, {&(0x7f0000006c40)=""/169, 0xa9}], 0x2, &(0x7f0000006d40)=""/4096, 0x1000}, 0xb}, {{0x0, 0x0, &(0x7f0000008e00)=[{&(0x7f0000007d40)=""/4096, 0x1000}, {&(0x7f0000008d40)=""/100, 0x64}, {&(0x7f0000008dc0)=""/64, 0x40}], 0x3}}], 0xa, 0x20, &(0x7f00000090c0)={0x0, 0x3938700}) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000009100)=ANY=[@ANYBLOB="040cdc075164b21096085b8a4859ae787a16093c14c53ad4ce949359a4cc08505d5eb608007db66b402f9dba0cd677f1fbe3d6769e05a2b0c5ceb9d2266cd2b47f8e51abd804e87f30a15bde3427eed5006189c144d506c7", @ANYRES16=r1, @ANYBLOB="01002301000034020000170000004c0006800c0003000123456789abcdef3c00040067636d286165732900000000000000000000000000000000000000000000000014000000bf6e3d7de774fc79872f0b8fa15bf788c9914c00"], 0x60}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) (async) nanosleep(&(0x7f0000000500)={0x0, 0x100000}, 0x0) 495.076331ms ago: executing program 1 (id=13528): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 337.388221ms ago: executing program 4 (id=13529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 280.922029ms ago: executing program 2 (id=13530): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="9f9fdda745b2002953bf86d3b24c333087e15e7c5af02a16d430f8c4b1c5396588143bdc74e068965ddff5f4eab8b89a28761c697fe841f9e997be93e54da4131424b6848f547ee6c66cf98d2da8c8354a128ad4c269ef85347dbb81a1ef8f539fa01c69b820eb8f81c96da98a13fdd450fd5960f49bd9356e17f78fc68ff2afa36154110a3c39c60b0622df0a447cdc99fea7873b2e2dfb37127de69ce01072ac0302582f5b6c423eafbf03e7821d15a47400044f4f77339ad74f8cc9e7b93aa81d6926aaaf530f803438fad7985b9f908492fb9d954a", 0xd7}], 0x1}, 0x48000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) listen(r5, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r8) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x32}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008850}, 0x400c0) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffd, @loopback}, 0x10) sendmmsg$inet(r8, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x4000000) setsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f00000000c0)="e80e4279693a5ca936c2f37825433668654d50426c00f252d69170472949cc38a54e8428b93be31149dd86c9cf4c5681f784263060b64821d2f3f09dcfd3e41cc10e9ea4da63178b1d236c5e7ec56adc7bfff8aa68785b5acb02c30438093e0bed83ef14d236f2a1ed1b108de027e1eb3e7610f424cb053cf8aa169abe183bacce4d843799e0623a01655079fc7a08eb741d674df3f57055e78d84bf57", 0x9d) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 273.049814ms ago: executing program 0 (id=13531): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x69}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 153.358724ms ago: executing program 3 (id=13532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000"], 0x340a) 75.975423ms ago: executing program 0 (id=13533): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) close(r3) recvmmsg(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)=ANY=[@ANYBLOB="180000002c00eb3964340000000000000400028004000180"], 0x18}], 0x1}, 0x0) getgid() sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703667726574617000000092000280"], 0x60}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009478e0000002000100010000000080000000"], 0x0) 0s ago: executing program 4 (id=13534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x10000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x9, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0x9e}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x2}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0xd, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x2, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0xfffffffe}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x1, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0xe628, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x2}, {0xd, 0x3, 0x3, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xea73, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x80000001, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x8, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0x1ff, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x3, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x3}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x3, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x5, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0x7fff, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0x800fff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x3, 0xffffffff, 0xe6b, 0xb, 0xb, 0x7}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0x0, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x8, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b8}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x3}, {0x3, 0x3, 0x7, 0x4, 0xbf, 0x81}, {0x4, 0x800, 0x4, 0x1, 0x8, 0xfa2f}, {0x0, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000004, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xffc, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x8001, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xa, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x6, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x3, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) kernel console output (not intermixed with test programs): iscuous mode [ 1402.636997][T16269] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1402.691194][T16269] gtp0: left promiscuous mode [ 1402.702350][T16269] bridge2: left promiscuous mode [ 1402.707801][T16269] bridge3: left promiscuous mode [ 1402.731193][T16269] bond5: left promiscuous mode [ 1402.746562][T16269] bridge6: left promiscuous mode [ 1402.824031][T16269] vlan2: left promiscuous mode [ 1402.837044][T16269] bridge0: left promiscuous mode [ 1402.860661][T16269] bridge8: left promiscuous mode [ 1403.005510][T16276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12129'. [ 1403.059172][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.069291][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.078784][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.087703][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.151149][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.160126][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.184106][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.215614][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.117596][T16317] bridge2: entered promiscuous mode [ 1404.201284][T16317] bridge2: entered allmulticast mode [ 1404.448277][T16328] syzkaller0: entered promiscuous mode [ 1404.473308][T16328] syzkaller0: entered allmulticast mode [ 1405.043316][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12163'. [ 1405.530535][T16374] mac80211_hwsim hwsim118 wlan0: entered promiscuous mode [ 1405.537890][T16374] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1405.602708][T16376] syzkaller0: entered promiscuous mode [ 1405.623171][T16376] syzkaller0: entered allmulticast mode [ 1406.655465][T16418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12195'. [ 1406.676545][T16420] netlink: 308 bytes leftover after parsing attributes in process `syz.3.12196'. [ 1406.772597][T16422] netlink: 208 bytes leftover after parsing attributes in process `syz.2.12197'. [ 1406.928329][T16424] syzkaller0: entered promiscuous mode [ 1406.954749][T16424] syzkaller0: entered allmulticast mode [ 1407.276999][T16443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.325106][T16447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12208'. [ 1407.641566][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12217'. [ 1407.717085][T16463] sctp: [Deprecated]: syz.3.12215 (pid 16463) Use of int in maxseg socket option. [ 1407.717085][T16463] Use struct sctp_assoc_value instead [ 1407.738528][T16469] syzkaller0: entered promiscuous mode [ 1407.746666][T16469] syzkaller0: entered allmulticast mode [ 1407.782895][T16469] tipc: Enabled bearer , priority 0 [ 1407.806470][T16469] tipc: Resetting bearer [ 1407.831675][T16472] syzkaller0: entered promiscuous mode [ 1407.837217][T16472] syzkaller0: entered allmulticast mode [ 1407.847507][T16472] TC_ACT_REPEAT abuse ? [ 1407.847827][T16467] tipc: Resetting bearer [ 1407.878978][T16474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12221'. [ 1407.911377][T16467] tipc: Disabling bearer [ 1407.937305][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1408.386046][T16494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12231'. [ 1408.508739][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1408.520080][T16500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12234'. [ 1408.631996][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12237'. [ 1408.792019][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12242'. [ 1408.801228][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12242'. [ 1408.810230][T16519] netlink: 'syz.1.12242': attribute type 6 has an invalid length. [ 1408.829229][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12242'. [ 1408.838232][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12242'. [ 1408.847220][T16519] netlink: 'syz.1.12242': attribute type 6 has an invalid length. [ 1408.849439][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.864057][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.914507][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.926248][T15441] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1409.148254][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12248'. [ 1409.175828][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12248'. [ 1409.382773][T16545] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1409.645060][T16558] batman_adv: batadv0: Adding interface: macvtap1 [ 1409.651548][T16558] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1409.728561][T16563] netlink: 'syz.3.12254': attribute type 15 has an invalid length. [ 1409.844454][T16564] syzkaller0: entered promiscuous mode [ 1409.855635][T16564] syzkaller0: entered allmulticast mode [ 1409.995142][T16567] bond1: option downdelay: invalid value (18446744073709551487) [ 1410.002857][T16567] bond1: option downdelay: allowed values 0 - 2147483647 [ 1410.011343][T16567] bond1 (unregistering): Released all slaves [ 1410.324243][T16579] sock: sock_timestamping_bind_phc: sock not bind to device [ 1410.426677][T16585] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1410.760604][T16593] syzkaller0: entered promiscuous mode [ 1410.766229][T16593] syzkaller0: entered allmulticast mode [ 1411.206560][T16602] syzkaller0: entered promiscuous mode [ 1411.218895][T16602] syzkaller0: entered allmulticast mode [ 1412.046959][T16628] syzkaller0: entered promiscuous mode [ 1412.053719][T16628] syzkaller0: entered allmulticast mode [ 1412.530755][T16654] syzkaller0: entered promiscuous mode [ 1412.536296][T16654] syzkaller0: entered allmulticast mode [ 1413.795731][T16696] __nla_validate_parse: 5 callbacks suppressed [ 1413.795754][T16696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12308'. [ 1414.206697][T16704] syzkaller0: entered promiscuous mode [ 1414.212339][T16704] syzkaller0: entered allmulticast mode [ 1414.755078][T16724] syzkaller0: entered promiscuous mode [ 1414.760623][T16724] syzkaller0: entered allmulticast mode [ 1414.906878][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12320'. [ 1414.920484][T16730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12320'. [ 1415.348982][T16751] syzkaller0: entered promiscuous mode [ 1415.354561][T16751] syzkaller0: entered allmulticast mode [ 1415.786462][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12332'. [ 1415.812254][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12332'. [ 1415.986130][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12335'. [ 1416.229416][ T6116] Bluetooth: hci2: link tx timeout [ 1416.240412][ T6116] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1416.262450][ T6116] Bluetooth: hci2: link tx timeout [ 1416.267768][ T6116] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1416.534955][T16799] syzkaller0: entered promiscuous mode [ 1416.541370][T16799] syzkaller0: entered allmulticast mode [ 1416.598403][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12345'. [ 1416.743267][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12345'. [ 1416.768277][T16807] syzkaller0: entered promiscuous mode [ 1416.774190][T16807] syzkaller0: entered allmulticast mode [ 1416.826047][T16803] tcf_pedit_act: 7 callbacks suppressed [ 1416.826128][T16803] tc action pedit 'at' offset 20 out of bounds [ 1417.047631][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12352'. [ 1417.314019][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12356'. [ 1417.614906][T16839] syzkaller0: entered promiscuous mode [ 1417.629596][T16839] syzkaller0: entered allmulticast mode [ 1417.803369][T16847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.813461][T16850] syzkaller0: entered promiscuous mode [ 1417.819070][T16850] syzkaller0: entered allmulticast mode [ 1418.289990][T16868] netlink: 'syz.2.12371': attribute type 5 has an invalid length. [ 1418.313347][ T6116] Bluetooth: hci2: command 0x0406 tx timeout [ 1418.732540][T16884] syzkaller0: entered promiscuous mode [ 1418.747870][T16884] syzkaller0: entered allmulticast mode [ 1418.979231][T16892] nbd: nbd2 already in use [ 1419.144756][T16888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12383'. [ 1419.266115][T16907] openvswitch: netlink: IP tunnel TTL not specified. [ 1419.273051][T16907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1419.765227][T16925] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12399'. [ 1420.310602][T16951] syzkaller0: entered promiscuous mode [ 1420.325202][T16951] syzkaller0: entered allmulticast mode [ 1421.862194][T17023] syzkaller0: entered promiscuous mode [ 1421.879801][T17023] syzkaller0: entered allmulticast mode [ 1422.117384][T17031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.577026][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12449'. [ 1422.963917][T17071] syzkaller0: entered promiscuous mode [ 1422.970031][T17071] syzkaller0: entered allmulticast mode [ 1423.076008][T17075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1423.223984][T17082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12461'. [ 1423.249086][T17081] syzkaller0: entered promiscuous mode [ 1423.254945][T17081] syzkaller0: entered allmulticast mode [ 1423.280421][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1423.458183][T17090] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12465'. [ 1423.589143][T17094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12467'. [ 1423.942326][T17113] syzkaller0: entered promiscuous mode [ 1423.948016][T17113] syzkaller0: entered allmulticast mode [ 1424.379293][T17121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12478'. [ 1424.492208][T17130] tipc: Enabling of bearer rejected, failed to enable media [ 1424.711050][T17139] syzkaller0: entered promiscuous mode [ 1424.716936][T17139] syzkaller0: entered allmulticast mode [ 1424.735951][T17140] netlink: 'syz.1.12482': attribute type 1 has an invalid length. [ 1425.026178][ T6116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1425.043582][ T6116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1425.061882][ T6116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1425.079046][T17140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1425.079324][ T6116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1425.149514][ T6116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1425.276340][T17142] bond1: (slave veth0_to_bond): making interface the new active one [ 1425.296579][T17142] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1425.834566][T17145] xfrm0 speed is unknown, defaulting to 1000 [ 1425.894469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1426.112119][T15441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.125417][T15441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1426.140927][T15441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1426.184833][T17145] lo speed is unknown, defaulting to 1000 [ 1426.238117][T17174] syzkaller0: entered promiscuous mode [ 1426.243651][T17174] syzkaller0: entered allmulticast mode [ 1426.280139][T17180] sctp: [Deprecated]: syz.3.12496 (pid 17180) Use of int in max_burst socket option. [ 1426.280139][T17180] Use struct sctp_assoc_value instead [ 1426.725774][T15441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.772012][T15441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1426.809132][T15441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1426.851210][T17190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12501'. [ 1426.861399][T17145] virt_wifi0 speed is unknown, defaulting to 1000 [ 1427.043671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.165463][T17193] syzkaller0: entered promiscuous mode [ 1427.172739][T17193] syzkaller0: entered allmulticast mode [ 1427.273719][T15441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1427.284012][T15441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1427.288731][ T4942] Bluetooth: hci5: command tx timeout [ 1427.294357][T15441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1427.616693][T17219] syzkaller0: entered promiscuous mode [ 1427.622309][T17219] syzkaller0: entered allmulticast mode [ 1427.920000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1428.399395][T17244] syzkaller0: entered promiscuous mode [ 1428.404945][T17244] syzkaller0: entered allmulticast mode [ 1428.418877][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.430106][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.438389][T17145] bridge_slave_0: entered allmulticast mode [ 1428.447976][T17145] bridge_slave_0: entered promiscuous mode [ 1428.591978][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.603144][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.615159][T17145] bridge_slave_1: entered allmulticast mode [ 1428.624191][T17145] bridge_slave_1: entered promiscuous mode [ 1429.368825][ T4942] Bluetooth: hci5: command tx timeout [ 1429.442325][T15441] bond10 (unregistering): (slave geneve4): Releasing active interface [ 1429.463161][T15441] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1429.525040][T15441] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 1429.533260][T15441] bridge2 (unregistering): left promiscuous mode [ 1429.553655][T15441] bond0 (unregistering): left promiscuous mode [ 1429.559857][T15441] veth0_to_bond: left promiscuous mode [ 1429.572753][T15441] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1429.612057][T15441] bond0 (unregistering): Released all slaves [ 1429.629747][T15441] bond1 (unregistering): Released all slaves [ 1429.654835][T15441] bond2 (unregistering): Released all slaves [ 1429.669830][T15441] bond3 (unregistering): Released all slaves [ 1429.684701][T15441] bond4 (unregistering): Released all slaves [ 1429.713866][T15441] bond5 (unregistering): Released all slaves [ 1429.728666][T15441] bond6 (unregistering): Released all slaves [ 1429.743561][T15441] bond7 (unregistering): Released all slaves [ 1429.759902][T15441] bond8 (unregistering): Released all slaves [ 1429.785730][T15441] bond9 (unregistering): Released all slaves [ 1429.829062][T15441] bond10 (unregistering): Released all slaves [ 1429.843877][T15441] bond11 (unregistering): Released all slaves [ 1429.858634][T15441] bond12 (unregistering): Released all slaves [ 1429.919685][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1429.943091][T17145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.955804][T17145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.997475][T17145] team0: Port device team_slave_0 added [ 1430.006886][T17145] team0: Port device team_slave_1 added [ 1430.273069][T17145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.301208][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.364012][T17145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.436313][T17145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.448833][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.483105][T17145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.498755][T15441] tipc: Disabling bearer [ 1430.504896][T15441] tipc: Left network mode [ 1430.916894][T17145] hsr_slave_0: entered promiscuous mode [ 1430.943613][T17145] hsr_slave_1: entered promiscuous mode [ 1430.975312][T17145] debugfs: 'hsr0' already exists in 'hsr' [ 1430.998414][T17145] Cannot create hsr debugfs directory [ 1431.521104][ T4942] Bluetooth: hci5: command tx timeout [ 1431.538028][T17324] syzkaller0: entered promiscuous mode [ 1431.554614][T17324] syzkaller0: entered allmulticast mode [ 1431.726241][T17330] syzkaller0: entered promiscuous mode [ 1431.754850][T17330] syzkaller0: entered allmulticast mode [ 1431.987280][T17340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1431.994616][T17340] IPv6: NLM_F_CREATE should be set when creating new route [ 1432.037609][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1432.320659][T17342] xfrm0 speed is unknown, defaulting to 1000 [ 1433.153490][T17342] lo speed is unknown, defaulting to 1000 [ 1433.522358][T17379] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12552'. [ 1433.608031][ T4942] Bluetooth: hci5: command tx timeout [ 1433.862059][T17342] virt_wifi0 speed is unknown, defaulting to 1000 [ 1434.408525][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12555'. [ 1434.668430][T17400] syzkaller0: entered promiscuous mode [ 1434.674345][T17400] syzkaller0: entered allmulticast mode [ 1440.201173][ T8763] smbdirect: ib_dev[syz0] removed [ 1440.584668][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12564'. [ 1441.017844][T17461] FAULT_INJECTION: forcing a failure. [ 1441.017844][T17461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.033376][T17461] CPU: 0 UID: 0 PID: 17461 Comm: syz.3.12568 Not tainted syzkaller #0 PREEMPT(full) [ 1441.033407][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1441.033421][T17461] Call Trace: [ 1441.033430][T17461] [ 1441.033440][T17461] dump_stack_lvl+0xe8/0x150 [ 1441.033487][T17461] should_fail_ex+0x40c/0x560 [ 1441.033524][T17461] _copy_from_user+0x2d/0xb0 [ 1441.033548][T17461] ___sys_sendmsg+0x1c6/0x360 [ 1441.033577][T17461] ? __lock_acquire+0x683/0x2cf0 [ 1441.033614][T17461] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.033677][T17461] ? __fget_files+0x2a/0x420 [ 1441.033709][T17461] ? __fget_files+0x3a2/0x420 [ 1441.033749][T17461] __x64_sys_sendmsg+0x1b1/0x290 [ 1441.033777][T17461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1441.033820][T17461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.033846][T17461] do_syscall_64+0x174/0x580 [ 1441.033876][T17461] ? trace_irq_disable+0x3b/0x140 [ 1441.033915][T17461] ? clear_bhb_loop+0x40/0x90 [ 1441.033941][T17461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.033963][T17461] RIP: 0033:0x7f3f5f59e019 [ 1441.033985][T17461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.034003][T17461] RSP: 002b:00007f3f6054c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.034027][T17461] RAX: ffffffffffffffda RBX: 00007f3f5f825fa0 RCX: 00007f3f5f59e019 [ 1441.034043][T17461] RDX: 0000000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1441.034060][T17461] RBP: 00007f3f6054c090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.034074][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.034086][T17461] R13: 00007f3f5f826038 R14: 00007f3f5f825fa0 R15: 00007ffc6cc49638 [ 1441.034119][T17461] [ 1441.856122][T17145] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1441.935639][T17145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1441.946433][T17145] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1442.004245][T17145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.064545][T17145] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1442.066758][T15441] IPVS: stop unused estimator thread 0... [ 1442.123630][T17145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.213608][T17476] syzkaller0: entered promiscuous mode [ 1442.231676][T17476] syzkaller0: entered allmulticast mode [ 1442.241751][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12575'. [ 1442.256061][T17145] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1442.289281][T17145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1446.656828][T17524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1446.699316][T17524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12580'. [ 1446.751793][T17145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.839766][T17145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.880360][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.887687][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.994033][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.001334][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.137689][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12586'. [ 1447.306118][T17551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12587'. [ 1447.502492][T17557] syzkaller0: entered promiscuous mode [ 1447.549184][T17557] syzkaller0: entered allmulticast mode [ 1447.762572][T17571] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12591'. [ 1448.255517][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12596'. [ 1453.201756][T17145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.283143][T17645] netlink: 'syz.1.12604': attribute type 5 has an invalid length. [ 1453.509606][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12608'. [ 1454.171284][T17145] veth0_vlan: entered promiscuous mode [ 1454.285519][T17145] veth1_vlan: entered promiscuous mode [ 1454.414247][T17145] veth0_macvtap: entered promiscuous mode [ 1454.443591][T17145] veth1_macvtap: entered promiscuous mode [ 1454.500260][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12622'. [ 1454.565872][T17145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1454.602047][T17145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.758329][ T7079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.780824][ T7079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.940003][T17702] syzkaller0: entered promiscuous mode [ 1454.957584][T17702] syzkaller0: entered allmulticast mode [ 1455.012532][ T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.035895][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.040710][T17723] FAULT_INJECTION: forcing a failure. [ 1455.040710][T17723] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.061602][T17723] CPU: 0 UID: 0 PID: 17723 Comm: syz.0.12629 Not tainted syzkaller #0 PREEMPT(full) [ 1455.061631][T17723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1455.061643][T17723] Call Trace: [ 1455.061651][T17723] [ 1455.061660][T17723] dump_stack_lvl+0xe8/0x150 [ 1455.061695][T17723] should_fail_ex+0x40c/0x560 [ 1455.061749][T17723] should_failslab+0xa8/0x100 [ 1455.061781][T17723] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1455.061808][T17723] ? skb_clone+0x212/0x3a0 [ 1455.061832][T17723] ? skb_clone+0x212/0x3a0 [ 1455.061861][T17723] skb_clone+0x212/0x3a0 [ 1455.061889][T17723] __netlink_deliver_tap+0x413/0x860 [ 1455.061986][T17723] ? netlink_deliver_tap+0x2e/0x1b0 [ 1455.062014][T17723] netlink_deliver_tap+0x19c/0x1b0 [ 1455.062042][T17723] netlink_unicast+0x77f/0x940 [ 1455.062076][T17723] netlink_sendmsg+0x813/0xb40 [ 1455.062113][T17723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.062144][T17723] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1455.062180][T17723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.062202][T17723] sock_sendmsg_nosec+0x13a/0x180 [ 1455.062237][T17723] ____sys_sendmsg+0x54e/0x850 [ 1455.062269][T17723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1455.062312][T17723] ? import_iovec+0x73/0xa0 [ 1455.062358][T17723] ___sys_sendmsg+0x2a5/0x360 [ 1455.062382][T17723] ? __lock_acquire+0x683/0x2cf0 [ 1455.062417][T17723] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.062477][T17723] ? __fget_files+0x2a/0x420 [ 1455.062504][T17723] ? __fget_files+0x3a2/0x420 [ 1455.062542][T17723] __x64_sys_sendmsg+0x1b1/0x290 [ 1455.062569][T17723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1455.062616][T17723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.062643][T17723] do_syscall_64+0x174/0x580 [ 1455.062668][T17723] ? trace_irq_disable+0x3b/0x140 [ 1455.062696][T17723] ? clear_bhb_loop+0x40/0x90 [ 1455.062724][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.062744][T17723] RIP: 0033:0x7ff6a1b9e019 [ 1455.062766][T17723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.062784][T17723] RSP: 002b:00007ff6a2aad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.062807][T17723] RAX: ffffffffffffffda RBX: 00007ff6a1e25fa0 RCX: 00007ff6a1b9e019 [ 1455.062823][T17723] RDX: 0000000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1455.062837][T17723] RBP: 00007ff6a2aad090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.062851][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.062864][T17723] R13: 00007ff6a1e26038 R14: 00007ff6a1e25fa0 R15: 00007ffc67d82648 [ 1455.062900][T17723] [ 1456.230991][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12634'. [ 1459.088629][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1459.966947][T15441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.995966][T15441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.102985][T15442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.145267][T15442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.363416][T17777] netlink: 332 bytes leftover after parsing attributes in process `syz.0.12640'. [ 1460.408796][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12484'. [ 1460.438359][T17781] openvswitch: netlink: Message has 8 unknown bytes. [ 1460.953621][T17796] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1460.984387][T17794] syzkaller0: entered promiscuous mode [ 1460.993578][T17794] syzkaller0: entered allmulticast mode [ 1461.402116][T17813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1461.438716][T17813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1461.450368][T17813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1461.485674][T17813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1461.494083][T17813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1461.880464][T17822] FAULT_INJECTION: forcing a failure. [ 1461.880464][T17822] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.896902][T17822] CPU: 0 UID: 0 PID: 17822 Comm: syz.3.12655 Not tainted syzkaller #0 PREEMPT(full) [ 1461.896930][T17822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1461.896942][T17822] Call Trace: [ 1461.896950][T17822] [ 1461.896960][T17822] dump_stack_lvl+0xe8/0x150 [ 1461.896996][T17822] should_fail_ex+0x40c/0x560 [ 1461.897027][T17822] should_failslab+0xa8/0x100 [ 1461.897061][T17822] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1461.897086][T17822] ? skb_clone+0x212/0x3a0 [ 1461.897107][T17822] ? skb_clone+0x212/0x3a0 [ 1461.897136][T17822] skb_clone+0x212/0x3a0 [ 1461.897162][T17822] __netlink_deliver_tap+0x413/0x860 [ 1461.897199][T17822] ? netlink_deliver_tap+0x2e/0x1b0 [ 1461.897223][T17822] netlink_deliver_tap+0x19c/0x1b0 [ 1461.897246][T17822] netlink_unicast+0x77f/0x940 [ 1461.897278][T17822] netlink_sendmsg+0x813/0xb40 [ 1461.897311][T17822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.897338][T17822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1461.897366][T17822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1461.897386][T17822] sock_sendmsg_nosec+0x13a/0x180 [ 1461.897416][T17822] ____sys_sendmsg+0x54e/0x850 [ 1461.897444][T17822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1461.897476][T17822] ? import_iovec+0x73/0xa0 [ 1461.897500][T17822] ___sys_sendmsg+0x2a5/0x360 [ 1461.897519][T17822] ? __lock_acquire+0x683/0x2cf0 [ 1461.897550][T17822] ? __pfx____sys_sendmsg+0x10/0x10 [ 1461.897612][T17822] ? __fget_files+0x2a/0x420 [ 1461.897636][T17822] ? __fget_files+0x3a2/0x420 [ 1461.897681][T17822] __x64_sys_sendmsg+0x1b1/0x290 [ 1461.897706][T17822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1461.897749][T17822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.897770][T17822] do_syscall_64+0x174/0x580 [ 1461.897792][T17822] ? trace_irq_disable+0x3b/0x140 [ 1461.897816][T17822] ? clear_bhb_loop+0x40/0x90 [ 1461.897850][T17822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.897870][T17822] RIP: 0033:0x7f3f5f59e019 [ 1461.897890][T17822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.897906][T17822] RSP: 002b:00007f3f6054c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1461.897928][T17822] RAX: ffffffffffffffda RBX: 00007f3f5f825fa0 RCX: 00007f3f5f59e019 [ 1461.897942][T17822] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1461.897954][T17822] RBP: 00007f3f6054c090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.897966][T17822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.897977][T17822] R13: 00007f3f5f826038 R14: 00007f3f5f825fa0 R15: 00007ffc6cc49638 [ 1461.898011][T17822] [ 1463.581190][ T4942] Bluetooth: hci3: command tx timeout [ 1465.648914][ T4942] Bluetooth: hci3: command tx timeout [ 1465.851447][T17796] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1465.863690][T17807] netlink: 'syz.0.12652': attribute type 5 has an invalid length. [ 1466.782693][T17810] xfrm0 speed is unknown, defaulting to 1000 [ 1466.865181][T17859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12665'. [ 1467.136581][T17861] syzkaller0: entered promiscuous mode [ 1467.156098][T17861] syzkaller0: entered allmulticast mode [ 1467.388825][T17881] FAULT_INJECTION: forcing a failure. [ 1467.388825][T17881] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.419738][T17881] CPU: 1 UID: 0 PID: 17881 Comm: syz.3.12669 Not tainted syzkaller #0 PREEMPT(full) [ 1467.419767][T17881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1467.419779][T17881] Call Trace: [ 1467.419789][T17881] [ 1467.419798][T17881] dump_stack_lvl+0xe8/0x150 [ 1467.419837][T17881] should_fail_ex+0x40c/0x560 [ 1467.419871][T17881] should_failslab+0xa8/0x100 [ 1467.419905][T17881] __kmalloc_cache_noprof+0xa8/0x660 [ 1467.419930][T17881] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1467.420056][T17881] ? sctp_add_bind_addr+0x8c/0x370 [ 1467.420112][T17881] ? sctp_add_bind_addr+0x8c/0x370 [ 1467.420141][T17881] sctp_add_bind_addr+0x8c/0x370 [ 1467.420175][T17881] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1467.420200][T17881] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1467.420222][T17881] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1467.420246][T17881] ? sctp_v6_is_any+0x64/0x80 [ 1467.420292][T17881] ? sctp_copy_one_addr+0x93/0x360 [ 1467.420318][T17881] sctp_bind_addr_copy+0xb3/0x3c0 [ 1467.420341][T17881] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1467.420377][T17881] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1467.420408][T17881] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1467.420441][T17881] ? __local_bh_enable_ip+0xd0/0x130 [ 1467.420482][T17881] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1467.420507][T17881] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1467.420543][T17881] sctp_sendmsg+0x159b/0x2d00 [ 1467.420585][T17881] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1467.420616][T17881] ? aa_sk_perm+0x6d5/0x900 [ 1467.420643][T17881] ? __might_fault+0xaf/0x130 [ 1467.420671][T17881] ? sock_rps_record_flow+0x19/0x350 [ 1467.420746][T17881] ? inet_sendmsg+0x298/0x320 [ 1467.420770][T17881] ? __pfx_inet_sendmsg+0x10/0x10 [ 1467.420798][T17881] sock_sendmsg_nosec+0x10e/0x180 [ 1467.420831][T17881] ____sys_sendmsg+0x54e/0x850 [ 1467.420861][T17881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1467.420897][T17881] ? import_iovec+0x73/0xa0 [ 1467.420922][T17881] ___sys_sendmsg+0x2a5/0x360 [ 1467.420944][T17881] ? __lock_acquire+0x683/0x2cf0 [ 1467.420979][T17881] ? __pfx____sys_sendmsg+0x10/0x10 [ 1467.421045][T17881] ? __fget_files+0x2a/0x420 [ 1467.421073][T17881] ? __fget_files+0x3a2/0x420 [ 1467.421128][T17881] __x64_sys_sendmsg+0x1b1/0x290 [ 1467.421157][T17881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1467.421211][T17881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.421234][T17881] do_syscall_64+0x174/0x580 [ 1467.421258][T17881] ? trace_irq_disable+0x3b/0x140 [ 1467.421286][T17881] ? clear_bhb_loop+0x40/0x90 [ 1467.421312][T17881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.421333][T17881] RIP: 0033:0x7f3f5f59e019 [ 1467.421355][T17881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.421372][T17881] RSP: 002b:00007f3f6054c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1467.421395][T17881] RAX: ffffffffffffffda RBX: 00007f3f5f825fa0 RCX: 00007f3f5f59e019 [ 1467.421410][T17881] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1467.421424][T17881] RBP: 00007f3f6054c090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.421437][T17881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.421450][T17881] R13: 00007f3f5f826038 R14: 00007f3f5f825fa0 R15: 00007ffc6cc49638 [ 1467.421485][T17881] [ 1467.776835][ T4942] Bluetooth: hci3: command tx timeout [ 1469.818923][ T4942] Bluetooth: hci3: command tx timeout [ 1471.414933][ T4942] Bluetooth: hci4: command 0x0406 tx timeout [ 1471.999928][T17810] lo speed is unknown, defaulting to 1000 [ 1472.702900][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12680'. [ 1473.091877][T17941] syzkaller0: entered promiscuous mode [ 1473.099011][T17941] syzkaller0: entered allmulticast mode [ 1473.469012][T17959] netlink: 'syz.4.12690': attribute type 16 has an invalid length. [ 1473.491780][T17959] netlink: 'syz.4.12690': attribute type 2 has an invalid length. [ 1473.507222][T17959] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.12690'. [ 1473.526817][T17960] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1477.524629][T17955] xfrm0 speed is unknown, defaulting to 1000 [ 1478.014528][T17810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.021979][T17810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.029851][T17810] bridge_slave_0: entered allmulticast mode [ 1478.040135][T17810] bridge_slave_0: entered promiscuous mode [ 1478.050363][T17810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.058402][T17810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.065874][T17810] bridge_slave_1: entered allmulticast mode [ 1478.088230][T17810] bridge_slave_1: entered promiscuous mode [ 1478.243965][T17955] lo speed is unknown, defaulting to 1000 [ 1478.256747][T17810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.285048][T17810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.419020][T17810] team0: Port device team_slave_0 added [ 1478.441339][T17810] team0: Port device team_slave_1 added [ 1478.557879][T17810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.565050][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.621358][T17810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.669654][T17810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.697810][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.740527][T17810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.915870][T18009] netlink: 'syz.0.12705': attribute type 29 has an invalid length. [ 1478.925907][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12705'. [ 1478.997371][T18007] syzkaller0: entered promiscuous mode [ 1479.003844][T18007] syzkaller0: entered allmulticast mode [ 1479.020471][T17810] hsr_slave_0: entered promiscuous mode [ 1479.028170][T17810] hsr_slave_1: entered promiscuous mode [ 1479.034715][T17810] debugfs: 'hsr0' already exists in 'hsr' [ 1479.040654][T17810] Cannot create hsr debugfs directory [ 1479.131617][T18016] netlink: 'syz.3.12708': attribute type 1 has an invalid length. [ 1482.992944][T18016] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1483.164833][T18024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12710'. [ 1483.190924][T18018] veth3: entered promiscuous mode [ 1485.067657][T18079] FAULT_INJECTION: forcing a failure. [ 1485.067657][T18079] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.082219][T18079] CPU: 0 UID: 0 PID: 18079 Comm: syz.1.12726 Not tainted syzkaller #0 PREEMPT(full) [ 1485.082245][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1485.082256][T18079] Call Trace: [ 1485.082264][T18079] [ 1485.082272][T18079] dump_stack_lvl+0xe8/0x150 [ 1485.082316][T18079] should_fail_ex+0x40c/0x560 [ 1485.082346][T18079] should_failslab+0xa8/0x100 [ 1485.082374][T18079] __kmalloc_cache_noprof+0xa8/0x660 [ 1485.082397][T18079] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1485.082416][T18079] ? __kmalloc_cache_noprof+0x150/0x660 [ 1485.082437][T18079] ? sctp_add_bind_addr+0x8c/0x370 [ 1485.082452][T18079] ? sctp_add_bind_addr+0x8c/0x370 [ 1485.082479][T18079] sctp_add_bind_addr+0x8c/0x370 [ 1485.082501][T18079] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1485.082521][T18079] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1485.082540][T18079] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1485.082558][T18079] ? sctp_v6_is_any+0x64/0x80 [ 1485.082578][T18079] ? sctp_copy_one_addr+0x93/0x360 [ 1485.082599][T18079] sctp_bind_addr_copy+0xb3/0x3c0 [ 1485.082618][T18079] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1485.082650][T18079] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1485.082679][T18079] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1485.082712][T18079] ? __local_bh_enable_ip+0xd0/0x130 [ 1485.082736][T18079] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1485.082759][T18079] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1485.082791][T18079] sctp_sendmsg+0x159b/0x2d00 [ 1485.082832][T18079] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1485.082862][T18079] ? aa_sk_perm+0x6d5/0x900 [ 1485.082887][T18079] ? __might_fault+0xaf/0x130 [ 1485.082913][T18079] ? sock_rps_record_flow+0x19/0x350 [ 1485.082937][T18079] ? inet_sendmsg+0x298/0x320 [ 1485.082959][T18079] ? __pfx_inet_sendmsg+0x10/0x10 [ 1485.082977][T18079] sock_sendmsg_nosec+0x10e/0x180 [ 1485.083008][T18079] ____sys_sendmsg+0x54e/0x850 [ 1485.083039][T18079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1485.083073][T18079] ? import_iovec+0x73/0xa0 [ 1485.083098][T18079] ___sys_sendmsg+0x2a5/0x360 [ 1485.083120][T18079] ? __lock_acquire+0x683/0x2cf0 [ 1485.083153][T18079] ? __pfx____sys_sendmsg+0x10/0x10 [ 1485.083216][T18079] ? __fget_files+0x2a/0x420 [ 1485.083242][T18079] ? __fget_files+0x3a2/0x420 [ 1485.083282][T18079] __x64_sys_sendmsg+0x1b1/0x290 [ 1485.083319][T18079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1485.083363][T18079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.083385][T18079] do_syscall_64+0x174/0x580 [ 1485.083408][T18079] ? trace_irq_disable+0x3b/0x140 [ 1485.083433][T18079] ? clear_bhb_loop+0x40/0x90 [ 1485.083458][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.083478][T18079] RIP: 0033:0x7f3c1199e019 [ 1485.083499][T18079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.083516][T18079] RSP: 002b:00007f3c127f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1485.083540][T18079] RAX: ffffffffffffffda RBX: 00007f3c11c25fa0 RCX: 00007f3c1199e019 [ 1485.083556][T18079] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1485.083569][T18079] RBP: 00007f3c127f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.083581][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1485.083592][T18079] R13: 00007f3c11c26038 R14: 00007f3c11c25fa0 R15: 00007ffda063c508 [ 1485.083626][T18079] [ 1485.889899][T18090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12731'. [ 1486.002001][T17810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1486.033344][T17810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1486.062474][T17810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1486.117613][T17810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1486.146992][T17810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1486.182954][T17810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1486.210217][T17810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1486.234323][T17810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1486.447891][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12737'. [ 1486.534197][T17810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.701520][T17810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.762502][T18130] FAULT_INJECTION: forcing a failure. [ 1486.762502][T18130] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.775426][T17813] Bluetooth: hci1: command 0x0406 tx timeout [ 1486.798801][T18130] CPU: 1 UID: 0 PID: 18130 Comm: syz.4.12741 Not tainted syzkaller #0 PREEMPT(full) [ 1486.798831][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1486.798843][T18130] Call Trace: [ 1486.798852][T18130] [ 1486.798862][T18130] dump_stack_lvl+0xe8/0x150 [ 1486.798901][T18130] should_fail_ex+0x40c/0x560 [ 1486.798934][T18130] should_failslab+0xa8/0x100 [ 1486.798968][T18130] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1486.798995][T18130] ? skb_clone+0x212/0x3a0 [ 1486.799019][T18130] ? skb_clone+0x212/0x3a0 [ 1486.799052][T18130] skb_clone+0x212/0x3a0 [ 1486.799079][T18130] __netlink_deliver_tap+0x413/0x860 [ 1486.799117][T18130] ? netlink_deliver_tap+0x2e/0x1b0 [ 1486.799143][T18130] netlink_deliver_tap+0x19c/0x1b0 [ 1486.799170][T18130] netlink_unicast+0x77f/0x940 [ 1486.799203][T18130] netlink_sendmsg+0x813/0xb40 [ 1486.799240][T18130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1486.799270][T18130] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1486.799302][T18130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1486.799326][T18130] sock_sendmsg_nosec+0x13a/0x180 [ 1486.799360][T18130] ____sys_sendmsg+0x54e/0x850 [ 1486.799390][T18130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1486.799425][T18130] ? import_iovec+0x73/0xa0 [ 1486.799451][T18130] ___sys_sendmsg+0x2a5/0x360 [ 1486.799473][T18130] ? __lock_acquire+0x683/0x2cf0 [ 1486.799508][T18130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1486.799572][T18130] ? __fget_files+0x2a/0x420 [ 1486.799601][T18130] ? __fget_files+0x3a2/0x420 [ 1486.799641][T18130] __x64_sys_sendmsg+0x1b1/0x290 [ 1486.799668][T18130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1486.799722][T18130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.799747][T18130] do_syscall_64+0x174/0x580 [ 1486.799773][T18130] ? trace_irq_disable+0x3b/0x140 [ 1486.799800][T18130] ? clear_bhb_loop+0x40/0x90 [ 1486.799827][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.799848][T18130] RIP: 0033:0x7f079df9e019 [ 1486.799869][T18130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.799888][T18130] RSP: 002b:00007f079ef2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1486.799912][T18130] RAX: ffffffffffffffda RBX: 00007f079e225fa0 RCX: 00007f079df9e019 [ 1486.799927][T18130] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1486.799941][T18130] RBP: 00007f079ef2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.799954][T18130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.799966][T18130] R13: 00007f079e226038 R14: 00007f079e225fa0 R15: 00007fff9b01a5a8 [ 1486.800002][T18130] [ 1486.800050][T18130] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12741'. [ 1486.950871][T18140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12744'. [ 1487.123581][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.130955][ T7081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.214639][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.221901][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.656224][T18158] syzkaller0: entered promiscuous mode [ 1487.688649][T18158] syzkaller0: entered allmulticast mode [ 1488.141437][T18171] v: renamed from dummy0 (while UP) [ 1488.230759][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12754'. [ 1488.560699][T18189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12757'. [ 1488.755643][T17810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.904702][T17810] veth0_vlan: entered promiscuous mode [ 1488.995686][T18208] syzkaller0: entered promiscuous mode [ 1489.003823][T18208] syzkaller0: entered allmulticast mode [ 1489.028751][T17810] veth1_vlan: entered promiscuous mode [ 1489.224114][T18218] netlink: 'syz.3.12765': attribute type 1 has an invalid length. [ 1489.269827][T17810] veth0_macvtap: entered promiscuous mode [ 1489.361110][T18231] FAULT_INJECTION: forcing a failure. [ 1489.361110][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.377833][T18231] CPU: 1 UID: 0 PID: 18231 Comm: syz.1.12767 Not tainted syzkaller #0 PREEMPT(full) [ 1489.377864][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1489.377877][T18231] Call Trace: [ 1489.377886][T18231] [ 1489.377896][T18231] dump_stack_lvl+0xe8/0x150 [ 1489.377934][T18231] should_fail_ex+0x40c/0x560 [ 1489.377968][T18231] should_failslab+0xa8/0x100 [ 1489.378002][T18231] __kmalloc_cache_noprof+0xa8/0x660 [ 1489.378028][T18231] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1489.378051][T18231] ? __kmalloc_cache_noprof+0x150/0x660 [ 1489.378077][T18231] ? sctp_add_bind_addr+0x8c/0x370 [ 1489.378097][T18231] ? sctp_add_bind_addr+0x8c/0x370 [ 1489.378125][T18231] sctp_add_bind_addr+0x8c/0x370 [ 1489.378152][T18231] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1489.378175][T18231] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1489.378198][T18231] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1489.378223][T18231] ? sctp_v6_is_any+0x64/0x80 [ 1489.378248][T18231] ? sctp_copy_one_addr+0x93/0x360 [ 1489.378273][T18231] sctp_bind_addr_copy+0xb3/0x3c0 [ 1489.378297][T18231] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1489.378337][T18231] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1489.378367][T18231] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1489.378402][T18231] ? __local_bh_enable_ip+0xd0/0x130 [ 1489.378426][T18231] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1489.378451][T18231] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1489.378486][T18231] sctp_sendmsg+0x159b/0x2d00 [ 1489.378530][T18231] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1489.378564][T18231] ? aa_sk_perm+0x6d5/0x900 [ 1489.378594][T18231] ? __might_fault+0xaf/0x130 [ 1489.378624][T18231] ? sock_rps_record_flow+0x19/0x350 [ 1489.378651][T18231] ? inet_sendmsg+0x298/0x320 [ 1489.378675][T18231] ? __pfx_inet_sendmsg+0x10/0x10 [ 1489.378694][T18231] sock_sendmsg_nosec+0x10e/0x180 [ 1489.378728][T18231] ____sys_sendmsg+0x54e/0x850 [ 1489.378768][T18231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.378804][T18231] ? import_iovec+0x73/0xa0 [ 1489.378829][T18231] ___sys_sendmsg+0x2a5/0x360 [ 1489.378852][T18231] ? __lock_acquire+0x683/0x2cf0 [ 1489.378886][T18231] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.378952][T18231] ? __fget_files+0x2a/0x420 [ 1489.378981][T18231] ? __fget_files+0x3a2/0x420 [ 1489.379022][T18231] __x64_sys_sendmsg+0x1b1/0x290 [ 1489.379050][T18231] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1489.379097][T18231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.379121][T18231] do_syscall_64+0x174/0x580 [ 1489.379146][T18231] ? trace_irq_disable+0x3b/0x140 [ 1489.379174][T18231] ? clear_bhb_loop+0x40/0x90 [ 1489.379199][T18231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.379220][T18231] RIP: 0033:0x7f3c1199e019 [ 1489.379241][T18231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.379258][T18231] RSP: 002b:00007f3c127f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.379282][T18231] RAX: ffffffffffffffda RBX: 00007f3c11c25fa0 RCX: 00007f3c1199e019 [ 1489.379298][T18231] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1489.379311][T18231] RBP: 00007f3c127f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.379325][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.379337][T18231] R13: 00007f3c11c26038 R14: 00007f3c11c25fa0 R15: 00007ffda063c508 [ 1489.379373][T18231] [ 1489.748468][T17810] veth1_macvtap: entered promiscuous mode [ 1489.772407][T18218] netlink: 'syz.3.12765': attribute type 10 has an invalid length. [ 1489.786936][T17810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.821916][T18218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.851039][T18218] bond0: (slave team0): Enslaving as an active interface with an up link [ 1489.878207][T17810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.926905][T18218] bond1: (slave veth0_to_bond): making interface the new active one [ 1489.945108][T18218] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1489.980084][T18238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12769'. [ 1490.057808][ T7081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.112865][T18220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1490.140440][ T7081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.452371][ T8763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.469821][ T8763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.621298][T18255] syzkaller0: entered promiscuous mode [ 1490.628319][T18255] syzkaller0: entered allmulticast mode [ 1490.635660][T18260] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12778'. [ 1490.674418][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.693754][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.857215][ T8763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.891257][ T8763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.171976][T18277] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12785'. [ 1491.422736][T18297] syzkaller0: entered promiscuous mode [ 1491.447010][T18297] syzkaller0: entered allmulticast mode [ 1491.515023][T18300] syzkaller0: entered promiscuous mode [ 1491.522757][T18300] syzkaller0: entered allmulticast mode [ 1491.791698][T18310] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 1491.825517][T18314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1491.857854][T18274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1492.308198][T18333] syzkaller0: entered promiscuous mode [ 1492.318154][T18333] syzkaller0: entered allmulticast mode [ 1492.358444][T18326] syzkaller0: entered promiscuous mode [ 1492.385875][T18326] syzkaller0: entered allmulticast mode [ 1492.789090][T18352] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12809'. [ 1493.607561][T18380] syzkaller0: entered promiscuous mode [ 1493.621523][T18380] syzkaller0: entered allmulticast mode [ 1494.010076][T18392] tipc: Enabled bearer , priority 0 [ 1494.023830][T18392] syzkaller0: entered promiscuous mode [ 1494.038122][T18392] syzkaller0: entered allmulticast mode [ 1494.072667][T18392] tipc: Resetting bearer [ 1494.205429][T18390] tipc: Resetting bearer [ 1494.271573][T18390] tipc: Disabling bearer [ 1494.683643][T18416] netlink: 'syz.0.12830': attribute type 16 has an invalid length. [ 1494.692274][T18416] netlink: 'syz.0.12830': attribute type 3 has an invalid length. [ 1494.700620][T18416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12830'. [ 1495.182103][T18403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1495.441238][T18423] syzkaller0: entered promiscuous mode [ 1495.456258][T18423] syzkaller0: entered allmulticast mode [ 1497.041752][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12850'. [ 1497.066216][T18447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1497.428335][T18472] x_tables: unsorted underflow at hook 4 [ 1497.620219][T18482] syzkaller0: entered promiscuous mode [ 1497.658560][T18482] syzkaller0: entered allmulticast mode [ 1497.776267][T18490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12858'. [ 1497.797445][T18490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12858'. [ 1498.462665][T18507] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.12863'. [ 1498.521432][T18507] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.12863'. [ 1498.715967][T18514] FAULT_INJECTION: forcing a failure. [ 1498.715967][T18514] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.730412][T18514] CPU: 0 UID: 0 PID: 18514 Comm: syz.2.12866 Not tainted syzkaller #0 PREEMPT(full) [ 1498.730440][T18514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1498.730451][T18514] Call Trace: [ 1498.730459][T18514] [ 1498.730468][T18514] dump_stack_lvl+0xe8/0x150 [ 1498.730509][T18514] should_fail_ex+0x40c/0x560 [ 1498.730546][T18514] should_failslab+0xa8/0x100 [ 1498.730581][T18514] __kmalloc_cache_noprof+0xa8/0x660 [ 1498.730610][T18514] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1498.730637][T18514] ? __kmalloc_cache_noprof+0x150/0x660 [ 1498.730664][T18514] ? sctp_add_bind_addr+0x8c/0x370 [ 1498.730685][T18514] ? sctp_add_bind_addr+0x8c/0x370 [ 1498.730727][T18514] sctp_add_bind_addr+0x8c/0x370 [ 1498.730761][T18514] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1498.730788][T18514] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1498.730812][T18514] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1498.730879][T18514] ? sctp_v6_is_any+0x64/0x80 [ 1498.730912][T18514] ? sctp_copy_one_addr+0x93/0x360 [ 1498.730949][T18514] sctp_bind_addr_copy+0xb3/0x3c0 [ 1498.730982][T18514] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1498.731033][T18514] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1498.731065][T18514] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1498.731117][T18514] ? __local_bh_enable_ip+0xd0/0x130 [ 1498.731162][T18514] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1498.731195][T18514] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1498.731262][T18514] sctp_sendmsg+0x159b/0x2d00 [ 1498.731309][T18514] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1498.731351][T18514] ? aa_sk_perm+0x6d5/0x900 [ 1498.731383][T18514] ? __might_fault+0xaf/0x130 [ 1498.731413][T18514] ? sock_rps_record_flow+0x19/0x350 [ 1498.731449][T18514] ? inet_sendmsg+0x298/0x320 [ 1498.731474][T18514] ? __pfx_inet_sendmsg+0x10/0x10 [ 1498.731495][T18514] sock_sendmsg_nosec+0x10e/0x180 [ 1498.731531][T18514] ____sys_sendmsg+0x54e/0x850 [ 1498.731563][T18514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1498.731600][T18514] ? import_iovec+0x73/0xa0 [ 1498.731640][T18514] ___sys_sendmsg+0x2a5/0x360 [ 1498.731664][T18514] ? __lock_acquire+0x683/0x2cf0 [ 1498.731701][T18514] ? __pfx____sys_sendmsg+0x10/0x10 [ 1498.731769][T18514] ? __fget_files+0x2a/0x420 [ 1498.731799][T18514] ? __fget_files+0x3a2/0x420 [ 1498.731841][T18514] __x64_sys_sendmsg+0x1b1/0x290 [ 1498.731870][T18514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1498.731915][T18514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.731941][T18514] do_syscall_64+0x174/0x580 [ 1498.731969][T18514] ? trace_irq_disable+0x3b/0x140 [ 1498.731998][T18514] ? clear_bhb_loop+0x40/0x90 [ 1498.732025][T18514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.732047][T18514] RIP: 0033:0x7f2ed2d9e019 [ 1498.732069][T18514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.732088][T18514] RSP: 002b:00007f2ed3c7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1498.732112][T18514] RAX: ffffffffffffffda RBX: 00007f2ed3025fa0 RCX: 00007f2ed2d9e019 [ 1498.732128][T18514] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1498.732142][T18514] RBP: 00007f2ed3c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.732156][T18514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1498.732169][T18514] R13: 00007f2ed3026038 R14: 00007f2ed3025fa0 R15: 00007ffcf9c384e8 [ 1498.732205][T18514] [ 1499.584585][T18530] syzkaller0: entered promiscuous mode [ 1499.604578][T18530] syzkaller0: entered allmulticast mode [ 1499.690822][T18543] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12876'. [ 1499.978067][T18557] FAULT_INJECTION: forcing a failure. [ 1499.978067][T18557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.019182][T18557] CPU: 0 UID: 0 PID: 18557 Comm: syz.4.12880 Not tainted syzkaller #0 PREEMPT(full) [ 1500.019213][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1500.019227][T18557] Call Trace: [ 1500.019235][T18557] [ 1500.019245][T18557] dump_stack_lvl+0xe8/0x150 [ 1500.019284][T18557] should_fail_ex+0x40c/0x560 [ 1500.019316][T18557] _copy_from_user+0x2d/0xb0 [ 1500.019340][T18557] do_ipv6_setsockopt+0x249/0x3180 [ 1500.019482][T18557] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1500.019505][T18557] ? aa_label_sk_perm+0x532/0x6e0 [ 1500.019524][T18557] ? get_pid_task+0x20/0x1f0 [ 1500.019589][T18557] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1500.019611][T18557] ? get_pid_task+0x20/0x1f0 [ 1500.019639][T18557] ? get_pid_task+0x20/0x1f0 [ 1500.019665][T18557] ? get_pid_task+0x20/0x1f0 [ 1500.019705][T18557] ? __lock_acquire+0x683/0x2cf0 [ 1500.019752][T18557] ? aa_sk_perm+0x6d5/0x900 [ 1500.019778][T18557] ipv6_setsockopt+0x59/0x170 [ 1500.019803][T18557] rawv6_setsockopt+0x276/0x5e0 [ 1500.019853][T18557] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1500.019871][T18557] ? aa_sock_opt_perm+0xff/0x1a0 [ 1500.019896][T18557] ? sock_common_setsockopt+0x36/0xc0 [ 1500.019927][T18557] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1500.019961][T18557] do_sock_setsockopt+0x17c/0x1b0 [ 1500.019991][T18557] __x64_sys_setsockopt+0x13d/0x1b0 [ 1500.020018][T18557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.020041][T18557] do_syscall_64+0x174/0x580 [ 1500.020066][T18557] ? trace_irq_disable+0x3b/0x140 [ 1500.020093][T18557] ? clear_bhb_loop+0x40/0x90 [ 1500.020119][T18557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.020141][T18557] RIP: 0033:0x7f079df9e019 [ 1500.020163][T18557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.020179][T18557] RSP: 002b:00007f079ef2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1500.020202][T18557] RAX: ffffffffffffffda RBX: 00007f079e225fa0 RCX: 00007f079df9e019 [ 1500.020217][T18557] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 1500.020228][T18557] RBP: 00007f079ef2d090 R08: 0000000000000004 R09: 0000000000000000 [ 1500.020240][T18557] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1500.020257][T18557] R13: 00007f079e226038 R14: 00007f079e225fa0 R15: 00007fff9b01a5a8 [ 1500.020289][T18557] [ 1500.136405][T18549] syzkaller0: entered promiscuous mode [ 1500.315043][T18549] syzkaller0: entered allmulticast mode [ 1500.620228][T18576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12886'. [ 1505.171870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1505.244788][T18609] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12894'. [ 1505.578287][T18625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12902'. [ 1505.661222][T18633] FAULT_INJECTION: forcing a failure. [ 1505.661222][T18633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.700432][T18633] CPU: 0 UID: 0 PID: 18633 Comm: syz.4.12906 Not tainted syzkaller #0 PREEMPT(full) [ 1505.700463][T18633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1505.700476][T18633] Call Trace: [ 1505.700484][T18633] [ 1505.700494][T18633] dump_stack_lvl+0xe8/0x150 [ 1505.700533][T18633] should_fail_ex+0x40c/0x560 [ 1505.700570][T18633] _copy_to_user+0x31/0xb0 [ 1505.700603][T18633] simple_read_from_buffer+0xe1/0x170 [ 1505.700640][T18633] proc_fail_nth_read+0x1bb/0x230 [ 1505.700674][T18633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1505.700708][T18633] ? rw_verify_area+0x24a/0x4c0 [ 1505.700727][T18633] ? tun_chr_write_iter+0x18a/0x200 [ 1505.700849][T18633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1505.700878][T18633] vfs_read+0x213/0xa80 [ 1505.700905][T18633] ? __pfx___mutex_lock+0x10/0x10 [ 1505.700934][T18633] ? __pfx_vfs_read+0x10/0x10 [ 1505.700957][T18633] ? __fget_files+0x2a/0x420 [ 1505.700990][T18633] ? __fget_files+0x3a2/0x420 [ 1505.701017][T18633] ? __fget_files+0x2a/0x420 [ 1505.701055][T18633] ksys_read+0x150/0x270 [ 1505.701079][T18633] ? __pfx_ksys_read+0x10/0x10 [ 1505.701109][T18633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.701132][T18633] do_syscall_64+0x174/0x580 [ 1505.701156][T18633] ? trace_irq_disable+0x3b/0x140 [ 1505.701184][T18633] ? clear_bhb_loop+0x40/0x90 [ 1505.701211][T18633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.701231][T18633] RIP: 0033:0x7f079df5e84e [ 1505.701253][T18633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1505.701270][T18633] RSP: 002b:00007f079ef2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1505.701294][T18633] RAX: ffffffffffffffda RBX: 00007f079ef2d6c0 RCX: 00007f079df5e84e [ 1505.701309][T18633] RDX: 000000000000000f RSI: 00007f079ef2d0a0 RDI: 0000000000000004 [ 1505.701323][T18633] RBP: 00007f079ef2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.701337][T18633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.701350][T18633] R13: 00007f079e226038 R14: 00007f079e225fa0 R15: 00007fff9b01a5a8 [ 1505.701386][T18633] [ 1505.706220][T18627] syzkaller0: entered promiscuous mode [ 1505.957198][T18627] syzkaller0: entered allmulticast mode [ 1510.476622][T18677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12917'. [ 1510.654807][T18679] nbd: must specify at least one socket [ 1511.125918][T18709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12930'. [ 1511.179483][T18712] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12931'. [ 1511.477597][T18724] netlink: 'syz.2.12937': attribute type 29 has an invalid length. [ 1511.486080][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12937'. [ 1511.513903][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12937'. [ 1511.535584][T18724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.714502][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12939'. [ 1511.756039][T18734] macvtap1: entered promiscuous mode [ 1511.767833][T18734] macvtap1: entered allmulticast mode [ 1511.773934][T18734] veth1_to_bridge: entered promiscuous mode [ 1511.783331][T18734] veth1_to_bridge: entered allmulticast mode [ 1511.800330][T18734] team0: Device macvtap1 failed to register rx_handler [ 1511.813565][T18734] veth1_to_bridge: left allmulticast mode [ 1511.820688][T18734] veth1_to_bridge: left promiscuous mode [ 1511.955307][T18747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12943'. [ 1512.103531][T18755] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12945'. [ 1512.125233][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12943'. [ 1512.433587][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12949'. [ 1512.569924][T18773] netlink: 'syz.3.12952': attribute type 1 has an invalid length. [ 1513.028329][T18794] netlink: 'syz.4.12960': attribute type 3 has an invalid length. [ 1513.069120][T18794] netlink: 'syz.4.12960': attribute type 3 has an invalid length. [ 1513.148581][ T24] IPVS: starting estimator thread 0... [ 1513.258518][T18804] IPVS: using max 30 ests per chain, 72000 per kthread [ 1513.533120][T18824] FAULT_INJECTION: forcing a failure. [ 1513.533120][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.579666][T18828] bridge_slave_0: left allmulticast mode [ 1513.595878][T18828] bridge_slave_0: left promiscuous mode [ 1513.603015][T18828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.603682][T18824] CPU: 1 UID: 0 PID: 18824 Comm: syz.0.12969 Not tainted syzkaller #0 PREEMPT(full) [ 1513.603707][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1513.603726][T18824] Call Trace: [ 1513.603735][T18824] [ 1513.603743][T18824] dump_stack_lvl+0xe8/0x150 [ 1513.603779][T18824] should_fail_ex+0x40c/0x560 [ 1513.603808][T18824] _copy_from_iter+0x1d3/0x1660 [ 1513.603833][T18824] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 1513.603859][T18824] ? rcu_is_watching+0x15/0xb0 [ 1513.603925][T18824] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1513.603952][T18824] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1513.603976][T18824] ? __pfx__copy_from_iter+0x10/0x10 [ 1513.604002][T18824] ? __alloc_skb+0x276/0x7a0 [ 1513.604021][T18824] ? __alloc_skb+0x276/0x7a0 [ 1513.604046][T18824] ? netlink_sendmsg+0x650/0xb40 [ 1513.604070][T18824] ? skb_put+0x112/0x210 [ 1513.604093][T18824] netlink_sendmsg+0x6c0/0xb40 [ 1513.604126][T18824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.604154][T18824] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1513.604182][T18824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.604204][T18824] sock_sendmsg_nosec+0x13a/0x180 [ 1513.604234][T18824] ____sys_sendmsg+0x54e/0x850 [ 1513.604262][T18824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1513.604294][T18824] ? import_iovec+0x73/0xa0 [ 1513.604317][T18824] ___sys_sendmsg+0x2a5/0x360 [ 1513.604338][T18824] ? __lock_acquire+0x683/0x2cf0 [ 1513.604368][T18824] ? __pfx____sys_sendmsg+0x10/0x10 [ 1513.604425][T18824] ? __fget_files+0x2a/0x420 [ 1513.604450][T18824] ? __fget_files+0x3a2/0x420 [ 1513.604485][T18824] __x64_sys_sendmsg+0x1b1/0x290 [ 1513.604511][T18824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1513.604552][T18824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.604574][T18824] do_syscall_64+0x174/0x580 [ 1513.604601][T18824] ? trace_irq_disable+0x3b/0x140 [ 1513.604626][T18824] ? clear_bhb_loop+0x40/0x90 [ 1513.604650][T18824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.604669][T18824] RIP: 0033:0x7ff6a1b9e019 [ 1513.604688][T18824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.604704][T18824] RSP: 002b:00007ff6a2a8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1513.604735][T18824] RAX: ffffffffffffffda RBX: 00007ff6a1e26090 RCX: 00007ff6a1b9e019 [ 1513.604749][T18824] RDX: 0000000020008090 RSI: 0000200000000540 RDI: 0000000000000004 [ 1513.604763][T18824] RBP: 00007ff6a2a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.604775][T18824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1513.604788][T18824] R13: 00007ff6a1e26128 R14: 00007ff6a1e26090 R15: 00007ffc67d82648 [ 1513.604820][T18824] [ 1513.943145][T18828] bridge_slave_1: left allmulticast mode [ 1513.965908][T18828] bridge_slave_1: left promiscuous mode [ 1513.989751][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.028476][T18828] bond0: (slave bond_slave_0): Releasing backup interface [ 1514.081011][T18828] bond0: (slave bond_slave_1): Releasing backup interface [ 1514.126896][T18828] team0: Port device team_slave_0 removed [ 1514.169844][T18828] team0: Port device team_slave_1 removed [ 1514.176912][T18828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.186440][T18828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.205427][T18828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.219998][T18828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.232066][T18828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1515.109145][T18894] netlink: 'syz.3.12986': attribute type 1 has an invalid length. [ 1515.505762][T18917] __nla_validate_parse: 17 callbacks suppressed [ 1515.505787][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12992'. [ 1515.600654][T18917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12992'. [ 1515.792878][T18925] netlink: 'syz.3.12994': attribute type 58 has an invalid length. [ 1515.807432][T18925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12994'. [ 1515.885482][T18930] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12995'. [ 1515.909267][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12995'. [ 1516.042109][T18941] FAULT_INJECTION: forcing a failure. [ 1516.042109][T18941] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.095671][T18941] CPU: 0 UID: 0 PID: 18941 Comm: syz.1.12997 Not tainted syzkaller #0 PREEMPT(full) [ 1516.095701][T18941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1516.095714][T18941] Call Trace: [ 1516.095722][T18941] [ 1516.095732][T18941] dump_stack_lvl+0xe8/0x150 [ 1516.095769][T18941] should_fail_ex+0x40c/0x560 [ 1516.095802][T18941] should_failslab+0xa8/0x100 [ 1516.095836][T18941] __kmalloc_noprof+0xfe/0x720 [ 1516.095865][T18941] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1516.095896][T18941] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1516.095935][T18941] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1516.095976][T18941] genl_family_rcv_msg_doit+0xda/0x340 [ 1516.096015][T18941] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1516.096055][T18941] ? apparmor_capable+0x126/0x170 [ 1516.096156][T18941] ? bpf_lsm_capable+0x9/0x20 [ 1516.096183][T18941] ? security_capable+0x7e/0x2c0 [ 1516.096213][T18941] genl_rcv_msg+0x614/0x7a0 [ 1516.096250][T18941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.096278][T18941] ? __pfx_ieee802154_llsec_setparams+0x10/0x10 [ 1516.096399][T18941] netlink_rcv_skb+0x226/0x4a0 [ 1516.096425][T18941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.096457][T18941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1516.096498][T18941] ? down_read+0x2be/0x330 [ 1516.096531][T18941] genl_rcv+0x28/0x40 [ 1516.096563][T18941] netlink_unicast+0x7bb/0x940 [ 1516.096598][T18941] netlink_sendmsg+0x813/0xb40 [ 1516.096635][T18941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.096664][T18941] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1516.096694][T18941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.096717][T18941] sock_sendmsg_nosec+0x13a/0x180 [ 1516.096749][T18941] ____sys_sendmsg+0x54e/0x850 [ 1516.096778][T18941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.096814][T18941] ? import_iovec+0x73/0xa0 [ 1516.096839][T18941] ___sys_sendmsg+0x2a5/0x360 [ 1516.096862][T18941] ? __lock_acquire+0x683/0x2cf0 [ 1516.096898][T18941] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.096962][T18941] ? __fget_files+0x2a/0x420 [ 1516.096990][T18941] ? __fget_files+0x3a2/0x420 [ 1516.097032][T18941] __x64_sys_sendmsg+0x1b1/0x290 [ 1516.097058][T18941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1516.097110][T18941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.097133][T18941] do_syscall_64+0x174/0x580 [ 1516.097155][T18941] ? trace_irq_disable+0x3b/0x140 [ 1516.097182][T18941] ? clear_bhb_loop+0x40/0x90 [ 1516.097208][T18941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.097229][T18941] RIP: 0033:0x7f3c1199e019 [ 1516.097249][T18941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.097267][T18941] RSP: 002b:00007f3c127b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.097291][T18941] RAX: ffffffffffffffda RBX: 00007f3c11c26180 RCX: 00007f3c1199e019 [ 1516.097307][T18941] RDX: 0000000020008090 RSI: 0000200000000540 RDI: 0000000000000004 [ 1516.097321][T18941] RBP: 00007f3c127b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.097332][T18941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.097345][T18941] R13: 00007f3c11c26218 R14: 00007f3c11c26180 R15: 00007ffda063c508 [ 1516.097383][T18941] [ 1516.814833][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13006'. [ 1516.838635][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13006'. [ 1517.699162][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13016'. [ 1517.785492][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13016'. [ 1517.948393][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13016'. [ 1518.237543][T19037] syzkaller0: entered promiscuous mode [ 1518.248579][T19037] syzkaller0: entered allmulticast mode [ 1522.557262][T19047] mac80211_hwsim hwsim144 syzkaller0: entered promiscuous mode [ 1522.564946][T19047] mac80211_hwsim hwsim144 syzkaller0: entered allmulticast mode [ 1522.775934][T19080] __nla_validate_parse: 2 callbacks suppressed [ 1522.775957][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13033'. [ 1522.819611][T19080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13033'. [ 1523.023327][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13034'. [ 1523.252236][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13034'. [ 1523.583854][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13034'. [ 1523.663539][T19115] syzkaller0: entered promiscuous mode [ 1523.686254][T19115] syzkaller0: entered allmulticast mode [ 1524.226785][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13046'. [ 1524.239360][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13046'. [ 1528.289578][T19159] netlink: 'syz.3.13053': attribute type 18 has an invalid length. [ 1528.305390][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13053'. [ 1528.316847][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1528.327399][T19159] netlink: 'syz.3.13053': attribute type 18 has an invalid length. [ 1528.333542][ T7081] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.340135][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13053'. [ 1528.353277][ T7081] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.360520][T19165] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13055'. [ 1528.374368][ T7081] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.385096][ T7081] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.500073][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1528.904719][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1528.929502][T19182] syzkaller0: entered promiscuous mode [ 1528.935203][T19182] syzkaller0: entered allmulticast mode [ 1529.234423][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13061'. [ 1529.260804][T19204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13061'. [ 1533.831190][T19238] FAULT_INJECTION: forcing a failure. [ 1533.831190][T19238] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.853184][T19238] CPU: 0 UID: 0 PID: 19238 Comm: syz.0.13067 Not tainted syzkaller #0 PREEMPT(full) [ 1533.853214][T19238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1533.853228][T19238] Call Trace: [ 1533.853237][T19238] [ 1533.853247][T19238] dump_stack_lvl+0xe8/0x150 [ 1533.853291][T19238] should_fail_ex+0x40c/0x560 [ 1533.853326][T19238] should_failslab+0xa8/0x100 [ 1533.853361][T19238] __kmalloc_cache_noprof+0xa8/0x660 [ 1533.853388][T19238] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1533.853413][T19238] ? __kmalloc_cache_noprof+0x150/0x660 [ 1533.853441][T19238] ? sctp_add_bind_addr+0x8c/0x370 [ 1533.853462][T19238] ? sctp_add_bind_addr+0x8c/0x370 [ 1533.853493][T19238] sctp_add_bind_addr+0x8c/0x370 [ 1533.853523][T19238] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1533.853559][T19238] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1533.853585][T19238] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1533.853612][T19238] ? sctp_v6_is_any+0x64/0x80 [ 1533.853639][T19238] ? sctp_copy_one_addr+0x93/0x360 [ 1533.853667][T19238] sctp_bind_addr_copy+0xb3/0x3c0 [ 1533.853692][T19238] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1533.853729][T19238] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1533.853761][T19238] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1533.853802][T19238] ? __local_bh_enable_ip+0xd0/0x130 [ 1533.853828][T19238] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1533.853854][T19238] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1533.853891][T19238] sctp_sendmsg+0x159b/0x2d00 [ 1533.853938][T19238] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1533.853965][T19238] ? irqentry_exit+0x218/0x8f0 [ 1533.853998][T19238] ? aa_sk_perm+0x6d5/0x900 [ 1533.854038][T19238] ? sock_rps_record_flow+0x19/0x350 [ 1533.854065][T19238] ? inet_sendmsg+0x298/0x320 [ 1533.854090][T19238] ? __pfx_inet_sendmsg+0x10/0x10 [ 1533.854111][T19238] sock_sendmsg_nosec+0x10e/0x180 [ 1533.854146][T19238] ____sys_sendmsg+0x54e/0x850 [ 1533.854179][T19238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1533.854217][T19238] ? import_iovec+0x73/0xa0 [ 1533.854244][T19238] ___sys_sendmsg+0x2a5/0x360 [ 1533.854269][T19238] ? __lock_acquire+0x683/0x2cf0 [ 1533.854305][T19238] ? __pfx____sys_sendmsg+0x10/0x10 [ 1533.854376][T19238] ? __fget_files+0x2a/0x420 [ 1533.854405][T19238] ? __fget_files+0x3a2/0x420 [ 1533.854449][T19238] __x64_sys_sendmsg+0x1b1/0x290 [ 1533.854479][T19238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1533.854528][T19238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.854560][T19238] do_syscall_64+0x174/0x580 [ 1533.854586][T19238] ? trace_irq_disable+0x3b/0x140 [ 1533.854615][T19238] ? clear_bhb_loop+0x40/0x90 [ 1533.854644][T19238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.854665][T19238] RIP: 0033:0x7ff6a1b9e019 [ 1533.854688][T19238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.854707][T19238] RSP: 002b:00007ff6a2aad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1533.854731][T19238] RAX: ffffffffffffffda RBX: 00007ff6a1e25fa0 RCX: 00007ff6a1b9e019 [ 1533.854747][T19238] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1533.854762][T19238] RBP: 00007ff6a2aad090 R08: 0000000000000000 R09: 0000000000000000 [ 1533.854776][T19238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1533.854789][T19238] R13: 00007ff6a1e26038 R14: 00007ff6a1e25fa0 R15: 00007ffc67d82648 [ 1533.854828][T19238] [ 1534.369215][T19250] netlink: 'syz.0.13074': attribute type 1 has an invalid length. [ 1534.430115][T19250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1534.471775][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13075'. [ 1534.522914][T19254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13075'. [ 1535.400449][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13082'. [ 1535.462267][T19306] FAULT_INJECTION: forcing a failure. [ 1535.462267][T19306] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.491144][T19306] CPU: 0 UID: 0 PID: 19306 Comm: syz.2.13084 Not tainted syzkaller #0 PREEMPT(full) [ 1535.491177][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1535.491190][T19306] Call Trace: [ 1535.491199][T19306] [ 1535.491208][T19306] dump_stack_lvl+0xe8/0x150 [ 1535.491246][T19306] should_fail_ex+0x40c/0x560 [ 1535.491280][T19306] should_failslab+0xa8/0x100 [ 1535.491313][T19306] __kmalloc_cache_noprof+0xa8/0x660 [ 1535.491339][T19306] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1535.491361][T19306] ? __kmalloc_cache_noprof+0x150/0x660 [ 1535.491385][T19306] ? sctp_add_bind_addr+0x8c/0x370 [ 1535.491404][T19306] ? sctp_add_bind_addr+0x8c/0x370 [ 1535.491433][T19306] sctp_add_bind_addr+0x8c/0x370 [ 1535.491461][T19306] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1535.491487][T19306] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1535.491510][T19306] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1535.491534][T19306] ? sctp_v6_is_any+0x64/0x80 [ 1535.491560][T19306] ? sctp_copy_one_addr+0x93/0x360 [ 1535.491587][T19306] sctp_bind_addr_copy+0xb3/0x3c0 [ 1535.491611][T19306] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1535.491646][T19306] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1535.491686][T19306] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1535.491721][T19306] ? __local_bh_enable_ip+0xd0/0x130 [ 1535.491745][T19306] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1535.491770][T19306] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1535.491805][T19306] sctp_sendmsg+0x159b/0x2d00 [ 1535.491849][T19306] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1535.491883][T19306] ? aa_sk_perm+0x6d5/0x900 [ 1535.491913][T19306] ? __might_fault+0xaf/0x130 [ 1535.491943][T19306] ? sock_rps_record_flow+0x19/0x350 [ 1535.491968][T19306] ? inet_sendmsg+0x298/0x320 [ 1535.491992][T19306] ? __pfx_inet_sendmsg+0x10/0x10 [ 1535.492012][T19306] sock_sendmsg_nosec+0x10e/0x180 [ 1535.492045][T19306] ____sys_sendmsg+0x54e/0x850 [ 1535.492076][T19306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1535.492112][T19306] ? import_iovec+0x73/0xa0 [ 1535.492137][T19306] ___sys_sendmsg+0x2a5/0x360 [ 1535.492160][T19306] ? __lock_acquire+0x683/0x2cf0 [ 1535.492194][T19306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1535.492260][T19306] ? __fget_files+0x2a/0x420 [ 1535.492286][T19306] ? __fget_files+0x3a2/0x420 [ 1535.492326][T19306] __x64_sys_sendmsg+0x1b1/0x290 [ 1535.492355][T19306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1535.492403][T19306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.492427][T19306] do_syscall_64+0x174/0x580 [ 1535.492452][T19306] ? trace_irq_disable+0x3b/0x140 [ 1535.492481][T19306] ? clear_bhb_loop+0x40/0x90 [ 1535.492508][T19306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.492534][T19306] RIP: 0033:0x7f2ed2d9e019 [ 1535.492556][T19306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.492574][T19306] RSP: 002b:00007f2ed3c7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1535.492598][T19306] RAX: ffffffffffffffda RBX: 00007f2ed3025fa0 RCX: 00007f2ed2d9e019 [ 1535.492613][T19306] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1535.492627][T19306] RBP: 00007f2ed3c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.492640][T19306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.492652][T19306] R13: 00007f2ed3026038 R14: 00007f2ed3025fa0 R15: 00007ffcf9c384e8 [ 1535.492693][T19306] [ 1535.882632][T19302] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1535.887485][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1536.042287][T19310] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13087'. [ 1536.181559][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13089'. [ 1536.204407][T19325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13089'. [ 1537.140323][T19369] FAULT_INJECTION: forcing a failure. [ 1537.140323][T19369] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.181547][T19369] CPU: 1 UID: 0 PID: 19369 Comm: syz.0.13100 Not tainted syzkaller #0 PREEMPT(full) [ 1537.181581][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1537.181594][T19369] Call Trace: [ 1537.181603][T19369] [ 1537.181613][T19369] dump_stack_lvl+0xe8/0x150 [ 1537.181652][T19369] should_fail_ex+0x40c/0x560 [ 1537.181686][T19369] should_failslab+0xa8/0x100 [ 1537.181720][T19369] __kmalloc_cache_noprof+0xa8/0x660 [ 1537.181773][T19369] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1537.181796][T19369] ? __kmalloc_cache_noprof+0x150/0x660 [ 1537.181823][T19369] ? sctp_add_bind_addr+0x8c/0x370 [ 1537.181858][T19369] ? sctp_add_bind_addr+0x8c/0x370 [ 1537.181888][T19369] sctp_add_bind_addr+0x8c/0x370 [ 1537.181916][T19369] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1537.181949][T19369] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1537.181973][T19369] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1537.182004][T19369] ? sctp_v6_is_any+0x64/0x80 [ 1537.182043][T19369] ? sctp_copy_one_addr+0x93/0x360 [ 1537.182081][T19369] sctp_bind_addr_copy+0xb3/0x3c0 [ 1537.182113][T19369] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1537.182161][T19369] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1537.182209][T19369] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1537.182252][T19369] ? __local_bh_enable_ip+0xd0/0x130 [ 1537.182276][T19369] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1537.182300][T19369] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1537.182336][T19369] sctp_sendmsg+0x159b/0x2d00 [ 1537.182381][T19369] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1537.182415][T19369] ? aa_sk_perm+0x6d5/0x900 [ 1537.182446][T19369] ? __might_fault+0xaf/0x130 [ 1537.182474][T19369] ? sock_rps_record_flow+0x19/0x350 [ 1537.182500][T19369] ? inet_sendmsg+0x298/0x320 [ 1537.182522][T19369] ? __pfx_inet_sendmsg+0x10/0x10 [ 1537.182541][T19369] sock_sendmsg_nosec+0x10e/0x180 [ 1537.182574][T19369] ____sys_sendmsg+0x54e/0x850 [ 1537.182605][T19369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1537.182641][T19369] ? import_iovec+0x73/0xa0 [ 1537.182667][T19369] ___sys_sendmsg+0x2a5/0x360 [ 1537.182690][T19369] ? __lock_acquire+0x683/0x2cf0 [ 1537.182726][T19369] ? __pfx____sys_sendmsg+0x10/0x10 [ 1537.182795][T19369] ? __fget_files+0x2a/0x420 [ 1537.182832][T19369] ? __fget_files+0x3a2/0x420 [ 1537.182873][T19369] __x64_sys_sendmsg+0x1b1/0x290 [ 1537.182903][T19369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1537.182950][T19369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.182974][T19369] do_syscall_64+0x174/0x580 [ 1537.182998][T19369] ? trace_irq_disable+0x3b/0x140 [ 1537.183027][T19369] ? clear_bhb_loop+0x40/0x90 [ 1537.183054][T19369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.183083][T19369] RIP: 0033:0x7ff6a1b9e019 [ 1537.183104][T19369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.183122][T19369] RSP: 002b:00007ff6a2aad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1537.183146][T19369] RAX: ffffffffffffffda RBX: 00007ff6a1e25fa0 RCX: 00007ff6a1b9e019 [ 1537.183161][T19369] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1537.183175][T19369] RBP: 00007ff6a2aad090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.183188][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1537.183200][T19369] R13: 00007ff6a1e26038 R14: 00007ff6a1e25fa0 R15: 00007ffc67d82648 [ 1537.183237][T19369] [ 1537.680740][T19382] siw: device registration error -23 [ 1537.691403][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13105'. [ 1537.752293][T19386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13105'. [ 1538.378346][T19422] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13115'. [ 1538.629316][T19435] x_tables: duplicate entry at hook 1 [ 1538.806247][T19441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13118'. [ 1540.218676][T19487] __nla_validate_parse: 4 callbacks suppressed [ 1540.218703][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13129'. [ 1540.272826][T19491] FAULT_INJECTION: forcing a failure. [ 1540.272826][T19491] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.308285][T19491] CPU: 0 UID: 0 PID: 19491 Comm: syz.4.13132 Not tainted syzkaller #0 PREEMPT(full) [ 1540.308316][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1540.308329][T19491] Call Trace: [ 1540.308338][T19491] [ 1540.308347][T19491] dump_stack_lvl+0xe8/0x150 [ 1540.308385][T19491] should_fail_ex+0x40c/0x560 [ 1540.308420][T19491] should_failslab+0xa8/0x100 [ 1540.308458][T19491] __kmalloc_cache_noprof+0xa8/0x660 [ 1540.308484][T19491] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1540.308508][T19491] ? __kmalloc_cache_noprof+0x150/0x660 [ 1540.308534][T19491] ? sctp_add_bind_addr+0x8c/0x370 [ 1540.308554][T19491] ? sctp_add_bind_addr+0x8c/0x370 [ 1540.308583][T19491] sctp_add_bind_addr+0x8c/0x370 [ 1540.308610][T19491] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1540.308634][T19491] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1540.308657][T19491] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1540.308682][T19491] ? sctp_v6_is_any+0x64/0x80 [ 1540.308705][T19491] ? sctp_copy_one_addr+0x93/0x360 [ 1540.308730][T19491] sctp_bind_addr_copy+0xb3/0x3c0 [ 1540.308754][T19491] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1540.308786][T19491] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1540.308817][T19491] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1540.308852][T19491] ? __local_bh_enable_ip+0xd0/0x130 [ 1540.308875][T19491] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1540.308899][T19491] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1540.308934][T19491] sctp_sendmsg+0x159b/0x2d00 [ 1540.308987][T19491] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1540.309021][T19491] ? aa_sk_perm+0x6d5/0x900 [ 1540.309050][T19491] ? __might_fault+0xaf/0x130 [ 1540.309080][T19491] ? sock_rps_record_flow+0x19/0x350 [ 1540.309107][T19491] ? inet_sendmsg+0x298/0x320 [ 1540.309131][T19491] ? __pfx_inet_sendmsg+0x10/0x10 [ 1540.309150][T19491] sock_sendmsg_nosec+0x10e/0x180 [ 1540.309184][T19491] ____sys_sendmsg+0x54e/0x850 [ 1540.309214][T19491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1540.309249][T19491] ? import_iovec+0x73/0xa0 [ 1540.309276][T19491] ___sys_sendmsg+0x2a5/0x360 [ 1540.309298][T19491] ? __lock_acquire+0x683/0x2cf0 [ 1540.309333][T19491] ? __pfx____sys_sendmsg+0x10/0x10 [ 1540.309401][T19491] ? __fget_files+0x2a/0x420 [ 1540.309429][T19491] ? __fget_files+0x3a2/0x420 [ 1540.309466][T19491] __x64_sys_sendmsg+0x1b1/0x290 [ 1540.309491][T19491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1540.309534][T19491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.309557][T19491] do_syscall_64+0x174/0x580 [ 1540.309582][T19491] ? trace_irq_disable+0x3b/0x140 [ 1540.309609][T19491] ? clear_bhb_loop+0x40/0x90 [ 1540.309635][T19491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.309656][T19491] RIP: 0033:0x7f079df9e019 [ 1540.309677][T19491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.309696][T19491] RSP: 002b:00007f079ef2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.309720][T19491] RAX: ffffffffffffffda RBX: 00007f079e225fa0 RCX: 00007f079df9e019 [ 1540.309735][T19491] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1540.309749][T19491] RBP: 00007f079ef2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.309762][T19491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1540.309775][T19491] R13: 00007f079e226038 R14: 00007f079e225fa0 R15: 00007fff9b01a5a8 [ 1540.309811][T19491] [ 1540.716235][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13134'. [ 1540.805838][T19497] tcf_pedit_act: 24 callbacks suppressed [ 1540.805863][T19497] tc action pedit offset must be on 32 bit boundaries [ 1541.236528][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13144'. [ 1541.265899][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13144'. [ 1541.341959][T19526] Bluetooth: MGMT ver 1.23 [ 1541.353791][T19525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13146'. [ 1541.405188][T19528] Dead loop on virtual device ip6_vti0 (net 734), fix it urgently! [ 1541.722682][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13150'. [ 1542.266925][T19564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13159'. [ 1542.426635][T19571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13162'. [ 1542.585707][T19573] syzkaller0: entered promiscuous mode [ 1542.597533][T19573] syzkaller0: entered allmulticast mode [ 1542.617683][T19575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13164'. [ 1542.706867][T19585] netlink: 'syz.0.13167': attribute type 10 has an invalid length. [ 1543.106888][ T4942] Bluetooth: hci2: command 0x0406 tx timeout [ 1547.185538][T19585] veth1_macvtap: left promiscuous mode [ 1547.196049][T19585] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1547.420513][T19608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13174'. [ 1547.436333][T19610] netlink: 'syz.0.13173': attribute type 5 has an invalid length. [ 1547.456546][T19615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13176'. [ 1547.641436][T19625] netlink: 'syz.1.13179': attribute type 12 has an invalid length. [ 1547.680201][T19625] bond2: option primary_reselect: invalid value (255) [ 1547.690454][T19625] bond2 (unregistering): Released all slaves [ 1547.948550][T19628] syzkaller0: entered promiscuous mode [ 1547.962187][T19628] syzkaller0: entered allmulticast mode [ 1548.092270][T19640] netlink: 'syz.4.13183': attribute type 63 has an invalid length. [ 1548.138921][T19638] syzkaller0: entered promiscuous mode [ 1548.147226][T19638] syzkaller0: entered allmulticast mode [ 1548.208218][T17813] Bluetooth: hci5: command 0x0406 tx timeout [ 1548.475418][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13186'. [ 1548.498268][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13186'. [ 1548.520557][T19657] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13186'. [ 1552.851741][T19670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13189'. [ 1552.865719][T19674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13191'. [ 1553.469537][T19708] syzkaller1: entered promiscuous mode [ 1553.498955][T19708] syzkaller1: entered allmulticast mode [ 1553.532117][T19713] netlink: 'syz.2.13201': attribute type 1 has an invalid length. [ 1553.586291][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13201'. [ 1553.619845][T19708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13201'. [ 1553.692077][T19720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13201'. [ 1553.715065][T19713] veth3: entered promiscuous mode [ 1553.903817][T19716] syzkaller0: entered promiscuous mode [ 1553.915476][T19716] syzkaller0: entered allmulticast mode [ 1554.016540][T19728] netlink: 168 bytes leftover after parsing attributes in process `syz.4.13203'. [ 1554.120595][T19731] netlink: 'syz.3.13204': attribute type 2 has an invalid length. [ 1554.160454][T19731] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13204'. [ 1554.405502][T19741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13209'. [ 1558.376484][T19725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13203'. [ 1558.385845][T19727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13204'. [ 1558.766443][T19768] syzkaller0: entered promiscuous mode [ 1558.778147][T19768] syzkaller0: entered allmulticast mode [ 1559.119187][T19783] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 1559.147717][T19785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1563.791883][T19807] syzkaller0: entered promiscuous mode [ 1563.841137][T19807] syzkaller0: entered allmulticast mode [ 1568.731110][T19857] FAULT_INJECTION: forcing a failure. [ 1568.731110][T19857] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.756499][T19857] CPU: 1 UID: 0 PID: 19857 Comm: syz.3.13240 Not tainted syzkaller #0 PREEMPT(full) [ 1568.756529][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1568.756542][T19857] Call Trace: [ 1568.756552][T19857] [ 1568.756561][T19857] dump_stack_lvl+0xe8/0x150 [ 1568.756600][T19857] should_fail_ex+0x40c/0x560 [ 1568.756632][T19857] should_failslab+0xa8/0x100 [ 1568.756665][T19857] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1568.756690][T19857] ? __alloc_skb+0x276/0x7a0 [ 1568.756711][T19857] ? sctp_chunkify+0x5a/0x260 [ 1568.756793][T19857] ? sctp_chunkify+0x5a/0x260 [ 1568.756823][T19857] sctp_chunkify+0x5a/0x260 [ 1568.756850][T19857] _sctp_make_chunk+0x122/0x290 [ 1568.756878][T19857] sctp_make_shutdown+0xb7/0x3d0 [ 1568.756905][T19857] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 1568.756927][T19857] ? rcu_is_watching+0x15/0xb0 [ 1568.756949][T19857] ? trace_sched_exit_tp+0x3a/0x130 [ 1568.756979][T19857] sctp_sf_do_9_2_start_shutdown+0x2b/0x4c0 [ 1568.757042][T19857] sctp_do_sm+0x239/0x5d50 [ 1568.757070][T19857] ? __pfx_sctp_pname+0x10/0x10 [ 1568.757143][T19857] ? get_pid_task+0x20/0x1f0 [ 1568.757169][T19857] ? get_pid_task+0x20/0x1f0 [ 1568.757207][T19857] ? __pfx_sctp_do_sm+0x10/0x10 [ 1568.757277][T19857] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1568.757304][T19857] ? rcu_is_watching+0x15/0xb0 [ 1568.757325][T19857] ? trace_inet_sock_set_state+0x82/0x200 [ 1568.757355][T19857] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 1568.757386][T19857] ? __pfx_sctp_shutdown+0x10/0x10 [ 1568.757411][T19857] inet_shutdown+0x271/0x390 [ 1568.757445][T19857] __x64_sys_shutdown+0x13f/0x1a0 [ 1568.757471][T19857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.757494][T19857] do_syscall_64+0x174/0x580 [ 1568.757518][T19857] ? trace_irq_disable+0x3b/0x140 [ 1568.757545][T19857] ? clear_bhb_loop+0x40/0x90 [ 1568.757571][T19857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.757591][T19857] RIP: 0033:0x7f3f5f59e019 [ 1568.757612][T19857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.757629][T19857] RSP: 002b:00007f3f6052b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 1568.757652][T19857] RAX: ffffffffffffffda RBX: 00007f3f5f826090 RCX: 00007f3f5f59e019 [ 1568.757667][T19857] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1568.757680][T19857] RBP: 00007f3f6052b090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.757693][T19857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.757706][T19857] R13: 00007f3f5f826128 R14: 00007f3f5f826090 R15: 00007ffc6cc49638 [ 1568.757742][T19857] [ 1569.560476][T19886] syzkaller0: entered promiscuous mode [ 1569.577273][T19886] syzkaller0: entered allmulticast mode [ 1569.670633][T19896] syzkaller0: entered promiscuous mode [ 1569.697207][T19896] syzkaller0: entered allmulticast mode [ 1570.019670][T19909] FAULT_INJECTION: forcing a failure. [ 1570.019670][T19909] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.033559][T19909] CPU: 0 UID: 0 PID: 19909 Comm: syz.2.13258 Not tainted syzkaller #0 PREEMPT(full) [ 1570.033589][T19909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1570.033602][T19909] Call Trace: [ 1570.033610][T19909] [ 1570.033621][T19909] dump_stack_lvl+0xe8/0x150 [ 1570.033669][T19909] should_fail_ex+0x40c/0x560 [ 1570.033704][T19909] should_failslab+0xa8/0x100 [ 1570.033739][T19909] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1570.033766][T19909] ? __alloc_skb+0x276/0x7a0 [ 1570.033786][T19909] ? sctp_chunkify+0x5a/0x260 [ 1570.033808][T19909] ? sctp_chunkify+0x5a/0x260 [ 1570.033838][T19909] sctp_chunkify+0x5a/0x260 [ 1570.033862][T19909] _sctp_make_chunk+0x122/0x290 [ 1570.033886][T19909] sctp_make_shutdown+0xb7/0x3d0 [ 1570.033911][T19909] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 1570.033939][T19909] ? rcu_is_watching+0x15/0xb0 [ 1570.033960][T19909] ? trace_sched_exit_tp+0x3a/0x130 [ 1570.033988][T19909] sctp_sf_do_9_2_start_shutdown+0x2b/0x4c0 [ 1570.034020][T19909] sctp_do_sm+0x239/0x5d50 [ 1570.034054][T19909] ? __pfx_sctp_pname+0x10/0x10 [ 1570.034086][T19909] ? get_pid_task+0x20/0x1f0 [ 1570.034117][T19909] ? get_pid_task+0x20/0x1f0 [ 1570.034154][T19909] ? __pfx_sctp_do_sm+0x10/0x10 [ 1570.034222][T19909] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1570.034246][T19909] ? rcu_is_watching+0x15/0xb0 [ 1570.034266][T19909] ? trace_inet_sock_set_state+0x82/0x200 [ 1570.034295][T19909] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 1570.034324][T19909] ? __pfx_sctp_shutdown+0x10/0x10 [ 1570.034348][T19909] inet_shutdown+0x271/0x390 [ 1570.034371][T19909] __x64_sys_shutdown+0x13f/0x1a0 [ 1570.034395][T19909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.034462][T19909] do_syscall_64+0x174/0x580 [ 1570.034485][T19909] ? trace_irq_disable+0x3b/0x140 [ 1570.034509][T19909] ? clear_bhb_loop+0x40/0x90 [ 1570.034533][T19909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.034584][T19909] RIP: 0033:0x7f2ed2d9e019 [ 1570.034604][T19909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.034621][T19909] RSP: 002b:00007f2ed3c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 1570.034643][T19909] RAX: ffffffffffffffda RBX: 00007f2ed3026090 RCX: 00007f2ed2d9e019 [ 1570.034657][T19909] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1570.034669][T19909] RBP: 00007f2ed3c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.034682][T19909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.034694][T19909] R13: 00007f2ed3026128 R14: 00007f2ed3026090 R15: 00007ffcf9c384e8 [ 1570.034750][T19909] [ 1572.397419][T19880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1572.413245][T19913] netlink: 'syz.2.13259': attribute type 1 has an invalid length. [ 1572.423175][T19913] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13259'. [ 1574.582655][T19912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1579.184185][T19954] veth0_to_bridge: entered promiscuous mode [ 1579.241435][ T29] audit: type=1800 audit(1785567449.982:20): pid=19958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13272" name="memory.events" dev="tmpfs" ino=646 res=0 errno=0 [ 1579.331852][T19958] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13272'. [ 1579.370476][T19953] veth0_to_bridge: left promiscuous mode [ 1584.047349][T17813] Bluetooth: hci3: command 0x0406 tx timeout [ 1584.678180][T20021] Dead loop on virtual device ip6_vti0 (net 595), fix it urgently! [ 1585.213945][T20045] syzkaller0: entered promiscuous mode [ 1585.221972][T20045] syzkaller0: entered allmulticast mode [ 1585.264312][T20047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13295'. [ 1585.311303][T20047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1585.702807][T20065] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1585.718081][T20064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13299'. [ 1585.752980][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13301'. [ 1586.005453][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13299'. [ 1589.851830][T20063] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1589.884284][T20063] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1589.912622][T20063] gretap1: entered promiscuous mode [ 1589.918603][T20063] gretap1: entered allmulticast mode [ 1590.483776][T20081] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1590.493142][T20108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13312'. [ 1590.855743][T20118] netlink: 'syz.4.13315': attribute type 1 has an invalid length. [ 1591.109846][T20133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1591.135959][T20133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1591.309959][T20142] FAULT_INJECTION: forcing a failure. [ 1591.309959][T20142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.332551][T20142] CPU: 1 UID: 0 PID: 20142 Comm: syz.4.13322 Not tainted syzkaller #0 PREEMPT(full) [ 1591.332582][T20142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1591.332596][T20142] Call Trace: [ 1591.332604][T20142] [ 1591.332614][T20142] dump_stack_lvl+0xe8/0x150 [ 1591.332653][T20142] should_fail_ex+0x40c/0x560 [ 1591.332687][T20142] _copy_from_user+0x2d/0xb0 [ 1591.332709][T20142] ___sys_sendmsg+0x1c6/0x360 [ 1591.332733][T20142] ? __lock_acquire+0x683/0x2cf0 [ 1591.332767][T20142] ? __pfx____sys_sendmsg+0x10/0x10 [ 1591.332830][T20142] ? __fget_files+0x2a/0x420 [ 1591.332858][T20142] ? __fget_files+0x3a2/0x420 [ 1591.332897][T20142] __x64_sys_sendmsg+0x1b1/0x290 [ 1591.332925][T20142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1591.332969][T20142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.332992][T20142] do_syscall_64+0x174/0x580 [ 1591.333016][T20142] ? trace_irq_disable+0x3b/0x140 [ 1591.333043][T20142] ? clear_bhb_loop+0x40/0x90 [ 1591.333069][T20142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.333090][T20142] RIP: 0033:0x7f079df9e019 [ 1591.333111][T20142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.333129][T20142] RSP: 002b:00007f079ef2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.333153][T20142] RAX: ffffffffffffffda RBX: 00007f079e225fa0 RCX: 00007f079df9e019 [ 1591.333168][T20142] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1591.333182][T20142] RBP: 00007f079ef2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.333195][T20142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.333207][T20142] R13: 00007f079e226038 R14: 00007f079e225fa0 R15: 00007fff9b01a5a8 [ 1591.333241][T20142] [ 1591.566168][T20150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13327'. [ 1591.580984][T20151] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1592.416967][T20189] netlink: 'syz.3.13340': attribute type 27 has an invalid length. [ 1592.532501][T20195] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13340'. [ 1592.546183][T20189] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1592.559078][T20189] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1592.569313][T20184] FAULT_INJECTION: forcing a failure. [ 1592.569313][T20184] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.587907][T20184] CPU: 0 UID: 0 PID: 20184 Comm: syz.0.13338 Not tainted syzkaller #0 PREEMPT(full) [ 1592.587937][T20184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1592.587950][T20184] Call Trace: [ 1592.587959][T20184] [ 1592.587969][T20184] dump_stack_lvl+0xe8/0x150 [ 1592.588007][T20184] should_fail_ex+0x40c/0x560 [ 1592.588041][T20184] should_failslab+0xa8/0x100 [ 1592.588088][T20184] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1592.588135][T20184] ? local_lock_release+0x9c/0x160 [ 1592.588167][T20184] ? __alloc_skb+0x1d7/0x7a0 [ 1592.588186][T20184] ? __alloc_skb+0x1d7/0x7a0 [ 1592.588214][T20184] __alloc_skb+0x1d7/0x7a0 [ 1592.588241][T20184] _sctp_make_chunk+0x59/0x290 [ 1592.588268][T20184] sctp_make_shutdown+0xb7/0x3d0 [ 1592.588290][T20184] ? finish_task_switch+0x412/0xc60 [ 1592.588316][T20184] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 1592.588338][T20184] ? rcu_is_watching+0x15/0xb0 [ 1592.588359][T20184] ? trace_sched_exit_tp+0x3a/0x130 [ 1592.588387][T20184] sctp_sf_do_9_2_start_shutdown+0x2b/0x4c0 [ 1592.588423][T20184] sctp_do_sm+0x239/0x5d50 [ 1592.588453][T20184] ? __pfx_sctp_pname+0x10/0x10 [ 1592.588486][T20184] ? get_pid_task+0x20/0x1f0 [ 1592.588521][T20184] ? get_pid_task+0x20/0x1f0 [ 1592.588558][T20184] ? __pfx_sctp_do_sm+0x10/0x10 [ 1592.588629][T20184] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1592.588655][T20184] ? rcu_is_watching+0x15/0xb0 [ 1592.588676][T20184] ? trace_inet_sock_set_state+0x82/0x200 [ 1592.588707][T20184] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 1592.588737][T20184] ? __pfx_sctp_shutdown+0x10/0x10 [ 1592.588761][T20184] inet_shutdown+0x271/0x390 [ 1592.588787][T20184] __x64_sys_shutdown+0x13f/0x1a0 [ 1592.588812][T20184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.588836][T20184] do_syscall_64+0x174/0x580 [ 1592.588864][T20184] ? trace_irq_disable+0x3b/0x140 [ 1592.588891][T20184] ? clear_bhb_loop+0x40/0x90 [ 1592.588917][T20184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.588937][T20184] RIP: 0033:0x7ff6a1b9e019 [ 1592.588958][T20184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.588976][T20184] RSP: 002b:00007ff6a2a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 1592.589000][T20184] RAX: ffffffffffffffda RBX: 00007ff6a1e26180 RCX: 00007ff6a1b9e019 [ 1592.589014][T20184] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 1592.589025][T20184] RBP: 00007ff6a2a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.589037][T20184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.589047][T20184] R13: 00007ff6a1e26218 R14: 00007ff6a1e26180 R15: 00007ffc67d82648 [ 1592.589075][T20184] [ 1592.975734][T20198] syzkaller0: entered promiscuous mode [ 1592.983076][T20198] syzkaller0: entered allmulticast mode [ 1594.044630][T20223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13351'. [ 1597.531379][T20202] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1597.532620][T20207] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1597.568010][T20223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.584175][T20223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.858320][T20241] syzkaller0: entered promiscuous mode [ 1597.881772][T20241] syzkaller0: entered allmulticast mode [ 1598.257429][T20258] FAULT_INJECTION: forcing a failure. [ 1598.257429][T20258] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.270886][T20258] CPU: 1 UID: 0 PID: 20258 Comm: syz.4.13363 Not tainted syzkaller #0 PREEMPT(full) [ 1598.270915][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1598.270926][T20258] Call Trace: [ 1598.270936][T20258] [ 1598.270945][T20258] dump_stack_lvl+0xe8/0x150 [ 1598.270981][T20258] should_fail_ex+0x40c/0x560 [ 1598.271014][T20258] should_failslab+0xa8/0x100 [ 1598.271047][T20258] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1598.271074][T20258] ? skb_clone+0x212/0x3a0 [ 1598.271096][T20258] ? skb_clone+0x212/0x3a0 [ 1598.271127][T20258] skb_clone+0x212/0x3a0 [ 1598.271154][T20258] __netlink_deliver_tap+0x413/0x860 [ 1598.271193][T20258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.271218][T20258] netlink_deliver_tap+0x19c/0x1b0 [ 1598.271245][T20258] netlink_sendskb+0x68/0x140 [ 1598.271271][T20258] netlink_rcv_skb+0x2a4/0x4a0 [ 1598.271297][T20258] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1598.271324][T20258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1598.271361][T20258] ? bpf_lsm_capable+0x9/0x20 [ 1598.271390][T20258] ? security_capable+0x7e/0x2c0 [ 1598.271423][T20258] nfnetlink_rcv+0x2b9/0x28c0 [ 1598.271448][T20258] ? __dev_queue_xmit+0x29b/0x3820 [ 1598.271554][T20258] ? __local_bh_enable_ip+0xd0/0x130 [ 1598.271581][T20258] ? lockdep_hardirqs_on+0x7a/0x110 [ 1598.271605][T20258] ? __dev_queue_xmit+0x29b/0x3820 [ 1598.271635][T20258] ? __local_bh_enable_ip+0xd0/0x130 [ 1598.271658][T20258] ? __dev_queue_xmit+0x29b/0x3820 [ 1598.271683][T20258] ? __dev_queue_xmit+0x1edc/0x3820 [ 1598.271707][T20258] ? do_syscall_64+0x174/0x580 [ 1598.271731][T20258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.271767][T20258] ? __dev_queue_xmit+0x29b/0x3820 [ 1598.271794][T20258] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1598.271825][T20258] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1598.271866][T20258] ? ref_tracker_free+0x689/0x830 [ 1598.271899][T20258] ? __pfx_ref_tracker_free+0x10/0x10 [ 1598.271935][T20258] ? __skb_clone+0x449/0x6c0 [ 1598.271968][T20258] ? skb_clone+0x246/0x3a0 [ 1598.271996][T20258] ? __netlink_deliver_tap+0x811/0x860 [ 1598.272021][T20258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.272053][T20258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.272078][T20258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.272109][T20258] netlink_unicast+0x7bb/0x940 [ 1598.272145][T20258] netlink_sendmsg+0x813/0xb40 [ 1598.272182][T20258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.272213][T20258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1598.272245][T20258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.272269][T20258] sock_sendmsg_nosec+0x13a/0x180 [ 1598.272303][T20258] ____sys_sendmsg+0x54e/0x850 [ 1598.272333][T20258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1598.272368][T20258] ? import_iovec+0x73/0xa0 [ 1598.272394][T20258] ___sys_sendmsg+0x2a5/0x360 [ 1598.272417][T20258] ? __lock_acquire+0x683/0x2cf0 [ 1598.272453][T20258] ? __pfx____sys_sendmsg+0x10/0x10 [ 1598.272517][T20258] ? __fget_files+0x2a/0x420 [ 1598.272544][T20258] ? __fget_files+0x3a2/0x420 [ 1598.272581][T20258] __x64_sys_sendmsg+0x1b1/0x290 [ 1598.272609][T20258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1598.272653][T20258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.272675][T20258] do_syscall_64+0x174/0x580 [ 1598.272698][T20258] ? trace_irq_disable+0x3b/0x140 [ 1598.272725][T20258] ? clear_bhb_loop+0x40/0x90 [ 1598.272750][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.272771][T20258] RIP: 0033:0x7f079df9e019 [ 1598.272790][T20258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.272807][T20258] RSP: 002b:00007f079ef2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1598.272837][T20258] RAX: ffffffffffffffda RBX: 00007f079e225fa0 RCX: 00007f079df9e019 [ 1598.272852][T20258] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1598.272866][T20258] RBP: 00007f079ef2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.272879][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.272891][T20258] R13: 00007f079e226038 R14: 00007f079e225fa0 R15: 00007fff9b01a5a8 [ 1598.272925][T20258] [ 1598.376911][T20260] syzkaller0: entered promiscuous mode [ 1598.699517][T20260] syzkaller0: entered allmulticast mode [ 1599.033258][T20289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13370'. [ 1603.286792][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13373'. [ 1603.387609][T20313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13375'. [ 1603.439717][T20316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13375'. [ 1603.486446][T20313] netlink: 'syz.1.13375': attribute type 32 has an invalid length. [ 1603.498589][T20313] netlink: 500 bytes leftover after parsing attributes in process `syz.1.13375'. [ 1603.626174][T20324] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13380'. [ 1603.899836][T20336] syzkaller0: entered promiscuous mode [ 1603.906244][T20336] syzkaller0: entered allmulticast mode [ 1608.224940][T20355] syzkaller0: entered promiscuous mode [ 1608.231829][T20355] syzkaller0: entered allmulticast mode [ 1613.481337][T20424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13403'. [ 1613.517133][T20424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13403'. [ 1613.673114][T20433] netlink: 'syz.4.13407': attribute type 4 has an invalid length. [ 1614.044881][T20450] syzkaller0: entered promiscuous mode [ 1614.051064][T20450] syzkaller0: entered allmulticast mode [ 1614.819575][T20479] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1618.537360][T20489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13422'. [ 1618.775549][T20506] syzkaller0: entered promiscuous mode [ 1618.782134][T20506] syzkaller0: entered allmulticast mode [ 1619.152032][T20519] syzkaller0: entered promiscuous mode [ 1619.157684][T20519] syzkaller0: entered allmulticast mode [ 1619.714582][T20535] netlink: 'syz.4.13437': attribute type 13 has an invalid length. [ 1624.056276][T20553] syzkaller0: entered promiscuous mode [ 1624.068554][T20553] syzkaller0: entered allmulticast mode [ 1628.661441][T20609] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13455'. [ 1628.793535][T20603] syzkaller0: entered promiscuous mode [ 1628.813572][T20603] syzkaller0: entered allmulticast mode [ 1629.393084][T20642] netlink: 'syz.4.13463': attribute type 1 has an invalid length. [ 1629.451881][T20645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13463'. [ 1629.510283][T20648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13463'. [ 1633.464470][T20642] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1633.510321][T20645] veth3: entered allmulticast mode [ 1633.540358][T20659] smc: net device team0 applied user defined pnetid SYZ2 [ 1633.601211][T20657] netlink: 472 bytes leftover after parsing attributes in process `syz.0.13466'. [ 1633.627654][T20657] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13466'. [ 1633.743866][T20669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13470'. [ 1633.886892][T20678] netlink: 'syz.3.13474': attribute type 61 has an invalid length. [ 1634.281933][T20691] syzkaller0: entered promiscuous mode [ 1634.291084][T20691] syzkaller0: entered allmulticast mode [ 1634.540998][T20697] syzkaller0: entered promiscuous mode [ 1634.563335][T20697] syzkaller0: entered allmulticast mode [ 1634.849613][T20707] netlink: 'syz.1.13483': attribute type 4 has an invalid length. [ 1634.880418][T20709] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13484'. [ 1635.600233][T20730] netlink: 'syz.0.13489': attribute type 1 has an invalid length. [ 1635.641037][T20731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13489'. [ 1635.684705][T20731] block nbd0: reconnected socket [ 1639.172429][ T1102] bridge_slave_1: left allmulticast mode [ 1639.178838][ T1102] bridge_slave_1: left promiscuous mode [ 1639.193861][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.659167][ T1102] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 1639.931905][ T1102] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 1639.969649][ T1102] bond0 (unregistering): (slave bridge9): Releasing backup interface [ 1640.010312][ T1102]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.034215][ T1102]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.053569][ T1102]  (unregistering): Released all slaves [ 1640.070744][ T1102] bond1 (unregistering): Released all slaves [ 1640.093221][ T1102] bond2 (unregistering): Released all slaves [ 1640.108917][ T1102] bond3 (unregistering): Released all slaves [ 1640.129795][ T1102] bond4 (unregistering): Released all slaves [ 1640.156968][ T1102] bond5 (unregistering): Released all slaves [ 1640.205653][ T1102] bond6 (unregistering): Released all slaves [ 1640.246777][ T1102] bond7 (unregistering): Released all slaves [ 1640.269937][ T1102] bond8 (unregistering): Released all slaves [ 1640.301018][ T1102] bond9 (unregistering): Released all slaves [ 1640.328538][ T1102] bond10 (unregistering): Released all slaves [ 1640.350637][ T1102] bond0 (unregistering): Released all slaves [ 1640.396981][ T1102] bond11 (unregistering): Released all slaves [ 1640.419137][ T4942] block nbd0: Receive control failed (result -32) [ 1640.665678][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13499'. [ 1640.783804][ T1102] tipc: Left network mode [ 1641.552289][T20800] bridge0: port 1(ipvlan2) entered blocking state [ 1641.567359][T20800] bridge0: port 1(ipvlan2) entered disabled state [ 1641.576158][T20800] ipvlan2: entered allmulticast mode [ 1641.582431][T20800] bridge0: entered allmulticast mode [ 1641.594136][T20800] ipvlan2: left allmulticast mode [ 1641.601537][T20800] bridge0: left allmulticast mode [ 1641.919086][T20804] syzkaller0: entered promiscuous mode [ 1641.931474][T20804] syzkaller0: entered allmulticast mode [ 1641.988823][T20820] FAULT_INJECTION: forcing a failure. [ 1641.988823][T20820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.002545][T20820] CPU: 0 UID: 0 PID: 20820 Comm: syz.2.13515 Not tainted syzkaller #0 PREEMPT(full) [ 1642.002573][T20820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1642.002586][T20820] Call Trace: [ 1642.002595][T20820] [ 1642.002604][T20820] dump_stack_lvl+0xe8/0x150 [ 1642.002646][T20820] should_fail_ex+0x40c/0x560 [ 1642.002679][T20820] _copy_from_user+0x2d/0xb0 [ 1642.002698][T20820] __sys_connect+0x155/0x460 [ 1642.002724][T20820] ? __pfx___sys_connect+0x10/0x10 [ 1642.002753][T20820] ? __pfx_ksys_write+0x10/0x10 [ 1642.002779][T20820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.002799][T20820] __x64_sys_connect+0x7a/0x90 [ 1642.002818][T20820] do_syscall_64+0x174/0x580 [ 1642.002842][T20820] ? trace_irq_disable+0x3b/0x140 [ 1642.002867][T20820] ? clear_bhb_loop+0x40/0x90 [ 1642.002888][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.002905][T20820] RIP: 0033:0x7f2ed2d9e019 [ 1642.002922][T20820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.002937][T20820] RSP: 002b:00007f2ed3c7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1642.002956][T20820] RAX: ffffffffffffffda RBX: 00007f2ed3025fa0 RCX: 00007f2ed2d9e019 [ 1642.002969][T20820] RDX: 000000000000001e RSI: 0000200000000040 RDI: 0000000000000005 [ 1642.002980][T20820] RBP: 00007f2ed3c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.002990][T20820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.003000][T20820] R13: 00007f2ed3026038 R14: 00007f2ed3025fa0 R15: 00007ffcf9c384e8 [ 1642.003031][T20820] [ 1642.126956][T20822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1642.243646][T20825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13517'. [ 1642.621832][T20829] netlink: 666 bytes leftover after parsing attributes in process `syz.0.13518'. [ 1646.871964][T20853] tipc: Started in network mode [ 1646.890871][T20853] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 1646.979241][T20860] syzkaller0: entered promiscuous mode [ 1647.000197][T20860] syzkaller0: entered allmulticast mode [ 1647.085787][T20864] netlink: 'syz.0.13531': attribute type 6 has an invalid length. [ 1647.370889][ T1102] [ 1647.373272][ T1102] ====================================================== [ 1647.380308][ T1102] WARNING: possible circular locking dependency detected [ 1647.387511][ T1102] syzkaller #0 Not tainted [ 1647.391927][ T1102] ------------------------------------------------------ [ 1647.398973][ T1102] kworker/u8:7/1102 is trying to acquire lock: [ 1647.405132][ T1102] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170 [ 1647.415757][ T1102] [ 1647.415757][ T1102] but task is already holding lock: [ 1647.423295][ T1102] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1647.432920][ T1102] [ 1647.432920][ T1102] which lock already depends on the new lock. [ 1647.432920][ T1102] [ 1647.443347][ T1102] [ 1647.443347][ T1102] the existing dependency chain (in reverse order) is: [ 1647.452358][ T1102] [ 1647.452358][ T1102] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1647.460401][ T1102] down_write+0x96/0x200 [ 1647.465171][ T1102] kernfs_add_one+0x41/0x5e0 [ 1647.470405][ T1102] kernfs_create_dir_ns+0x1a1/0x230 [ 1647.476140][ T1102] internal_create_group+0x440/0x1180 [ 1647.482049][ T1102] cpuhp_invoke_callback+0x434/0x810 [ 1647.487865][ T1102] cpuhp_issue_call+0x3f0/0x750 [ 1647.493244][ T1102] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1647.499870][ T1102] __cpuhp_setup_state+0x3f/0x60 [ 1647.505345][ T1102] do_one_initcall+0x250/0x870 [ 1647.510661][ T1102] do_initcall_level+0x10a/0x1a0 [ 1647.516226][ T1102] do_initcalls+0x59/0xa0 [ 1647.521076][ T1102] kernel_init_freeable+0x29d/0x3e0 [ 1647.526803][ T1102] kernel_init+0x1d/0x1d0 [ 1647.531676][ T1102] ret_from_fork+0x514/0xb70 [ 1647.536851][ T1102] ret_from_fork_asm+0x1a/0x30 [ 1647.542220][ T1102] [ 1647.542220][ T1102] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1647.550040][ T1102] [ 1647.550040][ T1102] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1647.557771][ T1102] cpus_read_lock+0x42/0x160 [ 1647.562887][ T1102] static_key_slow_inc+0x12/0x30 [ 1647.568380][ T1102] nbd_genl_reconfigure+0x1301/0x1e80 [ 1647.574368][ T1102] genl_family_rcv_msg_doit+0x233/0x340 [ 1647.580446][ T1102] genl_rcv_msg+0x614/0x7a0 [ 1647.585473][ T1102] netlink_rcv_skb+0x226/0x4a0 [ 1647.590846][ T1102] genl_rcv+0x28/0x40 [ 1647.595358][ T1102] netlink_unicast+0x7bb/0x940 [ 1647.600638][ T1102] netlink_sendmsg+0x813/0xb40 [ 1647.605928][ T1102] sock_sendmsg_nosec+0x13a/0x180 [ 1647.611478][ T1102] ____sys_sendmsg+0x54e/0x850 [ 1647.616766][ T1102] ___sys_sendmsg+0x2a5/0x360 [ 1647.621964][ T1102] __x64_sys_sendmsg+0x1b1/0x290 [ 1647.627425][ T1102] do_syscall_64+0x174/0x580 [ 1647.632538][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.639136][ T1102] [ 1647.639136][ T1102] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1647.646783][ T1102] __mutex_lock+0x19d/0x1550 [ 1647.652004][ T1102] nbd_queue_rq+0x373/0x1150 [ 1647.657116][ T1102] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1647.663289][ T1102] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1647.670227][ T1102] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1647.676743][ T1102] blk_mq_run_work_fn+0x16c/0x300 [ 1647.682292][ T1102] process_scheduled_works+0xa8e/0x14e0 [ 1647.688365][ T1102] worker_thread+0xa47/0xfb0 [ 1647.693476][ T1102] kthread+0x388/0x470 [ 1647.698084][ T1102] ret_from_fork+0x514/0xb70 [ 1647.703463][ T1102] ret_from_fork_asm+0x1a/0x30 [ 1647.708752][ T1102] [ 1647.708752][ T1102] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1647.715966][ T1102] __mutex_lock+0x19d/0x1550 [ 1647.721082][ T1102] nbd_queue_rq+0xc1/0x1150 [ 1647.726105][ T1102] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1647.732183][ T1102] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1647.739050][ T1102] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1647.745558][ T1102] blk_mq_run_work_fn+0x16c/0x300 [ 1647.751105][ T1102] process_scheduled_works+0xa8e/0x14e0 [ 1647.757171][ T1102] worker_thread+0xa47/0xfb0 [ 1647.762281][ T1102] kthread+0x388/0x470 [ 1647.766877][ T1102] ret_from_fork+0x514/0xb70 [ 1647.771995][ T1102] ret_from_fork_asm+0x1a/0x30 [ 1647.777308][ T1102] [ 1647.777308][ T1102] -> #4 (set->srcu){.+.+}-{0:0}: [ 1647.784459][ T1102] __synchronize_srcu+0xc9/0x2f0 [ 1647.789938][ T1102] elevator_switch+0x1e8/0x7b0 [ 1647.795334][ T1102] elevator_change+0x2fa/0x480 [ 1647.800651][ T1102] elevator_set_default+0x375/0x440 [ 1647.806381][ T1102] blk_register_queue+0x3f3/0x4e0 [ 1647.811966][ T1102] __add_disk+0x6cb/0xe30 [ 1647.816849][ T1102] add_disk_fwnode+0x100/0x3a0 [ 1647.822134][ T1102] nbd_dev_add+0x733/0xb60 [ 1647.827080][ T1102] nbd_init+0x15f/0x1e0 [ 1647.831855][ T1102] do_one_initcall+0x250/0x870 [ 1647.837146][ T1102] do_initcall_level+0x10a/0x1a0 [ 1647.842617][ T1102] do_initcalls+0x59/0xa0 [ 1647.847482][ T1102] kernel_init_freeable+0x29d/0x3e0 [ 1647.853212][ T1102] kernel_init+0x1d/0x1d0 [ 1647.858157][ T1102] ret_from_fork+0x514/0xb70 [ 1647.863282][ T1102] ret_from_fork_asm+0x1a/0x30 [ 1647.868565][ T1102] [ 1647.868565][ T1102] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1647.876392][ T1102] __mutex_lock+0x19d/0x1550 [ 1647.881506][ T1102] elevator_change+0x1af/0x480 [ 1647.886884][ T1102] elevator_set_none+0xb5/0x140 [ 1647.892265][ T1102] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1647.898603][ T1102] nbd_start_device+0x189/0xb30 [ 1647.903978][ T1102] nbd_genl_connect+0x1597/0x1c10 [ 1647.909523][ T1102] genl_family_rcv_msg_doit+0x233/0x340 [ 1647.915599][ T1102] genl_rcv_msg+0x614/0x7a0 [ 1647.920645][ T1102] netlink_rcv_skb+0x226/0x4a0 [ 1647.925968][ T1102] genl_rcv+0x28/0x40 [ 1647.930500][ T1102] netlink_unicast+0x7bb/0x940 [ 1647.935800][ T1102] netlink_sendmsg+0x813/0xb40 [ 1647.941093][ T1102] sock_sendmsg_nosec+0x13a/0x180 [ 1647.946647][ T1102] ____sys_sendmsg+0x54e/0x850 [ 1647.951931][ T1102] ___sys_sendmsg+0x2a5/0x360 [ 1647.957128][ T1102] __x64_sys_sendmsg+0x1b1/0x290 [ 1647.962592][ T1102] do_syscall_64+0x174/0x580 [ 1647.967722][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.974145][ T1102] [ 1647.974145][ T1102] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1647.982790][ T1102] blk_alloc_queue+0x544/0x690 [ 1647.988088][ T1102] __blk_mq_alloc_disk+0x194/0x390 [ 1647.993725][ T1102] nbd_dev_add+0x494/0xb60 [ 1647.998670][ T1102] nbd_init+0x15f/0x1e0 [ 1648.003353][ T1102] do_one_initcall+0x250/0x870 [ 1648.008652][ T1102] do_initcall_level+0x10a/0x1a0 [ 1648.014110][ T1102] do_initcalls+0x59/0xa0 [ 1648.019084][ T1102] kernel_init_freeable+0x29d/0x3e0 [ 1648.024889][ T1102] kernel_init+0x1d/0x1d0 [ 1648.029755][ T1102] ret_from_fork+0x514/0xb70 [ 1648.034880][ T1102] ret_from_fork_asm+0x1a/0x30 [ 1648.040164][ T1102] [ 1648.040164][ T1102] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1648.047391][ T1102] fs_reclaim_acquire+0x71/0x100 [ 1648.052890][ T1102] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1648.058827][ T1102] __kernfs_iattrs+0xdd/0x380 [ 1648.064051][ T1102] kernfs_iop_setattr+0xe6/0x3f0 [ 1648.069610][ T1102] notify_change+0xbba/0xea0 [ 1648.074739][ T1102] do_truncate+0x1c2/0x250 [ 1648.079771][ T1102] path_openat+0x2fed/0x3830 [ 1648.084887][ T1102] do_file_open+0x23e/0x4a0 [ 1648.089920][ T1102] do_sys_openat2+0x115/0x200 [ 1648.095141][ T1102] __x64_sys_openat+0x138/0x170 [ 1648.100520][ T1102] do_syscall_64+0x174/0x580 [ 1648.105640][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.112059][ T1102] [ 1648.112059][ T1102] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1648.120583][ T1102] __lock_acquire+0x1520/0x2cf0 [ 1648.125962][ T1102] lock_acquire+0x106/0x350 [ 1648.130994][ T1102] down_write+0x96/0x200 [ 1648.135766][ T1102] kernfs_unlink_sibling+0x6d/0x170 [ 1648.141529][ T1102] kernfs_rename_ns+0x48e/0x800 [ 1648.146903][ T1102] sysfs_rename_link_ns+0x16e/0x1b0 [ 1648.152627][ T1102] device_rename+0x110/0x210 [ 1648.157862][ T1102] __dev_change_net_namespace+0x1519/0x1fb0 [ 1648.164322][ T1102] cfg802154_switch_netns+0xbd/0x410 [ 1648.170144][ T1102] cfg802154_pernet_exit+0x75/0xc0 [ 1648.175791][ T1102] ops_undo_list+0x43d/0x8d0 [ 1648.181170][ T1102] cleanup_net+0x572/0x810 [ 1648.186118][ T1102] process_scheduled_works+0xa8e/0x14e0 [ 1648.192199][ T1102] worker_thread+0xa47/0xfb0 [ 1648.197315][ T1102] kthread+0x388/0x470 [ 1648.201908][ T1102] ret_from_fork+0x514/0xb70 [ 1648.207023][ T1102] ret_from_fork_asm+0x1a/0x30 [ 1648.212316][ T1102] [ 1648.212316][ T1102] other info that might help us debug this: [ 1648.212316][ T1102] [ 1648.222816][ T1102] Chain exists of: [ 1648.222816][ T1102] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1648.222816][ T1102] [ 1648.237305][ T1102] Possible unsafe locking scenario: [ 1648.237305][ T1102] [ 1648.244753][ T1102] CPU0 CPU1 [ 1648.250166][ T1102] ---- ---- [ 1648.255562][ T1102] lock(&root->kernfs_rwsem); [ 1648.260330][ T1102] lock(cpuhp_state_mutex); [ 1648.267531][ T1102] lock(&root->kernfs_rwsem); [ 1648.274814][ T1102] lock(&root->kernfs_iattr_rwsem); [ 1648.280103][ T1102] [ 1648.280103][ T1102] *** DEADLOCK *** [ 1648.280103][ T1102] [ 1648.288247][ T1102] 5 locks held by kworker/u8:7/1102: [ 1648.293530][ T1102] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1648.304463][ T1102] #1: ffffc900054d7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1648.314992][ T1102] #2: ffffffff9001ef08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1648.324306][ T1102] #3: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 1648.333905][ T1102] #4: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1648.343912][ T1102] [ 1648.343912][ T1102] stack backtrace: [ 1648.349803][ T1102] CPU: 1 UID: 0 PID: 1102 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1648.349822][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1648.349834][ T1102] Workqueue: netns cleanup_net [ 1648.349850][ T1102] Call Trace: [ 1648.349858][ T1102] [ 1648.349867][ T1102] dump_stack_lvl+0xe8/0x150 [ 1648.349891][ T1102] print_circular_bug+0x2e1/0x300 [ 1648.349909][ T1102] check_noncircular+0x12e/0x150 [ 1648.349927][ T1102] __lock_acquire+0x1520/0x2cf0 [ 1648.349950][ T1102] ? __lock_acquire+0x683/0x2cf0 [ 1648.349973][ T1102] ? __lock_acquire+0x683/0x2cf0 [ 1648.350010][ T1102] ? kernfs_unlink_sibling+0x6d/0x170 [ 1648.350025][ T1102] lock_acquire+0x106/0x350 [ 1648.350045][ T1102] ? kernfs_unlink_sibling+0x6d/0x170 [ 1648.350065][ T1102] down_write+0x96/0x200 [ 1648.350086][ T1102] ? kernfs_unlink_sibling+0x6d/0x170 [ 1648.350101][ T1102] ? __pfx_down_write+0x10/0x10 [ 1648.350119][ T1102] ? kernfs_root+0x1c/0x230 [ 1648.350139][ T1102] ? kernfs_root+0x1c/0x230 [ 1648.350158][ T1102] ? kernfs_root+0x1c/0x230 [ 1648.350178][ T1102] ? kernfs_root+0x1ea/0x230 [ 1648.350198][ T1102] kernfs_unlink_sibling+0x6d/0x170 [ 1648.350215][ T1102] kernfs_rename_ns+0x48e/0x800 [ 1648.350234][ T1102] sysfs_rename_link_ns+0x16e/0x1b0 [ 1648.350257][ T1102] device_rename+0x110/0x210 [ 1648.350277][ T1102] __dev_change_net_namespace+0x1519/0x1fb0 [ 1648.350305][ T1102] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 1648.350327][ T1102] ? __lock_acquire+0x683/0x2cf0 [ 1648.350351][ T1102] ? __lock_acquire+0x683/0x2cf0 [ 1648.350376][ T1102] ? osq_unlock+0x98/0x260 [ 1648.350392][ T1102] ? __pfx_osq_unlock+0x10/0x10 [ 1648.350409][ T1102] ? rcu_is_watching+0x15/0xb0 [ 1648.350424][ T1102] ? trace_contention_end+0x3d/0x140 [ 1648.350440][ T1102] ? __mutex_lock+0x30d/0x1550 [ 1648.350459][ T1102] ? do_raw_spin_unlock+0xf5/0x210 [ 1648.350478][ T1102] ? _raw_spin_unlock+0x28/0x50 [ 1648.350491][ T1102] ? cfg802154_pernet_exit+0x18/0xc0 [ 1648.350513][ T1102] ? xa_erase+0xc6/0xf0 [ 1648.350533][ T1102] ? __pfx___mutex_lock+0x10/0x10 [ 1648.350555][ T1102] cfg802154_switch_netns+0xbd/0x410 [ 1648.350579][ T1102] cfg802154_pernet_exit+0x75/0xc0 [ 1648.350603][ T1102] ops_undo_list+0x43d/0x8d0 [ 1648.350619][ T1102] ? __pfx_ops_undo_list+0x10/0x10 [ 1648.350635][ T1102] ? idr_destroy+0x218/0x290 [ 1648.350697][ T1102] ? do_raw_spin_unlock+0xf5/0x210 [ 1648.350716][ T1102] cleanup_net+0x572/0x810 [ 1648.350738][ T1102] ? __pfx_cleanup_net+0x10/0x10 [ 1648.350760][ T1102] ? rcu_is_watching+0x15/0xb0 [ 1648.350775][ T1102] ? process_scheduled_works+0xa20/0x14e0 [ 1648.350793][ T1102] process_scheduled_works+0xa8e/0x14e0 [ 1648.350820][ T1102] ? __pfx_process_scheduled_works+0x10/0x10 [ 1648.350839][ T1102] ? assign_work+0x3cf/0x5d0 [ 1648.350857][ T1102] worker_thread+0xa47/0xfb0 [ 1648.350885][ T1102] kthread+0x388/0x470 [ 1648.350917][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 1648.350934][ T1102] ? __pfx_kthread+0x10/0x10 [ 1648.350955][ T1102] ret_from_fork+0x514/0xb70 [ 1648.350979][ T1102] ? __pfx_ret_from_fork+0x10/0x10 [ 1648.351000][ T1102] ? __switch_to+0xc89/0x1420 [ 1648.351020][ T1102] ? __pfx_kthread+0x10/0x10 [ 1648.351041][ T1102] ret_from_fork_asm+0x1a/0x30 [ 1648.351061][ T1102] [ 1648.815571][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.823512][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.871277][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13533'. [ 1648.883884][T20882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13533'. [ 1648.963770][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 1648.984338][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 1649.431437][ T1102] IPVS: stop unused estimator thread 0...