last executing test programs: 5.7757471s ago: executing program 0 (id=2945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}], 0x1c) (async) sendmmsg$inet6(r2, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x7ffffff}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}], 0x1, 0x400c800) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000009f0f70a657ba714a5f504900"/112], 0x78) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='team_slave_0\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480e7915c0909000100686173680000000014000280080007400000000108000240000000120900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 5.552075776s ago: executing program 0 (id=2947): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x1) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 5.344175055s ago: executing program 0 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) pipe(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0x57}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={0x90, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x90}}, 0x0) gettid() socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r1, &(0x7f0000002c00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002c80)={0x12e4, 0x837, 0x1, 0x70bd2d, 0x25dfdbfc, {0x10}, [@generic="38823a3fd59698b75ab24e81d241d72dd728f95de40e1aba16be5a3f6bf8fb300ef6eca997ce1ff6888ae587fffb352251dc72bf3451bb8a7a44c41db2ccc6b16a7dec12b361aaa931800fe10dbbd3ed4f5aaa7d3fcdb9b15247d9403e8a496b52c6a4bebf96461f0d83f36297b01101dcde087c89142446e15f10c7f2fafc4c1aa3449f51fbe9942debf1cf2a726001972b9b86c9361e8d957c6ff8c8a933a7f52b12986bdffe9a5500120a7b2b91ed62aeeef78beb5154dcd2052d7580c537e102a6396b810535458915c609b807a0c00e9679d6f79427fa2cb730bf86", @typed={0x8, 0x15, 0x0, 0x0, @pid=r2}, @generic="6131945f1569389709befe115bd80fe774d2f1a218359b33ee0744662102221ab7b5e5a3d18f44b71e670f9cb09cd89f7968a00f1dd37cb37cb9970914d8e6eb87e1ac7c90b57f1a245ae9709613df55258702295af597a08c993e597d17a8ead6937f86b00ec7b3e283c97f49ac318b907d16c253dec9aab513e8cd39fb6d92727894a3ea3862455eb819985a1e42dcb79774ee", @nested={0x14, 0x76, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @u32=0xe0}, @nested={0x4, 0x14e}, @nested={0x4, 0x2d}]}, @generic="b06a2c6cec09b7e8f718d72bb658b1a4225f057d887f73120c068a2126d7893933ab316fc5325f392bade9bee4a22aa00fe37c185eb60cc9bd1c5c3d864413725477d9fc797f56b498fbf2e71ba85e13eacc2c8de4a57180d25c242f6707d93108448f694638b24fa3b31ee8162aadd29bea892407e6f738c14ce99dd57493c1f145b82d727d57f9a76b95feda4abd0da2deb7774076ad1dfadb5112d37225cc7776dbb7577e816f4ad938ff9099f4bab0a1a7420a169aab382d81ad1e34a2b044f6c425a40461926f1c2dd0c0614194da6a74cdde762d7322ef33ca9b73a7152435a60372a2e2c2fed9c28b366dfd", @generic="eef765bb835b2340775be338d54e75b72f77fab0d4a865ba36d9d169eb9ef08c4835e8751ddc2fd978e7f2a953aef13c02491cda7a5da63af27cf0504aea3bcad7cdf5", @nested={0x1010, 0xcc, 0x0, 0x1, [@generic="8fb1ca950a63131c6e47016fa460b625c7f3046aa70875cef8159029234bccced2c74f2677b517e53af670c0e1d2c853b76473f0e30f29012910817095a4f85d814b3dd5db58fac02b7d6b544787b36c69c1d4aeec58bcd4cd96e308bb1efdb7c65eb5499fc01310ec46c27969339879fed20f3367121c687db6af000357613e80e2837e3aba5600fd619bee3ab958cfab112be60e0fffd2adebe5bc2a04707d532203fd309d7ce4ca6a270ce66ea24c4fee49356148aee8893e18f0c79b62f02082f5399a1d761e4006984cbe1caeb29c0a6d29684b50f2981f2f2204374baa8b119f0d92ca345639c3411c1ed7099cf1ca342f229e228e52be387c3e7e88b25383970056ae496423a4bcb6b0c61b40ffcd131042bc4982eea8d4f0200f8d2312d1abed62c0dfa08450c6354b82504a57513b61337d40380b1280aaf38c033818eac3ac1b90f8e8e5cb3b217f792111bb37570792f7b537477091dea8bf60afe5e8188847e84aa4ef76f4f7f3884b8b9b6cd0361bfbe44378f420f381aec301c036855ed71a30057fa764819ceee0864566d9bc4087a3f3d672f45ddf807285412869248d7aa4feacf7a8f25e09bce8becad021f80cee8fb83d8ff4845c4a5aa4cd6fb8803b81ad792232d3a16942a5fa371da171c79e243d75a84990b5e0d456a16cff98857921b3fa60c3fc6eab1889013f122f81fefff2ac6a5741537e0c0f93acf62dfc60aec4c0bc5596816d80170e06f3239625a5475b7a0b2c67f6933ab0a2bb76fcf22353589373e1ac58c30b87ef871c3b38c7932da4752788859a6731cc98086d70bc295c5c6be6be63d12da7544274ddbb529f911899698487b0c286cd616ba514237e48e0363f5fe528a3ea53c091bcb642b9809f1842c0561d52ea9347ec32e11e39e8b501c54a017a653327696e011b5a150017fa26954b62d1833bb4153a47cf7142c63ce492ecdb4716d6557d4a4f7294900064115cc18246741370e10b1ddad57ab6f9281cd6482db301d6cb9ca4fe642823362a02a7c3877eb6575bc8c89c85d963e303e9848be681877b0e9857260c98b68bc86debff3b8cff70afac65c96919b950c6e39fcdfb58c90e3edbe4e9ecddb184f0f9728d020d47a0109ab565abe0a73928db1a929da7d90b06c7ef8b42837a97aa2c57e3d4ab9581525192718ad54ac24c302576649b60ef362bfbc27b62d99bea6f70b654c5a8abf0bd41def65c48c86085c4877ed5960f1eb42803cc53390045cd82f7fa4ed7b580705d3a9380b6eb9b930bad6f8e4cc6c42d6bed30ba93a88ec9821a6529e043fa66ea00265122977348a60699288aceacca728e4003206ffc4542d2c3609f1e3dc8ef3fe88887f4ed5ce75cef17aa2e6bc64f95cff66e38a8eb1e977fb212d9f0fba123a6c8aac0240b88ec29613af6defebc9e0e7a364363756fc6b44fa615f5b396041eb58a15948555a9c90cadf87c9e3b1e06f90e3dad103e449b6a11494ac0895e0b1fb052ed329e6dc420aeb968afbef3db542938ee09b070340aa7719080e8a286a34777065545e0e514bec4025050841ef52c8b15cb3d340a11928deb96d9c08338b7701d57ef88c55ab8cc421563893a716874305618ff3721900d0b10d87c5c60c61bad9d908e7fe9d5f4f0b938f16837f5de73202d72df3c26543335e995498d267967f19bb0c1b96b5420b5b889923eeb8b1bfbf9698c6689f574c0edf1d7203960cee16ee5bc172030daf30aa9c088a0c9b4437a3a47825e97614de5897e84f83483aa6684cba61c80da0b56b724bdc2d1556f6d5a706516503126ce2de0d5b61bd55051b7dc8ba4236044252a941f199c7155089c1edd7c8f0499791199bdf3365a84596bf79c41dce5eebeed872f55db5594f626eb7a770982304c44cc3f372d22729596f1bb85b50ae7a7f53b3c2e10e4f155806ce4846e71681aba9dd845f36fb598388dd320d169d07fc69e34bca7698fe5f2950cfbc966f77b0f69e1aa90504ae9b6a7112c97d4fa9c1affd6f8704804816439146a2845822ac2c6b3fa420e9997920e402b5d802ff865f7232810e8d8a8ef766a645b126293afe6da064b11e082773e2376a7aa9cc4b94411217f2d51d8683394cca1a1372e9e2a76733b5cbff1e9c8934822c4cc3a1643112d86fe06c4cbaeabea16e7c40c7c0846553519fc760782fb34c21aa3b50e310144b261172215177ba9e2eb4f830db31c1307f859b2f7b3c80be855532f480707f59b21791bd91e097532d8861265b531f07ae6de811f87267156083ecf5bbf03829ba3923949e598d17a68a0ebc5aac551c395399b1f8c1add010cac8620b3ac15f303adfa34a39f1c6a91f22e8be54f86aada07fca91243c6637925eb5664931a989900bb1dc04e83bc18bc9d22bd474efec68de46679f7d96c79960749b7f33e100d4ccea1a3a0cd16f359f07b9eaf934567d8606d4a2e36a67176ebcd214e4f37a129e0ba98cf3082b8831820190a2dce1dbddf57510988bc5ad92997d61f54e75c8a32d125efe87c58ad6284a3698b957899b6868419000acca04e9ebaf3d270301265036d0cf1a88308958d2e6a611294cffcdf2c37ac83d5f6f9439553e6c84a7293f979115f6d353bdcadcd003c794688fde67f3a8a503d2e3e3622770345ea5438f2859e76a27dd66cb030751f57ebf44915d489bb31bf8dca80e5c461c3199dd6bafc09a9e19b85be1fdda7e270775d18f1d0e47c025950dfb5bb3b2adc3ed02de8248a4d4993c56ab7959cc03c0b2f96add846048da3bfb1d85fec5732f01b0e514bfd664ad49350a521fde6adc6a6855b75c47237e6731f8eaf5b56fcd54ccaf67a45f79d9eec8554afcbdf9f828ae088cbc567047c559e18f7117b75d29e22196cbb31ce3f859bef4ad0626380f31c4011504c68ab501359a8cc7a746d20892cf0e975136c604f3578c13fe351b28aa427e4b49b4447c1d99f50e98e636d372f74f8d94dbb049423ba098f42883c5c5c8dc234233a6f5120bffb863a7f0a53ab926a5171154aaa477c78ad1c42615bbbedb961914633e59db17428806f0e0960917e6ba781439b7e9cf9cb5a1ccb94898208f1ff34cacec627d34204e9933636fb461654896bb594e6abb611bac0f0b50e96e05587622029bb173763ce44787c45aac06d2d8f855c9eb1afed6c8c3a9b6c28ff72f75bb3035136f0ea5ac0da28fb912e032914ff05dd36053104d1f6dc3941a971c28942eae7c96478a03ea8a0d74e817fc11a775c6045104103b7049b104528aa6446ce53e389e170b04e94c0e1df6740c29bcbb1093b12e14cce8ed45b268fe689572e7083c8f9e10d316c237457666d1f5d68dbe4cc1e074c43c58939fcb53326e49c6b430ff0ebcdba0d814c763e8cd19cf4f48a4a90fed43691d8c592741d1163e8653a4ee8dd2fa764c9c7de61e499dbc014081387bd4f6bee35983d01419d7a8730d183c216cdafc50e9be275263a11789cc6634c898ce779b67185975483c7a1d80ce9f1a065f3b2765385385e2cf413519fda6f2358175a4d0600db80fbf8106a200074c88a424636a4150a9af7b57a91aa34a7684773b1ab0d7793875409caba400813440132b91b66878a3c362d41d886a8066fa737eb80e7dbdb253f73f3d748b877005c12085099778ffd3db4ebef50c937a71635aa098453164eb3e22a7b0c5f38e72e16c5081953c42dd20facdd3c62677b6bedba37e8dc5ce3c2bd765fed5f42f1a56e5c31456acbf5b8c2d4e63ba57370deeafb1fd298dfe9dce5f69cc104bffe1e5d6282c13ba6e17e619961267a313a90ba4c8cad7c7aa62c5bb55f64f2a1eb2a879b622e718abd46329d413960c64a52290c52d0cf06af968b3137974c9ecc94e0920c20c2f6ac9f2e0e1d50b9063301c0ae9f30b4177f911291c4c5c85ade316178eccb72a85dc39676ad64eb5a90931fccc93f95153f65c67ba165ed3990fc7daaadf224cc1cf30a9eb065f719cd04f2e7c8b147dc119f5756fcefbe0cd5b420b3302ba74908b5c4cf9188f7a5e38c97ad747998e98758f1b83d2641b39167f15ea59bb3574063b2e707b212913cb925f2fe49c3c486b715fa94a7a0db08b9148e91866a5b1efd3a19d6a4fda046a8aa096d776d142f3b8715b76f1c1623bf73aaddfe3ad9a185a797ffd8d3e50bcdac32bea950213039acd21c291f5b3f6cfdddc0e413e999049436992c82f9ed2eef10d45fe4a5b1a2e29de1512a4c930560ab58c90e5cd84b8a80bb82284a730225b8589f95e008108793496c399736db6689757e9199b05b512699d74d85aa4a1f971029cdb345d74bc7483026022840592e67abb4bc5050dd624105b276c57875331b32897950e494e3aa9a57977ec0b6683b4eeaa50905b2a8f6d65fe164ed0e6db93106284401c52ff091fcc03026d2ce528a8332e13cd3836371cdaafa05199d6c1d2f3bab492d6d280fc556936e73415986d300fab4f8ed803dae10833fa494756c618f9b92f011618e1bfdfd58b1faa2e4076b52e327766580a6c42d59697d2f3015888c84af23a45e10bb142292b54b116d7ef43fe58a0e7f919bc72d2635c69c40f6ac577af324f96f749e5c8a21553f2ad95d7377c8d986c49b2a7d017f7ef1a8f838bd412742bf412769d165a7799345765e69a9e9bac39e7428f027f236f2f938c60c10b18a8b7938b031e681c682b48bfa78758d01a8f67154514cacfe36b26352dc8114f98ea37e0aa50a8253de2936187ef2b23464a18b993e6e5698f06569361b97776ebf313d12c665fa392cd964ecdb777393dcec8d5450f29c0de8a0c297a7b774e850aa5ea677afc68f91e94c2eb6e7ded31f29925a85563cf2a062e59f520bf5dd3e4983c4a4f3d5c01db56a445f62829a5934ff8a940626733bcd8ec3449b659ca734382c1eb80f18e38755eb3f6bb7d5b6f04d753a1591ff0fd5f4350a3a7931af5b9955dbbbb7bb30f85ff4e6705198219ab51d4865f898c3535915e5882e38f69de85a9d28de7db8ca4a7ee05540ff16a54df416032350cab475af0b3cc612d91edde025cee8d649db933d5b42aade0d846767a042bbe0aa27652edc1656de2bf58a76b4fca4750d938aafdd5d3c9722d91781305e6221e8bf3146a0123c1f6efcd766ffc7e4d52a8916c48842314fbc44db88325d762406e01f3b37a2bfa4bade14cdad7e5947c1a4f1127409f9799ac770d61babcbf9180b3a30c39992782ab7a75311ee918add456ceb52fb01cc3c1fae70d212ac06c745fa6b0a8f5213961964255d6258b1f76eafca96c7ffd66a512e3e46bb252c481f339e19ac94c79a0c83bce87b6e17d30fd0a82ef8bab6e0bfdfd9fa7031241cc093f1e5f8d2e0b41f970ece4308dc9f2ea63d3c5beeafdfbaca42c41b570e934157ce2d04f99f10d2ba6f87cb4f35be49a9b595954a45a475e50a075a9484174087eab74f66a34d8123c3f2c197fa0a8385d9a5a5efdda3c61f0778347a961e06cb48f1049ffcd84942e8e6d8d7f5665f1e9bef89cdffbde224c78df1fed7ce635022d53accbdc8f5f50d6eb323f9d892da97b1c4a3689b2b32661a597c90fa25f7cd948903871d19d216e19effa9224e24b92376cdf71ab550e5c2688781f0477c8883ca69c0fd7a3274d6cc4bd9e02b32d5e27e232e00246eb418f96f4152b90556820bb04f81c9f7a6ed0d4bb616944ee986f780b4f02d670812246e0e7ab8af23b323d5f900638384cccf304eda8704f35367922b14b3aa2b14f5b744aa2df2ead9a1f895e418e7e9fad3333b", @typed={0xc, 0x15, 0x0, 0x0, @u64=0x9}]}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x22000000}, 0x4081) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c40)=ANY=[@ANYBLOB="140000001400010600000000000000202bfa000005d90364d24cf152b9ff676977a222dd0c15f21b33714131e543cc7a607c854a17f2a01352b806"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4048011}, 0x2400c0d4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f0000000080)=ANY=[@ANYBLOB="68160000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf257a00007808000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1668}, 0x1, 0x0, 0x0, 0x880}, 0x810) 4.300244784s ago: executing program 0 (id=2962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.05475475s ago: executing program 0 (id=2965): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x400, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) 3.811127093s ago: executing program 0 (id=2966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0x1, 0xfffffffe, 0x48, @mcast2, @private1, 0x8036, 0x700, 0x0, 0x6}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x73, 0x73, 0xa, [@ptr={0xd, 0x0, 0x0, 0x2, 0x1}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}, @const={0xf, 0x0, 0x0, 0xa, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x60, 0x1}, @datasec={0x7, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x10}, {0x2, 0xf}], "7ccbe9"}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x30, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000440)=""/122, 0x96, 0x7a, 0x1, 0xfffffffc}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x9, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3e}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xfa, &(0x7f00000001c0)=""/250, 0x41100, 0xa0, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x5, 0x1756, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r8], &(0x7f0000000840)=[{0x1, 0x2, 0x10, 0x6}, {0x3, 0x4, 0xf, 0x7}, {0x1, 0x1, 0x7, 0x9}, {0x5, 0x4, 0xd, 0x1}, {0x5, 0x1, 0x3}, {0x3, 0x5, 0x0, 0x6}], 0x10, 0x8}, 0x94) 2.543131803s ago: executing program 2 (id=2977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x4001) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.495962766s ago: executing program 1 (id=2978): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x240089d5) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0xc010) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x75, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x25, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005d697f2bc74a8cb9c75b818a36d146db091951c5bbc243c463682fcff12ee4bd1b5f0a8318428c4d66893aa02436e05e6612aa8270cf5047d452dc04bc034cd1275129265c81e5001b0433debc501447495417055fde606dcf710cac6d75e83afae97f5b8eb12fb83f836e932881226ef22f42a6f809c761d10831ea1c0dbbff4cf9bce946d883d198710f7c6b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000002c0)={r7, 0x7}, 0x8) getsockname$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1ff, @private1, 0x200}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000005c0)="f98970e7beb70407813feaecc3bcabb9f139be6d4e62b69a564563337cfa50617f0d6d032c3bd0f0c4b1df9301a0f246d3c3facc95befb8a3c967e90e1bf8f86fb71777237e3457917741899fbd5f2700e0d639b6183ae07d0354ddefbd20c57294cd60a3e90da0e3184b0cfc60e48", 0x6f}], 0x1, &(0x7f00000007c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x1c000000}}], 0x18}}, {{&(0x7f0000000800)={0xa, 0x4e20, 0x1e0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000840)="a8b891890faadbb6f400a03ba6fd4306fa63d6d13a82e673910ac2b7655fa9e607fb903610e82f21ec7def92708ed19886fe83e6bb1329850644f15dda5bd47bcf0db1532d7cd785cc5b4f491291e97283096a6c08f7427c9014bd131a3c99ddfef33686854764fe0d8adec7dbec96fb149b58cb141983d974856c07f019e8a479c3b2d7ce9a4c45e727706e57d303e1593b320ca140324600", 0x99}, {&(0x7f00000009c0)="bf93fe34e61f9e2147925ffc06c23eb7ef109ee6a153f40bb784688b64605cef3604924ef1316b8ad9110c4b2e53debbac838bd2e7d8985c39d720499cb47429e19848b9344bb6ecc79f44aa2b323676aca63306709773c317c6c27dd9809368716a670bed3a175ade7fb7d7243950ae4d8a8c56fdce21cb96e5f8a183a7acfa39af0eaac8cdb37f77a7d60df70cfbf47ae9396fd05c091ea1ae8b8cb43740", 0x9f}], 0x2}}], 0x2, 0x10) r8 = accept4(r2, 0x0, 0x0, 0x80000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendto$packet(r8, &(0x7f00000000c0)="f80b0d51cb48ffc23f57a18d73ad3aa080132d4897850f9fc26b8502de92547cfbaa7aa42fd54ce2320dd11b842d48e039ae43817a8a4e00bf3bdd8684a37fee7a3f35aaf625cb62086e3f872d8d2c947dfe7038a59171c4", 0x58, 0x18, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000000)=0x3, 0x4) 2.248306205s ago: executing program 2 (id=2980): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2b, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x1407, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8040) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={r5, 0x58, &(0x7f0000000c00)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x4, 0x7e24, 0x48, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x200, 0xc4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x6, 0xfffffff8, {{0x10, 0x4, 0x2, 0x24, 0x40, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xfb, [@local]}, @timestamp={0x44, 0x10, 0x36, 0x0, 0x1, [0x5, 0x5, 0x40]}, @end, @lsrr={0x83, 0x13, 0x9b, [@local, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @private=0xa010101]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="ab0430552e81dc786675b059453fd1534c04fc15a24f4dffe6445becde9ee1df612b6d1cca13b820df025e63ac52f95c8160b5231c49036defc560bacc2d6c3c0438b3824556db1c57078ea4dd28a27d5d69a43e6d8469ddef40477bb04b69917d4ccf69bb74dc536c55db6c68a376ca89c6d48c3797132544ccc2f09444e95563931ee1c84a8091fb6594a4ec526abe039a394509a7222d6b98c6503f8f80ce21cc0d44ac80f1c72eeee82908719f52d0ed4ce25339a0335e7fac1ec291bf02b8cd4ef52bc0d39432771bb7f899fe8d6fa7b0da4488ece66cf0e2e9ce59762f771d098750bc01c12527aebe2287dca58f"}], 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r4, @multicast1, @broadcast}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@cipso={0x86, 0x0, 0x3, [{0x7}, {0x6, 0x0, "2db760"}, {0x1, 0x0, "0b54352fc3d2d81aad4c"}, {0x1, 0x0, "84b6b729663e74bd2f9a2051e97da9"}, {0x6, 0x0, "822add6c8deccd95100126ea60"}, {0x0, 0x0, "e95dfb"}, {0x5, 0x0, "eb43b0edd84ed764bb"}]}, @timestamp_addr={0x44, 0x0, 0xb7, 0x1, 0x4, [{@private=0xa010101, 0xad00000}, {@multicast1}, {@loopback, 0xc5}]}, @cipso={0x86, 0x0, 0xffffffffffffffff, [{0x0, 0x0, "e4353abc4d"}, {0x0, 0x0, "0d4218537960a35bd0a3be24"}]}, @noop, @noop]}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r7, @private=0xa010101, @multicast1}}}]}}, {{&(0x7f0000000780)={0x2, 0x4e21, @loopback}, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)="8e0b50a89bc89a54e89817dab7ce6319825c95ae7d9a202c1132c59c5f200cd05780a00d8dc660bafc665edd80690d9c7bd7e4a902790b71f3"}, {&(0x7f0000000800)="174c34ec2448d7e31074a1e719821b63c765d4fb33d44adf2122f66112517a9a86390d34623f5eefa4b28b5595b53318cadef8952304b8238bc8b4e644e9c9c9215fa44beba5f5c3b4a70c0ba535ef36d5a9980fab48904d0685ca4c00a258527111fdcb53de1aec7731e5def37fe94c15e518fc094fb7dbf3db2b5fc33f588cffed6d9e28109b6ed5600cff6136f189c688c86fd72ab0b30b117a7dc6e3a4"}, {&(0x7f00000008c0)="85fdb400e07c42f2de39db1d246b984b371b7e72a06344f8feda87e889e716c990740daa7f502592618318b4deaecf31691ba9df853b78a44c7e892254648ff85937a48f9eae01f6fbc387e1d683c19c139b47c44a850bf5a01d802c892e0d51bb41f0933210f6215d4de2f380d700d0e9780edefb7676f3bce62f07ed0774a747fd3262a5c63dbc74266ee162a47b96bdf9a2f8b16d57c5b06544ca85c2e1de6dea0cdd24475fa3455696c6f78ead51822bfda707ab4114e4e9966ce40cd8aab5f8af8ae879c9f050eb1f1527ec9182c67726e4832d99ce35c37978c0"}], 0x0, &(0x7f0000000a00)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r7, @rand_addr=0x64010102, @broadcast}}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x9}}, @ip_ttl={{0x0, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x60b}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r4, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r6, @broadcast, @local}}}]}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.732093098s ago: executing program 4 (id=2984): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@default, @default, @bcast, 0x67, 0x33f, 0x20, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000000000000000000000000080000000003000031b05dc9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5a7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @multicast2, 0x0}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000c6000000c600000004000000010000000000000b020000000d00000000090000000000000100000000000007000000000000000003f27e0d000000000b0000000300000002000000030000000a00000005000000010000000000000a030000000a0000000700000f02000000e7ff01000600b6000000010000000f00000005000000040000000b00000007000000030000000500000032050000030000006c055119ff0f00000400000032e70b520d89fa64a923bee1146906000000b399050000000000000e04000000020000000000002e4200"/238], &(0x7f00000004c0)=""/114, 0xe4, 0x72, 0x1, 0x7, 0x10000}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_pressure(r10, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r11, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000004000000030000000506000009830100d98e46dd2bd530acdd014b61958ee90f47c191a4416b444d2e13250e579f26608b734982dccd61b9c600c0317cab0cb781fd449422431101873d0826a02c12cc207becc9a1bcbf3c5069cb0b7e05865f30121c3329f53a09eba76773155ef2d8e25b21eacb07000000000000", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0300000000000000020000000600000000000000", @ANYRES32=r9, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.683121964s ago: executing program 3 (id=2985): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6da, @mcast2, 0x9}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e21, 0xa2, 0x4e22, 0xfff8, 0xa, 0x0, 0x80, 0x0, 0x0, r1}, {0x0, 0xd, 0x100, 0x95, 0x6, 0x2, 0x6, 0x4}, {0x7, 0x15, 0x100, 0x40f}, 0xffff8b83, 0x6e6bb2}, {{@in6=@empty, 0x4d3, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x34ff, 0x2, 0x0, 0x2, 0x2, 0x2, 0x1}}, 0xe8) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'geneve0\x00', &(0x7f0000000240)=@ethtool_wolinfo={0x6, 0xffffffff, 0x8, "e2c485c27cea"}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x303}, "6cf14747ca64d23d", "b76d4e443e601d9e6a5eaa032470a453", "695aba42", "8062c862370cc36b"}, 0x28) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x158, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6e25}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x20044080) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000007c0)={{r0, &(0x7f0000000680)='-\x00', 0x80002, &(0x7f00000006c0)={@_ha_fsid={[0x1, 0x9d1]}, {0xe, 0x1, 0x400, 0x80000001}}, 0x2, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)}, {[0x2a3b, 0x2, 0xc0000000, 0x6bf8]}, 0x1, 0x13, &(0x7f0000000780)=""/19}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@newlinkprop={0x210, 0x6c, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8000, 0x20}, [@IFLA_TXQLEN={0x8, 0xd, 0x101}, @IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r7}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r8}, @IFLA_GTP_FD0={0x8}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r9}, @IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010101}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r10}]}}}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_VFINFO_LIST={0x16c, 0x16, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xb84, 0x8, 0x8100}}, {0x14, 0x1, {0x7b, 0x519, 0x80, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x101, 0x3}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80, 0xff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x8000000000000001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0xffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x9, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x8, 0x7}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3aef, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x336d, 0xfffffff9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4f79, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x4, 0xfffff000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x73, 0xe5e, 0x55c}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffff801, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x8}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe, 0x839, 0x0, 0x88a8}}]}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xf2e6}, @IFLA_MASTER={0x8}]}, 0x210}, 0x1, 0x0, 0x0, 0x40080}, 0x20040011) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000b80)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8008}, 0x4000885) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r7) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r13, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x18, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8097}, 0x880) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r7) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r14, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r13, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x6) bind$inet6(r9, &(0x7f0000000fc0)={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x2502, 0x0) 1.603993982s ago: executing program 3 (id=2986): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000380)={&(0x7f0000000040)=0x9, 0x6, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000340)}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.47556998s ago: executing program 1 (id=2987): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000240)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x160, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0xffffff00, 'bond_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x1, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002004e20ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000005014cbc349fbcbb16a3f144993c090f0eb"], 0x80}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010101, @remote}, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r9, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106"], 0x40}}, 0x0) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83", 0xb, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x4, 0x6, @local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="27eb85b699e41f0d76590fc6be94dd857cde6f41ef50af5238b777555eee743e7fd012677c7ff7d8bf41614ba3148ce14df4e1dd5533bccf5a6a13bfff4c951990a74b07ab0d662b96d9a2d3fe48f76ddbaeeacc44d9134c3141e057fabaa0dbf5b1977cbddc94798d5818c1f6eea6d4d9ae6da1f0e93c9c7fbef3f4f6", 0x7d, 0x4000000, &(0x7f0000000380)={0x11, 0x9, r9, 0x1, 0x2, 0x6, @random="7f65cad45975"}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r11, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01137601cc0800000000000000942e000000", @ANYRES32=r2, @ANYBLOB="1c005e80080007005f0400000800060011a11100080005005c000000"], 0x38}}, 0x8000) 1.41273208s ago: executing program 4 (id=2988): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r2 = socket(0x1e, 0x6, 0x6) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x2000}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r3, 0x0, 0x33, 0x0, &(0x7f0000000080)) socketpair(0x27, 0x1, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x2f, 0x87, 0x0, 0x4, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x20, 0x8, 0x1, 0x4000000}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1, 0x6e, r5}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0xda7, 0x5}, {0x7, 0x7}]}}) 1.351368897s ago: executing program 3 (id=2989): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x110, r0, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c) (rerun: 32) 1.281417441s ago: executing program 2 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r4, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8000}, 0x4) 1.107055693s ago: executing program 3 (id=2991): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendto(r0, &(0x7f0000000080)="2dbee06a9c096f6931b21f74ba2db8ea26aebee6084fd6ad083507c8b9bfab80c36ffb7ce15dd674d8e421", 0x2b, 0x804, &(0x7f0000000140)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast, @default]}, 0x80) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) 1.018988308s ago: executing program 4 (id=2992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) shutdown(r0, 0x1) (async) socketpair(0xf, 0x3, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x80, 0x30, 0x2, 0x4}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000180)=0x8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002b80)=[0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000002bc0), 0x0, 0x10, &(0x7f0000002c00), &(0x7f0000002c40), 0x8, 0x70, 0x8, 0x8, &(0x7f0000002c80)}}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0xe, @rand_addr=' \x01\x00', 0x85b}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x72693a5, @local, 0x3}, 0x1c, &(0x7f0000002ac0), 0x0, &(0x7f0000000480)=[@rthdrdstopts={{0xd0, 0x29, 0x37, {0x5c, 0x17, '\x00', [@ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0x10, [0x9, 0x2, 0x8, 0xfffffffffffffffe, 0x1, 0x80]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x3, [0x1, 0x9]}}, @ra={0x5, 0x2, 0x8}, @jumbo, @calipso={0x7, 0x48, {0x0, 0x10, 0x3, 0x7, [0x0, 0x7, 0x8, 0xffffffffffffff7c, 0x2, 0x1, 0x0, 0x0]}}, @jumbo={0xc2, 0x4, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6e5}}], 0x110}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8005c) 924.891582ms ago: executing program 2 (id=2993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000900000000000000000001000000800000003535b3d215ee0169395fe74ff92d3dee2e33f2dfe957fd7f53d20507bc7eb0c9aaac708167be57a013eeb1b9b0dd3bcc1f9388da44074da63b3572d7003975ee5fa265588023282c3d3b0000e9c6622529072fc355a8905decfd5005b81fe4a05e522a5f499c568f3415a6e524645b3612ce23970ffafcbdc3fc031029a8c2302a4a858350e6af5a12667fcff7480825077bbea070eb906600e9d1398273da03c6a1"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x9, 0x8, 0x70, @local, @mcast1, 0x20, 0x10, 0x7fff, 0x4}}) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000003800)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}, {{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x0) getsockopt(r2, 0xffff, 0x3, &(0x7f0000000000)=""/60, &(0x7f0000000800)=0x3c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800f16cdf7c7d5f9130510000002df54f4fddd600852000000400020095000000ebff00000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x2, &(0x7f0000000080)=""/2, 0x41000, 0x2, '\x00', r1, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xa, 0x5, 0x7ff}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r0, r0, r0, r0, r5, r0], &(0x7f00000006c0)=[{0x2, 0x1, 0x5, 0x1}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0x5}, 0x94) 840.165554ms ago: executing program 1 (id=2994): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) (async) 807.867508ms ago: executing program 4 (id=2995): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d1f3c7f5a44a2c7f9fffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32000000"], 0x98}}, 0x4048010) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d1f3c7f5a44a2c7f9fffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32000000"], 0x98}}, 0x4048010) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000060000000000000000000003000000000300000003000000810000000c0000000000000a0100000043ffffff0000000c0300000003000000000000110500000008000000000000000300000d000000000b000000010000000a000000030000000d000000000000000f0000000000000c05000000020000000000000a04000000002e5f5f5f002b21e5ee3c093fdb452f92af743f14471bff4f3b5d11f3bd112159d58b579c0c27e0c258024908f24f7f11e11c78982d7ad1e589704833503420b80d987ec9ff0edf9d24d40bbe"], &(0x7f0000000400)=""/220, 0x9a, 0xdc, 0x0, 0x4}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x33e, 0x6, 0x2, 0x90e0, 0x1, 0x136, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x33e, 0x6, 0x2, 0x90e0, 0x1, 0x136, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x3, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0xc, 0xa, 0x0, 0x20}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x0, 0x62, &(0x7f0000000200)=""/98, 0x40f00, 0x26, '\x00', r2, @fallback=0x30, r3, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xb, 0x10, 0x81}, 0x10, r5, 0xffffffffffffffff, 0x7, &(0x7f0000000140), &(0x7f0000000780)=[{0x3, 0x3, 0xe, 0x8}, {0x3, 0x3, 0xc, 0x1}, {0x1, 0x4, 0x6, 0x4}, {0x0, 0x2, 0xe, 0x2}, {0x1, 0x2, 0x8, 0xc}, {0x5, 0x4, 0x8, 0xb}, {0x4, 0x2, 0x6, 0x1}], 0x10, 0x10001}, 0x94) 654.623395ms ago: executing program 2 (id=2996): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$inet6(0xa, 0x3, 0xff) sendto(r1, 0x0, 0x30, 0x4000800, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) close(r3) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x228, 0x178, 0x178, 0x228, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @loopback, 0xff000000, 0xffffff00, 'vlan0\x00', 'vxcan1\x00', {}, {0xff}, 0x0, 0x0, 0x13}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x81}], 0x2, 0x1}}, @common=@unspec=@connbytes={{0x38}, {[{0x7bb}, {0x7}], 0x2, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x80000001, 0x8363, 'syz1\x00', 'syz1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x320) (async) getuid() 653.990583ms ago: executing program 3 (id=2997): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01"], 0x30) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) sendto$inet(r2, &(0x7f0000000000)="e697f53ef09a08773d97a42f35a4df56f5316b9097d45403daadae5faec0af17c18a04a68540c7c0d07179b3b1a21a8ec3695f15994c07da80c9eab41cbe883a5949d1d61f794ba9e4d1e7aad908a99c9dc3790d0b4e628e00ab7a4b16a4a2a312aa16dfd8cf46d0f6186a2249038fe0bafe35be5b847f4a20c5529229b39a0227c1853ad62f260595ce5658d1dcbabd42fd224c", 0x94, 0x4000, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x4e, 0x0, 0x0) 462.150615ms ago: executing program 1 (id=2998): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 448.103662ms ago: executing program 4 (id=2999): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x30b, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000ffdb4f47a09208a0fdffffff0700000008002c000a0000000800320004000000050038000000000005002d00010000000800310007000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4010) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xcfa}, {0xc, 0x90, 0x4}}]}, 0xc8}}, 0x40d4) (async) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000040)="00b1dffa41dc0fd823cee8e0705ee831fd7d66f76d6a9ced715f5dd43bee84988be15f3ec2d5152aa3d6592eb3a948124864e059582d68c0c6ed573c5f") (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x13, 0x2}, @TCA_FQ_FLOW_PLIMIT]}}]}, 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x288, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x6, 0x3, 0x1, 0x5, 0x5, 0x16, 0xc]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x4}, {0x7}, {0x6, 0x8}, {}, {0x3, 0x7}, {0x4, 0xa}, {0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x7, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x6b, 0x5, 0x1, 0x4, 0x29, 0x30, 0x6c, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x2, 0xf, 0x4, 0x7, 0x7, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x0, 0x4c, 0x0, 0x5154, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x9, 0x7ff, 0x5, 0x6, 0x1, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0xc, 0x6c, 0x30, 0x6, 0x5, 0x12, 0x34, 0xc, 0x6, 0x60, 0x16, 0x30, 0x0, 0xb, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc3, 0x8, 0x7, 0xfffa, 0xc, 0x5, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x81, 0x7, 0xfff7, 0x8, 0xa21, 0x6]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x7f, 0x16d, 0x6, 0x6, 0x4, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x3}, {0x5, 0x4}, {}, {0x1, 0x9}, {0x2, 0x8}, {0x1}, {0x4, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x2, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x5}, {0x1, 0x3}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x7, 0xfffb, 0x401, 0x7f, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0xa}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x2}, {0x5, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x3, 0x6}, {}, {0x4, 0x7}, {0x7, 0x9}, {0x5, 0x8}, {0x6}, {0x4, 0x7}, {0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x6}, {0x2}, {0x3, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x5}, {0x3}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0xfff, 0x600, 0xfffd, 0xfff, 0x5, 0x2]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x1, 0x81, 0x0, 0x1, 0x5, 0xc91]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7, 0x0, 0x1, 0x4, 0x8, 0x2, 0x7]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x200, 0x5, 0x8, 0x200, 0x7, 0x2, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x52, 0x5, 0xc56, 0x7, 0xfffd, 0xff, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x24, 0x60, 0x24, 0x1, 0x24, 0xf, 0x3, 0x3, 0x48, 0x1b, 0x36, 0x2, 0x4, 0x3, 0x2, 0x12, 0x12, 0x16, 0x9c, 0x18, 0x18, 0x16, 0x6, 0xc, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x80, 0x5, 0x7a6, 0x1, 0x81, 0x3, 0xfffa]}}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x8011}, 0x1000) (async) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) (async) bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r10 = socket(0x2d, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) (async) write(r9, &(0x7f00000002c0)="3bf6280499a7f6d7b65b0b0734c5f4076496d072321aba405ab0d8efc89e1fadf1c15dfc212772084022d5c6020b18fa941faaa5475ae1f01b7effdb1c63352a7e6c3e1659f2cc754cf5cc446a", 0x4d) (async) bind$xdp(r10, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r11, 0x0, 0x0) 335.27328ms ago: executing program 2 (id=3000): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', r2, 0x10, 0x1, 0x3, 0x80000001, {{0x8, 0x4, 0x0, 0xb, 0x20, 0x68, 0x0, 0x5, 0x0, 0x0, @remote, @local, {[@end, @timestamp={0x44, 0x8, 0x5c, 0x0, 0x0, [0x1]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) sendto$packet(r0, &(0x7f00000001c0)="7dbebb79cb97b5916ed29ed363bf253762fe14cfeacd9cd768d998f3ab1fc3f74127b90e5a705ecbb669e062ca800d", 0x2f, 0x44088, &(0x7f0000000200)={0x11, 0x7, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 313.790221ms ago: executing program 3 (id=3001): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009500)=@newchain={0x314c, 0x64, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0x4, 0xa}, {0x5, 0xffe0}}, [@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xb2ec, 0x4, 0x5}, {0x6, 0x9a, 0x74f}, 0x88, 0x7f, 0x8}}]}}, @f_tcindex={{0xc}, {0xcd4, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_POLICE={0xca0, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0xffffffff, 0xd3, 0x400, 0xffff, 0x200, 0x800, 0x4, 0x100, 0x10, 0x0, 0xb85, 0x800, 0x1, 0x7fffffff, 0x47, 0xfffffffb, 0x6, 0x8, 0x7, 0x2, 0x2, 0x2, 0x0, 0x5, 0x8000, 0x3, 0x8001, 0x6, 0x9, 0x0, 0x9, 0x10001, 0x3, 0x5, 0x5, 0xfff, 0x0, 0x400, 0x1c6, 0x1, 0x5a3d, 0x3, 0x401, 0x10000, 0x40, 0x8, 0x2, 0x100, 0x3, 0x801e, 0x0, 0x8, 0xffff8000, 0x823, 0xeeb, 0x3, 0x9, 0x44a0, 0x8, 0x81, 0x3, 0x1, 0x3, 0x6, 0x401, 0xe04a, 0x1, 0x7f, 0x7ff, 0x8, 0x1, 0x100, 0x9, 0x5d7, 0x78c4, 0x0, 0x36d5, 0x3, 0x9, 0x2b5, 0x9, 0xff, 0x7, 0xffff, 0x8, 0x401, 0x5, 0x8, 0x3, 0x2, 0x54f, 0x3, 0x1, 0x2, 0x2, 0x4, 0x8a, 0x5, 0x2ec4, 0x0, 0x6, 0x3ad97c04, 0x8, 0xfffffe01, 0x16b, 0x1, 0x0, 0x0, 0x4, 0x1, 0x7, 0x0, 0x7, 0x3, 0x2, 0xc, 0x10001, 0xfff, 0x80000000, 0x7fffffff, 0x8, 0x9, 0x3ff, 0x5, 0xc0, 0x2, 0x9, 0xfffff33a, 0xfff, 0xc, 0x7, 0x80000000, 0xff, 0x6, 0x0, 0x5, 0x1, 0x8, 0x1f, 0xa21d, 0x200, 0x1, 0x6, 0x1, 0xe, 0x7, 0xca8, 0x3, 0x1, 0x0, 0x6, 0x8, 0x1000, 0x2, 0x81, 0x5, 0xffffffff, 0x3, 0x1e21, 0x9, 0x7ff, 0x2, 0x77, 0x0, 0x81, 0xd, 0x6, 0x0, 0x40000, 0x903, 0x1, 0x7fff, 0x0, 0x8, 0x9, 0x3, 0xdf, 0xfffffff8, 0x7, 0x1, 0x2, 0x0, 0x200, 0x6118, 0x9, 0x10000, 0x5, 0xa, 0x4, 0x4, 0x2, 0x8000, 0x9cc4, 0x1, 0x8, 0x401, 0x100, 0x1, 0x0, 0x96a, 0x7ff, 0x8000, 0x8001, 0x6, 0x2, 0x6, 0x3, 0x3, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x97a, 0xe69b, 0xfffffc00, 0x2, 0x6, 0x2, 0x3, 0x6, 0x7, 0x10000, 0x3ff, 0x3ff, 0xc64, 0x5, 0x2, 0x400, 0xfffffe00, 0x8, 0x40, 0x4, 0xfd, 0x4, 0x15, 0x8, 0x3, 0x5, 0x5, 0x7fffffff, 0x38000, 0x8, 0x39, 0xd3, 0x93f, 0xffffff55, 0x7fff, 0x1000, 0x9, 0x4, 0x6a, 0x5, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80, 0x8001, 0x7a, 0x7f, 0x1, 0x684d, 0xd, 0x9, 0x8, 0x8, 0x8, 0xeb4c, 0xfffffffa, 0x10000, 0x7, 0xdcc6, 0xffffffff, 0x1418, 0x4, 0xb, 0x4, 0x7, 0x114, 0x9, 0x6, 0x8, 0x7, 0x4, 0xc4e, 0x9, 0x80000001, 0x0, 0x0, 0x2, 0x4a, 0x4, 0xfffffffc, 0x881, 0x9, 0x6, 0x9, 0x0, 0x9, 0x1, 0x1, 0x616, 0x7fff, 0x5, 0x945e, 0x5, 0x3, 0x8, 0x9, 0x5, 0x4, 0xcf50529e, 0x7ff, 0xb, 0x1, 0x8, 0x5, 0x1, 0x800, 0x5, 0xe82e, 0xc5, 0x0, 0xfb9e, 0x9099, 0x7, 0x0, 0x14d53fba, 0x8, 0x4, 0xfffffff2, 0x917, 0x800, 0x8, 0x5, 0x10, 0x0, 0x9, 0x0, 0x73b9, 0x1, 0x8, 0x114, 0x8, 0xff, 0x100, 0x18, 0x8de0, 0xfffffffe, 0x7, 0x9, 0x6, 0x1ff, 0x6, 0xfffffff5, 0x6, 0x1, 0x8, 0x1, 0xfa, 0x8, 0x8, 0x5, 0xffffffff, 0x8, 0x1, 0x2, 0x80, 0x8, 0x2, 0x1, 0x5, 0x2, 0xd, 0x8000, 0x7fffffff, 0x8000, 0x2, 0x5, 0x9, 0x0, 0xffffffff, 0x2, 0x40, 0x7, 0x5fd4, 0x6, 0x81, 0x2, 0x16ec, 0xca4a, 0x4, 0x9, 0xa, 0xb, 0xfffffff7, 0xc9, 0x80000001, 0x2, 0x7fffffff, 0xffff0001, 0xfff, 0x7b4c, 0x4, 0x7, 0x3, 0x6, 0x5, 0x7, 0x1, 0x5, 0x80, 0x48c42035, 0xe23d, 0x4, 0x81, 0x0, 0xdd1, 0xf, 0x1, 0x181, 0xffff, 0x400, 0x7f, 0xffffffff, 0xffff, 0x8fd, 0xf, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8000, 0xbb, 0x5, 0x2, 0x3, 0x0, 0x400, 0x7, 0x10000, 0x8, 0xe, 0xffffce7f, 0x2, 0x8001, 0x9, 0x5db7, 0x8, 0x6, 0x2, 0x2, 0x2000, 0x2e5, 0x6, 0xab5, 0x2, 0xfb, 0x21, 0x4, 0x2, 0x1, 0xfffff050, 0x5, 0x5, 0x7ff, 0x6f, 0x4376, 0x9, 0x7, 0xe0, 0x0, 0x628a, 0x9, 0xffff, 0xfffff82d, 0x1, 0x3, 0x4, 0x400, 0x1ff, 0xfffffeb2, 0x5057, 0x2, 0x8, 0xffffffff, 0x6, 0xc, 0x5, 0xfff, 0x200, 0x9, 0x7f, 0x8001, 0x9, 0x9, 0x5, 0x7000000, 0x2, 0x2, 0x21, 0x655, 0x6, 0xd01, 0x1, 0x4, 0x9, 0x8, 0x95, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x66, 0x2, 0x6, 0x6, 0x3, 0x2f, 0x400, 0x1000, 0x810, 0x6, 0x7, 0x808a, 0xfffffffe, 0x4, 0x2, 0x8, 0xaef, 0x4, 0x3, 0x2, 0xd, 0x2, 0x2, 0x5, 0x2, 0x8, 0x80, 0x1000, 0x0, 0x8000, 0x2, 0x8, 0x4, 0xfffffc26, 0x6, 0x101, 0x7, 0x5, 0x200, 0x3c, 0x1, 0x0, 0x7, 0x0, 0x7, 0x5, 0x8, 0x9, 0x6, 0xffffffff, 0x0, 0x3, 0x80000000, 0x2, 0x5, 0x5, 0x5, 0x3ff, 0x9eb, 0x1, 0x1000, 0x5, 0xf, 0x8, 0x14fd, 0x490f, 0x8, 0x3ff, 0xb08, 0xd60e, 0x5, 0x7, 0x10001, 0x9, 0x4, 0x3, 0x10001, 0x81, 0x8d, 0x0, 0xb27d, 0x0, 0x299b, 0x8, 0x5, 0x657, 0x10, 0x4, 0x3ff, 0xffff26cc, 0x1, 0x100, 0x11, 0x7, 0x9b, 0x5, 0x0, 0x7, 0x400, 0x9, 0xf8, 0x3, 0x6, 0x0, 0xffffe290, 0x9d4e, 0x9, 0xfffffffd, 0xa89, 0x6, 0x400, 0x1, 0x74ffc870, 0x6, 0x5, 0x9, 0x5, 0x80, 0xd2, 0x8, 0x200, 0x9, 0x9, 0xfffffffc, 0x2, 0x6, 0xcd, 0xd, 0x8000, 0x9, 0x2, 0x7, 0x800, 0x2, 0x2, 0x2, 0x8001, 0x4, 0x6, 0x3, 0xb1, 0x1e, 0x9, 0x0, 0x6, 0x8, 0x6, 0x7fffffff, 0x32a946ce, 0x4, 0x1, 0x1000, 0x8af7, 0x8, 0x40, 0x0, 0x4, 0x0, 0x2, 0x960, 0x1, 0xa, 0x2, 0x1, 0x7, 0xfffffff8, 0x3, 0x3, 0x6, 0x6, 0x3, 0x0, 0x9, 0x8, 0x8, 0x5, 0xfffffff8, 0x800, 0x800, 0x80, 0x4, 0x7, 0x1, 0x9, 0x101, 0x200, 0x4, 0x7fff, 0x5, 0x5, 0x3ee, 0x2, 0x2, 0x6, 0x0, 0x0, 0x7, 0x1, 0x4, 0x15ae, 0x8, 0x0, 0x1, 0x5, 0x10001, 0x3, 0x81, 0x2, 0x80000001, 0x3ff, 0x6, 0x0, 0x0, 0x1ff, 0x7f, 0x5, 0x7, 0x4, 0xfffffffa, 0x1, 0x9, 0x1, 0xff, 0xffffff27, 0x81, 0x0, 0x800, 0x5, 0x7, 0xb, 0x7ff, 0x5, 0xfffffc96, 0x80000000, 0xde, 0xffff, 0x200, 0x1, 0xfffffffb, 0x4, 0x6, 0x6, 0x61f9, 0x8, 0xb, 0x4, 0x9, 0x6, 0x3, 0xe, 0xd, 0x18000, 0x1, 0xce, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8, 0x2, 0x0, {0x7, 0x0, 0xffff, 0x6, 0x9, 0xffffff81}, {0x4, 0x2, 0xad, 0x97d0, 0x4, 0xffffff09}, 0x8, 0x10000, 0x46f1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x2, 0x9, 0x7, {0x3, 0x2, 0x3, 0x8, 0x200, 0x80000000}, {0x7, 0x0, 0x8, 0x7, 0x4, 0x80000001}, 0x7, 0x1, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3d9}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xd9eb}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf722}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xdd78}]}}, @f_rsvp6={{0xa}, {0x240c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x2, 0x7, 0xfffffff8, 0x5, 0x8, 0x40000000, 0xabed, 0xfffffffc, 0x40, 0x3ff, 0x2, 0x1, 0xdf1, 0xc, 0x9433, 0xb7, 0x4, 0x2, 0x518c, 0xe56f, 0x7, 0x5, 0x0, 0x5fd41908, 0xa5a0, 0x6, 0xffff, 0x6, 0xb, 0x81, 0xffffffff, 0x6, 0x200, 0xfffffffd, 0x126, 0xff, 0xd, 0x9, 0x7, 0x4, 0x10001, 0xfffff977, 0x80, 0x8, 0xffffffff, 0x1, 0x7, 0x1, 0x2, 0x3, 0x5, 0xfffff001, 0x4, 0xfff, 0x59e, 0xa5c, 0x6, 0x74, 0x9084, 0x3, 0x82ef, 0x6, 0x3, 0x81, 0xffffff81, 0x6, 0xfffffffd, 0x3, 0x4, 0x6, 0x0, 0x5000, 0x8, 0x3, 0x8001, 0xfffffffc, 0x7, 0xd6, 0x19b7, 0x2, 0xffff, 0x2, 0x8, 0x5ddf, 0xc, 0x7, 0x4, 0x78, 0x0, 0x3, 0xffff, 0x200, 0x29b, 0x8, 0x2, 0x0, 0x8, 0xba, 0x5, 0x8, 0x4, 0x46db, 0x0, 0x81, 0x2, 0x1, 0x1, 0x9b27, 0xffffff35, 0x4, 0x6, 0x6a8, 0x800, 0x8, 0x8000, 0x5, 0x9, 0x8, 0x101, 0x2, 0x3, 0x0, 0x6, 0x4, 0x2, 0x0, 0x40b, 0xb1ba, 0x4, 0x1, 0xc2, 0x10000, 0x4, 0x4, 0x81, 0x5, 0x6, 0x8, 0x40, 0x5, 0x6, 0x5, 0x9, 0x0, 0x6, 0xb2, 0x8, 0x8, 0x2, 0x5, 0x5, 0x3, 0x732, 0x6, 0x4, 0x600, 0x67d6, 0x3, 0x3, 0x8, 0x32, 0x0, 0x2, 0xc, 0x8000, 0x1, 0x5, 0x7060, 0x401, 0x9, 0x80000001, 0x234c, 0x4, 0x3, 0x100000, 0x80000001, 0x2, 0xfffffffe, 0x6, 0x0, 0x53, 0x9, 0x9, 0x3, 0x1, 0x6, 0x8, 0x80000000, 0x3ff, 0x3, 0x4, 0xb, 0x0, 0x19bf, 0x9, 0x3, 0x7f, 0xef3, 0x6, 0x3000, 0x0, 0x5, 0x749, 0xf73, 0x7, 0x10001, 0xfffffffb, 0x7, 0x4, 0x9, 0x1, 0x9, 0xfffffe00, 0x5, 0x7fffffff, 0x5, 0x101, 0x8, 0x6, 0xc, 0x4, 0x7a6, 0x5, 0x1, 0x7fff, 0xfffffffb, 0x5, 0x3, 0x3, 0xad, 0x4b4, 0xf, 0xffff8001, 0x4a, 0xcdd, 0x0, 0xf, 0x632e997, 0x6, 0xffffff4f, 0x3, 0x351b800, 0x5, 0x4, 0x9, 0x1, 0x3ff, 0x8, 0x7, 0x6, 0x10, 0x6, 0x3f, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x39e, 0xffffffffffffffff, 0x4, 0x78, 0x0, {0x2, 0x0, 0x1ff, 0x7ff, 0x80, 0x7}, {0x2, 0x2, 0x8, 0x7, 0x8, 0xffff8000}, 0x81, 0x3ec, 0x4}}]}, @TCA_RSVP_ACT={0x1f9c, 0x6, [@m_sample={0x180, 0x5, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x79}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x7, 0x1, 0x10000, 0x18e}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffff81}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e18, 0x1b, 0x0, 0x0, {{0xa}, {0x1dec, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xd0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1, 0x10, 0x1, 0x7, 0x52}, 0x8, 0x5, [{0x5, 0x6, 0x8, 0xa, 0x531cbc2, 0x3}]}, [{0x8, 0x70b0ecee, 0x7fffffff, 0x4, 0xc144, 0x4}, {0x0, 0x7, 0x2, 0xd, 0xb27, 0x1ff}, {0x3, 0x6, 0x3ff, 0x3, 0x2, 0x5}, {0x3, 0x5, 0xfffffe01, 0x8, 0xffffffff, 0x7ff}, {0x5e, 0xfffffffd, 0x400, 0x7, 0x26, 0xe6}, {0xf, 0x0, 0x80000000, 0x0, 0x4, 0x1}, {0x80, 0xb, 0xfffffffa, 0x7fffffff, 0x5, 0xfa}, {0x1, 0xed, 0x4532, 0x0, 0x101, 0x2}, {0xa, 0x8, 0x7b5, 0x7fffffff, 0x2, 0x8}, {0x1, 0x13, 0x7, 0x7, 0x5, 0x5}, {0x4, 0x6, 0xfffffff8, 0x8000, 0xff, 0xe1}, {0x1000, 0x7, 0x81, 0x2, 0x0, 0x5}, {0x80000000, 0x6, 0x4, 0x2, 0x9, 0x3}, {0x1, 0x10, 0x6, 0x0, 0x781}, {0x3, 0x9402d38a, 0x1, 0x7, 0x4}, {0xfffffffb, 0x9ff, 0x9, 0x1, 0xfffffff7, 0x6}, {0x8, 0xfa, 0x596fd32f, 0x5, 0x1, 0x8}, {0x2, 0x4, 0x5, 0x3, 0xfffffffa}, {0x129c, 0x896d, 0x4, 0x5, 0x2, 0x4}, {0x6, 0x9, 0x33d7, 0xffffffff, 0x0, 0x4}, {0x5, 0xd279, 0x6, 0x8000, 0x9, 0x400}, {0x9, 0x6, 0x4c5, 0x40, 0xc4, 0x2}, {0xfffff472, 0xff, 0x0, 0xcc, 0xa1d, 0xe52}, {0xfd60, 0xd0, 0x8000, 0x2, 0x5683, 0xffffffff}, {0x80, 0x6aba05be, 0x4, 0x1, 0xfffffffd, 0xb8a8}, {0x7, 0x5, 0x9, 0x7, 0xc, 0x5}, {0x0, 0x4, 0x6b0c89dd, 0x4, 0x5, 0x2}, {0x2, 0xfffffffa, 0xa8f, 0x4, 0xffffffff, 0x5}, {0x3, 0x0, 0x5, 0xae, 0x1, 0x8}, {0x6, 0x6, 0x101, 0x3, 0x1, 0x8}, {0x491, 0x1, 0x7, 0x6, 0x9}, {0x2, 0x1, 0x9, 0x6, 0x5, 0x10001}, {0x3ff, 0x0, 0x9, 0x7f, 0x0, 0x1}, {0x5d36ec66, 0x1000, 0x7fff, 0xfffffffa, 0x9, 0x2}, {0x5, 0x1, 0x1c, 0x9e, 0x3, 0x2}, {0x3b34000, 0x7, 0x858, 0xa, 0xb1, 0x9}, {0x6a, 0x7fff, 0x3, 0xfff, 0x8, 0x1}, {0x400, 0x9, 0x7ff, 0x59f, 0x5, 0x4}, {0x4, 0x9, 0x5, 0x9, 0x2, 0xf6e}, {0x10001, 0xa7a, 0xa76, 0x4, 0x6, 0x1}, {0x8, 0x8, 0x9, 0x5, 0x1, 0x4}, {0x7ff, 0xb1b6, 0x4, 0x876e, 0x7, 0x10000}, {0xfffffffe, 0x80000001, 0x9, 0xfffffffb, 0x79, 0x10001}, {0x10, 0x1, 0x3ff, 0x7000000, 0x5, 0x5}, {0x1000, 0x6, 0x1, 0x4, 0x7, 0x7}, {0x493, 0x1, 0x0, 0x0, 0x6, 0xd}, {0x81, 0x8, 0x4, 0x6, 0x3d71, 0x4}, {0x4, 0x3, 0xffffffff, 0x800, 0x81}, {0x10, 0x2, 0xffffffff, 0x0, 0xa1, 0x5}, {0x6d, 0x3, 0xfffffffa, 0x7f, 0x7, 0xfffffffa}, {0x4, 0x8b, 0x2, 0x400040, 0x0, 0x80000000}, {0x90, 0xf, 0x3, 0x9, 0x81, 0x1}, {0x4, 0x9, 0x59b5, 0x9, 0x771, 0x1}, {0x9a38, 0x8, 0x100, 0x80000001, 0xfffffff9, 0xd10}, {0x6, 0x81, 0x9, 0x8, 0x6, 0x43}, {0x647, 0x2, 0x5, 0xc, 0x10, 0xd}, {0xff, 0xc55, 0x7, 0x0, 0x7, 0x6}, {0x4, 0xfffffffb, 0x1, 0x7195, 0xc, 0x4}, {0xd96, 0xffffffe8, 0x9e9a, 0x3ff, 0xffffffff, 0x6}, {0x4, 0x6, 0x1, 0x8, 0xfffffff5, 0x65af6ea2}, {0x5, 0x6, 0x3, 0xcf, 0x1ff, 0x1}, {0xe0000000, 0x14bc, 0xffff, 0xe, 0x2, 0x64b}, {0x6, 0x3, 0x4, 0xa, 0x2}, {0x5, 0x9, 0xffffffff, 0xa90, 0x6, 0x6}, {0x2, 0xffffffff, 0x8, 0x1, 0x80000000, 0x2}, {0x1, 0x30000000, 0xdaf, 0x9, 0x9, 0xffff0001}, {0x0, 0x3, 0x7, 0x3, 0x8000, 0x5}, {0x3c8, 0xfffffffc, 0x6, 0x6, 0x0, 0x6}, {0x40, 0xd, 0x8, 0x9, 0x0, 0x100}, {0x6, 0x6, 0x81, 0x7, 0x1, 0x9}, {0xc, 0x9, 0xc65, 0x1, 0x3, 0x91}, {0x96, 0x4, 0x1, 0x4c, 0x9, 0x7}, {0x3, 0x7ff, 0x40, 0xe26, 0x8, 0x2}, {0x28c, 0x6, 0x7, 0xdc6, 0x1}, {0x9, 0x2, 0x5, 0xffff, 0x4293, 0x1c}, {0xfffffff7, 0x2, 0x2, 0x6, 0xb3, 0x7ff}, {0x2, 0x9, 0xfffffe01, 0x8, 0x0, 0x9d29}, {0x8, 0x0, 0x2, 0x100, 0x200, 0xfffffffd}, {0x5, 0x9, 0x10001, 0x4d, 0x5, 0x34e8}, {0x400, 0x8, 0x1, 0x9, 0x52b, 0x3}, {0x101, 0xd1, 0x6, 0x64a, 0x80000000, 0x8}, {0x7fff, 0x242, 0xa7aa, 0xd8f, 0x9, 0x9}, {0x6, 0x2, 0x100, 0x1, 0x7, 0x6}, {0x6, 0x1, 0x0, 0x3, 0x5, 0x1}, {0x2, 0x8f, 0x4429, 0xc, 0x10, 0x6}, {0x4, 0x4ff6, 0x3, 0x3, 0x5, 0xff}, {0x1, 0xfffffff8, 0x8001, 0x7fffffff, 0x2, 0x9}, {0x1a, 0x6, 0x6, 0x646, 0x9, 0x7}, {0x4, 0x9bfa, 0x80000000, 0xfffff673, 0x10000, 0x3}, {0x3, 0x200, 0x6, 0xffffffff, 0x0, 0x1}, {0x1, 0x40, 0x7, 0xffffffff, 0x7fffffff, 0x8}, {0x3ff, 0x9f7, 0x7, 0x2, 0x3, 0x3}, {0x5, 0x5, 0x6, 0x875, 0xb}, {0x7, 0xf1e, 0x101, 0x101, 0x80000001, 0x5}, {0x0, 0x1, 0x0, 0x35, 0x2, 0x4a}, {0x2, 0x0, 0xf2a, 0x9, 0x0, 0x400}, {0x6, 0xb0, 0xc, 0x685a, 0x3}, {0x1, 0x4, 0xffff8cb7, 0x6, 0x8, 0xe69}, {0x8, 0x5, 0x2, 0x3, 0x80000000, 0x3}, {0x2, 0x4, 0x6, 0x4, 0x9, 0x4}, {0x1, 0x8, 0x0, 0x5, 0x8, 0x8}, {0x1, 0xfffffff3, 0x2, 0x5, 0x1, 0x3}, {0x7f, 0xed96, 0x1, 0xffff, 0x9, 0x6}, {0x5, 0x80000001, 0x7, 0x7, 0x81, 0x7}, {0x2, 0x6, 0x8, 0x9, 0x1, 0x2}, {0xfffffffd, 0xbdb, 0x3, 0x7fff, 0x5510, 0xdc}, {0x5, 0x0, 0xfffffff4, 0x5, 0x2, 0x400}, {0xff, 0x7fffffff, 0x10, 0xf0, 0x7256bcd0, 0x5b07be69}, {0x7f, 0x7, 0x7, 0x7, 0xd399, 0x2}, {0x800, 0xfffffffc, 0x1ff, 0x14e, 0x7, 0x2}, {0x10001, 0xfffffff3, 0x2, 0x71, 0x80, 0x10}, {0x8, 0x8000, 0x3, 0x7, 0x6, 0x3}, {0x2, 0x7, 0x5, 0x3, 0x2, 0x5}, {0xd, 0x8001, 0xbb, 0x8, 0x3ff, 0x9}, {0x7, 0x76f, 0x6, 0x8, 0x8, 0x2}, {0x3, 0x3, 0x1, 0x4, 0x400, 0xdbcf}, {0x9, 0xe, 0x3, 0x9, 0x7, 0xfffffff8}, {0xfffffffb, 0x542ce2a5, 0x0, 0xe, 0x800, 0x1cae}, {0x28, 0xfffffff7, 0x1, 0x71, 0x0, 0x9}, {0x8, 0x1, 0x3, 0xb3ea, 0x7, 0x4c7}, {0x0, 0x3ff, 0x0, 0x76, 0xd, 0xfff}, {0x8, 0x7, 0x6, 0x3ff, 0x9, 0x613}, {0x1, 0x6, 0x80000000, 0x198a06e2, 0x1, 0xbeef}, {0x0, 0x4, 0x6, 0x2, 0x5, 0x9}, {0x8, 0x7, 0x5, 0xe29, 0x4, 0x5}, {0x7fffffff, 0xfffff800, 0x26, 0x10, 0x6, 0x7}, {0x9, 0x3, 0x7, 0x3, 0x1ff, 0x100}, {0x8000, 0x1, 0x6, 0x200, 0x0, 0x5}], [{0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x6}, {0x4}, {0x3}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0xb69211de98d92c0a}, {}, {0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0xfdf208e90f90cb8d}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}]}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x200, 0x1, 0x1, 0x7f, 0x63}, 0xf6, 0x5f, [{0x3, 0x10000, 0x4, 0x80000001, 0x77, 0xffffffff}, {0xff, 0x1ff, 0x8001, 0x1002c7cb, 0x10000, 0xfffff217}, {0x80, 0x7, 0x8, 0xfffffffd, 0x10001, 0x100}, {0x9, 0xf15b, 0x2, 0x5, 0x8, 0x6}, {0x4, 0x7, 0x400, 0xfff, 0x9, 0x8001}, {0x5, 0x40, 0x0, 0x60c, 0x5, 0x8}, {0x560, 0x8dc0, 0x1, 0x5, 0x2, 0x3}, {0x6, 0x9, 0x7f, 0x9, 0x8}]}, [{0x95, 0x8, 0x6, 0xc, 0x7fff, 0x8}, {0xfffffffa, 0x8, 0x5, 0x2, 0x9, 0x4}, {0x0, 0x8, 0x3, 0x2, 0x9, 0x2}, {0x2, 0xfff, 0xcb, 0x7, 0xfffffff7, 0x1}, {0x2, 0x3, 0x4, 0x1000, 0xa0, 0xd40}, {0x6a, 0x10000, 0x242, 0x4, 0xffffffff, 0x2}, {0x2, 0x1, 0x8001, 0x5, 0x1, 0xf}, {0xf, 0x6, 0x9, 0x800, 0xfffffffa, 0x1}, {0x6, 0x0, 0x9, 0x6, 0x7, 0x9}, {0x3, 0x3, 0x3, 0x6, 0xfff, 0x5}, {0x57df, 0x8, 0x8000, 0xfffff001, 0x0, 0x610}, {0x1ff, 0x7, 0xc1, 0xd3, 0x80, 0x200}, {0xa, 0xfffffff9, 0x1ff, 0x1, 0x0, 0x10}, {0x3, 0x1ff, 0x3, 0x7, 0x3a5c8187, 0x7fff}, {0x1, 0x1, 0x3, 0x1, 0x4, 0xfffffff1}, {0xd8, 0x800, 0x1, 0x4, 0x1, 0xf9a}, {0x7, 0x1, 0x4, 0x7fffffff, 0x4, 0x1ff}, {0x76db, 0x7, 0x2, 0x3, 0x80000000, 0x1f2}, {0x200, 0x2, 0xd094, 0x1, 0x7, 0xc4ec}, {0x1, 0xfffff92f, 0xc2, 0x1ff, 0x8, 0x3}, {0xb, 0xfffffff7, 0x8, 0x6, 0x5}, {0x7, 0x1f, 0xffffffff, 0x40, 0xa49, 0x3}, {0x3, 0x8, 0xd, 0x50ad0386, 0xfffffff8, 0xa696}, {0x0, 0x3, 0x9, 0x2, 0x7fffffff, 0xc824}, {0x2, 0x716f, 0x497, 0x7ff, 0x1, 0x3}, {0x2, 0xfffffffe, 0x80000000, 0x7, 0x5, 0x7fffffff}, {0x78c, 0x2, 0x9, 0x3, 0x6, 0xf}, {0x8, 0x800, 0xffff, 0xfc, 0x3, 0x7}, {0x6, 0x2, 0x6, 0x2, 0x9}, {0x6, 0x6, 0x80000000, 0x7, 0xcc, 0x9}, {0x326197bb, 0x0, 0x7fff, 0x322, 0x3ff, 0x5}, {0xfffffffe, 0x5, 0x2, 0x9, 0xffff, 0x401}, {0x6, 0x0, 0x5, 0xc93, 0x10000, 0x9}, {0xa, 0xfffffffb, 0x3, 0x5, 0x0, 0x1}, {0x10, 0x8, 0x7, 0x100, 0x6}, {0x4b, 0x900, 0x0, 0x3, 0x7, 0x10000}, {0x30000000, 0x5, 0x7, 0x9, 0x20a1, 0x6}, {0x0, 0x0, 0x2, 0x8a6, 0x5, 0xffffffff}, {0x6, 0x551c14d2, 0x3, 0x10000, 0x508, 0x7}, {0x1, 0xa7, 0x8, 0x9, 0x4, 0x7}, {0x80, 0x0, 0x8, 0x401, 0x7a6, 0x9e}, {0x4, 0x800, 0x0, 0x51, 0xe, 0x68}, {0x3, 0x54, 0x7f, 0x800, 0x80000001, 0x7}, {0x594167d5, 0x1, 0xb, 0x8, 0x9, 0xc5}, {0x0, 0x7fffffff, 0x0, 0x22, 0x0, 0x764}, {0x6, 0x7, 0x0, 0x7, 0x80000001, 0xb}, {0x8001, 0x8, 0x5, 0x4, 0x6, 0xe0000000}, {0x8, 0x9, 0x1, 0xe, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x5, 0x80000001, 0x5}, {0x6, 0x3078, 0x6, 0x8, 0x2, 0xd6}, {0x40, 0x43b7bec8, 0x80000000, 0xffffff39, 0x2}, {0xe, 0x9c6, 0xa71, 0x4}, {0x1, 0x4aac, 0x9, 0x2, 0x2, 0x8}, {0x3ff, 0x101, 0x10000, 0x1000, 0x3, 0x3}, {0x16c4, 0x2, 0x8, 0xe, 0x8, 0x1}, {0x0, 0x2, 0x3, 0x6, 0xffff, 0x80000001}, {0x9, 0x2, 0x0, 0x6, 0x5, 0x33b}, {0x2, 0x7, 0x8, 0x7, 0x6, 0x9}, {0x8, 0xe, 0x2, 0xff, 0x3}, {0x9, 0x2, 0x6, 0x6, 0x8a9, 0x4}, {0x15f7, 0x5, 0xffffffff, 0x3, 0x90ffe0cc, 0x6}, {0x3, 0x9, 0x7, 0x4, 0x6, 0x7}, {0x7, 0x8, 0xf1f, 0x3, 0x2}, {0x2, 0x3, 0x80000001, 0x8, 0x9, 0x1}, {0xade, 0x7, 0x6, 0x3b, 0xffffffff, 0x6}, {0x5, 0x1, 0x0, 0x80000000, 0x0, 0x8000}, {0x7, 0xfffffff8, 0x0, 0x10000, 0x3ff, 0x1000}, {0x9, 0x19692716, 0x3, 0xa00, 0x8, 0x4f34}, {0x9, 0x3, 0x5, 0x1, 0x800, 0x8000}, {0x4, 0xfff, 0xc01, 0x5b2, 0x8, 0x6}, {0x60000000, 0x10001, 0x5, 0x4, 0x3, 0x8000}, {0x0, 0xffffff2a, 0x0, 0x5, 0x8, 0x2}, {0xf, 0xa8d4, 0x8, 0x9, 0x7, 0x10000}, {0x8, 0x2, 0x6, 0x8000, 0x83b1, 0x1}, {0x40, 0xa, 0x3ff, 0xef, 0xc, 0x11}, {0x0, 0x3ff, 0x1, 0x10001, 0x8, 0x80}, {0x6c, 0x9, 0x10001, 0x7fff, 0xc9d, 0x3}, {0x2, 0x5, 0x7fff, 0x7, 0x0, 0x2}, {0x1, 0xffffffc9, 0x2, 0xfffffff7, 0x8, 0x6}, {0x7, 0xb047, 0x2, 0x7, 0x200, 0x3}, {0x3, 0x8, 0xf, 0x8, 0x7, 0x10}, {0x1, 0x1000, 0x5, 0x4, 0x6, 0xffffff23}, {0x5, 0x0, 0x0, 0x5, 0x1}, {0x814, 0x2, 0x4, 0x9, 0x2000, 0xb}, {0x8, 0x8, 0x5, 0x5, 0x22dd, 0x10}, {0x6, 0x4, 0x6, 0x1, 0x86, 0x8}, {0x7fff, 0x4, 0x7fff, 0x5, 0x984e, 0x9}, {0x1ff, 0x0, 0xd, 0x7, 0x1ff, 0x186d}, {0x4, 0x6, 0x5, 0x8, 0x3, 0x1c2}, {0x5, 0x2, 0x6, 0x1000, 0x7, 0x4cc}, {0x101, 0x4, 0x101, 0x4, 0x7, 0x800}, {0x2, 0x2, 0xffffffff, 0x8, 0x3, 0x6}, {0x5, 0x9, 0x200, 0x8, 0xbc0, 0x8000}, {0x8, 0x85c1, 0x4, 0x80000000, 0x4, 0x3}, {0x1ff, 0xfffffff7, 0x8, 0xffff, 0xb5, 0x6}, {0x0, 0x0, 0x5, 0xa, 0x10001, 0x40e3}, {0x40, 0x0, 0xfffffffc, 0x8, 0x8, 0xfffffff9}, {0x81, 0x1, 0x1, 0x8, 0x1, 0xfffffff8}, {0xe, 0x8, 0x8, 0xf01d, 0x1, 0x1}, {0x4b6cdee9, 0x10000, 0x101, 0x200, 0x6, 0x5}, {0x2, 0x9, 0x4, 0x4, 0x2}, {0x6, 0x8, 0x7fff, 0x80, 0xf, 0x140}, {0x400, 0x1, 0x717, 0xffffffff, 0x15, 0x1ff}, {0x6, 0xc0, 0x3, 0x6, 0x1, 0x5}, {0x8, 0x5, 0x7, 0xfffffc2c, 0x97, 0x4}, {0x8, 0x81, 0xfffffffc, 0x7544, 0x2, 0x6}, {0xb97, 0xf, 0x7f, 0x2, 0x6, 0x7}, {0x100, 0x2, 0x502, 0x3, 0x9, 0x3}, {0x57f, 0xff, 0x3, 0x579, 0x1, 0x5}, {0x4284, 0x4, 0x7, 0xfffffff0, 0x1000, 0x4}, {0x7, 0x10001, 0x800, 0x8, 0x4, 0x5}, {0x1ff, 0x100, 0x3, 0x5, 0x5, 0x3}, {0x5, 0x3ff, 0x3ff, 0xff2, 0x9, 0x1}, {0x1, 0x4, 0x7f, 0x40, 0x1, 0x2}, {0x1, 0xbc, 0x5, 0x100, 0x0, 0x2}, {0x4, 0x2ad, 0x1, 0xf, 0x9, 0x6}, {0xd, 0x0, 0x1, 0x7, 0xffffffff, 0xff}, {0x2, 0xfffffff7, 0x10001, 0xfff, 0x6, 0x2}, {0x7, 0x81, 0x8, 0x200, 0x7, 0xcb3}, {0x4, 0x0, 0xfffeffff, 0xa9, 0x9c44, 0x2}, {0x8, 0x7fff, 0x5, 0x5, 0x5, 0x54d1}, {0x0, 0x101, 0x1, 0x100, 0x4, 0x8}, {0x3, 0x6, 0x6, 0x4, 0x5, 0x4}, {0x0, 0x1000, 0x5, 0x3, 0x1, 0xb}, {0xff, 0x8001, 0x6, 0x80000001, 0x5, 0x6}, {0x1, 0x4, 0x6, 0x4, 0xc958, 0xfffffff9}, {0x7, 0x21, 0x7fff, 0x8, 0x6, 0x8001}, {0x5, 0x10000, 0x1, 0x1ff, 0x7, 0x8}], [{0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xb41e9784abfa9de1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x441a2383c079a7fb, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x5c42497e39683eb}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x314c}}, 0xc0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) getpeername(r5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000700000000000000020000130200000005000000000000000000000000020001000000000000000000000000002e00"], 0x0, 0x43}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3bcec7b9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 255.355049ms ago: executing program 1 (id=3002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) 24.200268ms ago: executing program 4 (id=3003): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x10000000}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x6c0}, 0x10}, 0x94) 0s ago: executing program 1 (id=3004): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) kernel console output (not intermixed with test programs): encryption failed: -22 [ 194.312270][T10106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.637791][ T8195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.666983][ T8195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.675273][ T7958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.756269][ T7958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.973537][T10170] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 194.984890][ T7958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.069425][T10170] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.078691][T10180] bond4: (slave syz_tun): Removing an active aggregator [ 195.088044][T10180] bond4: (slave syz_tun): Releasing backup interface [ 195.100940][T10180] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 195.184883][ T8197] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 195.315338][ T8195] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 195.376951][T10188] netlink: 'syz.0.1185': attribute type 10 has an invalid length. [ 195.470572][T10197] xt_NFQUEUE: number of total queues is 0 [ 195.611685][ T8197] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.648491][ T8197] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.670798][ T8197] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.692788][ T8197] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.919003][T10218] syzkaller1: entered promiscuous mode [ 195.927609][T10218] syzkaller1: entered allmulticast mode [ 196.348359][T10241] __nla_validate_parse: 17 callbacks suppressed [ 196.348378][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1203'. [ 196.382505][T10241] tipc: Invalid UDP bearer configuration [ 196.382561][T10241] tipc: Enabling of bearer rejected, failed to enable media [ 196.617639][T10253] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 196.628702][T10255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1206'. [ 196.641625][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 196.673434][T10253] : entered promiscuous mode [ 196.873286][T10269] netlink: 'syz.4.1213': attribute type 10 has an invalid length. [ 197.278067][T10283] netlink: 'syz.4.1218': attribute type 10 has an invalid length. [ 197.332284][T10283] bridge0: port 2(dummy0) entered disabled state [ 197.395277][T10283] dummy0: left allmulticast mode [ 197.412927][T10283] dummy0: left promiscuous mode [ 197.436814][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.450794][T10283] bridge0: port 2(dummy0) entered disabled state [ 197.461929][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.479061][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.494185][T10288] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 197.523425][T10283] team0: Port device dummy0 added [ 197.538573][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.569130][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.591535][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.852171][T10307] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 197.872029][T10312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 198.113116][T10325] Cannot find add_set index 2 as target [ 198.369881][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.489381][T10358] veth0: entered promiscuous mode [ 198.693606][T10358] veth0: left promiscuous mode [ 198.721200][T10365] netlink: 'syz.4.1240': attribute type 10 has an invalid length. [ 198.768804][T10371] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 198.798183][T10371] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 199.019232][T10385] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 199.102468][T10385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.111482][T10392] netlink: 'syz.4.1248': attribute type 11 has an invalid length. [ 199.135987][T10392] netlink: 'syz.4.1248': attribute type 11 has an invalid length. [ 200.158585][T10440] netlink: 'syz.2.1262': attribute type 9 has an invalid length. [ 200.635684][T10447] sch_fq: defrate 0 ignored. [ 200.682836][T10454] sit0: entered promiscuous mode [ 200.703545][T10454] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 201.003489][T10477] IPVS: Error connecting to the multicast addr [ 201.032818][T10477] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 201.602764][T10499] __nla_validate_parse: 18 callbacks suppressed [ 201.602786][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 201.728365][T10499] validate_nla: 1 callbacks suppressed [ 201.728385][T10499] netlink: 'syz.2.1274': attribute type 10 has an invalid length. [ 201.757592][T10503] IPVS: set_ctl: invalid protocol: 134 172.20.20.187:20003 [ 203.412590][T10574] openvswitch: netlink: Message has 592 unknown bytes. [ 203.443391][T10574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.593937][T10579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'. [ 203.710807][T10548] Cannot find add_set index 0 as target [ 203.973270][T10590] netlink: 'syz.2.1295': attribute type 1 has an invalid length. [ 204.005944][T10590] netlink: 'syz.2.1295': attribute type 1 has an invalid length. [ 204.196680][T10596] netlink: 'syz.0.1298': attribute type 10 has an invalid length. [ 204.425877][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1300'. [ 204.539616][T10606] syzkaller0: entered promiscuous mode [ 204.555698][T10606] syzkaller0: entered allmulticast mode [ 204.722341][T10609] bond2: entered allmulticast mode [ 204.731264][T10619] netlink: 'syz.4.1305': attribute type 21 has an invalid length. [ 204.769290][T10617] bridge4: entered promiscuous mode [ 204.775529][T10617] bridge4: entered allmulticast mode [ 204.789907][T10617] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 204.868285][T10623] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1307'. [ 204.905687][T10626] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 205.091145][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 205.183286][T10638] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 205.272757][T10634] bond4 (unregistering): Released all slaves [ 205.754200][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 205.870903][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 205.903626][T10673] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1318'. [ 206.002206][T10676] ip6gre2: entered promiscuous mode [ 206.026251][T10676] ip6gre2: entered allmulticast mode [ 206.088729][T10676] netlink: 'syz.0.1319': attribute type 2 has an invalid length. [ 206.374718][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.699113][T10710] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 206.728678][T10712] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1332'. [ 206.745984][T10715] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 206.767047][T10715] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 206.782943][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'. [ 206.799412][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 206.887035][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 206.927890][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 207.187098][T10741] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 207.244183][T10745] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 207.313527][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 207.540104][T10763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.685505][T10772] FAULT_INJECTION: forcing a failure. [ 207.685505][T10772] name failslab, interval 1, probability 0, space 0, times 1 [ 207.751103][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.3.1350 Not tainted syzkaller #0 PREEMPT(full) [ 207.751133][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.751147][T10772] Call Trace: [ 207.751155][T10772] [ 207.751165][T10772] dump_stack_lvl+0xe8/0x150 [ 207.751204][T10772] should_fail_ex+0x412/0x560 [ 207.751240][T10772] should_failslab+0xa8/0x100 [ 207.751266][T10772] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 207.751298][T10772] ? __alloc_skb+0x186/0x7d0 [ 207.751326][T10772] ? __alloc_skb+0x1d0/0x7d0 [ 207.751353][T10772] ? __local_bh_enable_ip+0xd0/0x130 [ 207.751387][T10772] __alloc_skb+0x1d0/0x7d0 [ 207.751421][T10772] netlink_sendmsg+0x5d4/0xb40 [ 207.751464][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.751499][T10772] ? aa_sock_msg_perm+0xf1/0x1b0 [ 207.751530][T10772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.751566][T10772] ____sys_sendmsg+0x972/0x9f0 [ 207.751598][T10772] ? __might_fault+0xaf/0x130 [ 207.751634][T10772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.751681][T10772] ? import_iovec+0x73/0xa0 [ 207.751713][T10772] ___sys_sendmsg+0x2a5/0x360 [ 207.751744][T10772] ? __lock_acquire+0x6b5/0x2cf0 [ 207.751776][T10772] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.751846][T10772] ? __fget_files+0x2a/0x420 [ 207.751872][T10772] ? __fget_files+0x3a0/0x420 [ 207.751911][T10772] __x64_sys_sendmsg+0x1bd/0x2a0 [ 207.751947][T10772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.751990][T10772] ? __pfx_ksys_write+0x10/0x10 [ 207.752031][T10772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.752054][T10772] do_syscall_64+0x15f/0xf80 [ 207.752079][T10772] ? trace_irq_disable+0x3b/0x140 [ 207.752102][T10772] ? clear_bhb_loop+0x40/0x90 [ 207.752129][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.752150][T10772] RIP: 0033:0x7f381819c819 [ 207.752170][T10772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.752188][T10772] RSP: 002b:00007f3819074028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.752212][T10772] RAX: ffffffffffffffda RBX: 00007f3818415fa0 RCX: 00007f381819c819 [ 207.752228][T10772] RDX: 0000000020004010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 207.752242][T10772] RBP: 00007f3819074090 R08: 0000000000000000 R09: 0000000000000000 [ 207.752255][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.752267][T10772] R13: 00007f3818416038 R14: 00007f3818415fa0 R15: 00007ffdd63f4bd8 [ 207.752301][T10772] [ 208.050388][T10780] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.060987][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1354'. [ 208.070551][T10780] netlink: 'syz.1.1354': attribute type 7 has an invalid length. [ 208.080345][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 208.303884][T10783] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 208.354227][T10783] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.375675][T10783] gretap2: entered promiscuous mode [ 208.395919][T10783] gretap2: entered allmulticast mode [ 208.570599][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 208.606244][T10798] xt_hashlimit: overflow, try lower: 3/0 [ 208.625551][T10802] wg1: entered promiscuous mode [ 208.630549][T10802] wg1: entered allmulticast mode [ 208.878555][T10823] FAULT_INJECTION: forcing a failure. [ 208.878555][T10823] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.924145][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.0.1366 Not tainted syzkaller #0 PREEMPT(full) [ 208.924174][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.924196][T10823] Call Trace: [ 208.924204][T10823] [ 208.924214][T10823] dump_stack_lvl+0xe8/0x150 [ 208.924251][T10823] should_fail_ex+0x412/0x560 [ 208.924287][T10823] _copy_from_iter+0x1d3/0x1670 [ 208.924329][T10823] ? rcu_is_watching+0x15/0xb0 [ 208.924374][T10823] ? __pfx__copy_from_iter+0x10/0x10 [ 208.924415][T10823] ? netlink_sendmsg+0x650/0xb40 [ 208.924445][T10823] ? skb_put+0x11b/0x210 [ 208.924480][T10823] netlink_sendmsg+0x6c0/0xb40 [ 208.924524][T10823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.924559][T10823] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.924589][T10823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.924623][T10823] ____sys_sendmsg+0x972/0x9f0 [ 208.924655][T10823] ? __might_fault+0xaf/0x130 [ 208.924690][T10823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.924733][T10823] ? import_iovec+0x73/0xa0 [ 208.924759][T10823] ___sys_sendmsg+0x2a5/0x360 [ 208.924791][T10823] ? __lock_acquire+0x6b5/0x2cf0 [ 208.924824][T10823] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.924895][T10823] ? __fget_files+0x2a/0x420 [ 208.924922][T10823] ? __fget_files+0x3a0/0x420 [ 208.924961][T10823] __x64_sys_sendmsg+0x1bd/0x2a0 [ 208.924998][T10823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.925042][T10823] ? __pfx_ksys_write+0x10/0x10 [ 208.925082][T10823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.925106][T10823] do_syscall_64+0x15f/0xf80 [ 208.925132][T10823] ? trace_irq_disable+0x3b/0x140 [ 208.925154][T10823] ? clear_bhb_loop+0x40/0x90 [ 208.925181][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.925202][T10823] RIP: 0033:0x7fcfb239c819 [ 208.925223][T10823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.925241][T10823] RSP: 002b:00007fcfb328c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.925264][T10823] RAX: ffffffffffffffda RBX: 00007fcfb2615fa0 RCX: 00007fcfb239c819 [ 208.925280][T10823] RDX: 0000000020004010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 208.925294][T10823] RBP: 00007fcfb328c090 R08: 0000000000000000 R09: 0000000000000000 [ 208.925307][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.925320][T10823] R13: 00007fcfb2616038 R14: 00007fcfb2615fa0 R15: 00007ffc8a279fa8 [ 208.925362][T10823] [ 209.230740][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 209.499172][T10834] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 209.550857][T10836] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 209.579101][T10836] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 210.022252][T10856] netlink: 'syz.3.1378': attribute type 20 has an invalid length. [ 210.051936][T10856] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.082078][T10856] xt_TCPMSS: Only works on TCP SYN packets [ 210.641186][T10889] netlink: 'syz.1.1388': attribute type 12 has an invalid length. [ 210.861890][T10899] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 210.975271][T10911] netlink: 'syz.1.1392': attribute type 7 has an invalid length. [ 211.006784][T10911] netlink: 'syz.1.1392': attribute type 8 has an invalid length. [ 211.389013][T10927] netlink: 'syz.4.1398': attribute type 11 has an invalid length. [ 211.655855][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 211.662839][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 211.674982][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.799652][T10925] syzkaller0: entered promiscuous mode [ 211.813050][T10925] syzkaller0: entered allmulticast mode [ 212.003981][T10939] sch_fq: defrate 0 ignored. [ 212.090478][T10944] xt_TCPMSS: Only works on TCP SYN packets [ 212.100739][T10945] validate_nla: 3 callbacks suppressed [ 212.100758][T10945] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 212.162423][T10945] netlink: 'syz.0.1402': attribute type 2 has an invalid length. [ 212.196624][T10945] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 212.227557][T10945] __nla_validate_parse: 7 callbacks suppressed [ 212.227577][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1402'. [ 212.523129][T10961] s5ÿÿø: renamed from vlan1 [ 212.611643][T10971] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1411'. [ 212.634122][T10971] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1411'. [ 212.674713][T10970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1409'. [ 212.778471][T10970] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1409'. [ 212.849100][T10970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1409'. [ 212.969107][T10982] netlink: 'syz.0.1412': attribute type 4 has an invalid length. [ 213.117360][T10991] veth0: entered promiscuous mode [ 213.139134][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 213.344471][T11007] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1418'. [ 213.394931][T10994] syzkaller0: entered allmulticast mode [ 213.493066][T11004] syzkaller0 (unregistering): left allmulticast mode [ 213.604303][T11003] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1419'. [ 214.104624][T11036] tipc: Enabling of bearer rejected, already enabled [ 214.113434][T11037] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1425'. [ 214.715260][T11061] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 214.910081][ T5889] syz0: Port: 1 Link DOWN [ 215.335381][T11097] xt_hashlimit: size too large, truncated to 1048576 [ 215.555507][T11108] syzkaller1: entered promiscuous mode [ 215.562776][T11108] syzkaller1: entered allmulticast mode [ 215.824205][T11118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.067546][T11131] veth0_to_team: entered allmulticast mode [ 216.127545][T11131] dvmrp0: entered allmulticast mode [ 216.147110][T11129] netlink: 'syz.1.1447': attribute type 4 has an invalid length. [ 216.323907][T11143] x_tables: unsorted underflow at hook 1 [ 216.552804][ T8190] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 216.575659][T11154] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 217.107247][T11183] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 217.408156][T11201] __nla_validate_parse: 5 callbacks suppressed [ 217.408176][T11201] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1464'. [ 217.435479][T11205] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1464'. [ 217.671467][T11218] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1468'. [ 217.779256][T11212] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1466'. [ 217.931211][T11228] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.824963][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 219.069486][T11278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1482'. [ 219.412835][T11291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.518675][T11300] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1484'. [ 219.561133][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 219.673449][T11309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1489'. [ 219.695231][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1489'. [ 220.421001][T11335] netlink: 'syz.1.1497': attribute type 39 has an invalid length. [ 221.353490][T11376] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 221.724702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.899054][T11403] bond5: option xmit_hash_policy: invalid value (64) [ 221.933584][T11403] bond5 (unregistering): Released all slaves [ 222.479569][T11430] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 222.508544][T11430] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 222.567391][T11444] __nla_validate_parse: 6 callbacks suppressed [ 222.567409][T11444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1520'. [ 222.585714][T11444] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1520'. [ 222.596038][T11444] netlink: 'syz.3.1520': attribute type 5 has an invalid length. [ 222.624671][T11444] netlink: 'syz.3.1520': attribute type 6 has an invalid length. [ 222.638128][T11444] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1520'. [ 222.672566][T11449] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1519'. [ 222.709803][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 222.752093][T11440] syzkaller0: entered promiscuous mode [ 222.774648][T11440] syzkaller0: entered allmulticast mode [ 222.817847][T11453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 222.880395][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 223.000892][T11463] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.029148][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 223.062218][T11460] dummy0: left allmulticast mode [ 223.080793][T11460] bridge0: port 3(dummy0) entered disabled state [ 223.120151][T11460] bridge_slave_1: left promiscuous mode [ 223.137209][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.181012][T11460] bridge_slave_0: left allmulticast mode [ 223.209672][T11460] bridge_slave_0: left promiscuous mode [ 223.220228][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.543780][T11480] veth7: entered promiscuous mode [ 223.557591][T11489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 223.568191][T11480] veth7: entered allmulticast mode [ 223.583140][T11472] syzkaller1: entered promiscuous mode [ 223.596221][T11472] syzkaller1: entered allmulticast mode [ 223.724783][T11494] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1535'. [ 224.047807][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 224.091930][T11512] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 224.588060][T11520] openvswitch: netlink: Flow key attr not present in new flow. [ 225.057222][T11548] sock: sock_timestamping_bind_phc: sock not bind to device [ 225.437819][T11574] netem: incorrect gi model size [ 225.455262][T11574] netem: change failed [ 225.526178][T11581] syzkaller1: entered promiscuous mode [ 225.555054][T11581] syzkaller1: entered allmulticast mode [ 226.063986][T11605] netlink: 'syz.0.1564': attribute type 10 has an invalid length. [ 226.467846][T11615] syzkaller1: entered promiscuous mode [ 226.475410][T11615] syzkaller1: entered allmulticast mode [ 227.249240][T11662] netlink: 'syz.4.1584': attribute type 11 has an invalid length. [ 227.981904][T11690] __nla_validate_parse: 11 callbacks suppressed [ 227.981924][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 228.138702][T11695] openvswitch: netlink: Flow key attribute not present in set flow. [ 228.160298][T11696] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 228.383705][T11702] bond10: (slave gretap1): making interface the new active one [ 228.432389][T11702] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 228.573162][T11719] netlink: 'syz.4.1601': attribute type 5 has an invalid length. [ 228.723753][T11727] macvlan0: entered promiscuous mode [ 228.950317][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 229.390704][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 229.913765][T11773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1615'. [ 229.952572][T11773] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1615'. [ 229.983256][T11773] netlink: 'syz.1.1615': attribute type 5 has an invalid length. [ 230.010020][T11773] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1615'. [ 230.353447][T11802] netlink: 'syz.4.1620': attribute type 4 has an invalid length. [ 230.492812][T11805] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1623'. [ 230.552772][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1623'. [ 230.563955][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1623'. [ 230.626059][T11809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1624'. [ 230.693000][T11809] netlink: 'syz.4.1624': attribute type 64 has an invalid length. [ 230.876853][T11815] netlink: 'syz.0.1625': attribute type 4 has an invalid length. [ 231.318196][T11844] macvlan0: entered promiscuous mode [ 231.345251][T11844] macvlan0: entered allmulticast mode [ 231.450004][T11845] netlink: 'syz.1.1631': attribute type 11 has an invalid length. [ 231.483268][T11845] netlink: 'syz.1.1631': attribute type 11 has an invalid length. [ 231.862741][T11870] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 231.889916][T11871] syzkaller0: entered promiscuous mode [ 231.905049][T11871] syzkaller0: entered allmulticast mode [ 231.985797][T11870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.104135][T11877] bond2: (slave gretap1): making interface the new active one [ 232.118902][T11877] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 232.332085][T11897] netlink: 'syz.4.1643': attribute type 1 has an invalid length. [ 232.391205][T11897] bond3: (slave gretap2): making interface the new active one [ 232.399965][T11897] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 232.520091][ T8190] bond0: (slave wlan1): link status definitely down, disabling slave [ 232.846107][T11920] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 233.254210][T11922] bond4: (slave gretap3): making interface the new active one [ 233.298754][T11922] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 233.361424][T11925] __nla_validate_parse: 8 callbacks suppressed [ 233.361443][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 233.592059][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 233.616680][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 233.680312][T11936] bridge0: entered promiscuous mode [ 233.700503][T11936] macsec3: entered promiscuous mode [ 233.712314][T11936] macsec3: entered allmulticast mode [ 233.719104][T11936] bridge0: entered allmulticast mode [ 233.822266][T11949] openvswitch: netlink: IP tunnel dst address not specified [ 234.122097][T11961] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.278079][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1661'. [ 234.552355][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 234.728131][T11983] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 234.771081][T11983] netlink: 'syz.1.1665': attribute type 5 has an invalid length. [ 234.884231][T11992] bond5: invalid ARP target 0.0.0.0 specified for addition [ 234.908006][T11992] bond5: option arp_ip_target: invalid value (0) [ 234.999786][T11992] bond5 (unregistering): Released all slaves [ 235.050162][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 235.169666][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.836152][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 235.893248][T12032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 236.331506][T12050] xt_hashlimit: size too large, truncated to 1048576 [ 236.524668][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1682'. [ 236.557090][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 237.102878][T12086] netlink: 'syz.1.1692': attribute type 3 has an invalid length. [ 237.104813][T12085] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 237.146247][T12084] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 237.385075][T12095] team0: No ports can be present during mode change [ 237.456327][T12095] veth1: entered allmulticast mode [ 237.463459][T12098] netlink: 'syz.0.1697': attribute type 1 has an invalid length. [ 237.812098][T12119] netlink: 'syz.4.1701': attribute type 6 has an invalid length. [ 238.298497][T12139] syzkaller1: entered promiscuous mode [ 238.316379][T12139] syzkaller1: entered allmulticast mode [ 238.335301][T12139] PKCS7: Unknown OID: [4] (bad) [ 238.344403][T12139] PKCS7: Only support pkcs7_signedData type [ 238.398404][T12144] __nla_validate_parse: 5 callbacks suppressed [ 238.398425][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 238.922386][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 239.069611][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 239.082115][T12178] netlink: 'syz.0.1717': attribute type 4 has an invalid length. [ 239.128111][T12166] netlink: 'syz.0.1717': attribute type 4 has an invalid length. [ 239.798095][T12209] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1728'. [ 239.829377][T12209] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1728'. [ 240.027839][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 240.144251][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 240.191525][T12218] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 240.204668][T12218] bond4: option packets_per_slave: allowed values 0 - 65535 [ 240.228726][T12218] bond4 (unregistering): Released all slaves [ 240.540126][T12245] GUP no longer grows the stack in syz.0.1737 (12245): 200000003000-20000000a000 (200000001000) [ 240.551949][T12245] CPU: 0 UID: 0 PID: 12245 Comm: syz.0.1737 Not tainted syzkaller #0 PREEMPT(full) [ 240.551981][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.551996][T12245] Call Trace: [ 240.552005][T12245] [ 240.552015][T12245] dump_stack_lvl+0xe8/0x150 [ 240.552055][T12245] __get_user_pages+0x2453/0x29d0 [ 240.552109][T12245] ? __gup_longterm_locked+0xc4e/0x1630 [ 240.552138][T12245] ? down_read_killable+0x1bb/0x340 [ 240.552169][T12245] ? try_get_folio+0xec/0x650 [ 240.552203][T12245] __gup_longterm_locked+0xdcf/0x1630 [ 240.552259][T12245] gup_fast_fallback+0x1d82/0x22e0 [ 240.552323][T12245] ? __pfx_gup_fast_fallback+0x10/0x10 [ 240.552354][T12245] ? is_valid_gup_args+0x11f/0x200 [ 240.552385][T12245] ? get_user_pages_fast+0x4d/0xb0 [ 240.552416][T12245] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 240.552451][T12245] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 240.552497][T12245] iov_iter_get_pages2+0x5e/0xa0 [ 240.552522][T12245] __se_sys_vmsplice+0x7b3/0x1490 [ 240.552575][T12245] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 240.552607][T12245] ? __pfx_futex_wait+0x10/0x10 [ 240.552642][T12245] ? lockdep_hardirqs_on+0x7a/0x110 [ 240.552742][T12245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.552767][T12245] do_syscall_64+0x15f/0xf80 [ 240.552795][T12245] ? trace_irq_disable+0x3b/0x140 [ 240.552820][T12245] ? clear_bhb_loop+0x40/0x90 [ 240.552848][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.552870][T12245] RIP: 0033:0x7fcfb239c819 [ 240.552891][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.552912][T12245] RSP: 002b:00007fcfb328c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 240.552938][T12245] RAX: ffffffffffffffda RBX: 00007fcfb2615fa0 RCX: 00007fcfb239c819 [ 240.552954][T12245] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 240.552969][T12245] RBP: 00007fcfb2432c91 R08: 0000000000000000 R09: 0000000000000000 [ 240.552984][T12245] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 240.552997][T12245] R13: 00007fcfb2616038 R14: 00007fcfb2615fa0 R15: 00007ffc8a279fa8 [ 240.553052][T12245] [ 240.828616][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 240.937404][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.106944][T12271] netlink: 'syz.2.1744': attribute type 2 has an invalid length. [ 241.115880][T12271] netlink: 'syz.2.1744': attribute type 2 has an invalid length. [ 241.123751][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 241.153608][T12266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.163475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.441658][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 241.574414][T12290] macvlan0: entered promiscuous mode [ 241.584453][T12295] netlink: 'syz.2.1750': attribute type 1 has an invalid length. [ 241.930962][T12312] netlink: 'syz.1.1754': attribute type 4 has an invalid length. [ 241.986880][T12318] veth0: entered promiscuous mode [ 242.001580][T12317] syzkaller0: entered promiscuous mode [ 242.024945][T12317] syzkaller0: entered allmulticast mode [ 242.104081][T12316] veth0: left promiscuous mode [ 242.541650][T12344] xt_hashlimit: size too large, truncated to 1048576 [ 242.687635][T12355] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 243.083116][T12370] netlink: 'syz.3.1768': attribute type 11 has an invalid length. [ 243.392010][T12376] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 243.425938][T12376] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 246.046050][ T8193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.806827][ T8193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.085073][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.648549][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.925914][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.045680][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.175597][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.925808][ T8195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.965245][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.805584][ T8195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.565533][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.325815][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.087694][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.125420][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.461151][T12417] netlink: 'syz.2.1781': attribute type 2 has an invalid length. [ 311.793360][T12441] syz0: rxe_newlink: already configured on veth0_vlan [ 311.870911][T12440] __nla_validate_parse: 3 callbacks suppressed [ 311.870924][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 311.969432][ T8193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.221182][T12456] netlink: 'syz.0.1791': attribute type 3 has an invalid length. [ 312.319085][T12463] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 312.430574][T12466] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1793'. [ 312.520884][T12468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.083715][T12500] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1802'. [ 313.390455][T12502] syz_tun: entered allmulticast mode [ 313.446127][T12497] syz_tun: left allmulticast mode [ 313.803349][T12526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.128385][T12540] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1810'. [ 314.338628][T12550] ipt_rpfilter: unknown options [ 314.517363][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1812'. [ 314.601047][T12556] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1811'. [ 314.613587][T12556] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 316.931599][T12578] »»»»»»: renamed from vlan0 (while UP) [ 316.983052][T12579] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1820'. [ 317.050385][T12579] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1820'. [ 317.089661][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.092729][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.332561][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 317.474823][T12594] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1825'. [ 317.495455][T12594] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 317.507076][T12605] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1828'. [ 317.728823][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.958866][T12621] vlan0: entered promiscuous mode [ 317.963977][T12621] bridge0: entered promiscuous mode [ 317.981760][T12623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1833'. [ 318.052513][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1836'. [ 318.061922][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1836'. [ 318.243784][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 318.569473][ T5837] block nbd1: Receive control failed (result -32) [ 318.620235][T12636] nbd1: detected capacity change from 0 to 63 [ 318.648283][T12412] block nbd1: Dead connection, failed to find a fallback [ 318.659350][T12412] block nbd1: shutting down sockets [ 318.666013][T12412] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.677985][T12412] Buffer I/O error on dev nbd1, logical block 0, async page read [ 318.688563][T12412] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.698815][T12412] Buffer I/O error on dev nbd1, logical block 1, async page read [ 318.745438][T12412] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.768623][T12412] Buffer I/O error on dev nbd1, logical block 2, async page read [ 318.804204][T12412] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.849783][T12412] Buffer I/O error on dev nbd1, logical block 3, async page read [ 318.868849][T12412] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.908791][T12412] Buffer I/O error on dev nbd1, logical block 0, async page read [ 318.952851][T12412] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.981321][T12412] Buffer I/O error on dev nbd1, logical block 1, async page read [ 319.013224][T12412] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.013730][T12659] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 319.050080][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1844'. [ 319.073188][T12412] Buffer I/O error on dev nbd1, logical block 2, async page read [ 319.101830][T12412] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.118261][T12412] Buffer I/O error on dev nbd1, logical block 3, async page read [ 319.148941][T12663] bond0: entered promiscuous mode [ 319.162026][T12412] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.191000][T12663] bond_slave_0: entered promiscuous mode [ 319.206141][T12412] Buffer I/O error on dev nbd1, logical block 0, async page read [ 319.218696][T12663] bond_slave_1: entered promiscuous mode [ 319.235149][T12412] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.244099][T12663] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 319.244282][T12412] Buffer I/O error on dev nbd1, logical block 1, async page read [ 319.277755][T12663] gretap0: entered promiscuous mode [ 319.291665][T12663] hsr1: entered promiscuous mode [ 319.306503][T12412] ldm_validate_partition_table(): Disk read failed. [ 319.314657][T12659] dummy0: entered promiscuous mode [ 319.320376][T12412] Dev nbd1: unable to read RDB block 0 [ 319.351871][T12659] bridge0: port 3(dummy0) entered blocking state [ 319.361622][T12412] nbd1: unable to read partition table [ 319.368519][T12659] bridge0: port 3(dummy0) entered disabled state [ 319.379868][T12659] dummy0: entered allmulticast mode [ 319.455542][T12412] ldm_validate_partition_table(): Disk read failed. [ 319.481263][T12412] Dev nbd1: unable to read RDB block 0 [ 319.511422][T12412] nbd1: unable to read partition table [ 319.857528][T12698] netlink: 'syz.4.1853': attribute type 29 has an invalid length. [ 320.192738][T12718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.202391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.218172][T12718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.227642][T12718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.259046][T12718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.285515][T12718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.341250][T12724] netlink: 'syz.4.1862': attribute type 11 has an invalid length. [ 320.569584][T12740] bridge_slave_1: left allmulticast mode [ 320.594801][T12740] bridge_slave_1: left promiscuous mode [ 320.623212][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.657408][T12742] xt_nat: multiple ranges no longer supported [ 320.688514][T12740] bridge_slave_0: left allmulticast mode [ 320.713909][T12745] netlink: 'syz.4.1868': attribute type 61 has an invalid length. [ 320.728212][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.146067][T12765] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 321.779376][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.852687][T12803] netlink: 'syz.3.1881': attribute type 21 has an invalid length. [ 322.043803][T12809] netlink: 'syz.3.1884': attribute type 1 has an invalid length. [ 322.053064][T12809] netlink: 'syz.3.1884': attribute type 7 has an invalid length. [ 322.062703][T12809] netlink: 'syz.3.1884': attribute type 8 has an invalid length. [ 322.070933][T12809] __nla_validate_parse: 8 callbacks suppressed [ 322.070958][T12809] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1884'. [ 322.087491][T12809] NCSI netlink: No device for ifindex 65584 [ 322.284324][T12815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1886'. [ 322.463582][T12826] x_tables: duplicate entry at hook 2 [ 322.583907][T12837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1892'. [ 322.607914][T12838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1892'. [ 322.638965][T12837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1892'. [ 322.738972][T12841] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 322.753632][T12841] netlink: 'syz.1.1894': attribute type 7 has an invalid length. [ 322.770954][T12841] netlink: 'syz.1.1894': attribute type 8 has an invalid length. [ 322.799078][T12841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1894'. [ 323.146881][T12860] netlink: 'syz.4.1898': attribute type 11 has an invalid length. [ 323.167139][T12860] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1898'. [ 323.207605][T12864] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 323.313412][T12864] bond7: entered promiscuous mode [ 323.345529][T12864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.414183][T12866] delete_channel: no stack [ 323.425260][T12876] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1900'. [ 323.431936][T12873] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1902'. [ 323.454366][T12864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.463182][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'. [ 323.478187][T12864] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 323.490549][T12864] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 323.500915][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.514880][T12864] bond7: (slave ip6gre1): making interface the new active one [ 323.522531][T12864] ip6gre1: entered promiscuous mode [ 323.530615][T12864] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 323.550512][T12866] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 323.781978][T12890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.792673][T12891] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 324.503522][T12925] IPVS: set_ctl: invalid protocol: 14 100.1.1.0:20000 [ 325.319143][T12970] H: renamed from dummy0 (while UP) [ 325.448239][T12981] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 325.504029][T12981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.813881][T12990] x_tables: duplicate underflow at hook 1 [ 325.851475][T12990] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 326.175495][T13006] xt_ecn: cannot match TCP bits for non-tcp packets [ 326.205767][T13008] xt_ecn: cannot match TCP bits for non-tcp packets [ 326.649100][T13029] Driver unsupported XDP return value 0 on prog (id 320) dev N/A, expect packet loss! [ 326.991092][T13053] ipt_ECN: cannot use operation on non-tcp rule [ 327.088386][T13057] netlink: 'syz.4.1956': attribute type 9 has an invalid length. [ 327.277901][T13064] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 327.716235][T13085] __nla_validate_parse: 11 callbacks suppressed [ 327.716258][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 327.775621][T13080] bond4: entered promiscuous mode [ 327.780990][T13080] bond4: entered allmulticast mode [ 327.787358][T13080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.798000][T13089] sit0: entered promiscuous mode [ 327.817882][T13089] validate_nla: 1 callbacks suppressed [ 327.817900][T13089] netlink: 'syz.4.1963': attribute type 1 has an invalid length. [ 327.847523][T13089] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1963'. [ 328.356947][T13107] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1972'. [ 328.382602][T13107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.914985][T13136] netlink: 'syz.0.1976': attribute type 17 has an invalid length. [ 328.960764][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 328.977138][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1976'. [ 328.996976][T13136] ip6gretap0: entered promiscuous mode [ 329.003869][T13136] syz_tun: entered promiscuous mode [ 329.016829][T13136] : Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 329.028921][T13136] : Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 329.077357][T13138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1978'. [ 329.154183][T13151] xt_addrtype: ipv6 does not support BROADCAST matching [ 329.238409][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 329.255265][ T8195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.314149][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 329.323926][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 329.478435][T13162] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 329.637776][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 330.274343][T13215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.304976][T13215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.327626][T13209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.341302][T13217] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 330.351372][T13215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.359759][T13217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.376331][T13215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.387288][T13217] netlink: 'syz.0.1999': attribute type 11 has an invalid length. [ 330.396111][T13215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.420563][T13215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.590938][T13222] netlink: 'syz.0.2001': attribute type 83 has an invalid length. [ 330.948022][T13241] netlink: 'syz.0.2007': attribute type 20 has an invalid length. [ 330.967671][T13241] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.283605][T13251] bond5: (slave bond_slave_1): Device is not our slave [ 331.315884][T13251] bond5: option active_slave: invalid value (bond_slave_1) [ 331.372853][T13251] bond5 (unregistering): Released all slaves [ 331.618008][T13279] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 331.626502][T13279] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 331.674075][T13276] syzkaller0: entered promiscuous mode [ 331.706144][T13276] syzkaller0: entered allmulticast mode [ 332.416327][T13315] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.431955][T13317] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.572733][T13322] netlink: 'syz.3.2029': attribute type 21 has an invalid length. [ 332.601128][T13322] netlink: 'syz.3.2029': attribute type 6 has an invalid length. [ 332.747849][T13324] netlink: 'syz.0.2030': attribute type 29 has an invalid length. [ 332.789863][T13324] netlink: 'syz.0.2030': attribute type 13 has an invalid length. [ 332.797916][T13324] __nla_validate_parse: 18 callbacks suppressed [ 332.797934][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 332.816977][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 332.828747][T13324] validate_nla: 1 callbacks suppressed [ 332.828766][T13324] netlink: 'syz.0.2030': attribute type 29 has an invalid length. [ 332.848695][T13324] netlink: 'syz.0.2030': attribute type 32 has an invalid length. [ 332.869238][T13324] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2030'. [ 333.023038][T13334] gre2: entered promiscuous mode [ 333.137159][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 333.161340][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 333.205892][T13343] netlink: 'syz.3.2035': attribute type 16 has an invalid length. [ 333.233473][T13343] netlink: 'syz.3.2035': attribute type 17 has an invalid length. [ 333.305383][T13343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.651552][T13369] syzkaller0: create flow: hash 3500787528 index 1 [ 333.844206][ T8195] syzkaller0: tun_net_xmit 76 [ 333.850852][ T8195] syzkaller0: tun_net_xmit 48 [ 333.864875][ T10] syzkaller0: tun_net_xmit 76 [ 333.877668][T13374] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2045'. [ 333.887942][T13374] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2045'. [ 333.905902][ T10] syzkaller0: tun_net_xmit 76 [ 334.046288][T13355] syzkaller0: delete flow: hash 3500787528 index 1 [ 334.318053][T13382] smc: removing ib device syz0 [ 335.018682][ T8193] net_ratelimit: 172 callbacks suppressed [ 335.018705][ T8193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.585551][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 336.696721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.706284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.714832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.778715][T13417] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 336.819480][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 336.921152][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 337.448749][T13445] netlink: 'syz.2.2063': attribute type 11 has an invalid length. [ 337.458214][T13444] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 337.517122][T13450] x_tables: duplicate underflow at hook 3 [ 337.700370][T13454] x_tables: duplicate underflow at hook 3 [ 338.307921][T13477] __nla_validate_parse: 3 callbacks suppressed [ 338.307942][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 338.773668][T13489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2076'. [ 338.893708][T13494] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 338.949462][T13494] bond11 (unregistering): Released all slaves [ 339.068768][T13504] vcan0: entered allmulticast mode [ 339.080397][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 339.308524][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.332351][ T5837] Bluetooth: hci4: link tx timeout [ 339.340533][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 339.367821][ T5837] Bluetooth: hci4: link tx timeout [ 339.373582][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 339.393690][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.402709][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.415748][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.424110][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.433002][T13519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.681224][T13538] netlink: 'syz.0.2090': attribute type 2 has an invalid length. [ 339.958528][T13551] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2094'. [ 339.973924][T13542] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 340.332813][T13565] ip6t_srh: unknown srh match flags 5F28 [ 340.524125][T13542] bond8 (unregistering): Released all slaves [ 340.611883][T13564] veth0_to_bridge: entered promiscuous mode [ 340.636709][T13564] veth0_to_bridge: entered allmulticast mode [ 340.769882][ T8042] net_ratelimit: 61 callbacks suppressed [ 340.769904][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.077113][T13573] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 341.087372][T13572] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2098'. [ 341.271606][T13573] bond7: (slave gretap2): making interface the new active one [ 341.281606][T13573] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 341.317085][T13578] macvlan3: entered promiscuous mode [ 341.339151][T13578] macvlan3: entered allmulticast mode [ 341.359708][T13578] bond7: entered promiscuous mode [ 341.387943][T13578] gretap2: entered promiscuous mode [ 341.408456][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 341.439201][T13578] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 341.464832][T13578] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 341.481213][T13578] bond7: left promiscuous mode [ 341.496523][T13578] gretap2: left promiscuous mode [ 341.873971][T13597] block nbd3: not configured, cannot reconfigure [ 341.937564][T13600] netlink: 'syz.1.2109': attribute type 11 has an invalid length. [ 341.944021][T13603] block nbd3: not configured, cannot reconfigure [ 342.090463][T13608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2111'. [ 342.164406][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 342.413107][T13622] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2114'. [ 342.925670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.934159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.060276][T13647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2119'. [ 345.009107][T13606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.044915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.053355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.164813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.173270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.285121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.293645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.926479][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.404799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.413173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.524799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.533265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.645001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.653526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.764803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.773232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.884857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.893195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.285564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.295971][ T8203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.004833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.013192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.046080][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.124867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.133224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.244938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.253295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.528714][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.805256][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.364792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.373202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.484843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.493214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.925271][ T8203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.604795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.613217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.724773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.733141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.685240][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.844785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.853169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.964914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.973339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.445034][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.177183][T13667] wireguard0: entered promiscuous mode [ 397.182787][T13667] wireguard0: entered allmulticast mode [ 397.275522][T13682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2120'. [ 397.310769][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'. [ 397.569707][T13658] syzkaller1: entered promiscuous mode [ 397.604915][T13658] syzkaller1: entered allmulticast mode [ 398.072351][T13723] netlink: 'syz.4.2133': attribute type 1 has an invalid length. [ 398.153660][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2136'. [ 398.246510][T13721] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 398.292561][T13721] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 398.630568][T13708] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 398.674772][T13754] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2142'. [ 399.084714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.093192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.136100][T13774] sctp: [Deprecated]: syz.3.2148 (pid 13774) Use of int in max_burst socket option. [ 399.136100][T13774] Use struct sctp_assoc_value instead [ 399.159529][T13774] sctp: [Deprecated]: syz.3.2148 (pid 13774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.159529][T13774] Use struct sctp_sack_info instead [ 399.208568][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2149'. [ 399.230498][T13773] 8021q: VLANs not supported on caif0 [ 399.477437][T13790] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2155'. [ 399.487900][T13790] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2155'. [ 399.572304][T13790] IPVS: persistence engine module ip_vs_pe_À not found [ 399.884860][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 399.925918][T13817] +: renamed from syzkaller0 [ 400.160313][T13825] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2164'. [ 400.443597][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 400.454692][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 400.487594][T13843] netlink: 'syz.1.2169': attribute type 14 has an invalid length. [ 400.496949][T13843] netlink: 'syz.1.2169': attribute type 13 has an invalid length. [ 400.665873][T13850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.666205][T13853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.708687][T13853] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 400.725655][T13853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.927963][T13863] IPv6: sit1: Disabled Multicast RS [ 401.252759][T13876] x_tables: duplicate underflow at hook 2 [ 401.627159][T13899] tc_dump_action: action bad kind [ 402.012801][T13923] bond0: (slave »»»»»»): Releasing backup interface [ 402.070341][T13923] bond0: (slave bond_slave_1): Releasing backup interface [ 402.089173][T13923] team0: Port device team_slave_0 removed [ 402.107833][T13923] team0: Port device team_slave_1 removed [ 402.127491][T13923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.155416][T13923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.170761][T13923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 402.204724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.213309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.227691][ T8195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.350984][T13936] netlink: 'syz.2.2192': attribute type 7 has an invalid length. [ 402.864986][T13929] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.858982][T13935] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 403.864025][T13936] netlink: 'syz.2.2192': attribute type 7 has an invalid length. [ 403.885825][T13950] 8021q: VLANs not supported on ip_vti0 [ 403.903253][ T8042] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.922669][ T8042] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.940547][ T8042] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.981056][ T8042] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.023093][ T8042] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.063563][ T8042] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.090600][T13971] x_tables: unsorted entry at hook 1 [ 404.106988][ T8042] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.144210][ T8042] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.447549][T13989] x_tables: duplicate entry at hook 1 [ 405.106827][T14031] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.112042][T14028] vlan2: entered promiscuous mode [ 405.129944][T14028] bridge0: entered promiscuous mode [ 405.324725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.333397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.525384][T14048] __nla_validate_parse: 6 callbacks suppressed [ 405.525405][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 405.542727][T14043] tipc: Enabled bearer , priority 0 [ 405.556491][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 405.569894][T14043] syzkaller0: entered promiscuous mode [ 405.598304][T14043] syzkaller0: entered allmulticast mode [ 405.661074][T14050] netlink: 'syz.2.2220': attribute type 4 has an invalid length. [ 405.699730][T14043] tipc: Resetting bearer [ 405.708598][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'. [ 405.719549][T14054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2222'. [ 405.729336][T14040] tipc: Resetting bearer [ 405.790561][T14040] tipc: Disabling bearer [ 406.053934][T14072] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2226'. [ 406.072549][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2226'. [ 406.504737][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 406.535714][T14080] netlink: 'syz.0.2229': attribute type 30 has an invalid length. [ 406.605135][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 406.758919][T14090] x_tables: unsorted underflow at hook 2 [ 406.765438][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'. [ 406.806644][T14087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.823756][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2235'. [ 407.965198][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.250120][T14181] netlink: 'syz.0.2260': attribute type 9 has an invalid length. [ 408.299617][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.323423][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.344068][T14186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.404271][T14189] sit: Src spoofed 10.1.1.1/8789:29d3:fe4e:3179:c0cf:335b:9393:70f8 -> 224.0.0.1/401e:8c84:6928:3a99:5236:6f3d:77b1:6ea2 [ 408.444685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.453189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.564776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.573332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.725339][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.684870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.693276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.804793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.813192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.486192][ T8042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.924789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.933249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.044782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.053156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.245065][ T8203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.164791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.173133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.284786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.293143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.004885][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.404812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.413354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.844695][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.524752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.533076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.765593][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.967849][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.805254][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.005822][ T8203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.765606][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.894892][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.053064][T14224] sctp: [Deprecated]: syz.3.2269 (pid 14224) Use of int in max_burst socket option. [ 461.053064][T14224] Use struct sctp_assoc_value instead [ 461.495937][T14245] __nla_validate_parse: 2 callbacks suppressed [ 461.495960][T14245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2276'. [ 461.708426][T14260] ªªªªª»: renamed from veth0_virt_wifi [ 461.834972][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2277'. [ 461.879119][T14248] openvswitch: netlink: Flow key attr not present in new flow. [ 462.006286][T14272] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2280'. [ 462.015518][ T8203] bond9: (slave syz_tun): link status up again after 0 ms [ 462.035709][ T12] bond9: (slave syz_tun): link status up again after 0 ms [ 462.125046][ T1147] bond9: (slave syz_tun): link status up again after 0 ms [ 462.164511][ T1147] bond9: (slave syz_tun): link status up again after 0 ms [ 462.194587][ T1147] bond9: (slave syz_tun): link status up again after 0 ms [ 462.236647][ T1147] bond9: (slave syz_tun): link status up again after 0 ms [ 462.275164][ T1147] bond9: (slave syz_tun): link status up again after 0 ms [ 462.314558][ T8193] bond9: (slave syz_tun): link status up again after 0 ms [ 462.529939][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 462.570945][T14303] tipc: Started in network mode [ 462.583191][T14303] tipc: Node identity 3af4cd146aa1, cluster identity 4711 [ 462.594312][T14303] tipc: Enabled bearer , priority 0 [ 462.624305][T14303] syzkaller0: entered promiscuous mode [ 462.653264][T14303] syzkaller0: entered allmulticast mode [ 462.715649][T14303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2287'. [ 462.739384][T14303] tipc: Resetting bearer [ 462.759080][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2287'. [ 462.799491][T14302] tipc: Resetting bearer [ 462.889009][T14302] tipc: Disabling bearer [ 462.934515][ T8190] net_ratelimit: 5 callbacks suppressed [ 462.934535][ T8190] bond9: (slave syz_tun): failed to get link speed/duplex [ 462.968188][T14325] sctp: [Deprecated]: syz.3.2292 (pid 14325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.968188][T14325] Use struct sctp_sack_info instead [ 463.074971][ T8190] bond9: (slave syz_tun): failed to get link speed/duplex [ 463.225681][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 463.346527][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 463.356777][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 463.403884][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 463.495353][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 463.588000][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 463.634572][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 463.646046][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.771807][T14358] tipc: Enabling of bearer rejected, failed to enable media [ 463.884659][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 464.015069][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 464.136026][T14380] netlink: 'syz.0.2309': attribute type 10 has an invalid length. [ 464.163232][T14379] syzkaller0: entered promiscuous mode [ 464.191626][T14379] syzkaller0: entered allmulticast mode [ 464.235378][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 464.439952][T14394] netlink: 'syz.1.2315': attribute type 3 has an invalid length. [ 464.510463][T14395] netlink: 'syz.4.2314': attribute type 39 has an invalid length. [ 464.512251][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 464.545644][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'. [ 464.773118][T14406] bond8: option all_slaves_active: invalid value (222) [ 464.803384][T14406] bond8 (unregistering): Released all slaves [ 465.133853][T14420] netlink: 'syz.3.2323': attribute type 10 has an invalid length. [ 465.297667][T14426] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 465.349877][T14427] chnl_net:caif_netlink_parms(): no params data found [ 465.833902][T14455] bond7: option all_slaves_active: invalid value (222) [ 465.846028][T14455] bond7 (unregistering): Released all slaves [ 465.975778][T14457] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 466.077312][T14469] netlink: 'syz.2.2340': attribute type 18 has an invalid length. [ 466.086749][T14469] netlink: 'syz.2.2340': attribute type 18 has an invalid length. [ 466.215225][T14474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.246773][T14474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.323409][T14479] netlink: 'syz.1.2344': attribute type 16 has an invalid length. [ 466.599554][T14497] __nla_validate_parse: 22 callbacks suppressed [ 466.599574][T14497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2351'. [ 466.617806][T14497] veth0: entered promiscuous mode [ 466.623395][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'. [ 466.636217][T14498] veth0 (unregistering): left promiscuous mode [ 467.045200][T14518] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 467.166886][T14527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 467.391819][T14536] lo: entered allmulticast mode [ 467.405267][T14536] tunl0: entered allmulticast mode [ 467.413107][T14536] gre0: entered allmulticast mode [ 467.420243][T14536] gretap0: entered allmulticast mode [ 467.431236][T14536] erspan0: entered allmulticast mode [ 467.441969][T14535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'. [ 467.454132][T14536] ip_vti0: entered allmulticast mode [ 467.460971][T14536] ip6_vti0: entered allmulticast mode [ 467.474891][T14536] sit0: left promiscuous mode [ 467.487520][T14536] sit0: entered allmulticast mode [ 467.501127][T14536] ip6tnl0: entered allmulticast mode [ 467.514344][T14536] ip6gre0: entered allmulticast mode [ 467.528359][T14536] bridge0: entered allmulticast mode [ 467.541334][T14536] vcan0: entered allmulticast mode [ 467.554824][T14536] bond0: entered allmulticast mode [ 467.562405][T14536] bond_slave_0: entered allmulticast mode [ 467.586379][T14536] bond_slave_1: entered allmulticast mode [ 467.599817][T14536] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 467.616083][T14536] bridge_slave_1: entered allmulticast mode [ 467.634707][T14536] team0: entered allmulticast mode [ 467.650627][T14536] team_slave_0: entered allmulticast mode [ 467.675871][T14536] team_slave_1: entered allmulticast mode [ 467.699116][T14536] dummy0: entered allmulticast mode [ 467.718982][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 467.728669][T14536] nlmon0: entered allmulticast mode [ 467.744930][T14536] caif0: entered allmulticast mode [ 467.754919][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 467.774207][T14536] vxcan0: entered allmulticast mode [ 467.780159][T14536] vxcan1: entered allmulticast mode [ 467.792418][T14536] wg0: entered allmulticast mode [ 467.810566][T14536] wg1: entered allmulticast mode [ 467.824705][T14536] wg2: entered allmulticast mode [ 467.834895][T14536] veth0_to_bridge: left promiscuous mode [ 467.851106][T14536] veth1_to_bridge: entered allmulticast mode [ 467.864796][T14536] veth0_to_bond: entered allmulticast mode [ 467.876598][T14536] veth1_to_bond: entered allmulticast mode [ 467.888482][T14536] veth0_to_team: entered allmulticast mode [ 467.895046][T14536] veth1_to_team: entered allmulticast mode [ 467.901358][T14536] veth0_to_batadv: entered allmulticast mode [ 467.908116][T14536] batadv_slave_0: entered allmulticast mode [ 467.914331][T14536] veth1_to_batadv: entered allmulticast mode [ 467.922095][T14536] batadv_slave_1: entered allmulticast mode [ 467.928988][T14536] xfrm0: entered allmulticast mode [ 467.934649][T14536] veth0_to_hsr: entered allmulticast mode [ 467.940850][T14536] hsr_slave_0: entered allmulticast mode [ 467.947846][T14536] veth1_to_hsr: entered allmulticast mode [ 467.954023][T14536] hsr_slave_1: entered allmulticast mode [ 467.960336][T14536] hsr0: entered allmulticast mode [ 467.965925][T14536] veth1_virt_wifi: entered allmulticast mode [ 467.972343][T14536] veth0_virt_wifi: entered allmulticast mode [ 467.978612][T14536] virt_wifi0: entered allmulticast mode [ 467.984613][T14536] veth1_vlan: entered allmulticast mode [ 467.990355][T14536] veth0_vlan: entered allmulticast mode [ 467.996649][T14536] »»»»»»: entered allmulticast mode [ 468.002069][T14536] vlan1: entered allmulticast mode [ 468.007714][T14536] macvlan0: entered allmulticast mode [ 468.013335][T14536] macvlan1: entered allmulticast mode [ 468.019255][T14536] ipvlan0: entered allmulticast mode [ 468.025913][T14536] ipvlan1: entered allmulticast mode [ 468.031585][T14536] veth1_macvtap: entered allmulticast mode [ 468.037916][T14536] veth0_macvtap: entered allmulticast mode [ 468.044084][T14536] macvtap0: entered allmulticast mode [ 468.050779][T14536] macsec0: entered allmulticast mode [ 468.057077][T14536] geneve0: entered allmulticast mode [ 468.062688][T14536] geneve1: entered allmulticast mode [ 468.068459][T14536] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 468.076030][T14536] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 468.083766][T14536] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 468.091993][T14536] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 468.100031][T14536] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 468.108531][T14536] syztnl1: entered allmulticast mode [ 468.114199][T14536] ip6tnl1: entered allmulticast mode [ 468.120691][T14536] ip6gre1: entered allmulticast mode [ 468.126714][T14536] sit1: entered allmulticast mode [ 468.131998][T14536] bridge1: entered allmulticast mode [ 468.139072][T14536] mac80211_hwsim hwsim10 pim6reg0: entered allmulticast mode [ 468.147049][T14536] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 468.154884][T14536] mac80211_hwsim hwsim15 wlan3: entered allmulticast mode [ 468.179180][T14536] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 468.199193][T14536] sit2: entered allmulticast mode [ 468.219025][T14536] macsec1: entered allmulticast mode [ 468.224876][T14536] geneve2: left promiscuous mode [ 468.230380][T14536] geneve2: entered allmulticast mode [ 468.236254][T14536] xfrm1: entered allmulticast mode [ 468.241758][T14536] ip6tnl2: entered allmulticast mode [ 468.249341][T14536] bridge2: entered allmulticast mode [ 468.256015][T14536] bond1: left promiscuous mode [ 468.260996][T14536] mac80211_hwsim hwsim20 wlan4: entered allmulticast mode [ 468.268892][T14536] bridge3: entered allmulticast mode [ 468.275394][T14536] mac80211_hwsim hwsim11 pimreg: entered allmulticast mode [ 468.282993][T14536] macsec2: entered allmulticast mode [ 468.288962][T14536] : entered allmulticast mode [ 468.304265][T14536] vlan3: entered allmulticast mode [ 468.309926][T14536] ipip0: entered allmulticast mode [ 468.321221][T14536] bond2: entered allmulticast mode [ 468.332011][T14536] gretap1: entered allmulticast mode [ 468.339294][T14536] bond3: entered allmulticast mode [ 468.344733][T14536] gretap2: entered allmulticast mode [ 468.350507][T14536] vlan0: left promiscuous mode [ 468.355876][T14536] bridge0: left promiscuous mode [ 468.361179][T14536] vlan0: entered allmulticast mode [ 468.367662][T14536] bond4: left promiscuous mode [ 468.372796][T14536] bond5: entered allmulticast mode [ 468.378415][T14536] bridge4: entered allmulticast mode [ 468.384088][T14536] bond6: entered allmulticast mode [ 468.797082][T14568] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 468.820123][T14568] bond8 (unregistering): Released all slaves [ 468.868758][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2368'. [ 468.897759][ T8193] net_ratelimit: 24 callbacks suppressed [ 468.897779][ T8193] bond9: (slave syz_tun): failed to get link speed/duplex [ 469.055685][ T8193] bond9: (slave syz_tun): failed to get link speed/duplex [ 469.177763][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 469.284117][T14596] xt_socket: unknown flags 0x50 [ 469.314577][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 469.377227][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 469.405408][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.446134][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 469.543144][T14602] FAULT_INJECTION: forcing a failure. [ 469.543144][T14602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.563870][T14604] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2382'. [ 469.587869][T14602] CPU: 1 UID: 0 PID: 14602 Comm: syz.3.2381 Not tainted syzkaller #0 PREEMPT(full) [ 469.587897][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.587918][T14602] Call Trace: [ 469.587927][T14602] [ 469.587936][T14602] dump_stack_lvl+0xe8/0x150 [ 469.587974][T14602] should_fail_ex+0x412/0x560 [ 469.588009][T14602] _copy_from_iter+0x1d3/0x1670 [ 469.588042][T14602] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 469.588070][T14602] ? __pfx_policy_nodemask+0x10/0x10 [ 469.588095][T14602] ? __pfx__copy_from_iter+0x10/0x10 [ 469.588133][T14602] ? set_page_refcounted+0xa0/0x1e0 [ 469.588156][T14602] ? page_copy_sane+0x4e/0x270 [ 469.588188][T14602] copy_page_from_iter+0xdd/0x170 [ 469.588225][T14602] tun_get_user+0x1db3/0x3ed0 [ 469.588249][T14602] ? tun_get_user+0x6ff/0x3ed0 [ 469.588292][T14602] ? aa_file_perm+0x50e/0x15e0 [ 469.588329][T14602] ? __pfx_tun_get_user+0x10/0x10 [ 469.588356][T14602] ? __lock_acquire+0x6b5/0x2cf0 [ 469.588399][T14602] ? ref_tracker_alloc+0x35c/0x4c0 [ 469.588433][T14602] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 469.588466][T14602] ? tun_get+0x1c/0x2f0 [ 469.588491][T14602] ? tun_get+0x1c/0x2f0 [ 469.588521][T14602] ? tun_get+0x1c/0x2f0 [ 469.588545][T14602] ? tun_get+0x1c/0x2f0 [ 469.588573][T14602] tun_chr_write_iter+0x113/0x200 [ 469.588602][T14602] vfs_write+0x61d/0xb90 [ 469.588641][T14602] ? __pfx_vfs_write+0x10/0x10 [ 469.588700][T14602] ? __fget_files+0x2a/0x420 [ 469.588738][T14602] ksys_write+0x150/0x270 [ 469.588772][T14602] ? __pfx_ksys_write+0x10/0x10 [ 469.588814][T14602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.588838][T14602] do_syscall_64+0x15f/0xf80 [ 469.588864][T14602] ? trace_irq_disable+0x3b/0x140 [ 469.588887][T14602] ? clear_bhb_loop+0x40/0x90 [ 469.588914][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.588941][T14602] RIP: 0033:0x7f381815d04e [ 469.588962][T14602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.588981][T14602] RSP: 002b:00007f3819073fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 469.589005][T14602] RAX: ffffffffffffffda RBX: 00007f38190746c0 RCX: 00007f381815d04e [ 469.589021][T14602] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 469.589035][T14602] RBP: 00007f3819074090 R08: 0000000000000000 R09: 0000000000000000 [ 469.589048][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.589062][T14602] R13: 00007f3818416038 R14: 00007f3818415fa0 R15: 00007ffdd63f4bd8 [ 469.589097][T14602] [ 469.871422][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 470.004365][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 470.097724][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 470.126881][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 470.140359][T14621] netlink: 'syz.3.2389': attribute type 4 has an invalid length. [ 470.148878][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 470.264727][ T8193] bond9: (slave syz_tun): failed to get link speed/duplex [ 470.302187][T14629] netlink: 'syz.2.2391': attribute type 1 has an invalid length. [ 470.458420][T14637] pim6reg: entered allmulticast mode [ 470.633708][T14638] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 470.737006][T14644] 8021q: adding VLAN 0 to HW filter on device bond11 [ 471.062021][T14666] veth5: entered promiscuous mode [ 471.069031][T14666] veth5: entered allmulticast mode [ 471.295455][T14681] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 471.450127][T14681] bond8: entered promiscuous mode [ 471.482483][T14681] 8021q: adding VLAN 0 to HW filter on device bond8 [ 471.663408][T14688] __nla_validate_parse: 5 callbacks suppressed [ 471.663427][T14688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2407'. [ 471.698525][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 471.832736][T14701] 8021q: adding VLAN 0 to HW filter on device bond8 [ 472.544860][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 472.580902][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'. [ 472.837844][T14757] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 472.974293][T14757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 472.996980][T14770] netlink: 'syz.1.2431': attribute type 1 has an invalid length. [ 473.010977][T14770] netlink: 'syz.1.2431': attribute type 2 has an invalid length. [ 473.062130][T14766] bond9: (slave veth0_to_bond): making interface the new active one [ 473.072130][T14766] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 473.267196][T14777] sctp: [Deprecated]: syz.4.2437 (pid 14777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.267196][T14777] Use struct sctp_sack_info instead [ 473.311544][T14783] netlink: 'syz.2.2438': attribute type 4 has an invalid length. [ 473.360779][T14781] netlink: 'syz.2.2438': attribute type 4 has an invalid length. [ 473.378170][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'. [ 473.534622][T14793] netlink: 'syz.1.2443': attribute type 3 has an invalid length. [ 473.565343][T14793] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 473.601548][T14797] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 473.623171][T14791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2442'. [ 473.679932][T14791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2442'. [ 473.934506][ T8203] net_ratelimit: 25 callbacks suppressed [ 473.934527][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 474.096053][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 474.215352][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 474.308460][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 474.335969][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 474.355325][T14835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2457'. [ 474.544738][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 474.558090][T14846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 474.665921][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 474.827716][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 474.993087][T14867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.079614][T14872] vlan1: entered promiscuous mode [ 475.099230][T14872] bond5: entered promiscuous mode [ 475.107820][T14872] vlan1: entered allmulticast mode [ 475.113106][T14872] bond5: entered allmulticast mode [ 475.134995][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 475.211824][T14887] validate_nla: 4 callbacks suppressed [ 475.211842][T14887] netlink: 'syz.4.2471': attribute type 9 has an invalid length. [ 475.256048][ T8193] bond9: (slave syz_tun): failed to get link speed/duplex [ 475.492423][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 476.220031][T14934] netlink: 'syz.3.2487': attribute type 51 has an invalid length. [ 476.244918][T14935] netlink: 'syz.3.2487': attribute type 51 has an invalid length. [ 476.461186][T14948] netlink: 'syz.3.2492': attribute type 3 has an invalid length. [ 476.538309][T14948] netlink: 'syz.3.2492': attribute type 11 has an invalid length. [ 476.612484][T14958] netlink: 'syz.2.2495': attribute type 1 has an invalid length. [ 476.820151][T14958] bond13: entered promiscuous mode [ 476.851518][T14958] 8021q: adding VLAN 0 to HW filter on device bond13 [ 477.007369][T14968] bond13: (slave bridge6): making interface the new active one [ 477.024751][T14968] bridge6: entered promiscuous mode [ 477.040821][T14968] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 477.087961][T14970] netlink: 'syz.2.2495': attribute type 4 has an invalid length. [ 478.221526][T15047] __nla_validate_parse: 8 callbacks suppressed [ 478.221546][T15047] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2513'. [ 478.240323][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 479.044639][ T12] net_ratelimit: 27 callbacks suppressed [ 479.044658][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.165059][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.274629][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.384662][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.494707][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.604613][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.714792][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.824600][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 479.934590][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 480.054644][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 480.478848][T15006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.693644][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 480.765041][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 480.959220][T15068] netlink: 'syz.3.2519': attribute type 6 has an invalid length. [ 480.987576][T15068] sock: sock_timestamping_bind_phc: sock not bind to device [ 481.113055][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 481.267171][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 481.353445][T15091] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 481.368086][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'. [ 481.400227][T15088] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2527'. [ 481.477319][T15094] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2529'. [ 481.531009][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'. [ 481.665190][T15098] tipc: MTU too low for tipc bearer [ 482.186233][T15122] syzkaller0: entered promiscuous mode [ 482.200680][T15122] syzkaller0: entered allmulticast mode [ 483.298775][T15184] __nla_validate_parse: 6 callbacks suppressed [ 483.298796][T15184] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2563'. [ 483.591217][T15199] netlink: 'syz.2.2568': attribute type 5 has an invalid length. [ 484.096441][ T8203] net_ratelimit: 34 callbacks suppressed [ 484.096462][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 484.287451][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 484.315383][T15236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2580'. [ 484.349528][T15236] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2580'. [ 484.397855][T15236] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 484.420277][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 484.546224][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 484.665469][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 484.845452][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 484.866385][T15264] Cannot find del_set index 1 as target [ 484.985309][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 485.054095][T15274] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 485.078557][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'. [ 485.091591][T15272] nbd: must specify a device to reconfigure [ 485.104688][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 485.304631][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 485.312407][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2596'. [ 485.444611][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 485.564146][T15295] !: renamed from veth0_macvtap [ 485.608596][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 485.776649][T15310] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 485.989208][T15321] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2607'. [ 486.542388][T15344] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 486.621275][T15344] bond10 (unregistering): Released all slaves [ 487.025406][T15372] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 487.040384][T15372] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 487.071991][T15377] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 487.080107][T15377] netlink: 'syz.4.2630': attribute type 11 has an invalid length. [ 487.093219][T15377] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2630'. [ 487.587882][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'. [ 487.630618][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 488.175062][T15440] netlink: 'syz.3.2648': attribute type 7 has an invalid length. [ 488.175074][T15441] netlink: 'syz.3.2648': attribute type 7 has an invalid length. [ 488.183478][T15440] netlink: 'syz.3.2648': attribute type 8 has an invalid length. [ 488.198887][T15441] netlink: 'syz.3.2648': attribute type 8 has an invalid length. [ 488.362340][T15452] __nla_validate_parse: 7 callbacks suppressed [ 488.362355][T15452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2651'. [ 489.124778][ T12] net_ratelimit: 30 callbacks suppressed [ 489.124800][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 489.244583][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 489.354598][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 489.464681][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 489.574545][ T12] bond9: (slave syz_tun): failed to get link speed/duplex [ 489.684642][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 489.794559][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 489.904696][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 490.014570][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 490.134702][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 490.615496][T15406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.876614][T15480] dvmrp0: entered allmulticast mode [ 491.033707][T15495] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2664'. [ 491.351022][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 491.367142][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 491.682420][T15527] : renamed from veth0_virt_wifi [ 492.171609][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 492.181263][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 492.274027][T15558] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 492.282562][T15558] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 492.408387][T15562] tipc: Started in network mode [ 492.423575][T15562] tipc: Node identity bbbbbb01, cluster identity 4711 [ 492.446992][T15562] tipc: Enabled bearer , priority 10 [ 492.455012][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.479853][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.542263][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.569591][T15565] syzkaller0: entered promiscuous mode [ 492.579812][T15565] syzkaller0: entered allmulticast mode [ 492.595041][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.671062][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.692352][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.730801][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.792515][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.811225][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.819643][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.828029][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.851808][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.875304][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.893091][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.910718][T15578] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2691'. [ 492.920389][T15578] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2691'. [ 492.936367][T15578] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2691'. [ 492.946279][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.959562][T15562] tipc: Enabling of bearer rejected, already enabled [ 492.982224][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.008339][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.029946][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.052371][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.074849][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.099665][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.123985][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.154777][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.188567][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.245245][T15562] tipc: Enabling of bearer rejected, already enabled [ 493.270863][T15588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2696'. [ 493.429147][T15593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.549974][T15596] __nla_validate_parse: 1 callbacks suppressed [ 493.549994][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 493.565862][ T5825] tipc: Node number set to 3149642497 [ 493.799169][T15610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.869094][T15617] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 493.900064][T15617] netlink: 2080 bytes leftover after parsing attributes in process `syz.0.2704'. [ 493.988033][T15622] tipc: Enabled bearer , priority 0 [ 494.001128][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2704'. [ 494.059824][T15619] syzkaller0: entered promiscuous mode [ 494.068892][T15619] syzkaller0: entered allmulticast mode [ 494.075721][T15619] tipc: Resetting bearer [ 494.135294][T15612] tipc: Resetting bearer [ 495.992321][T15612] tipc: Disabling bearer [ 496.004204][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2706'. [ 496.014733][ T8203] net_ratelimit: 27 callbacks suppressed [ 496.014753][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 496.029213][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2706'. [ 496.039399][ T796] tipc: Node number set to 2486102665 [ 496.145196][ T8203] bond9: (slave syz_tun): failed to get link speed/duplex [ 496.234065][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 496.271300][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 496.294850][ T8193] bond9: (slave syz_tun): failed to get link speed/duplex [ 496.310429][T15652] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2714'. [ 496.418195][T15662] netlink: 'syz.4.2717': attribute type 11 has an invalid length. [ 496.450618][T15662] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.2717'. [ 496.464755][ T8193] bond9: (slave syz_tun): failed to get link speed/duplex [ 496.504687][T15667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.531211][T15668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.595007][ T13] bond9: (slave syz_tun): failed to get link speed/duplex [ 496.618720][T15667] syzkaller0: entered promiscuous mode [ 496.634842][T15667] syzkaller0: entered allmulticast mode [ 496.736089][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 496.866655][ T1147] bond9: (slave syz_tun): failed to get link speed/duplex [ 496.933563][T15647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2712'. [ 497.006358][ T8195] bond9: (slave syz_tun): failed to get link speed/duplex [ 497.370699][T15702] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 497.752166][T15726] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 497.876640][T15731] bridge0: port 3(H) entered blocking state [ 497.882776][T15731] bridge0: port 3(H) entered forwarding state [ 497.925568][T15731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.946763][T15731] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.076487][T15747] netlink: 'syz.4.2738': attribute type 4 has an invalid length. [ 498.182169][T15752] ip_vti0: entered promiscuous mode [ 498.808132][T15786] __nla_validate_parse: 5 callbacks suppressed [ 498.808161][T15786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2749'. [ 499.141464][T15798] netlink: 'syz.4.2755': attribute type 6 has an invalid length. [ 499.165397][T15801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2756'. [ 499.230268][T15798] netlink: 'syz.4.2755': attribute type 6 has an invalid length. [ 499.282295][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.323071][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.340858][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 499.375184][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.384994][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.652560][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2761'. [ 499.759274][T15822] netlink: 'syz.1.2762': attribute type 4 has an invalid length. [ 499.796361][T15827] netlink: 'syz.4.2764': attribute type 1 has an invalid length. [ 499.885957][T15827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 499.897454][T15829] veth0_to_bond: left allmulticast mode [ 499.936388][T15829] bond1: (slave veth0_to_bond): Releasing active interface [ 499.956265][T15829] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 499.994546][T15827] bond7: entered promiscuous mode [ 500.015246][T15827] bond7: entered allmulticast mode [ 500.227984][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'. [ 500.457446][T15852] team_slave_0: entered promiscuous mode [ 500.495336][T15852] syzkaller1: entered promiscuous mode [ 500.513960][T15852] syzkaller1: entered allmulticast mode [ 500.683500][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'. [ 500.979259][T15887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2784'. [ 501.013669][T15887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2784'. [ 501.082601][T15891] netlink: 'syz.3.2785': attribute type 4 has an invalid length. [ 501.097813][T15884] bridge0: port 3(H) entered disabled state [ 501.146505][T15884] macvlan0: left promiscuous mode [ 501.155894][T15884] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 501.183568][T15884] bond2: left allmulticast mode [ 501.196401][T15884] bridge2: left promiscuous mode [ 501.209021][T15884] bridge2: left allmulticast mode [ 501.220642][T15884] bond8: left promiscuous mode [ 501.242554][T15884] veth7: left promiscuous mode [ 501.248398][T15884] veth7: left allmulticast mode [ 501.283831][T15884] bond13: left promiscuous mode [ 501.288969][T15884] bridge6: left promiscuous mode [ 501.409434][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.508551][T15911] tipc: MTU too low for tipc bearer [ 501.593416][T15917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2789'. [ 501.603747][T15917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2789'. [ 502.288991][ T12] tipc: Subscription rejected, illegal request [ 503.015952][T15998] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 503.589409][T16026] netlink: 'syz.1.2825': attribute type 20 has an invalid length. [ 503.745788][T16026] netlink: 'syz.1.2825': attribute type 20 has an invalid length. [ 504.051034][T16048] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 504.078203][T16056] __nla_validate_parse: 9 callbacks suppressed [ 504.078222][T16056] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2835'. [ 504.080167][T16051] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 505.023275][T16091] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2846'. [ 505.085007][T16091] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2846'. [ 505.416048][T16118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2851'. [ 505.645060][T16121] pim6reg: entered allmulticast mode [ 506.162435][T16151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2862'. [ 506.247231][T16155] netlink: 'syz.2.2865': attribute type 2 has an invalid length. [ 506.264284][T16155] netlink: 'syz.2.2865': attribute type 8 has an invalid length. [ 506.280215][T16155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2865'. [ 506.548250][T16169] netlink: 'syz.2.2868': attribute type 1 has an invalid length. [ 506.593950][T16174] net_ratelimit: 36 callbacks suppressed [ 506.593969][T16174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.627111][T16175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.670823][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2868'. [ 506.717791][T16169] bond14: entered promiscuous mode [ 506.725182][T16169] 8021q: adding VLAN 0 to HW filter on device bond14 [ 506.818378][T16176] bond14: (slave bridge8): making interface the new active one [ 506.863208][T16176] bridge8: entered promiscuous mode [ 506.881354][T16176] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 506.951917][T16180] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 506.986996][T16180] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 507.057479][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 507.071826][T16197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.100242][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'. [ 507.129888][T16189] netlink: 'syz.0.2873': attribute type 12 has an invalid length. [ 507.157277][T16189] netlink: 'syz.0.2873': attribute type 15 has an invalid length. [ 507.317327][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 507.332272][ T8193] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 7680 - 0 [ 507.355090][T16189] netlink: 'syz.0.2873': attribute type 12 has an invalid length. [ 507.363180][ T8193] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 7680 - 0 [ 507.394554][T16189] netlink: 'syz.0.2873': attribute type 15 has an invalid length. [ 507.408191][ T8193] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 7680 - 0 [ 507.442163][ T8193] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 7680 - 0 [ 507.713202][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.727307][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.738001][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.750896][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.758818][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 508.076273][T16225] netlink: 'syz.2.2883': attribute type 2 has an invalid length. [ 508.192711][T16236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.559060][T16220] chnl_net:caif_netlink_parms(): no params data found [ 508.613496][T16254] tc_dump_action: action bad kind [ 508.884971][T16270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.159164][T16220] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.175496][T16220] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.182947][T16220] bridge_slave_0: entered allmulticast mode [ 509.194153][T16220] bridge_slave_0: entered promiscuous mode [ 509.203837][T16220] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.211421][T16220] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.219313][T16220] bridge_slave_1: entered allmulticast mode [ 509.228448][T16220] bridge_slave_1: entered promiscuous mode [ 509.283969][T16282] ipvlan3: entered allmulticast mode [ 509.291525][T16282] batadv_slave_1: entered allmulticast mode [ 509.301466][T16282] batman_adv: batadv0: Adding interface: ipvlan3 [ 509.308564][T16282] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.334828][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.346165][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.356487][T16282] batman_adv: batadv0: Interface activated: ipvlan3 [ 509.364028][T16289] __nla_validate_parse: 3 callbacks suppressed [ 509.364043][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 509.471664][T16220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.524309][T16220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.647093][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 509.661642][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 509.677164][T16220] team0: Port device team_slave_0 added [ 509.683514][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 509.697568][T16220] team0: Port device team_slave_1 added [ 509.728501][T16294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.744303][T16220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.751596][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.777807][T16220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.791240][T16220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.798866][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.820501][ T5836] Bluetooth: hci5: command tx timeout [ 509.826786][T16220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.132743][T16220] hsr_slave_0: entered promiscuous mode [ 510.155946][T16220] hsr_slave_1: entered promiscuous mode [ 510.174784][T16220] debugfs: 'hsr0' already exists in 'hsr' [ 510.188934][T16220] Cannot create hsr debugfs directory [ 510.212145][T16327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2911'. [ 510.656452][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 510.681349][T16340] netlink: 'syz.1.2915': attribute type 2 has an invalid length. [ 510.699949][T16340] netlink: 'syz.1.2915': attribute type 2 has an invalid length. [ 510.748832][T16342] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2916'. [ 510.913454][T16220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.100428][T16220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.162501][T16362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.174006][T16362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.183452][T16362] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 511.191007][T16362] batman_adv: batadv0: Removing interface: ipvlan3 [ 511.332315][T16220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.472963][T16220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.537798][T16374] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2921'. [ 511.884837][ T5836] Bluetooth: hci5: command tx timeout [ 511.968259][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 511.993527][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2926'. [ 512.031778][T16395] validate_nla: 3 callbacks suppressed [ 512.031796][T16395] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 512.067469][T16220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 512.110554][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.197055][T16220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 512.220737][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.230179][T16220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.260508][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.277221][T16220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 512.305366][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.325584][T16405] hsr_slave_0: left promiscuous mode [ 512.344937][T16405] hsr_slave_1: left promiscuous mode [ 512.725868][T16220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.788292][T16220] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.832949][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.840222][ T8042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.920659][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.928014][ T8190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.997770][T16442] netlink: 'syz.0.2938': attribute type 30 has an invalid length. [ 513.433065][T16458] netlink: 'syz.4.2943': attribute type 39 has an invalid length. [ 513.793067][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.965398][ T5836] Bluetooth: hci5: command tx timeout [ 513.984248][T16220] veth0_vlan: entered promiscuous mode [ 514.059701][T16220] veth1_vlan: entered promiscuous mode [ 514.117433][T16493] SET target dimension over the limit! [ 514.173865][T16220] veth0_macvtap: entered promiscuous mode [ 514.226932][T16220] veth1_macvtap: entered promiscuous mode [ 514.298108][T16220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.352321][T16220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.447823][ T8203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.484019][ T8203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.516463][ T8203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.536614][ T8203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.939534][ T8190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.980117][ T8190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.109333][T16526] __nla_validate_parse: 5 callbacks suppressed [ 515.109353][T16526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2963'. [ 515.150230][ T8203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.188987][T16528] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 515.204328][ T8203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.511219][T16498] mpoa:mpoad_close: () going down [ 515.563221][T16543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2878'. [ 516.044869][ T5836] Bluetooth: hci5: command tx timeout [ 516.227223][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 516.230719][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 516.284329][T16566] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 516.303102][T16568] netlink: 'syz.4.2974': attribute type 14 has an invalid length. [ 516.329799][T16568] netem: change failed [ 516.341465][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 516.357482][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 516.368412][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 516.382719][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 516.398823][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 516.477988][T16568] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2974'. [ 516.586673][T16576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2974'. [ 516.650198][T16570] tipc: Resetting bearer [ 516.679981][T16584] syzkaller0: entered promiscuous mode [ 516.707473][T16584] syzkaller0: entered allmulticast mode [ 516.784951][T16582] 0: reclassify loop, rule prio 0, protocol 800 [ 517.071924][ T5824] syz_tun (unregistering): left promiscuous mode [ 517.235054][T16601] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 517.770443][T16618] SET target dimension over the limit! [ 517.778768][T16618] netlink: 'syz.1.2987': attribute type 10 has an invalid length. [ 517.797463][T16617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.918791][T16570] chnl_net:caif_netlink_parms(): no params data found [ 518.074281][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 518.377934][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.403795][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.429720][T16570] bridge_slave_0: entered allmulticast mode [ 518.445485][ T5837] Bluetooth: hci4: command tx timeout [ 518.472584][T16570] bridge_slave_0: entered promiscuous mode [ 518.516058][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.569618][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.609580][T16570] bridge_slave_1: entered allmulticast mode [ 518.629915][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2995'. [ 518.639930][T16570] bridge_slave_1: entered promiscuous mode [ 518.682937][T16662] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 518.854651][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.902952][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.137537][T16686] netlink: zone id is out of range [ 519.165651][T16686] netlink: zone id is out of range [ 519.183848][T16686] netlink: zone id is out of range [ 519.201326][T16686] netlink: zone id is out of range [ 519.220098][T16570] team0: Port device team_slave_0 added [ 519.227648][T16686] netlink: zone id is out of range [ 519.252173][T16686] netlink: zone id is out of range [ 519.262587][ T5486] ================================================================== [ 519.265004][T16686] netlink: zone id is out of range [ 519.270703][ T5486] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 519.270740][ T5486] Read of size 8 at addr ffff88805a89f8c0 by task dhcpcd/5486 [ 519.291215][ T5486] [ 519.293569][ T5486] CPU: 0 UID: 0 PID: 5486 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 519.293595][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.293611][ T5486] Call Trace: [ 519.293620][ T5486] [ 519.293629][ T5486] dump_stack_lvl+0xe8/0x150 [ 519.293664][ T5486] print_report+0xba/0x230 [ 519.293690][ T5486] ? sock_def_readable+0x1cb/0x550 [ 519.293713][ T5486] kasan_report+0x117/0x150 [ 519.293736][ T5486] ? sock_def_readable+0x1cb/0x550 [ 519.293763][ T5486] sock_def_readable+0x1cb/0x550 [ 519.293787][ T5486] ? sock_def_readable+0xae/0x550 [ 519.293810][ T5486] ? send_to_lecd+0x26d/0x830 [ 519.293835][ T5486] send_to_lecd+0x3e7/0x830 [ 519.293864][ T5486] lec_start_xmit+0xe52/0x2890 [ 519.293897][ T5486] dev_hard_start_xmit+0x2cd/0x830 [ 519.293927][ T5486] sch_direct_xmit+0x251/0x4c0 [ 519.293958][ T5486] ? __pfx_sch_direct_xmit+0x10/0x10 [ 519.293990][ T5486] __dev_queue_xmit+0x180f/0x3950 [ 519.294011][ T5486] ? __dev_notify_flags+0x1a9/0x310 [ 519.294045][ T5486] ? __dev_queue_xmit+0x2b6/0x3950 [ 519.294073][ T5486] ? __pfx___dev_queue_xmit+0x10/0x10 [ 519.294108][ T5486] ? __asan_memcpy+0x40/0x70 [ 519.294136][ T5486] ? eth_header+0x11b/0x200 [ 519.294156][ T5486] ? __pfx_eth_header+0x10/0x10 [ 519.294175][ T5486] ? lapbeth_data_transmit+0x218/0x2e0 [ 519.294200][ T5486] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 519.294224][ T5486] lapb_data_transmit+0x90/0xb0 [ 519.294249][ T5486] lapb_transmit_buffer+0x163/0x200 [ 519.294272][ T5486] lapb_establish_data_link+0x89/0xe0 [ 519.294301][ T5486] lapb_device_event+0x4e1/0x670 [ 519.294327][ T5486] notifier_call_chain+0x1ad/0x3d0 [ 519.294351][ T5486] __dev_notify_flags+0x1a9/0x310 [ 519.294382][ T5486] ? __pfx___dev_notify_flags+0x10/0x10 [ 519.294411][ T5486] ? __dev_change_flags+0x4c6/0x690 [ 519.294443][ T5486] ? __pfx___dev_change_flags+0x10/0x10 [ 519.294472][ T5486] ? devinet_ioctl+0x32b/0x1b30 [ 519.294499][ T5486] ? __pfx___mutex_lock+0x10/0x10 [ 519.294528][ T5486] netif_change_flags+0xe8/0x1a0 [ 519.294561][ T5486] dev_change_flags+0x130/0x260 [ 519.294591][ T5486] devinet_ioctl+0x9f2/0x1b30 [ 519.294623][T16686] netlink: zone id is out of range [ 519.294624][ T5486] ? __pfx_devinet_ioctl+0x10/0x10 [ 519.294655][ T5486] ? get_user_ifreq+0x12b/0x180 [ 519.294746][ T5486] inet_ioctl+0x42a/0x560 [ 519.294816][ T5486] ? __pfx_inet_ioctl+0x10/0x10 [ 519.294915][ T5486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 519.294980][ T5486] sock_do_ioctl+0x101/0x320 [ 519.295049][ T5486] ? __pfx_sock_do_ioctl+0x10/0x10 [ 519.295134][ T5486] sock_ioctl+0x5c6/0x7f0 [ 519.295198][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 519.295255][ T5486] ? fd_install+0x306/0x3d0 [ 519.295329][ T5486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 519.295385][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 519.295447][ T5486] __se_sys_ioctl+0xfc/0x170 [ 519.295494][ T5486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.295557][ T5486] do_syscall_64+0x15f/0xf80 [ 519.295629][ T5486] ? trace_irq_disable+0x3b/0x140 [ 519.295686][ T5486] ? clear_bhb_loop+0x40/0x90 [ 519.295761][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.295834][ T5486] RIP: 0033:0x7f8f1afde378 [ 519.295881][ T5486] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 519.295934][ T5486] RSP: 002b:00007fffe86b60d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.295999][ T5486] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00007f8f1afde378 [ 519.296034][ T5486] RDX: 00007fffe86c62d0 RSI: 0000000000008914 RDI: 0000000000000011 [ 519.296081][ T5486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.296122][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe86d6470 [ 519.296170][ T5486] R13: 00007f8f1aede708 R14: 0000000000000028 R15: 0000000000008914 [ 519.296256][ T5486] [ 519.296277][ T5486] [ 519.671055][ T5486] Allocated by task 16499: [ 519.675503][ T5486] kasan_save_track+0x3e/0x80 [ 519.680210][ T5486] __kasan_slab_alloc+0x6c/0x80 [ 519.685079][ T5486] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 519.690913][ T5486] sock_alloc_inode+0x2c/0x190 [ 519.695706][ T5486] alloc_inode+0x6a/0x1b0 [ 519.700059][ T5486] __sock_create+0x12d/0x9d0 [ 519.704666][ T5486] __sys_socket+0xd6/0x1b0 [ 519.709116][ T5486] __x64_sys_socket+0x7a/0x90 [ 519.713811][ T5486] do_syscall_64+0x15f/0xf80 [ 519.718426][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.724346][ T5486] [ 519.726695][ T5486] Freed by task 16538: [ 519.730778][ T5486] kasan_save_track+0x3e/0x80 [ 519.735499][ T5486] kasan_save_free_info+0x46/0x50 [ 519.740549][ T5486] __kasan_slab_free+0x5c/0x80 [ 519.745346][ T5486] kmem_cache_free+0x180/0x630 [ 519.750146][ T5486] rcu_core+0x7cd/0x1070 [ 519.754414][ T5486] handle_softirqs+0x22a/0x840 [ 519.759239][ T5486] __irq_exit_rcu+0xca/0x220 [ 519.763846][ T5486] irq_exit_rcu+0x9/0x30 [ 519.768109][ T5486] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 519.773776][ T5486] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 519.779799][ T5486] [ 519.782139][ T5486] Last potentially related work creation: [ 519.787863][ T5486] kasan_save_stack+0x3e/0x60 [ 519.792567][ T5486] kasan_record_aux_stack+0xbd/0xd0 [ 519.797787][ T5486] call_rcu+0xee/0x890 [ 519.801888][ T5486] evict+0x95b/0xb10 [ 519.805803][ T5486] __dentry_kill+0x1a2/0x5e0 [ 519.810443][ T5486] finish_dput+0xc9/0x480 [ 519.814795][ T5486] __fput+0x691/0xa60 [ 519.818806][ T5486] task_work_run+0x1d9/0x270 [ 519.823424][ T5486] exit_to_user_mode_loop+0xed/0x480 [ 519.828730][ T5486] do_syscall_64+0x33e/0xf80 [ 519.833360][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.839268][ T5486] [ 519.841609][ T5486] The buggy address belongs to the object at ffff88805a89f800 [ 519.841609][ T5486] which belongs to the cache sock_inode_cache of size 1408 [ 519.856202][ T5486] The buggy address is located 192 bytes inside of [ 519.856202][ T5486] freed 1408-byte region [ffff88805a89f800, ffff88805a89fd80) [ 519.870119][ T5486] [ 519.872469][ T5486] The buggy address belongs to the physical page: [ 519.878916][ T5486] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a898 [ 519.887700][ T5486] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 519.896219][ T5486] memcg:ffff88805a89fe01 [ 519.900472][ T5486] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 519.908028][ T5486] page_type: f5(slab) [ 519.912032][ T5486] raw: 00fff00000000040 ffff88801f6c7000 dead000000000100 dead000000000122 [ 519.920637][ T5486] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff88805a89fe01 [ 519.929249][ T5486] head: 00fff00000000040 ffff88801f6c7000 dead000000000100 dead000000000122 [ 519.937933][ T5486] head: 0000000000000000 0000000800150015 00000000f5000000 ffff88805a89fe01 [ 519.946616][ T5486] head: 00fff00000000003 ffffea00016a2601 00000000ffffffff 00000000ffffffff [ 519.955308][ T5486] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 519.963990][ T5486] page dumped because: kasan: bad access detected [ 519.970427][ T5486] page_owner tracks the page as allocated [ 519.976159][ T5486] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 94331974916, free_ts 26488542158 [ 519.999371][ T5486] post_alloc_hook+0x231/0x280 [ 520.004180][ T5486] get_page_from_freelist+0x24dc/0x2580 [ 520.009750][ T5486] __alloc_frozen_pages_noprof+0x18d/0x380 [ 520.015576][ T5486] allocate_slab+0x77/0x660 [ 520.020100][ T5486] refill_objects+0x331/0x3c0 [ 520.024795][ T5486] __pcs_replace_empty_main+0x2e6/0x730 [ 520.030376][ T5486] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 520.036208][ T5486] sock_alloc_inode+0x2c/0x190 [ 520.041011][ T5486] alloc_inode+0x6a/0x1b0 [ 520.045380][ T5486] __sock_create+0x12d/0x9d0 [ 520.049993][ T5486] __sys_socket+0xd6/0x1b0 [ 520.054430][ T5486] __x64_sys_socket+0x7a/0x90 [ 520.059134][ T5486] do_syscall_64+0x15f/0xf80 [ 520.063745][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.069665][ T5486] page last free pid 1 tgid 1 stack trace: [ 520.075478][ T5486] __free_frozen_pages+0xc2b/0xdb0 [ 520.080615][ T5486] free_contig_range+0xbb/0x170 [ 520.085485][ T5486] destroy_args+0x4e5/0x570 [ 520.090016][ T5486] debug_vm_pgtable+0x3f8/0x410 [ 520.094887][ T5486] do_one_initcall+0x250/0x870 [ 520.099675][ T5486] do_initcall_level+0x104/0x190 [ 520.104642][ T5486] do_initcalls+0x59/0xa0 [ 520.108996][ T5486] kernel_init_freeable+0x2a6/0x3e0 [ 520.114221][ T5486] kernel_init+0x1d/0x1d0 [ 520.118583][ T5486] ret_from_fork+0x514/0xb70 [ 520.123217][ T5486] ret_from_fork_asm+0x1a/0x30 [ 520.128037][ T5486] [ 520.130387][ T5486] Memory state around the buggy address: [ 520.136046][ T5486] ffff88805a89f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 520.144134][ T5486] ffff88805a89f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.152221][ T5486] >ffff88805a89f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.160313][ T5486] ^ [ 520.166490][ T5486] ffff88805a89f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.174567][ T5486] ffff88805a89f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.182645][ T5486] ================================================================== [ 520.190746][ T5486] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 520.197971][ T5486] CPU: 0 UID: 0 PID: 5486 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 520.206923][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 520.217004][ T5486] Call Trace: [ 520.220303][ T5486] [ 520.223252][ T5486] vpanic+0x56c/0xa60 [ 520.227264][ T5486] ? __pfx_vpanic+0x10/0x10 [ 520.231797][ T5486] panic+0xc5/0xd0 [ 520.235541][ T5486] ? __pfx_panic+0x10/0x10 [ 520.239982][ T5486] ? sock_def_readable+0x1cb/0x550 [ 520.245145][ T5486] ? rcu_is_watching+0x15/0xb0 [ 520.249936][ T5486] ? sock_def_readable+0x1cb/0x550 [ 520.255095][ T5486] ? sock_def_readable+0x1cb/0x550 [ 520.260236][ T5486] check_panic_on_warn+0x89/0xb0 [ 520.265203][ T5486] ? sock_def_readable+0x1cb/0x550 [ 520.270334][ T5486] end_report+0x73/0x170 [ 520.274597][ T5486] ? sock_def_readable+0x1cb/0x550 [ 520.279727][ T5486] kasan_report+0x128/0x150 [ 520.284251][ T5486] ? sock_def_readable+0x1cb/0x550 [ 520.289392][ T5486] sock_def_readable+0x1cb/0x550 [ 520.294355][ T5486] ? sock_def_readable+0xae/0x550 [ 520.299428][ T5486] ? send_to_lecd+0x26d/0x830 [ 520.304151][ T5486] send_to_lecd+0x3e7/0x830 [ 520.308689][ T5486] lec_start_xmit+0xe52/0x2890 [ 520.313478][ T5486] dev_hard_start_xmit+0x2cd/0x830 [ 520.318626][ T5486] sch_direct_xmit+0x251/0x4c0 [ 520.323508][ T5486] ? __pfx_sch_direct_xmit+0x10/0x10 [ 520.328818][ T5486] __dev_queue_xmit+0x180f/0x3950 [ 520.333861][ T5486] ? __dev_notify_flags+0x1a9/0x310 [ 520.339088][ T5486] ? __dev_queue_xmit+0x2b6/0x3950 [ 520.344221][ T5486] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.349614][ T5486] ? __asan_memcpy+0x40/0x70 [ 520.354247][ T5486] ? eth_header+0x11b/0x200 [ 520.358764][ T5486] ? __pfx_eth_header+0x10/0x10 [ 520.363627][ T5486] ? lapbeth_data_transmit+0x218/0x2e0 [ 520.369108][ T5486] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 520.374940][ T5486] lapb_data_transmit+0x90/0xb0 [ 520.379818][ T5486] lapb_transmit_buffer+0x163/0x200 [ 520.385070][ T5486] lapb_establish_data_link+0x89/0xe0 [ 520.390492][ T5486] lapb_device_event+0x4e1/0x670 [ 520.395454][ T5486] notifier_call_chain+0x1ad/0x3d0 [ 520.400588][ T5486] __dev_notify_flags+0x1a9/0x310 [ 520.405638][ T5486] ? __pfx___dev_notify_flags+0x10/0x10 [ 520.411226][ T5486] ? __dev_change_flags+0x4c6/0x690 [ 520.416474][ T5486] ? __pfx___dev_change_flags+0x10/0x10 [ 520.422055][ T5486] ? devinet_ioctl+0x32b/0x1b30 [ 520.426965][ T5486] ? __pfx___mutex_lock+0x10/0x10 [ 520.432025][ T5486] netif_change_flags+0xe8/0x1a0 [ 520.437001][ T5486] dev_change_flags+0x130/0x260 [ 520.441880][ T5486] devinet_ioctl+0x9f2/0x1b30 [ 520.446592][ T5486] ? __pfx_devinet_ioctl+0x10/0x10 [ 520.451734][ T5486] ? get_user_ifreq+0x12b/0x180 [ 520.456638][ T5486] inet_ioctl+0x42a/0x560 [ 520.461005][ T5486] ? __pfx_inet_ioctl+0x10/0x10 [ 520.465884][ T5486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 520.470933][ T5486] sock_do_ioctl+0x101/0x320 [ 520.475550][ T5486] ? __pfx_sock_do_ioctl+0x10/0x10 [ 520.480686][ T5486] sock_ioctl+0x5c6/0x7f0 [ 520.485046][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 520.489922][ T5486] ? fd_install+0x306/0x3d0 [ 520.494448][ T5486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 520.499417][ T5486] ? __pfx_sock_ioctl+0x10/0x10 [ 520.504289][ T5486] __se_sys_ioctl+0xfc/0x170 [ 520.508902][ T5486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.514991][ T5486] do_syscall_64+0x15f/0xf80 [ 520.519609][ T5486] ? trace_irq_disable+0x3b/0x140 [ 520.524655][ T5486] ? clear_bhb_loop+0x40/0x90 [ 520.529365][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.535275][ T5486] RIP: 0033:0x7f8f1afde378 [ 520.539726][ T5486] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 520.559352][ T5486] RSP: 002b:00007fffe86b60d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.567789][ T5486] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00007f8f1afde378 [ 520.575779][ T5486] RDX: 00007fffe86c62d0 RSI: 0000000000008914 RDI: 0000000000000011 [ 520.583766][ T5486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 520.591755][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe86d6470 [ 520.599743][ T5486] R13: 00007f8f1aede708 R14: 0000000000000028 R15: 0000000000008914 [ 520.607742][ T5486] [ 520.611392][ T5486] Kernel Offset: disabled [ 520.615726][ T5486] Rebooting in 86400 seconds..