last executing test programs: 4.626764674s ago: executing program 2 (id=3776): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x9}}]}]}]}, 0x58}}, 0x4000000) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="9a5be948f5fe13ee19cf97661a98fa33025197433e80884e3711ca03692a0ce9df1d", 0x22}, {&(0x7f0000000740)="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", 0x4af}], 0x2, 0x0, 0x0, 0xc4}, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async) close(r3) clock_gettime(0x0, &(0x7f0000003240)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000003100)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000008c0)}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000ac0)=""/122, 0x7a}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000dc0)=""/83, 0x53}], 0x5, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000fc0)=""/232, 0xe8}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2, &(0x7f00000020c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002140), 0x6e, &(0x7f00000028c0)=[{&(0x7f00000021c0)=""/52, 0x34}, {&(0x7f0000002200)=""/215, 0xd7}, {&(0x7f0000002300)=""/126, 0x7e}, {&(0x7f0000002380)=""/235, 0xeb}, {&(0x7f0000002480)=""/207, 0xcf}, {&(0x7f0000002580)=""/143, 0x8f}, {&(0x7f0000002640)=""/225, 0xe1}, {&(0x7f0000002740)=""/53, 0x35}, {&(0x7f0000002880)=""/52, 0x34}], 0x9, &(0x7f0000002980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/208, 0xd0}, {&(0x7f0000002b80)=""/236, 0xec}, {&(0x7f0000002c80)=""/141, 0x8d}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f0000002dc0)=""/238, 0xee}, {&(0x7f0000002ec0)=""/112, 0x70}], 0x7, &(0x7f0000002fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x5, 0xc0, &(0x7f0000003280)={r4, r5+10000000}) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r7, @ANYRES64=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = socket$alg(0x26, 0x5, 0x0) r15 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000fa03"], 0x28}}, 0x0) (async) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000000)="4a64b94c18b5cc8840878732acc59b79688588c78c6e80a7bfaa4c4c1c74a6bf509bf02563f0933ed1c0cfb0a5db2ef59b2eda638ea093d6167b6eaa24cdf913555936718756bea4935a2a656c967c5431d222533a8a57b9eca1d0678fed7ff122a9281453cebf7e42b930fb3ce133cb2681ea", 0x73) 4.455057619s ago: executing program 2 (id=3778): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x4, 0x200000006c832, r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={0x5c, r6, 0x405, 0x70bd2f, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) pselect6(0x81, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYRES64=r2, @ANYRESOCT=r4], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x86dc, 0xb, 0x100, 0xc}}}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) 4.140502156s ago: executing program 0 (id=3782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0x80000001, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x3, 0x7, 0x7, 0xa, 0x92, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35d7, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x4, 0x6, 0xb, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xc}, 0x47, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.881000587s ago: executing program 2 (id=3785): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) ioctl$sock_proto_private(r1, 0x89a3, &(0x7f0000000080)="94b58ec726ebd03a") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 3.470988128s ago: executing program 4 (id=3789): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, 0x0) sendmsg$netlink(r2, 0x0, 0x0) syz_emit_ethernet(0x1d, &(0x7f0000000200)={@random="2fbb30565451", @local, @void, {@x25={0x805, {0x2, 0x3d, 0x17, "141d5a36649b7ed9472d4a1f"}}}}, &(0x7f0000000440)={0x0, 0x2, [0x262, 0xc26, 0x3e7, 0x632]}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="505200001000031fe7dd9e832cc5bacb2d85050600003b0000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c00028005000e000a000000"], 0x3c}}, 0x0) 3.223715077s ago: executing program 0 (id=3791): r0 = socket(0x40000000015, 0x805, 0x0) accept$unix(r0, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001cc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r7, 0x19}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="10", 0x1}], 0x1}, 0x4000000) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2={0xff, 0x5}}, 0x1c) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000480)={0x2, 0x7, 0x89, &(0x7f00000003c0)=""/137}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x3, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @fwd={0x6}, @enum64={0xf, 0x4, 0x0, 0x13, 0x0, 0x0, [{0xd, 0x1, 0x3}, {0xe, 0x1c00, 0x800}, {0xa, 0xb6b}, {0xe, 0x3, 0x3}]}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x200, [{0x8, 0x1, 0x3}, {0xd, 0x1, 0x81}, {0x80008, 0x3, 0x8}]}, @var={0x1, 0x0, 0x0, 0xe, 0x5}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x3, 0x1}, @enum64={0x6, 0x9, 0x0, 0x13, 0x1, 0x8, [{0x7, 0x7, 0x80}, {0x10}, {0x7, 0x9, 0x8}, {0x8, 0x7}, {0x7, 0x4e, 0x8}, {0x5, 0xcebd, 0x5}, {0xf, 0x9, 0x7}, {0xd, 0x10000, 0xcc}, {0x5, 0x4, 0x101}]}]}, {0x0, [0x5f]}}, &(0x7f00000000c0)=""/108, 0x143, 0x6c, 0x1, 0xfffffff9, 0x10000, @value=r1}, 0x28) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="9578ea9c1c2b3ca29fd59ef3c1be48a400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38, r10}, 0x94) 2.623631193s ago: executing program 1 (id=3794): socket$nl_crypto(0x10, 0x3, 0x15) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'netpci0\x00'}, 0x3ff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4480, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(0x4) 2.314121582s ago: executing program 4 (id=3795): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000d042c3d7000001200004a08dad9dc6da942adbd5ea58b02775296191426a2a6df7330b1cd85b8e8f7590b464c65e2966118dba26ac32452efdcbf4a340854a76aba803f69ffdf44aa656ab313676ecfaf1d36e6097b0030b64dfd4dba4e6c0c7b7d027a5872f69bb0b8c39a48ae20ae646b2dcd01bf0d2e7ceb0486e49e63643a6094d233cc87d0ffd7ed91e60416bed38b3036126c2166cdec92ed184f4f292d785b0f312ba89907a12d99dd4c1ba58ca452a649257a1c0de24d08928912f6538dba18565af2ab7a3dc29bbdc7ca86169a7b0a4e96df05016a3918d3728eb3b89a76db32b7b8e3a227e18980385bca2c910adc4b78b1fc8eaee4e6edafd08dba889c7dc6de3f8a3f4a02c25689eb0030b838be8eeb1dd70f7eff5671b4ad573d6f437809b79b79", @ANYRES32=r2, @ANYBLOB="010000000000000024000e000600000000000000090000000000000007000000000000008cd5050300000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="010000000000000024000e000600000000000000090000000000000007000000000000008cd5050300000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) accept4(r5, 0x0, 0x0, 0x80800) (async) r9 = accept4(r5, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x31}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff93, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x31}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff93, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x20008411) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r3) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) (async) r11 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00@', @ANYRES16=r10, @ANYBLOB="200029bd7000fcdbdf250300000008000500ac1414aa08000700", @ANYRES32=r11, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="080002000100000014000c00200100000000000000000000000000000600060004000000"], 0x50}}, 0x801) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000070a01030000000000000000050000040900020073797a300000000078d2dea24395f15e722916693a6fbbd21fafd9789da99f886928909fdb2323c7a739f294119706f32e61c6a9e89d75a1e06e92477a8cf3e1bea1a396f70280b1e20fb64d19cf64b316a07ffc76edfea5e08c179aae0436679a8433aba6f3fcad61feebf620eb5635269dba91de1547173a3dd8bbaf6f49886150e641d5f70a3f8662c8f952725fdf062bcd47fbef6c6d3a97c4d635ad8bb5f180edd74fb896b6a2dd8eb8afd1f4fba139c02fb9f48d53e81a2295b9fc7df88fcc02285c72875a2c93c799ef6aba955d"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r13 = socket$inet(0xa, 0x801, 0x84) connect$inet(r13, &(0x7f0000004cc0)={0x2, 0x4e22, @multicast2}, 0x2) 2.239127611s ago: executing program 2 (id=3796): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000000c0)={0x533, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000000c0)={0x533, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) 2.131065473s ago: executing program 0 (id=3797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) sendmsg$tipc(r4, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e22, 0x1, @remote, 0x1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 2.130648354s ago: executing program 4 (id=3798): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000240)=[{0x6, 0x7, 0x1, 0x3}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) r11 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r11, 0x6484f000) 2.128728115s ago: executing program 1 (id=3799): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async, rerun: 32) r2 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x84) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) (rerun: 32) close(0xffffffffffffffff) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "bac6734d333dbaf9eeb943ca05f5b02c57a1e6a78fe77ab965f89a84fb7a4a824ef2a166703f1a4b7efde3690af12b82f528c2bab28c2e5a8e607988197c4fb5c65609b0c614ba24c5eb5b95c8ae2f29"}, 0xd8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xff, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='GPL\x00', 0x42200, &(0x7f0000000040)={@_ha_fsid={[0xea51, 0x3]}, {0x0, 0x9, 0x5, 0x40}}, 0x7dde651d, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x7fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x41, &(0x7f0000000200)=""/65, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x2, 0x4, 0x8}, {0x0, 0x2, 0xd}, {0x1, 0x4, 0x9, 0xb}, {0x1, 0x4, 0xd, 0xa}, {0x2, 0x5, 0x1, 0x1}, {0x0, 0x3, 0x9, 0x8}, {0x1, 0x1, 0x10, 0x4}, {0x4, 0x1, 0x8, 0x2}], 0x10, 0x63f}, 0x94) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000400)=r10) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (rerun: 64) 2.039882837s ago: executing program 4 (id=3800): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'pim6reg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@private0, 0x14, r1}) r2 = socket(0x6, 0x2, 0x9) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, r1, 0xc}, 0x10) 1.95168924s ago: executing program 1 (id=3801): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240)=0xd, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = socket(0x23, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x80000001, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000500000061114d001400000094e70000faffffff"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000000)='ipvlan0\x00') r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$pptp(r4, &(0x7f0000000280)={0x18, 0x2, {0x1, @remote}}, 0x1e) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) bind$rds(r5, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0x4c850) 1.811123099s ago: executing program 2 (id=3803): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bond_slave_0\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'wlan0\x00', @ifru_addrs=@llc={0x1a, 0x337, 0x5, 0x28, 0x81, 0x6, @multicast}}) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'wlan0\x00', @ifru_addrs=@llc={0x1a, 0x337, 0x5, 0x28, 0x81, 0x6, @multicast}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a00010029b970000000000002"], 0x1c}}, 0x4000) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a00010029b970000000000002"], 0x1c}}, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00100000010000002800128009000100766c616e00000000180002800c0002001e0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="f5cc8ebf939af9e84d9e7e5c545cc9b5276524198e6c896f6edc7b6e84e013c64f0255b023f116559d9fd95d65bfec883f6de67f6e8e69201e0bbd6fd2132b44915593c59e8a736ddef657b9cbb0ed051c44909cde1f69864f63dc67b8c7cdef1618abaae648bda72692cdda812b2d9d6921c1eded2c557e3196e168d01a5640be88263a2d91e54d9c1808d1ecbf90c4039c9d472983d0b30e33bc0c1fdce43148ebef556d8055e4df6ba01d3c72b929d0d59abe89ffc9d0b9e684c3fdda93cb7605fe2dbc835000e9ff9032c864d371be7682e3653748f05bd4d7b5d8a85e435188f866"], 0x58}}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00100000010000002800128009000100766c616e00000000180002800c0002001e0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="f5cc8ebf939af9e84d9e7e5c545cc9b5276524198e6c896f6edc7b6e84e013c64f0255b023f116559d9fd95d65bfec883f6de67f6e8e69201e0bbd6fd2132b44915593c59e8a736ddef657b9cbb0ed051c44909cde1f69864f63dc67b8c7cdef1618abaae648bda72692cdda812b2d9d6921c1eded2c557e3196e168d01a5640be88263a2d91e54d9c1808d1ecbf90c4039c9d472983d0b30e33bc0c1fdce43148ebef556d8055e4df6ba01d3c72b929d0d59abe89ffc9d0b9e684c3fdda93cb7605fe2dbc835000e9ff9032c864d371be7682e3653748f05bd4d7b5d8a85e435188f866"], 0x58}}, 0x8000) 1.756479189s ago: executing program 1 (id=3804): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @broadcast}, 0x2e, {0x2, 0x4e21, @empty}, 'ip6gretap0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r3, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000004c0)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x3) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x7f}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000240)=""/42, 0x2a, 0x0, &(0x7f0000000400)=""/132, 0x84}}, 0x10) 1.710821613s ago: executing program 2 (id=3805): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x17}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffff9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x51, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x7, 0x10, 0x10001}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) 1.643111733s ago: executing program 4 (id=3806): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) (async) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000280)=0x1, 0x4) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.498012706s ago: executing program 3 (id=3807): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9aea252ff030703008cb89e0800", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000084"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000140)=""/237, &(0x7f0000000000)=0xed) 1.340801728s ago: executing program 3 (id=3808): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x383300, &(0x7f0000000500)={@_ha_fsid={[0x1, 0x4]}, {0x3c, 0x9, 0x3, 0x6}}, 0x925e, 0x0, 0x0}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14000008}, 0x20000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000007f000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000ef000000"], 0x50) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x358, 0x358, 0x358, 0x0, 0x358, 0x428, 0x428, 0xd0, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xff000000, 0x0, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'nr0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2b, 0x5, 0x1}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x25}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000540)=[{&(0x7f00000004c0)="6bc828f86bee303bd769ebbb8c7df4ac5fe8f64d", 0x14}, {&(0x7f0000000500)="8bfd1fd76d68880993af6b57bd8f57", 0xf}, {&(0x7f00000005c0)="1357414db1e690d2f2", 0x9}], 0x3, 0x4) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000100)=0xfffffffa, 0x4) (async) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) 1.308071762s ago: executing program 0 (id=3809): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095", @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r1, &(0x7f0000000040)=0x1, r0, &(0x7f0000000080)=0xffffffff, 0xa, 0x1) 1.123002469s ago: executing program 3 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xb5f}]}, 0x24}}, 0x0) ioctl$HCIINQUIRY(r1, 0x400448e4, &(0x7f00000009c0)={0x0, 0x0, "0db43f"}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x2, @loopback}}, 0x1e) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000100c0009800800014000000081400000000c0a010100000000000000000a0000030900020073797a3100000000090001f472797a310000000014000380100000800c00018006000100d103000014000000000a050000000000000000000a000004ea0000001100010000000000000000000100000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.099576386s ago: executing program 1 (id=3811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x358, 0x358, 0x358, 0x0, 0x358, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xff000000, 0x0, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'nr0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2b, 0x5, 0x1}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x25}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x10, 0x6, 0x6, 0x9, 0x5d3b51a8, 0xd0dc, 0x6, 0x5, 0x3, 0xffffffff, 0x0, 0xf, 0x80000000, 0x8000, 0x49, 0x9, 0x3ff, 0x400, 0x4, 0x200, 0x6, 0x20009}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x144, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x71}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7db4}]}, 0x144}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x358, 0x358, 0x358, 0x0, 0x358, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xff000000, 0x0, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'nr0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2b, 0x5, 0x1}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x25}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x10, 0x6, 0x6, 0x9, 0x5d3b51a8, 0xd0dc, 0x6, 0x5, 0x3, 0xffffffff, 0x0, 0xf, 0x80000000, 0x8000, 0x49, 0x9, 0x3ff, 0x400, 0x4, 0x200, 0x6, 0x20009}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x144, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x71}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7db4}]}, 0x144}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) (async) 1.068149909s ago: executing program 0 (id=3812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0xb8}}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @random="53c1245a064e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) 878.608412ms ago: executing program 3 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x8, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r2, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x15c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe02, 0x53}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "07c9d7e0d2e07afa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d832f79953588dcf9bb9ad215f5167f04c8a11d516caad56"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7ceefa9e30df42213eb8df35c98e313ecfb75450832d3548"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c1d7620fe25e62cf2981e70889ec2b3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="348a94bf6a45ef4edecdb30d7120ede0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="922b4659ba6a7b54e7998e4065a6e1b2"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2dae05db1c4d7d828284c3b5c12426ff"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7c5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d623a9f91c77caac"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a69ab5cb2d5a7ec4e7435afc29635cda027f6125b92a215129bc55f087db8983"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8cda6b840b8be9a5c261ad6dec94fae7f29f869f6ccf7989d3a7425ba0fcde87"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4010080}, 0x8004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x45e}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, r3, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, r3, 0x4}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0), 0x0, 0x2000, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000002c80)=ANY=[@ANYBLOB="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"], 0x1510}, 0x1, 0x0, 0x0, 0x2506edfbb717cd6d}, 0x8010) (async) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000002c80)=ANY=[@ANYBLOB="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"], 0x1510}, 0x1, 0x0, 0x0, 0x2506edfbb717cd6d}, 0x8010) 794.313264ms ago: executing program 3 (id=3814): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x1, 0x7, {{0xe, 0x4, 0x0, 0x2f, 0x38, 0x67, 0x0, 0xfe, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @ssrr={0x89, 0x17, 0x1d, [@empty, @broadcast, @empty, @local, @private=0xa010101]}, @rr={0x7, 0xb, 0x56, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x4, 0x9}, {0xf, 0x2}, {0x6, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4000040) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r0, 0x40, 0x8000, 0x6, 0xffff, {{0x31, 0x4, 0x2, 0x7, 0xc4, 0x66, 0x0, 0x7, 0x29, 0x0, @remote, @private=0xa010102, {[@timestamp_addr={0x44, 0x54, 0xb6, 0x1, 0x7, [{@loopback, 0x5fc}, {@loopback, 0x9}, {@multicast1, 0x6}, {@local, 0x200}, {@rand_addr=0x64010102, 0x1}, {@loopback}, {@rand_addr=0x64010102, 0xbe6}, {@multicast1, 0x3}, {@local, 0x7}, {@broadcast, 0xb}]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x400}, {@multicast2, 0x9}]}, @lsrr={0x83, 0x7, 0x6d, [@private=0xa010100]}, @ssrr={0x89, 0x7, 0xe8, [@rand_addr=0x64010100]}, @rr={0x7, 0x13, 0xf5, [@remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp={0x44, 0xc, 0xf4, 0x0, 0xb, [0x80000000, 0xc974]}, @cipso={0x86, 0xd, 0x1, [{0x7, 0x7, "35ece2afc3"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) unshare(0x200) unshare(0x10000) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x8}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x5}]}, @enum={0x10, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x100}, {0x3, 0x507c}]}, @enum64={0x7, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x8, 0x3, 0x8}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x39, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0x10, 0x3}, {0x5, 0x1}, {0x1, 0x5}]}]}, {0x0, [0x30, 0x30, 0x30]}}, &(0x7f0000000440)=""/47, 0xb1, 0x2f, 0x1, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r3, 0x20, &(0x7f0000001540)={&(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/90, 0x5a}}, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x20, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x29}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x250000, 0x0) write$tun(r7, &(0x7f0000001740)={@val={0x0, 0x8914}, @void, @arp=@generic={0x321, 0x6005, 0x6, 0x9, 0x2, @random="3b777fb90525", "32912fbafaa1739713", @random="4647dc659d08", "ea9985c88f4155"}}, 0x28) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r8, &(0x7f0000001a00)=[{&(0x7f00000017c0)="8770228fb9bd8755b60e5ec7621e36d520274cf736b8010d3b059dc7b55ecc143f52843a56936437023c19368cc64bcdf6280329c5fe117add73792cd6c640ea816f20bd3da93597e2c0e4b2a46d4bc9d616e20f5ee1f2b085c8595c0d68e5510442078012b15aab289236e7e7c09ebfbd4db1c9a721c60c8f87770770164249a1a5e91d733383a460", 0x89}, {&(0x7f0000001880)="d7542befa6b12f7682a9ce70bec6fc", 0xf}, {&(0x7f00000018c0)="e0519f8428c8d909d4c6feb9f1c5310fec679a57a9c232c7cd7db48ec5e87171f5ee36c4d8519fce180e3767bdc695f99aef781c56bb84ed2c94e0de4a28924f7d33b0895cb86b1018bc48a2a593e7e7ce59731c08248935289088c9031d07f66f4843f88130ef8f1f8ec786df7b0e2de3f623d21a1d957b0fd5b166e4cdea6d1dfb7bfe9beeb4ff91eab9303aedd6c831936e2ce272cef50230748ba473d7", 0x9f}, {&(0x7f0000001980)="6eb4efef6eddf8f3eaa613e82545a82d94e7746548549e4f04ffd6f014a0ee7b19756fc8938f244a2c3454ccdeebbb56", 0x30}, {&(0x7f00000019c0)="21a09d182440cff19680161a2ae9b7ad585e4f29a42f514b4b6bdb0d03ee75cf", 0x20}], 0x5) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000001a80)={0x0, r4, r7, 0x800, 0x1, '\x00', {0x401, 0x10, 0x7, 0xb1, 0x4, 0x1, 0x7, 0x6, {0xfffffffffffffff9, 0x7}, {0x8000000000000000, 0x7}, {0xffffffff, 0x200}, 0x0, 0x1, 0xb, 0xfffffff7, 0x5, 0x98b, 0x3, 0x3ff, 0xffff, 0x9, '\x00', 0x7fff, 0x0, 0x1, 0xc}}) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000001b40)={0x80000001, 0x8001, 0xa05, 0x8, 0x3}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e21, 0x8, @private1, 0x40}}, 0x420, 0xa4dc}, &(0x7f0000001c40)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001d00)={r10, 0x74, &(0x7f0000001c80)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0x8, @private0, 0xa82}, @in6={0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000001d40)=0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004091}, 0x40000) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001e80)={r1, 0xaec7, 0x7, 0xc556}) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x240c114}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000002040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000002080)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r12, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r13, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000000) 96.78746ms ago: executing program 4 (id=3815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x22020400) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r4, 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000280)=[{r4, 0x3206}, {r3, 0xa}], 0x2, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0xff6e}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) 3.101179ms ago: executing program 3 (id=3816): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff000500020000000500010006000000"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) close(0x3) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) bind$bt_hci(r1, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket(0x400000000010, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 2.482632ms ago: executing program 1 (id=3817): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001040b00000000000000000500000308000840000000640600124000020000200006801400050000000000000000000000ffff000000000800020064010101100005800bba0100616d616e64610000100017000000000700000000621d7cf802fc6fe3313b595530133c4b617b57f51f2ae8757dfcd7fdb7d0ae23396a010e7ea2d5914f0318e067b8e7434e113a28f8a6b6e5e1fd4dc825b55e7de2af8c5da98eaee4f3bbd9ecb5488cc535bb8d801d96d63dc99e7cb5a8ea16cc4df6af49dc3c21cf51c4a7b0f7380290ef9e06b1fba01031564b24ba57b5"], 0x64}}, 0x850) accept(r0, 0x0, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r4}, 0x20) (async, rerun: 32) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000003"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) 0s ago: executing program 0 (id=3818): r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x6, 0x7}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x2, 0x6, @start={r1, 0x1, "707836ed9d58bb482d3fbb40ab6a5e04587c3061c998f1f66da3298bedb1c1f8f74037f556f1d5e515ceca398e5f77a3377c72bbde0852d1a3bf9b02473b737d250eb40713739242d0b0531290ae0e9670543aa738c6d319f761a604fa175befc54b088aff898d4ecaf8fd9562e14273ca957f1b9805e940d7aa34738ec1022d4bba4b0143c627b34953de7e395268c5d1a3367fd2a94ecc9a98506e1867f932c9348bb70f1d1d4c08525e7e0258fb6bc24815101815bac269a60d3b9eb811c2c2ecde1a0d04729325c1082e20609318c19ad0efa2e92c41928f7a64bf6b1c6031c5812e7c2d81784096d0cbc20eca5f21d55cb42d271b3d6ca5cc0fced3bed36e924be308322213bedeb274ece1d331467ae7b884102438ca73427998ea4e2833ddd60e3ad068dfa76fe0af43f8fa10ce0ec3806d43a690a031f801870e68d8c4695e77daa12869ecdff896529ba947b72bd7890d02cbbea393085dabc35fedd025d66564f45cb0d07e8587a87c3e3dad405f34dd09b86e8aae5ec0a0b11b4aebf7d2338a18a58c28bffe064a71d72a5c656631cd655861b8ea3dc265ca2bb9426279a5e6adf55761719f5708cb2ea33fe6d6d726402610468181ddd7f171a2682d76be0d45132203e0f3e4c4044151ca87ccbab02168ac37b2d5a4faf4fb46ae2e234915f6c023b3aa5f1be0fbcdbc50607c2a8812f9196f4b42160ab809881d3704382e8c03fc3ff1b0938ab121eb0919016b799260fbfca4f98960fb0d7aa213317d8c9ef9aca314fa536cee3f59c2f244f5f6c7130d819bf79eec8909046edd4b2f1cc808a0f115156617cfed64f46b3a9ecb18aa427d91f55d3772031abfee1874e2c94af9fd5fd4b3c70ac7b8690186a0fd56ebc953fa0a73396a75367ee436b526b3efce3d54e8ec20185453c75db3b03cdce9484cc4c14642bdeefd38116d79a55fa729110bfccd7073619c0e7c0ab26cbac7edb80776996f63bbf4ef4870d661b38ef0084316e4bf19643b38e7490fc4f785ebcd385381a5c7328c0b15891081d7d4b10015300ff663b9cde9e4aef6f363c25bbc03187883d92d97f1db188b47a65e026bceca456f0624cbd132471c4ee94f6da24c2d4f4b9b73e3d7e8340f6fec2585bd05d31aeaf313cf147202d467b8df8b3c1e78b9be884f701f4420c023783f54a35266b9acb7e82ad9cb91785737057446be25e439d5a25bf63f4e42d0ed2c69203006e23e0aa44a95a7a69d850702146c40d86d9e1533fb963f0fc0706535923934aa4e6c337a44444165a3f9cc438f0035566ffb88f019bc26d48d526445d628445a14e1ec04a628109b7b7b701e4bbd1969a791cf6031c1e5e16fa7c96b976c3e8f1e16ada068344e7c4ddf1922199f6704b796db6350330a1bd3276984adabcc3e9df37df28ef272465775da388d9c3dd795da221cfb2f", "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"}, [0x4, 0x0, 0x8eb7, 0x4, 0x4, 0x3, 0x0, 0x6, 0xff, 0xb, 0x352b, 0x8, 0x0, 0x7, 0x7, 0x5, 0x8d, 0x740d, 0x8, 0x9, 0x8, 0x401, 0xf, 0x6, 0xfffffffffffffff8, 0x7, 0x2, 0x5, 0x0, 0x3, 0x3, 0x2abd18bb, 0x8, 0x7, 0xfff, 0x5, 0x401, 0x4, 0xfff, 0xc0, 0x2, 0xd, 0x4, 0xd1, 0x78f, 0x0, 0x0, 0x7aa, 0x4, 0xdbf, 0x6, 0x10, 0x0, 0x1, 0x9, 0x76f2, 0x100000000, 0x95, 0x2, 0x0, 0x4, 0x3, 0x2, 0xffffffffffffffff]}) sendfile(r0, r0, &(0x7f0000000e80)=0x854, 0x4918e25800000000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000ec0)={0xa, 0x4e24, 0x4, @empty, 0x6}, 0x1c) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000f00)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x9c, r4, 0x20, 0x70bd2b, 0x200, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x9c}}, 0x4000811) r5 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r5, &(0x7f0000001100)=""/241, 0xf1, 0x40, &(0x7f0000001200)={0x2, 0x4e23, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x21, 0xb4, 0x75b, 0x100, 0x869b61db6f2e268b, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r7) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001300)="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", 0x1000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002400)={@fallback=r6, 0x1e, 0x1, 0x8, &(0x7f0000002300)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002340)=[0x0], &(0x7f0000002380)=[0x0], &(0x7f00000023c0)=[0x0]}, 0x40) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002480), r3) sendmsg$IPVS_CMD_NEW_DEST(r9, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0x84, r10, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd1b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x1) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r3) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x28, r11, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) socket$alg(0x26, 0x5, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r12, 0x0, 0x484, &(0x7f0000002740)=""/148, &(0x7f0000002800)=0x94) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), r9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002940)={'tunl0\x00', &(0x7f00000028c0)={'sit0\x00', 0x0, 0x40, 0x8, 0x10001, 0x1, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @remote, {[@generic={0x88, 0x10, "1b72e4cc8628194f099b401dd17a"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002980)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000029c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000003040)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002cc0)={0x310, r13, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8b, 0x4, "e6cccbabd551a5084c1a50242ccfc46897ac6240f6496e7c59055769ec5ea410bc0758036f86ce5efdd52fd8d5353667a7c9293e92b7362639d151cb9e5123034c84c18f50a225ec6d078e61558776df13b943454339d6da99f13f59b104d0b5b2441bb2d377ae4b38e6f51129c92d0214e020b80b5b065f50634cbace8665d914caa3e5c897e0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '-#-i(^\'*&.{-@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{,)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '+\'/[{\xa9\')[$-@^\'@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x13$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x320000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffe718}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x298f}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'z!,!b\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x19, 0x5, "7f3cfd980ea4640ddc30c23f3de80da858701ca349"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x40d0}, 0x8880) kernel console output (not intermixed with test programs): 01] bond14: (slave batadv1): Enslaving as an active interface with an up link [ 632.701249][T16705] bond14 (unregistering): (slave batadv1): Releasing active interface [ 632.715438][T16705] bond14 (unregistering): Released all slaves [ 632.749117][T16710] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 632.759697][T16709] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 632.768400][T16710] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 632.806563][T16709] bridge4: entered allmulticast mode [ 632.903112][T12423] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.917551][T12423] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.927476][T12423] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.937172][T12423] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.058601][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 633.360706][T16746] xfrm0: entered promiscuous mode [ 633.365813][T16746] xfrm0: entered allmulticast mode [ 633.393439][T16745] dummy0: entered allmulticast mode [ 633.399806][T16746] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2687'. [ 633.422899][T16746] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 633.471258][T16749] bond17: entered promiscuous mode [ 633.476929][T16749] 8021q: adding VLAN 0 to HW filter on device bond17 [ 633.703197][T16748] ip6tnl2: entered promiscuous mode [ 633.782358][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 633.904883][T16767] Cannot find map_set index 135 as target [ 633.922920][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 633.951690][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 634.191108][T16742] dummy0: left allmulticast mode [ 634.354383][T16785] lo speed is unknown, defaulting to 1000 [ 634.407249][T16787] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.483684][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2703'. [ 634.604550][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2706'. [ 634.614923][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2706'. [ 634.659604][T16792] bridge0: left allmulticast mode [ 634.691179][T16802] tipc: Enabled bearer , priority 0 [ 634.849971][T16802] syzkaller0: entered promiscuous mode [ 634.855620][T16802] syzkaller0: entered allmulticast mode [ 634.862272][T16802] tipc: Resetting bearer [ 634.924422][ T5873] Bluetooth: hci4: link tx timeout [ 634.931210][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 635.010058][ T7761] tipc: Resetting bearer [ 635.392660][T16797] tipc: Resetting bearer [ 636.207532][ T51] Bluetooth: hci4: link tx timeout [ 636.213440][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 636.960834][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 637.437654][T16797] tipc: Disabling bearer [ 637.449726][T16822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.471607][ T29] tipc: Node number set to 4278255617 [ 637.667193][T16863] sctp: [Deprecated]: syz.3.2722 (pid 16863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.667193][T16863] Use struct sctp_sack_info instead [ 637.687535][T16860] tipc: Enabled bearer , priority 0 [ 637.720383][T16862] syzkaller0: entered promiscuous mode [ 637.725924][T16862] syzkaller0: entered allmulticast mode [ 637.827521][T16871] openvswitch: netlink: IP tunnel TTL not specified. [ 637.850747][T16862] tipc: Resetting bearer [ 637.890259][T16862] tipc: Disabling bearer [ 637.914912][T16869] tipc: Enabled bearer , priority 26 [ 637.935535][T16871] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2725'. [ 638.010524][T16878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2727'. [ 638.035059][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2725'. [ 638.169042][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2729'. [ 638.240237][T16888] batman_adv: batadv0: Adding interface: ipvlan2 [ 638.271035][T16888] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.337765][T16888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.368378][T16888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.388356][T16888] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 638.448293][T16895] netlink: 'syz.4.2729': attribute type 5 has an invalid length. [ 638.456089][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2729'. [ 638.576547][T16900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.718996][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2736'. [ 638.874112][T16920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2737'. [ 638.887716][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 638.903099][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 639.015073][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2739'. [ 639.032837][T16925] tipc: Resetting bearer [ 639.064681][T16924] tipc: Resetting bearer [ 639.594366][ T7732] tipc: Resetting bearer [ 639.740331][T16973] FAULT_INJECTION: forcing a failure. [ 639.740331][T16973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.787786][T16973] CPU: 0 UID: 0 PID: 16973 Comm: syz.1.2753 Not tainted syzkaller #0 PREEMPT(full) [ 639.787817][T16973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.787831][T16973] Call Trace: [ 639.787839][T16973] [ 639.787849][T16973] dump_stack_lvl+0xe8/0x150 [ 639.787886][T16973] should_fail_ex+0x412/0x560 [ 639.787923][T16973] _copy_from_user+0x2d/0xb0 [ 639.787949][T16973] ___sys_sendmsg+0x1c6/0x360 [ 639.787984][T16973] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.788018][T16973] ? kstrtouint+0x6e/0xe0 [ 639.788077][T16973] ? __fget_files+0x2a/0x420 [ 639.788109][T16973] ? __fget_files+0x3a0/0x420 [ 639.788151][T16973] __sys_sendmmsg+0x27c/0x4e0 [ 639.788190][T16973] ? __pfx___sys_sendmmsg+0x10/0x10 [ 639.788215][T16973] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 639.788278][T16973] ? ksys_write+0x242/0x270 [ 639.788305][T16973] ? __pfx_ksys_write+0x10/0x10 [ 639.788344][T16973] __x64_sys_sendmmsg+0xa0/0xc0 [ 639.788375][T16973] do_syscall_64+0x14d/0xf80 [ 639.788407][T16973] ? trace_irq_disable+0x3b/0x150 [ 639.788426][T16973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.788448][T16973] ? clear_bhb_loop+0x40/0x90 [ 639.788474][T16973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.788495][T16973] RIP: 0033:0x7fefb079c799 [ 639.788516][T16973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.788535][T16973] RSP: 002b:00007fefb165e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 639.788559][T16973] RAX: ffffffffffffffda RBX: 00007fefb0a15fa0 RCX: 00007fefb079c799 [ 639.788575][T16973] RDX: 0000000000000001 RSI: 00002000000046c0 RDI: 0000000000000004 [ 639.788590][T16973] RBP: 00007fefb165e090 R08: 0000000000000000 R09: 0000000000000000 [ 639.788603][T16973] R10: 0000000000008084 R11: 0000000000000246 R12: 0000000000000001 [ 639.788616][T16973] R13: 00007fefb0a16038 R14: 00007fefb0a15fa0 R15: 00007ffc79854de8 [ 639.788651][T16973] [ 640.375419][T16999] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 640.512048][T17004] bond24: entered promiscuous mode [ 640.546112][T17004] bond24: entered allmulticast mode [ 640.601994][T17004] 8021q: adding VLAN 0 to HW filter on device bond24 [ 640.636882][T17007] netlink: 'syz.3.2761': attribute type 9 has an invalid length. [ 640.829364][T17017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.872258][ T9] lo speed is unknown, defaulting to 1000 [ 640.891103][ T9] syz2: Port: 1 Link ACTIVE [ 640.942113][T17024] netlink: 'syz.0.2764': attribute type 4 has an invalid length. [ 641.026426][T17017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.302965][T17046] netlink: 'syz.2.2774': attribute type 3 has an invalid length. [ 641.313784][T17046] netlink: 'syz.2.2774': attribute type 3 has an invalid length. [ 641.823988][T17076] bond14: option packets_per_slave: invalid value (1048582) [ 641.831487][T17076] bond14: option packets_per_slave: allowed values 0 - 65535 [ 641.843106][T17076] bond14 (unregistering): Released all slaves [ 642.379902][T17105] syzkaller0: entered promiscuous mode [ 642.385443][T17105] syzkaller0: entered allmulticast mode [ 642.677166][T17118] 8021q: adding VLAN 0 to HW filter on device bond14 [ 643.014438][T17124] syzkaller1: entered promiscuous mode [ 643.022264][T17124] syzkaller1: entered allmulticast mode [ 643.295929][T17145] lo speed is unknown, defaulting to 1000 [ 643.693708][T17170] __nla_validate_parse: 9 callbacks suppressed [ 643.693731][T17170] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2803'. [ 643.748811][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'. [ 644.505327][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 644.515537][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 644.536689][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 644.546884][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 644.558642][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 644.790671][T17172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.826394][T17172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.624306][T17174] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2804'. [ 645.634877][T17175] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2804'. [ 645.654456][T17167] vlan2: entered allmulticast mode [ 645.663576][T17167] bridge_slave_0: entered allmulticast mode [ 645.670911][T17167] bridge0: port 1(vlan2) entered blocking state [ 645.681776][T17167] bridge0: port 1(vlan2) entered disabled state [ 645.691152][T17167] vlan2: entered promiscuous mode [ 645.696341][T17167] bridge_slave_0: entered promiscuous mode [ 645.727044][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2807'. [ 645.749999][ T7732] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.768921][ T7732] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.797960][ T7732] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.818413][ T7732] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.941193][ T7732] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.970235][ T7732] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.979722][T17206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2809'. [ 645.995400][ T7732] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.011390][ T7732] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.092465][T17195] lo speed is unknown, defaulting to 1000 [ 646.527944][T12425] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.583998][T12425] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.638479][ T5873] Bluetooth: hci5: command tx timeout [ 646.666499][T12425] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.696412][T17242] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2816'. [ 646.732627][T17241] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2815'. [ 646.747926][T17238] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2815'. [ 646.761587][T12423] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.784646][T12421] dvmrp0: left allmulticast mode [ 646.881244][T17246] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2817'. [ 647.033743][T12421] batman_adv: batadv0: Removing interface: gretap1 [ 647.286501][T17264] sctp: [Deprecated]: syz.1.2819 (pid 17264) Use of int in maxseg socket option. [ 647.286501][T17264] Use struct sctp_assoc_value instead [ 647.412587][T12421] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 647.423510][T12421] bond0 (unregistering): Released all slaves [ 647.438845][T12421] bond1 (unregistering): Released all slaves [ 647.463550][T12421] bond2 (unregistering): Released all slaves [ 647.482646][T12421] bond3 (unregistering): Released all slaves [ 647.506085][T12421] bond4 (unregistering): Released all slaves [ 647.530238][T12421] bond5 (unregistering): Released all slaves [ 647.554243][T12421] bond6 (unregistering): Released all slaves [ 647.570049][T12421] bond7 (unregistering): Released all slaves [ 647.585555][T12421] bond8 (unregistering): Released all slaves [ 647.602967][T12421] bond9 (unregistering): Released all slaves [ 647.625489][T12421] bond10 (unregistering): Released all slaves [ 647.647424][T12421] bond11 (unregistering): Released all slaves [ 647.673166][T12421] bond12 (unregistering): Released all slaves [ 647.694131][T12421] bond13 (unregistering): Released all slaves [ 647.709509][T12421] bond14 (unregistering): Released all slaves [ 647.733601][T12421] bond15 (unregistering): (slave dummy0): Releasing active interface [ 647.742939][T12421] dummy0: left promiscuous mode [ 647.751477][T12421] dummy0: left allmulticast mode [ 647.759965][T12421] bond15 (unregistering): Released all slaves [ 647.776724][T12421] bond16 (unregistering): Released all slaves [ 647.796228][T12421] bond17 (unregistering): Released all slaves [ 647.825172][T17195] chnl_net:caif_netlink_parms(): no params data found [ 647.857470][T17243] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 648.105208][T12421] : left promiscuous mode [ 648.197384][T17276] lo speed is unknown, defaulting to 1000 [ 648.241802][T12421] tipc: Disabling bearer [ 648.251593][T12421] tipc: Left network mode [ 648.360850][T17195] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.372086][T17195] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.380126][T17195] bridge_slave_0: entered allmulticast mode [ 648.388081][T17195] bridge_slave_0: entered promiscuous mode [ 648.397312][T17195] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.414074][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.438131][T12421] IPVS: stopping backup sync thread 10727 ... [ 648.457360][T17195] bridge_slave_1: entered allmulticast mode [ 648.480228][T17195] bridge_slave_1: entered promiscuous mode [ 648.639756][T17195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.718370][ T5873] Bluetooth: hci5: command tx timeout [ 648.823707][T17195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.926419][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2830'. [ 649.394940][T17318] gretap3: entered promiscuous mode [ 649.404171][T17318] batman_adv: batadv0: Adding interface: gretap3 [ 649.410679][T17318] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 649.432101][T17318] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 649.657243][T17195] team0: Port device team_slave_0 added [ 649.937843][T17195] team0: Port device team_slave_1 added [ 650.019552][T17330] vlan5: entered promiscuous mode [ 650.024680][T17330] bridge0: entered promiscuous mode [ 650.089413][T17195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.096563][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.168249][T17195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.216186][T17195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.228279][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.293026][T17195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.449320][T17348] IPVS: set_ctl: invalid protocol: 33 10.65.1.0:20001 [ 650.802826][ T5873] Bluetooth: hci5: command tx timeout [ 651.065499][T17345] tipc: Enabled bearer , priority 0 [ 651.278506][T17358] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2838'. [ 651.302497][T17361] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2838'. [ 651.328095][T17195] hsr_slave_0: entered promiscuous mode [ 651.344672][T17195] hsr_slave_1: entered promiscuous mode [ 651.352004][T17195] debugfs: 'hsr0' already exists in 'hsr' [ 651.357954][T17195] Cannot create hsr debugfs directory [ 651.565760][T17370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2842'. [ 651.643999][T12421] hsr_slave_0: left promiscuous mode [ 651.655252][T12421] hsr_slave_1: left promiscuous mode [ 651.880881][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 652.582745][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 652.645279][ T8840] tipc: Node number set to 568908590 [ 652.657943][T17392] ipvlan1: Caught tx_queue_len zero misconfig [ 652.878313][ T5873] Bluetooth: hci5: command tx timeout [ 653.075973][T17195] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.237963][T17426] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 653.370800][T17195] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.420923][T17434] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2853'. [ 653.514237][T12421] IPVS: stop unused estimator thread 0... [ 653.594173][T17195] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.657964][T17440] netlink: 'syz.2.2854': attribute type 39 has an invalid length. [ 653.731089][T17434] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2853'. [ 653.760561][T17195] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.166104][T17456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2856'. [ 654.172813][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'. [ 654.225900][T17195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 654.263878][T17195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 654.297150][T17195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 654.323248][T17459] tipc: Resetting bearer [ 654.348809][T17195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 654.437034][T17459] tipc: Resetting bearer [ 654.546209][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 654.677741][T17195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.758641][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 654.764232][T17195] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.767574][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2864'. [ 654.874737][T17500] ip6tnl2: entered promiscuous mode [ 654.888150][T17500] ip6tnl2: entered allmulticast mode [ 654.898425][ T7761] tipc: Resetting bearer [ 654.918691][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.925926][ T7761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.944744][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2865'. [ 654.981409][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.988678][ T7732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.065760][T17513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2867'. [ 655.365502][T17527] netlink: 'syz.2.2868': attribute type 21 has an invalid length. [ 655.436866][T17527] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2868'. [ 655.553755][T17527] netlink: 'syz.2.2868': attribute type 4 has an invalid length. [ 655.561496][T17547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2868'. [ 655.730382][T17527] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2868'. [ 655.815104][T17195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.193416][T17195] veth0_vlan: entered promiscuous mode [ 656.232385][T17195] veth1_vlan: entered promiscuous mode [ 656.632177][T17195] veth0_macvtap: entered promiscuous mode [ 656.702805][T17195] veth1_macvtap: entered promiscuous mode [ 656.911395][T17195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.006735][T17602] netlink: 'syz.4.2878': attribute type 1 has an invalid length. [ 657.074938][T17195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.160534][T17602] 8021q: adding VLAN 0 to HW filter on device bond25 [ 657.195485][T17607] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 657.210308][T17607] syzkaller1: linktype set to 513 [ 657.350718][T17608] bond25: (slave gretap4): making interface the new active one [ 657.368599][T17608] bond25: (slave gretap4): Enslaving as an active interface with an up link [ 657.444622][ T7756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.476644][ T7756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.508512][ T7756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.558401][ T7756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.631799][T17628] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 657.689716][T17628] netlink: 'syz.2.2881': attribute type 21 has an invalid length. [ 657.969029][ T7736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.000478][ T7736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.126858][ T7742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.167232][ T7742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.387754][T17654] batman_adv: batadv0: Adding interface: ipvlan2 [ 658.409350][T17654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.441335][T17654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.462720][T17654] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 659.026026][T17693] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 659.077714][T17693] lo: Caught tx_queue_len zero misconfig [ 659.501410][T17677] netlink: zone id is out of range [ 659.506944][T17677] netlink: zone id is out of range [ 659.542481][T17677] netlink: zone id is out of range [ 659.550804][T17721] netlink: 'syz.0.2903': attribute type 21 has an invalid length. [ 659.568364][T17677] netlink: zone id is out of range [ 659.579594][T17677] netlink: zone id is out of range [ 659.591174][T17677] netlink: zone id is out of range [ 659.607643][T17677] netlink: zone id is out of range [ 659.616799][T17721] __nla_validate_parse: 9 callbacks suppressed [ 659.616822][T17721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2903'. [ 659.657601][T17677] netlink: zone id is out of range [ 659.660208][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 659.672092][T17677] netlink: zone id is out of range [ 659.946885][T17721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.181724][T17721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.273974][T17748] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2908'. [ 660.315309][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.331002][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.342049][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.360289][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.380130][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 660.506018][T17721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.789916][T17721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.021891][T17781] netlink: 'syz.3.2911': attribute type 15 has an invalid length. [ 661.119755][T17750] lo speed is unknown, defaulting to 1000 [ 661.189679][T17785] netlink: 'syz.1.2912': attribute type 1 has an invalid length. [ 661.255650][T17789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2912'. [ 661.341144][T17785] bond15: entered promiscuous mode [ 661.399598][T17785] 8021q: adding VLAN 0 to HW filter on device bond15 [ 661.479268][T17789] bond15: entered allmulticast mode [ 661.507733][T12425] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.580801][T17789] bond15: (slave bridge5): making interface the new active one [ 661.593654][T17789] bridge5: entered promiscuous mode [ 661.611585][T17789] bridge5: entered allmulticast mode [ 661.620386][T17789] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 661.657882][T12425] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.765912][ T7736] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.875497][ T7742] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.129887][T17750] chnl_net:caif_netlink_parms(): no params data found [ 662.337794][T17750] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.345912][T17750] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.353669][T17750] bridge_slave_0: entered allmulticast mode [ 662.362265][T17750] bridge_slave_0: entered promiscuous mode [ 662.375803][T17750] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.383403][T17750] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.391630][T17750] bridge_slave_1: entered allmulticast mode [ 662.399828][T17750] bridge_slave_1: entered promiscuous mode [ 662.456527][T17750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.478600][ T5873] Bluetooth: hci1: command tx timeout [ 662.490297][T17750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.514063][T17843] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 662.597341][T17750] team0: Port device team_slave_0 added [ 662.606846][T17750] team0: Port device team_slave_1 added [ 662.713315][T17750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.730258][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.782596][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2926'. [ 662.792475][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2926'. [ 662.813035][T17750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.859779][T17750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.918500][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.972745][T17750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.139860][T17750] hsr_slave_0: entered promiscuous mode [ 663.146845][T17750] hsr_slave_1: entered promiscuous mode [ 663.186450][T17750] debugfs: 'hsr0' already exists in 'hsr' [ 663.193278][T17750] Cannot create hsr debugfs directory [ 663.692377][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2932'. [ 663.825936][T17750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 663.848957][T17750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 663.872420][T17750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.119059][T17750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 664.130079][T17750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 664.140878][T17750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.280325][T17750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 664.307507][T17750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 664.319161][T17750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.452124][T17750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 664.469528][T17750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 664.507441][T17750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.510467][T17909] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 664.558728][ T5873] Bluetooth: hci1: command tx timeout [ 664.847343][T17929] bond0: Caught tx_queue_len zero misconfig [ 665.214619][T17946] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2948'. [ 665.227388][T17946] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2948'. [ 665.256160][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'. [ 665.280840][T17949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2948'. [ 665.310531][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2949'. [ 665.330306][T17949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2948'. [ 665.353169][T17953] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2950'. [ 665.382800][T17750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 665.432134][T17750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 665.520202][T17750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 665.587017][T17750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 665.611198][T17964] netlink: 'syz.2.2953': attribute type 1 has an invalid length. [ 665.710695][T17964] bond14: entered promiscuous mode [ 665.716667][T17964] 8021q: adding VLAN 0 to HW filter on device bond14 [ 666.070871][T17750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.129586][T17750] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.162363][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.169854][ T7762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.184517][T17994] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2956'. [ 666.210678][T17994] netlink: 'syz.1.2956': attribute type 1 has an invalid length. [ 666.236329][T17994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2956'. [ 666.341508][T17995] bond15: Unable to set up delay as MII monitoring is disabled [ 666.351603][T17995] bond15 (unregistering): Released all slaves [ 666.376029][T12425] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.383283][T12425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.549895][T18005] ip6tnl1: entered promiscuous mode [ 666.638816][ T5873] Bluetooth: hci1: command tx timeout [ 667.029630][T17750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.116174][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2965'. [ 667.474835][T18053] netlink: 'syz.3.2968': attribute type 10 has an invalid length. [ 667.491767][T18055] netlink: 'syz.2.2970': attribute type 2 has an invalid length. [ 667.510459][T18055] !: entered promiscuous mode [ 667.532002][T17750] veth0_vlan: entered promiscuous mode [ 667.556364][T17750] veth1_vlan: entered promiscuous mode [ 667.573187][T18060] netlink: 'syz.2.2971': attribute type 1 has an invalid length. [ 667.607806][T17750] veth0_macvtap: entered promiscuous mode [ 667.620860][T17750] veth1_macvtap: entered promiscuous mode [ 667.653955][T17750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.674351][T17750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.704363][ T7736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.716339][ T7736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.738966][ T7736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.748695][ T7736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.885947][ T7756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.894701][ T7756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.970781][ T7756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.991743][ T7756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.595242][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.607017][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.616174][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.625716][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.634028][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 668.707519][T18092] lo speed is unknown, defaulting to 1000 [ 668.726359][ T5873] Bluetooth: hci1: command tx timeout [ 668.937657][T18100] tipc: Enabling of bearer rejected, already enabled [ 669.114345][T18109] block nbd0: must specify backend [ 669.181880][T18092] chnl_net:caif_netlink_parms(): no params data found [ 669.404141][T18092] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.411608][T18092] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.419460][T18092] bridge_slave_0: entered allmulticast mode [ 669.427555][T18092] bridge_slave_0: entered promiscuous mode [ 669.437898][T18092] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.446382][T18092] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.455738][T18092] bridge_slave_1: entered allmulticast mode [ 669.468486][T18092] bridge_slave_1: entered promiscuous mode [ 669.540091][T18130] bridge6: entered allmulticast mode [ 669.672568][T18092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.686591][T18092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.775968][T18092] team0: Port device team_slave_0 added [ 669.794806][T18092] team0: Port device team_slave_1 added [ 669.901894][T18092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.909974][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.949659][T18092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.976758][T18092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.993550][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.068667][T18092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.231946][T18163] __nla_validate_parse: 10 callbacks suppressed [ 670.231969][T18163] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3002'. [ 670.278061][T18092] hsr_slave_0: entered promiscuous mode [ 670.286849][T18092] hsr_slave_1: entered promiscuous mode [ 670.293662][T18092] debugfs: 'hsr0' already exists in 'hsr' [ 670.300472][T18092] Cannot create hsr debugfs directory [ 670.326158][T18167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3003'. [ 670.436805][T18167] dummy0: Caught tx_queue_len zero misconfig [ 670.443037][T18165] lo speed is unknown, defaulting to 1000 [ 670.719915][ T5873] Bluetooth: hci2: command tx timeout [ 671.310677][T18092] bond0: (slave netdevsim0): Releasing backup interface [ 671.330324][T18092] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 671.372043][T18201] sctp: [Deprecated]: syz.1.3010 (pid 18201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.372043][T18201] Use struct sctp_sack_info instead [ 671.442712][T18201] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3010'. [ 671.522711][T18211] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 671.761326][T18092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 671.791051][T18092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 671.813816][T18092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 671.842101][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 671.846495][T18092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 671.929010][T18222] 8021q: adding VLAN 0 to HW filter on device bond17 [ 671.975424][T18221] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 672.281290][T18250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3015'. [ 672.294339][T18250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3015'. [ 672.304371][T18250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3015'. [ 672.385657][T18244] lo speed is unknown, defaulting to 1000 [ 672.497565][T18253] netlink: 'syz.3.3016': attribute type 9 has an invalid length. [ 672.505876][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 672.535313][T18260] bridge0: entered promiscuous mode [ 672.543923][T18260] vlan2: entered promiscuous mode [ 672.582301][T18253] ifb1: entered promiscuous mode [ 672.588062][T18253] macvlan0: entered promiscuous mode [ 672.605273][T18253] macvlan0: entered allmulticast mode [ 672.611214][T18253] ifb1: entered allmulticast mode [ 672.657876][T18092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.690260][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3018'. [ 672.693659][T18257] lo speed is unknown, defaulting to 1000 [ 672.717737][T18264] vlan3: entered promiscuous mode [ 672.799199][ T5873] Bluetooth: hci2: command tx timeout [ 672.816763][T18092] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.884329][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.891561][ T7756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.967252][T18270] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 672.985607][T18270] team0 (unregistering): Port device team_slave_0 removed [ 673.001507][T18270] team0 (unregistering): Failed to send options change via netlink (err -105) [ 673.034875][T18270] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 673.049971][T18270] team0 (unregistering): Port device team_slave_1 removed [ 673.090274][T18272] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 673.223324][T18282] net_ratelimit: 10 callbacks suppressed [ 673.223348][T18282] openvswitch: netlink: IP tunnel dst address not specified [ 673.328854][ T8836] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.354859][T12425] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.362179][T12425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.532285][ T7742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.588958][ T8836] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.625750][T18092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.752299][T18303] lo speed is unknown, defaulting to 1000 [ 673.863410][T18311] vlan2: entered promiscuous mode [ 673.906286][T18311] bridge0: entered promiscuous mode [ 673.932201][T18318] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 674.052271][T18317] lo speed is unknown, defaulting to 1000 [ 674.562057][ T7742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 674.581927][ T7742] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 674.637260][T18345] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 674.694688][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 674.761849][T18092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.793734][ T8836] IPVS: starting estimator thread 0... [ 674.879568][ T5873] Bluetooth: hci2: command tx timeout [ 674.898401][T18349] IPVS: using max 24 ests per chain, 57600 per kthread [ 675.108713][T17190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.153514][T18092] veth0_vlan: entered promiscuous mode [ 675.196532][T18092] veth1_vlan: entered promiscuous mode [ 675.435671][T18092] veth0_macvtap: entered promiscuous mode [ 675.494057][T18092] veth1_macvtap: entered promiscuous mode [ 675.585132][T18092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.623259][T18375] netlink: 'syz.1.3038': attribute type 32 has an invalid length. [ 675.660420][T18092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.690394][T18375] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 675.702138][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 675.760007][T18377] lo speed is unknown, defaulting to 1000 [ 675.787566][T12419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.812122][T12419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.887381][T12419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.927347][T12419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.134392][T12425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.185495][T12425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.283131][ T7742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.337352][T18400] batman_adv: batadv0: Adding interface: macvtap1 [ 676.344211][ T7742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.348880][T18400] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.382915][T18400] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 676.958560][ T5873] Bluetooth: hci2: command tx timeout [ 677.027676][T18430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.035462][T18430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.067462][T18430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.090169][T18430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.235551][T18437] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 677.336775][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 677.349532][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 677.359150][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 677.367200][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 677.376650][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.399290][T18440] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 677.445104][T18438] lo speed is unknown, defaulting to 1000 [ 677.510234][T18444] IPVS: stopping backup sync thread 18437 ... [ 677.717294][T18439] lo speed is unknown, defaulting to 1000 [ 678.084995][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3063'. [ 678.100114][T18468] block nbd2: Unsupported socket: should be TCP or UNIX. [ 678.125212][T18467] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 678.494347][T18482] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3065'. [ 678.638479][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 678.871666][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 678.875004][T18495] macsec1: entered promiscuous mode [ 678.981279][T17188] IPVS: starting estimator thread 0... [ 678.987125][T18506] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.000368][T18496] openvswitch: netlink: Flow key attr not present in new flow. [ 679.119412][T18509] IPVS: using max 27 ests per chain, 64800 per kthread [ 679.177945][T18439] chnl_net:caif_netlink_parms(): no params data found [ 679.438635][ T51] Bluetooth: hci4: command tx timeout [ 679.670599][T18536] bond1: entered promiscuous mode [ 679.676280][T18536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.766982][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.786478][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.839592][T18439] bridge_slave_0: entered allmulticast mode [ 679.847798][T18439] bridge_slave_0: entered promiscuous mode [ 679.991549][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.006673][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.015486][T18439] bridge_slave_1: entered allmulticast mode [ 680.023583][T18439] bridge_slave_1: entered promiscuous mode [ 680.135574][T18439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.178006][T18439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.212399][T18561] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3081'. [ 680.311793][T18439] team0: Port device team_slave_0 added [ 680.332049][T18439] team0: Port device team_slave_1 added [ 680.381729][T18439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.392699][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.421956][T18439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.443926][T18439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.453319][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.498388][T18439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.626266][T18439] hsr_slave_0: entered promiscuous mode [ 680.633546][T18439] hsr_slave_1: entered promiscuous mode [ 680.640506][T18439] debugfs: 'hsr0' already exists in 'hsr' [ 680.647255][T18439] Cannot create hsr debugfs directory [ 680.885746][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 681.054475][T18439] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.216288][T18439] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.304737][T18439] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.324872][T18602] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3091'. [ 681.356678][T18439] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.386303][T18604] tap0: tun_chr_ioctl cmd 1074812118 [ 681.421541][T18606] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3093'. [ 681.519847][ T5873] Bluetooth: hci4: command tx timeout [ 681.612995][T18439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.738129][T18439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.782101][T18439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 681.817181][T18439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 682.117968][T18439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.158065][T18439] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.187694][T18639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3098'. [ 682.198788][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.205988][ T7742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.313408][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.320661][T12419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.342463][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 682.574895][T18439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.672762][T18439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.772471][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 682.959593][T18668] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3105'. [ 683.055864][T18662] hsr_slave_1 (unregistering): left promiscuous mode [ 683.121573][T18674] netlink: 'syz.2.3105': attribute type 10 has an invalid length. [ 683.268755][T18674] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 683.402487][T18439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.578587][T18439] veth0_vlan: entered promiscuous mode [ 683.587703][T18692] netlink: 'syz.2.3108': attribute type 15 has an invalid length. [ 683.598773][ T5873] Bluetooth: hci4: command 0x040f tx timeout [ 683.606268][T18692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3108'. [ 683.636254][T18439] veth1_vlan: entered promiscuous mode [ 683.716588][T18439] veth0_macvtap: entered promiscuous mode [ 683.733998][T18439] veth1_macvtap: entered promiscuous mode [ 683.754688][T18439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.767146][T18439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.791099][ T7756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.821194][ T7756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.864398][ T7756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.928732][ T7756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.069126][T18708] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3113'. [ 684.114719][ T7762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.130636][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 684.148947][ T7762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.245698][T12427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.263127][T12427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.664433][T18726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 684.995584][T18746] 8021q: VLANs not supported on ip6_vti0 [ 685.217574][T18762] netlink: 'syz.2.3125': attribute type 27 has an invalid length. [ 685.340535][T18762] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.348430][T18762] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.678637][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 686.638478][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 686.729063][T18762] bond1: left promiscuous mode [ 686.788104][T18756] macsec1: entered promiscuous mode [ 686.802061][ T7733] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.838344][ T7733] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.850417][T18794] C: renamed from team_slave_0 (while UP) [ 686.867398][T18794] __nla_validate_parse: 5 callbacks suppressed [ 686.867421][T18794] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3129'. [ 686.920094][ T7733] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.962769][ T7733] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.087186][T18800] netlink: 'syz.4.3131': attribute type 32 has an invalid length. [ 687.108818][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 687.130588][T18807] netlink: 'syz.0.3134': attribute type 21 has an invalid length. [ 687.139018][T18807] netlink: 'syz.0.3134': attribute type 22 has an invalid length. [ 687.146878][T18807] netlink: 'syz.0.3134': attribute type 23 has an invalid length. [ 687.201774][T18807] netlink: 'syz.0.3134': attribute type 25 has an invalid length. [ 687.222486][T18807] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3134'. [ 687.337342][T18800] bond1: option coupled_control: invalid value (128) [ 687.363818][T18819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3135'. [ 687.380785][T18800] bond1 (unregistering): Released all slaves [ 687.409252][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'. [ 687.473544][T18829] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3135'. [ 687.485777][T18830] netlink: 'syz.1.3137': attribute type 1 has an invalid length. [ 687.528689][T18830] netlink: 174 bytes leftover after parsing attributes in process `syz.1.3137'. [ 687.554102][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3138'. [ 687.768325][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 688.166572][T18858] lo speed is unknown, defaulting to 1000 [ 688.336908][T18874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3148'. [ 688.351636][T18878] netlink: 'syz.0.3151': attribute type 1 has an invalid length. [ 688.492642][T18878] gretap1: entered allmulticast mode [ 688.745140][T18893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3153'. [ 689.328953][T18919] wg1: entered promiscuous mode [ 689.384431][T18919] wg1: entered allmulticast mode [ 689.915056][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 689.927714][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 689.937982][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 689.963602][T18935] lo speed is unknown, defaulting to 1000 [ 689.971627][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 689.985421][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 690.488369][T18957] netlink: 'syz.4.3163': attribute type 64 has an invalid length. [ 690.625194][T18963] netlink: 'syz.4.3166': attribute type 32 has an invalid length. [ 690.685279][T18963] bond1: option coupled_control: invalid value (12) [ 690.694954][T18963] bond1 (unregistering): Released all slaves [ 690.722879][T18932] lo speed is unknown, defaulting to 1000 [ 690.828850][T18966] netlink: 'syz.3.3165': attribute type 2 has an invalid length. [ 690.910992][T18966] !: entered promiscuous mode [ 691.170266][T18980] bond1: entered promiscuous mode [ 691.175881][T18980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.462801][T12427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.490114][T18994] netlink: 'syz.2.3172': attribute type 21 has an invalid length. [ 691.595788][T19002] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 691.596471][ T7742] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.629765][ T7742] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.669569][ T7733] vlan2: left promiscuous mode [ 691.674426][ T7733] bridge_slave_0: left promiscuous mode [ 691.683854][ T7733] bridge0: port 1(vlan2) entered disabled state [ 691.995904][ T7733] batman_adv: batadv0: Removing interface: gretap3 [ 692.045870][ T7733] team0: Port device geneve0 removed [ 692.078639][ T5873] Bluetooth: hci3: command tx timeout [ 692.100162][ T7733] bond8 (unregistering): (slave bridge1): Releasing active interface [ 692.283318][ T7733] bond15 (unregistering): (slave bridge5): Releasing backup interface [ 692.291665][ T7733] bridge5 (unregistering): left promiscuous mode [ 692.298246][ T7733] bridge5 (unregistering): left allmulticast mode [ 692.373558][ T7733] bond1 (unregistering): Released all slaves [ 692.388990][ T7733] bond2 (unregistering): Released all slaves [ 692.404994][ T7733] bond3 (unregistering): Released all slaves [ 692.431242][ T7733] bond4 (unregistering): Released all slaves [ 692.446100][ T7733] bond5 (unregistering): Released all slaves [ 692.461665][ T7733] bond6 (unregistering): Released all slaves [ 692.484643][ T7733] bond7 (unregistering): Released all slaves [ 692.499445][ T7733] bond8 (unregistering): Released all slaves [ 692.514109][ T7733] bond9 (unregistering): Released all slaves [ 692.531277][ T7733] bond10 (unregistering): Released all slaves [ 692.547544][ T7733] bond11 (unregistering): Released all slaves [ 692.573094][ T7733] bond12 (unregistering): Released all slaves [ 692.585783][ T7733] bond13 (unregistering): Released all slaves [ 692.600797][ T7733] bond0 (unregistering): Released all slaves [ 692.615541][ T7733] bond14 (unregistering): Released all slaves [ 692.633249][ T7733] bond15 (unregistering): Released all slaves [ 692.653809][ T7733] bond16 (unregistering): Released all slaves [ 692.670229][ T7733] bond17 (unregistering): Released all slaves [ 692.685416][ T7742] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.694715][T18932] chnl_net:caif_netlink_parms(): no params data found [ 692.752073][T19010] syzkaller1: entered promiscuous mode [ 692.779079][T19010] syzkaller1: entered allmulticast mode [ 693.131044][T19040] __nla_validate_parse: 10 callbacks suppressed [ 693.131067][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 693.138074][ T7733] !: left promiscuous mode [ 693.190331][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 693.299962][T19037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3183'. [ 693.331284][ T7733] tipc: Left network mode [ 693.368599][T18932] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.387210][T18932] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.394998][T18932] bridge_slave_0: entered allmulticast mode [ 693.403354][T18932] bridge_slave_0: entered promiscuous mode [ 693.413916][T18932] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.437058][T18932] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.539646][T18932] bridge_slave_1: entered allmulticast mode [ 693.547656][T18932] bridge_slave_1: entered promiscuous mode [ 693.581838][T19052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.776021][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3186'. [ 694.015123][T19068] netlink: 'syz.3.3191': attribute type 9 has an invalid length. [ 694.047002][T19068] netlink: 'syz.3.3191': attribute type 11 has an invalid length. [ 694.095489][T19068] netlink: 'syz.3.3191': attribute type 12 has an invalid length. [ 694.164537][ T5873] Bluetooth: hci3: command tx timeout [ 694.188874][T19068] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3191'. [ 694.231050][T19072] netlink: 'syz.0.3188': attribute type 21 has an invalid length. [ 694.258153][T19072] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3188'. [ 694.295822][T18932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.404926][T18932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.513111][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3193'. [ 694.593708][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3193'. [ 694.612449][T19064] syzkaller0: entered promiscuous mode [ 694.658419][T19064] syzkaller0: entered allmulticast mode [ 694.666573][T19072] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3188'. [ 695.065765][T19095] xt_bpf: check failed: parse error [ 695.976954][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3199'. [ 696.252005][ T5873] Bluetooth: hci3: command tx timeout [ 697.266193][T18932] team0: Port device team_slave_0 added [ 697.304705][T18932] team0: Port device team_slave_1 added [ 697.449946][T18932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.457214][T18932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.490305][T18932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.561594][T19126] lo speed is unknown, defaulting to 1000 [ 697.682912][T18932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.705756][T18932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.758871][T18932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.261065][T18932] hsr_slave_0: entered promiscuous mode [ 698.271006][T18932] hsr_slave_1: entered promiscuous mode [ 698.277602][T18932] debugfs: 'hsr0' already exists in 'hsr' [ 698.301956][T18932] Cannot create hsr debugfs directory [ 698.318781][ T5873] Bluetooth: hci3: command tx timeout [ 698.383739][T19172] __nla_validate_parse: 3 callbacks suppressed [ 698.383760][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3209'. [ 698.622668][T19185] netlink: 'syz.3.3211': attribute type 25 has an invalid length. [ 698.639949][T19185] netlink: 'syz.3.3211': attribute type 29 has an invalid length. [ 699.022931][T19204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3217'. [ 699.043108][ T7733] hsr_slave_0: left promiscuous mode [ 699.052097][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'. [ 699.060854][ T7733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.083174][ T7733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.313927][ T7733] team0 (unregistering): Port device team_slave_1 removed [ 699.337512][ T7733] team0 (unregistering): Port device team_slave_0 removed [ 699.667932][T19216] x_tables: ip_tables: osf match: only valid for protocol 6 [ 699.708888][T19220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3220'. [ 699.748731][T18932] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.013883][T19238] netlink: 'syz.0.3223': attribute type 27 has an invalid length. [ 700.160151][T19221] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.167963][T19221] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.417887][T19221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.436817][T19221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.222056][T19223] vlan4: entered allmulticast mode [ 701.227510][T19223] bridge0: port 3(vlan4) entered blocking state [ 701.265149][T19223] bridge0: port 3(vlan4) entered disabled state [ 701.295178][T19223] vlan4: entered promiscuous mode [ 701.397838][T19251] netlink: 'syz.2.3225': attribute type 4 has an invalid length. [ 701.456503][T19254] netlink: 'syz.2.3225': attribute type 4 has an invalid length. [ 701.611765][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 701.861221][T19229] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.868998][T19229] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.420818][T19229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.462688][T19229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.840240][T19238] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.847997][T19238] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.940027][T19238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.952672][T19238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.056420][T19238] bond1: left promiscuous mode [ 703.087818][T19239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.101312][T19239] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.113177][T19239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.133478][ T7756] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.201695][T18932] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.242524][T19263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3227'. [ 703.279406][ T7756] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.298746][ T7756] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.314490][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 703.497589][ T7756] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.512491][ T7756] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.547958][T18932] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.574999][ T7733] IPVS: stop unused estimator thread 0... [ 703.587824][ T7756] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.608063][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3229'. [ 703.609082][ T7756] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.656240][ T7756] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.727043][T19275] hsr_slave_0: left promiscuous mode [ 703.757549][T19275] hsr_slave_1: left promiscuous mode [ 703.825318][ T7756] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.898618][ T7756] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.907599][ T7756] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.273890][T18932] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.735914][ T7756] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.834747][T19311] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 705.927784][T19317] tipc: Resetting bearer [ 706.462349][T19358] ipt_ECN: cannot use operation on non-tcp rule [ 706.491321][T18932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 706.530205][T18932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 706.582755][T18932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 706.633521][T19361] netlink: 'syz.0.3247': attribute type 1 has an invalid length. [ 706.682790][T18932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 706.741994][T19361] bond2: (slave bridge1): making interface the new active one [ 706.759596][T19361] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 707.014413][T19391] Bluetooth: MGMT ver 1.23 [ 707.097139][T19397] bridge_slave_0 (unregistering): left allmulticast mode [ 707.116925][T19397] bridge_slave_0 (unregistering): left promiscuous mode [ 707.151503][T19397] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.367269][T18932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.464103][T18932] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.489584][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.496839][ T7756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.596521][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.603823][ T7756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.757923][T19434] netlink: 'syz.0.3260': attribute type 1 has an invalid length. [ 707.951910][T19434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.050185][T19435] bond3 (unregistering): Released all slaves [ 708.175963][T19444] lo speed is unknown, defaulting to 1000 [ 708.213626][T19462] netlink: 'syz.3.3263': attribute type 1 has an invalid length. [ 708.233026][T19462] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3263'. [ 708.249509][T19462] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3263'. [ 708.392191][T19462] netlink: 'syz.3.3263': attribute type 1 has an invalid length. [ 708.420753][T19462] netlink: 634 bytes leftover after parsing attributes in process `syz.3.3263'. [ 708.706674][T19484] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3265'. [ 708.727075][T19482] lo speed is unknown, defaulting to 1000 [ 708.746876][T18932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.762190][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 709.181754][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 709.447730][T18932] veth0_vlan: entered promiscuous mode [ 709.497462][T18932] veth1_vlan: entered promiscuous mode [ 709.647542][T18932] veth0_macvtap: entered promiscuous mode [ 709.685160][T18932] veth1_macvtap: entered promiscuous mode [ 709.750754][T18932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.804292][T18932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.825342][ T7756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.885885][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3277'. [ 709.895179][ T7756] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.912245][T19531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 709.948752][T19540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3277'. [ 709.970590][ T7756] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.989811][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3277'. [ 710.065871][T19541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3276'. [ 710.075556][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'. [ 710.177996][ T7756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.220288][T19541] batadv1: entered promiscuous mode [ 710.225567][T19541] batadv1: entered allmulticast mode [ 710.249394][T19541] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 710.409915][T19558] netlink: 'syz.2.3281': attribute type 62 has an invalid length. [ 710.568813][T19565] bridge_slave_0: left allmulticast mode [ 710.587044][T19565] bridge_slave_0: left promiscuous mode [ 710.608896][T19565] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.628649][T19565] bridge_slave_1: left allmulticast mode [ 710.634521][T19565] bridge_slave_1: left promiscuous mode [ 710.643023][T19565] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.657062][T19565] bond0: (slave bond_slave_0): Releasing backup interface [ 710.671704][T19565] bond0: (slave bond_slave_1): Releasing backup interface [ 710.682780][T19567] siw: device registration error -23 [ 710.697760][T19565] team0: Port device team_slave_0 removed [ 710.706179][T19565] team0: Port device team_slave_1 removed [ 710.712981][T19565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.726585][T19565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.736097][T19565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.754437][T12425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.788900][T12425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.848254][T12419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.856288][T12419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.921796][T19583] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3287'. [ 710.939114][T19579] syzkaller0: entered promiscuous mode [ 710.944890][T19579] syzkaller0: entered allmulticast mode [ 710.955595][T19583] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3287'. [ 712.879871][T19596] tap0: tun_chr_ioctl cmd 1074025677 [ 712.885433][T19596] tap0: linktype set to 6 [ 712.896696][T19599] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 712.906663][T19599] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 712.916511][T19599] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 725.885683][T19637] __nla_validate_parse: 1 callbacks suppressed [ 725.885705][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'. [ 725.960729][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3304'. [ 726.123404][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 726.140230][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 726.153601][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3305'. [ 726.249330][T19652] syzkaller0: entered promiscuous mode [ 726.267496][T19652] syzkaller0: entered allmulticast mode [ 726.370186][T19653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 726.457988][T19662] netlink: 'syz.0.3310': attribute type 27 has an invalid length. [ 726.526735][T19668] xt_TCPMSS: Only works on TCP SYN packets [ 726.630687][T19675] netlink: 'syz.2.3314': attribute type 13 has an invalid length. [ 726.639496][T19675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3314'. [ 728.563140][T19701] bond3: entered promiscuous mode [ 728.600614][T19701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 728.689433][T19705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.706156][T19705] pim6reg99999999: entered allmulticast mode [ 728.739732][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 728.808388][T19705] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3316'. [ 728.949931][T19721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 729.106659][T19717] lo speed is unknown, defaulting to 1000 [ 729.239582][T19733] lo speed is unknown, defaulting to 1000 [ 729.246374][T19735] netlink: 'syz.4.3324': attribute type 10 has an invalid length. [ 729.282398][T19735] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 729.293077][T19732] lo speed is unknown, defaulting to 1000 [ 729.716076][T19743] sch_fq: defrate 255 ignored. [ 729.903486][T19761] IPVS: length: 227 != 24 [ 729.909350][T19761] netlink: 'syz.0.3330': attribute type 62 has an invalid length. [ 729.931139][T19761] netlink: 'syz.0.3330': attribute type 4 has an invalid length. [ 729.961014][T19755] syzkaller0: entered promiscuous mode [ 729.980223][T19755] syzkaller0: entered allmulticast mode [ 730.083623][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'. [ 730.438278][T19788] netlink: 'syz.0.3335': attribute type 1 has an invalid length. [ 730.607793][T19785] netlink: 'syz.3.3337': attribute type 5 has an invalid length. [ 730.629203][T19787] geneve3: entered promiscuous mode [ 730.634476][T19787] geneve3: entered allmulticast mode [ 730.761724][T19788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 730.912934][T19800] netlink: 'syz.4.3339': attribute type 1 has an invalid length. [ 730.935771][T19800] __nla_validate_parse: 2 callbacks suppressed [ 730.935794][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'. [ 730.974859][T19795] bond4: (slave veth3): Enslaving as an active interface with a down link [ 731.022819][T19800] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3339'. [ 731.040559][T19800] netlink: 'syz.4.3339': attribute type 1 has an invalid length. [ 731.195217][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.203402][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.211228][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.218994][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.226714][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.234504][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.242266][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.250052][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.329505][T19806] lo speed is unknown, defaulting to 1000 [ 731.335840][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 731.357663][T19813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3342'. [ 731.367535][T19814] netlink: 'syz.2.3341': attribute type 1 has an invalid length. [ 731.375994][T19814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3341'. [ 731.386966][T19814] NCSI netlink: No device for ifindex 0 [ 731.549020][T19804] net_ratelimit: 56 callbacks suppressed [ 731.549041][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.562480][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.570213][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.577916][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.585800][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.593547][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.601308][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.609053][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.616856][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.624623][T19804] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 731.822889][T19825] sch_fq: defrate 255 ignored. [ 732.251940][T19838] netlink: 'syz.0.3349': attribute type 1 has an invalid length. [ 732.356398][T19838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 732.452853][T19843] bond5: (slave gretap1): making interface the new active one [ 732.495833][T19843] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 732.745930][T19863] netlink: 'syz.1.3355': attribute type 39 has an invalid length. [ 732.821470][T19868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3355'. [ 732.833708][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 732.841525][T19868] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3355'. [ 732.899040][T19869] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 732.909404][T19868] netlink: 'syz.1.3355': attribute type 5 has an invalid length. [ 732.936257][T19868] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3355'. [ 732.939485][T19870] vlan2: entered allmulticast mode [ 733.125701][T19875] sch_fq: defrate 255 ignored. [ 733.337273][T19885] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3361'. [ 733.626076][T19897] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 734.554680][T19919] netlink: 'syz.2.3368': attribute type 2 has an invalid length. [ 734.665352][T19919] !: entered promiscuous mode [ 734.762910][T19919] netlink: 'syz.2.3368': attribute type 2 has an invalid length. [ 734.908091][T19928] netlink: 'syz.4.3371': attribute type 11 has an invalid length. [ 735.057182][T19932] netlink: 'syz.3.3372': attribute type 13 has an invalid length. [ 735.078598][T19932] netlink: 'syz.3.3372': attribute type 17 has an invalid length. [ 735.281754][T19941] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 735.295618][T19932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.316181][T19932] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.943615][T19962] netlink: 'syz.0.3383': attribute type 49 has an invalid length. [ 736.148003][T19978] __nla_validate_parse: 6 callbacks suppressed [ 736.148026][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 736.255133][T12419] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.270513][T12419] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.280036][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 736.322737][T12419] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.345092][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 736.357749][T12419] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.438483][T19987] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 736.454521][T19987] bond2 (unregistering): Released all slaves [ 736.840067][T20003] lo speed is unknown, defaulting to 1000 [ 737.032428][T20021] syzkaller0: entered promiscuous mode [ 737.039113][T20021] syzkaller0: entered allmulticast mode [ 737.063032][T20023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3401'. [ 737.135303][T20002] delete_channel: no stack [ 737.583647][T20044] validate_nla: 2 callbacks suppressed [ 737.583672][T20044] netlink: 'syz.0.3406': attribute type 19 has an invalid length. [ 737.609179][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 737.643629][T20048] sctp: [Deprecated]: syz.2.3408 (pid 20048) Use of int in max_burst socket option. [ 737.643629][T20048] Use struct sctp_assoc_value instead [ 737.685843][T20044] netlink: 'syz.0.3406': attribute type 19 has an invalid length. [ 737.717740][T12425] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.726701][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 737.740894][T12425] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.771403][T12425] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.785388][T20054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3410'. [ 737.801520][T12425] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.837435][T20055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3410'. [ 738.004526][T12419] batadv0: left allmulticast mode [ 738.011027][T12419] batadv0: left promiscuous mode [ 738.016245][T12419] bridge0: port 3(batadv0) entered disabled state [ 738.052962][T12419] bridge_slave_1: left allmulticast mode [ 738.070532][T12419] bridge_slave_1: left promiscuous mode [ 738.076397][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.110073][T20069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3412'. [ 738.168360][T12419] bridge_slave_0: left promiscuous mode [ 738.182291][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.209197][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 738.342576][T20077] xt_bpf: check failed: parse error [ 738.365878][T20077] siw: device registration error -23 [ 738.584365][T12419] bond10 (unregistering): (slave ip6gre3): Releasing backup interface [ 738.771339][T12419] bond9 (unregistering): (slave vti0): Releasing backup interface [ 738.951043][T12419] gretap0 (unregistering): left promiscuous mode [ 739.307107][T12419] bond2 (unregistering): (slave bridge2): Releasing active interface [ 739.504124][T12419] bond11 (unregistering): (slave bridge6): Releasing backup interface [ 739.844542][T12419] bond0 (unregistering): left promiscuous mode [ 739.851111][T12419] bond_slave_0: left promiscuous mode [ 739.856816][T12419] bond_slave_1: left promiscuous mode [ 739.875067][T12419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.887690][T12419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.900848][T12419] bond0 (unregistering): Released all slaves [ 739.922928][T12419] bond1 (unregistering): (slave veth3): Releasing active interface [ 739.933029][T12419] bond1 (unregistering): Released all slaves [ 739.955881][T12419] bond2 (unregistering): Released all slaves [ 739.977054][T12419] bond3 (unregistering): Released all slaves [ 740.006975][T12419] bond4 (unregistering): Released all slaves [ 740.037079][T12419] bond5 (unregistering): Released all slaves [ 740.060008][T12419] bond6 (unregistering): Released all slaves [ 740.092228][T12419] bond7 (unregistering): Released all slaves [ 740.115370][T12419] bond8 (unregistering): Released all slaves [ 740.135577][T12419] bond9 (unregistering): Released all slaves [ 740.171183][T12419] bond10 (unregistering): Released all slaves [ 740.201493][T12419] bond11 (unregistering): Released all slaves [ 740.222168][T12419] bond12 (unregistering): Released all slaves [ 740.244370][T12419] bond13 (unregistering): Released all slaves [ 740.273003][T12419] bond14 (unregistering): Released all slaves [ 740.289111][T20060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.349271][T20103] netlink: 'syz.1.3422': attribute type 27 has an invalid length. [ 740.380796][T20103] netlink: 'syz.1.3422': attribute type 1 has an invalid length. [ 740.469096][T12419] !: left promiscuous mode [ 740.819294][T12419] tipc: Disabling bearer [ 740.828350][T12419] tipc: Left network mode [ 740.979454][T20130] netlink: 'syz.0.3430': attribute type 3 has an invalid length. [ 741.088541][T20141] syzkaller1: tun_chr_ioctl cmd 21731 [ 741.111330][T20122] Bluetooth: MGMT ver 1.23 [ 741.116118][T20122] Bluetooth: hci1: too big key_count value 29096 [ 741.319557][T20151] __nla_validate_parse: 5 callbacks suppressed [ 741.319583][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 741.394541][T20148] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3433'. [ 741.534978][T20159] lo speed is unknown, defaulting to 1000 [ 741.708330][T20168] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 741.893687][T20149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.985069][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3440'. [ 742.020333][T20184] team1: entered promiscuous mode [ 742.025482][T20184] team1: entered allmulticast mode [ 742.031943][T20184] 8021q: adding VLAN 0 to HW filter on device team1 [ 742.042903][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3440'. [ 742.053327][T20184] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 742.083144][T20184] team2: entered promiscuous mode [ 742.088984][T20184] team2: entered allmulticast mode [ 742.094796][T20184] 8021q: adding VLAN 0 to HW filter on device team2 [ 742.236067][T20195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3444'. [ 742.253949][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3445'. [ 742.307906][T12419] hsr_slave_0: left promiscuous mode [ 742.320663][T12419] hsr_slave_1: left promiscuous mode [ 742.327344][T12419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.340665][T12419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.351502][T12419] batman_adv: batadv0: Removing interface: ipvlan2 [ 742.772959][T20221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3447'. [ 742.782290][T20188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.159661][T12419] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 743.841504][T20266] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3455'. [ 743.908407][T12419] IPVS: stop unused estimator thread 0... [ 744.364579][T20291] netlink: 'syz.2.3460': attribute type 11 has an invalid length. [ 745.608410][T20212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.829081][T20334] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3463'. [ 745.849224][T20333] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3464'. [ 745.879924][T20336] geneve2: entered promiscuous mode [ 745.886809][ T7740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.944103][ T7740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.974367][ T7736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.995079][ T7740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.066406][T20338] net_ratelimit: 3194 callbacks suppressed [ 746.066429][T20338] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 746.080524][T18770] IPVS: starting estimator thread 0... [ 746.104662][ T5979] IPVS: starting estimator thread 0... [ 746.161796][T20352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 746.186308][T20350] IPVS: using max 26 ests per chain, 62400 per kthread [ 746.213313][T20353] IPVS: using max 26 ests per chain, 62400 per kthread [ 746.352860][T20366] __nla_validate_parse: 3 callbacks suppressed [ 746.352880][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3472'. [ 746.485461][T20371] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3473'. [ 747.009466][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 747.028018][ T8837] IPVS: starting estimator thread 0... [ 747.036996][T20409] netlink: 'syz.4.3477': attribute type 4 has an invalid length. [ 747.182320][T20410] IPVS: using max 25 ests per chain, 60000 per kthread [ 747.709550][T20430] macvtap0: entered promiscuous mode [ 747.719213][T20428] nbd2: detected capacity change from 0 to 63 [ 747.739200][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 747.748127][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3481'. [ 747.772314][T20429] macvtap0: left promiscuous mode [ 747.838481][T20424] netlink: 'syz.1.3481': attribute type 12 has an invalid length. [ 747.854798][ T5873] block nbd2: Receive control failed (result -104) [ 747.877869][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 747.887337][T12423] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.926457][T12423] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.968733][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3481'. [ 747.982186][T20424] netlink: 'syz.1.3481': attribute type 12 has an invalid length. [ 748.003999][T12423] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.017273][T12423] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.084619][T20447] netlink: 'syz.0.3488': attribute type 4 has an invalid length. [ 748.104608][T20447] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3488'. [ 748.522139][T20476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3497'. [ 748.626901][T20478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.643327][T20479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.844963][T20493] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3502'. [ 748.857650][T20493] syzkaller0: entered promiscuous mode [ 748.864314][T20493] syzkaller0: entered allmulticast mode [ 748.876298][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.883573][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.890419][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.897666][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.904564][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.911425][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.918280][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.925097][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.932079][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.939012][T20493] tc action pedit offset must be on 32 bit boundaries [ 748.945829][T20493] 0: reclassify loop, rule prio 0, protocol 800 [ 749.427240][T20517] netlink: 'syz.2.3510': attribute type 10 has an invalid length. [ 749.456563][T20517] team0: Port device dummy0 added [ 749.536959][T20520] gre1: entered allmulticast mode [ 751.357598][T20583] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.402601][T20583] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.459135][T20596] __nla_validate_parse: 8 callbacks suppressed [ 751.459157][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 751.497051][T20600] xt_hashlimit: size too large, truncated to 1048576 [ 751.622102][T20583] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.634202][T20604] netlink: 'syz.1.3533': attribute type 12 has an invalid length. [ 751.654086][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 751.674610][T20583] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.713181][T20607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3533'. [ 751.794255][T20583] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.815710][T20583] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.923911][T20583] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.941620][T20614] netlink: 'syz.2.3536': attribute type 1 has an invalid length. [ 751.949145][T20615] netlink: 'syz.1.3535': attribute type 1 has an invalid length. [ 751.958301][T20583] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.035885][T20615] bond1: entered promiscuous mode [ 752.068669][T20615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.075613][T20621] netlink: 'syz.1.3535': attribute type 39 has an invalid length. [ 752.122446][T20618] bond1: (slave veth3): making interface the new active one [ 752.130256][T20618] veth3: entered promiscuous mode [ 752.136973][T20618] bond1: (slave veth3): Enslaving as an active interface with an up link [ 752.232677][T12421] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.248793][T12421] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.290617][ T5954] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.299365][ T5954] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.330538][ T5954] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.339724][ T5954] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.353515][ T5954] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.371634][ T5954] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.517775][ T30] audit: type=1800 audit(1774752534.193:11): pid=20623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3536" name="memory.events" dev="tmpfs" ino=594 res=0 errno=0 [ 752.566863][T20631] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 752.581349][T20631] netlink: 'syz.0.3538': attribute type 11 has an invalid length. [ 752.603375][T20631] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3538'. [ 753.067195][T20657] syzkaller0: entered promiscuous mode [ 753.083104][T20657] syzkaller0: entered allmulticast mode [ 753.750319][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 753.767292][T20663] bond0: entered promiscuous mode [ 753.776792][T20663] batadv_slave_0: entered promiscuous mode [ 753.799577][T20664] syzkaller0: entered promiscuous mode [ 753.821586][T20664] syzkaller0: entered allmulticast mode [ 753.831116][T20680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'. [ 753.872324][T20682] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 753.960738][T20682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 754.000057][T20685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.049966][T20686] bond2: (slave geneve2): making interface the new active one [ 754.074226][T20686] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 754.162458][ T7740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.178111][ T7740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.238416][ T7740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.249286][ T7740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.381314][T20707] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3552'. [ 754.395353][T20707] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3552'. [ 754.526657][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'. [ 754.671185][T20720] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 754.687250][T20720] netlink: 'syz.4.3556': attribute type 11 has an invalid length. [ 754.719947][T20720] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3556'. [ 755.109925][T20733] syzkaller0: entered promiscuous mode [ 755.119364][T20733] syzkaller0: entered allmulticast mode [ 755.145350][T20730] lo speed is unknown, defaulting to 1000 [ 755.952815][T20765] netlink: 'syz.2.3569': attribute type 9 has an invalid length. [ 756.984093][T20801] netlink: 'syz.4.3578': attribute type 1 has an invalid length. [ 756.993942][T20795] netlink: 'syz.0.3577': attribute type 2 has an invalid length. [ 757.011052][T20795] !9: entered promiscuous mode [ 757.073435][T20795] netlink: 'syz.0.3577': attribute type 2 has an invalid length. [ 757.292851][T20811] __nla_validate_parse: 4 callbacks suppressed [ 757.292873][T20811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3582'. [ 757.371803][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3583'. [ 757.400318][T20817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3585'. [ 757.458872][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3584'. [ 757.617802][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 757.627202][T20825] bond0: Unable to set up delay as MII monitoring is disabled [ 757.672054][T20825] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3588'. [ 758.018857][T20848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3594'. [ 758.377954][T20830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3590'. [ 758.869641][T20871] syzkaller1: entered promiscuous mode [ 758.875194][T20871] syzkaller1: entered allmulticast mode [ 758.918280][T20873] 8021q: VLANs not supported on ip6tnl0 [ 758.967531][T20876] netlink: 'syz.0.3601': attribute type 1 has an invalid length. [ 758.997162][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3603'. [ 759.030515][T20876] bond6: entered promiscuous mode [ 759.036032][T20876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 759.088969][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3602'. [ 759.251987][T20889] bond6: (slave bridge3): making interface the new active one [ 759.260251][T20889] bridge3: entered promiscuous mode [ 759.267075][T20889] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 759.478017][T20894] veth3: entered promiscuous mode [ 759.510946][T20900] syzkaller0: entered promiscuous mode [ 759.516790][T20900] syzkaller0: entered allmulticast mode [ 759.607655][T20901] netlink: 'syz.3.3607': attribute type 15 has an invalid length. [ 759.622560][T20898] syzkaller0: entered promiscuous mode [ 759.637394][T20898] syzkaller0: entered allmulticast mode [ 759.855303][T20921] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 759.891336][T20921] bond2: option mode: invalid value (254) [ 759.899856][T20921] bond2 (unregistering): Released all slaves [ 760.044250][T20925] netlink: 'syz.1.3611': attribute type 21 has an invalid length. [ 760.053203][T20925] netlink: 'syz.1.3611': attribute type 4 has an invalid length. [ 760.070857][T20925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.218862][T20928] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 760.231056][T20928] bond2 (unregistering): Released all slaves [ 762.486513][T20908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.709997][T20951] geneve1: entered promiscuous mode [ 762.717272][T20951] macsec1: entered promiscuous mode [ 762.723309][T20951] macsec1: entered allmulticast mode [ 762.729267][T20951] geneve1: entered allmulticast mode [ 762.736742][T20950] syzkaller1: entered promiscuous mode [ 762.746967][T20957] netlink: 'syz.3.3620': attribute type 13 has an invalid length. [ 762.759653][T20950] syzkaller1: entered allmulticast mode [ 763.267938][T20964] lo speed is unknown, defaulting to 1000 [ 763.838895][T20999] __nla_validate_parse: 4 callbacks suppressed [ 763.838918][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3626'. [ 763.888398][T20999] nbd: illegal input index -1113835520 [ 764.447542][T21015] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 764.495315][T21020] lo speed is unknown, defaulting to 1000 [ 764.715137][T21043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.082714][T21046] netlink: 'syz.3.3636': attribute type 1 has an invalid length. [ 765.092959][T21046] netlink: 'syz.3.3636': attribute type 11 has an invalid length. [ 765.101095][T21046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3636'. [ 767.269561][T21014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.536535][T21056] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3639'. [ 767.637872][T21060] lo speed is unknown, defaulting to 1000 [ 767.677329][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 767.687700][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 768.416907][T21100] FAULT_INJECTION: forcing a failure. [ 768.416907][T21100] name failslab, interval 1, probability 0, space 0, times 0 [ 768.432028][T21100] CPU: 1 UID: 0 PID: 21100 Comm: syz.1.3648 Not tainted syzkaller #0 PREEMPT(full) [ 768.432057][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.432072][T21100] Call Trace: [ 768.432081][T21100] [ 768.432090][T21100] dump_stack_lvl+0xe8/0x150 [ 768.432127][T21100] should_fail_ex+0x412/0x560 [ 768.432165][T21100] should_failslab+0xa8/0x100 [ 768.432196][T21100] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 768.432223][T21100] ? __get_vm_area_node+0x13f/0x300 [ 768.432250][T21100] __get_vm_area_node+0x13f/0x300 [ 768.432270][T21100] ? unwind_next_frame+0xa5/0x23c0 [ 768.432308][T21100] __vmalloc_node_range_noprof+0x372/0x1730 [ 768.432332][T21100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 768.432370][T21100] ? __lock_acquire+0x6b5/0x2cf0 [ 768.432413][T21100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 768.432438][T21100] ? aa_file_perm+0x192/0x15e0 [ 768.432489][T21100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 768.432509][T21100] __vmalloc_noprof+0xd2/0x120 [ 768.432532][T21100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 768.432556][T21100] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 768.432590][T21100] bpf_prog_alloc+0x3c/0x1a0 [ 768.432615][T21100] bpf_prog_load+0x7ba/0x1ae0 [ 768.432653][T21100] ? __pfx_bpf_prog_load+0x10/0x10 [ 768.432698][T21100] ? bpf_lsm_bpf+0x9/0x20 [ 768.432726][T21100] ? security_bpf+0x7e/0x2d0 [ 768.432757][T21100] __sys_bpf+0x618/0x950 [ 768.432780][T21100] ? __pfx___sys_bpf+0x10/0x10 [ 768.432818][T21100] ? ksys_write+0x242/0x270 [ 768.432845][T21100] ? __pfx_ksys_write+0x10/0x10 [ 768.432878][T21100] __x64_sys_bpf+0x7c/0x90 [ 768.432909][T21100] do_syscall_64+0x14d/0xf80 [ 768.432946][T21100] ? trace_irq_disable+0x3b/0x150 [ 768.432964][T21100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.432986][T21100] ? clear_bhb_loop+0x40/0x90 [ 768.433013][T21100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.433034][T21100] RIP: 0033:0x7fb860d9c799 [ 768.433055][T21100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.433074][T21100] RSP: 002b:00007fb861b71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.433098][T21100] RAX: ffffffffffffffda RBX: 00007fb861015fa0 RCX: 00007fb860d9c799 [ 768.433114][T21100] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 768.433128][T21100] RBP: 00007fb861b71090 R08: 0000000000000000 R09: 0000000000000000 [ 768.433142][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.433154][T21100] R13: 00007fb861016038 R14: 00007fb861015fa0 R15: 00007ffc5d0e7ad8 [ 768.433189][T21100] [ 768.433512][T21100] syz.1.3648: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 768.729912][T21100] CPU: 1 UID: 0 PID: 21100 Comm: syz.1.3648 Not tainted syzkaller #0 PREEMPT(full) [ 768.729942][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.729955][T21100] Call Trace: [ 768.729964][T21100] [ 768.729973][T21100] dump_stack_lvl+0xe8/0x150 [ 768.730008][T21100] warn_alloc+0x249/0x340 [ 768.730043][T21100] ? __pfx_warn_alloc+0x10/0x10 [ 768.730070][T21100] ? __get_vm_area_node+0x13f/0x300 [ 768.730098][T21100] ? __get_vm_area_node+0x2b5/0x300 [ 768.730117][T21100] ? unwind_next_frame+0xa5/0x23c0 [ 768.730157][T21100] __vmalloc_node_range_noprof+0x397/0x1730 [ 768.730197][T21100] ? __lock_acquire+0x6b5/0x2cf0 [ 768.730246][T21100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 768.730272][T21100] ? aa_file_perm+0x192/0x15e0 [ 768.730306][T21100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 768.730326][T21100] __vmalloc_noprof+0xd2/0x120 [ 768.730349][T21100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 768.730374][T21100] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 768.730401][T21100] bpf_prog_alloc+0x3c/0x1a0 [ 768.730425][T21100] bpf_prog_load+0x7ba/0x1ae0 [ 768.730463][T21100] ? __pfx_bpf_prog_load+0x10/0x10 [ 768.730509][T21100] ? bpf_lsm_bpf+0x9/0x20 [ 768.730536][T21100] ? security_bpf+0x7e/0x2d0 [ 768.730568][T21100] __sys_bpf+0x618/0x950 [ 768.730591][T21100] ? __pfx___sys_bpf+0x10/0x10 [ 768.730629][T21100] ? ksys_write+0x242/0x270 [ 768.730656][T21100] ? __pfx_ksys_write+0x10/0x10 [ 768.730686][T21100] __x64_sys_bpf+0x7c/0x90 [ 768.730718][T21100] do_syscall_64+0x14d/0xf80 [ 768.730749][T21100] ? trace_irq_disable+0x3b/0x150 [ 768.730767][T21100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.730794][T21100] ? clear_bhb_loop+0x40/0x90 [ 768.730821][T21100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.730843][T21100] RIP: 0033:0x7fb860d9c799 [ 768.730863][T21100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.730882][T21100] RSP: 002b:00007fb861b71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.730906][T21100] RAX: ffffffffffffffda RBX: 00007fb861015fa0 RCX: 00007fb860d9c799 [ 768.730921][T21100] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 768.730945][T21100] RBP: 00007fb861b71090 R08: 0000000000000000 R09: 0000000000000000 [ 768.730958][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.730971][T21100] R13: 00007fb861016038 R14: 00007fb861015fa0 R15: 00007ffc5d0e7ad8 [ 768.731004][T21100] [ 768.731024][T21100] Mem-Info: [ 768.989755][T21100] active_anon:8971 inactive_anon:0 isolated_anon:0 [ 768.989755][T21100] active_file:3487 inactive_file:40120 isolated_file:0 [ 768.989755][T21100] unevictable:768 dirty:107 writeback:0 [ 768.989755][T21100] slab_reclaimable:12703 slab_unreclaimable:113921 [ 768.989755][T21100] mapped:29724 shmem:1376 pagetables:1301 [ 768.989755][T21100] sec_pagetables:0 bounce:0 [ 768.989755][T21100] kernel_misc_reclaimable:0 [ 768.989755][T21100] free:1301255 free_pcp:10921 free_cma:0 [ 769.041997][T21100] Node 0 active_anon:35884kB inactive_anon:0kB active_file:13948kB inactive_file:160280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118928kB dirty:460kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15648kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 769.078853][T21100] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 769.153303][T21100] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.188888][T21100] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 769.195029][T21100] Node 0 DMA32 free:1249284kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35740kB inactive_anon:0kB active_file:13948kB inactive_file:160280kB unevictable:1536kB writepending:524kB zspages:0kB present:3129332kB managed:2552340kB mlocked:0kB bounce:0kB free_pcp:42136kB local_pcp:21160kB free_cma:0kB [ 769.236324][T21100] lowmem_reserve[]: 0 0 0 0 0 [ 769.304457][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'. [ 769.306011][T21100] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 769.362158][T21100] lowmem_reserve[]: 0 0 0 0 0 [ 769.368728][T21100] Node 1 Normal free:3942404kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.403293][T21100] lowmem_reserve[]: 0 0 0 0 0 [ 769.408102][T21100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 769.498377][T21100] Node 0 DMA32: 7269*4kB (UM) 5012*8kB (UME) 2251*16kB (UME) 210*32kB (UME) 264*64kB (UME) 343*128kB (UME) 502*256kB (UME) 356*512kB (UME) 226*1024kB (U) 83*2048kB (UM) 89*4096kB (UM) = 1249444kB [ 769.535135][T21113] lo speed is unknown, defaulting to 1000 [ 769.622757][T21120] netlink: 'syz.2.3655': attribute type 3 has an invalid length. [ 769.638008][T21100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 769.705461][T21120] nbd: nbd2 already in use [ 769.715013][T21100] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 3*16kB (UM) 6*32kB (UM) 6*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3942404kB [ 769.848307][T21100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 769.857979][T21100] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 769.888545][T21100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 769.905195][T21100] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 769.918665][T21100] 44972 total pagecache pages [ 769.923546][T21100] 0 pages in swap cache [ 769.928094][T21100] Free swap = 124996kB [ 769.933475][T21100] Total swap = 124996kB [ 769.937882][T21100] 2097051 pages RAM [ 769.952541][T21100] 0 pages HighMem/MovableOnly [ 769.964310][T21100] 427132 pages reserved [ 769.984106][T21100] 0 pages cma reserved [ 770.512184][T12423] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.542396][T12423] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.580562][T12423] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.598797][T12423] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.767337][T12423] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.790637][T12423] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.810772][T12423] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.846353][T12423] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.967846][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3664'. [ 771.093192][T21168] syzkaller0: entered promiscuous mode [ 771.099749][T21168] syzkaller0: entered allmulticast mode [ 771.264862][T21182] lo speed is unknown, defaulting to 1000 [ 771.275481][T21188] netlink: 'syz.0.3669': attribute type 10 has an invalid length. [ 771.359432][T21188] team0: Port device netdevsim0 added [ 771.626744][T21196] xt_hashlimit: size too large, truncated to 1048576 [ 771.846462][T21202] bond7: entered promiscuous mode [ 771.860600][T21202] 8021q: adding VLAN 0 to HW filter on device bond7 [ 772.164970][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 772.179713][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3677'. [ 772.230157][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3677'. [ 772.263962][T21224] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3679'. [ 772.663610][T21236] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 772.741721][T21234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3683'. [ 772.832576][T21234] siw: device registration error -23 [ 773.001971][T21248] netlink: 'syz.2.3686': attribute type 10 has an invalid length. [ 773.051802][T21248] netlink: 'syz.2.3686': attribute type 10 has an invalid length. [ 773.085443][T21248] team0: Port device dummy0 removed [ 773.103186][T21248] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 773.217545][T21253] bond2: entered promiscuous mode [ 773.251867][T21253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 773.671330][T21270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3690'. [ 773.701750][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3690'. [ 773.759726][T21270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3690'. [ 773.900101][T21278] sctp: [Deprecated]: syz.4.3692 (pid 21278) Use of int in max_burst socket option. [ 773.900101][T21278] Use struct sctp_assoc_value instead [ 773.982123][T21282] netlink: 'syz.0.3693': attribute type 13 has an invalid length. [ 774.019416][T21282] netlink: 'syz.0.3693': attribute type 17 has an invalid length. [ 774.775438][T21282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.803208][T21282] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.858554][T21282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.889419][T21285] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 774.915027][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 774.925426][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 774.961586][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.008839][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.017905][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.072316][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.157774][T21304] ipt_rpfilter: unknown options [ 775.278975][T21307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.352381][T21313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3703'. [ 775.378917][T21313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3703'. [ 775.393759][T21313] netlink: 'syz.2.3703': attribute type 5 has an invalid length. [ 775.403551][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3704'. [ 775.416653][T21315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3704'. [ 775.451185][T21315] bond8: option ad_select: invalid value (34) [ 775.461095][T21315] bond8 (unregistering): Released all slaves [ 775.540491][T21323] batadv_slave_1: entered promiscuous mode [ 775.555936][T21322] batadv_slave_1: left promiscuous mode [ 775.632629][T21326] netlink: 'syz.4.3705': attribute type 8 has an invalid length. [ 775.645850][T21319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3705'. [ 775.944315][T21348] sctp: [Deprecated]: syz.2.3713 (pid 21348) Use of int in maxseg socket option. [ 775.944315][T21348] Use struct sctp_assoc_value instead [ 775.984322][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'. [ 775.993922][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'. [ 776.195080][T21358] xt_hashlimit: size too large, truncated to 1048576 [ 776.324883][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3719'. [ 776.499644][T21371] nbd3: detected capacity change from 0 to 127 [ 776.624835][T21378] lo speed is unknown, defaulting to 1000 [ 776.663296][ T5873] block nbd3: Receive control failed (result -104) [ 776.944023][T21408] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 777.187241][T21422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.344021][T21423] lo speed is unknown, defaulting to 1000 [ 777.364474][T21424] lo speed is unknown, defaulting to 1000 [ 778.171472][ T1697] block nbd2: Possible stuck request ffff888026a18000: control (read@0,1024B). Runtime 30 seconds [ 778.184088][ T1697] block nbd2: Possible stuck request ffff888026a18200: control (read@1024,1024B). Runtime 30 seconds [ 778.195193][ T1697] block nbd2: Possible stuck request ffff888026a18400: control (read@2048,1024B). Runtime 30 seconds [ 778.207100][ T1697] block nbd2: Possible stuck request ffff888026a18600: control (read@3072,1024B). Runtime 30 seconds [ 778.614091][T21485] netlink: 'syz.2.3747': attribute type 12 has an invalid length. [ 778.634240][ T7733] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.644892][ T7733] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.657780][T21485] netlink: 'syz.2.3747': attribute type 12 has an invalid length. [ 778.669512][ T7733] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.685369][T21485] syzkaller0: entered promiscuous mode [ 778.692120][T21485] syzkaller0: entered allmulticast mode [ 778.699735][ T7733] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.134196][T21503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.830649][T21527] vlan0: entered promiscuous mode [ 780.282027][T21535] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000 [ 780.706242][T21553] __nla_validate_parse: 15 callbacks suppressed [ 780.706265][T21553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3765'. [ 780.769645][T21558] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 780.867464][T21557] netlink: 'syz.3.3767': attribute type 1 has an invalid length. [ 780.897813][T21557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.085514][T21566] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 781.159456][T21567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3770'. [ 781.264192][T21577] tipc: Enabling of bearer rejected, failed to enable media [ 781.490891][T21591] netlink: 'syz.2.3776': attribute type 2 has an invalid length. [ 781.528680][T21591] netlink: 'syz.2.3776': attribute type 2 has an invalid length. [ 781.576819][T21596] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3777'. [ 781.753419][T21604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3779'. [ 781.871438][T21606] lo speed is unknown, defaulting to 1000 [ 781.979770][T21611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.238534][T21616] syzkaller0: entered promiscuous mode [ 782.244177][T21616] syzkaller0: entered allmulticast mode [ 782.256146][T21616] TC_ACT_REPEAT abuse ? [ 782.528580][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578a4000: rx timeout, send abort [ 782.634970][T21637] sctp: [Deprecated]: syz.3.3788 (pid 21637) Use of int in max_burst socket option. [ 782.634970][T21637] Use struct sctp_assoc_value instead [ 782.659683][T21637] x_tables: unsorted underflow at hook 3 [ 783.028645][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a77a000: rx timeout, send abort [ 783.036968][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578a4000: abort rx timeout. Force session deactivation [ 783.243510][T21660] Bluetooth: MGMT ver 1.23 [ 783.254861][T21659] syzkaller0: entered promiscuous mode [ 783.293292][T21659] syzkaller0: entered allmulticast mode [ 783.416472][T21660] netlink: 'syz.3.3792': attribute type 13 has an invalid length. [ 783.536956][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a77a000: abort rx timeout. Force session deactivation [ 783.775616][T21685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3795'. [ 783.792633][T21686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3795'. [ 784.500327][T21725] lo speed is unknown, defaulting to 1000 [ 784.532583][T21734] netlink: 'syz.4.3806': attribute type 1 has an invalid length. [ 784.540868][T21734] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3806'. [ 784.633050][T21733] lo speed is unknown, defaulting to 1000 [ 784.653916][T21737] dvmrp0: entered allmulticast mode [ 785.026631][T21752] ip6tnl2: entered promiscuous mode [ 785.035521][T21756] xt_TPROXY: Can be used only with -p tcp or -p udp [ 785.046831][T21752] ip6tnl2: entered allmulticast mode [ 785.211860][T21767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3813'. [ 785.223763][T21766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3813'. [ 785.454670][T21669] Bluetooth: hci5: command 0x0406 tx timeout [ 785.461383][T21669] Bluetooth: hci1: command 0x0406 tx timeout [ 786.109687][ C1] ------------[ cut here ]------------ [ 786.115666][ C1] sk->sk_forward_alloc [ 786.115698][ C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#1: ksoftirqd/1/23 [ 786.129977][ C1] Modules linked in: [ 786.134448][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 786.143839][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.153972][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 786.159900][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 00 02 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 f2 01 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 e4 01 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 786.179720][ C1] RSP: 0018:ffffc900001d7ae8 EFLAGS: 00010246 [ 786.185879][ C1] RAX: ffffffff8a26ac8c RBX: dffffc0000000000 RCX: ffff88801dec0000 [ 786.194062][ C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 786.202111][ C1] RBP: 0000000000000090 R08: ffff888011f78b27 R09: 1ffff110023ef164 [ 786.210183][ C1] R10: dffffc0000000000 R11: ffffed10023ef165 R12: ffff888011f78880 [ 786.218280][ C1] R13: dffffc0000000000 R14: ffff888011f78b0c R15: ffffffff8fca6c80 [ 786.226338][ C1] FS: 0000000000000000(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 786.235522][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.242287][ C1] CR2: 00007fc29b5456b8 CR3: 0000000049d66000 CR4: 00000000003526f0 [ 786.250446][ C1] Call Trace: [ 786.253772][ C1] [ 786.256755][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 786.262399][ C1] __sk_destruct+0x85/0x880 [ 786.266967][ C1] ? rcu_core+0x751/0x1070 [ 786.271655][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 786.276835][ C1] rcu_core+0x7cd/0x1070 [ 786.281206][ C1] ? __pfx_rcu_core+0x10/0x10 [ 786.285964][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.291107][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.296387][ C1] handle_softirqs+0x22a/0x870 [ 786.301411][ C1] ? schedule+0x90/0x360 [ 786.305734][ C1] ? run_ksoftirqd+0x36/0x60 [ 786.310474][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.315561][ C1] run_ksoftirqd+0x36/0x60 [ 786.320080][ C1] smpboot_thread_fn+0x541/0xa50 [ 786.325109][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.330273][ C1] kthread+0x388/0x470 [ 786.334407][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 786.339966][ C1] ? __pfx_kthread+0x10/0x10 [ 786.344615][ C1] ret_from_fork+0x51e/0xb90 [ 786.349295][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 786.354496][ C1] ? __switch_to+0xc7d/0x1450 [ 786.359300][ C1] ? __pfx_kthread+0x10/0x10 [ 786.363962][ C1] ret_from_fork_asm+0x1a/0x30 [ 786.368844][ C1] [ 786.371937][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 786.379474][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 786.388813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.398999][ C1] Call Trace: [ 786.402411][ C1] [ 786.405397][ C1] vpanic+0x56c/0xa60 [ 786.409446][ C1] ? __pfx__printk+0x10/0x10 [ 786.414095][ C1] ? __pfx_vpanic+0x10/0x10 [ 786.418650][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 786.424010][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 786.429265][ C1] panic+0xc5/0xd0 [ 786.433046][ C1] ? __pfx_panic+0x10/0x10 [ 786.437526][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 786.442637][ C1] __warn+0x315/0x4f0 [ 786.446679][ C1] ? inet_sock_destruct+0x62d/0x740 [ 786.451949][ C1] ? inet_sock_destruct+0x62d/0x740 [ 786.457357][ C1] __report_bug+0x29a/0x540 [ 786.461927][ C1] ? kasan_save_track+0x3e/0x80 [ 786.466846][ C1] ? kasan_save_free_info+0x46/0x50 [ 786.472106][ C1] ? __kasan_slab_free+0x5c/0x80 [ 786.477272][ C1] ? inet_sock_destruct+0x62d/0x740 [ 786.482608][ C1] ? __pfx___report_bug+0x10/0x10 [ 786.487703][ C1] ? inet_sock_destruct+0x62d/0x740 [ 786.492959][ C1] report_bug+0x16a/0x220 [ 786.497350][ C1] ? inet_sock_destruct+0x62d/0x740 [ 786.502592][ C1] ? inet_sock_destruct+0x62f/0x740 [ 786.507868][ C1] handle_bug+0x9c/0x200 [ 786.512166][ C1] exc_invalid_op+0x1a/0x50 [ 786.516731][ C1] asm_exc_invalid_op+0x1a/0x20 [ 786.521645][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 786.527674][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 00 02 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 f2 01 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 e4 01 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 786.547448][ C1] RSP: 0018:ffffc900001d7ae8 EFLAGS: 00010246 [ 786.553658][ C1] RAX: ffffffff8a26ac8c RBX: dffffc0000000000 RCX: ffff88801dec0000 [ 786.561675][ C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 786.569690][ C1] RBP: 0000000000000090 R08: ffff888011f78b27 R09: 1ffff110023ef164 [ 786.577797][ C1] R10: dffffc0000000000 R11: ffffed10023ef165 R12: ffff888011f78880 [ 786.585904][ C1] R13: dffffc0000000000 R14: ffff888011f78b0c R15: ffffffff8fca6c80 [ 786.593917][ C1] ? inet_sock_destruct+0x62c/0x740 [ 786.599161][ C1] ? inet_sock_destruct+0x62c/0x740 [ 786.604387][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 786.609871][ C1] __sk_destruct+0x85/0x880 [ 786.614489][ C1] ? rcu_core+0x751/0x1070 [ 786.618944][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 786.624098][ C1] rcu_core+0x7cd/0x1070 [ 786.628419][ C1] ? __pfx_rcu_core+0x10/0x10 [ 786.633137][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.638227][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.643339][ C1] handle_softirqs+0x22a/0x870 [ 786.648145][ C1] ? schedule+0x90/0x360 [ 786.652441][ C1] ? run_ksoftirqd+0x36/0x60 [ 786.657084][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.662142][ C1] run_ksoftirqd+0x36/0x60 [ 786.666598][ C1] smpboot_thread_fn+0x541/0xa50 [ 786.671573][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 786.676640][ C1] kthread+0x388/0x470 [ 786.680728][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 786.686232][ C1] ? __pfx_kthread+0x10/0x10 [ 786.690849][ C1] ret_from_fork+0x51e/0xb90 [ 786.695472][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 786.700612][ C1] ? __switch_to+0xc7d/0x1450 [ 786.705341][ C1] ? __pfx_kthread+0x10/0x10 [ 786.709948][ C1] ret_from_fork_asm+0x1a/0x30 [ 786.714759][ C1] [ 786.718413][ C1] Kernel Offset: disabled [ 786.723381][ C1] Rebooting in 86400 seconds..