last executing test programs: 38.036967533s ago: executing program 1 (id=3020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x8000000}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x1b) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 37.68016231s ago: executing program 1 (id=3022): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xa4}, 0x8000000, 0x0, 0xff, 0x1}, 0x23) (fail_nth: 3) 37.485054676s ago: executing program 1 (id=3024): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x3, 0x40, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x80, 0x5, 0xfe}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000006c0)={0x564, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x100, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x104, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x104, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x8041) (async) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 37.209526028s ago: executing program 1 (id=3027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x80, 0x8, "1bad1edfe58390b5dbccbc4a5e64a487ba3325198b17ddfa08cf36e99b3228a4c9e75f75339d22aa4709385efdc536ea49b6a1a954155c1ba7a71c8cbc0076dd44594c39c4b368b777298ca6e583a292c2582140c32205a2acaf16626527ce860d0177812c11e28751dc5e62e158ddf588297d12e4dc3348699325a0"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x15c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x124, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x114, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x56, 0x3, "72c591b3e3e75486ccca4673d4f68bc93480f18649d66773a4d375c5aa9f06a371c281012c73a0144950ad824169b2ee4219fb34d223161f562b13b742d1974ce1fa8b2c9e6ee41ab2016de71cbceced0ef1"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x97, 0x3, "c85e2b9a182ea7657598d21d9289dcfd3f33e1bf1cbee2f856d13a9b2aa0342ffeb68f5de72dce66367e505933b821a125d9e121d69e6f9fcd8d9006eace5a94694c7137a0ba5188e7060f37d2373d9364f1bc8db0619249f3200b79c565e0662853c58f4a66a8723a6d69517ecb7600c64e573d08f1ad7f4e5af4f2bd50fa9d710ff920d069b52ac910f0bceb9512a09e0b0e"}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x26c}, 0x1, 0x0, 0x0, 0x4850}, 0x4000000) 37.025265771s ago: executing program 1 (id=3030): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x0, &(0x7f0000000040)={@align=0xf, {0x5, 0x1, 0x7, 0x1}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x101}, 0x2, &(0x7f0000000340)=[{0x3, 0x7f, &(0x7f0000000100)='\x00', &(0x7f0000000140)="24cd20f8a7909383813045414ce69c1934b727168c9d63c95a34652abc1ef0c245ca81a59f41c099b8234449329df837727b57b05d03434dcadfa2b20c98c465c19f8df565fcfa6ba006ce4e1405ad259e6691e0f20196e4465eb139527813e3d217dc9d8c43e6eb2c92e2d64839a88dd63c14c79ab37c7932e2e191374ff5847e3900321b3157e56914ae901c3d7c071b70ad7e4d9c3ade5e73d2e9613359c652641d5bdab47188fe10e136fdcb4aea", 0xb0, 0x30}, {0x1, 0x7, &(0x7f0000000200)='[}[}$}#&:]%)\x00', &(0x7f0000000240)="4fd84b82d2ec69bf618a6bd0851512ebf8d2bbfce179da66a97dddc808a426f3763d1ccaf02d5907ae7527fc92886bf034b8cb5e1186e05c6d58b6a8b297fc1d2b0650aa934ef133202407f65a2f6fcc3a63510c6615b14e12622ac10a156f06e27a40a3e78dcaa364f9ff00b800ab2a288c3ccd3e5d8f036e55b151a3828ca7cf446690b66f846d280923f84cc146669d2fab238e30e670a3a91d5bd67efabd4ed23e415d85947ef8a45a235946c9d0453f23cd5146c13e7fff00db99109acc90639452b0902a2b2ad88658b7dce57efcf835a5a273f5b50335924058ccffe333094cbcffb8b885ffbfeb7b6337e2f42e5ee57c50de", 0xf6}]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)={0xe2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex=r1, r0, 0x11, 0x20, 0x0, @void, @void, @void, @value=r2}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r0) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r2}, 0x4) (async) r5 = accept4$phonet_pipe(r0, &(0x7f0000000580), &(0x7f00000005c0)=0x10, 0x80800) pwritev(r5, &(0x7f0000000b40)=[{&(0x7f0000000600)="285501f684a6900cb97babd7e8b763", 0xf}, {&(0x7f0000000640)="d680f0290c69cabdb0700690983b27e2960a8796cea6ed6a26b620adcae697a402fc128ae3f59fc6", 0x28}, {&(0x7f0000000680)="18e54aec486cb7d7a2318095e521f8c1d41e097778", 0x15}, {&(0x7f00000006c0)="c8b76ebe718549bebbc736a0c37bde88bc4fb6b10b723bad911a82fed13b39b8eaa13116d0e577e573106cdbec97c18cdf827c74f3874efa702a1be580122e020125f0efe00489e30049e01f3e448634f79cdc4526e1e649d376902708e1b79f36bd6fbf4c1a4a26fbb75a69", 0x6c}, {&(0x7f0000000740)="e7770a67aa032fc0e26ef97c7165195e210708e4ce73a9a331812a2f1ffa39e04b04ef6a73147c28885174deadc460fadd80caaac2d7e75259ea43fed70c1e20bc5b3872f21f0bedda7ba5416e3adce252f1ff46b46b12a8f514beb498c976c7b3114e145f25ed1f3c40f3ea478ef8475999f8f968f77f95bc02270a897f32cda07784e3f657c7708a3ea422172ba6fcbb46f7e3d13868ae9f911885992de7a93494d1db660b32cbaf5ceb72592ff3624f2b666c1288896cf8fb6459c35c56cfb7b18efb557017ae482bb233392c3259ff0bde83570e03221a8bd4bf6e96113d59", 0xe1}, {&(0x7f0000000840)="49a7bce907dff87e85c1b1393b382c2e1c9df2e1c97cdcc24d26c0993d9ff5a8ea2383fd3f545a9cd6ba88fe17c8b11f90852bb789cafbb33c3a4bbeaa5d855fe9477573ef46567eba1c75ad536ec35d0bca94ccbc1691c3ccfd0b40c6acf387a22a29b4a09a28e423c7ce4ab793a37e1c568f51b06b0a3c04934e04eac1cc07ed07a643f9d9b0e6010f55192db2b4dd7b75c146c15ef0d6d16705ce942694c73b945df39b9e0f43fc5135", 0xab}, {&(0x7f0000000900)="6d116678410d5d014ecd7718212aa34c52b05e7c105166027f4dad6fadd8d241fe9c99167b385b48971354ef3a7af81dd253d7383ea91ac2e2fcfec65869599aa62dc119d02cc72e759f7ca6e40afb318b73697806c4f639944c37925e7d05119b981ccff07ba5ce159941019f3af68befde3a8fd89f72e3ffdb9388607983ded00b79d09b69704fc135896e7b14dd9a44261217d32627b4e5e0344f684dbfd04e743fedd15874382675bcfea2a9a5f04b0983ecb0de9f33a6b9cbadb5ab76841bb3d4bd754fb057f4918ec1a9b6c2c2fb4e824c1772c0a9e77ba21df2700cf3a59a7b97abd8c42409cfe03b", 0xec}, {&(0x7f0000000a00)="1c1c28f1f89e4a98353c9e9a3262e34f5ed0579e23e6b7dddf9de7501b71", 0x1e}, {&(0x7f0000000a40)="5e603171661b890242bc0854fb731ca292061c7025056524b71717243761e920555ec18635b7784f33dfa14d379314f1163b4a56cefaac41cd6c7c3093f9e1dd7d9c8589895b6b6c508cca22a39f50f3145dacd127a5560fbf2e791e3c9312d7ec02a44f9aa0d790416fc93563ef665cf80167c3fcd19bd63dc337ea58172a12da267c907ee4942283fa62bcc77b20bc1e9c34163aeeb1fc735377458cc27b997b981bfcd7d9386cb7ac376d38dee2d21f67a776cd7a5b7cf6f4e08c47f24b6b2d06d657bab4a40a", 0xc8}], 0x9, 0x9, 0x194000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x84237000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x18, 0x1407, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x114}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001340)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000000d40)={0x590, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x358, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "bc228da8d55d6c9d27f60ed5117386181f87f6e96fa3965f03af5c0c38afcf3aa56d16947ed33b8a9054b1b2d1409c3f4cbd45120ac200a146c6c3acab2f87153adb30284648aae6d6c391d3163298670c777ca84e06f9aed7a82f6ad1b159f78015405e5a578a7d4005cad11c77a6d672c12a0465407d39c72b9e5cc39af4a2a7d42b55229c92731f3b9c6c1c05937db4497fd345915ec28e008e345aebfe14a464648d07e3c4b75052e8aeabf5b92ff71788de4797538358d428ec802cc8c7cf3282c16e0fe16441c765d8da832517ba9a7943e8e5ebf417"}, @ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "c972ce652c5307c036a98a6b2989005775b660274a37a3d5e630a24beb44af21557be120e99f75421ca05f6ae97ea9c0e3ffc188b15fec7490d588e02f2a6f350d4ed6ff461c4e45e39696c44e2374fa2609a01a5862eb4f6b1e89368f306dc625c9a828b163978c2345e516b7c009dc593ce03140e774c2c9226ad669c018d6e702ad4f0de9bdcf2e12c60e8c62d3181df351b1179b1e8e74d55730ddab42f3375556564d8860a23900424b5a7a5fce0add958627c87613d700e1b636e8b5218f548d81eb8af2c8ccfb6ce26053c29274e21ebfe184fbc351fe439d54dbb2cc11eaacbb93d212e36a431a539cce0b00"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "2c6966152154b995e6acd141dd5b1b3efc58ba778ecc2e8e255ca367a9d31aad0efc821f4d3db22d0ef852f44c5a282932bf67e2189368b428e6c5997586945393feb883981ea09ebc1813e0ce3a9c7e2efc43b9da45ed696c2196ecff614f6d067643a270733ad6de2ca9007b416f857f13838cbcb005e1eb2c3c79708bd1b95b33e2987cca88069d5312e9c0313fe7dc4731f66ff996beb17f1cd3de6ed3473c320dbd8b09e630ead7a81ec98709011e488140f59b69600f8902e900c4eef78a017409e50ebdcc70735cea9b92b5cd68811c2d06d135cff283a0a0742ad6b312adb9128a227c1a380e780457c915b9cb82883ed314"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2dc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#\'/[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}]}, @ETHTOOL_A_FEATURES_WANTED={0x224, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '[}[}$}#&:]%)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '[}[}$}#&:]%)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf80c}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x610}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "844b550cddb07f35918f8695a2d7de90f2d0fa72f9b60ceda93993dc4d11b1df01aeae2bd9133d3d585461a23c324ad762fdbe476c16b3236f6fe4682ea8cc4ac0582dd8efd6ce8ca4b52a56167f94b4915d7147ddea4082b1074e929558bb62036bb51054af8b2ee47672d57a74465cf9d2981ce6ad54cdd7232799c3dd04c1638dbcc2618427df0e32e0dedfda63ae2c51536e38fb48d92ce35bcc9f927d225afadb624909f5f4889edd8436caba37b7f1df"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}]}, 0x590}, 0x1, 0x0, 0x0, 0x4}, 0x48c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x2c, &(0x7f0000001380)=0xffffffff, 0x4) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x5c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001540)={'vcan0\x00'}) r9 = openat$cgroup_ro(r0, &(0x7f0000001580)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000015c0)={'wg2\x00'}) (async) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001600), 0x200f80, 0x0) sendfile(r7, r10, 0x0, 0x7) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x48d0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@cgroup=r9, 0xb, 0x1, 0x9, &(0x7f00000017c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x9, 0x8, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000001980)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x24, '\x00', r1, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x6, 0x8}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001a00)=[r7, r9, r0], &(0x7f0000001a40)=[{0x2, 0x4, 0x4, 0xa}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001900)={@ifindex=r3, r4, 0xe, 0xc, r0, @void, @value=r14, @void, @void, r13}, 0x20) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001c00)={r0, 0x0, 0x29, 0x0, &(0x7f0000001b40)="fe86304697d72131729accd7e433f5d46db34171c8212d70719ac2e36d0ff4100ea362387f16cad786", 0x0, 0x81, 0x0, 0x74, 0x0, &(0x7f0000001b80)="9da5db4558c183a26f4ac47ccbcb5a9e730388ef6ba23c30e2d5d19323d86303bab7d5758395107012eb6751c44d52a1b2144ab32d668cb1701b96592cea78bd1eeb7cade173dd62b13fb18b9991073f6ca837fff4e70f48dc803b2610c005cc04964c21eb0eff83b15c1ab2a86a00b88ceae7fe"}, 0x50) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001fc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f80)={&(0x7f0000001cc0)={0x294, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef400000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42e2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c00}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x678000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ea6000, @loopback, 0xa07}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4004000}, 0x44008010) 36.844961055s ago: executing program 1 (id=3032): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6f4a75c703db114355c1c7fc97a7df899732605e0be69fda0450d1f487f40bdd962541a9b1e2feec7cfb655c5648170680367877fe0762ef369827730052c37d940c96aca81da9c68f5c5d8bbee8a", 0xa2}], 0x1) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7daf151b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x3, 0x0, 0x3a, 0x0, "5ec800000000000001fabcaff4b8d5eb8c461442bc42b8e0662749302c1ffcd1d1190000000000000002000000000000000000000000000300070000000000ebfff800"}, 0xd8) 21.759769975s ago: executing program 32 (id=3032): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6f4a75c703db114355c1c7fc97a7df899732605e0be69fda0450d1f487f40bdd962541a9b1e2feec7cfb655c5648170680367877fe0762ef369827730052c37d940c96aca81da9c68f5c5d8bbee8a", 0xa2}], 0x1) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7daf151b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x3, 0x0, 0x3a, 0x0, "5ec800000000000001fabcaff4b8d5eb8c461442bc42b8e0662749302c1ffcd1d1190000000000000002000000000000000000000000000300070000000000ebfff800"}, 0xd8) 11.463761694s ago: executing program 3 (id=3169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, 0x0, 0x4008000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000280)='sit0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x11) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x11) sendmmsg$inet(r6, &(0x7f00000053c0), 0x0, 0x40488c1) close(0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x16, 0x14, 'a+\xad\xc5\xcd8\x14.\x00'/18}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl8021\x01\x00\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x48840) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7d8a7a81d11ca7e1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf2505000000080004000000000008000100", @ANYRES32=r8, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000081) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7d8a7a81d11ca7e1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf2505000000080004000000000008000100", @ANYRES32=r8, @ANYBLOB="080004000000000008000400ffffffff08000400ffff01ff0800040001000000080004000000000051ce4a1384de4d4af5d413d95c0309e494626cb9cca6f8eeff1563ba8f539af73bfe3318ba6c06ddf5e7b920c6ed8fc45e6cfe5ac3c82949122dfb844c0544a78a0df753dde9e9e39927cdd9803b7ea2efc579ce3a47f4be51776d521e0c006bccc79ce29d2d1b6c59b0e5b9ee2bf0feea7e7580a3509f1a93eb83334d03693eff32eb23c3aeec855330127bfced77c89e9b6f0e47d3ad2620f0d4592dce9c064a14286a9599a0d86550372bafbf0a6fe1e8405db2873f3c83304b1a47e800f85d09c1e53222700238a17b223fb13800c2e8801ac7b97ccb46487cddedcee9603ac09f5150b82aa18def6781b15d0877929d05becffa93f78f9c6d93"], 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000081) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000a80)={&(0x7f00000001c0), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x3, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x3, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x24}}, 0x4000014) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x24}}, 0x4000014) 10.795285005s ago: executing program 3 (id=3175): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="f1fc527896081a8dd42a1f05f6e12477e9262eef79297c98fd9141a2b4e2f664d27f693db5f7c907e4f9efbf1e5d774d267550a2328746ec84050bb815d8ec180ead316cece9f8c58d1f8770b497b5a62ff9a300b1efb2c724fd778bfefe732b9c890ca331ab4ae114f8c49f11302a031979b04d27d297f3bfc2b0f96261482bd5d3e22f786da7114960f84933ea76f14b637bf0c2a142e91a3bf570ea50874be774a093f37581b3821c78977dea36a8691616327c37e7e8b1075ef72e738146bc70"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket(0x1, 0x3, 0xa) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000280)="e7f9fcb8efbb61b737264ee2ad5816cc2721b93e8083542f75f52f1fbae0763a9b870d1c092e981f21f2b5eb584ee82d42276efc23deae3e046dd992670de92b8069c6067e8bb967a3cbda6bd31b03ee54639e5c356094719cf2b04a8cb960c7c407c6a09d325d1697984425c3448014b5483d8ec91545fbae75caf34643346ea174b9ee47f1d9bfa5a6dc9d8ba669a4ce0482e3684d08bf1bdd3808dab98be797eee121d17e16bb323b455d0b6f8687230fe3a05455e619fe1e56008461d2584046735c3ffe8eeee74c") r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000a0db2cfc302339e4130429426f781bc2bc2471204773a51f2d0682f8ffc8f11d05075aba1742c791fe19386b02ac084ac3a6df1adeb7a767561a98f7a83b5a88b5c49f644e1e97e575b155aaa5fb61d03611b2a70b8d2d754d6cfb7fbf0292034175ccbd2a0a2bb0e29e73c9658b7fa395be76e34383bac50e78d0c428105c9aa81fbc9e3ab6a0df839f0809e8ac81e0c087511242f8c0c4cbd7c098a4596b7a91928759f5e8ab4f8efb4e1ecfcd2a4d653897a339e9b02fa330bc4577b3445e", @ANYRES16=r5, @ANYBLOB="01032bbd7000ffdbdf2501000000080001001400000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000200000004000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c890}, 0x44) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x40480c0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r8, 0x89e0, &(0x7f00000004c0)=0x8) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x11) 9.822428796s ago: executing program 3 (id=3183): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400104", @ANYBLOB="b2"], 0x14) 9.336710582s ago: executing program 3 (id=3187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000380)=' ', 0x1) tee(r1, r5, 0x8f5, 0x100000001000000) write(r3, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000006c0)={'nat\x00', 0x0, [0x4, 0x8, 0x5ce, 0x10000, 0x7]}, &(0x7f0000000780)=0x54) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400", @ANYRES32=r7], 0x40) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40409, 0x4000}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4094}, 0x40080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40050) 8.92605846s ago: executing program 3 (id=3190): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="000000000300"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8ede", 0x4}], 0x2}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 8.197827406s ago: executing program 3 (id=3192): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}, {}], 0x2, 0x7, &(0x7f00000000c0)={[0x9]}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000180)=0x7) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r6, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x49, &(0x7f00000003c0), 0x4) 5.535038557s ago: executing program 5 (id=3208): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="f1fc527896081a8dd42a1f05f6e12477e9262eef79297c98fd9141a2b4e2f664d27f693db5f7c907e4f9efbf1e5d774d267550a2328746ec84050bb815d8ec180ead316cece9f8c58d1f8770b497b5a62ff9a300b1efb2c724fd778bfefe732b9c890ca331ab4ae114f8c49f11302a031979b04d27d297f3bfc2b0f96261482bd5d3e22f786da7114960f84933ea76f14b637bf0c2a142e91a3bf570ea50874be774a093f37581b3821c78977dea36a8691616327c37e7e8b1075ef72e738146bc70"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket(0x1, 0x3, 0xa) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000280)="e7f9fcb8efbb61b737264ee2ad5816cc2721b93e8083542f75f52f1fbae0763a9b870d1c092e981f21f2b5eb584ee82d42276efc23deae3e046dd992670de92b8069c6067e8bb967a3cbda6bd31b03ee54639e5c356094719cf2b04a8cb960c7c407c6a09d325d1697984425c3448014b5483d8ec91545fbae75caf34643346ea174b9ee47f1d9bfa5a6dc9d8ba669a4ce0482e3684d08bf1bdd3808dab98be797eee121d17e16bb323b455d0b6f8687230fe3a05455e619fe1e56008461d2584046735c3ffe8eeee74c") r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000a0db2cfc302339e4130429426f781bc2bc2471204773a51f2d0682f8ffc8f11d05075aba1742c791fe19386b02ac084ac3a6df1adeb7a767561a98f7a83b5a88b5c49f644e1e97e575b155aaa5fb61d03611b2a70b8d2d754d6cfb7fbf0292034175ccbd2a0a2bb0e29e73c9658b7fa395be76e34383bac50e78d0c428105c9aa81fbc9e3ab6a0df839f0809e8ac81e0c087511242f8c0c4cbd7c098a4596b7a91928759f5e8ab4f8efb4e1ecfcd2a4d653897a339e9b02fa330bc4577b3445e", @ANYRES16=r5, @ANYBLOB="01032bbd7000ffdbdf2501000000080001001400000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000200000004000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c890}, 0x44) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x40480c0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r8, 0x89e0, &(0x7f00000004c0)=0x8) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x11) 5.456624105s ago: executing program 0 (id=3209): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x44, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '#[/\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'vlan0\x00'}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'TCPMSS\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x41) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x111, 0x4b4, 0x150, 0x700, 0x248, 0x278, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [], 'vlan0\x00', 'caif0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e22]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff], [], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000000e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000cb0400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="029d00000000fffffff50000e1fe0367e74546e0", @ANYRES32=r10, @ANYBLOB="4000308014000400403a050c5baee2004ef2b6d713459a7a20000180080001000000000014000380080002000200000006000100000300000500020002000000"], 0x5c}}, 0x0) 5.115656845s ago: executing program 4 (id=3210): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x9}]}, 0x10) r3 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @random="3cdc119848ac", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @multicast1}, {{0xfdfc, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x4, 0x0, 0x8, {[@md5sig={0x13, 0x12, "4215de32491b2e2007220f6b45fd046f"}]}}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x456f, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f00000000c0)) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 4.91431164s ago: executing program 0 (id=3211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_LINK={0x8}]}, 0x64}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 4.903184408s ago: executing program 2 (id=3212): unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002120000030bb7e80280001116d6163766c616e00200002800800030000fc00000008000100100000000a000400aaaaaaaaaaaa00000800052fdbe1f14551129db22022cc8955904b61c1a58c3bc0a464854787ad91ba28bd7f18090da08f935d4fb77a99711390af0267480603c59d341601031a6e18544030387ca47928b8054fd7757f7e6915df6ff330b73a25a46269d69f704b905814522460b35489632e3bd291d1c1e7920aeeb306f82a96783158c3fdea590600aef264d5110f52044982befdd166d4", @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(r5, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) recvmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r4, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r4, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=r9, @ANYBLOB="0600150008000000200016801c0001000002"], 0x60}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002f0009002abd700000000000040000000900118031e3e05e2f000000877756a700a00ffa86ca5365d7e10846398823b965f49a70bbc9e3c88f616b128baa5affe485"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0xe400b000) 4.730362528s ago: executing program 5 (id=3213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd27, 0x25dfdbfc, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000380)=' ', 0x1) tee(r3, r8, 0x8f5, 0x100000000000000) write(r5, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000006c0)={'nat\x00', 0x0, [0x4, 0x8, 0x5ce, 0x10000, 0x7]}, &(0x7f0000000780)=0x54) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000001f00)={0xe4c, 0xc4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0xfffffffc) setsockopt$inet6_tcp_int(r12, 0x6, 0x6, &(0x7f0000001140)=0x9, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@map=r3, 0xa, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400", @ANYRES32=r10], 0x40) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fc11142603600e12080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189ce16277ce06bbace8013cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4a53f5aeb4edbb57a5025ccca9e06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40409, 0x4000}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4094}, 0x40080) 4.552616803s ago: executing program 0 (id=3214): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x491, 0x0, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYRES8], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000900)="80f8ad48cceeba31c500000c0c00", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000007c00)={0x0, 0x0, &(0x7f0000007bc0)={&(0x7f0000006b00)={0x14, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x6e) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_modinfo={0x42, 0x2, 0x101}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000000)={0x14, 0x4, 0x7, 0x101, 0x70bd27, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 4.424832582s ago: executing program 4 (id=3215): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket(0x2, 0x3, 0x66) 4.162227887s ago: executing program 5 (id=3216): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x7fff, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x5f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 4.050496357s ago: executing program 5 (id=3217): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x420, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, 0xfffffffffffffffc, &(0x7f0000000040)=r1}, 0x20) 3.920075277s ago: executing program 0 (id=3218): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8699808881c51852e4451b57d037ad3c045942824251d7d17b5191584bed4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649afbc1d19cb307b3"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x402c040) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 3.873286813s ago: executing program 5 (id=3219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001d40)={{r1, &(0x7f00000002c0)='\x00', 0x240, &(0x7f0000000300)={@align=0x6c8a7fb5, {0xfff7, 0xf6cb, 0x8, 0xaf}}, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x3}, 0x4, &(0x7f0000001cc0)=[{0x3, 0x1, &(0x7f00000009c0)='syzkaller\x00', &(0x7f0000000a00)="32984d1fc9b9c097c25d78657296cc3ab1501ef37503bb2a0f1df0f4689bb1d893b0eb7cecee3884395c567fff99c2", 0x2f, 0x38}, {0x2, 0x2, &(0x7f0000000a40)='&\x00', &(0x7f0000000a80)="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", 0x1000, 0x20}, {0x1, 0x0, &(0x7f0000001a80)=',}\x00', &(0x7f0000001ac0)="8d2e8d0b5c61867a575e732560733fbd0f119bbd846959b695d07da4ce19035e23271277c3f903e0c19568d11524bf935f86814e0dedd33fcd3fa57323d0ec327c40cfd5ef37d1db549eac4defcff87d2344d8bdb0ba6b05b1cbee847317ea51952ce024a215aadbcc22f5dc3e243df8cb46d7fbaf3342dd49f59ca2c20ef8b2007f2431f7822ede3e0bf418ec954eeeb3c1e9a1c4d200f6ba70393da5", 0x9d, 0x8}, {0x1, 0x1, &(0x7f0000001b80)='(\xce\x00', &(0x7f0000001bc0)="b0a2db69b1084fb537b29dd9eeaa3c65ee253ccea0c09875acb2e9bd57bee3b2cc996fba376c14f3317f427b09a86228c0476ae4b60b42232804b35c92216145502ac4655d87ae9e617454a56f8289119f6806e86a9d6bef32c57cd142716cbff461cfc8a86447c5018376c012dd801dd1df74826109f41e01ac000a7d5a8cd524fdb91eba65ce83a2ed8dee5da72230d72bf99c7d5307d3a68ff77135e43f44826db955c95150252a015a9f9bad1766c39f1fbc58f2a94c6a4d4c4904f527bdcb76", 0xc2, 0x3e}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r6, r5, 0x0, 0x10000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@bloom_filter={0x1e, 0x0, 0x0, 0xf8, 0x14, r4, 0x80000000, '\x00', 0x0, r6, 0x3, 0x0, 0x4, 0x1}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xb, 0xa7ea, 0x0, 0x6003, 0xffffffffffffffff, 0xce8, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xd}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="0600000000000000000000000000020000000000", @ANYRESDEC, @ANYRES64=r9, @ANYRES8=r2], 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x1e, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000500)=""/164, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r10, r11, r12, 0x1, r13], 0x0, 0x10, 0x6}, 0x94) r14 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r14, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r15, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xb}}}, 0x24}}, 0x0) 3.785181139s ago: executing program 2 (id=3220): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500090c00030025bd7000000000000700090078010000b9978896e7473015529e31627e9e48060001aadda31e9a033a9a62410ee1357b62f5321e46c0834e0cedeb6a97ec7300010014004100000002000100000004000100000100000000"], 0x60}, 0x1, 0x7}, 0x20000030) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) 3.648211487s ago: executing program 4 (id=3221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000a07020000f8ffffffb703000008000000b70400000000000085000000580000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.527823987s ago: executing program 2 (id=3222): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r2, r2, r5, r4, r5], &(0x7f0000000840)=[{0x2, 0x4, 0x7, 0x3}, {0x1, 0x4, 0xf}, {0x4, 0x1, 0xe, 0x5}, {0x3, 0x1, 0xf, 0x3}], 0x10, 0x3}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r8, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000ac0)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000c00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f0000000c80), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00T'], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000100)={0x2b, 0x3}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES16=r9, @ANYBLOB="aa71bcd5eb32e70fca0a3b6ab411db8a87a286b940e0a65ca097e466a37c1fb613bb29febb427518bcc3c73d", @ANYRES16=0x0, @ANYRES64, @ANYRES8=r6, @ANYRESHEX=r7, @ANYBLOB="3cd38eff74e1286c50d91dfc576d4ead4db8c3befbe211a79bdf54c52422c83b9a4d92035a29e7807b7584fc9922c5cb39427fd7643ecbb64f1ab462e17b"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) write(0xca, &(0x7f0000000040)="0404e7", 0x3) setsockopt$inet_tcp_int(r13, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r13, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r13, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r13, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d63", 0x90}], 0x2}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000002c0)="e2b966e04d4211ce043c3986196e3a6db34c8e7afd59efd1a6a98d5659a9724af36cbec5b46f10e124408953794c8d271f4713983d418c918d385521062ca1cf7c59c1cba5300c7eceec23c5a14b3f6fe1bcfe4085b5443960c222f8bdabb3003637c5140cc1129f72fa1876adc0264502f8a0017ce5e7f06b6d33d26a0c37e38e41673a16e661e3ebb8663893b22e356f825ee25d4dac55d5d0aea4d4e555db0b77982ace88", 0xa6}, {&(0x7f0000000380)="186738cd85a4c1a92a1217441fadc223", 0x10}, {&(0x7f0000001200)="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", 0x2b2}], 0x3, &(0x7f0000002480)=ANY=[@ANYBLOB="10000000000000000000000007000000110000000000000000000000010000000b000000000000001100000000000000000000000100000004000000000000001400000000000000000000010100000005000000000000001807000000940400"/112], 0x70}}], 0x2, 0x2090) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.524736573s ago: executing program 0 (id=3223): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000ff00000000000009000000000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="00000018010000696c6c2501000000002020207b1af8ff00000000bfa100000000000900000000f8ffffffb702000008000000b7030000cbadc0008500000006000000180300"/84, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000", @ANYRESHEX=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) pipe(&(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r7, @ANYBLOB="83f68eb55ba23bfb3624a60fb84c9660f0ef6110730bb547f5505eadc1f43925d4ad05acdcecfcec276d0c3dcfb6a7c639055e6743a74efb7f5abf6170f0c60655de63405a23345dce3f16bb4d43e9570381d86947744dc2c494a699c284f82f8212dfe7f52342e33b8590a2e73c94a2c52c371f0cd352ed45de1d13c2108b3f44d40d844cf9e18e644c64dbeea25359044c0522a90a85417f87f8ea1a297c06058161b4565cdb3c8cfed21ca27d1bbf00d05976427f71fd85bed09b733a3db35657cfd4960effbf023f8ff28b46a49035fa5e209bb7a6a978da6b362c06f3c5afb69d312840778f834f9738953bfe65560dea7ffd569c6e1c2d37e7494f748b34585c4f11dd91d98e72d41852f07596690b41ddb6edfb2b1d4898dd59e13655119900"/300], 0x3c}}, 0x0) write(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff1800", 0x26) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x1a}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0x0, 0x26a9e3a96bccb3de], [0x0, 0xffffffff, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000], 'syzkaller0\x00', 'wlan1\x00', {0xff}, {}, 0x73, 0x1, 0x5, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x6}, {0x4, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) r12 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 3.485448088s ago: executing program 4 (id=3224): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="c30803000b2ebe263000128008000100736974002400028008000300e0000002060010000000000006000f0001000000060011004e230000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.327364556s ago: executing program 2 (id=3225): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x15813, 0x0, 0x0, 0x10000}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e008d2a00000100000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000040000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e008d2a00000100000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000040000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) writev(r0, &(0x7f0000006280)=[{&(0x7f00000041c0)="d2cf43efec9672f8d433a1a2d1ac1ba483b3c377abd1c40900dd48e925c9f170621fba494945b9a6748709715dad1c5beb3783165516391072f540d5a656c99bee9a9af58e5041b58b21777bf6506f4fc22990d90b75b8f4acffea8a3caa7c291dc1b90291986a793eaa472736f5d52a2a3e6aecd3c3519699b1469e5ee3b434ac8cc30b3cda1a88664a50ce0e34f0a81d8454e8d79d76a832a88b86759fc04bc99f9fc2cf513ac0066a85c87dde365037ca2c4b44a7d521157f6799f942a5399fddd6ca6783ed0473c99460ed74f5a3f350dd3c87913b2d498943fb48d9db337d340530c4e6dc18be1673e171e6d0c13c5029edd475d5accc1adf1b9480a4ec4ed64dbb89d52135e3acc4ee6aae82fad39bc2b566c232a83228a841a0ddd0d0a423e000819954f174bc44112631f1d055baa2df0c2ac9a6092e7079b964ad217f7b3c0a9f294c36b341071a8ff6c9d2fcdd6bcd34c4741e3019bbd02d6184318b2955aca061fbe0f81f8428d5ef54fc54a8a0a53e09de2190fe95436ee38f", 0x17f}], 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000fcd9df2508001500020000000800010000000000080003000100000008004a0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x4) sendmsg$nl_route(r6, 0x0, 0x8000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000007a40)=ANY=[], 0x3a3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) socket(0x800000000000009, 0x80000, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES16=0x0, @ANYRES8, @ANYRES64=r1], &(0x7f0000000500)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES16=0x0, @ANYRES8, @ANYRES64=r1], &(0x7f0000000500)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r9, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r12, r13, 0x4, r13}, 0x5) 2.991227216s ago: executing program 4 (id=3226): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x7fff, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x5f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 2.85736378s ago: executing program 4 (id=3227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0xffffbbff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x14) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x600}}, {{0x0, 0x0, &(0x7f0000000380), 0x5}, 0x10}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000000000001b2, 0x48, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x23, 0x5, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=@newqdisc={0x4a4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8, 0xfffb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x474, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x1d, 0xf}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x2, 0x17, 0xc, 0x8, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "af5481d549a533bea621cce46d1f541f1f895fc6c8f6d02589f87b94337f66508203f89c6ed9fe29f3ddc1cea32755d878dbe9028fb9e1d0e35bb768ca391827d245c95183c0ad7944a103261c5ff4518a4584327f5f9711c9220369e6e5a85c3d311cce48af774fee51bf7f6b240a6585ca11d2230da235b9046ac6e86be0b005924a7104d3408b636123857a280c43ec083623e1d8580cb1b03f7764391b525770d2ddecd62e948705be615482b0e6c7ee41a10bc9f9b35e30322b78a3fbb0df59e49de872c947b9663bc9f759bdd5b2f019a7fc9c6844ee1dacf82cd49243fa1cb6dacc85f488c3a8664281ab98fe9498856c89493eca6d95595e74620959"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x1, 0xb}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cd2cf5df7773f7a4c72ae167485315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb1d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038d88646faa6e9053502000000e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55f9b9881d15633717817c7383e41ec2f119a6a6364d68900c1cce4a3b3225a9009e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2a783f691be9eba75cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221004000"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffb}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) listen(r10, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) socket$kcm(0x10, 0x2, 0x4) 2.690447497s ago: executing program 5 (id=3228): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x4, 0x80, 0x6, 0xffffffffffffffff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'rose0\x00', {0x2}, 0x80c}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x290, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1c0, 0x378, 0x378, 0x1c0, 0x378, 0x3, 0x0, {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'rose0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x24}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0xab9, 0x0, '\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0x1c0}, {0x28}}}}, 0x2f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000f90100000002004e21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fe7ab75c8e72b34bb3fff93203b3876fe8e21442d867432810245ce328408be8abcfdbd2f8d3ede910d8f46f6e802622a3d59804be6ed4cadf1b0125146e8ff68d9a1a3b8f0b2cfef9c"], 0x110) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000e00)={0x80, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="1cdd0b4d31c5f59e85734a2bdf441a0aead7fcdc32bb9f88018f"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x860}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000004c0)=@ethtool_ringparam={0x10, 0xfffffff8, 0x5, 0x1, 0xfffffff8, 0x8, 0x1, 0x3, 0x9}}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302082100000000080002"], 0x30}}, 0x0) close(r5) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r10, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 2.500346964s ago: executing program 0 (id=3229): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x9) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="140004006e6963766630000000000000000000000800050006000000140017800400"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x5014) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000240), 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000100000000008000000911175000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2325b965}, 0x94) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000300"}}}]}, 0x48}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000380), &(0x7f0000000480)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d40)={0xffffffffffffffff, 0x20, &(0x7f0000001d00)={&(0x7f0000000c80)=""/4096, 0x1000, 0x0, &(0x7f0000001c80)=""/119, 0x77}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x9, 0xc, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000840)='GPL\x00', 0x7ff, 0xb8, &(0x7f0000000900)=""/184, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0xf, 0x8f6, 0x7b78c304}, 0x10, r12, r10, 0x9, 0x0, &(0x7f0000001d80)=[{0x5, 0x1, 0x9, 0x5}, {0x4, 0x1, 0xe, 0xc}, {0x0, 0x5, 0xa, 0xc}, {0x0, 0x2, 0xd, 0x4}, {0x0, 0x4, 0x3, 0xa}, {0x2, 0x3, 0xc, 0x3}, {0x3, 0x3, 0xb, 0x1}, {0x0, 0x1, 0xc, 0x2}, {0x4, 0x5, 0x10, 0xb}], 0x10, 0x8}, 0x94) (async) shutdown(r3, 0x1) (async) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 106.231701ms ago: executing program 2 (id=3230): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="1a07f1395b18da9cddb64e9926849ae4e737733603544abdbfb1a4b12e858a0a179cf865a096d3cf072c1b3cba5816b2a0364c89abb92a4f4ad2353672e53da5350bcc5b2a610f81cbb24a9ea91285a7d4f51626ef09ffefa5ae27e157176eee6e522084f5220ebbbd3bef3263e53e5cc90edd45fd", 0x75}, 0x1, 0x0, 0x0, 0x4004}, 0x400) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000001c0)={'syzkaller0\x00'}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x80, 0x3, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, @local, 0x20, 0x1, 0x5e77, 0x1}}) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000680)=""/4, 0x4, 0x0, &(0x7f00000006c0)=""/118, 0x76}}, 0x10) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000009c0)={0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1e, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xcb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x8a, &(0x7f0000000440)=""/138, 0x41100, 0xd, '\x00', r2, @fallback=0x2d, r3, 0x8, &(0x7f0000000600)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xf, 0x80, 0x6}, 0x10, r4, r5, 0x0, &(0x7f0000000a40)=[r6, r7, r8, 0x1, r9], &(0x7f0000000a80), 0x10, 0x400}, 0x94) (async) accept4$phonet_pipe(r3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10, 0x80000) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r9, 0x118, 0x1, &(0x7f0000000c00)=0x444, 0x4) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000d40)=@buf={0xea, &(0x7f0000000c40)="e63990e57a981d1a288bbc221aabbd86c7ef07275ed28c5d66d294fab984f5adaccd1810ed433fe618550078de92535c07fb6d56e0fde259f583ee1cfdfd5669adda6f47fe08a893b112ef17aa12b2a517384f187238767fe85a4ef4b4a83c7ba23f79b50369cb2f04490b730a8bdd14468bdee90b02f5917956850a16edb2d9d3b34a4c8d9e14e8f6b228327d3555f687bf74c0dba3fb94a1345d677267b00101bc2b069ce7d2a9bc49df353656bdeffbe9b7cfe6b66e5b044cddbeffc9992c8339b8e5d0646c0a217999db95d1765822e7cf3ffbf00e3aa5a42db7bba1d9ba844a14a5499e11457b1e"}) (async) r11 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000d80)) ioctl$XFS_IOC_GETBMAP(r7, 0xc0205826, &(0x7f0000000dc0)={0x4, 0x2, 0x7, 0x0, 0xfffffff4}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r10, 0x4004f506, &(0x7f0000000e00)) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000e40)={0x3, 'veth1_to_hsr\x00', {}, 0x1}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000e80)={0x0, 0x1b, 0x20}, &(0x7f0000000ec0)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000f00)={r12, 0x40}, &(0x7f0000000f40)=0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000f80)="4f6ac9bfb0213a21967e0ff302571fc43a5f02880e3468c1cd0d34568dfc2a4beb055d87f400a6a1879f262bdf8804fd2f49530d691ddc23fecc91a8ee147c8b74e4d28c94cb3e2fcf67fd443bba2388189e6fa3a4842d140c4971b68cff2ef1ec1e2900639e8c9ed7b92a021ab3e29f0feb163ede01f0a10873253f73b1b3828a05ca350bef9d99b0dd65e25b1400b48f61376decfd154d12bfdc57cccab2f8d999b226047e2c6b6a7472a7ef3aac29a12beb362a", 0xb5, 0x28000004, &(0x7f0000001040)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x8}, 0x1}, 0x1c) sendmsg$inet_sctp(r9, &(0x7f0000001680)={&(0x7f0000001080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001580)=[{&(0x7f00000010c0)="5d2fdaf6c409942706928195bac4e7ccfa7d7b65c759893a08b68573eab26db8ee083f03b073e277d077ff86914535bff6913a9c3b8c858a92a11cbc59df8907463605e73cd1276f8b6aa691e5c7a5bdf11a", 0x52}, {&(0x7f0000001140)="8ab3f0ab0bf8d8dcee81f08a051fa4a540581ba930435f48480e27", 0x1b}, {&(0x7f0000001180)="f05f87436dbd70985d1f00c05d0fb5af6b623ba987d9d89149942b4d5d20d7418e2dd66cd8abcd741d00b82d6c4b03102771472af35b5eee9c47e89c083def997134e77fb45863f8822de00ef673116707034e4bfe74337e8d5ddd7d8a8dd54157beb324cb745d6d013f717b481c69b86bc5652af69fb025f5808aafe28d487ca93afe5964d0525e998c5021340a3a1cf623cc34ee8e27e092f294e1bd8d751768cd9f09d4629da549fb7652f37cc83af35a03960557574e9d49799adb92185feb04a7f01a398bc9a5753fbc3f204090ff2272ca6d3fe05aa6fc8e3fbb8bd44e350c1dd9b148", 0xe6}, {&(0x7f0000001280)="899a161087b1ca48bc3d2031ff9f0d50f8a028e0f31213530d670d664fffbe408a94331484aa6ae797000ee394e84f21621c3009b11c1ecd48853a751981c7a5c61fa0322fad6b0ccc5da6d4d6ef082e4189d1ccdbeea795", 0x58}, {&(0x7f0000001300)="746412eaeecb39d5bb313e5337fed3bf39de5a7eac65cceffa0db1ef69f8a557be23b4a62f40df688354c2e030f55763023157b88201f301dd7f8956b5801278ead3f67cefa878644994b44dfad5a569ced77742", 0x54}, {&(0x7f0000001380)="f14d204165e7f0cd2f6475742e56f5497ac6ffb876e52f336083acba4fe09d1d54fbabe81ebe5a5767315300044d88b3023acd62ef63661ead5b973c2d33a0656411dad4e796bf1600e853d68809b32be09deb66cb133fa144e043ca232e1c7167108d021692a2467729e88412f703655916e83216c4c7efdededd4f855086c05429a5bf46a5741c8ba085b1a5a800eb247640b7035b9e6ff4c6e0bf13ac6c6cdd924c572f86967f4d51dfcfc8e41dc27a5cd1fb93", 0xb5}, {&(0x7f0000001440)="a1fda4a8723336da60f830182eb2be42407ca977b79dad252afeb0bd1d52a4a22c3097b4fe3b5b8e3d885b96500e0761300fcfa574b93a2f5f4ce190b0c8fdaa05d348c293c4d84481a1392d2681e2555ac131cffa6f7855ac645e874968353bcba498f4028c3372d4079b410f349854ffd4e01abb8e52196670656354e323844e06e178f684d738959083490b2962bf837eadf5d6ba83c1996f4cf7ca0a62f3048e1034697a9e94e86d1202ce", 0xad}, {&(0x7f0000001500)="75a77ee9141ea46f65e3d9c7f67095394bcf8037225b709d41ec2e481e1a6bb70a186aa7f4fa8f42ff746a35be69183e89ca81e057a23740a7b04a8fec107878213d5354179c4683", 0x48}], 0x8, &(0x7f0000001600)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x4, 0x401, 0x800, 0x5}}], 0x48, 0x4080}, 0x20004080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1, 0xd, &(0x7f00000016c0)=@raw=[@alu={0x7, 0x0, 0x7, 0x9, 0x2, 0xc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @map_fd={0x18, 0x8, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x85c1}], &(0x7f0000001740)='syzkaller\x00', 0x0, 0x6f, &(0x7f0000001780)=""/111, 0x41100, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000018c0)={0x5, 0x8, 0x80000, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001c00)=[{0x4, 0x3, 0x4, 0xc}, {0x2, 0x5, 0xb, 0x1}], 0x10, 0x2}, 0x94) 0s ago: executing program 2 (id=3231): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b7", 0x2d}], 0x1) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200, 0x4e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c0c4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r4, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)={0x38, r8, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) kernel console output (not intermixed with test programs): rotocol: the target found does not have the desired protocol [ 379.468243][T15050] netlink: 'syz.0.2217': attribute type 2 has an invalid length. [ 379.586424][T15037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.683789][T15056] netlink: 'syz.3.2220': attribute type 1 has an invalid length. [ 379.834297][T15056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.869288][T15064] bond3: entered promiscuous mode [ 379.869317][T15064] bond3: entered allmulticast mode [ 379.887412][T15071] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 379.919017][T15068] block nbd0: NBD_DISCONNECT [ 379.919050][T15068] block nbd0: Send disconnect failed -32 [ 380.097794][T15080] __nla_validate_parse: 14 callbacks suppressed [ 380.097819][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2223'. [ 380.111154][ T7562] net_ratelimit: 28 callbacks suppressed [ 380.111174][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 380.171441][T15071] bridge6: entered promiscuous mode [ 380.171466][T15071] bridge6: entered allmulticast mode [ 380.196166][T15071] bond19: (slave bridge6): making interface the new active one [ 380.196951][T15071] bond19: (slave bridge6): Enslaving as an active interface with an up link [ 380.220607][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 380.341193][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 380.451337][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 380.560980][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 380.680530][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 380.791837][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 380.992933][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 381.114274][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 381.230277][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 381.387011][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 381.387039][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2235'. [ 381.387063][T15119] netlink: 'syz.3.2235': attribute type 18 has an invalid length. [ 381.440352][ T7559] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 16384 - 0 [ 381.441567][ T7559] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 16384 - 0 [ 381.441726][ T7559] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 16384 - 0 [ 381.441809][ T7559] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 16384 - 0 [ 381.636225][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2240'. [ 381.636260][T15131] netlink: 'syz.2.2240': attribute type 7 has an invalid length. [ 381.636273][T15131] netlink: 'syz.2.2240': attribute type 8 has an invalid length. [ 381.636286][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 381.698615][T15136] netlink: 'syz.2.2240': attribute type 1 has an invalid length. [ 382.141106][T15114] infiniband syz0: set down [ 382.141131][T15114] infiniband syz0: added bond0 [ 382.212090][T15114] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 382.212141][T15114] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 382.212180][T15114] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 382.268895][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 382.505499][T15114] RDS/IB: syz0: added [ 382.506080][T15114] smc: adding ib device syz0 with port count 1 [ 382.506209][T15114] smc: ib device syz0 port 1 has no pnetid [ 385.161453][ T7559] net_ratelimit: 246 callbacks suppressed [ 385.161478][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 385.172354][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 385.172379][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2256'. [ 385.315068][T15187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2255'. [ 385.539548][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 385.551900][T15202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2259'. [ 385.640377][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 385.750388][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 385.860383][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 385.971989][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 386.081566][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 386.191979][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 386.301328][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 386.414909][T15219] bond4: Unable to set up delay as MII monitoring is disabled [ 386.426005][T15219] bond4 (unregistering): Released all slaves [ 386.495715][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 387.699938][T15271] netlink: 'syz.1.2275': attribute type 11 has an invalid length. [ 387.790624][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2275'. [ 387.797231][T15271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.804935][T15271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.816075][T15271] geneve1: entered promiscuous mode [ 387.821058][T15271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.831868][T15271] veth0_to_batadv: entered promiscuous mode [ 387.844782][T15271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.869810][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 387.967997][T15289] tipc: Enabled bearer , priority 0 [ 387.984932][T15287] syzkaller0: entered promiscuous mode [ 387.984950][T15287] syzkaller0: entered allmulticast mode [ 388.019036][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 388.035741][T15292] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2278'. [ 388.043114][T15292] nbd: must specify at least one socket [ 388.044691][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 388.167038][T15285] tipc: Resetting bearer [ 388.207847][T15285] tipc: Disabling bearer [ 388.245591][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 388.806442][T15321] syzkaller1: entered promiscuous mode [ 388.806468][T15321] syzkaller1: entered allmulticast mode [ 388.854741][T15302] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 388.912415][T15302] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 389.455036][T15329] veth0_to_bridge: entered promiscuous mode [ 389.455252][T15329] macvtap2: entered allmulticast mode [ 389.455268][T15329] veth0_to_bridge: entered allmulticast mode [ 389.497770][T15329] veth0_to_bridge: left allmulticast mode [ 389.497803][T15329] veth0_to_bridge: left promiscuous mode [ 389.679004][ T7559] openvswitch: cpu_id mismatch with handler threads [ 389.679720][ T7559] openvswitch: cpu_id mismatch with handler threads [ 389.680042][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2287'. [ 389.761370][T15348] nbd: must specify at least one socket [ 389.834665][ T7162] openvswitch: cpu_id mismatch with handler threads [ 389.909256][T15353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.982921][T15353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.502845][ T7562] net_ratelimit: 34 callbacks suppressed [ 390.502870][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 390.611326][T11595] bond5: (slave gretap2): failed to get link speed/duplex [ 390.721190][T11595] bond5: (slave gretap2): failed to get link speed/duplex [ 390.830276][T11592] bond5: (slave gretap2): failed to get link speed/duplex [ 390.942091][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 391.050691][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 391.160865][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 391.270220][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 391.380207][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 391.492387][ T7562] bond5: (slave gretap2): failed to get link speed/duplex [ 391.573211][ T31] audit: type=1804 audit(1789912789.976:7): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2302" name="/newroot/448/cgroup.controllers" dev="tmpfs" ino=2320 res=1 errno=0 [ 391.573275][ T31] audit: type=1800 audit(1789912789.976:8): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2302" name="cgroup.controllers" dev="tmpfs" ino=2320 res=0 errno=0 [ 391.586876][ T31] audit: type=1804 audit(1789912789.986:9): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2302" name="/newroot/448/cgroup.controllers" dev="tmpfs" ino=2320 res=1 errno=0 [ 391.690449][T15416] __nla_validate_parse: 3 callbacks suppressed [ 391.690473][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'. [ 391.745345][T15414] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2303'. [ 391.768637][T15414] nbd: must specify at least one socket [ 392.149753][T15436] bond21: option lp_interval: invalid value (0) [ 392.149813][T15436] bond21: option lp_interval: allowed values 1 - 2147483647 [ 392.300335][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 392.779298][T15436] bond21 (unregistering): Released all slaves [ 392.975825][T15445] veth1_vlan: left promiscuous mode [ 392.977204][T15445] veth0_vlan: left promiscuous mode [ 392.987690][T15445] veth0_vlan: entered promiscuous mode [ 392.992716][T15445] veth1_vlan: entered promiscuous mode [ 393.006447][T15445] veth1_macvtap: left promiscuous mode [ 393.008828][T15445] veth0_macvtap: entered promiscuous mode [ 393.009950][T15445] veth1_macvtap: entered promiscuous mode [ 393.053269][T15445] geneve1: left promiscuous mode [ 393.129883][T15445] geneve1: entered promiscuous mode [ 393.143748][T15445] batman_adv: batadv0: Interface activated: ip6gretap1 [ 393.146796][T15445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.169516][T15445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.179498][T15445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.190818][T15445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.195742][T15445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.198584][T15445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.221643][T15445] 8021q: adding VLAN 0 to HW filter on device bond7 [ 393.225088][T15445] 8021q: adding VLAN 0 to HW filter on device bond8 [ 393.228013][T15445] 8021q: adding VLAN 0 to HW filter on device bond9 [ 393.277722][T15469] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2316'. [ 393.299556][T15445] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.361506][T15471] nbd: must specify at least one socket [ 393.363046][T11595] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.363350][T11595] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.372167][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2316'. [ 393.383737][ T7162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.391169][T11592] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.391200][T11592] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.391350][T11592] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.391372][T11592] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.391403][T11592] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.391424][T11592] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.391455][T11592] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.391476][T11592] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.437124][T11595] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 393.439046][T11595] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 393.452964][T12075] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 393.499438][T15470] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2317'. [ 393.590535][ C1] openvswitch: cpu_id mismatch with handler threads [ 393.708380][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2318'. [ 393.802707][ T7162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.899937][T15485] netlink: 'syz.0.2320': attribute type 7 has an invalid length. [ 393.899961][T15485] netlink: 'syz.0.2320': attribute type 8 has an invalid length. [ 393.900945][ T7162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.147341][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 394.222147][T14395] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.222439][T14395] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.274708][T15511] gre1: entered allmulticast mode [ 395.293180][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 395.336152][T15557] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2330'. [ 395.345601][T15557] nbd: must specify at least one socket [ 395.655107][ T13] net_ratelimit: 21 callbacks suppressed [ 395.655131][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 395.763310][T11595] bond5: (slave gretap2): failed to get link speed/duplex [ 395.835525][T15578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2332'. [ 395.871919][T11595] bond5: (slave gretap2): failed to get link speed/duplex [ 395.968846][T15582] debugfs: '.Pбш'ѓG!DEвSˆ' already exists in 'ieee80211' [ 396.022645][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 396.130320][T11595] bond5: (slave gretap2): failed to get link speed/duplex [ 396.242345][ T1161] bond5: (slave gretap2): failed to get link speed/duplex [ 396.350326][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 396.462028][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 396.489221][T15608] nbd: must specify at least one socket [ 396.570294][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 396.667257][T15618] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 396.680354][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 396.722412][T15618] macsec0: entered allmulticast mode [ 396.722437][T15618] ip6gretap0: entered allmulticast mode [ 396.908745][T15622] xt_CT: No such helper "snmp_trap" [ 397.248186][T15636] netlink: 'syz.4.2348': attribute type 27 has an invalid length. [ 397.648819][T15652] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 397.856622][T15659] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 397.985065][T15659] 8021q: adding VLAN 0 to HW filter on device bond22 [ 398.019343][T15668] __nla_validate_parse: 5 callbacks suppressed [ 398.019366][T15668] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2353'. [ 398.054216][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 398.054254][T15671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 398.057578][T15664] bond22: (slave geneve4): making interface the new active one [ 398.087549][T15664] bond22: (slave geneve4): Enslaving as an active interface with an up link [ 398.114818][T15671] bridge4: entered promiscuous mode [ 398.114844][T15671] bridge4: entered allmulticast mode [ 398.121928][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.122201][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.180748][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.180794][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.283076][T15676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2356'. [ 398.326644][T15676] hsr_slave_1 (unregistering): left promiscuous mode [ 398.436990][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 398.534944][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'. [ 398.572067][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 398.583418][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 398.605841][T15682] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 398.631482][T15682] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 398.668769][T15693] netlink: 'syz.3.2360': attribute type 2 has an invalid length. [ 398.816207][T15699] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 398.845233][T15693] : entered promiscuous mode [ 399.033179][T15699] 8021q: adding VLAN 0 to HW filter on device bond23 [ 399.056349][T15701] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 399.072933][T15701] bond23: (slave batadv3): making interface the new active one [ 399.074275][T15701] bond23: (slave batadv3): Enslaving as an active interface with an up link [ 399.095462][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 399.095493][T15720] netlink: 'syz.0.2364': attribute type 5 has an invalid length. [ 399.095505][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'. [ 399.109297][T15721] netlink: 'syz.0.2364': attribute type 5 has an invalid length. [ 399.192655][T15705] bond23 (unregistering): (slave batadv3): Releasing active interface [ 399.212153][T15705] bond23 (unregistering): Released all slaves [ 399.475288][T15740] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 399.478142][T15731] bridge5: entered allmulticast mode [ 399.500006][T15736] nbd: must specify at least one socket [ 399.623162][ T31] audit: type=1107 audit(1789912798.026:10): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.629176][ T31] audit: type=1107 audit(1789912798.026:11): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.708056][ T31] audit: type=1107 audit(1789912798.106:12): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.753764][ T31] audit: type=1107 audit(1789912798.156:13): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.753830][ T31] audit: type=1107 audit(1789912798.156:14): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.753879][ T31] audit: type=1107 audit(1789912798.156:15): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.753928][ T31] audit: type=1107 audit(1789912798.156:16): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.753976][ T31] audit: type=1107 audit(1789912798.156:17): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.754024][ T31] audit: type=1107 audit(1789912798.156:18): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 399.754072][ T31] audit: type=1107 audit(1789912798.156:19): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>TЫ‰c}<ѓЇpЈ~жƒРaфщ0ѓ0ЦN;Ёі к8И@yŒКдЙК@™}ЖјЕЮпЎ^ЋZ1!ШЕF§ЁЁ•$Зю  }ыі4tщ›iИ„ЉО?@jЈ qЈ‘Фz,†юдЇMђа2EСO‹)­й#Xк"8’6чїQMЙЌћ™!€<Уƒ/аœщvќO^Ўo‚aНHЛ#l~дЉœЧ ;ѕ!ВƒЕcКњ' [ 400.680701][ T12] net_ratelimit: 24 callbacks suppressed [ 400.680725][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 400.858550][T15794] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 400.870317][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 400.917908][T15802] nbd: must specify at least one socket [ 400.982448][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 401.083296][T15809] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 401.180354][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 401.180365][ C1] openvswitch: cpu_id mismatch with handler threads [ 401.180377][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 401.320261][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 401.432067][ T7559] bond5: (slave gretap2): failed to get link speed/duplex [ 401.582490][T11595] bond5: (slave gretap2): failed to get link speed/duplex [ 401.695095][ T1161] bond5: (slave gretap2): failed to get link speed/duplex [ 401.800242][ T1161] bond5: (slave gretap2): failed to get link speed/duplex [ 401.910265][ T1161] bond5: (slave gretap2): failed to get link speed/duplex [ 402.116809][T15840] tipc: Enabled bearer , priority 10 [ 402.677290][T15852] tipc: Resetting bearer [ 403.413549][T15852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.875154][T15852] ip6gretap0: left allmulticast mode [ 404.004717][T15852] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 404.088991][T15865] macvlan0: left allmulticast mode [ 404.100815][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.100852][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.100878][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.100914][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.100938][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.100963][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.100996][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.101028][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.101052][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.101085][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.101110][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.101134][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.996359][T15846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.020647][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.167750][T15883] __nla_validate_parse: 14 callbacks suppressed [ 405.167773][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 405.534301][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 405.828020][T15925] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2414'. [ 405.869158][T15929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2416'. [ 406.218166][T15945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 406.218219][T15947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 406.302020][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 406.494959][T15955] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2423'. [ 406.495021][T15955] netlink: 'syz.3.2423': attribute type 9 has an invalid length. [ 406.495037][T15955] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2423'. [ 406.495051][T15955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2423'. [ 406.548940][T15957] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 406.777095][T15957] 8021q: adding VLAN 0 to HW filter on device bond23 [ 406.812628][T15956] bond23: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 406.817069][T15971] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 406.840936][T15964] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 406.922187][T15966] bond23: entered promiscuous mode [ 406.922214][T15966] bond23: entered allmulticast mode [ 407.124264][T15969] macvlan5: entered promiscuous mode [ 407.124289][T15969] macvlan5: entered allmulticast mode [ 407.147355][T15969] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 407.327492][T15977] macvlan5: entered promiscuous mode [ 407.327518][T15977] macvlan5: entered allmulticast mode [ 407.352691][T15977] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 407.651254][T15991] pim6reg1: entered promiscuous mode [ 407.651279][T15991] pim6reg1: entered allmulticast mode [ 407.957738][T16018] netlink: 'syz.3.2433': attribute type 83 has an invalid length. [ 408.063883][T16014] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2431'. [ 408.461236][T16042] xt_hashlimit: size too large, truncated to 1048576 [ 408.566673][T16044] xt_hashlimit: size too large, truncated to 1048576 [ 408.611522][T16045] IPVS: set_ctl: invalid protocol: 170 172.20.20.58:20001 [ 408.713623][T16048] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 408.842028][T16051] net_ratelimit: 7 callbacks suppressed [ 408.842045][T16051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 408.935827][T16054] ip6gre6: entered allmulticast mode [ 408.937943][ T1161] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 409.076293][T16057] tipc: Resetting bearer [ 410.331027][T16097] ipvlan0: entered promiscuous mode [ 410.357317][T16100] __nla_validate_parse: 3 callbacks suppressed [ 410.357341][T16100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2456'. [ 410.357781][T16103] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2457'. [ 410.380982][T16105] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2457'. [ 410.479573][T16111] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 410.734703][T16114] syzkaller0: entered promiscuous mode [ 410.734728][T16114] syzkaller0: entered allmulticast mode [ 410.916284][T16122] tipc: Resetting bearer [ 411.093987][T16133] syzkaller1: entered promiscuous mode [ 411.094011][T16133] syzkaller1: entered allmulticast mode [ 411.177472][T16133] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 411.367272][T16138] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 411.368197][T16138] batman_adv: batadv0: Adding interface: gretap2 [ 411.368212][T16138] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.368242][T16138] batman_adv: batadv0: Interface activated: gretap2 [ 411.563530][T16158] netlink: 'syz.3.2469': attribute type 16 has an invalid length. [ 411.563557][T16158] netlink: 'syz.3.2469': attribute type 17 has an invalid length. [ 411.634300][T16158] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.674597][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.734241][T16158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.735654][T16158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.738461][T16158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.742990][T16158] veth1_macvtap: left promiscuous mode [ 411.744056][T16158] veth0_macvtap: left promiscuous mode [ 411.745120][T16158] veth0_macvtap: entered promiscuous mode [ 411.746200][T16158] veth1_macvtap: entered promiscuous mode [ 411.749721][T16158] geneve1: left promiscuous mode [ 411.753578][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.754568][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.756238][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.757827][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.801317][T16158] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 411.805933][T16158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.812654][T16158] geneve1: entered promiscuous mode [ 411.812674][T16158] geneve1: entered allmulticast mode [ 411.875058][T16158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.037096][T16168] xt_bpf: check failed: parse error [ 412.426226][T16158] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 412.488630][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.488755][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.508228][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.508297][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.581855][ T13] bridge0: port 3(team0) entered blocking state [ 412.581981][ T13] bridge0: port 3(team0) entered forwarding state [ 412.720194][ T7559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.725706][ T7559] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 412.725978][ T7559] bond1: (slave veth3): making interface the new active one [ 412.769828][ T7559] bond1: active interface up! [ 412.784361][ T7559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.784966][ T7559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.785037][ T7559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.114738][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 413.330864][T16210] netlink: 'syz.1.2479': attribute type 5 has an invalid length. [ 413.330888][T16210] netlink: 'syz.1.2479': attribute type 9 has an invalid length. [ 413.330902][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 413.338749][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 413.340658][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 413.773237][T16219] tipc: Resetting bearer [ 413.773494][T16219] tipc: Resetting bearer [ 413.794579][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2483'. [ 413.928991][T16230] No such timeout policy "syz1" [ 414.058542][T16236] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2486'. [ 414.175128][T16243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'. [ 414.202179][T16232] netlink: zone id is out of range [ 414.202196][T16232] netlink: zone id is out of range [ 414.202204][T16232] netlink: zone id is out of range [ 414.202213][T16232] netlink: zone id is out of range [ 414.202221][T16232] netlink: zone id is out of range [ 414.202229][T16232] netlink: zone id is out of range [ 414.202237][T16232] netlink: zone id is out of range [ 414.202245][T16232] netlink: zone id is out of range [ 414.202277][T16232] netlink: zone id is out of range [ 414.202285][T16232] netlink: zone id is out of range [ 414.272039][T16242] bridge8: entered allmulticast mode [ 414.533243][T16252] netlink: 'syz.2.2491': attribute type 11 has an invalid length. [ 415.011086][T16273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2498'. [ 415.721879][T16299] netlink: 'syz.2.2505': attribute type 8 has an invalid length. [ 415.883018][T16305] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2508'. [ 416.367525][T16331] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2512'. [ 416.369334][T16330] block nbd0: server does not support multiple connections per device. [ 416.369932][T16330] block nbd0: shutting down sockets [ 416.415011][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 416.415042][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2513'. [ 416.497261][T16334] veth1_macvtap: left promiscuous mode [ 416.497291][T16334] macsec0: entered promiscuous mode [ 416.509488][T16334] veth1_macvtap: entered promiscuous mode [ 416.509840][T16334] macsec0: left promiscuous mode [ 416.581849][T16337] veth1_macvtap: left promiscuous mode [ 416.581880][T16337] macsec0: entered promiscuous mode [ 416.597739][T16338] veth1_macvtap: entered promiscuous mode [ 416.598005][T16338] macsec0: left promiscuous mode [ 417.059375][T16350] syzkaller1: entered promiscuous mode [ 417.059400][T16350] syzkaller1: entered allmulticast mode [ 417.109326][T16350] syzkaller1: left promiscuous mode [ 417.321769][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2520'. [ 418.669196][T16439] netlink: 'syz.2.2530': attribute type 1 has an invalid length. [ 418.710516][T16437] tipc: Invalid UDP bearer configuration [ 418.710567][T16437] tipc: Enabling of bearer rejected, failed to enable media [ 418.959354][T16456] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 419.004275][T16442] veth17: entered allmulticast mode [ 419.036349][T16454] bond23: (slave veth0_to_bond): Releasing active interface [ 419.066093][T16462] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 419.070845][T16454] bond24: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 419.137131][T16462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.151217][T16462] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 419.342267][T16470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2537'. [ 419.354252][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2537'. [ 419.472941][T16468] syzkaller1: entered promiscuous mode [ 419.472976][T16468] syzkaller1: entered allmulticast mode [ 419.969130][T16496] net_ratelimit: 163 callbacks suppressed [ 419.969156][T16496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.974262][T16496] x_tables: unsorted entry at hook 1 [ 420.048101][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 420.049054][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 420.380325][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.536522][T16531] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2555'. [ 420.567239][T16528] syzkaller0: entered promiscuous mode [ 420.567262][T16528] syzkaller0: entered allmulticast mode [ 421.173934][T16555] tipc: Enabling of bearer rejected, already enabled [ 421.174261][T16557] tipc: Enabling of bearer rejected, already enabled [ 421.431628][T16567] __nla_validate_parse: 1 callbacks suppressed [ 421.431652][T16567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2563'. [ 421.533689][T16568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.679620][T16572] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 422.213005][T16591] syzkaller1: entered promiscuous mode [ 422.213030][T16591] syzkaller1: entered allmulticast mode [ 422.496571][T16596] lo speed is unknown, defaulting to 1000 [ 422.571852][T16602] netlink: 'syz.1.2572': attribute type 2 has an invalid length. [ 422.648593][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2576'. [ 422.668125][T16606] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2576'. [ 422.681709][T16606] nbd: must specify at least one socket [ 422.903565][T16620] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 422.940457][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 423.103814][T16620] 8021q: adding VLAN 0 to HW filter on device bond9 [ 423.192240][T16612] bond9: (slave veth7): Enslaving as an active interface with a down link [ 423.192442][T16624] dummy0: left promiscuous mode [ 423.209216][T16624] bond9: (slave dummy0): making interface the new active one [ 423.230641][T16624] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 423.517378][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 423.571512][T16638] netlink: 'syz.4.2583': attribute type 3 has an invalid length. [ 423.654264][T16639] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2583'. [ 424.031414][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2587'. [ 424.127694][T16663] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 424.140189][T16665] syzkaller1: entered promiscuous mode [ 424.140213][T16665] syzkaller1: entered allmulticast mode [ 424.223239][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.375235][T16708] openvswitch: netlink: Message has 4 unknown bytes. [ 425.729504][T16740] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2610'. [ 425.745965][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2610'. [ 425.862354][T16744] netlink: 'syz.0.2612': attribute type 1 has an invalid length. [ 425.893148][T16744] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.905427][T16744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'. [ 425.912977][T16744] geneve0: entered promiscuous mode [ 425.915387][T16744] geneve0: left promiscuous mode [ 426.294474][T16754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2614'. [ 426.707643][T16759] veth0_macvtap: left promiscuous mode [ 426.709671][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 426.731491][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'. [ 426.848155][T16774] netlink: 'syz.1.2619': attribute type 1 has an invalid length. [ 426.848172][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2619'. [ 427.093604][T16780] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 427.219802][T16786] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2622'. [ 427.219829][T16786] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2622'. [ 427.601890][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2626'. [ 427.640272][T16803] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2626'. [ 427.645730][T16803] nbd: must specify at least one socket [ 427.665577][T16804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2624'. [ 427.823486][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 427.824805][T16812] netlink: 'syz.2.2629': attribute type 3 has an invalid length. [ 428.027789][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 428.271155][ T5276] veth0_macvtap: entered promiscuous mode [ 428.347345][T16818] xt_CT: No such helper "snmp_trap" [ 428.938127][T16853] syzkaller1: entered promiscuous mode [ 428.938153][T16853] syzkaller1: entered allmulticast mode [ 429.254279][T16858] bridge9: entered promiscuous mode [ 429.254304][T16858] bridge9: entered allmulticast mode [ 429.683832][T16889] netlink: 'syz.4.2649': attribute type 1 has an invalid length. [ 429.813600][T16895] netlink: 'syz.3.2647': attribute type 1 has an invalid length. [ 431.057256][T16941] syz_tun: entered promiscuous mode [ 431.057633][T16941] macvtap2: entered promiscuous mode [ 431.057894][T16941] macvtap2: entered allmulticast mode [ 431.057910][T16941] syz_tun: entered allmulticast mode [ 431.068735][T16943] xt_connbytes: Forcing CT accounting to be enabled [ 431.095004][T16941] syz_tun: left allmulticast mode [ 431.095244][T16941] syz_tun: left promiscuous mode [ 431.096312][T16941] macvtap2: left promiscuous mode [ 431.096329][T16941] macvtap2: left allmulticast mode [ 431.173231][T16943] geneve5: entered promiscuous mode [ 431.461928][T16964] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 431.466538][T16962] syzkaller1: entered promiscuous mode [ 431.466561][T16962] syzkaller1: entered allmulticast mode [ 431.842604][T16973] __nla_validate_parse: 9 callbacks suppressed [ 431.842628][T16973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2668'. [ 432.974194][T17023] netlink: 'syz.4.2678': attribute type 10 has an invalid length. [ 432.974220][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'. [ 433.092169][T16410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.142677][ T7162] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 433.187012][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.187121][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.188188][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.197711][T17021] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 433.197744][T17021] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 433.197776][T17021] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 433.262598][T17021] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 433.262752][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 433.314435][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.363116][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2681'. [ 433.395021][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.399121][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.404458][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.407148][T17021] wg2 speed is unknown, defaulting to 1000 [ 433.705694][T17043] lo: entered promiscuous mode [ 433.707669][T17043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.783895][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 434.061852][T16429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.152941][ T7162] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.466802][T17084] netlink: 'syz.2.2690': attribute type 11 has an invalid length. [ 434.566831][T17088] Bluetooth: hci0: unsupported parameter 5135 [ 434.566858][T17088] Bluetooth: hci0: unsupported parameter 8192 [ 434.566870][T17088] Bluetooth: hci0: unsupported parameter 5135 [ 434.566883][T17088] Bluetooth: hci0: unsupported parameter 8192 [ 434.588011][T17088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2693'. [ 434.648185][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2692'. [ 434.838577][T17102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2695'. [ 434.839705][T17082] syzkaller0: entered promiscuous mode [ 434.839729][T17082] syzkaller0: entered allmulticast mode [ 434.899053][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 434.899080][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 434.971222][T17102] 8021q: adding VLAN 0 to HW filter on device bond9 [ 434.995452][T17108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.004361][T17108] bond9: (slave bond0): Enslaving as an active interface with an up link [ 435.009801][ T1161] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:9059:efff:fea2:7ccd error=-28 [ 435.095347][T17111] bond9 (unregistering): (slave bond0): Releasing backup interface [ 435.108535][T17114] netlink: 'syz.2.2697': attribute type 32 has an invalid length. [ 435.123028][T17111] bond9 (unregistering): Released all slaves [ 435.277599][T17118] openvswitch: netlink: IP tunnel dst address not specified [ 435.322818][T17120] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 435.353855][T17121] x_tables: ip6_tables: DSCP.0 target: invalid size 8 (kernel) != (user) 264 [ 435.434391][T17120] hsr_slave_1 (unregistering): left promiscuous mode [ 435.794702][T17148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.104151][T17156] gre1: entered promiscuous mode [ 436.763273][T17187] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 436.825584][T17191] team0: No ports can be present during mode change [ 437.406750][T17198] __nla_validate_parse: 8 callbacks suppressed [ 437.406774][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2716'. [ 437.497012][T17198] 8021q: adding VLAN 0 to HW filter on device bond25 [ 437.550759][T17204] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 437.558470][T17204] bond25: (slave batadv4): Enslaving as an active interface with an up link [ 437.614053][T17198] bond25 (unregistering): (slave batadv4): Releasing backup interface [ 437.640554][T17198] bond25 (unregistering): Released all slaves [ 437.683378][T17216] tipc: Resetting bearer [ 437.683485][T17216] tipc: Resetting bearer [ 437.694549][T17205] Bluetooth: hci0: unsupported parameter 5135 [ 437.694570][T17205] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 437.738953][T17216] ip6gretap0: left promiscuous mode [ 437.760524][T17216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.963538][T17222] netlink: 'syz.2.2725': attribute type 1 has an invalid length. [ 437.965380][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 437.965642][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 438.021631][T17222] bond25: entered promiscuous mode [ 438.022165][T17222] 8021q: adding VLAN 0 to HW filter on device bond25 [ 438.104149][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2725'. [ 438.164790][T17230] 8021q: adding VLAN 0 to HW filter on device bond25 [ 438.165070][T17230] bond25: (slave gre2): The slave device specified does not support setting the MAC address [ 438.165084][T17230] bond25: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 438.188544][T17230] bond25: (slave gre2): making interface the new active one [ 438.188571][T17230] gre2: entered promiscuous mode [ 438.206872][T17230] bond25: (slave gre2): Enslaving as an active interface with an up link [ 438.248917][T17222] bond25 (unregistering): (slave gre2): Releasing backup interface [ 438.248949][T17222] gre2: left promiscuous mode [ 438.265410][T17222] bond25 (unregistering): Released all slaves [ 438.683355][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'. [ 438.751231][T17256] Cannot find map_set index 2 as target [ 438.890001][T17260] xt_policy: output policy not valid in PREROUTING and INPUT [ 439.002240][T17265] syzkaller0: entered promiscuous mode [ 439.002266][T17265] syzkaller0: entered allmulticast mode [ 439.107691][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'. [ 439.377911][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572af000: rx timeout, send abort [ 439.878159][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572af000: abort rx timeout. Force session deactivation [ 439.880615][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c236000: rx timeout, send abort [ 440.355306][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2738'. [ 440.374071][T17279] netlink: Only one type of NAT may be specified [ 440.374107][T17279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.544093][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c236000: abort rx timeout. Force session deactivation [ 440.967531][T17306] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 441.078908][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'. [ 441.198676][T17306] bond25: entered promiscuous mode [ 441.207040][T17306] 8021q: adding VLAN 0 to HW filter on device bond25 [ 441.319517][T17316] 8021q: adding VLAN 0 to HW filter on device bond25 [ 441.319929][T17316] bond25: (slave wireguard0): The slave device specified does not support setting the MAC address [ 441.326985][T17316] bond25: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 441.378167][T17316] bond25: (slave wireguard0): making interface the new active one [ 441.378233][T17316] wireguard0: entered promiscuous mode [ 441.379945][T17316] bond25: (slave wireguard0): Enslaving as an active interface with an up link [ 441.467213][T17331] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:0 [ 441.500507][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 441.745566][T17344] xt_hashlimit: size too large, truncated to 1048576 [ 441.794477][T17344] xt_hashlimit: Unknown mode mask A2BF, kernel too old? [ 442.320773][T17381] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 442.385842][T17381] 8021q: adding VLAN 0 to HW filter on device bond9 [ 442.463850][T17387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2763'. [ 442.565865][T17381] 8021q: adding VLAN 0 to HW filter on device bond9 [ 442.566283][T17381] bond9: (slave xfrm2): The slave device specified does not support setting the MAC address [ 442.566809][T17381] bond9: (slave xfrm2): Error -95 calling set_mac_address [ 442.602610][T17395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2763'. [ 442.707374][T17395] ip_tables: iptables: counters copy to user failed while replacing table [ 443.565549][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 443.565571][ T31] audit: type=1107 audit(1789912841.966:44): pid=17433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 443.746550][T17440] Bluetooth: hci0: unsupported parameter 5135 [ 443.746579][T17440] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 443.908455][T17446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2776'. [ 444.039605][T17449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.146462][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2781'. [ 444.276964][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 444.355744][T17470] tipc: New replicast peer: 172.20.20.187 [ 444.356552][T17470] tipc: Enabled bearer , priority 10 [ 444.559214][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 444.559245][T17484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2786'. [ 444.563401][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'. [ 444.565898][T17484] syzkaller1: entered promiscuous mode [ 444.565916][T17484] syzkaller1: entered allmulticast mode [ 444.652310][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 444.972934][T17506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2790'. [ 445.155979][T17513] macsec2: entered promiscuous mode [ 445.178807][ T5615] block nbd0: Receive control failed (result -1) [ 445.506136][ T7170] tipc: Node number set to 1127336577 [ 445.593006][T17532] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 445.792885][T17540] ip_tables: iptables: counters copy to user failed while replacing table [ 445.875500][T17541] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 446.137176][T17558] openvswitch: netlink: Missing key (keys=40, expected=100) [ 446.258639][T17560] Unknown options in mask 6 [ 446.259894][T17560] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 446.576490][T17572] openvswitch: netlink: Flow actions attr not present in new flow. [ 446.717480][T17585] xt_policy: output policy not valid in PREROUTING and INPUT [ 447.033513][T17605] smc: net device lo applied user defined pnetid SYZ0 [ 447.074360][T17606] tipc: Enabling of bearer rejected, failed to enable media [ 447.587171][ T7170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.642837][ T7170] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.862838][T17633] __nla_validate_parse: 10 callbacks suppressed [ 447.862860][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.913291][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.913607][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.913874][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.914143][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.914418][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.938557][ T7170] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.944979][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.945243][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.945485][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.945717][T17632] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2823'. [ 448.202437][T17646] tipc: Resetting bearer [ 448.293791][T17646] bond9: (slave dummy0): Releasing active interface [ 448.377850][T17646] bridge_slave_0: left allmulticast mode [ 448.377880][T17646] bridge_slave_0: left promiscuous mode [ 448.378128][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.397804][T17646] bridge_slave_1: left allmulticast mode [ 448.397826][T17646] bridge_slave_1: left promiscuous mode [ 448.398034][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.402686][T17646] bond2: left promiscuous mode [ 448.433501][T17646] bond7: (slave veth0_to_bond): Releasing active interface [ 448.433532][T17646] veth0_to_bond: left promiscuous mode [ 448.450616][T17646] bond0: (slave bond_slave_0): Releasing backup interface [ 448.478649][T17646] bond0: (slave bond_slave_1): Releasing backup interface [ 448.487554][T17646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.501928][T17646] bond0: (slave netdevsim1): Releasing backup interface [ 448.547481][T17646] bond1: (slave geneve2): Releasing active interface [ 448.555172][ T7170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.573785][T17646] bond2: left allmulticast mode [ 448.573873][T17646] bridge0: port 3(bond2) entered disabled state [ 448.602482][T17646] bond5: (slave gretap2): Removing an active aggregator [ 448.603437][T17646] bond5: (slave gretap2): Releasing backup interface [ 448.607094][T17646] batman_adv: batadv0: Removing interface: ip6gretap2 [ 448.639129][T17646] bond9: (slave veth7): Releasing active interface [ 449.073569][T17674] sctp: [Deprecated]: syz.1.2830 (pid 17674) Use of int in maxseg socket option. [ 449.073569][T17674] Use struct sctp_assoc_value instead [ 449.137585][T17675] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 449.610548][T17691] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20002 [ 449.899638][T17675] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 450.144355][T17706] netlink: 'syz.0.2840': attribute type 7 has an invalid length. [ 450.461388][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.989975][T17745] netlink: 'syz.0.2850': attribute type 10 has an invalid length. [ 451.025930][T17738] netlink: 'syz.1.2849': attribute type 10 has an invalid length. [ 451.027998][T17745] geneve3: entered promiscuous mode [ 451.028025][T17745] geneve3: entered allmulticast mode [ 451.350599][T17760] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 452.524309][T17802] netlink: 'syz.0.2861': attribute type 3 has an invalid length. [ 452.540670][T17816] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 452.572801][T17816] netlink: 'syz.4.2864': attribute type 15 has an invalid length. [ 452.580589][ T7562] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 452.580629][ T7562] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 452.580659][ T7562] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 452.580687][ T7562] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 452.885373][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.885634][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.885873][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.886127][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.886405][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.886641][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.950514][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.950754][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.951020][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.951263][T17825] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.988002][T17833] __nla_validate_parse: 42 callbacks suppressed [ 452.988020][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'. [ 454.019234][T17868] netlink: 456 bytes leftover after parsing attributes in process `syz.3.2874'. [ 454.167280][T17875] netlink: 'syz.3.2877': attribute type 1 has an invalid length. [ 454.186241][T17877] netlink: 'syz.0.2878': attribute type 31 has an invalid length. [ 454.295865][T17881] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.2877'. [ 454.627124][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 454.641959][T17888] netlink: 'syz.2.2881': attribute type 1 has an invalid length. [ 454.760288][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'. [ 454.762621][T17888] bond26: entered promiscuous mode [ 454.764714][T17888] 8021q: adding VLAN 0 to HW filter on device bond26 [ 454.829670][T17895] bond26 (unregistering): Released all slaves [ 455.051123][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 455.595361][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2886'. [ 455.713530][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 455.782873][T17923] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 455.958609][T17940] netlink: 'syz.3.2894': attribute type 1 has an invalid length. [ 455.979348][T17940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2894'. [ 456.096743][T17921] syzkaller1: entered promiscuous mode [ 456.096771][T17921] syzkaller1: entered allmulticast mode [ 456.233904][T17948] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2896'. [ 456.746794][ T4930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.765372][ T4930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.766328][ T4930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.768138][ T4930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.768844][ T4930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.926102][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.939056][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.939524][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.990703][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.992032][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.821939][ T7560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.821966][ T7560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.879001][ T7562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.879026][ T7562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.946379][T18003] FAULT_INJECTION: forcing a failure. [ 457.946379][T18003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.946426][T18003] CPU: 0 UID: 0 PID: 18003 Comm: syz.0.2908 Not tainted syzkaller #0 PREEMPT(full) [ 457.946449][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.946460][T18003] Call Trace: [ 457.946468][T18003] [ 457.946477][T18003] dump_stack_lvl+0xe8/0x150 [ 457.946583][T18003] should_fail_ex+0x410/0x560 [ 457.946701][T18003] _copy_from_iter+0x1d3/0x1660 [ 457.946776][T18003] ? __alloc_skb+0x27a/0x7a0 [ 457.946874][T18003] ? __alloc_skb+0x27a/0x7a0 [ 457.946900][T18003] ? __alloc_skb+0x27a/0x7a0 [ 457.946921][T18003] ? __pfx__copy_from_iter+0x10/0x10 [ 457.946940][T18003] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 457.947004][T18003] ? __alloc_skb+0x27a/0x7a0 [ 457.947025][T18003] ? __alloc_skb+0x27a/0x7a0 [ 457.947055][T18003] ? netlink_sendmsg+0x650/0xb40 [ 457.947124][T18003] ? skb_put+0x112/0x210 [ 457.947175][T18003] netlink_sendmsg+0x6c0/0xb40 [ 457.947214][T18003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.947253][T18003] ? apparmor_socket_sendmsg+0x98/0x360 [ 457.947342][T18003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.947370][T18003] sock_sendmsg_nosec+0x13a/0x180 [ 457.947440][T18003] ____sys_sendmsg+0x54e/0x850 [ 457.947474][T18003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.947515][T18003] ? import_iovec+0x73/0xa0 [ 457.947544][T18003] ___sys_sendmsg+0x2a5/0x360 [ 457.947570][T18003] ? __lock_acquire+0x747/0x2de0 [ 457.947623][T18003] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.947691][T18003] ? __fget_files+0x2a/0x420 [ 457.947732][T18003] ? __fget_files+0x3a2/0x420 [ 457.947768][T18003] __x64_sys_sendmsg+0x1b1/0x290 [ 457.947797][T18003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.947845][T18003] do_syscall_64+0x166/0x520 [ 457.947933][T18003] ? trace_irq_disable+0x3b/0x140 [ 457.947978][T18003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.948017][T18003] ? clear_bhb_loop+0x70/0xc0 [ 457.948041][T18003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.948062][T18003] RIP: 0033:0x7ff4da19e159 [ 457.948081][T18003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.948098][T18003] RSP: 002b:00007ff4db0c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.948121][T18003] RAX: ffffffffffffffda RBX: 00007ff4da425fa0 RCX: 00007ff4da19e159 [ 457.948136][T18003] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 457.948149][T18003] RBP: 00007ff4db0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.948162][T18003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.948174][T18003] R13: 00007ff4da426038 R14: 00007ff4da425fa0 R15: 00007ffdbb48f888 [ 457.948207][T18003] [ 458.144380][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 458.339806][T18013] __nla_validate_parse: 2 callbacks suppressed [ 458.339828][T18013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2911'. [ 458.365566][T18013] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 458.365593][T18013] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 458.369710][T17958] lo speed is unknown, defaulting to 1000 [ 458.766788][T18024] net_ratelimit: 535 callbacks suppressed [ 458.766812][T18024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.101386][ T4930] Bluetooth: hci5: command tx timeout [ 459.284706][T18057] x_tables: duplicate entry at hook 2 [ 459.285322][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'. [ 459.340191][T18059] netlink: 'syz.3.2920': attribute type 23 has an invalid length. [ 459.340216][T18059] netlink: 'syz.3.2920': attribute type 21 has an invalid length. [ 459.340233][T18059] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.157590][T18032] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 460.337877][T18032] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 460.396466][T18032] bond15: left allmulticast mode [ 460.396491][T18032] ip6gretap3: left allmulticast mode [ 460.396508][T18032] bond15: left promiscuous mode [ 460.396519][T18032] ip6gretap3: left promiscuous mode [ 460.439603][T17958] wg2 speed is unknown, defaulting to 1000 [ 460.496245][T18052] bridge11: entered promiscuous mode [ 460.496270][T18052] bridge11: entered allmulticast mode [ 460.791113][ T1161] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.791151][ T1161] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 460.791176][ T1161] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.791200][ T1161] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 460.791236][ T1161] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.791260][ T1161] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 460.791281][ T1161] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.791304][ T1161] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 460.791336][ T1161] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.791360][ T1161] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 460.791383][ T1161] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.791405][ T1161] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 460.791436][ T1161] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.791460][ T1161] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 460.791483][ T1161] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.791506][ T1161] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 461.180311][ T4930] Bluetooth: hci5: command tx timeout [ 461.314494][T18106] gretap2: entered promiscuous mode [ 461.522169][T18129] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 461.552429][T17958] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.552631][T17958] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.552807][T17958] bridge_slave_0: entered allmulticast mode [ 461.555588][T17958] bridge_slave_0: entered promiscuous mode [ 461.588184][T17958] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.588409][T17958] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.591282][T17958] bridge_slave_1: entered allmulticast mode [ 461.593729][T17958] bridge_slave_1: entered promiscuous mode [ 461.656629][T17958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.664411][T17958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.728848][T17958] team0: Port device team_slave_0 added [ 461.748196][T17958] team0: Port device team_slave_1 added [ 461.803246][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 461.813280][T17958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.813296][T17958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.813326][T17958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.815320][T17958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.815332][T17958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.815353][T17958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.867312][T18139] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 461.879314][T17958] hsr_slave_0: entered promiscuous mode [ 461.884482][T17958] hsr_slave_1: entered promiscuous mode [ 461.964384][T18143] netlink: 'syz.2.2940': attribute type 10 has an invalid length. [ 461.984438][T18143] team0: Port device dummy0 added [ 462.459269][T18164] tc action pedit offset must be on 32 bit boundaries [ 462.459602][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 462.459998][T18164] openvswitch: netlink: Duplicate or invalid key (type 0). [ 462.947950][T18191] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.005382][T18191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 463.114590][T18193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2950'. [ 463.260438][ T4930] Bluetooth: hci5: command tx timeout [ 463.280242][T18202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2952'. [ 463.296723][T18202] netlink: 'syz.2.2952': attribute type 8 has an invalid length. [ 463.296745][T18202] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2952'. [ 463.298542][T18191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2950'. [ 463.399497][T18203] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 463.419843][T17958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.452214][T18204] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2953'. [ 463.469444][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.497685][T17958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.529120][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.534196][T17958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.571037][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.576583][T17958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.589195][T17958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.658658][T18219] netlink: 'syz.0.2956': attribute type 1 has an invalid length. [ 463.699170][ T31] audit: type=1804 audit(1789912862.096:45): pid=18218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2955" name="/newroot/556/cgroup.controllers" dev="tmpfs" ino=2873 res=1 errno=0 [ 463.701331][ T31] audit: type=1800 audit(1789912862.106:46): pid=18218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2955" name="cgroup.controllers" dev="tmpfs" ino=2873 res=0 errno=0 [ 463.888258][T18219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.017014][T18233] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2959'. [ 464.017042][T18233] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2959'. [ 464.118564][T17958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.174253][T18246] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.2960'. [ 464.282249][T17958] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.308774][T11595] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.308839][T11595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.341471][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.341594][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.893057][T18269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2966'. [ 464.893089][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2966'. [ 464.927857][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 464.959982][T18277] tun0: tun_chr_ioctl cmd 1074025673 [ 465.125299][T18285] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.130294][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2966'. [ 465.347529][ T4930] Bluetooth: hci5: command tx timeout [ 465.497243][T10800] udevd[10800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 465.634738][T17958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.736356][T18317] x_tables: duplicate underflow at hook 1 [ 465.780457][T17958] veth0_vlan: entered promiscuous mode [ 465.801552][T17958] veth1_vlan: entered promiscuous mode [ 465.885113][T17958] veth0_macvtap: entered promiscuous mode [ 465.897281][T17958] veth1_macvtap: entered promiscuous mode [ 465.997773][T17958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.047731][T17958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.207268][T18322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2976'. [ 466.480337][ T7559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.642329][ T7559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.644687][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 466.644712][T18334] netlink: 'syz.0.2978': attribute type 1 has an invalid length. [ 466.740553][T11594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.742111][ T7558] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.884766][ T7560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.884790][ T7560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.967767][T18337] netlink: 'syz.4.2979': attribute type 11 has an invalid length. [ 467.117399][T11594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.117451][T11594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.139763][T18345] netlink: 'syz.0.2980': attribute type 1 has an invalid length. [ 467.397517][T18353] openvswitch: ovs-system: Dropping previously announced user features [ 467.604748][T18357] syzkaller0: entered promiscuous mode [ 467.604772][T18357] syzkaller0: entered allmulticast mode [ 467.803050][T17959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.837282][T17959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.838581][T17959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.855121][T17959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.874602][T17959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.231088][ T5615] Bluetooth: hci5: command 0x0405 tx timeout [ 468.396704][T18378] netlink: 'syz.2.2986': attribute type 1 has an invalid length. [ 468.396749][T18378] netlink: 'syz.2.2986': attribute type 1 has an invalid length. [ 468.869359][T18395] __nla_validate_parse: 3 callbacks suppressed [ 468.869381][T18395] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2990'. [ 468.887764][T18389] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2990'. [ 469.416363][T18412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2995'. [ 469.417404][T18403] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.462532][T18410] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 469.541776][T18418] ip_tables: iptables: counters copy to user failed while replacing table [ 469.584456][T18405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2994'. [ 469.981015][ T5615] Bluetooth: hci0: command tx timeout [ 470.028091][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2998'. [ 470.028171][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'. [ 470.097110][T18439] FAULT_INJECTION: forcing a failure. [ 470.097110][T18439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.097145][T18439] CPU: 0 UID: 0 PID: 18439 Comm: syz.3.2999 Not tainted syzkaller #0 PREEMPT(full) [ 470.097167][T18439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.097180][T18439] Call Trace: [ 470.097188][T18439] [ 470.097197][T18439] dump_stack_lvl+0xe8/0x150 [ 470.097232][T18439] should_fail_ex+0x410/0x560 [ 470.097262][T18439] _copy_from_user+0x2d/0xb0 [ 470.097361][T18439] do_ipv6_setsockopt+0x245/0x2960 [ 470.097443][T18439] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 470.097466][T18439] ? aa_inet_opt_perm+0xae4/0xcf0 [ 470.097516][T18439] ? get_pid_task+0x20/0x1f0 [ 470.097558][T18439] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 470.097602][T18439] ? ksys_write+0x1e6/0x270 [ 470.097654][T18439] ? lock_acquire+0x115/0x350 [ 470.097686][T18439] ? aa_sock_opt_perm+0xe1/0x1e0 [ 470.097714][T18439] ipv6_setsockopt+0x59/0x170 [ 470.097739][T18439] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 470.097765][T18439] do_sock_setsockopt+0x17c/0x1b0 [ 470.097796][T18439] __x64_sys_setsockopt+0x13d/0x1b0 [ 470.097828][T18439] do_syscall_64+0x166/0x520 [ 470.097862][T18439] ? trace_irq_disable+0x3b/0x140 [ 470.097883][T18439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.097905][T18439] ? clear_bhb_loop+0x70/0xc0 [ 470.097928][T18439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.097947][T18439] RIP: 0033:0x7ff90039e159 [ 470.097967][T18439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.097985][T18439] RSP: 002b:00007ff901350028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 470.098008][T18439] RAX: ffffffffffffffda RBX: 00007ff900625fa0 RCX: 00007ff90039e159 [ 470.098022][T18439] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 470.098034][T18439] RBP: 00007ff901350090 R08: 0000000000000023 R09: 0000000000000000 [ 470.098046][T18439] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 470.098057][T18439] R13: 00007ff900626038 R14: 00007ff900625fa0 R15: 00007ffdbbd72038 [ 470.098093][T18439] [ 470.124888][T18365] wg2 speed is unknown, defaulting to 1000 [ 470.926728][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 471.047874][T18470] Bluetooth: MGMT ver 1.23 [ 471.047923][T18470] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 471.148843][T18475] FAULT_INJECTION: forcing a failure. [ 471.148843][T18475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.148877][T18475] CPU: 0 UID: 0 PID: 18475 Comm: syz.2.3010 Not tainted syzkaller #0 PREEMPT(full) [ 471.148899][T18475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.148920][T18475] Call Trace: [ 471.148928][T18475] [ 471.148937][T18475] dump_stack_lvl+0xe8/0x150 [ 471.148973][T18475] should_fail_ex+0x410/0x560 [ 471.149003][T18475] _copy_from_user+0x2d/0xb0 [ 471.149031][T18475] ipv6_flowlabel_opt+0x153/0x2b10 [ 471.149163][T18475] ? register_lock_class+0x31/0x2e0 [ 471.149189][T18475] ? __lock_acquire+0x747/0x2de0 [ 471.149214][T18475] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 471.149264][T18475] ? do_raw_spin_lock+0x12b/0x2f0 [ 471.149294][T18475] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.149324][T18475] ? do_ipv6_setsockopt+0x956/0x2960 [ 471.149353][T18475] ? __local_bh_enable_ip+0xd6/0x140 [ 471.149395][T18475] do_ipv6_setsockopt+0x9cb/0x2960 [ 471.149427][T18475] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 471.149449][T18475] ? aa_inet_opt_perm+0xae4/0xcf0 [ 471.149475][T18475] ? get_pid_task+0x20/0x1f0 [ 471.149504][T18475] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 471.149548][T18475] ? ksys_write+0x1e6/0x270 [ 471.149588][T18475] ? lock_acquire+0x115/0x350 [ 471.149617][T18475] ? aa_sock_opt_perm+0xe1/0x1e0 [ 471.149647][T18475] ipv6_setsockopt+0x59/0x170 [ 471.149670][T18475] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 471.149695][T18475] do_sock_setsockopt+0x17c/0x1b0 [ 471.149726][T18475] __x64_sys_setsockopt+0x13d/0x1b0 [ 471.149759][T18475] do_syscall_64+0x166/0x520 [ 471.149782][T18475] ? trace_irq_disable+0x3b/0x140 [ 471.149802][T18475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.149822][T18475] ? clear_bhb_loop+0x70/0xc0 [ 471.149847][T18475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.149870][T18475] RIP: 0033:0x7fd61599e159 [ 471.149889][T18475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.149905][T18475] RSP: 002b:00007fd616824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 471.149938][T18475] RAX: ffffffffffffffda RBX: 00007fd615c25fa0 RCX: 00007fd61599e159 [ 471.149953][T18475] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 471.149964][T18475] RBP: 00007fd616824090 R08: 0000000000000023 R09: 0000000000000000 [ 471.149978][T18475] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 471.149990][T18475] R13: 00007fd615c26038 R14: 00007fd615c25fa0 R15: 00007ffdb3b4db98 [ 471.150024][T18475] [ 471.221025][T18365] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.221137][T18365] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.221279][T18365] bridge_slave_0: entered allmulticast mode [ 471.232332][T18365] bridge_slave_0: entered promiscuous mode [ 471.257099][T18365] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.257209][T18365] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.264194][T18365] bridge_slave_1: entered allmulticast mode [ 471.273582][T18365] bridge_slave_1: entered promiscuous mode [ 471.329341][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3011'. [ 471.329367][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3011'. [ 471.329506][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3011'. [ 471.435640][T18365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.447805][T18365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.611101][T18365] team0: Port device team_slave_0 added [ 471.619461][T18365] team0: Port device team_slave_1 added [ 471.676049][T18365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.676068][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.676094][T18365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.678267][T18365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.678282][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.678305][T18365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.985933][T18365] hsr_slave_0: entered promiscuous mode [ 471.987394][T18365] hsr_slave_1: entered promiscuous mode [ 471.990416][T18365] debugfs: 'hsr0' already exists in 'hsr' [ 471.990436][T18365] Cannot create hsr debugfs directory [ 472.060698][ T5615] Bluetooth: hci0: command tx timeout [ 472.417865][T18365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.417906][T18365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.454916][T18522] IPv6: Can't replace route, no match found [ 472.529950][T18365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.530934][T18365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.594992][T18527] FAULT_INJECTION: forcing a failure. [ 472.594992][T18527] name failslab, interval 1, probability 0, space 0, times 0 [ 472.595027][T18527] CPU: 1 UID: 0 PID: 18527 Comm: syz.1.3022 Not tainted syzkaller #0 PREEMPT(full) [ 472.595049][T18527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.595061][T18527] Call Trace: [ 472.595070][T18527] [ 472.595079][T18527] dump_stack_lvl+0xe8/0x150 [ 472.595115][T18527] should_fail_ex+0x410/0x560 [ 472.595144][T18527] should_failslab+0xa8/0x100 [ 472.595201][T18527] __kmalloc_cache_noprof+0xa3/0x600 [ 472.595224][T18527] ? ipv6_flowlabel_opt+0xf94/0x2b10 [ 472.595249][T18527] ? ipv6_flowlabel_opt+0xf94/0x2b10 [ 472.595281][T18527] ipv6_flowlabel_opt+0xf94/0x2b10 [ 472.595308][T18527] ? register_lock_class+0x31/0x2e0 [ 472.595334][T18527] ? __lock_acquire+0x747/0x2de0 [ 472.595367][T18527] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 472.595424][T18527] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.595455][T18527] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.595486][T18527] ? do_ipv6_setsockopt+0x956/0x2960 [ 472.595517][T18527] ? __local_bh_enable_ip+0xd6/0x140 [ 472.595549][T18527] do_ipv6_setsockopt+0x9cb/0x2960 [ 472.595582][T18527] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 472.595605][T18527] ? aa_inet_opt_perm+0xae4/0xcf0 [ 472.595629][T18527] ? get_pid_task+0x20/0x1f0 [ 472.595657][T18527] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 472.595700][T18527] ? ksys_write+0x1e6/0x270 [ 472.595742][T18527] ? lock_acquire+0x115/0x350 [ 472.595773][T18527] ? aa_sock_opt_perm+0xe1/0x1e0 [ 472.595804][T18527] ipv6_setsockopt+0x59/0x170 [ 472.595829][T18527] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 472.595853][T18527] do_sock_setsockopt+0x17c/0x1b0 [ 472.595884][T18527] __x64_sys_setsockopt+0x13d/0x1b0 [ 472.595915][T18527] do_syscall_64+0x166/0x520 [ 472.595937][T18527] ? trace_irq_disable+0x3b/0x140 [ 472.595955][T18527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.595976][T18527] ? clear_bhb_loop+0x70/0xc0 [ 472.596002][T18527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.596022][T18527] RIP: 0033:0x7f75f459e159 [ 472.596042][T18527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.596059][T18527] RSP: 002b:00007f75f54d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 472.596081][T18527] RAX: ffffffffffffffda RBX: 00007f75f4825fa0 RCX: 00007f75f459e159 [ 472.596096][T18527] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 472.596108][T18527] RBP: 00007f75f54d5090 R08: 0000000000000023 R09: 0000000000000000 [ 472.596122][T18527] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 472.596134][T18527] R13: 00007f75f4826038 R14: 00007f75f4825fa0 R15: 00007fff4aecb1c8 [ 472.596169][T18527] [ 472.977465][T18365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.977504][T18365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.113148][T18540] netlink: 'syz.1.3027': attribute type 3 has an invalid length. [ 473.250566][T18544] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20000 [ 473.372556][T18365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.372596][T18365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.465613][T18558] FAULT_INJECTION: forcing a failure. [ 473.465613][T18558] name failslab, interval 1, probability 0, space 0, times 0 [ 473.465647][T18558] CPU: 1 UID: 0 PID: 18558 Comm: syz.2.3033 Not tainted syzkaller #0 PREEMPT(full) [ 473.465669][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.465681][T18558] Call Trace: [ 473.465690][T18558] [ 473.465699][T18558] dump_stack_lvl+0xe8/0x150 [ 473.465735][T18558] should_fail_ex+0x410/0x560 [ 473.465765][T18558] should_failslab+0xa8/0x100 [ 473.465792][T18558] __kmalloc_noprof+0xfe/0x720 [ 473.465812][T18558] ? __kmalloc_cache_noprof+0x14d/0x600 [ 473.465829][T18558] ? ipv6_flowlabel_opt+0x104d/0x2b10 [ 473.465853][T18558] ? ipv6_flowlabel_opt+0x104d/0x2b10 [ 473.465885][T18558] ipv6_flowlabel_opt+0x104d/0x2b10 [ 473.465924][T18558] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 473.465974][T18558] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.466003][T18558] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 473.466035][T18558] ? do_ipv6_setsockopt+0x956/0x2960 [ 473.466062][T18558] ? __local_bh_enable_ip+0xd6/0x140 [ 473.466094][T18558] do_ipv6_setsockopt+0x9cb/0x2960 [ 473.466126][T18558] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 473.466150][T18558] ? aa_inet_opt_perm+0xae4/0xcf0 [ 473.466173][T18558] ? get_pid_task+0x20/0x1f0 [ 473.466202][T18558] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 473.466246][T18558] ? ksys_write+0x1e6/0x270 [ 473.466286][T18558] ? lock_acquire+0x115/0x350 [ 473.466327][T18558] ? aa_sock_opt_perm+0xe1/0x1e0 [ 473.466357][T18558] ipv6_setsockopt+0x59/0x170 [ 473.466381][T18558] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 473.466405][T18558] do_sock_setsockopt+0x17c/0x1b0 [ 473.466439][T18558] __x64_sys_setsockopt+0x13d/0x1b0 [ 473.466470][T18558] do_syscall_64+0x166/0x520 [ 473.466492][T18558] ? trace_irq_disable+0x3b/0x140 [ 473.466510][T18558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.466530][T18558] ? clear_bhb_loop+0x70/0xc0 [ 473.466554][T18558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.466572][T18558] RIP: 0033:0x7fd61599e159 [ 473.466593][T18558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.466609][T18558] RSP: 002b:00007fd616824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.466631][T18558] RAX: ffffffffffffffda RBX: 00007fd615c25fa0 RCX: 00007fd61599e159 [ 473.466646][T18558] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 473.466657][T18558] RBP: 00007fd616824090 R08: 0000000000000023 R09: 0000000000000000 [ 473.466669][T18558] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 473.466681][T18558] R13: 00007fd615c26038 R14: 00007fd615c25fa0 R15: 00007ffdb3b4db98 [ 473.466716][T18558] [ 473.933396][T18574] __nla_validate_parse: 3 callbacks suppressed [ 473.933446][T18574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3035'. [ 474.141408][ T5615] Bluetooth: hci0: command tx timeout [ 474.408138][T18582] netlink: 'syz.2.3037': attribute type 3 has an invalid length. [ 474.445906][T18567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3032'. [ 474.445928][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3032'. [ 474.445944][T18567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3032'. [ 474.640241][T18586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3038'. [ 474.647357][T18365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.664951][T18593] netlink: 'syz.2.3040': attribute type 2 has an invalid length. [ 474.664972][T18593] netlink: 'syz.2.3040': attribute type 2 has an invalid length. [ 474.672007][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.673205][T18365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.706248][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.707112][T18365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.733419][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.734307][T18365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.771859][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.827290][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3041'. [ 474.926721][T18604] netlink: 'syz.2.3041': attribute type 4 has an invalid length. [ 474.926745][T18604] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3041'. [ 474.929662][T18605] netlink: 'syz.2.3041': attribute type 4 has an invalid length. [ 474.929682][T18605] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3041'. [ 474.967486][T18604] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 474.974198][T18605] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 475.108130][T18365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.148347][T18365] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.192032][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.192130][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.195265][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.195394][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.295342][T18632] netlink: 'syz.4.3044': attribute type 21 has an invalid length. [ 475.295432][T18632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3044'. [ 475.319125][T18633] netlink: 'syz.4.3044': attribute type 21 has an invalid length. [ 475.328801][T18633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3044'. [ 475.560259][T18637] FAULT_INJECTION: forcing a failure. [ 475.560259][T18637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.560302][T18637] CPU: 1 UID: 0 PID: 18637 Comm: syz.4.3045 Not tainted syzkaller #0 PREEMPT(full) [ 475.560324][T18637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.560335][T18637] Call Trace: [ 475.560344][T18637] [ 475.560352][T18637] dump_stack_lvl+0xe8/0x150 [ 475.560386][T18637] should_fail_ex+0x410/0x560 [ 475.560420][T18637] _copy_from_user+0x2d/0xb0 [ 475.560446][T18637] ipv6_flowlabel_opt+0x1518/0x2b10 [ 475.560487][T18637] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 475.560538][T18637] ? do_raw_spin_lock+0x12b/0x2f0 [ 475.560569][T18637] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 475.560602][T18637] ? do_ipv6_setsockopt+0x956/0x2960 [ 475.560631][T18637] ? __local_bh_enable_ip+0xd6/0x140 [ 475.560663][T18637] do_ipv6_setsockopt+0x9cb/0x2960 [ 475.560695][T18637] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 475.560718][T18637] ? aa_inet_opt_perm+0xae4/0xcf0 [ 475.560743][T18637] ? get_pid_task+0x20/0x1f0 [ 475.560770][T18637] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 475.560811][T18637] ? ksys_write+0x1e6/0x270 [ 475.560851][T18637] ? lock_acquire+0x115/0x350 [ 475.560883][T18637] ? aa_sock_opt_perm+0xe1/0x1e0 [ 475.560913][T18637] ipv6_setsockopt+0x59/0x170 [ 475.560933][T18637] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.560952][T18637] do_sock_setsockopt+0x17c/0x1b0 [ 475.560976][T18637] __x64_sys_setsockopt+0x13d/0x1b0 [ 475.560999][T18637] do_syscall_64+0x166/0x520 [ 475.561018][T18637] ? trace_irq_disable+0x3b/0x140 [ 475.561034][T18637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.561049][T18637] ? clear_bhb_loop+0x70/0xc0 [ 475.561068][T18637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.561083][T18637] RIP: 0033:0x7f8e7359e159 [ 475.561098][T18637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.561112][T18637] RSP: 002b:00007f8e717f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.561130][T18637] RAX: ffffffffffffffda RBX: 00007f8e73825fa0 RCX: 00007f8e7359e159 [ 475.561141][T18637] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 475.561151][T18637] RBP: 00007f8e717f6090 R08: 0000000000000023 R09: 0000000000000000 [ 475.561161][T18637] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 475.561171][T18637] R13: 00007f8e73826038 R14: 00007f8e73825fa0 R15: 00007fffd511f918 [ 475.561197][T18637] [ 475.613740][T18640] netlink: 'syz.3.3046': attribute type 4 has an invalid length. [ 475.852799][T18642] ip_tables: iptables: counters copy to user failed while replacing table [ 476.104545][T18649] Unsupported ieee802154 address type: 0 [ 476.224188][ T5615] Bluetooth: hci0: command tx timeout [ 476.673341][T18365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.700955][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 476.878973][T18675] ip_tables: iptables: counters copy to user failed while replacing table [ 476.882704][T18365] veth0_vlan: entered promiscuous mode [ 476.895450][T18675] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000 [ 476.929300][T18365] veth1_vlan: entered promiscuous mode [ 476.985171][T18672] netlink: 'syz.3.3055': attribute type 2 has an invalid length. [ 477.098477][T18365] veth0_macvtap: entered promiscuous mode [ 477.207169][T18365] veth1_macvtap: entered promiscuous mode [ 477.264697][T18365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.288215][T18365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.344407][T18621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.345751][T18621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.346121][T18621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.346223][T18621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.646910][T18622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.646936][T18622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.786332][T18622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.786356][T18622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.924731][T18706] lo: entered allmulticast mode [ 477.925080][T18706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.969785][T18708] ip_tables: iptables: counters copy to user failed while replacing table [ 478.212945][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.225145][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.229361][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.245925][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.248175][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.300297][ T5615] Bluetooth: hci0: command tx timeout [ 479.317158][ T27] tipc: Subscription rejected, illegal request [ 479.907145][T18770] __nla_validate_parse: 6 callbacks suppressed [ 479.907168][T18770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3074'. [ 479.907190][T18770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3074'. [ 479.907454][T18770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3074'. [ 479.907475][T18770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3074'. [ 479.928479][T18769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3076'. [ 479.937392][T18772] FAULT_INJECTION: forcing a failure. [ 479.937392][T18772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.937421][T18772] CPU: 0 UID: 0 PID: 18772 Comm: syz.3.3075 Not tainted syzkaller #0 PREEMPT(full) [ 479.937441][T18772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.937451][T18772] Call Trace: [ 479.937459][T18772] [ 479.937467][T18772] dump_stack_lvl+0xe8/0x150 [ 479.937499][T18772] should_fail_ex+0x410/0x560 [ 479.937526][T18772] _copy_to_user+0x31/0xb0 [ 479.937551][T18772] simple_read_from_buffer+0xe1/0x170 [ 479.937580][T18772] proc_fail_nth_read+0x1bb/0x230 [ 479.937650][T18772] ? common_file_perm+0x20e/0x2b0 [ 479.937674][T18772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.937703][T18772] ? rw_verify_area+0x24a/0x4c0 [ 479.937730][T18772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.937755][T18772] vfs_read+0x213/0xa80 [ 479.937785][T18772] ? __pfx___mutex_lock+0x10/0x10 [ 479.937873][T18772] ? __pfx_vfs_read+0x10/0x10 [ 479.937900][T18772] ? __fget_files+0x2a/0x420 [ 479.937928][T18772] ? __fget_files+0x3a2/0x420 [ 479.937950][T18772] ? __fget_files+0x2a/0x420 [ 479.937986][T18772] ksys_read+0x150/0x270 [ 479.938014][T18772] ? __pfx_ksys_read+0x10/0x10 [ 479.938050][T18772] do_syscall_64+0x166/0x520 [ 479.938070][T18772] ? trace_irq_disable+0x3b/0x140 [ 479.938087][T18772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.938106][T18772] ? clear_bhb_loop+0x70/0xc0 [ 479.938128][T18772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.938146][T18772] RIP: 0033:0x7ff90035e98e [ 479.938163][T18772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.938178][T18772] RSP: 002b:00007ff90134ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.938198][T18772] RAX: ffffffffffffffda RBX: 00007ff9013506c0 RCX: 00007ff90035e98e [ 479.938211][T18772] RDX: 000000000000000f RSI: 00007ff9013500a0 RDI: 0000000000000004 [ 479.938222][T18772] RBP: 00007ff901350090 R08: 0000000000000000 R09: 0000000000000000 [ 479.938233][T18772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.938243][T18772] R13: 00007ff900626038 R14: 00007ff900625fa0 R15: 00007ffdbbd72038 [ 479.938282][T18772] [ 480.301967][ T4930] Bluetooth: hci4: command tx timeout [ 480.442958][T18713] wg2 speed is unknown, defaulting to 1000 [ 480.560801][T18782] validate_nla: 1 callbacks suppressed [ 480.560823][T18782] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 480.560838][T18782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3079'. [ 480.780864][ T4930] Bluetooth: hci0: command 0x0c3a tx timeout [ 480.786162][ T5615] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 481.506637][T18713] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.509441][T18713] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.509595][T18713] bridge_slave_0: entered allmulticast mode [ 481.543250][T18713] bridge_slave_0: entered promiscuous mode [ 481.556839][T18713] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.556974][T18713] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.557122][T18713] bridge_slave_1: entered allmulticast mode [ 481.594090][T18713] bridge_slave_1: entered promiscuous mode [ 481.705564][T18713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.716354][T18713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.797764][T18713] team0: Port device team_slave_0 added [ 481.808256][T18713] team0: Port device team_slave_1 added [ 481.961992][T18713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.962014][T18713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.962042][T18713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.029952][T18713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.029982][T18713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.030004][T18713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.156810][T18824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3088'. [ 482.156847][T18824] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 482.209374][T18713] hsr_slave_0: entered promiscuous mode [ 482.216788][T18713] hsr_slave_1: entered promiscuous mode [ 482.217682][T18713] debugfs: 'hsr0' already exists in 'hsr' [ 482.217703][T18713] Cannot create hsr debugfs directory [ 482.380459][ T5615] Bluetooth: hci4: command tx timeout [ 482.665226][T18713] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.723297][T18842] netlink: Invalid conntrack helper [ 482.723333][T18842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.768254][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 482.853563][T18713] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.969859][T18713] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.086997][T18713] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.473754][T18855] sctp: [Deprecated]: syz.4.3098 (pid 18855) Use of int in max_burst socket option. [ 483.473754][T18855] Use struct sctp_assoc_value instead [ 483.569094][T18713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.592799][T18713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.595376][T18713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 483.629589][T18713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.639992][T18713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 483.657038][T18713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.658128][T18713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.684253][T18713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.717889][T18864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3100'. [ 483.754579][T18864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.763299][T18869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3102'. [ 484.074848][T18713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.125730][T18713] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.168005][T18623] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.168130][T18623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.210119][T18623] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.210242][T18623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.460692][ T4930] Bluetooth: hci4: command tx timeout [ 484.497552][T18897] ip6t_frag: unknown flags 4 [ 484.798456][T18911] netlink: 'syz.3.3107': attribute type 2 has an invalid length. [ 485.686781][T18713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.732274][T18956] sit1: entered promiscuous mode [ 485.972375][T18713] veth0_vlan: entered promiscuous mode [ 486.005395][T18713] veth1_vlan: entered promiscuous mode [ 486.083798][T18713] veth0_macvtap: entered promiscuous mode [ 486.116120][T18713] veth1_macvtap: entered promiscuous mode [ 486.227447][T18713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.272165][T18713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.284719][T18968] syzkaller0: entered promiscuous mode [ 486.284742][T18968] syzkaller0: entered allmulticast mode [ 486.294494][T18968] __nla_validate_parse: 1 callbacks suppressed [ 486.294511][T18968] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3114'. [ 486.294524][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 486.294540][T18968] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3114'. [ 486.294551][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 486.294564][T18968] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3114'. [ 486.422348][T18622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.424671][T18976] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 486.424695][T18976] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 486.492704][ T27] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.551334][T18622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.551887][T18623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.749497][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 486.807874][T18981] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3116'. [ 486.822382][T18981] nbd: must specify at least one socket [ 486.843922][T18625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.843945][T18625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.115916][T18622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.115940][T18622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.144362][T18994] ip_tables: iptables: counters copy to user failed while replacing table [ 487.693352][T19006] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3065'. [ 488.020875][T19011] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3123'. [ 488.134393][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 489.133236][ T4930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.138119][ T4930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.139826][ T4930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.151276][ T4930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.154844][ T4930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.245897][T19014] wg2 speed is unknown, defaulting to 1000 [ 489.344927][T19032] nbd: must specify at least one socket [ 489.358353][T19017] netlink: 'syz.2.3123': attribute type 15 has an invalid length. [ 490.076623][T19058] x_tables: duplicate underflow at hook 1 [ 490.418497][T19056] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 490.446574][T19062] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 490.447666][T19062] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 490.773539][T19072] ip_tables: iptables: counters copy to user failed while replacing table [ 490.907241][T19075] netlink: 'syz.0.3136': attribute type 17 has an invalid length. [ 491.050630][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.063333][T19072] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.180642][ T4930] Bluetooth: hci2: command tx timeout [ 491.468527][T19075] sit1: left promiscuous mode [ 491.472539][T19098] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 491.666518][T19033] wg2 speed is unknown, defaulting to 1000 [ 491.849827][T19093] syzkaller0: entered promiscuous mode [ 491.849861][T19093] syzkaller0: entered allmulticast mode [ 491.929490][T19109] __nla_validate_parse: 4 callbacks suppressed [ 491.929512][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'. [ 491.945870][T19105] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3139'. [ 491.954966][T19111] netlink: 'syz.3.3141': attribute type 10 has an invalid length. [ 491.998489][T19109] nbd: must specify at least one socket [ 493.262314][ T4930] Bluetooth: hci2: command tx timeout [ 494.796983][T19107] syzkaller1: entered promiscuous mode [ 494.797009][T19107] syzkaller1: entered allmulticast mode [ 494.827276][T19111] bond_slave_0: entered promiscuous mode [ 494.827482][T19111] bond_slave_0: entered allmulticast mode [ 494.842528][T19111] team0: Port device bond_slave_0 added [ 495.342317][ T4930] Bluetooth: hci2: command tx timeout [ 495.705019][T19144] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.3148'. [ 495.745909][T19149] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 495.807372][T19148] bridge0: port 3(team0) entered disabled state [ 495.807537][T19148] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.807668][T19148] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.808302][T19148] bridge0: entered allmulticast mode [ 495.833483][T19142] team0: left allmulticast mode [ 495.833506][T19142] team_slave_0: left allmulticast mode [ 495.833521][T19142] team_slave_1: left allmulticast mode [ 495.833534][T19142] macvlan2: left allmulticast mode [ 495.833608][T19142] macvlan3: left allmulticast mode [ 495.833619][T19142] geneve1: left allmulticast mode [ 495.833683][T19142] bond_slave_0: left allmulticast mode [ 495.833830][T19142] team0: left promiscuous mode [ 495.833841][T19142] team_slave_0: left promiscuous mode [ 495.834027][T19142] team_slave_1: left promiscuous mode [ 495.834181][T19142] macvlan2: left promiscuous mode [ 495.834524][T19142] macvlan3: left promiscuous mode [ 495.834868][T19142] bond_slave_0: left promiscuous mode [ 495.841231][T19142] bridge0: port 3(team0) entered disabled state [ 496.192833][T19142] bridge_slave_1: left allmulticast mode [ 496.192865][T19142] bridge_slave_1: left promiscuous mode [ 496.193830][T19142] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.230510][T19142] bridge_slave_0: left allmulticast mode [ 496.230541][T19142] bridge_slave_0: left promiscuous mode [ 496.230779][T19142] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.662266][T19033] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.669779][T19033] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.669941][T19033] bridge_slave_0: entered allmulticast mode [ 496.677360][T19033] bridge_slave_0: entered promiscuous mode [ 496.686281][T19033] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.687266][T19033] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.687398][T19033] bridge_slave_1: entered allmulticast mode [ 496.698788][T19033] bridge_slave_1: entered promiscuous mode [ 496.810830][T19033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.816169][T19033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.983602][T19033] team0: Port device team_slave_0 added [ 496.996290][T19033] team0: Port device team_slave_1 added [ 497.125894][T19033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.125914][T19033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.125940][T19033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.128108][T19033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.128124][T19033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.128148][T19033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.259803][T19170] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 497.295402][T19033] hsr_slave_0: entered promiscuous mode [ 497.296780][T19033] hsr_slave_1: entered promiscuous mode [ 497.297623][T19033] debugfs: 'hsr0' already exists in 'hsr' [ 497.297645][T19033] Cannot create hsr debugfs directory [ 497.926351][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 497.946544][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 497.946952][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 497.947599][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 498.015007][T19193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3161'. [ 498.352137][T19033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.371565][T19033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.375740][T19033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.400612][T19033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.403523][T19033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 498.427993][T19033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.437992][T19033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.456330][T19033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.548919][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'. [ 498.604417][T19214] hsr_slave_1 (unregistering): left promiscuous mode [ 498.868634][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 498.868660][T19218] openvswitch: netlink: Flow key attribute not present in set flow. [ 499.001263][T19033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.038138][T19223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3169'. [ 499.038306][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3169'. [ 499.107617][T19033] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.163841][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.163969][ T7560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.267541][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.267673][ T7560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.306643][T19230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3171'. [ 499.575726][T19239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.049004][T19254] bond19: Removing last arp target with arp_interval on [ 500.123717][T19269] x_tables: ip_tables: osf match: only valid for protocol 6 [ 500.239961][T19274] x_tables: duplicate entry at hook 1 [ 500.803823][T19033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.658975][T19332] netlink: 'syz.3.3190': attribute type 10 has an invalid length. [ 501.703034][T19332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.775431][T19332] team0: Port device netdevsim1 added [ 502.042341][T19033] veth0_vlan: entered promiscuous mode [ 502.111985][T19033] veth1_vlan: entered promiscuous mode [ 502.433221][T19033] veth0_macvtap: entered promiscuous mode [ 502.456489][T19033] veth1_macvtap: entered promiscuous mode [ 502.602206][T19033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.638722][T19033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.705493][T18625] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.706252][ T7560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.706289][ T7560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.706319][ T7560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.227413][T18621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.227437][T18621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.413534][T18622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.413557][T18622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.670938][ T27] IPVS: starting estimator thread 0... [ 503.675966][T19385] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 503.760438][T19389] IPVS: using max 26 ests per chain, 62400 per kthread [ 504.189564][T19403] __nla_validate_parse: 207 callbacks suppressed [ 504.189589][T19403] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3202'. [ 504.356344][T19404] netlink: 'syz.5.3201': attribute type 2 has an invalid length. [ 504.397817][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 504.516569][T19406] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3203'. [ 504.600324][T19406] nbd: must specify at least one socket [ 504.626894][T19414] netlink: 810 bytes leftover after parsing attributes in process `syz.4.3206'. [ 504.643006][T19414] netlink: 'syz.4.3206': attribute type 5 has an invalid length. [ 504.757564][T19415] netlink: 810 bytes leftover after parsing attributes in process `syz.4.3206'. [ 504.770513][T19420] netlink: 'syz.4.3206': attribute type 5 has an invalid length. [ 504.772894][T19415] netlink: 'syz.4.3206': attribute type 5 has an invalid length. [ 504.954512][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 504.984424][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 504.999205][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 505.008595][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 505.011761][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 505.042097][T19422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3207'. [ 505.043812][T19426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3207'. [ 505.086571][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3208'. [ 505.207610][T19440] ip_tables: iptables: counters copy to user failed while replacing table [ 505.247195][T19434] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 505.546880][T19449] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3212'. [ 505.677798][T11594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 16384 - 0 [ 505.677839][T11594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.897220][T11594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 16384 - 0 [ 505.897268][T11594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.931373][T19452] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3213'. [ 505.982626][T19444] debugfs: '1ур^!' already exists in 'ieee80211' [ 506.265177][T11594] team0: Port device netdevsim1 removed [ 506.288442][T11594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 16384 - 0 [ 506.288479][T11594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.461873][T11594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 16384 - 0 [ 506.461912][T11594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.081824][T19489] batman_adv: batadv0: Adding interface: syzkaller0 [ 507.081844][T19489] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.081874][T19489] batman_adv: batadv0: Interface activated: syzkaller0 [ 507.101490][ T5615] Bluetooth: hci6: command tx timeout [ 507.154758][ T12] nci: nci_rx_work: unknown MT 0x6 [ 507.165987][T19489] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 507.295789][T19489] xt_CT: No such helper "netbios-ns" [ 507.371080][T19486] team0: Port device team_slave_0 removed [ 507.535756][T19485] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 507.605721][T19485] batman_adv: batadv0: Removing interface: syzkaller0 [ 509.180743][ T5615] Bluetooth: hci6: command tx timeout [ 510.015460][T19494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.262444][ T5615] Bluetooth: hci6: command tx timeout [ 513.177015][T11594] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 513.177053][T11594] ------------[ cut here ]------------ [ 513.177063][T11594] lockdep bfs error:-1 [ 513.177073][T11594] WARNING: kernel/locking/lockdep.c:2103 at print_bfs_bug+0x20/0x40, CPU#1: kworker/u8:24/11594 [ 513.204538][T11594] Modules linked in: [ 513.208461][T11594] CPU: 1 UID: 0 PID: 11594 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 513.218112][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.228185][T11594] Workqueue: netns cleanup_net [ 513.233056][T11594] RIP: 0010:print_bfs_bug+0x22/0x40 [ 513.238278][T11594] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 47 eb 37 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d e0 f3 d9 0e 89 de <67> 48 0f b9 3a 5b 5d e9 02 8c 45 0a cc 48 c7 c7 a7 a0 5a 8e e8 45 [ 513.257902][T11594] RSP: 0018:ffffc9000371f088 EFLAGS: 00010046 [ 513.263998][T11594] RAX: 000000000000003b RBX: 00000000ffffffff RCX: da41d30bfeb06600 [ 513.271991][T11594] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff907d8130 [ 513.279981][T11594] RBP: 0000000000000001 R08: ffffc9000371ee07 R09: 1ffff920006e3dc0 [ 513.287974][T11594] R10: dffffc0000000000 R11: fffff520006e3dc1 R12: 0000000000000035 [ 513.295970][T11594] R13: ffffffff9446b5c0 R14: ffffffff973f5d28 R15: ffffffff973f66c8 [ 513.303963][T11594] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 513.312911][T11594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.319510][T11594] CR2: 0000555559d514e8 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 513.327509][T11594] Call Trace: [ 513.330810][T11594] [ 513.333775][T11594] __lock_acquire+0x25ed/0x2de0 [ 513.338672][T11594] lock_acquire+0x115/0x350 [ 513.340497][ T5615] Bluetooth: hci6: command tx timeout [ 513.348573][T11594] ? ktime_get+0x45/0x220 [ 513.352968][T11594] ? ktime_get+0x45/0x220 [ 513.357318][T11594] seqcount_lockdep_reader_access+0x55/0x100 [ 513.363320][T11594] ? ktime_get+0x45/0x220 [ 513.367666][T11594] ktime_get+0x45/0x220 [ 513.371842][T11594] clockevents_program_event+0x290/0x630 [ 513.377506][T11594] ? __pfx_clockevents_program_event+0x10/0x10 [ 513.383689][T11594] ? tick_program_event+0x8f/0x120 [ 513.388827][T11594] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 513.394405][T11594] irqentry_exit+0x8d3/0x910 [ 513.399017][T11594] ? trace_irq_disable+0x3b/0x140 [ 513.404063][T11594] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.410066][T11594] RIP: 0010:lock_acquire+0x232/0x350 [ 513.415374][T11594] Code: ff ff ff e8 50 e5 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 00 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf e9 45 0a cc 48 8d 3d 97 4b da [ 513.435002][T11594] RSP: 0018:ffffc9000371f4f0 EFLAGS: 00000296 [ 513.441106][T11594] RAX: da41d30bfeb06600 RBX: 0000000000000001 RCX: 8000000000000201 [ 513.449101][T11594] RDX: ffff888051a18c50 RSI: ffffffff8e69baf3 RDI: ffffffff8c6da080 [ 513.457091][T11594] RBP: ffff888051a18000 R08: 0000000000000008 R09: ffffffff96d172b0 [ 513.465092][T11594] R10: 0000000058e7ec19 R11: 0000000089e17d30 R12: ffff8880466b7170 [ 513.473090][T11594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 513.481089][T11594] ? dev_deactivate_many+0xade/0xda0 [ 513.486510][T11594] _raw_spin_lock_bh+0x36/0x50 [ 513.491303][T11594] ? dev_deactivate_many+0xade/0xda0 [ 513.496619][T11594] dev_deactivate_many+0xade/0xda0 [ 513.501781][T11594] ? dev_deactivate_many+0x25d/0xda0 [ 513.507095][T11594] __dev_close_many+0x180/0x6e0 [ 513.512016][T11594] ? kasan_save_stack+0x3e/0x60 [ 513.516889][T11594] ? kasan_record_aux_stack+0xbd/0xd0 [ 513.522304][T11594] ? call_rcu+0xee/0x8b0 [ 513.526589][T11594] ? nexthop_net_exit_rtnl+0x17c/0x2a0 [ 513.532135][T11594] ? process_scheduled_works+0xc3d/0x1630 [ 513.537888][T11594] ? worker_thread+0xa47/0xfb0 [ 513.542684][T11594] ? __pfx___dev_close_many+0x10/0x10 [ 513.548081][T11594] netif_close_many+0x249/0x660 [ 513.552962][T11594] ? __pfx_netif_close_many+0x10/0x10 [ 513.558361][T11594] unregister_netdevice_many_notify+0xb76/0x2140 [ 513.564776][T11594] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 513.571571][T11594] ? nexthop_net_exit_rtnl+0x25f/0x2a0 [ 513.577057][T11594] ops_undo_list+0x391/0x8d0 [ 513.581679][T11594] ? __pfx_ops_undo_list+0x10/0x10 [ 513.586818][T11594] ? idr_destroy+0x227/0x290 [ 513.591495][T11594] cleanup_net+0x572/0x810 [ 513.595936][T11594] ? __pfx_cleanup_net+0x10/0x10 [ 513.600901][T11594] ? rcu_is_watching+0x16/0xb0 [ 513.605694][T11594] ? process_scheduled_works+0x97a/0x1630 [ 513.611442][T11594] process_scheduled_works+0xc3d/0x1630 [ 513.617030][T11594] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.623036][T11594] ? assign_work+0x3cf/0x5d0 [ 513.627651][T11594] worker_thread+0xa47/0xfb0 [ 513.632284][T11594] kthread+0x38b/0x480 [ 513.636370][T11594] ? __pfx_worker_thread+0x10/0x10 [ 513.641504][T11594] ? __pfx_kthread+0x10/0x10 [ 513.646114][T11594] ret_from_fork+0x514/0xb70 [ 513.650752][T11594] ? __pfx_ret_from_fork+0x10/0x10 [ 513.655884][T11594] ? __switch_to+0xc89/0x1420 [ 513.660616][T11594] ? __pfx_kthread+0x10/0x10 [ 513.665227][T11594] ret_from_fork_asm+0x1a/0x30 [ 513.670029][T11594] [ 513.673068][T11594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.680368][T11594] CPU: 1 UID: 0 PID: 11594 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 513.690019][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.700104][T11594] Workqueue: netns cleanup_net [ 513.704905][T11594] Call Trace: [ 513.708200][T11594] [ 513.711148][T11594] vpanic+0x56d/0xa60 [ 513.715194][T11594] ? __pfx__printk+0x10/0x10 [ 513.719807][T11594] ? __pfx_vpanic+0x10/0x10 [ 513.724338][T11594] ? is_bpf_text_address+0x292/0x2b0 [ 513.729655][T11594] ? is_bpf_text_address+0x26/0x2b0 [ 513.734889][T11594] panic+0xc5/0xd0 [ 513.738640][T11594] ? __pfx_panic+0x10/0x10 [ 513.743095][T11594] ? ret_from_fork_asm+0x1a/0x30 [ 513.748063][T11594] __warn+0x315/0x4c0 [ 513.752070][T11594] ? print_bfs_bug+0x20/0x40 [ 513.756686][T11594] ? print_bfs_bug+0x20/0x40 [ 513.761301][T11594] __report_bug+0x276/0x570 [ 513.765895][T11594] ? print_bfs_bug+0x20/0x40 [ 513.770507][T11594] ? __pfx___report_bug+0x10/0x10 [ 513.775560][T11594] ? __pfx_vprintk_emit+0x10/0x10 [ 513.780634][T11594] ? rcu_is_watching+0x16/0xb0 [ 513.785427][T11594] report_bug_entry+0x19b/0x290 [ 513.790305][T11594] ? print_bfs_bug+0x22/0x40 [ 513.794918][T11594] ? print_bfs_bug+0x27/0x40 [ 513.799532][T11594] handle_bug+0xce/0x200 [ 513.803804][T11594] exc_invalid_op+0x1a/0x50 [ 513.808335][T11594] asm_exc_invalid_op+0x1a/0x20 [ 513.813207][T11594] RIP: 0010:print_bfs_bug+0x22/0x40 [ 513.818430][T11594] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 47 eb 37 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d e0 f3 d9 0e 89 de <67> 48 0f b9 3a 5b 5d e9 02 8c 45 0a cc 48 c7 c7 a7 a0 5a 8e e8 45 [ 513.838056][T11594] RSP: 0018:ffffc9000371f088 EFLAGS: 00010046 [ 513.844151][T11594] RAX: 000000000000003b RBX: 00000000ffffffff RCX: da41d30bfeb06600 [ 513.852145][T11594] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff907d8130 [ 513.860134][T11594] RBP: 0000000000000001 R08: ffffc9000371ee07 R09: 1ffff920006e3dc0 [ 513.868818][T11594] R10: dffffc0000000000 R11: fffff520006e3dc1 R12: 0000000000000035 [ 513.876822][T11594] R13: ffffffff9446b5c0 R14: ffffffff973f5d28 R15: ffffffff973f66c8 [ 513.884834][T11594] ? print_bfs_bug+0x3b/0x40 [ 513.889458][T11594] __lock_acquire+0x25ed/0x2de0 [ 513.894347][T11594] lock_acquire+0x115/0x350 [ 513.898877][T11594] ? ktime_get+0x45/0x220 [ 513.903238][T11594] ? ktime_get+0x45/0x220 [ 513.907589][T11594] seqcount_lockdep_reader_access+0x55/0x100 [ 513.913593][T11594] ? ktime_get+0x45/0x220 [ 513.917941][T11594] ktime_get+0x45/0x220 [ 513.922115][T11594] clockevents_program_event+0x290/0x630 [ 513.927789][T11594] ? __pfx_clockevents_program_event+0x10/0x10 [ 513.933976][T11594] ? tick_program_event+0x8f/0x120 [ 513.939108][T11594] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 513.944682][T11594] irqentry_exit+0x8d3/0x910 [ 513.949302][T11594] ? trace_irq_disable+0x3b/0x140 [ 513.954370][T11594] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.960380][T11594] RIP: 0010:lock_acquire+0x232/0x350 [ 513.965692][T11594] Code: ff ff ff e8 50 e5 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 00 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf e9 45 0a cc 48 8d 3d 97 4b da [ 513.985321][T11594] RSP: 0018:ffffc9000371f4f0 EFLAGS: 00000296 [ 513.991419][T11594] RAX: da41d30bfeb06600 RBX: 0000000000000001 RCX: 8000000000000201 [ 513.999412][T11594] RDX: ffff888051a18c50 RSI: ffffffff8e69baf3 RDI: ffffffff8c6da080 [ 514.007407][T11594] RBP: ffff888051a18000 R08: 0000000000000008 R09: ffffffff96d172b0 [ 514.015401][T11594] R10: 0000000058e7ec19 R11: 0000000089e17d30 R12: ffff8880466b7170 [ 514.023394][T11594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 514.031398][T11594] ? dev_deactivate_many+0xade/0xda0 [ 514.036719][T11594] _raw_spin_lock_bh+0x36/0x50 [ 514.041500][T11594] ? dev_deactivate_many+0xade/0xda0 [ 514.046811][T11594] dev_deactivate_many+0xade/0xda0 [ 514.051951][T11594] ? dev_deactivate_many+0x25d/0xda0 [ 514.057266][T11594] __dev_close_many+0x180/0x6e0 [ 514.062136][T11594] ? kasan_save_stack+0x3e/0x60 [ 514.067008][T11594] ? kasan_record_aux_stack+0xbd/0xd0 [ 514.072412][T11594] ? call_rcu+0xee/0x8b0 [ 514.076691][T11594] ? nexthop_net_exit_rtnl+0x17c/0x2a0 [ 514.082183][T11594] ? process_scheduled_works+0xc3d/0x1630 [ 514.087930][T11594] ? worker_thread+0xa47/0xfb0 [ 514.092721][T11594] ? __pfx___dev_close_many+0x10/0x10 [ 514.098119][T11594] netif_close_many+0x249/0x660 [ 514.102993][T11594] ? __pfx_netif_close_many+0x10/0x10 [ 514.108393][T11594] unregister_netdevice_many_notify+0xb76/0x2140 [ 514.114759][T11594] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 514.121562][T11594] ? nexthop_net_exit_rtnl+0x25f/0x2a0 [ 514.127060][T11594] ops_undo_list+0x391/0x8d0 [ 514.131681][T11594] ? __pfx_ops_undo_list+0x10/0x10 [ 514.136821][T11594] ? idr_destroy+0x227/0x290 [ 514.141438][T11594] cleanup_net+0x572/0x810 [ 514.145875][T11594] ? __pfx_cleanup_net+0x10/0x10 [ 514.150840][T11594] ? rcu_is_watching+0x16/0xb0 [ 514.155634][T11594] ? process_scheduled_works+0x97a/0x1630 [ 514.161382][T11594] process_scheduled_works+0xc3d/0x1630 [ 514.166967][T11594] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.172976][T11594] ? assign_work+0x3cf/0x5d0 [ 514.177591][T11594] worker_thread+0xa47/0xfb0 [ 514.182226][T11594] kthread+0x38b/0x480 [ 514.186320][T11594] ? __pfx_worker_thread+0x10/0x10 [ 514.191453][T11594] ? __pfx_kthread+0x10/0x10 [ 514.196063][T11594] ret_from_fork+0x514/0xb70 [ 514.200671][T11594] ? __pfx_ret_from_fork+0x10/0x10 [ 514.205802][T11594] ? __switch_to+0xc89/0x1420 [ 514.210511][T11594] ? __pfx_kthread+0x10/0x10 [ 514.215122][T11594] ret_from_fork_asm+0x1a/0x30 [ 514.219923][T11594] [ 514.223097][T11594] Kernel Offset: disabled [ 514.227417][T11594] Rebooting in 86400 seconds..