last executing test programs: 8.831171439s ago: executing program 3 (id=2883): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000100)={0x0, 0x689, [0x32c0, 0x1, 0xfffffffffffffffe, 0x7fffffff, 0x5, 0xf9]}) getsockopt(r0, 0x7, 0x1f8c, &(0x7f0000000140)=""/80, &(0x7f00000001c0)=0x50) getsockopt(r0, 0x2, 0x9c, &(0x7f0000000200), &(0x7f0000000240)) r3 = accept4(r0, 0x0, &(0x7f0000000280), 0x800) recvmmsg(r3, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/183, 0xb7}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/134, 0x86}], 0x5, &(0x7f0000000680)=""/89, 0x59}, 0x10}, {{&(0x7f0000000700)=@qipcrtr, 0x80, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/221, 0xdd}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/254, 0xfe}, {&(0x7f0000002a40)=""/159, 0x9f}, {&(0x7f0000002b00)=""/139, 0x8b}, {&(0x7f0000002bc0)=""/181, 0xb5}], 0x8, &(0x7f0000002d00)=""/55, 0x37}, 0x100}, {{&(0x7f0000002d40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/239, 0xef}, {&(0x7f0000003ec0)=""/242, 0xf2}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/31, 0x1f}, {&(0x7f0000005000)=""/130, 0x82}, {&(0x7f00000050c0)=""/76, 0x4c}, {&(0x7f0000005140)=""/79, 0x4f}], 0x8}, 0x6}, {{&(0x7f0000005240)=@qipcrtr, 0x80, &(0x7f0000005580)=[{&(0x7f00000052c0)=""/39, 0x27}, {&(0x7f0000005300)=""/14, 0xe}, {&(0x7f0000005340)=""/166, 0xa6}, {&(0x7f0000005400)=""/106, 0x6a}, {&(0x7f0000005480)=""/99, 0x63}, {&(0x7f0000005500)=""/127, 0x7f}], 0x6, &(0x7f0000005600)=""/151, 0x97}, 0x9c9a}, {{&(0x7f00000056c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000006900)=[{&(0x7f0000005740)=""/119, 0x77}, {&(0x7f00000057c0)=""/4096, 0x1000}, {&(0x7f00000067c0)=""/64, 0x40}, {&(0x7f0000006800)=""/57, 0x39}, {&(0x7f0000006840)=""/89, 0x59}, {&(0x7f00000068c0)}], 0x6}, 0x3}, {{&(0x7f0000006980)=@ethernet, 0x80, &(0x7f0000006e00)=[{&(0x7f0000006a00)=""/33, 0x21}, {&(0x7f0000006a40)=""/195, 0xc3}, {&(0x7f0000006b40)=""/197, 0xc5}, {&(0x7f0000006c40)=""/245, 0xf5}, {&(0x7f0000006d40)=""/171, 0xab}], 0x5}, 0x7fba}, {{&(0x7f0000006e80)=@hci, 0x80, &(0x7f0000007240)=[{&(0x7f0000006f00)=""/35, 0x23}, {&(0x7f0000006f40)=""/101, 0x65}, {&(0x7f0000006fc0)=""/238, 0xee}, {&(0x7f00000070c0)=""/184, 0xb8}, {&(0x7f0000007180)=""/21, 0x15}, {&(0x7f00000071c0)=""/69, 0x45}], 0x6, &(0x7f00000072c0)=""/141, 0x8d}, 0x405}], 0x7, 0x81, &(0x7f0000007540)={0x77359400}) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000007580)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000075c0)=""/4096, &(0x7f00000085c0)=0x1000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000008600)={0x73, 0xc, 0x8000, 0x8175, 0xc1, 0x5, 0x5, 0x963f}, 0x20) ioctl$int_in(r4, 0x5452, &(0x7f0000008640)=0xfffffffffffffff9) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000008680)='ns/time\x00') ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000008700)={0xffffffffffffffff, 0x30, [0x6, 0xff, 0x8, 0xffffffffffffffff], &(0x7f00000086c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008780), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000088c0)={&(0x7f0000008740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000008880)={&(0x7f00000087c0)={0x8c, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x20004891) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008900)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000008940)={0xffffffffffffffff, r1, 0x25, 0x9, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000008980)=r8, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000089c0)={0x0, 0x5, 0x5e}, &(0x7f0000008a00)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000008a80)={r9, 0x1c, &(0x7f0000008a40)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff}]}, &(0x7f0000008ac0)=0x10) write$tun(0xffffffffffffffff, &(0x7f0000008b00)={@void, @void, @mpls={[{0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xaacf}], @generic="291d23df2116d0c5e0b089a3a100d57dd333e5719560144ade2d8936656d56ba6975d7bef8434116556b7130fc0e9774aaf4dc5645ff044a483ebb69b59777dce31d36cde5dbae62e7a2c22413caaa728adc4ada0ab32bd95b116f06fa48052ce9f8a8d43b03fb896aaf3ec5af8a4faa9aa1cbd59ffa3c28787728f4df1ddd747b689047d98a2b2d"}}, 0x94) recvmsg$can_raw(r3, &(0x7f0000008f80)={&(0x7f0000008bc0)=@tipc, 0x80, &(0x7f0000008e80)=[{&(0x7f0000008c40)=""/117, 0x75}, {&(0x7f0000008cc0)=""/183, 0xb7}, {&(0x7f0000008d80)=""/198, 0xc6}], 0x3, &(0x7f0000008ec0)=""/140, 0x8c}, 0x40000123) close(r7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000008fc0)=0x4, 0x4) recvmmsg(r7, &(0x7f000000b500)=[{{&(0x7f0000009000)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f000000b440)=[{&(0x7f0000009080)=""/4096, 0x1000}, {&(0x7f000000a080)=""/238, 0xee}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/242, 0xf2}, {&(0x7f000000b280)=""/247, 0xf7}, {&(0x7f000000b380)=""/138, 0x8a}], 0x6, &(0x7f000000b4c0)}, 0xcf0b}], 0x1, 0x40000000, &(0x7f000000b540)={0x77359400}) r10 = accept4$inet(r3, &(0x7f000000b580), &(0x7f000000b5c0)=0x10, 0x800) setsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f000000b600)={@loopback, @loopback, @remote}, 0xc) r11 = accept4$inet6(r3, &(0x7f000000b640)={0xa, 0x0, 0x0, @private0}, &(0x7f000000b680)=0x1c, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f000000b6c0)={'wlan1\x00'}) 8.643644806s ago: executing program 3 (id=2886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8001) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0xb, 0x0, @loopback, @remote, 0x40, 0x7800, 0x2, 0x6}}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)={0x3a0, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x360, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "f6e27643a5adecefd87c99099961db1ea930b629338adb07d57126cc7cc4e52ab42b4fb7e4f4973a58778a7b928b8437c3e0f7fcc369f3ec731262bc3fd6c5f4e8891dd4a8580d9556160cd6ec6277f9854ff27156246060ef053c46060f4584c9216d1a1d0880d6c57c5d2ad686008e9211e7cfe8cad0d63693314d8cd6c5cc159c701a38b6ab93287bb789ab4f9fa99f580e9a8010d2e7a4a5ba6eb25b4d8d2f84b22b4e983ebd364042ab8dd30fe3e1a77a58122eed81b4234a86a10c1a42ea48056775566720b55454c95f7650d47ff4a3e63d421a60abf3096d"}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfcf9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb59}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-\xd2\x00[{[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '#,+^\\S:](]\xa1&\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$%-}\xfd\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}]}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '(#/\\+,*\'%/!(\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ']]/]%+*(!&{-#^\\\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%^]$\\%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\xa1+*([/(@%#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',^*].'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\\^-&:-%\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '3&\xb4\xb8\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',+-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcec4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-[@[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000044c0)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000006c0)="dc1ebb99fee91bcf598c1df5c823004c5ce740885d91760f45fd440d5a1927fe34582424e5020b145a3a2055d41918bba24349f1b98c400be199417827475a5bc370ea18527fee1d64f6869d2bbd5fce1b45626f3ee96cb450d8e34c178eaa051b7d574b30673d27941923bdc0abb23538b4607f54682f4eb5933af1d960fb77d39d729b135d92c067cc94e7c1a22668fc81a2fb74c4639a923613e94d8e2b3f6cb7d7b74641ea4aedc8d085ff21262c2be971b12cf4ec6a3fe58cbcb7797c19e4f887d2f0802240618da62b9831915213046f8d315c9a2802c4", 0xda}, {&(0x7f00000007c0)="578817844ea110fd4986d414a6728859de00fb3e47225deb5ef1b70fcc9786afcb499b831f14223ace34381774f3e20ceb5267c331315ba70371f4e155d4d6f2b947a44172219b8d150aa9a288318710638850e8b502f5f8fb87a9e0b9672c193fd70c853597b16443b282ff23278c0c8e61eabb6330757341cee65399c1d521681f188931fd1d12441c4a760507d20d31f4c7f03dc329f715148168175100cdb7fbb3eaaf99207fd86c1dad9f35e9d6b5ff2c33bedec584339858759a0f9c", 0xbf}, {&(0x7f0000000880)="dad9bd395d831de115094c0a32e59ce41591f403405b2d2c88565db1d08d24864dfee3a852c2dfa532d8982de8ea98b97940cf6d11eaa46b6a310fcc779548c169def047bde19b065e94a2b589dac68ac62375aec8135e2bb53365e9ab06abc5a805266f07d8bb58cef9f9e240468c8565307163173da8f2e3717afaf9c5137bc8a0e35448a27b1d8f69775f66cbf2dd8906e969bec9aaf58d5a3a32b7", 0x9d}, {&(0x7f0000000940)="2fe5b0c25c710e528759c94591642b15b9e1252222c9429131e881266ebab3693d0977fd2e5e8e102772718e89f822b57bffcab95baf88546148ba1361eb3530291f1561a92c032a6fbc896d251ae5739df633a153adbfe44eb6ef17", 0x5c}], 0x4, &(0x7f0000000a00)=[@op={0x18}, @iv={0x88, 0x117, 0x2, 0x72, "50fd4efb373b5a37c6b9203b2c7847efd132eded9921c190a1ff92e93f33a89954c1a27a1b717c3f59bf025e63fcbbf12d5bc5138a0649e50f8c16b36a816f7c64d236c5f78e1abbb1bdea80ebbb8245359995a78b02170505f67dfb2cf409fea9187d03eae9cc2cd8f19176d79bfbc42597"}, @assoc={0x18, 0x117, 0x4, 0x401}], 0xb8, 0x30000004}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000ac0)="0f7186a53ca41f535f711ebd540962d8a7fa6708507f0934cdc28c9575cf9b76070daeba63c66154f14ff55daec698d8f5485df1fe7ba9a6dc6332590d1b2c6f3bd2a431d082f27c474880423fc6f6ed21654771ba32f6ea794224c5738518df220a5aa4b4ac0a2824b68765f2f2f8d28de505975f41e371de7b23eb921ccc27cd9349721259a49610d159a4794f50ea1e593ebc633a4837f4bfa753b557923d56133749bd1abdd9f37be82877f2446e9c7fe3d5270edbfafbfc61bc4912434bf478efb407d4da6c4662d086", 0xcc}, {&(0x7f0000000bc0)="7b23dd6ed9635b3fe59fd9719efc1a96ea803b88213686ff762ed4780e527ad6d43ac9997aa1f7fe30e16e9f32733ce639cbc92df903ca19643c903adbedc0437f14cd5221ab9b38c208e84be4471b2dd786700dc63305b26f1e78c9385a1dd5c2e50fe6691331c05a36319582e213f70a3c0c8505e3e1ed23a0d62945d4d6bb0fc48475204f5fec69db", 0x8a}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="30f7c5ce12bae96e726e1712119e4aa6a727a137fab32b97303d92d6fdee8840a2ec614dddefbc0e26d101176edb5087bac6187c8f", 0x35}], 0x4, &(0x7f0000001d00)=[@op={0x18}, @iv={0xf0, 0x117, 0x2, 0xd8, "1ecd2b58df00724b79272739f21d5495b76e5930f18403ac3b1632de5ffd312d3bfa29f7ef5db3e9666562b88ae645b0b47e74e3aec876ee0c6034cfa782faec9268a0e8bb51a909e6cb4ab022846498059c7c98bdc81aa76f24495dd3863c0a804d65b4000e9f03f05bf534fd1d4820b9760514fb45d5d49be0309ae515a4cfc91d9ffa4997c1bbb9952cdbe8bf487964d5d1e9c3396c0d3e764872ee495c8bfc53696e53dab06637849fa2b116290887806507313275e47da025e758a1b062fbea542186fc0a40cdd8bc72062268d7b9879ddb5134866e"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xcf, "05dce6e751fd9e0597c71fb301059dbdc358337eedf67e9cec31bd8ee92a7a78043a31b0ea61875dc86767c559e1ddb06f1e6044807d7daa998295759ba05b5c5bdc7a947c8566262798d841ffaabe93901acf9e506691d9f338cacbdfa0f871961e26897509715a64ff0cdad4d4020e0b146218fe2af90f8a4884eefe503f1339a3c3f8339bf8f9d6baa5a7060d8885c0e600747f2717c79b1bae375846beaf8904e1cfc939fcb4664aa822d66c785a214c57f15434f9848de55ca306b1b26512535a9124e2e0b640ae20b02442c4"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x238, 0x44000}, {0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001f40)="8121e5a5cd7dcd271c3641eaccfaeac184b84dc9ae4cb4a92ab1625b971cb5a959627a638860fd34a6a20bc3b8463076b569a02e", 0x34}, {&(0x7f0000001f80)="398f70a438fbfbf59ad833e243081d42bce9fb634d9a6211a8954160e6ba747e170da835ec72ff69ebf018b195a713e6460384fc147448a81d9664b96ed53088ea607ff168ac8d0d75b7abf54f38a62f27b237ae9ab637c3bb6a3410545acc50ac21db366d421871757237b281770b52e6f78293d3b57c3748340f099904a4383ac47fe9deefd133107d2dfdd3381d9df6732efde88f97", 0x97}, {&(0x7f0000002040)="149b194fa5d1580bc2", 0x9}, {&(0x7f0000002080)="42fd3ddf50d8967e276b49b8018eec185a3f8a", 0x13}], 0x4, &(0x7f0000002100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8080}, {0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002140)="96057908cc71ce44b44fcf62527f", 0xe}], 0x1, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000004440)=[{&(0x7f00000021c0)="7b1ae429b16d942d0eff824b1ed089c2e7d0abec51d2bc8931f90b791692f697ad3a0943e0c527a0c010d6ac692e71da177858ca9ca9cda5b8d35084d3976c52756dfdd2eddcdc56d19545113ea786d84eb9013d10e1a3b54bdf6ae36672e6aeb45e836c6fdbce45adb9b27055a30caa61e96983386320a72cec685f8417bf2183d29cd6ad3caa011c403b7beec0951b0ef4cd271d1866af41d4fc27503be35e6fcce74b99af", 0xa6}, {&(0x7f0000002280)="df4f882e56630d03b6f7c9b2d9150f8d9154865e98089a8b082175ed23a7df631f25da333d3b0dc828d4c694ce667f835bc58720b45338610a80311200bfe60d2b83335cefe261fa2807170baccd468e7de99b3a074068b6190a7456f75b7cbe3d91c790685d40346176872f6220f940625a147001b03f0396f05b119496f2e258c1c87471aef4802ba3fb91c585ba671ce2d58be462f3fcfd1e264769d1eadbf9be1d7fbe58f10ac336ab1ea186060733f0dc2df350df3bc91c899d0d15495857a2232996e89c17548c33", 0xcb}, {&(0x7f0000002380)="5eb652f1ae6c4b3ee4de442d71a07b200aa28f3a03c196bf5463e4b9564a2b54b8a9512cae7b58ac8634c089743a035e69343ee87170f95879c2283abd7c2199c44bbd47fc163bcb1bb8f805306fe200c8463b2c0bbe225373ce9c5c7c413ed0c9bb9a8d68f2a4b2ae447aaa4cd1e7b55e01162f7b0457fc87476aa484d64b3b8466f60973058fff608ff8fc4034a9a341748c6678337a2f497d51325a19274f663f8172a40a8ea53d910cf7f4af9bacd8facf4e726faf8c001a8da2e49272e1da75a1358a930ed1bb4d60de090a27cafec2348eb119403432554e7da9086906c324b135f1813b64d40befece719b2ce95068a7f0fadb6b638afe6b66d5b5a96464364d0b9b6202d96d721986cf992a6d46e8dff5bdddd26555d360fc91b6e21d8def2140d9a2ee935c160b6a6332682254dee626b550130fb3f35fd9956deb9aa499e214fe456a70cd84595a9984a67477dfe2d9da022e52d05217c3e9390892db5af9ab0227d44d7466a7209b9ec3fec09f6167b2888c0c1a211a1c8643797f732fe3e80b6e7b56c532fb63d333a170763b67f37ca699c031687c1ae194ab830d2c913c4113b14bb529fc7207ec107b386655ba6e2469b6e6665d28bc3161a2f34c0566e27c2e8ee0b9bbfb5e55259ee06f9d491797570cbe35577e9b6d76e597cabd0c8b859a9eb4b5fc3d4a164e6c501b678c559de7c993581771c4a39ab0ff7609ff0105ef6bacea042c701f14d799f042c452b6414aec17a1c29327e4c0ef151628a4040d022537b5d5633ec59fcd19c1094cbf31ff3f9f80bd547ba2c89593ecb905fa6e16bc45cbf9ba76b281101ecc24be6ccf3bf616578ffb0aca91e996fad9ae9de07c37232931dbab39a2cbcefb25c47e2d1a7bcffc0bc350da4e83d36a591d3d40ff4812b86dccbc3a1cb351b6fae790f6177958eec325fcdfe62c4abb29573968454fc1cb730911a13fe6bfed4d1e665aee357ae1b095e4e8bc24e14cd4e4a95f4e0e910b1a47378741b46633b5ac623492f59b01f960020d6bfe50f6cda2079d6ffc4df95ac925918e3e5e2240443e8a3273d7eb9ddfcf1ca2547745b8253ff1c0da52c7626b7f712a6de45d30e9f9d5e11487084d53ae3ccc31ad58ec054fc1f620f9f842651fc7d0e427f027bcb75722671d12566c03aaf7ead068e91cf30c72be3e6df2488164f3214d94d784715de91527aca1bf63eb26b75d2a5786b1462cbe0fad27192568018ab98cb8a770f3464fa81fcae8cdb8b781fd1fd4c8b3017930773a5f4e3b733f2d7a0a1fa9204cf4e2a7fc5dcba846dea6a576b5305201c39bd2a38857dc7147c61f24852b759c38a76785a4bc01a47c8ad06aff64e2a3df44dcab8d4f59d3b94b9648ff5d70b5696f28ad916dc0a6fa71984e3f2427b909d5f0fee53d017283a7664463643bc7cec86858eaff74b89ebacf8a6353f58a3f5c6049f379f03a4518ba31a3ec8ef6e827378b8393cd226466734b4fad0878b6aac0725692893d1d2bcef660836c4c703b787893afebf56f9ba1348bbd57460bd8534a5c7caa600b13425cce8704bc9fcad5a022a5e34254693b3c95ed63ecfac319442cc0d43b7526fa218d0dd80c32445fd2304f0de6571690e230bcb483187e058d82f9be5d75d152f65c93fab24118b1348edae0f418d30a23000a0746f94abe91a6d48e2966fd62ca25120f9df7d9e362ae83126e5aeeb0f8c3231be1d36bc0a9615fe5b4604b86063f7d920d1f9f40e86eee2998678ca5ef663cae600d8c27866a4d97dd5a5c289325d01a4f3252b4c414d21cf7aece528f9bacdc81179083db61fc90b4af5ea81ca8c9bee3bfba4e20dfd862ac6f36558f265d3bcd05793241c2bb2b0ed6daaa28f7a1e1ab7e41acc9e268aff53b7e228c987810cc38be24d341c9317a33cdcde178ba3789c9d3c3f12a2b895cc472590a820e78c596f282380ba2170db038c66c169fc3550171db56a7cafda06d227fe626cccfde2d2c4ca2374006deda8f16c8aee813d6ea25905be98694b638564a3c035f907d607f76a37d104fd4255667e1b78167e05c10f750511abfb4e0c427ba50d6683c4c07770a8bc3fb23f9147b69a0441652318b8b8b822f08ad465d5b5adef28f0b3d86c9a0269a5168c5d196c5989679a352a5788552129476740fc2edd377d1dddb15064d1be14354bdcde2d7bb113905388f26388773a11d3f8fc9a7818b7d8e388c55cb7029bc1be7f57f54ec9702953c2e16c3af836225807f18e95d2f6afb717f308206e3db239c91b285f0d44fef8491170fc2b671d034f35831457e3466e62a2db77b1a55de657ea3fce7010550ecce7e15dbc8c48b74238416192f187a0fc1f431f921081acc2c18e069930940099594d0422345667a7bb39285f63e1fbf4d7ffcc893e6afc98ab308b3081c3038362f99596052944d60930ddf2b6e62b365652421254634dbdae5a4c828d29a709bd9b75999aa423a9a06ac2654c73ed037091e85407c8e7e9943b7eed9a4c023eebb588b179e7a3bc004a6dfafdd72fe11472f59e04c0b63e6c9e80fe305d9b7ce87a4d02e5fae437eb6a5fac6f30c70f93887887d280158b585f91513888d1d8974c4b999c213a89de4e5819b07001153b481114760cc71b9123eb9676ead4e3633556413eb89e1ef115e32cd656780087c790c636b112edd1ff0faf461e421245afd9fddb6b504cafdca4a12ce0aca2f1040d0f6d7ab561e5c8bc7faca96cbbc9bd69a99163388feb8b1588a5f320e2e68d6a983ad8934486d3c4cbd8ff7f3734e9a1851f0ab12129535173bdda322ca7e2b4b607e02dd03dca9ad92706fd48ecc0cef1ec5b3575bc11c7187f6ffb6cd3e1107507874d14152a5943a2bb1546092f29529f6b4e4c8c557078f47154f9a923868cafbc3d0a3b1bc2837902983e561983a09952ccf9ba11ace681f51d12ed91368cb4248c2bee856ea112924880c84bab6812a6e6eb40054fb942eb603e7299b5f1b0297f53f637d7c0b3e59b599e916a3b5bdd4cc4496f5b69b3549b254834f46b7789947d4c6dc6f6bd29de6a630f3ecad70aa90e884917c7872aa7076ffcb274bf9aeba841fea614cb80a28e0e2cfd4332c582a6f07a9bb32e64c05fc4e92ca75cca2c53b84b995a879e3d3153e3b9d1b53d27c8c79a2ba81247622113ab9a47e206629b60f8c461c9cba61a0d049f40febe2266129e5d8b61c8031d8c0b52de72991ef604c3aaf8ad7f0955b9d80345cc6f2f084e3e8abd259db0ed46d6b868bc9b04f97d1886f23bf8f5b6f33eb98cb6f393463b180d796aa438ee90992bd803e7107a5406933a0f29fedaae622ad131d8ce2c96b0eabb14ff96b811b09fb331fa907b27bff3e906442a4cf4fa4b2fd854e57f9e6332d497e3c6afcb932f6efb111bb963c96d8cc64ed1849f9536d9665bc17fe8ac193526853972f3dc97114bed95026e199a504f59023e53ba964f96f923c9f69a175685cd96ded71f407350fae013cadb10119d034823951a2b6a5ffbe91e699b786fb0ff9fc4f9e4aaf083c82bf9c7d74a71c75459a8d1eca976b2335211780599f141766e971e1b140cbbb320082ece1e0935cd83cddaf5b5e442aa280a821a4b50eccd62f0e323703d1d5fb3b5dc130963bda5d5e4d6e75bd7736dbd2d4dce8b43cc6e249c99a7f4c06ce3c4d011d6f1357f67ed24ae5f8b1834395dcc8c1b1e13aa0b96d2bbbed831597eede356f0f48d772a469fe73a023f1e7f461dd09837e75a5b3dd36f7b87faec165f209a61e7abd630211dc94f33c9c0c70ad6cb0fafef81e361be15d622ebfef287af04574d2bc86e0501bd9e44a9b831d9d608bdd3dd3cb09875d809ac4678154d1a01cd5bcb3c2026346f415a9b509dbe29822645c366392890578986a2f4f378358b2f9136998f6a03d438ae82fa2dd7b342df9ed29b6e5cc9a4846069109edb940f1e1a6571e4047cc31b5e46d13d5a1082ca814d6ef52c47b7069d11af6ffee0561b74d3ef29ffb6d49df5267b45287a5008bb1caa20c7e890702e3eded5091d25112f540f738932a138e8f37f8f4ad66e6e6152fd83857a30013efdb15330618f3713cc93b3604fabbf03a5a088873b22e0ad1a2a27178c75a0a3bfdb2378c335578a73df4f12301229073ded7f5c9a39a8da51500f1fb2b7f52837b1d0425fdc5f4abe1980be0f213fa753c4cc1e1d60ef12612b5e2716b25d5175a348ac0095fba7da2167fc8d6f2339849b5e94eb7d33a2f3ae03d0f2c79faf56ad6c5621f3f0b30b1237bdc8258e63ecfdb57360e1a565b8bbd2015ddf6c49f96f903046cddd2fed2c9eadaf843bd3f6633467d12e27759f3207c3dc9c038eaf41b25025ec93db1e51b618c162e270fc0c988d677bce8b24d28eeef89a7e8d78efa63eef519b79827104c898d43ae7e17130e78123bf0271ca7d0aa84db544a3a79f9779a48d78971f81505f70e5e580a8d95db27bdb88ff99f5a444731cfd2105533e644e2b446bbf000bed73d178172c9850c691c19a56e104ecabd807ea7421b24f6e702bde59b93d34ce11420d5c710e9cce7afb72f4caaf5379cef97100d2b1b0750e557c898c71fe0f51b49d70f4e9657d99cde201355f3a6c08f71e259afa7f2f4c65de7923cf209a42fb68701db8422131a2e035ef73f5d29e487a62df846578b82fd12d26c0d4bffb2315012b49663803a0ba6c9dc51385b930824c0cb04e699f89f2b1c0593c321ef69fdf4cffdcd34b315741587a47704be88464f085ce19970c0424b33d92c230480088a6c65981ceef6d15f1cdcd6d1c35a3f77f4cc4f7a03d247456cff9cec3acfc16e001b01a4326dbe68c4cc907660df794efa7bab4cdf0ae772998ab78e1694378662dce8f6c0a48ee8b86e89c5ea20f56ec36b676d8c115a9ca6a378de3c0fa69036b88bedcd27ddbdd3eb864cf5040beafa1702c068ec705a82bfffe39d29f12895aedd256bc6fa7b1a3fe74aff47378936dad9bd42340c251478f4d960f350ca5f795b8d727b72e884382d78f6a33194060171f807b61f9b5ae831712469b3e2efea2c567ca91fc8c4ed7861d4d99b94ad749fc33aa7adcd39a5283a9f2b51daaa09ccc9c417da0b4914c03d1cd4d4c4ca221cfc3fe3d697915426dffaed5821a63e6afbffcc4c0f7b59a712e7a427018d60c265efedd9ab39f7d52a8f02c062ce71ef31e15dd577c19ac95d2525b3dc830269cad1f452c9ca50e2bead70a032d7d0f358258148106179045f76ee2321ea51c202ae68db9f2541fbdd645838186d4b7d935da33e026d41284422863a1099be42d4c54699d5d2d9e2849b5d0e9980d54ec078e8e60fa4d6f731b36f3a466c7be3cfe9a272ea7bd917245280ba010e4343e5c6f7a21c73ef26754818456bef56506e3b581706cbc11941a9dc6a427dd2f911af3702ba90928511183466ef0df73b01be4541d6d8b5e283bbabe8ea3b055e2c916acaf3b0e075a7ac818501729cfe9327bbaa16fd52b8eff3a3e6a048fc45372a3342ddd6fe8e1b57a10b4077fdb9ede902aeb80cb749695447c6db97f0e10c7186b7b5fc62536822b3d38b77a50bd7d10c69eb1b84cca8c7132a83da50372ce04619da6e41659146e3cfa88fb97a642877dc8be98dac18ef8f788f97826eb0f98fb7f87c0c23cf37a3d03cd4bcb58175a4f89b020a3d6313e3e43a3b9b52753273bf6ea26350535404ac09052c122dcb505b7f9a6c550dc5eae5ad134572b464789b3b59059f014557ef8d6c75a0c007218448cfecbd6274eeb87c247b3", 0x1000}, {&(0x7f0000003380)="915eaf2420e0e45a5c764698093520e1f81856a8086123b096cfc8deb2ca6d8a8b05c06cff0e1daf3351fc504c2a0609d9fef7cb5b9d6aafd4bd47ade2a710e9aa43e4f2adbbf932537ecb1bae45cfd39deadb6086fb2751b93fb2aa4543696f8c", 0x61}, {&(0x7f0000003400)="5191e32ffdc645037b42bb41f53e15b149ce283848e7d95347edfffab07b2ffebc1e98d9be7f4b5e74c7710b6edab3e9511507e9f1565e6fab56a30747747d5809093bd0690f5e069f84eaed32af1e04136b2c1f8069eaec3ee96ef5b2cba35cb676298d7c0773ca5562479953d79bf9511fdd3f44773ea087447bf0370ccf8aecbdbfbe91cdffee548211d4007b08d44e303698d605cc8ea090e633533f199f820efe8bf0f423a774009643ffee8c4e4c6a95b543f4849a8410c3ae41f366c61b23971754fc97871bb16494b933c252de4436294f4335308fa899802ba03cea32b01eee0693b2adb3c65c915a16fff586c758c0d77b5cfaadc8383fff46f303b2977f6ec0aa1f265b6027bd8dfa4298808c4ca1bda1779ae6455968f1304d1c0bc49740886011a83d7968ba9b20505a8dbb58d644c20e0fb2e66ba5384b499ccb0690189ef9d63a0d8ae7cdf3c83ff2ee9f4db73e228e6d16669d56689176433a9696695837e43aaabcfa34936483f02742e85c35b9ac773d2367a836fabcb252668e193acd73d546cacbf8b9f5a4aa4b7bb5b6478a4525da641a0c53873cca1041aa739ba45198e7b8ea36bd035fbd76b44d3dce94aed8cfc827d239e915c15482abe076d34645bc60c6c9663b9a2b17f88245712630eeb262f8ee486fc41c42f299b422260a903c8f1bb1c5b89e08c05afe0976c8da66ef8c27eef00a3b20d66b21b4361d13652fcda9305856eefc64d548153d8888d1f0c8ebb2c34e6641a69e3b7ff3b9f1c3c5ec4f3366e8fba9b975736bfdcf0df44f4e6212fd8012fe1686eeac550fdebd5582ba088f13abcf97f258495750a31c7d76f974842d209184d2ce4b7e83260ab0d2a892957d42bf1262cedf51318b2b28a9b6aab0c262400ebf1ca6db8118213fae2fd582e9e40dc85a4f7f70993c1e2cead1126c374daeb3874c1ec6a690e5aac5514dbc718b50353d612add8690908255ad9d0160601533a041c944425e043b16617ba9d5e267e031c2f057b474ce893751fdd536c586e9d7b6131371158570c436f86a5043124c788b70baefb5ab2023c36ef1de582117bfe5effe996f4f6686cf27dd7c58888b6c2064a9bbb89876f37beb24be1d0a20fbed9c11d410a382555da5e686a04585ddc78bc329ea816c5e6d7bd3a3d32e59d8647afeb07cc1baace0bc29fd7599c56e46c628b10a8b858dc1ba4f83165d67166118f37677fe7ca534876ec7c6a01dd0748bedf51e0c500a3a9ac3e2994e84a9a3563f63dac8a4906452cb011deffb67956169e991ca07ab536720cb86af145872ed7847d34aa813b7c4dbac293c4d013f8a415514a74c481bb9de32b5c6e6cca7ba62c1c03b4c7c8a4001855087581bfc7783f1ba9c28a2be9875668735cd6e4bfcbdcb89bb99552f0af37ae010019f8efd9d5997efe98bd18980a61b5454f6ec26140b879c630b598072509bced664fcb484ac723e178d580910f23dad0b364c9638f00074f83dbce227beea3402a2415fc342c3c3057a43a514aaa2e3381f91e9b1ceb926118710323472ac938858e2da42d9166c4de29ad0c6651e4c04e7237de33b1739582fbd1a113d7f7b33af2c9ea17c4867c76858f7d5d5086d3e59506745deb9e4f8a03da083be8b53c4f815a1254d57291607a261d3deff3375ea14eb7147a6e64cc2b3e37bcc9b1da26ca1ca3e1c6351c0a2873cf2fb3dae0f1b4dbd0d675fc479f4dbb03621f2c729b4abf8ecedede9e403273a0363c55f4675c2d7f89b12f94a5778408259734f8f1deebc96fae9b6a56a689c42412894984dbd54a42e3e42b53ad88dfb0cf65092b621c9aca59b0af111a85be0d366cf6e182e41f6e3b0ad54790802def3591edfcd26a44aacbe8aac4a3b9218ec44d40bb9b554d0d8c733873c73adf658bdef5bc3904cd8667ada4ad4f601118c94c3536e47e073b2287cf21d09784c1feda9b8254bcc389cd38e2cd41be1d92e489f77204c3d73b11fcabd240d3e7d751b8e4a06e4139030602542651b104456ece42c28721451a20e11d6f7c3cc5f4877c4a2bcb03c9c7bd22c730e7c0266922a023403859540b51be0f6f429f603b99c5a7e83a73ab32c74b0ceb38f9e92d06f7670cc0aeb5cc6b691794956f33b2053c1c7dcd72bc18a661aa49ebf990c080888a7020a67036a4491c95d2f43496c7d7595d7d7ffa9b8d68a8bd0f4b7bfb0d2dc1d3970838a6de0e7867b51aae0315bbeea6b8fb132b07fd85013117e686629278d2acae46fd46758e0dc542e0cf8fd467399b653ad68c8b0be59c6f45411ac11e547eaa5576003dde5a3546952ad5b6a274f22cc8de5f13f0a4a27196b8acdf9df05bc84bc3910cccbe9b6429fc4624a42b8800f7f3675254501ca21e8205953aedcef95e24a5671ad53984f83f0ea753c0e02b5ed680f5cf371c78a317d957cabc5399478b4b42b5c31298e40e60d5db160a22611891de2494eecfecc0c26dab3cfebed196c106c500c54125d1e24336e866d3038b3f0cd981cab29d13a54c9abdbc748726870b3dc58813a65a726abf549cc498467bc04345099223e861a8d91e395e567097c507f66802bd8b177fb91c8325d717756c5ebaeb6540ea691a134ac43884c45aac930c85394d7dcb5b9447ce760de588a0dc34879976f358c959331ee5b82ecaa7deb97e6c1014b623ec80611964bf26af5ee8eff353cb87cca82559119af3d9346b9134d050dc5a9acc606a906317bc4bd16077bce2ee4986e03f80d50e8466afd61b9afc079a610b4163e28c8fc5c24a145a355a9dc17b33de484ef756815e50179fde914aa1f264da1f79272304c42e1ff771302bc8885847efd9e15d83054db07568d6974e79a71e198e27b1d7a9253d26c1d99684903515ce19abfd346c5c6c45ce80a7149fff6855c1864c34595e3c1595be8cc8fa95aae7ade0dff9f47b2f95d479ddbdae19910381d4812dbba4b040f0513fc4828e8c89bb38f232709d00e41a1f2746167597e0bd80412b25f4f68ef615f9ce0645dbb4fe3eacb22ea546af28cc203edab226c6b3098135977354edf4ea672d4287f78398a9c042bdaf1714038e066977767351106c3c92e16e359cb91b56b36ec36d791ea19db99d3a4996b3588c72c2a0b08ba4cbbb9b1f7295627ae04d126b8f5fc00e37f28003a0a449a0ca8563781db8d07507c5b5955ef4ca016559f771806535d7c4eab41180ecab5bab3c71fd2c83dfe0d1e4c4d5699dcd178768acd3a494dd12ec4c674eb3fa76bbca08952be405f5e968727e2a2b9388ce71a8807c5abbcbff090197870f114ebe79ccedaed5bbb50a0ef961c829001e55c13a902b59568fb2537b522480a5759216232207c966e36cceb4213f5a2ecb96a732cc92a133446544a6d83653ca8e92ac707c28b59a68898675187271ea50415ca481e7a3c06015197a290a9f79ccf0a2758eacfb947ab96fb145bf1c59f27944686f839ac14789a530974f846acac5f699121f030b3bef1c97166a696ed1202a4bd53c1be3cf615cea7632fe2c03de9af4f336580fc0e972f7292f5299844cf4961d30203311e2000baee9f0e0399a6241a4824df0dfc64adca6ffe2f154684e9975f8dd6c04a4ff664b64bb8538c92f21c9a82518776992b21eb1531e2fc1498b73d90a3c44fd4fe9d0ce31cb622a09139af5567a24e3121dc5c5a706928eea324545e6b595a667820eaf889e78f4fd1fa4473972d4b7743b147761a7774f289ab3572d87809f59f3208dab9ffd5c4dcbc2cbfb06f4cab18900266279503d2f656b01d3ad3859697079939217ceca1f1a52ab78b75244a64725cdbad06a1e3077080d39855fb3ab9221e2b0007411909a8ee51b8b8ec7dad0668c360360e0cfb49f67fab7f96a9bcec5cba108979d4069269762d2a6d8f28271e997dc20fe35b8478b3deb986aa9c5a4d836669d02436e0d93a371538e2ea2ed0d2f9da944e125b067ffb70f81540479e14979a4bce4b15c26a95900c0508a85ce0a1df02906419d4907f526bf6c22b5bf55acbefa56bd039191daa15cb3058f2fc30bdcd773f0952b6a8c41f9ddd62f46a242523dbb5c2f71c9b6a6778b2c67684d45b5f05da9e358dc1685b103eb79d871d8533157cdc6a75d1370e901d81d5c21346e6ef4ce381d77c6f5fdcc49100f47b137d9fa0d1430cd98b73752db489293b06d9ff4bf35bbf20869b5bff86ba67330627031528ed1741ce21e77dcd18c018ba71b446d3d30186fe0c37ea306ca56b4a60d513bed54f263418fefb44137b5f159f441d240ca67c2f7b0531b8d115354dcd363c465432fb894f81bff74c13238efe17aa2e1a854eb0b08beb5e26177ea539fde0344b3732ba62c187a6ed3501aa9df08c9ed680a78ca6dbac6cd73fa0dfc9b2e0977e558c8de99a685421848d9e9a38063ed23d4a3cca16851ef701ffc964f291882d32c3a429cd684c6124806ba90d721450cedce6ba5ddd68112fd861ed5222742186153701863129ccce6a1a9acccdba6d0d3a210b0d2d2a65f27835e77829fb38e87acba180b920eb705da30120c4f52faf6633f1ec9517ac1211cb56aafa9067f2ed6bfede0d47fdd5dea8f9b1af4a9ac68f4bc4c01a85a8d2c0ed7e4d7072938370d2aa24c7ed97943b6f1c572bc4db1023abcaaf06947d35f84cb690e947dc971ba079df788d947e1bd730d4a6bc19ec87f6c409a4dd234c1a65a808bf987fd23d3b2d5e915422874d8db23547d6b3f7b6c9631fade461febf7b7ea482f51504aa151cce03cb065501afc32536584b5c0e133786f5b6d888ed5ec2d119df790a52821eb54556f1f1db9418764e980729a2bbba6a140661f9bfcb39f422347fe65ee9ebc2063948b30edbf1516bf605a0d8812dc3b28c1e279a59bf069c06d38bb850ec3b65202795af46ad27827cb2e0ad99687ee3ae8b1096817fb6e3bc11cb19cdaba3b20c9c816e71d03048301e295a487c3c95aacf1a5b11bd758e1ac06cfd9edbe242ef48bc18a7ddca31f24a0ff3d0af6eb5c7e113a7b80fbd286fd1b49b9720f7638fbeb93bd14c02844507fc1eb7fc796633f4c88543db45fc93d45bbaa8de41d7bd9d3b068c19eedb929a05d04972188efdf98dd1ad62c5f31d26d92bcec85e63c160c1135ebf9cc88e9c9233261a4d87d4e03ba2cfe6ff6b8a8a46e65e95f67e42cafc16eb756dff3364c8ba030d09146b6d70961491f9ab99cf3ae3057d4210023c62a35dbbc693f9b5277204c4982fdd78e992d88dd1e9ea4b922dc21c9618d310abc53592c6446f431dc78366725a5d21265e14393eafb0ae7585d767d1cb44d20b7b408ef1cb348aeeb1d32b880cc33b75e25bc3f3a569b634605ccfae6562793934f6dd8b2ffb28fb8d09ac090ca7e2c1f1ff2006c669dac4da9551688fa1383fb7a8d9d3b2571e37e78c83b60f10a2cf85917b4693ec37f4681c9509c06308d2707ff48a90965964a67f69f8c7808f5e2984da8a616e150bd87a6e3906269134fcee048e8ace2d4985f67ecef3e1f6580dcaefa9e3a526b732ac0692db1c53fc13d3a48dbc8576123dab683ad4a18ee561bef434067f05a203e8619f5e36f3bbfd4949d9cf5e91860347252a267201fbde22013ebca9fd5f3c8fd3c76335337a9956fdc32a34475aa56549114df15bfe098806aba5be79969fe538abc94c4efdba778b87d6b7da513140417bd72c3d91d7b535b0264a1ae9d79d9631c255774a50d3ad2feaaa098fb58e1f813a84891392f4fc7a910286e04c7a44122a333d92079e26a283784a885e", 0x1000}, {&(0x7f0000004400)="161ab1cfc0365fbd90c4233805923035c3ac91104056c1c476b115913de4592bb4907e64e42ef482a5510257038261abe80f3ca7", 0x34}], 0x6, 0x0, 0x0, 0xc0}], 0x5, 0x2000c001) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x20, 0x3fa, 0x8, 0x70bd2d, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000004740), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x3c, r5, 0x0, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008880}, 0xc0000) r6 = socket(0xf, 0x80000, 0xfd1b) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f0000004840)={0x2c, 0x1, r2, 0x3c, r7}, 0x10) sendmsg$tipc(r6, &(0x7f0000005d00)={&(0x7f0000004880)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x10, &(0x7f0000005bc0)=[{&(0x7f00000048c0)="606025df09610438e6d1cea255583379a9377bf587b12414b5c086d0051a4b050f3ddcab5d515aae07162f8cc0b36dee990c243fbdb3d39a996ae2df41e04946a26ff3106edd8de9b777ef4085a9ee0d12eec5c7b8d921753068e2fc4f31deb3fc85e4ad891bfa4d4d820bf2ba2f5c264094b22cf4057cd9a9c47f0f6d03f0d13771a73bae1cc16498fc43b5d8601fa1d0cb6090e29c9be47129b04a3ad74ed0", 0xa0}, {&(0x7f0000004980)="6bbf339b5fb5ebbe49151331c7b48d2d821f10a041ec0cb77bfde244ff4e750b048a72a262dd92704971471933331137bd9b040d8ecd4317405ca7563c4b2704ad980aa5c1b6a2905cd8cdcdc8908fbfdfcf9bb26108937608e72741836f22a85498", 0x62}, {&(0x7f0000004a00)="1fa98310c2768568171176b71ceebb30ed764f3387844cb61efa3ad2f80912d0fcc5fd2ed50c6a5682bbbbe587e53b7eafef506879cc5e9aebf58fed2062a0b6f84a0614089badbd358d11377f9d03faaf875cc87f73c28e2ea3cff682d3c6616ca245776ecadeae799d0abb99fe1ceaeaa446cf5b1a3e991d36cd6f81c0ab04c530f895690bc2ba9e8fadd8c105f81c00dc6d19ff58b589ef", 0x99}, {&(0x7f0000004ac0)="491df9623889172334b9cd54ae6a8596046d22e876eca8a45b628368e95a7eebd9ce93f2bf009c9869915d0ca929e798f226a7697218d17a6c4fedb04c694d6f0f6d2846e31973668881619725204752104bf6443102fd2c0219aaa31bc27e8f3f95b091daf1b9a317364f6c748ad57d60c919c3931ecaf77cc6c0ec9645f7eda529817abd1a40028d493d7134eb46ca33a8968023c7962bd5fb1980cbd92b1383b3d6b443e916424a40acbd1f0888fa4484be9ea9f8cc26d8ad3c0d1e5a6d1b9983d6eacc7e29b221b3ec6bc6a99956a8a6e87b22f3724b91b9d0edeb5548670cf3ad230119310782c808d7a541768a22555a456fa80f3975b252652a91a01bb54eeeb094f01cf2c3ee65c877b54cff676b9329ca1a856654136cc9d993180eb1ffba6f6b82de62d3b788c4fd9b8673f155a83db73f0f0a9c5a62957e506495b5b38b4065b5cda9da8cf1bd7cacfa300cab519a6f9463ad3ed751c296888b0785acaaac30f04b123f34e15e3149459ea0e0d79c9e916cb7855c359ee1808e60ef032bf65603673c3f95f9f3fece0292f1b2b74ebdd55a9ca9e48588983898dfd4d86a4c22b3246ef8a3c3aa108bb9fbaf3515de47baf1fe698cc41be0c75c21f8cb1ede472c098e9d5e16531f95128a0954b3c3611bb1b1366e690b65007b9260ba76e5401f214857fb1053a8a73ad04d48725d125182abd4e163f3cd352f97ecc30b529075bc18d5227087f33bc91fb8b9499e37f1b99c66857c936b46acced22ecd00cc1092f33132c1e666e34eb10dcee9a514b2523a7c1250a6faca0a08339d5a6d6dafd479155e1400252b29269aaed08b1cd2cecd029015e143c23b444d050d892387b797660b2b002d1b1e9074a7952199d895a675c39ccab9af351e6c34d2979c3a29d648e269dfc7c9198086976c9e0f277ed38c2c46465d4b3d12001af99a68313ce31e0b7baba9df8aa92aca1d9c4e20e02788a247df6c8e1bf8915fc6efd0015d0934b9f838a6b544bdea128eb1fc122485545e4bac981682b7b38bce71dda11e3ffa73df9df6abcaae3af63b99acd64af743717cdc2dd4bbbe8424fcb6462993ccec809f82fb562f731bab61b44b5c9c95c5112f8fe2605662a28ea3151c61a3da4f53f1433d059c5475bba9f0f33f5b24ad0220ad3baf4b5ba5bbf2eabe45b9d50284eaf6e771542d5d8ee2ca157de9492c68c43e92c546de75895e657b39c592bb67588c9690c1a3afe12fd8a4a9ee0babd3d50594452acf902f1600a3783b695dfe8799653f22267414718ad6ac44c630ab78e7302c5ece3411d7d153ddd0595f7deac2f3577b49bd51b5692fcbdf7abb6fce113335e61056d5774d8d9a321f5b69017828b12cbcd868fc65813cb9e2656a57dab9351534c11609e4b5644f631b4e51497b9ba9746a6ada8c46383ec82380fc77d68f8a9e87a4435e4dd045439a071b8d67e6d06af3990244703727fd59b09b7f495877283e398aa9e154ea39f3db644e25f4ea60b656520431ce12d948b95e5643b997fd0eeba0ea0f1587b320be55c855768099a31718053c40f18db66578b72b170841f069e0723fd295bf6c9defb77a5be4ff98bf27955634d62b1738fbc4d2425f94d17de1fce8369d203e6cb93ce9e2f6389e7ad42ab2f5b2b77baea48263704756c4cf82df3aab255a2445ac9d135952f97c049df4a422aad3e9745e2e852e9cc94fcbdbd8f0e6624585e770fb2d51c65bb7ebf611262240a8e3f834ba275dd099f0abff999fab1302c5ce491fa3d2b59ccc2eb4180c3438db906194af94b8ada98e630542bd821c5cd49e2ba5576139b569a441927e2df7cee5e1e6871b83df61caba89d345cd415cb752e942358e16623acdeb86bb06d93e983e88fd65a7ac9eeb85c730a5500d0c4d285654020e68d1f34a854cc15a0dcb249d9a829d103404bd9fcd5e2ed00ddd0d56e7740d5b8a23ec521d2bcedb685bd09c2cd218d0be868e3bd444f7f90f267e087c38ca6f96d4507b6dd53b445a4b225e1af5ec353d9cf3906593706ccab53c65a48cf3b79ea5e4a699985d24f552c2e8843e625a38c783db6a192e6ab4663a4201f5be47d14caa7fa37f82def20e195bec04405721568bceeb9a89618c9ea76b929afa4a8444ae6136d645e47143ae3db6794b02a1e9aea30008f5dd8d98597a24870710026afa43cd340d9cfdd7cba2b05edb3d718f8ae1f1ce2cb14d5338e7590e38483fb8cac61f0a0fffb0a6c60f2da2774bc3d77844b2a0eb0a69f58de98803980e1b1708c5110e69e318308c499f2ce48dadef7636a8d31d079da7d23f2a02696d7b289dc0e33e9656cd678da9d531cd8483c95d77fbff7fb9155c3735eb51c7033175dde040061209d357dfdd5fbff2616ca5c0f0657debc3f77b0978276f6b6ccee0b40b95a1d461fa811ab51dcfa3fbf98f0ec519d96bf3e361efb2a0fe9a465ad086ab71c04e0496cc9f3607d3381ddca2c98b7b8cb51ffe307ad297d6e6378fbfd05ff89e903c18074c4bedf50b42a04814304170816b3e96885adbcad39efc1eee4c98a42aa0b0770db8a8a9b5a3da5235d61cbd1b70e283be3b9dddb0a199287a81f218f16c59314b6ca1816c08e12f64c95fbfb522027674102ed1752de88f062d5cbed423e6f95721991dbc46b7aa7a0e08cf91853feccfb8eff68d1d421693b7c9270115d58389b8c7458548cf46e32693290bd7b285b976ec0bc0e3e7be9748feb60559f8ad9bbf3350f973a11cfaa510e5562016207f353161ce5a335ff0453d27d8f88e1c18a3fac47fa0718b80816ac471e23f08d702292a2a2e1fe6e12cf0e8b4d34eb4fd1b84b8cf58cde80c5bef68ba5d2a14d51b6fd143cef22c1e3761b6d0106a218e94c7840b24d3835035f3690b5af1556df0d7e0ada9e785eeadc99e9576bd017f0c993d240b657ff95865c60fdf06ebba0ead67f087ef84d1d9559f9c0d7efbdeab40de34d1f724f6661b7b797d0a019cdd069bcbf04d8f919a9fa5a32666b0b42b8a79d3161796330635529c61bb3f747ba8a02dbfb1b2ee4843156c8e5d0b8e7f17ca34feaccdf78586f5d84e680d6ae2c7ff8dc501990c0331a329bc7d7894e619635683bb5f0249e8e9c16f4e859723c3cb5e158aaae20cb479c96f51a36a1f6216ef7b49aa9699185b2e759f615b42a56431fbc90e4b64c0001a3f49cdb2ad34f7afaef77c5ddd2c70a1ca2f85e9e86d4bbc00cdabc84c6202718db509f234db6133af74b21c84b54c79c88b7399b50433f1d905878ee5d7c7ca06dc0b0a8ac07bdca638f64a0886349178d7acb41f0b33847edbec2a6a19b3cba5aba521c1e2e585cd2ab9104c650bbf9b3ef9ce76812615c491c884ef05abb89185574c89d311de6c3862c0d30a2111e2bdee0a8ff55d17cf3405e2cbab60f24cd9c9f71d255e440711e6880b055e864e111c472c5cc76cce27274eea9d7761327fb4790c6333086ff565636cc2e6c52b32f289c2b78e913e13c18d5f08bd0da769a6a631407f1215bf05b8eadc45ff095b205b5a16f0333291dd615fc0197003f9281a23882bac0141ac35df8dcbd7ccc403439eb8f4db966d8ec55b9432ca9978ca451c3866bf5d1dc850d832b92288ad353f2396a9bc660f65f85aab8d4408e4a417947a83d462658509f9aa49aa0a0eb40e34b5eba9fb8c1a223bf03b08e02cd5c838d8da8b5266e7481ad2d311f5ba81c1919325b477f948f07103361b2abdcd8e96fa8d4be947e1fe77581006a9e7f347246a81bbc5f227108971a097cee43cfba3cd1a687d4f2e5e4891ba3ff93793d7a58415e6338ce3c0ddaaa26c044af0c8870a919964f21e8d6a6616f56c331c9280a82f2456fe86ff0312660d2cdbe71d133c8ba4a8d546c7c2b1a41fc8e6de214fd16d3ec3c8ad4dfc0048d45d15eaa073254beee0ff8963e8559968d911640be12215f0ad9a4eb06682b788544559e95c020f7896f670d8ae4455a1191e0fee08e8977b4a08ffd40452fb28732b1854a13a85240510a6fe10b5da02e36940e6bdf8ac7f9d71b1eac9f9c489f3d7c061422b649aa178eaf74eac9106386516bd358494db59fd2f33ab1c4461c6ffacb59cf3c7d4292915cca5be7dffa79e568292c9ec665070d6c7d63f2316e2b5f17d089f4728f4bb3c2f96be02186f7b985b07d75298436a799977fc5c5fea9f5955b98a0ae310ec9c3026e8693daafd18664aae20562a2c760e93161ea87ac380a66592869c5db8be590a242348ca1ae6761370545bd9adb8117323a4f1f892defb46ae157550aa50b9535a8697e67a5c17fd3a911916074e74005fb6cbe88d8a706f152b85e613fdbb724d48e2bb47ce1ba1eb934d8b5883cfe16b51fd0bbfc4412e88faad3b50c0eab14a5205849487726b916db8b6e37206be2a25ddfc0c84636ee8a5adc04aa6907795d0904df61b5f1a3707fb072f3d458c80762a7e03ab33f69c44f2f8214e0866643fcc0ffb3fd04c45af2de38e217078320285e34bb5eafd169e4eccd67acf711fe92d2596c32632f44943b40ede781fd2c7e3454443d034e263a5ff2bb3946b4b0d52196b60ebe9df3f81dc59dc0e335c0493fa778cae61d7f9099d0c2bee67a41cc78f6d0ba511e64d4c8e84c848cbaabcf22c07168a442dd8d2aa080c00a32d629d288b6983805c944901336a2e63f5c78be1d642e4228ed4f50c3595b8da175423ff051f0b199e3a81836d1200cdd85a74bea265e1582c903b22d1204681868a1ae4e9e014139cc7bd75e99ebdebf91eaf1a6f34fa97b6804db740465a5b5793feef6017668684d952470efa0d122e1e25d5a7e0776229af9df17708eb8ae2228f488ef1b41b8d178efaf8f6525a618db3f82750e00ad269b43e898c32255235e6ef243272e2a9953cbf7dc044c935a8dd05e6f80652978eeabb9f062c24b1d8ff485c027955c9bdbca32e5f5fb0b0acd351c521fcdeb0b368abf22682ccb05bac3151fa1e784e3d4a7a74d4012d8abbff7d81eb1445580e4207cab45f06cec32b6ec4621d6196c61c3d24a184fdff8c4c3c82e1230d8b3fa5359e639017cd337289fa3d8c9242e5ff22824328cef8c0cfe780ab859da03a973a42c71c24f120258fa4197851ac8769e9dae29369257783acc2e527c228111768c5a2f118719005297786313528d0975505b447ba12237b8c79d1877cb209c06545c96d5a5a11d96da3c28163f5763af67447e956dbdf2e4e0dcf1f3c163a53dfbbe3a79dad6711487f99bb72778a2098b18f4b5d4a3031f37388a15b87565587660d38d99ac6f6d42046123d5992951af8e493ad9adb5702f48ff8159abcb6def137c5c4f07cbbcf90956e418dde97f7cd629eb5cf363ff8e73bf734179c0920f444462117b8e09641a71e088e9bc350e542d432cdb10870b1959700c43bc548f0b80dcf0a52a5b89c6dca024d0c1bff12ad97ed1b612eea15a99f638b4b830c4e70abccebc0503df225bc6cebecc91b028a92c7e1e44d2ca52e5da5297e3272f5db85c0cbc2a00f164566835772134bd2f406e7dffd72dc6c5ba8c0091edccdeabe8e5f0f352380ac85ea25b6348d2d78459746b5cfcf7bd2841aaef331990b16bbc870e1f6c3182f22e2bb03d4af3c7d78cea1bb5d82817d793172f3c54260de0ceba2f0491f920bd90e2535da9d6482732067f7c09c9db598a83bedf6830c23e36e75d02a24e5f4a8ab862d28b6aed544922751a474e31f719f41ab421c21830087f1eab525632b5a1ea1ca535c87e0380d7bc9f5bec78e47f9b5967856635712", 0x1000}, {&(0x7f0000005ac0)="cdfa64722beb60bd81df", 0xa}, {&(0x7f0000005b00)="69bd7cdea46bda994c7ab5b5b80e25957a4748c89380e53422eda1d6c6f7e04f9e3587ea3dd129066a157b2df494d06291608a0c52118fc38ff46b46bc56137ad8854d18fe23f03953f1c3fda7b2af63", 0x50}, {&(0x7f0000005b80)="52866c1af8eeeba609405f10138d871fde1ca32c31238a604d6ecf", 0x1b}], 0x7, &(0x7f0000005c40)="67db5e73954bd6c7355d1b74eeaa24eee765a285fe56e50bcd1b3c75de6f904031c086f907afaf5a438b1a481425c6fdc66cd699639255c12ff540e22eefcd7b78d12d406036fb9eb227edf8540d3a4a54ff7932b414e4c1c0800872927ce13f8e63ecf47cdbe417cbcbdaceb1ce5dd2221ca899ebccb6a6f720dac2941912a742c0cade0da08552", 0x88, 0x8000}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000005e00)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d80)=@gettclass={0x24, 0x2a, 0x80, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0x0, 0xfff1}, {0x10, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c00}, 0x20000890) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005e80)={'syztnl1\x00', r2, 0x700, 0x20, 0x8, 0x7, {{0x27, 0x4, 0x1, 0xb, 0x9c, 0x67, 0x0, 0xff, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@cipso={0x86, 0xd, 0x0, [{0x7, 0x7, "dd34f156b6"}]}, @rr={0x7, 0x1f, 0x69, [@broadcast, @multicast2, @rand_addr=0x64010101, @remote, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}]}, @ssrr={0x89, 0x2b, 0xa9, [@private=0xa010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @remote, @remote, @multicast1]}, @generic={0x88, 0x3, 'N'}, @cipso={0x86, 0x2e, 0x2, [{0x1, 0x6, "aed80a64"}, {0x1, 0x10, "9d04d2e69bf47ca14f5d230bec19"}, {0x5, 0x12, "dea09938baf1db1246c8bb21e1c178b3"}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000006000)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x38, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000006040), 0x800, 0x0) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000006080)=r2) accept4$alg(r6, 0x0, 0x0, 0x80000) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000060c0)={0x0, @in6={{0xa, 0x4e20, 0x80000001, @mcast2, 0x7fffffff}}, 0x0, 0x4f2, 0xc75, 0xe, 0x2}, &(0x7f0000006180)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000061c0)={r10, 0x80, 0xb, 0x9, 0x3, 0x8, 0xff, 0x6, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x4, 0x6, 0x9, 0x69d}}, &(0x7f0000006280)=0xb0) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000006680)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006640)={&(0x7f0000006300)={0x304, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_WOL_MODES={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '-:!3&\xb0\\:@)&}@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdae6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pimreg1\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd3, 0x4, "ec5c8cb78621305e18450dcf5fcd26bf175e6ff95516758a006a8dba00fca8d18690377a17fe758fbd9ae28c41fe873790d2d26b97598f88d078b045138254c539bdb0a303b201a4389f9839312414f110072b1cafc1283c39162d146a1dc933c71ee523fc0ae17f7cb6ac0f9aefe952b3a50c246abe4e46354668c9084630aeb71ff0bc3f9b6e2d4d8ac78cbac08fbe55a9ecd7f512a2788ecc58c4838b10e3ac69ebeee217ac73461b5944d7967ff9a0d4d013c743990decfccc7bbfcd1eea0c5b41bb6aafe7e3b8d3e9cb46cd33"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "a30eb196a28448183ba218f0d09ca30ee251df13910873025c1d6117eb04940806adbd17fb983cfe68798fcfe0601947c83fc9f4f97d3efa0d206acf4bee5487bce975e4f82e53ff0fa39ab6b0c147ff96da101c81090c3d85bc0116d628b63b0f025c43617dacb6d378be4725f5e62507e017622879af04292349620bde6f82814a0cfe841bfb7b06c4798d8959f0e950bb7312826f4cd059df1d1a063ac70baa86031b6f9201c1d33828bc56c5d3ac58c77b9c9613ebd2a038f703ce3c838917a5"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_WOL_SOPASS={0xca, 0x3, "5048d46af6277f503fc083e1a07861d4d74272e31e77b7f1e3ef7da58fef107bf5df474d37697c6489a4d6058f20299eb70119e5fe992aa21f7fc1ef66dd3f1a2d2fd8fee2a65f9982711e81a1503494e7683fdd641c00fd16e534e7c2b07a5668f726a3e30d4c091edb9818aa8adb126e9ed7ce64c9723261a7ffb7852c46cb3b2d655567bbd83169e117938879d02f85031073fedec1e854e5f610af863136eccbdf5d30603e55d7cc73efdf00d034883b8e6fda3e3da840616b6e7e7012f090c5e31a435a"}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006700), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r11, &(0x7f0000006800)={&(0x7f00000066c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000067c0)={&(0x7f0000006740)={0x50, r12, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x26}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xb}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000050) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000006840)={{0x5, 0x1}, 0x100, './file0\x00'}) bind$can_raw(r6, &(0x7f0000006980), 0x10) 8.315542925s ago: executing program 3 (id=2892): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x37fa, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) socket(0x2, 0x80805, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) recvmmsg(r4, &(0x7f0000003f40), 0x0, 0x100, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 8.091157576s ago: executing program 3 (id=2897): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="0b000000c58f9809c8d8bb3862a1cacf41ad2fc94c76166730496d3cf7e862de51c34235c15a254210b9e7cbc791904598338d00aad0bb7487ac0402cf8e22fbcf74b3b56c4b", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf25040000004c000280080004000000000006000f00d2580000080003000200000008000800090000000800030004000000080009000b00000006000f000001000005000d000100000005000d0000000000280001800800080007000000140003002001000000000000000000000000000108000b0073697000"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) recvmsg$qrtr(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r5}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="0b000000c58f9809c8d8bb3862a1cacf41ad2fc94c76166730496d3cf7e862de51c34235c15a254210b9e7cbc791904598338d00aad0bb7487ac0402cf8e22fbcf74b3b56c4b", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf25040000004c000280080004000000000006000f00d2580000080003000200000008000800090000000800030004000000080009000b00000006000f000001000005000d000100000005000d0000000000280001800800080007000000140003002001000000000000000000000000000108000b0073697000"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) (async) recvmsg$qrtr(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) ppoll(&(0x7f0000000240)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) (async) 7.812983858s ago: executing program 3 (id=2901): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x5, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[], 0x120}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff}, 0x20) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r7, 0x8b32, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r6, @ANYRES64=r4, @ANYRES16=r4, @ANYRESDEC=r3], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.411325322s ago: executing program 3 (id=2908): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newsa={0xfc, 0x10, 0x401, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {}, {0x0, 0x0, 0x2000}, {}, 0x70bd2a, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0xfc}}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0xd}, 0x4) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 2.784826778s ago: executing program 0 (id=2952): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1}, 0x4840) (async) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1}, 0x10000) (async, rerun: 32) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="30000000000000008400000001000000000009000b0000000000000080d57c000001000000", @ANYRES32=0x0], 0x30, 0x4040081}, 0x90f0) (rerun: 32) 2.275952966s ago: executing program 4 (id=2959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000100000000000000006110ac00000000009500000400000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.105315666s ago: executing program 1 (id=2961): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) (rerun: 32) r3 = accept4$netrom(r0, &(0x7f0000000240)={{0x3, @netrom}, [@default, @bcast, @remote, @rose, @remote, @remote, @remote, @default]}, &(0x7f0000000000)=0x48, 0x400) ioctl$sock_netrom_SIOCDELRT(r3, 0x8916, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x40000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 1.959694419s ago: executing program 4 (id=2963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0xe, 0x10}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) 1.803822806s ago: executing program 0 (id=2965): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x54bb17d996970fa6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0xf, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f37}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}]}, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x5, [{@multicast2}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0xf, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f37}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}]}, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x5, [{@multicast2}]}]}}}}}}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0xf1, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x3d, 0xe2d}}], 0x18}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 1.710033877s ago: executing program 1 (id=2966): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006195000000000000644e0e888dd612b80000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.669096887s ago: executing program 0 (id=2967): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) accept(r1, 0x0, &(0x7f0000000000)) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) 1.58697852s ago: executing program 4 (id=2968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2b, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r8 = socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x48, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1a1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004880}, 0x40001) (async) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) (async) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x1, 0xe}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) recvmmsg(r10, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x1, 0x11, 0x0) 1.456424689s ago: executing program 0 (id=2969): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.386646581s ago: executing program 1 (id=2971): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000100)=""/71, 0x47}, 0x63) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0}, 0x40) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 1.254186885s ago: executing program 4 (id=2972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x3, 0xff) sendto$inet(r2, &(0x7f00000002c0)="b401fcc8311bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x25, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x41000, 0x200}, [@IFLA_CARRIER={0x5}, @IFLA_GSO_MAX_SIZE={0x0, 0x29, 0x1723d}, @IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @sit={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x0, 0xd, 0xa}]}}}]}, 0x28}}, 0x40004004) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x12251, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20009080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) 1.208133723s ago: executing program 2 (id=2973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000040)=""/104, 0x68}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010022, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, r3, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d9ee80d9bbf5"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x48801) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000040)=""/104, 0x68}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010022, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, r3, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d9ee80d9bbf5"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x48801) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) (async) socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) 1.151695832s ago: executing program 0 (id=2974): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) listen(r1, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x1, {0x2, 0x18, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffd8c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000003080002401886c30128000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) close(r1) 1.149268738s ago: executing program 1 (id=2975): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000000)={@none, 0x8, 0x6, 0x9, 0x40, 0x7f, "7011c05f65cc5cefffe1d096caa6ffa76cc3079d3b8eb3746e11a1285fd5b1e0726e97ea00a83c9b6ff29ea842b83aa1feac5b342f679f544421dc6d15786c8fc474f8cf80dce516339de9f7433371656b68f5ba51a5b1d43b98fc8fc750f684934a2bbe775b43f576a9cc2898fdb73385bd793ef10d675c71bc394b8dad4e11"}) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010000", 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540070000090800014000000000080002"], 0xdc}}, 0x0) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r7, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xe}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r1], 0x1c}}, 0x0) 958.164265ms ago: executing program 2 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="100001800c000480"], 0x28}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @remote}, &(0x7f0000000140)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @dev}, &(0x7f0000000240)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x3, 0x4, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0x14, 0xa, 0x0, 0x0, [0x9, 0x6, 0x401, 0xfc]}, @generic={0x89, 0x3, "89"}]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x700, 0x40, 0x10, 0x7, {{0x38, 0x4, 0x3, 0x33, 0xe0, 0x68, 0x0, 0x5, 0x29, 0x0, @remote, @local, {[@timestamp={0x44, 0x2c, 0x7b, 0x0, 0x5, [0x9, 0x8, 0xfffffffa, 0x14000000, 0xe, 0xffff, 0x897f, 0x9, 0x1, 0x2]}, @lsrr={0x83, 0xb, 0x6, [@dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x21}]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x2, 0xe, "502251b0c18bf9b4cba1d0dd"}, {0x5, 0xf, "25351b6bfc0d0145d02a7c4ba0"}, {0x6, 0xb, "01581b1a6a83c70a89"}]}, @lsrr={0x83, 0x13, 0xc2, [@multicast2, @remote, @private=0xa010102, @empty]}, @timestamp={0x44, 0x20, 0x8f, 0x0, 0x8, [0x3ebe, 0x1, 0x8, 0x1, 0xc, 0x6, 0x9]}, @noop, @timestamp_prespec={0x44, 0xc, 0x9a, 0x3, 0x5, [{@rand_addr=0x64010100, 0x6a954acc}]}, @end, @timestamp_addr={0x44, 0x24, 0xc5, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@private=0xa010101, 0x1c}, {@remote, 0x6}, {@remote, 0x6}]}]}}}}}) (async, rerun: 32) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x2}, 0x0) (async) r16 = socket(0x10, 0x3, 0x0) r17 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b80)=@newqdisc={0x46c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x440, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6d, 0x2, 0xb069, 0x7, 0x4d, 0x3}, {0x8, 0x2, 0x7ff, 0x7f, 0xc5, 0x904f}, 0x6, 0x0, 0xda2}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1ca0}, @TCA_TBF_PTAB={0x404, 0x3, [0xae6b, 0x400, 0x2, 0x3, 0x5, 0x9, 0x1, 0x8, 0x10000, 0x7ff, 0x8, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0xca37, 0x0, 0x1, 0xd, 0xfffffff7, 0x800, 0x6, 0x8605, 0x0, 0x2, 0x5, 0x2, 0x1, 0xbba, 0x5, 0x5, 0x1, 0x7f, 0x9b6, 0x4, 0x1, 0x6, 0x0, 0x7, 0x35c0, 0x9, 0xc29, 0x88000000, 0x6, 0x0, 0x8, 0x8, 0x1, 0x100, 0x1, 0x4, 0x9, 0xffffffff, 0x7, 0x2a260000, 0x0, 0x100, 0x1, 0x3, 0x6, 0x9, 0x1, 0x5, 0x455, 0xfffffff3, 0xc, 0xffffffff, 0x7, 0x87e, 0x7, 0x8, 0xdbcf, 0xfffffff2, 0x1000, 0xffffffff, 0x5, 0x8001, 0x80000001, 0xd, 0x2, 0xb, 0x6, 0x5, 0x9ee, 0x5, 0x3b, 0xfffff9f7, 0x40, 0x6, 0xffff, 0x2, 0x1, 0x80, 0x2, 0x605b, 0x200, 0x32, 0xfff, 0xffc, 0x5, 0x6, 0x2, 0x2, 0xe8, 0x8, 0x5, 0x200, 0x8b1c, 0x0, 0x6, 0x80000000, 0x101, 0x101, 0x7, 0x9, 0xf5d, 0x10000, 0x3, 0x3, 0x6, 0x2, 0x7fffffff, 0x8, 0x5, 0x4, 0x8000, 0x50c8405d, 0xa5, 0x200, 0x0, 0x7, 0xfffff3a5, 0x200, 0x1000, 0x6, 0x7, 0x2, 0x2, 0x2, 0x5, 0x5, 0x0, 0x7, 0x4, 0x1, 0x73440151, 0xa698, 0x4, 0x4, 0x6, 0x4, 0x3, 0x5, 0x9a8f, 0x5, 0xfffffffe, 0x0, 0x1000, 0x32, 0x2, 0x3, 0x8, 0x5, 0x81, 0x6, 0x9, 0x3, 0x9, 0x200, 0x7, 0x4, 0x8, 0x36197b7, 0x8001, 0x6, 0x1, 0x2, 0x3, 0x1, 0x7, 0x4, 0x101, 0x9, 0x3, 0x7, 0x4, 0x3, 0x4, 0x3b4d, 0xed1, 0x200, 0x0, 0x1000, 0x100, 0x55, 0x81, 0x80000000, 0x7, 0x44, 0x9, 0x1, 0x20, 0xf, 0x9, 0x7, 0x3, 0x5d, 0x2, 0x7fff, 0x8, 0x9, 0x8, 0x62664108, 0x1ff, 0x800, 0x7ff, 0x2d71, 0x4, 0xf, 0x5, 0xcf8, 0x8, 0x7, 0xfffffffe, 0x6b, 0xcc87, 0x7, 0x0, 0xffff, 0xffffffb5, 0x7, 0x0, 0x2, 0x9, 0x5, 0x2, 0x4, 0x1, 0xb, 0xaf55, 0x0, 0x0, 0x800, 0x5a, 0x6, 0x1, 0x3, 0x0, 0xe15e, 0x4, 0x8, 0x5, 0xd, 0xd, 0x2]}, @TCA_TBF_BURST={0x8, 0x6, 0x4}]}}]}, 0x46c}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000ac0)={0x6e4, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10004}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x646f}}}]}}, {{0x8, 0x1, r11}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x49d3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 639.345213ms ago: executing program 2 (id=2977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002e40)="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", 0xff}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002e40)="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", 0xff}], 0x1}}], 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) (async) 526.364737ms ago: executing program 2 (id=2978): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@remote, @rose, @netrom, @remote, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000140)=0x48, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000180)=@rose={'rose', 0x0}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = epoll_create(0xffff) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x25, 0x200, 0x70bd2b, 0x25dfdbfe, {0x15}, [@typed={0x7, 0xcb, 0x0, 0x0, @str='-)\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x80000000, 0x80000000, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000440)={@private, @broadcast, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000005c0)={0x10000019}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000600)) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x0, 0x0, 0x0, @remote}]}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700), 0x4) r10 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r10, 0xf50f, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'bridge_slave_1\x00'}) ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000780)={'gre0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r5, 0x33, 0x0, 0x3, &(0x7f00000007c0), 0x0, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r9}, &(0x7f0000000900), &(0x7f0000000940)=r9}, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) setsockopt$packet_int(r9, 0x107, 0xd, &(0x7f0000000a00), 0x4) bind$xdp(r9, &(0x7f0000000a40)={0x2c, 0x9, r8, 0x1e, r5}, 0x10) 425.671001ms ago: executing program 1 (id=2979): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3a, &(0x7f0000000340)=0x2, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/215, 0xd7}], 0x4}, 0x3f16}], 0x1, 0x10, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001680)={'sit0\x00', &(0x7f0000001600)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x0, 0x9, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x39, 0x3, 0x3, [{@rand_addr=0x64010101, 0x7f}, {@empty, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @lsrr={0x83, 0x7, 0xf2, [@local]}, @ra={0x94, 0x4}]}}}}}) getuid() (async) r7 = getuid() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000009030000000000000000000700000008000540000000000c00048008000140000000040900010073797a30000000240002001400018008000100e000000208000200000000000c000280050001008400000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001840)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)=@migrate={0x118, 0x21, 0x400, 0x70bd2b, 0x25dfdbfd, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0xa5d5, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62, r6, r7}, 0x6e6bbf, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @replay_thresh={0x8, 0xb, 0x5}, @sec_ctx={0xaf, 0x8, {0xab, 0x8, 0x0, 0xe6, 0xa3, "a14113e6c9bad72ba2d7ea0a0f50bd4bfb9983c2c5857edd85ee82ffa50924abfa0ee522b3c0790b7bd328c7250bb887b091f0aaf57152b82f2d7473d281ba633e81f63be5b7e048daac0d83126262b8319c5147d1e628877dcd5a32ed2834e1cad08f428111f52ae3e8f23b04aff8d0dc58a19cf733c92132ca94337a831beab946aaf54f7acb3773e29d732f2c2fba4c4df113d1d1b4202e539332a1a08a098709e8"}}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004}, 0x880) 380.098755ms ago: executing program 4 (id=2980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbffa19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f020000", 0xf}, {&(0x7f0000000740)="849a231c93", 0x5}], 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0x40305839, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x110, r10, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x220}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "bbe5e873390922e6f3df9e820a86a5520c898d1c2184c913cb800e1534"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e82ddb10c78dcc568596882d45f666055c2038207bd2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010027bd70000000000007000000", @ANYRES32=r7, @ANYBLOB="80008e040afd2163c989dfd249d830f4"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) 303.530361ms ago: executing program 2 (id=2981): syz_emit_ethernet(0x26c, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000040000900fffffffffddbdf250200001a04001f000800018004001f80100004800400"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x3, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d45db24352fd6875313d9a7de85759f58b6d3335d4ff7169"}]]}, 0x54}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) 167.892753ms ago: executing program 1 (id=2982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x10}, @val={0x2, 0x4, 0xd61, 0x9, 0x4000, 0xad5}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={0xfe, 0x80, '\x00', 0x34}, @local, @local}}, 0x42) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 40.673301ms ago: executing program 0 (id=2983): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1000, 0x9d91}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e1406020000000a0e", 0x21}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}}], 0x1, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x100000, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448de, &(0x7f00000000c0)) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 40.21476ms ago: executing program 2 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x40040) 0s ago: executing program 4 (id=2985): r0 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x4048050) epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019580)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7204c0422aa16e3f"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xc8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x0, 0x11}, 0x94) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000017}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="7cffff00", @ANYRES16=r7, @ANYBLOB="000428bd7000ffdbdf251600000008000300", @ANYRES32=r6, @ANYBLOB="0c00990002000000160000000a00060008021100000100000a001a00ffffffffffff00000a000600ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a00060008021100000100000a001a000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 0401][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 132.824545][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 133.032252][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.055793][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.226422][ T7693] lo speed is unknown, defaulting to 1000 [ 133.268718][ T7693] lo speed is unknown, defaulting to 1000 [ 133.277935][ T7693] lo speed is unknown, defaulting to 1000 [ 133.279286][ T7701] siw: device registration error -23 [ 133.351709][ T7693] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.394773][ T7693] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 133.488171][ T7693] lo speed is unknown, defaulting to 1000 [ 133.552674][ T7693] lo speed is unknown, defaulting to 1000 [ 133.627826][ T7693] lo speed is unknown, defaulting to 1000 [ 133.683400][ T7693] lo speed is unknown, defaulting to 1000 [ 133.704780][ T7718] digital: digital_start_poll: Unknown protocol [ 133.710097][ T7693] lo speed is unknown, defaulting to 1000 [ 133.728120][ T7720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.834397][ T7727] sctp: [Deprecated]: syz.0.506 (pid 7727) Use of int in maxseg socket option. [ 133.834397][ T7727] Use struct sctp_assoc_value instead [ 134.371184][ T7761] tipc: Enabling of bearer rejected, media not registered [ 134.444569][ T7764] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 134.506313][ T7768] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 134.518401][ T7771] C: renamed from lo (while UP) [ 134.584283][ T7768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.601035][ T7768] gretap2: entered promiscuous mode [ 134.621419][ T7768] bond1: (slave gretap2): making interface the new active one [ 134.668345][ T7768] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 134.767851][ T7782] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.774442][ T7782] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.907054][ T7786] netlink: 'syz.4.521': attribute type 4 has an invalid length. [ 134.942549][ T7786] netlink: 'syz.4.521': attribute type 12 has an invalid length. [ 135.066959][ T7798] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 135.083154][ T7798] netlink: 'syz.3.524': attribute type 3 has an invalid length. [ 135.120649][ T7798] NCSI netlink: No device for ifindex 131080 [ 135.285893][ T7814] netlink: 'syz.3.528': attribute type 4 has an invalid length. [ 135.316659][ T7814] netlink: 'syz.3.528': attribute type 4 has an invalid length. [ 135.436726][ T7819] wireguard: wg2: Could not create IPv4 socket [ 135.554399][ T7828] __nla_validate_parse: 9 callbacks suppressed [ 135.554418][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 135.585093][ T30] audit: type=1804 audit(1756923407.092:6): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.533" name="/newroot/97/cgroup.controllers" dev="tmpfs" ino=510 res=1 errno=0 [ 135.631201][ T30] audit: type=1800 audit(1756923407.122:7): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.533" name="cgroup.controllers" dev="tmpfs" ino=510 res=0 errno=0 [ 136.022812][ T7835] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 136.038366][ T7835] bond3: (slave vcan1): Error -95 calling set_mac_address [ 136.585313][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 136.724331][ T7887] netdevsim netdevsim1 : renamed from netdevsim0 [ 136.887512][ T43] hid-generic 0005:16C0:05DF.0001: unknown main item tag 0x0 [ 136.984683][ T43] hid-generic 0005:16C0:05DF.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 137.126726][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.468262][ T7919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.685355][ T7932] sctp: [Deprecated]: syz.0.560 (pid 7932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.685355][ T7932] Use struct sctp_sack_info instead [ 138.048272][ T7945] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.563'. [ 138.072118][ T7944] syzkaller1: entered promiscuous mode [ 138.099041][ T7945] netlink: zone id is out of range [ 138.114637][ T7944] syzkaller1: entered allmulticast mode [ 138.122994][ T7945] netlink: zone id is out of range [ 138.133796][ T7945] netlink: zone id is out of range [ 138.139564][ T7945] netlink: zone id is out of range [ 138.144925][ T7945] netlink: get zone limit has 8 unknown bytes [ 138.344410][ T7965] syzkaller1: entered promiscuous mode [ 138.389831][ T7965] syzkaller1: entered allmulticast mode [ 138.432517][ T7973] xt_policy: too many policy elements [ 138.644679][ T7981] netlink: 'syz.0.575': attribute type 1 has an invalid length. [ 138.861293][ T7996] Driver unsupported XDP return value 0 on prog (id 123) dev N/A, expect packet loss! [ 138.876045][ T8000] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 138.895935][ T8002] team0: Device gtp0 is of different type [ 138.897864][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 139.186952][ T8015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.587'. [ 139.199519][ T8016] syz_tun: entered allmulticast mode [ 139.206260][ T8013] syz_tun: left allmulticast mode [ 139.236061][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 139.307674][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.590'. [ 139.403153][ T8021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.446212][ T8026] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 139.465632][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'. [ 139.514351][ T8021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.713408][ T8021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.782166][ T8052] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.822510][ T8056] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 139.933371][ T8021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.127822][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.162446][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.188198][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.243606][ T3478] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.476178][ T8087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.609'. [ 140.495492][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 140.524619][ T8087] validate_nla: 1 callbacks suppressed [ 140.524635][ T8087] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 140.748268][ T8099] C speed is unknown, defaulting to 1000 [ 140.767854][ T8101] __nla_validate_parse: 2 callbacks suppressed [ 140.767870][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 140.859101][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 141.014989][ T8116] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 141.053238][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 141.153916][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 141.215395][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.620'. [ 141.496183][ T8125] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 141.959707][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 142.328407][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 142.506464][ T8173] 8021q: VLANs not supported on ip6gre0 [ 142.572966][ T8176] netlink: 'syz.2.635': attribute type 10 has an invalid length. [ 142.581126][ T8174] netlink: 220 bytes leftover after parsing attributes in process `syz.1.632'. [ 142.726977][ T8185] netlink: 128 bytes leftover after parsing attributes in process `syz.4.634'. [ 142.758273][ T8185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.634'. [ 142.889216][ T8181] "syz.4.634" (8181) uses obsolete ecb(arc4) skcipher [ 143.062001][ T8190] netlink: 'syz.4.638': attribute type 21 has an invalid length. [ 143.070021][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.638'. [ 143.177048][ T8192] tipc: Started in network mode [ 143.192708][ T8192] tipc: Node identity 0a0fd6a88feb, cluster identity 4711 [ 143.249423][ T8192] tipc: Enabled bearer , priority 0 [ 143.327676][ T8192] tipc: Resetting bearer [ 143.351863][ T8192] tipc: Resetting bearer [ 143.476231][ T8191] tipc: Disabling bearer [ 143.545055][ T8205] tipc: Started in network mode [ 143.550916][ T8205] tipc: Node identity 9a729f252b3b, cluster identity 4711 [ 143.558448][ T8205] tipc: Enabled bearer , priority 0 [ 143.569793][ T8205] syzkaller0: entered promiscuous mode [ 143.598983][ T8205] syzkaller0: entered allmulticast mode [ 143.707001][ T8210] tipc: Resetting bearer [ 143.943982][ T8215] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 143.973025][ T8215] ipvlan1: entered promiscuous mode [ 143.982709][ T8215] ipvlan1: entered allmulticast mode [ 143.989705][ T8215] veth0_vlan: entered allmulticast mode [ 144.003524][ T8215] bridge0: port 3(ipvlan1) entered blocking state [ 144.019348][ T8215] bridge0: port 3(ipvlan1) entered disabled state [ 144.060174][ T8215] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 144.107448][ T8204] tipc: Resetting bearer [ 144.150011][ T8204] tipc: Disabling bearer [ 144.184216][ T8222] bridge1: entered allmulticast mode [ 144.207980][ T8230] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 144.512090][ T8245] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 144.582278][ T8245] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 144.622229][ T8247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.787938][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.800813][ T8257] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 145.092004][ T8245] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 145.160333][ T8245] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 145.187861][ T8245] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 145.329944][ T8278] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 145.742050][ T8303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.769832][ T8303] sctp: [Deprecated]: syz.3.676 (pid 8303) Use of int in maxseg socket option. [ 145.769832][ T8303] Use struct sctp_assoc_value instead [ 145.798412][ T8304] __nla_validate_parse: 8 callbacks suppressed [ 145.798431][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 145.813491][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 145.842965][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 145.898360][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 145.965318][ T8312] Bluetooth: MGMT ver 1.23 [ 145.979730][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 146.003126][ T8315] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 146.012466][ T8315] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 146.076473][ T8320] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 146.115867][ T8320] team0: Port device dummy0 added [ 146.286941][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.685'. [ 146.298504][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.685'. [ 146.339621][ T8342] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 146.347325][ T8342] netlink: 128 bytes leftover after parsing attributes in process `syz.2.686'. [ 146.360305][ T8342] netlink: 'syz.2.686': attribute type 2 has an invalid length. [ 146.368006][ T8342] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 146.445342][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 146.455582][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 147.810471][ T8414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 147.817024][ T8414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 147.851834][ T8415] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 147.858329][ T8415] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 148.212058][ T8439] delete_channel: no stack [ 148.366700][ T8445] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 148.823911][ T8453] syzkaller0: entered promiscuous mode [ 148.859916][ T8453] syzkaller0: entered allmulticast mode [ 149.423443][ T8484] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.123699][ T30] audit: type=1804 audit(1756923421.622:8): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.734" name="/newroot/147/cgroup.controllers" dev="tmpfs" ino=764 res=1 errno=0 [ 150.146382][ T30] audit: type=1800 audit(1756923421.632:9): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.734" name="cgroup.controllers" dev="tmpfs" ino=764 res=0 errno=0 [ 151.141768][ T8501] tipc: Started in network mode [ 151.146714][ T8501] tipc: Node identity aaaaaaaaaa3c, cluster identity 4711 [ 151.165395][ T8501] tipc: Enabled bearer , priority 18 [ 151.356662][ T8519] __nla_validate_parse: 17 callbacks suppressed [ 151.356685][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 151.545960][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 152.289789][ T9] tipc: Node number set to 9874090 [ 152.404087][ T8567] netlink: 'syz.3.742': attribute type 2 has an invalid length. [ 152.428430][ T8567] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.742'. [ 152.440619][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 152.441212][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 152.503446][ T8570] netlink: 184 bytes leftover after parsing attributes in process `syz.0.743'. [ 152.541130][ T8575] netlink: 'syz.1.745': attribute type 32 has an invalid length. [ 152.722530][ T8570] veth0_to_team: entered promiscuous mode [ 152.728380][ T8570] veth0_to_team: entered allmulticast mode [ 152.992433][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 153.717274][ T8630] netlink: 'syz.4.757': attribute type 2 has an invalid length. [ 153.787999][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.757'. [ 154.115313][ T8650] veth0_to_bond: entered allmulticast mode [ 154.207662][ T8645] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 154.517453][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 154.519493][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'. [ 154.602545][ T8666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.967756][ T8693] netlink: 'syz.1.774': attribute type 4 has an invalid length. [ 155.224314][ T8699] xfrm1: entered promiscuous mode [ 155.229673][ T8699] xfrm1: entered allmulticast mode [ 155.353555][ T8710] netlink: 'syz.0.778': attribute type 33 has an invalid length. [ 155.729947][ T8727] netlink: 'syz.3.783': attribute type 33 has an invalid length. [ 155.984766][ T8724] vlan2: entered promiscuous mode [ 155.997976][ T8724] vlan2: entered allmulticast mode [ 156.006881][ T8724] hsr_slave_1: entered allmulticast mode [ 156.169554][ T8746] bridge_slave_0: left allmulticast mode [ 156.202390][ T8746] bridge_slave_0: left promiscuous mode [ 156.220356][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.267395][ T8746] bridge_slave_1: left allmulticast mode [ 156.276870][ T8746] bridge_slave_1: left promiscuous mode [ 156.283599][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.315112][ T8746] team0: Port device team_slave_0 removed [ 156.330811][ T8746] team0: Port device team_slave_1 removed [ 156.338721][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.347726][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.368288][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.379955][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.408628][ T8746] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 156.537313][ T8771] nft_compat: unsupported protocol 0 [ 156.695096][ T8768] syzkaller0: entered promiscuous mode [ 156.721471][ T8768] syzkaller0: entered allmulticast mode [ 157.363237][ T8817] __nla_validate_parse: 9 callbacks suppressed [ 157.363258][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.804'. [ 157.469077][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 157.596697][ T5877] Bluetooth: hci4: link tx timeout [ 157.603133][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.612235][ T51] Bluetooth: hci4: link tx timeout [ 157.617593][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.767288][ T8824] tipc: Enabling of bearer rejected, failed to enable media [ 158.787538][ T8817] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 158.869804][ T8852] geneve2: entered promiscuous mode [ 158.894776][ T8852] geneve2: entered allmulticast mode [ 158.911163][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 158.935574][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 158.972251][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 159.038658][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 159.051855][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 159.076847][ T8865] netlink: 244 bytes leftover after parsing attributes in process `syz.1.810'. [ 159.122665][ T8852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.134347][ T8852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 159.280729][ T8852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.315454][ T8852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 159.473747][ T8852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.490071][ T8852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 159.514393][ T8895] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 159.527049][ T8895] netlink: 160200 bytes leftover after parsing attributes in process `syz.1.820'. [ 159.536461][ T8895] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 159.572013][ T8892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.660059][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 159.791036][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 159.804212][ T8852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.805225][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 159.822622][ T8852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 159.854663][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 159.898033][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 160.057347][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.068068][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.082394][ T8908] tipc: Enabled bearer , priority 0 [ 160.123962][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.133672][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.157777][ T8905] tipc: Resetting bearer [ 160.546187][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 160.555557][ T8934] netlink: 'syz.3.829': attribute type 12 has an invalid length. [ 160.563770][ T8934] netlink: 'syz.3.829': attribute type 11 has an invalid length. [ 161.159945][ T5929] tipc: Node number set to 4245130027 [ 161.437937][ T8905] tipc: Disabling bearer [ 161.463315][ T8932] lo: entered allmulticast mode [ 161.468355][ T8932] lo: left allmulticast mode [ 161.754856][ T8952] netlink: 'syz.3.836': attribute type 5 has an invalid length. [ 162.376874][ T8991] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 162.392305][ T8991] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 162.488042][ T9000] __nla_validate_parse: 6 callbacks suppressed [ 162.488062][ T9000] netlink: 52 bytes leftover after parsing attributes in process `syz.0.850'. [ 162.512738][ T9000] netlink: 52 bytes leftover after parsing attributes in process `syz.0.850'. [ 162.538216][ T9003] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 162.605642][ T9012] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 162.963490][ T9034] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.986749][ T9035] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 163.072061][ T9042] netlink: 'syz.3.865': attribute type 11 has an invalid length. [ 163.085240][ T9042] netlink: 224 bytes leftover after parsing attributes in process `syz.3.865'. [ 163.107346][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.866'. [ 163.122964][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 163.172267][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 163.303928][ T9052] netlink: 'syz.3.867': attribute type 1 has an invalid length. [ 163.326737][ T9056] netlink: 80 bytes leftover after parsing attributes in process `syz.1.868'. [ 163.426879][ T9052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.516893][ T9057] bond4: (slave geneve2): making interface the new active one [ 163.526095][ T9057] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 163.656035][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'. [ 163.660115][ T9068] sctp: [Deprecated]: syz.4.873 (pid 9068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.660115][ T9068] Use struct sctp_sack_info instead [ 163.666298][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'. [ 163.871032][ T9078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.909588][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'. [ 164.147865][ T9100] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 164.579264][ T9127] can: request_module (can-proto-0) failed. [ 164.619673][ T5877] Bluetooth: hci0: command tx timeout [ 165.014551][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 165.023386][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 165.041700][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 165.051261][ T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 165.066093][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 165.074613][ T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 165.096149][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 165.104852][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 165.601761][ T9163] 0{X功: left allmulticast mode [ 165.668386][ T9163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.083178][ T9194] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 166.114152][ T9196] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 166.236802][ T9199] netlink: 'syz.0.913': attribute type 39 has an invalid length. [ 166.442296][ T9211] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 166.475640][ T9] C speed is unknown, defaulting to 1000 [ 166.798470][ T9227] syz_tun: entered allmulticast mode [ 166.830913][ T9231] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 166.888406][ T9231] nbd: illegal input index 1048576 [ 167.281432][ T9258] team0: Device vti0 is of different type [ 167.775498][ T9284] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 167.838962][ T9284] __nla_validate_parse: 18 callbacks suppressed [ 167.838981][ T9284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.940'. [ 167.857025][ T9294] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 167.892186][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 167.906034][ T9282] netlink: 76 bytes leftover after parsing attributes in process `syz.3.938'. [ 168.243882][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 168.863662][ T9346] nbd: device at index 3 is going down [ 169.027941][ T9352] netlink: 'syz.1.953': attribute type 4 has an invalid length. [ 169.241875][ T9362] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 169.274869][ T9362] netlink: 'syz.4.956': attribute type 4 has an invalid length. [ 169.295545][ T9362] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.956'. [ 169.370146][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 169.671163][ T9383] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 169.758385][ T9383] bond4: entered promiscuous mode [ 169.789261][ T9383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.960174][ T9408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.966'. [ 170.001204][ T9411] netlink: 96 bytes leftover after parsing attributes in process `syz.1.968'. [ 170.003616][ T9408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.966'. [ 170.028964][ T9406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.966'. [ 170.819319][ T9465] openvswitch: netlink: Key type 29 is not supported [ 171.161803][ T9488] netlink: 'syz.2.993': attribute type 4 has an invalid length. [ 171.212005][ T9487] netlink: 'syz.2.993': attribute type 4 has an invalid length. [ 171.302359][ T10] C speed is unknown, defaulting to 1000 [ 171.305307][ T978] C speed is unknown, defaulting to 1000 [ 171.390326][ T9500] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 171.433113][ T9500] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 171.735690][ T9529] netlink: 'syz.1.1007': attribute type 8 has an invalid length. [ 171.866458][ T9535] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 171.890676][ T9535] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 172.103457][ T9550] netlink: 'syz.4.1012': attribute type 5 has an invalid length. [ 172.259845][ T9560] netlink: 'syz.0.1016': attribute type 5 has an invalid length. [ 172.311250][ T9562] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 172.980565][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.004367][ T9593] team_slave_0: left promiscuous mode [ 173.010853][ T9593] team_slave_1: left promiscuous mode [ 173.297725][ T9594] geneve2: entered promiscuous mode [ 173.303220][ T9594] geneve2: entered allmulticast mode [ 173.350934][ T9597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.360007][ T9597] team0: Failed to send port change of device bond3 via netlink (err -105) [ 173.369149][ T9597] team0: Failed to send options change via netlink (err -105) [ 173.376752][ T9597] team0: Port device bond3 added [ 173.415060][ T49] team0: Failed to send port change of device bond3 via netlink (err -105) [ 173.429467][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.442583][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 173.452254][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.463681][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 173.498261][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.537761][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 173.577844][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.601451][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 173.824637][ T9631] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 173.859895][ T9631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.376746][ T9653] bond1: entered promiscuous mode [ 174.405730][ T9653] bond1: entered allmulticast mode [ 174.426397][ T9653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.686185][ T9653] bond1 (unregistering): Released all slaves [ 174.745160][ T9677] smc: net device bond0 applied user defined pnetid SYZ2 [ 174.769875][ T9677] __nla_validate_parse: 11 callbacks suppressed [ 174.769894][ T9677] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1048'. [ 175.009712][ T9677] smc: removing net device bond0 with user defined pnetid SYZ2 [ 175.020727][ T9677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.034135][ T9677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.046040][ T9677] bond0 (unregistering): Released all slaves [ 175.067964][ T9685] tc_dump_action: action bad kind [ 175.260603][ T9698] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 175.264959][ T9701] openvswitch: netlink: Key type 29 is not supported [ 175.357782][ T9704] pim6reg1: entered promiscuous mode [ 175.388151][ T9704] pim6reg1: entered allmulticast mode [ 175.597936][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 176.036191][ T9742] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1069'. [ 176.247470][ T9743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.355932][ T9753] netlink: 'syz.0.1072': attribute type 2 has an invalid length. [ 176.365383][ T9753] netlink: 'syz.0.1072': attribute type 10 has an invalid length. [ 176.509293][ T9756] C speed is unknown, defaulting to 1000 [ 176.724430][ T9762] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 176.736340][ T9762] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.759473][ T9762] gretap0: entered promiscuous mode [ 176.786377][ T9762] gretap0: entered allmulticast mode [ 176.851030][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1074'. [ 177.055640][ T9757] netlink: 'syz.0.1073': attribute type 11 has an invalid length. [ 177.086605][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 177.281816][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 177.874269][ T9821] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1092'. [ 178.235240][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 178.324301][ T9841] netlink: 'syz.4.1100': attribute type 2 has an invalid length. [ 178.345030][ T9841] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1100'. [ 178.374476][ T9841] nbd: must specify at least one socket [ 178.412718][ T978] IPVS: starting estimator thread 0... [ 178.482954][ T9848] tipc: Enabled bearer , priority 10 [ 178.504622][ T9848] bridge4: entered promiscuous mode [ 178.516464][ T9848] bridge4: entered allmulticast mode [ 178.519132][ T9846] IPVS: using max 29 ests per chain, 69600 per kthread [ 178.635377][ T9850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1099'. [ 178.921882][ T9872] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 179.011927][ T9872] bond2 (unregistering): Released all slaves [ 179.121952][ T9883] ip6tnl1: entered promiscuous mode [ 179.127484][ T9883] ip6tnl1: entered allmulticast mode [ 179.599077][ T43] tipc: Node number set to 2246366888 [ 179.617480][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.647997][ T9911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.879598][ T9916] __nla_validate_parse: 5 callbacks suppressed [ 179.879619][ T9916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1119'. [ 180.112240][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'. [ 180.136388][ T9926] netlink: 'syz.2.1123': attribute type 30 has an invalid length. [ 180.215114][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 180.395775][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1127'. [ 180.433433][ T9942] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1129'. [ 180.455038][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1130'. [ 180.465488][ T9940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1130'. [ 180.658698][ T9950] bridge_slave_0: left allmulticast mode [ 180.665893][ T9950] bridge_slave_0: left promiscuous mode [ 180.675096][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.695776][ T9950] bridge_slave_1: left allmulticast mode [ 180.724320][ T9950] bridge_slave_1: left promiscuous mode [ 180.754536][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.804184][ T9950] bond0: (slave bond_slave_0): Releasing backup interface [ 180.841893][ T9950] bond0: (slave bond_slave_1): Releasing backup interface [ 180.864703][ T9950] team0: Port device team_slave_0 removed [ 180.894941][ T9950] team0: Port device team_slave_1 removed [ 180.916118][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.928895][ T9950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.955373][ T9950] bond1: (slave gretap2): Releasing active interface [ 180.991436][ T9950] team0: Port device bond3 removed [ 181.009389][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 181.019375][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 181.066814][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 181.219608][ T9966] tipc: Enabled bearer , priority 0 [ 181.232450][ T9964] tipc: Resetting bearer [ 181.299542][ T9967] syzkaller0: entered promiscuous mode [ 181.307697][ T9967] syzkaller0: entered allmulticast mode [ 181.322634][ T9965] IPVS: Error connecting to the multicast addr [ 181.397401][ T9963] tipc: Resetting bearer [ 181.433963][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 181.455163][ T9963] tipc: Disabling bearer [ 182.008866][T10005] syzkaller1: entered promiscuous mode [ 182.028310][T10005] syzkaller1: entered allmulticast mode [ 182.231400][T10034] netlink: 'syz.2.1153': attribute type 28 has an invalid length. [ 182.254095][T10034] netlink: 'syz.2.1153': attribute type 3 has an invalid length. [ 182.274277][T10036] nbd: must specify at least one socket [ 182.933577][T10086] hsr0: entered allmulticast mode [ 182.942270][T10086] hsr_slave_0: entered allmulticast mode [ 182.950254][T10086] hsr_slave_1: entered allmulticast mode [ 183.301327][T10105] C speed is unknown, defaulting to 1000 [ 183.633340][T10131] veth1_to_bond: mtu less than device minimum [ 183.870143][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.985923][T10146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.984482][T10212] __nla_validate_parse: 111 callbacks suppressed [ 184.984501][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 185.219982][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.281954][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 185.578132][T10244] syzkaller1: entered promiscuous mode [ 185.594271][T10244] syzkaller1: entered allmulticast mode [ 185.660479][T10259] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1216'. [ 185.690680][T10261] sctp: [Deprecated]: syz.0.1215 (pid 10261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.690680][T10261] Use struct sctp_sack_info instead [ 186.085237][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 186.096692][T10281] netlink: 'syz.3.1222': attribute type 7 has an invalid length. [ 186.116699][T10281] netlink: 'syz.3.1222': attribute type 8 has an invalid length. [ 186.127402][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 186.292422][T10281] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1222'. [ 186.338128][T10288] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1223'. [ 186.367912][T10288] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1223'. [ 186.379972][T10288] netlink: 'syz.4.1223': attribute type 6 has an invalid length. [ 186.389498][T10288] netlink: 'syz.4.1223': attribute type 5 has an invalid length. [ 186.435229][T10288] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1223'. [ 186.745080][T10314] netlink: 'syz.3.1232': attribute type 6 has an invalid length. [ 186.769231][T10314] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 186.785262][T10314] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1232'. [ 186.992428][T10327] netlink: 'syz.3.1238': attribute type 7 has an invalid length. [ 187.035377][T10327] netlink: 'syz.3.1238': attribute type 8 has an invalid length. [ 187.307253][T10349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.353101][T10356] netlink: 'syz.2.1245': attribute type 6 has an invalid length. [ 187.388937][T10359] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 187.550648][T10359] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 188.410830][T10419] bridge6: entered promiscuous mode [ 188.436569][T10419] bridge6: entered allmulticast mode [ 189.396888][T10477] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 189.405390][T10477] netlink: 'syz.1.1283': attribute type 2 has an invalid length. [ 189.573782][T10484] tipc: Enabled bearer , priority 0 [ 189.592062][T10489] syzkaller0: entered promiscuous mode [ 189.599488][T10489] syzkaller0: entered allmulticast mode [ 189.614222][T10489] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.636285][T10484] tipc: Resetting bearer [ 189.654437][T10482] tipc: Resetting bearer [ 189.700925][T10482] tipc: Disabling bearer [ 189.767867][T10500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.182917][T10525] __nla_validate_parse: 16 callbacks suppressed [ 190.182936][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 190.312802][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 190.326358][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 190.545736][T10545] netlink: 'syz.4.1303': attribute type 12 has an invalid length. [ 190.875792][T10568] syzkaller0: entered promiscuous mode [ 190.887935][T10568] syzkaller0: entered allmulticast mode [ 190.938100][T10568] tipc: Enabled bearer , priority 0 [ 190.984402][T10568] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.056741][T10581] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 191.157886][T10581] bond5: entered promiscuous mode [ 191.163293][T10581] bond5: entered allmulticast mode [ 191.172848][T10581] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.188952][T10568] tipc: Resetting bearer [ 191.294106][T10565] tipc: Resetting bearer [ 191.349582][T10565] tipc: Disabling bearer [ 191.506380][T10609] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1323'. [ 211.902812][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 211.904973][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 211.915181][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 245.432621][T10661] lo: entered allmulticast mode [ 245.464797][T10661] lo: left allmulticast mode [ 245.605719][T10673] ip6gre1: entered allmulticast mode [ 245.896993][T10693] sctp: [Deprecated]: syz.1.1339 (pid 10693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.896993][T10693] Use struct sctp_sack_info instead [ 246.006013][T10701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1339'. [ 246.287154][T10715] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 246.295208][T10715] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 246.414515][T10723] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1348'. [ 246.445848][T10723] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 246.526936][T10734] sctp: [Deprecated]: syz.1.1349 (pid 10734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.526936][T10734] Use struct sctp_sack_info instead [ 246.757742][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 246.804500][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1351'. [ 246.816859][T10744] netlink: 'syz.2.1352': attribute type 8 has an invalid length. [ 246.936554][T10751] netlink: 'syz.0.1356': attribute type 1 has an invalid length. [ 246.986815][T10752] v: renamed from ipvlan1 [ 247.139069][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1361'. [ 247.191893][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'. [ 247.201376][T10769] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1362'. [ 247.560416][T10792] syzkaller1: entered promiscuous mode [ 247.602555][T10792] syzkaller1: entered allmulticast mode [ 247.626525][T10792] netlink: 'syz.1.1368': attribute type 11 has an invalid length. [ 247.847896][T10813] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 247.857038][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.864939][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.897514][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.904960][T10813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.912608][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.919829][T10813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.049822][T10813] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 248.866670][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 249.254491][T10899] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 249.343172][T10906] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 303.025500][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 303.057262][T10917] gtp0: entered promiscuous mode [ 303.577392][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 303.636311][T10942] netlink: 'syz.2.1409': attribute type 2 has an invalid length. [ 303.700271][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 303.709451][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 303.726756][T10936] netlink: 'syz.3.1408': attribute type 18 has an invalid length. [ 303.752652][T10939] vlan3: entered promiscuous mode [ 303.757991][T10939] bridge0: entered promiscuous mode [ 303.773130][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 303.809105][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 303.828960][T10936] netlink: 'syz.3.1408': attribute type 18 has an invalid length. [ 303.906493][T10951] wg1: entered promiscuous mode [ 303.923504][T10955] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 303.934508][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 303.950823][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 304.027505][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 304.063328][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 304.087073][T10951] C speed is unknown, defaulting to 1000 [ 304.125381][ T51] block nbd0: Receive control failed (result -32) [ 304.226745][T10973] openvswitch: netlink: Actions may not be safe on all matching packets [ 304.298268][T10977] openvswitch: netlink: Actions may not be safe on all matching packets [ 304.402470][T10982] C: renamed from lo (while UP) [ 304.808389][T11001] netlink: 'syz.3.1427': attribute type 7 has an invalid length. [ 304.833154][T11001] netlink: 'syz.3.1427': attribute type 8 has an invalid length. [ 304.857830][T11001] 0{X功: entered promiscuous mode [ 304.874621][T11001] batadv_slave_1: entered promiscuous mode [ 304.883832][T11009] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 304.902594][T11001] erspan0: entered promiscuous mode [ 305.453699][T11043] bond0: entered allmulticast mode [ 305.478320][T11043] bond_slave_0: entered allmulticast mode [ 305.485583][T11043] bond_slave_1: entered allmulticast mode [ 305.491478][T11043] bridge0: entered allmulticast mode [ 305.802507][T11046] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 305.821180][T11046] block nbd1: not configured, cannot reconfigure [ 305.891471][T11046] erspan0: entered allmulticast mode [ 306.094207][T11074] raw_sendmsg: syz.3.1452 forgot to set AF_INET. Fix it! [ 306.179095][T11078] netlink: 'syz.4.1455': attribute type 3 has an invalid length. [ 306.230216][T11079] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 306.405372][T11094] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 306.436751][T11085] bond2: (slave gretap2): making interface the new active one [ 306.468443][T11085] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 306.489291][T11095] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 306.800216][T11115] C speed is unknown, defaulting to 1000 [ 306.924379][T11128] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 307.014654][T11133] tipc: Enabled bearer , priority 0 [ 307.045259][T11133] tipc: Disabling bearer [ 307.078005][T11136] veth1_macvtap: left promiscuous mode [ 307.121883][T11138] bridge5: entered allmulticast mode [ 307.326382][T11148] C: entered promiscuous mode [ 307.340934][T11148] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 307.356967][ T24] C speed is unknown, defaulting to 1000 [ 307.363157][ T24] syz2: Port: 1 Link DOWN [ 307.530349][T11157] tipc: Enabling of bearer rejected, failed to enable media [ 307.687840][T11161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.819482][T11180] ipvlan1: left promiscuous mode [ 307.831144][T11180] ipvlan1: left allmulticast mode [ 307.838588][T11180] veth0_vlan: left allmulticast mode [ 307.865815][T11180] team0: Device ipvlan1 failed to register rx_handler [ 307.940069][T11185] tipc: Can't bind to reserved service type 2 [ 308.111259][ T51] block nbd1: Receive control failed (result -32) [ 314.298927][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 359.616955][T11207] tipc: Enabling of bearer rejected, failed to enable media [ 359.662935][T11208] __nla_validate_parse: 24 callbacks suppressed [ 359.662963][T11208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 359.742374][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 359.920067][T11230] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1498'. [ 360.050780][T11236] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1500'. [ 360.075135][T11234] C speed is unknown, defaulting to 1000 [ 360.421915][T11260] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1507'. [ 360.453218][T11260] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1507'. [ 360.655598][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 360.808152][T11282] validate_nla: 4 callbacks suppressed [ 360.808172][T11282] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 360.853992][T11282] netlink: 'syz.1.1512': attribute type 10 has an invalid length. [ 360.874945][T11282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1512'. [ 360.902263][T11282] ipvlan1: entered promiscuous mode [ 360.935634][T11282] ipvlan1: entered allmulticast mode [ 360.959765][T11282] veth0_vlan: entered allmulticast mode [ 360.991970][T11282] bridge0: port 3(ipvlan1) entered blocking state [ 360.998687][T11282] bridge0: port 3(ipvlan1) entered disabled state [ 361.022475][T11282] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 361.264307][T11303] C speed is unknown, defaulting to 1000 [ 361.917393][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1534'. [ 361.991296][T11352] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 362.001489][T11352] netlink: 'syz.4.1536': attribute type 2 has an invalid length. [ 362.012468][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 362.029681][T11352] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 362.037434][T11352] netlink: 'syz.4.1536': attribute type 2 has an invalid length. [ 362.147937][T11359] macsec2: entered promiscuous mode [ 362.154084][T11359] bridge0: entered promiscuous mode [ 362.159818][T11359] macsec2: entered allmulticast mode [ 362.165179][T11359] bridge0: entered allmulticast mode [ 362.175071][T11359] bridge0: port 3(macsec2) entered blocking state [ 362.181872][T11359] bridge0: port 3(macsec2) entered disabled state [ 362.196975][T11359] bridge0: left allmulticast mode [ 362.202598][T11359] bridge0: left promiscuous mode [ 362.394283][T11371] C: left promiscuous mode [ 362.427441][T11371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.470191][T11371] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 362.478683][T11371] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 362.490127][T11373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.506827][ T24] C speed is unknown, defaulting to 1000 [ 362.513538][ T24] syz2: Port: 1 Link ACTIVE [ 362.533765][T11378] pim6reg1: entered promiscuous mode [ 362.540069][T11378] pim6reg1: entered allmulticast mode [ 362.815329][T11389] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 363.111370][T11412] netlink: 'syz.4.1556': attribute type 2 has an invalid length. [ 364.315282][T11489] tipc: Enabling of bearer rejected, failed to enable media [ 364.450622][T11495] nbd2: detected capacity change from 0 to 127 [ 364.468088][T11504] openvswitch: netlink: Flow key attr not present in new flow. [ 364.652527][T11512] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 364.738096][T11528] __nla_validate_parse: 15 callbacks suppressed [ 364.738113][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1595'. [ 364.747456][T11520] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 364.855377][T11520] openvswitch: netlink: Flow key attribute not present in set flow. [ 365.180103][T11557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1603'. [ 365.198825][ T51] block nbd2: Receive control failed (result -32) [ 365.311519][T11568] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 365.412053][T11566] team0: Device vti0 is of different type [ 365.470942][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 365.728202][T11588] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1613'. [ 365.751695][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 365.765015][T11588] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1613'. [ 365.791245][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 365.800545][T11590] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1614'. [ 365.819947][T11590] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1614'. [ 365.838309][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1611'. [ 366.121755][T11611] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 366.287387][T11622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.363371][T11621] syz_tun: left allmulticast mode [ 366.435598][T11629] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !瀵$蘒L賤y岗丌匘ｘUD寃榼漽 [ 366.560127][T11634] validate_nla: 8 callbacks suppressed [ 366.560146][T11634] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 367.284456][T11687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.306570][T11691] sctp: [Deprecated]: syz.1.1644 (pid 11691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.306570][T11691] Use struct sctp_sack_info instead [ 367.827430][T11718] netlink: 'syz.1.1653': attribute type 1 has an invalid length. [ 367.941714][T11718] smc: adding net device bond0 with user defined pnetid SYZ2 [ 368.117629][T11725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.158350][T11725] bond0: (slave bond5): making interface the new active one [ 368.178665][T11725] bond0: (slave bond5): Enslaving as an active interface with an up link [ 368.653502][T11773] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 368.679764][T11768] netlink: 'syz.0.1664': attribute type 5 has an invalid length. [ 368.688519][T11776] atomic_op ffff88806fa00998 conn xmit_atomic 0000000000000000 [ 368.916578][T11788] netlink: 'syz.2.1673': attribute type 4 has an invalid length. [ 368.926636][T11791] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 368.966334][T11791] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.001305][T11791] bond4: (slave geneve2): making interface the new active one [ 369.012493][T11791] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 369.047067][T11794] netlink: 'syz.1.1675': attribute type 6 has an invalid length. [ 369.175263][T11807] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 370.674545][T11882] __nla_validate_parse: 11 callbacks suppressed [ 370.674565][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 371.069871][T11915] sctp: [Deprecated]: syz.2.1709 (pid 11915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.069871][T11915] Use struct sctp_sack_info instead [ 371.115338][T11920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1708'. [ 371.244275][T11928] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 371.322566][T11932] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1715'. [ 371.387465][T11938] netlink: 'syz.2.1717': attribute type 8 has an invalid length. [ 371.509661][T11944] netlink: 'syz.2.1719': attribute type 3 has an invalid length. [ 371.586201][T11944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.611487][T11944] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1719'. [ 371.784242][T11958] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1726'. [ 371.797492][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1727'. [ 371.865491][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1728'. [ 371.894685][T11966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1728'. [ 371.955600][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 372.144795][T11985] netlink: 'syz.1.1734': attribute type 2 has an invalid length. [ 372.160816][T11985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1734'. [ 372.225636][T11989] veth0_to_bridge: entered promiscuous mode [ 372.245744][T11992] vlan3: entered promiscuous mode [ 372.256377][T11989] veth0_to_bridge: left promiscuous mode [ 372.575052][T12010] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 372.702081][T12010] can: request_module (can-proto-5) failed. [ 373.160996][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.256071][T12052] openvswitch: netlink: Unknown key attributes 2 [ 373.277756][T12051] bond0: (slave bridge0): Releasing backup interface [ 373.288205][T12051] bridge0: left allmulticast mode [ 373.307986][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.315395][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.382361][T12059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.394887][T12051] team0: Port device dummy0 removed [ 373.405550][T12051] bridge_slave_0: left allmulticast mode [ 373.416962][T12051] bridge_slave_0: left promiscuous mode [ 373.423776][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.443269][T12051] bridge_slave_1: left allmulticast mode [ 373.454938][T12051] bridge_slave_1: left promiscuous mode [ 373.461749][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.481181][T12051] bond0: (slave bond_slave_0): Releasing backup interface [ 373.489460][T12051] bond_slave_0: left allmulticast mode [ 373.497959][T12051] bond0: (slave bond_slave_1): Releasing backup interface [ 373.506930][T12051] bond_slave_1: left allmulticast mode [ 373.520972][T12051] team0: Port device team_slave_0 removed [ 373.532821][T12051] team0: Port device team_slave_1 removed [ 373.540203][T12051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.547654][T12051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.568563][T12051] bond2: (slave gretap2): Releasing active interface [ 373.744224][T12071] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 373.779167][T12071] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 374.052638][T12096] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 374.341007][T12122] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 374.628294][T12148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.670398][T12150] xt_limit: Overflow, try lower: 604147548/4200216962 [ 374.709137][T12152] xt_limit: Overflow, try lower: 604147548/4200216962 [ 375.076445][T12179] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 375.252323][T12192] syzkaller1: entered promiscuous mode [ 375.268974][T12192] syzkaller1: entered allmulticast mode [ 375.414994][T12205] netlink: 'syz.4.1798': attribute type 5 has an invalid length. [ 375.538434][T12210] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 375.775860][T12223] __nla_validate_parse: 15 callbacks suppressed [ 375.775877][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'. [ 375.861792][T12232] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1808'. [ 376.165083][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1814'. [ 376.193649][T12259] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1816'. [ 376.258602][T12256] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1815'. [ 376.617628][T12269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.625022][T12269] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 376.656986][T12288] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 376.682410][T12288] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1822'. [ 376.970840][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 377.247372][T12324] delete_channel: no stack [ 377.255218][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'. [ 377.307048][T12323] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 377.419410][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 377.441911][T12337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1836'. [ 377.539395][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 378.047266][T12369] netlink: 'syz.0.1845': attribute type 11 has an invalid length. [ 378.056485][T12357] pim6reg1: entered promiscuous mode [ 378.070043][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.086417][T12357] pim6reg1: entered allmulticast mode [ 378.301071][T12385] netlink: 'syz.4.1850': attribute type 1 has an invalid length. [ 378.495660][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.513376][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.535877][T12392] syzkaller1: entered promiscuous mode [ 378.549678][T12392] syzkaller1: entered allmulticast mode [ 378.573378][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.638639][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.076279][T12430] netlink: 'syz.2.1862': attribute type 30 has an invalid length. [ 379.243824][T12432] netlink: 'syz.2.1862': attribute type 30 has an invalid length. [ 379.508919][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 380.316213][T12468] tipc: Enabled bearer , priority 0 [ 380.326855][T12472] syzkaller0: entered promiscuous mode [ 380.339427][T12472] syzkaller0: entered allmulticast mode [ 380.372151][T12482] tipc: Resetting bearer [ 380.428167][T12460] tipc: Resetting bearer [ 380.509416][T12460] tipc: Disabling bearer [ 380.510313][T12505] xt_policy: neither incoming nor outgoing policy selected [ 380.524231][T12509] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 380.537160][T12508] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 380.719217][T12513] syzkaller1: entered promiscuous mode [ 380.724751][T12513] syzkaller1: entered allmulticast mode [ 380.792727][T12524] __nla_validate_parse: 17 callbacks suppressed [ 380.792747][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 380.824498][T12524] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 380.832294][T12524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.870054][T12528] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 381.225272][T12551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1889'. [ 381.240058][T12549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1890'. [ 381.250035][T12548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1888'. [ 381.264470][T12551] tap0: tun_chr_ioctl cmd 1074025676 [ 381.278845][T12551] tap0: owner set to 0 [ 381.411732][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 381.531465][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 381.607094][T12578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1901'. [ 381.629756][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 381.737564][T12584] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.1902'. [ 381.870828][T12587] wg2: entered promiscuous mode [ 381.875788][T12587] wg2: entered allmulticast mode [ 381.941748][T12595] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 382.038311][T12600] tipc: Enabling of bearer rejected, failed to enable media [ 382.155808][T12613] netlink: 'syz.4.1909': attribute type 4 has an invalid length. [ 382.155968][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 382.182918][T12613] netlink: 'syz.4.1909': attribute type 4 has an invalid length. [ 382.489790][T12629] 1{X功: renamed from 30{X功 [ 382.512191][T12629] 1{X功: entered allmulticast mode [ 382.523795][T12629] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 383.077384][T12666] openvswitch: netlink: Duplicate or invalid key (type 0). [ 383.077413][T12664] openvswitch: netlink: Duplicate or invalid key (type 0). [ 383.102216][T12666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.109228][T12658] IPVS: set_ctl: invalid protocol: 233 172.20.20.50:20004 [ 383.117739][T12664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.180264][T12670] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20001 [ 383.756760][T12701] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 384.075687][T12710] netlink: 'syz.3.1942': attribute type 3 has an invalid length. [ 384.226028][T12735] netlink: 'syz.2.1948': attribute type 1 has an invalid length. [ 384.464070][T12750] netlink: 'syz.4.1955': attribute type 6 has an invalid length. [ 386.207455][T12766] __nla_validate_parse: 10 callbacks suppressed [ 386.207475][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1961'. [ 386.254607][T12764] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1960'. [ 386.280737][T12768] Bluetooth: MGMT ver 1.23 [ 386.370105][T12776] xt_limit: Overflow, try lower: 271964/0 [ 386.371703][T12772] pim6reg: entered allmulticast mode [ 386.392143][T12772] pim6reg: left allmulticast mode [ 386.513136][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1967'. [ 386.531371][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1967'. [ 386.551454][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 386.621201][T12786] bridge_slave_1 (unregistering): left allmulticast mode [ 386.638107][T12786] bridge_slave_1 (unregistering): left promiscuous mode [ 386.653622][T12786] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.683326][T12795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1970'. [ 386.759104][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1972'. [ 386.865940][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 387.269097][T12828] sctp: [Deprecated]: syz.0.1980 (pid 12828) Use of int in max_burst socket option deprecated. [ 387.269097][T12828] Use struct sctp_assoc_value instead [ 387.298689][T12835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1983'. [ 387.369090][T12836] netlink: 'syz.2.1983': attribute type 58 has an invalid length. [ 387.389771][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 387.655184][T12860] veth0_to_bond: entered allmulticast mode [ 387.701999][T12858] dvmrp1: entered allmulticast mode [ 387.927904][T12879] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 388.300967][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 388.304492][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 388.776127][T12913] tipc: Enabled bearer , priority 0 [ 388.792598][T12913] syzkaller0: entered promiscuous mode [ 388.798140][T12913] syzkaller0: entered allmulticast mode [ 388.868566][T12913] tipc: Resetting bearer [ 388.894196][T12911] tipc: Resetting bearer [ 388.977907][T12911] tipc: Disabling bearer [ 389.534405][T12923] netlink: 'syz.2.2012': attribute type 7 has an invalid length. [ 389.542393][T12923] netlink: 'syz.2.2012': attribute type 8 has an invalid length. [ 389.686338][ T1148] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 390.567112][T12972] unknown channel width for channel at 909000KHz? [ 390.994685][T12994] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 393.824371][T13005] __nla_validate_parse: 6 callbacks suppressed [ 393.824390][T13005] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2032'. [ 393.918592][T13009] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 394.050887][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'. [ 394.114022][T13012] C speed is unknown, defaulting to 1000 [ 394.552190][T13038] netlink: 178396 bytes leftover after parsing attributes in process `syz.4.2045'. [ 394.602910][T13034] syzkaller1: entered promiscuous mode [ 394.619996][T13034] syzkaller1: entered allmulticast mode [ 394.829770][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2048'. [ 394.851646][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2048'. [ 395.243047][T13077] sch_fq: defrate 0 ignored. [ 395.330734][T13080] openvswitch: netlink: Key 7 has unexpected len 2 expected 12 [ 395.363629][T13083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2056'. [ 395.433008][T13083] sysfs: cannot create duplicate filename '/class/ieee80211/!瀵$蘒L賤y岗丌匘ｘUD寃榼漽' [ 395.483267][T13083] CPU: 1 UID: 0 PID: 13083 Comm: syz.2.2056 Not tainted syzkaller #0 PREEMPT(full) [ 395.483296][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.483315][T13083] Call Trace: [ 395.483324][T13083] [ 395.483340][T13083] dump_stack_lvl+0x189/0x250 [ 395.483386][T13083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.483408][T13083] ? __pfx__printk+0x10/0x10 [ 395.483440][T13083] ? kernfs_path_from_node+0x2f/0x290 [ 395.483459][T13083] ? kernfs_path_from_node+0x250/0x290 [ 395.483477][T13083] ? kernfs_path_from_node+0x2f/0x290 [ 395.483502][T13083] sysfs_warn_dup+0x8e/0xa0 [ 395.483521][T13083] sysfs_do_create_link_sd+0xc0/0x110 [ 395.483542][T13083] device_add_class_symlinks+0x1cf/0x240 [ 395.483566][T13083] device_add+0x475/0xb50 [ 395.483610][T13083] wiphy_register+0x1ba6/0x28d0 [ 395.483657][T13083] ? __pfx_wiphy_register+0x10/0x10 [ 395.483685][T13083] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 395.483716][T13083] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 395.483742][T13083] ieee80211_register_hw+0x3484/0x4100 [ 395.483790][T13083] ? ieee80211_register_hw+0x1401/0x4100 [ 395.483821][T13083] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 395.483845][T13083] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.483878][T13083] ? __hrtimer_setup+0x187/0x210 [ 395.483894][T13083] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 395.483923][T13083] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 395.483977][T13083] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 395.483999][T13083] ? trace_kmalloc+0x1f/0xd0 [ 395.484019][T13083] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 395.484044][T13083] ? kstrndup+0xbf/0x160 [ 395.484071][T13083] hwsim_new_radio_nl+0xea4/0x1b10 [ 395.484098][T13083] ? __pfx___nla_validate_parse+0x10/0x10 [ 395.484140][T13083] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 395.484176][T13083] ? __nla_parse+0x40/0x60 [ 395.484205][T13083] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 395.484238][T13083] genl_family_rcv_msg_doit+0x215/0x300 [ 395.484266][T13083] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 395.484301][T13083] ? bpf_lsm_capable+0x9/0x20 [ 395.484324][T13083] ? security_capable+0x7e/0x2e0 [ 395.484367][T13083] genl_rcv_msg+0x60e/0x790 [ 395.484395][T13083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.484415][T13083] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 395.484452][T13083] netlink_rcv_skb+0x205/0x470 [ 395.484476][T13083] ? __lock_acquire+0xab9/0xd20 [ 395.484502][T13083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.484524][T13083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.484568][T13083] ? down_read+0x1ad/0x2e0 [ 395.484589][T13083] genl_rcv+0x28/0x40 [ 395.484609][T13083] netlink_unicast+0x82c/0x9e0 [ 395.484643][T13083] ? __pfx_netlink_unicast+0x10/0x10 [ 395.484669][T13083] ? netlink_sendmsg+0x642/0xb30 [ 395.484683][T13083] ? skb_put+0x11b/0x210 [ 395.484703][T13083] netlink_sendmsg+0x805/0xb30 [ 395.484731][T13083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.484752][T13083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 395.484771][T13083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.484790][T13083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.484807][T13083] __sock_sendmsg+0x21c/0x270 [ 395.484834][T13083] ____sys_sendmsg+0x505/0x830 [ 395.484859][T13083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.484887][T13083] ? import_iovec+0x74/0xa0 [ 395.484912][T13083] ___sys_sendmsg+0x21f/0x2a0 [ 395.484933][T13083] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.485003][T13083] ? __fget_files+0x2a/0x420 [ 395.485030][T13083] ? __fget_files+0x3a0/0x420 [ 395.485068][T13083] __x64_sys_sendmsg+0x19b/0x260 [ 395.485091][T13083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.485120][T13083] ? rcu_is_watching+0x15/0xb0 [ 395.485143][T13083] ? do_syscall_64+0xbe/0x3b0 [ 395.485164][T13083] do_syscall_64+0xfa/0x3b0 [ 395.485179][T13083] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.485204][T13083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.485221][T13083] ? clear_bhb_loop+0x60/0xb0 [ 395.485243][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.485268][T13083] RIP: 0033:0x7fc13f78ebe9 [ 395.485289][T13083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.485306][T13083] RSP: 002b:00007fc1405b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.485346][T13083] RAX: ffffffffffffffda RBX: 00007fc13f9c5fa0 RCX: 00007fc13f78ebe9 [ 395.485359][T13083] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 395.485371][T13083] RBP: 00007fc13f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 395.485382][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.485392][T13083] R13: 00007fc13f9c6038 R14: 00007fc13f9c5fa0 R15: 00007ffd19989f98 [ 395.485421][T13083] [ 396.114529][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 396.147926][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 396.168279][T13102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2061'. [ 396.180403][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2061'. [ 396.206553][T13104] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 396.255704][T13104] netlink: zone id is out of range [ 396.264426][T13104] netlink: zone id is out of range [ 396.270511][T13104] netlink: del zone limit has 4 unknown bytes [ 396.868363][T13143] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 397.073958][ T30] audit: type=1800 audit(1756923668.582:10): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2077" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2090 res=0 errno=0 [ 397.185942][T13161] tipc: Enabled bearer , priority 0 [ 397.213882][T13161] syzkaller0: entered promiscuous mode [ 397.224071][T13161] syzkaller0: entered allmulticast mode [ 397.265932][T13161] tipc: Resetting bearer [ 397.274719][T13164] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 397.318409][T13159] tipc: Resetting bearer [ 397.341350][T13159] tipc: Disabling bearer [ 397.389795][T13166] macvlan0: entered allmulticast mode [ 397.928619][T13204] tipc: Enabled bearer , priority 0 [ 397.936238][T13198] atomic_op ffff8880267d7998 conn xmit_atomic 0000000000000000 [ 398.064438][T13204] syzkaller0: entered promiscuous mode [ 398.108799][T13204] syzkaller0: entered allmulticast mode [ 398.145011][T13204] tipc: Resetting bearer [ 398.242483][ T1148] tipc: Resetting bearer [ 398.310512][T13199] tipc: Resetting bearer [ 398.321650][T13229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.365696][T13199] tipc: Disabling bearer [ 398.517209][T13238] sctp: [Deprecated]: syz.3.2101 (pid 13238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.517209][T13238] Use struct sctp_sack_info instead [ 398.915573][T13261] __nla_validate_parse: 40 callbacks suppressed [ 398.915595][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'. [ 398.958644][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'. [ 399.326126][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'. [ 399.348560][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2117'. [ 399.467548][T13292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2120'. [ 399.528909][T13295] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2122'. [ 399.753196][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 399.865368][T13312] C speed is unknown, defaulting to 1000 [ 399.895618][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2129'. [ 399.896194][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'. [ 399.935560][T13324] netlink: 'syz.4.2130': attribute type 2 has an invalid length. [ 400.028650][T13329] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2132'. [ 400.070981][T13330] openvswitch: netlink: IP tunnel dst address not specified [ 400.080609][T13329] gretap0: entered promiscuous mode [ 400.142504][T13334] 0{X功: renamed from gretap0 [ 400.181333][T13334] 0{X功: left promiscuous mode [ 400.187403][T13334] 0{X功: entered allmulticast mode [ 400.196150][T13334] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 400.238377][T13331] 1{X功: renamed from 30{X功 (while UP) [ 400.255185][T13331] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 400.378394][T13338] syzkaller0: entered promiscuous mode [ 400.389000][T13338] syzkaller0: entered allmulticast mode [ 400.401847][T13333] tipc: Enabled bearer , priority 0 [ 400.429611][T13350] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 400.596478][T13338] tipc: Resetting bearer [ 400.635191][T13332] tipc: Resetting bearer [ 400.689064][T13332] tipc: Disabling bearer [ 401.030547][T13359] infiniband syz!: set down [ 401.035499][T13359] infiniband syz!: added team_slave_0 [ 401.092300][T13359] RDS/IB: syz!: added [ 401.097177][T13359] smc: adding ib device syz! with port count 1 [ 401.114568][T13359] smc: ib device syz! port 1 has pnetid [ 402.241273][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.283973][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.669243][T13445] C speed is unknown, defaulting to 1000 [ 402.740942][ T978] IPVS: starting estimator thread 0... [ 402.839210][T13460] IPVS: using max 27 ests per chain, 64800 per kthread [ 403.185453][T13480] netlink: 'syz.3.2173': attribute type 12 has an invalid length. [ 403.655008][T13494] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 403.798970][T13497] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 403.811353][T13497] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 403.924340][T13505] __nla_validate_parse: 12 callbacks suppressed [ 403.924359][T13505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2181'. [ 404.039935][T13510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2181'. [ 404.174465][T13518] netlink: 'syz.4.2183': attribute type 2 has an invalid length. [ 404.487062][T13529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.520456][T13530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.550620][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 404.582085][T13529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.616422][T13534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.659446][T13530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.695088][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 404.709685][T13530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.730625][T13534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.753102][T13530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.048663][T13553] openvswitch: netlink: IPv4 tun info is not correct [ 405.247570][T13568] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2197'. [ 405.493083][T13579] veth0_to_bridge: entered promiscuous mode [ 405.522931][T13580] syzkaller0: entered promiscuous mode [ 405.528460][T13580] syzkaller0: entered allmulticast mode [ 405.589701][T13579] veth0_to_bridge: left promiscuous mode [ 405.927081][T13583] wg1: left promiscuous mode [ 405.976421][T13583] tipc: Resetting bearer [ 406.076039][T13583] gretap1: left promiscuous mode [ 406.087546][T13583] geneve2: left promiscuous mode [ 406.103185][T13583] gtp0: left promiscuous mode [ 406.111836][T13583] vlan3: left promiscuous mode [ 406.116656][T13583] bridge0: left promiscuous mode [ 406.167376][ T5943] C speed is unknown, defaulting to 1000 [ 406.172413][T13590] veth0: entered promiscuous mode [ 406.182068][ T5943] syz2: Port: 1 Link DOWN [ 406.241149][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 406.251276][ T36] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.260582][T13588] veth0: left promiscuous mode [ 406.265946][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 406.286883][ T36] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.347965][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 406.378451][ T36] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.415343][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 406.424889][T13608] delete_channel: no stack [ 406.429544][ T36] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.447615][T13608] tipc: Enabled bearer , priority 0 [ 406.569395][T13615] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2211'. [ 406.577614][T13617] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 406.663608][T13620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.533577][T13641] sctp: [Deprecated]: syz.1.2220 (pid 13641) Use of int in max_burst socket option. [ 407.533577][T13641] Use struct sctp_assoc_value instead [ 407.802803][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2224'. [ 407.882316][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2224'. [ 407.903335][T13655] xfrm1: entered promiscuous mode [ 407.908639][T13655] xfrm1: entered allmulticast mode [ 407.914771][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2224'. [ 407.925898][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 408.022656][T13662] pim6reg: entered allmulticast mode [ 408.114656][T13667] netlink: 'syz.0.2228': attribute type 8 has an invalid length. [ 408.256462][T13673] tipc: Enabled bearer , priority 0 [ 408.310451][T13679] syzkaller0: entered promiscuous mode [ 408.316089][T13679] syzkaller0: entered allmulticast mode [ 408.326158][T13677] openvswitch: netlink: Missing key (keys=40, expected=100) [ 408.422775][T13682] netlink: 'syz.4.2234': attribute type 1 has an invalid length. [ 408.497298][T13677] hsr_slave_1 (unregistering): left promiscuous mode [ 408.521074][T13673] tipc: Resetting bearer [ 408.593625][T13682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.612467][T13688] vlan5: entered promiscuous mode [ 408.617832][T13688] bond2: entered promiscuous mode [ 408.625698][T13688] vlan5: entered allmulticast mode [ 408.665509][T13688] bond2: entered allmulticast mode [ 408.679149][T13672] tipc: Resetting bearer [ 408.736539][T13672] tipc: Disabling bearer [ 408.787559][T13690] gretap1: entered promiscuous mode [ 408.798795][T13690] bond2: (slave gretap1): making interface the new active one [ 408.806639][T13690] gretap1: entered allmulticast mode [ 408.817199][T13690] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 408.842899][T13702] bridge7: entered promiscuous mode [ 408.859627][T13702] bridge7: entered allmulticast mode [ 408.998112][T13708] netdevsim0: renamed from gre0 (while UP) [ 409.009098][T13708] netdevsim0: entered promiscuous mode [ 409.055562][T13708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 409.269296][T13720] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 409.318503][T13720] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 409.337365][T13732] netlink: 'syz.4.2250': attribute type 58 has an invalid length. [ 409.365123][T13732] __nla_validate_parse: 4 callbacks suppressed [ 409.365140][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2250'. [ 409.513100][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'. [ 409.611998][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 409.642059][T13738] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 409.694115][T13745] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 409.852961][T13757] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2259'. [ 409.880640][T13757] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2259'. [ 409.974817][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2262'. [ 410.018097][T13766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.073949][T13766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.133358][T13770] nbd: must specify an index to disconnect [ 410.147614][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 410.391797][T13789] netlink: 'syz.2.2272': attribute type 1 has an invalid length. [ 410.576183][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2275'. [ 410.733651][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 410.773992][T13811] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 410.805040][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 410.865561][T13811] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.997756][T13812] vlan0: entered promiscuous mode [ 411.030569][T13812] bond8: entered promiscuous mode [ 411.080457][T13812] vlan0: entered allmulticast mode [ 411.092257][T13812] bond8: entered allmulticast mode [ 411.129224][T13820] netlink: 'syz.2.2282': attribute type 3 has an invalid length. [ 411.283932][T13844] nbd: must specify a device to reconfigure [ 411.579107][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 412.191132][T13882] bond0: entered promiscuous mode [ 412.208399][T13882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.290348][T13895] IPv6: sit1: Disabled Multicast RS [ 412.296701][T13895] sit1: entered allmulticast mode [ 412.502695][T13907] netlink: 'syz.0.2301': attribute type 29 has an invalid length. [ 412.595526][T13920] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 412.599292][T13921] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 412.653496][T13921] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 414.073563][T13953] validate_nla: 1 callbacks suppressed [ 414.073584][T13953] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 414.100687][T13956] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 414.322012][ T30] audit: type=1804 audit(1756923685.822:11): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2320" name="/newroot/449/cgroup.controllers" dev="tmpfs" ino=2307 res=1 errno=0 [ 414.389021][ T30] audit: type=1800 audit(1756923685.822:12): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2320" name="cgroup.controllers" dev="tmpfs" ino=2307 res=0 errno=0 [ 414.468192][T13977] __nla_validate_parse: 17 callbacks suppressed [ 414.468214][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2321'. [ 414.616638][T13980] netlink: 'syz.3.2322': attribute type 3 has an invalid length. [ 414.707242][T13986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2323'. [ 415.315678][T14018] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2335'. [ 415.946018][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 415.976183][T14051] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 415.986447][T14051] netlink: 'syz.0.2340': attribute type 2 has an invalid length. [ 416.094468][T14063] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 416.308349][T14088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2349'. [ 416.317722][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 416.337273][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2348'. [ 416.346527][T14091] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2348'. [ 416.435896][T14097] tipc: Enabling of bearer rejected, failed to enable media [ 416.520077][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 416.558507][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 417.094632][T14132] : renamed from hsr0 (while UP) [ 417.540682][T14153] tipc: Enabled bearer , priority 0 [ 417.552823][T14153] syzkaller0: entered promiscuous mode [ 417.558358][T14153] syzkaller0: entered allmulticast mode [ 417.642722][T14159] tipc: Resetting bearer [ 417.673142][T14156] mac80211_hwsim hwsim4 : renamed from wlan1 (while UP) [ 417.729420][T14152] tipc: Resetting bearer [ 417.789331][T14152] tipc: Disabling bearer [ 417.865271][T14165] sctp: [Deprecated]: syz.1.2371 (pid 14165) Use of int in max_burst socket option. [ 417.865271][T14165] Use struct sctp_assoc_value instead [ 418.761446][T14202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.984044][T14214] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.532385][T14258] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 419.584572][T14264] netlink: 'syz.3.2401': attribute type 21 has an invalid length. [ 419.597373][T14262] netlink: 'syz.2.2399': attribute type 1 has an invalid length. [ 419.684884][T14272] __nla_validate_parse: 8 callbacks suppressed [ 419.684903][T14272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2402'. [ 419.796776][T14281] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2404'. [ 419.811165][T14272] IPVS: Error connecting to the multicast addr [ 420.105158][T14295] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 420.209790][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 420.897125][T14333] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 420.991509][T14350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2425'. [ 421.014801][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 421.017294][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2423'. [ 421.152190][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.189577][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 421.215161][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.228083][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.268093][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.289555][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 421.299369][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.306286][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.313726][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.319776][T14366] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 421.320705][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.335342][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.343515][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.350639][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.357523][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.357969][T14366] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2428'. [ 421.364779][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.381169][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.395593][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.403137][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.410420][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.417336][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.424420][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.431674][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.439349][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.446577][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.450100][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 421.453571][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.469863][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.476689][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.483567][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.490532][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.497356][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.506407][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.513594][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.520928][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.540000][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.573656][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.605963][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.613363][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.620375][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.628577][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.638368][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.646109][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.653934][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.661809][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.668819][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.675717][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.682726][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.689824][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.696794][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.703946][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.710973][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.764617][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.802861][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.828990][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.836073][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.848634][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.867170][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.874193][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.881224][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.888120][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.895586][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.902678][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.909760][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.917034][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.928163][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.946757][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.959184][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.966165][T14362] IPVS: set_ctl: invalid protocol: 36 100.1.1.2:20003 [ 421.981843][T14363] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 422.189720][T14393] tipc: Enabled bearer , priority 0 [ 422.256308][T14405] syzkaller0: entered promiscuous mode [ 422.267886][T14405] syzkaller0: entered allmulticast mode [ 422.319337][T14393] tipc: Resetting bearer [ 422.336976][T14392] tipc: Resetting bearer [ 422.372625][T14392] tipc: Disabling bearer [ 422.779139][T14423] bond0: entered promiscuous mode [ 423.094107][T14427] netlink: 'syz.0.2447': attribute type 3 has an invalid length. [ 423.424828][T14454] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 423.436093][T14453] netlink: 'syz.4.2453': attribute type 29 has an invalid length. [ 423.437524][T14454] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 423.952175][T14480] netlink: 'syz.1.2464': attribute type 11 has an invalid length. [ 423.971979][T14480] ipvlan1: left promiscuous mode [ 423.986535][T14480] ipvlan1: left allmulticast mode [ 423.999676][T14480] veth0_vlan: left allmulticast mode [ 424.425619][T14511] syz.2.2474 uses old SIOCAX25GETINFO [ 424.985851][T14543] syzkaller0: entered promiscuous mode [ 425.019158][T14543] syzkaller0: entered allmulticast mode [ 425.105742][T14546] veth9: entered promiscuous mode [ 425.111523][T14546] veth9: entered allmulticast mode [ 425.119146][T14548] tipc: Enabled bearer , priority 0 [ 425.144249][T14543] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 425.226989][T14543] tipc: Resetting bearer [ 425.246497][T14553] openvswitch: netlink: Tunnel attr 9 has unexpected len 7 expected 2 [ 425.255183][T14542] tipc: Resetting bearer [ 425.300857][T14542] tipc: Disabling bearer [ 425.345952][T14555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.538187][T14565] netlink: 'syz.1.2487': attribute type 2 has an invalid length. [ 425.558330][T14565] netlink: 'syz.1.2487': attribute type 1 has an invalid length. [ 425.577335][T14566] batadv2: entered allmulticast mode [ 425.594426][T14565] __nla_validate_parse: 44 callbacks suppressed [ 425.594446][T14565] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2487'. [ 425.624274][T14565] netlink: 'syz.1.2487': attribute type 1 has an invalid length. [ 425.672839][T14573] netlink: 'syz.3.2490': attribute type 3 has an invalid length. [ 425.823526][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 425.859022][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 427.087276][T14652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.095107][T14652] IPv6: NLM_F_CREATE should be set when creating new route [ 427.102416][T14652] IPv6: NLM_F_CREATE should be set when creating new route [ 427.118189][T14652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.290906][T14665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.311476][T14671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.357024][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2514'. [ 427.368312][T14673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2516'. [ 427.387546][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2514'. [ 427.395524][T14673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2516'. [ 427.421918][ T10] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec [ 427.986006][T14719] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2527'. [ 428.195893][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 428.214584][T14725] netlink: 'syz.1.2530': attribute type 15 has an invalid length. [ 428.226613][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2530'. [ 428.245806][ T1160] netdevsim netdevsim1 : set [0, 1] type 1 family 0 port 2816 - 0 [ 428.254679][T14725] netlink: 'syz.1.2530': attribute type 15 has an invalid length. [ 428.271810][ T13] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 428.354869][ T13] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 428.383209][ T13] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 428.708399][T14756] netlink: 'syz.4.2539': attribute type 1 has an invalid length. [ 428.973752][T14756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 429.089433][T14765] bond3: (slave veth9): Enslaving as an active interface with a down link [ 429.116950][T14767] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 429.194151][T14768] bond3: (slave veth11): Enslaving as an active interface with a down link [ 429.324112][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 429.963870][T14821] netlink: 'syz.2.2553': attribute type 3 has an invalid length. [ 430.371934][T14845] netlink: 'syz.3.2563': attribute type 10 has an invalid length. [ 430.640844][T14859] __nla_validate_parse: 71 callbacks suppressed [ 430.640864][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 430.729939][ T3478] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.738410][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 430.768638][ T3478] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.777406][ T3478] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.849997][ T3478] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.094981][T14886] geneve3: entered promiscuous mode [ 431.104080][T14886] geneve3: entered allmulticast mode [ 431.115731][ T1160] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 431.141070][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 431.180406][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 431.209584][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 431.328008][T14897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2576'. [ 431.383025][T14902] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 431.824857][T14923] nbd: must specify a device to reconfigure [ 432.005060][T14931] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 432.120272][T14931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.315914][T14945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2591'. [ 432.492475][T14952] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2594'. [ 432.593041][T14970] netlink: 'syz.3.2595': attribute type 33 has an invalid length. [ 432.614439][T14970] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2595'. [ 432.696128][T14957] can: request_module (can-proto-0) failed. [ 432.700369][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'. [ 432.812664][T14980] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2599'. [ 432.834628][T14980] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2599'. [ 432.861676][T14980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2599'. [ 433.120268][T14994] netlink: 'syz.3.2603': attribute type 21 has an invalid length. [ 433.136884][T14996] netlink: 'syz.4.2601': attribute type 9 has an invalid length. [ 433.161944][T14994] netlink: 'syz.3.2603': attribute type 5 has an invalid length. [ 433.179003][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 433.433904][T15010] netlink: 'syz.4.2607': attribute type 17 has an invalid length. [ 433.936742][T15033] hsr_slave_0 (unregistering): left promiscuous mode [ 434.136288][T15046] netlink: 'syz.0.2621': attribute type 16 has an invalid length. [ 434.173239][T15046] netlink: 'syz.0.2621': attribute type 17 has an invalid length. [ 434.186360][T15052] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 434.260569][T15046] bond0: left promiscuous mode [ 434.279931][T15046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.549029][T15046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.864709][T15115] hsr_slave_0 (unregistering): left promiscuous mode [ 435.979678][T15140] tap0: tun_chr_ioctl cmd 1074025677 [ 435.985400][T15140] tap0: linktype set to 65534 [ 436.554065][T15168] __nla_validate_parse: 13 callbacks suppressed [ 436.554086][T15168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2657'. [ 436.561527][T15176] netlink: 'syz.0.2658': attribute type 21 has an invalid length. [ 436.591731][T15169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2657'. [ 436.610417][T15176] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2658'. [ 436.627929][T15176] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2658'. [ 436.645654][T15176] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2658'. [ 436.683056][T15176] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2658'. [ 436.692056][T15182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2662'. [ 436.706485][T15182] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2662'. [ 436.755772][T15184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2661'. [ 436.894152][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2663'. [ 437.367451][T15223] sctp: [Deprecated]: syz.3.2676 (pid 15223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.367451][T15223] Use struct sctp_sack_info instead [ 437.598722][T15238] bond4: (slave geneve2): Releasing active interface [ 438.758610][T15305] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 438.904513][T15314] validate_nla: 5 callbacks suppressed [ 438.904533][T15314] netlink: 'syz.0.2705': attribute type 2 has an invalid length. [ 438.927395][T15317] tipc: Enabling of bearer rejected, already enabled [ 438.937976][T15317] netlink: 'syz.3.2704': attribute type 1 has an invalid length. [ 438.999077][T15317] bond9: (slave bridge8): making interface the new active one [ 439.007416][T15317] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 439.807938][T15364] batadv_slave_0: entered promiscuous mode [ 440.026827][T15377] sctp: [Deprecated]: syz.2.2722 (pid 15377) Use of int in max_burst socket option. [ 440.026827][T15377] Use struct sctp_assoc_value instead [ 440.163399][T15386] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 440.214357][T15388] Unsupported ieee802154 address type: 0 [ 440.231218][T15388] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 440.269507][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.366650][T15396] !: renamed from bond_slave_0 [ 440.732937][T15418] netlink: 'syz.2.2736': attribute type 21 has an invalid length. [ 440.754476][T15418] netlink: 'syz.2.2736': attribute type 22 has an invalid length. [ 440.775725][T15418] netlink: 'syz.2.2736': attribute type 23 has an invalid length. [ 440.858948][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 441.743591][T15465] netlink: 'syz.4.2747': attribute type 5 has an invalid length. [ 441.817432][T15469] netlink: 'syz.3.2749': attribute type 11 has an invalid length. [ 441.945971][T15479] netlink: 'syz.0.2751': attribute type 21 has an invalid length. [ 441.959625][T15479] __nla_validate_parse: 28 callbacks suppressed [ 441.959645][T15479] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2751'. [ 442.045697][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 442.259756][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 442.299088][T15497] netlink: 'syz.3.2754': attribute type 1 has an invalid length. [ 442.548384][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 442.557601][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2764'. [ 442.811431][T15531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2767'. [ 442.963420][T15537] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2768'. [ 442.974628][T15544] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.2769'. [ 443.021241][T15544] nbd: socks must be embedded in a SOCK_ITEM attr [ 443.306288][T15558] bridge_slave_0: left allmulticast mode [ 443.315392][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'. [ 443.336586][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.349213][T15561] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2779'. [ 443.374803][T15558] bond3: (slave veth0_to_bond): Releasing active interface [ 443.432357][T15558] bond0: (slave bond_slave_0): Releasing backup interface [ 443.485274][T15558] bond0: (slave bond_slave_1): Releasing backup interface [ 443.500581][T15558] team0: Port device team_slave_0 removed [ 443.508598][T15558] team0: Port device team_slave_1 removed [ 443.529662][T15558] bond2: (slave gretap1): Releasing active interface [ 443.547118][T15558] gretap1: left allmulticast mode [ 443.578066][T15558] bond3: (slave veth9): Releasing active interface [ 443.586553][T15558] bond3: (slave veth9): the permanent HWaddr of slave - 0e:0c:c5:ec:87:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 443.651729][T15558] bond3: (slave veth11): Releasing active interface [ 444.065785][T15612] validate_nla: 2 callbacks suppressed [ 444.065804][T15612] netlink: 'syz.2.2793': attribute type 4 has an invalid length. [ 444.093269][T15609] C speed is unknown, defaulting to 1000 [ 444.163902][T15619] team0: Device gtp1 is of different type [ 444.583375][T15637] C speed is unknown, defaulting to 1000 [ 445.460957][T15681] syzkaller1: entered promiscuous mode [ 445.476851][T15681] syzkaller1: entered allmulticast mode [ 446.249741][T15721] sctp: [Deprecated]: syz.2.2821 (pid 15721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.249741][T15721] Use struct sctp_sack_info instead [ 446.268019][T15721] sctp: [Deprecated]: syz.2.2821 (pid 15721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.268019][T15721] Use struct sctp_sack_info instead [ 446.343122][T15719] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 446.947961][ T61] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.969820][ T1160] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.012141][ T61] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.056832][ T61] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.135741][T15764] veth13: entered promiscuous mode [ 447.145986][T15764] veth13: entered allmulticast mode [ 447.249511][T15773] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 447.257476][T15773] __nla_validate_parse: 11 callbacks suppressed [ 447.257496][T15773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2836'. [ 447.283665][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 447.409731][T15776] bond10: entered promiscuous mode [ 447.435189][T15776] bond10: entered allmulticast mode [ 447.451561][T15776] 8021q: adding VLAN 0 to HW filter on device bond10 [ 447.873681][T15803] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 448.064379][T15814] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2851'. [ 448.417538][T15833] tipc: Enabled bearer , priority 0 [ 448.532434][T15833] syzkaller0: entered promiscuous mode [ 448.558108][T15833] syzkaller0: entered allmulticast mode [ 448.564742][T15833] tipc: Resetting bearer [ 448.664870][ T61] tipc: Resetting bearer [ 448.681711][T15832] tipc: Resetting bearer [ 449.542828][ T5943] tipc: Node number set to 2974392101 [ 450.366635][T15832] tipc: Disabling bearer [ 450.573855][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'. [ 450.701426][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'. [ 450.920382][T15885] netlink: 'syz.0.2871': attribute type 7 has an invalid length. [ 450.988976][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 451.020190][T15888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2873'. [ 451.151033][T15897] tipc: Enabled bearer , priority 10 [ 451.475237][T15915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2881'. [ 451.605148][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 451.732901][T15928] netlink: 'syz.2.2884': attribute type 4 has an invalid length. [ 451.941347][T15936] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2887'. [ 452.303523][T15961] __nla_validate_parse: 1 callbacks suppressed [ 452.303543][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 452.384924][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 452.440170][T15966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 452.490122][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2899'. [ 452.656720][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'. [ 452.829346][T15991] tipc: Enabled bearer , priority 0 [ 452.927221][T15991] tipc: Disabling bearer [ 453.036819][T16008] netlink: 'syz.2.2906': attribute type 1 has an invalid length. [ 453.112551][ T1160] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 453.155512][T16015] syzkaller1: entered promiscuous mode [ 453.168622][T16015] syzkaller1: entered allmulticast mode [ 453.586651][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.596997][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.612902][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.622260][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.651305][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.711276][T16019] C speed is unknown, defaulting to 1000 [ 454.106004][T16030] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2915'. [ 454.611660][T16019] chnl_net:caif_netlink_parms(): no params data found [ 454.654040][T16061] 8021q: VLANs not supported on dvmrp1 [ 454.966364][T16019] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.978243][T16019] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.991408][T16019] bridge_slave_0: entered allmulticast mode [ 455.003125][T16019] bridge_slave_0: entered promiscuous mode [ 455.056942][T16019] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.086205][T16019] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.105470][T16019] bridge_slave_1: entered allmulticast mode [ 455.116629][T16019] bridge_slave_1: entered promiscuous mode [ 455.234623][T16019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.276044][T16019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.300791][T16086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2927'. [ 455.742495][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2929'. [ 455.751890][ T5872] Bluetooth: hci5: command tx timeout [ 456.282686][T16105] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 456.300778][T16105] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 456.400764][T16019] team0: Port device team_slave_0 added [ 456.441250][T16019] team0: Port device team_slave_1 added [ 456.480506][T16112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2932'. [ 456.643490][T16019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.667960][T16019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.699874][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2936'. [ 456.716919][T16019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.845879][T16019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.859033][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 456.878813][T16019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.925295][T16019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.955830][T16131] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 456.977332][T16131] bond5: (slave vcan0): Error -95 calling set_mac_address [ 457.171038][T16144] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 457.191640][T16144] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 457.275403][T16019] hsr_slave_0: entered promiscuous mode [ 457.297147][T16019] hsr_slave_1: entered promiscuous mode [ 457.304175][T16019] debugfs: 'hsr0' already exists in 'hsr' [ 457.319484][T16019] Cannot create hsr debugfs directory [ 457.415502][T16167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.767341][T16180] dvmrp0: entered allmulticast mode [ 457.819142][ T5872] Bluetooth: hci5: command tx timeout [ 457.852762][T16188] team0 (unregistering): Port device team_slave_0 removed [ 457.865134][T16188] team0 (unregistering): Port device team_slave_1 removed [ 457.944968][T16019] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.965870][T16019] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.068046][T16019] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.099108][T16019] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.160243][T16199] netlink: 'syz.1.2958': attribute type 18 has an invalid length. [ 458.180491][T16203] IPVS: set_ctl: invalid protocol: 79 0.0.0.0:20000 [ 458.188572][T16199] netlink: 'syz.1.2958': attribute type 18 has an invalid length. [ 458.211097][T16019] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.231928][T16019] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.353995][T16019] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.374077][T16019] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.375792][T16213] __nla_validate_parse: 2 callbacks suppressed [ 458.375811][T16213] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2961'. [ 458.513247][T16213] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2961'. [ 458.717557][T16224] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2964'. [ 458.737713][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 458.759238][T16019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.797550][T16019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.836447][T16019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.897742][T16019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.110370][T16251] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2969'. [ 459.136470][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 459.438328][T16270] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2975'. [ 459.446338][T16271] digital: digital_start_poll: Unknown protocol [ 459.455502][T16019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.526618][T16019] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.560574][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.567756][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.660661][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.667869][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.733970][T16282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2974'. [ 459.759807][T16282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2974'. [ 459.899409][ T5872] Bluetooth: hci5: command tx timeout [ 460.169878][T16300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2979'. [ 460.340933][T16310] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 460.401448][T16019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.484798][T16317] bond0: Error: Cannot enslave bond to itself. [ 460.501270][T16317] ================================================================== [ 460.509404][T16317] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 460.517334][T16317] Read of size 1 at addr ffff888032cf1430 by task syz.0.2983/16317 [ 460.525257][T16317] [ 460.527609][T16317] CPU: 1 UID: 0 PID: 16317 Comm: syz.0.2983 Not tainted syzkaller #0 PREEMPT(full) [ 460.527639][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.527653][T16317] Call Trace: [ 460.527662][T16317] [ 460.527672][T16317] dump_stack_lvl+0x189/0x250 [ 460.527703][T16317] ? __kasan_check_byte+0x12/0x40 [ 460.527733][T16317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.527757][T16317] ? lock_release+0x4b/0x3e0 [ 460.527791][T16317] ? __virt_addr_valid+0x4a5/0x5c0 [ 460.527819][T16317] print_report+0xca/0x240 [ 460.527839][T16317] ? xfrm_state_find+0x2cf2/0x5400 [ 460.527858][T16317] kasan_report+0x118/0x150 [ 460.527887][T16317] ? xfrm_state_find+0x2cf2/0x5400 [ 460.527912][T16317] xfrm_state_find+0x2cf2/0x5400 [ 460.527938][T16317] ? __pfx___find_rr_leaf+0x10/0x10 [ 460.527975][T16317] ? xfrm_state_find+0x1da/0x5400 [ 460.527998][T16317] ? __pfx_xfrm_state_find+0x10/0x10 [ 460.528016][T16317] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 460.528051][T16317] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 460.528095][T16317] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 460.528130][T16317] ? ip6_pol_route+0x162/0x1180 [ 460.528158][T16317] ? __pfx_ip6_pol_route+0x10/0x10 [ 460.528180][T16317] ? __lock_acquire+0xab9/0xd20 [ 460.528210][T16317] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 460.528236][T16317] ? __lock_acquire+0xab9/0xd20 [ 460.528277][T16317] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 460.528310][T16317] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 460.528338][T16317] ? xfrm_expand_policies+0x41f/0x6a0 [ 460.528366][T16317] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 460.528393][T16317] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 460.528422][T16317] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 460.528447][T16317] ? txopt_get+0x335/0x3f0 [ 460.528477][T16317] ? aa_label_sk_perm+0x4cd/0x630 [ 460.528507][T16317] ? __pfx_txopt_get+0x10/0x10 [ 460.528536][T16317] ? save_fpregs_to_fpstate+0xa3/0x210 [ 460.528565][T16317] xfrm_lookup_route+0x3c/0x1c0 [ 460.528591][T16317] rawv6_sendmsg+0xdab/0x1820 [ 460.528630][T16317] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 460.528667][T16317] ? finish_task_switch+0x266/0x950 [ 460.528699][T16317] ? __pfx_aa_sk_perm+0x10/0x10 [ 460.528729][T16317] ? sock_rps_record_flow+0x19/0x410 [ 460.528756][T16317] ? inet_sendmsg+0x2f4/0x370 [ 460.528779][T16317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.528812][T16317] __sock_sendmsg+0x19c/0x270 [ 460.528841][T16317] ____sys_sendmsg+0x52d/0x830 [ 460.528866][T16317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.528893][T16317] ? import_iovec+0x74/0xa0 [ 460.528918][T16317] ___sys_sendmsg+0x21f/0x2a0 [ 460.528940][T16317] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.528980][T16317] ? __fget_files+0x2a/0x420 [ 460.529009][T16317] ? __fget_files+0x3a0/0x420 [ 460.529045][T16317] __sys_sendmmsg+0x227/0x430 [ 460.529089][T16317] ? __pfx___sys_sendmmsg+0x10/0x10 [ 460.529110][T16317] ? do_futex+0x395/0x420 [ 460.529155][T16317] ? rcu_is_watching+0x15/0xb0 [ 460.529179][T16317] __x64_sys_sendmmsg+0xa0/0xc0 [ 460.529200][T16317] do_syscall_64+0xfa/0x3b0 [ 460.529218][T16317] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.529248][T16317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.529269][T16317] ? clear_bhb_loop+0x60/0xb0 [ 460.529292][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.529312][T16317] RIP: 0033:0x7f5028f8ebe9 [ 460.529332][T16317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.529351][T16317] RSP: 002b:00007f50271d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 460.529374][T16317] RAX: ffffffffffffffda RBX: 00007f50291c6090 RCX: 00007f5028f8ebe9 [ 460.529390][T16317] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 000000000000000a [ 460.529403][T16317] RBP: 00007f5029011e19 R08: 0000000000000000 R09: 0000000000000000 [ 460.529416][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.529428][T16317] R13: 00007f50291c6128 R14: 00007f50291c6090 R15: 00007fff7fe0e2b8 [ 460.529453][T16317] [ 460.529460][T16317] [ 460.921804][T16317] Allocated by task 16300: [ 460.926222][T16317] kasan_save_track+0x3e/0x80 [ 460.930938][T16317] __kasan_slab_alloc+0x6c/0x80 [ 460.935800][T16317] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 460.941275][T16317] xfrm_state_alloc+0x24/0x2f0 [ 460.946056][T16317] xfrm_add_sa+0x17d1/0x4070 [ 460.950651][T16317] xfrm_user_rcv_msg+0x7a3/0xab0 [ 460.955601][T16317] netlink_rcv_skb+0x205/0x470 [ 460.960376][T16317] xfrm_netlink_rcv+0x79/0x90 [ 460.965062][T16317] netlink_unicast+0x82c/0x9e0 [ 460.969876][T16317] netlink_sendmsg+0x805/0xb30 [ 460.974656][T16317] __sock_sendmsg+0x21c/0x270 [ 460.979339][T16317] ____sys_sendmsg+0x505/0x830 [ 460.984113][T16317] ___sys_sendmsg+0x21f/0x2a0 [ 460.988897][T16317] __x64_sys_sendmsg+0x19b/0x260 [ 460.993847][T16317] do_syscall_64+0xfa/0x3b0 [ 460.998348][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.004245][T16317] [ 461.006575][T16317] Freed by task 5943: [ 461.010554][T16317] kasan_save_track+0x3e/0x80 [ 461.015238][T16317] kasan_save_free_info+0x46/0x50 [ 461.020274][T16317] __kasan_slab_free+0x5b/0x80 [ 461.025059][T16317] kmem_cache_free+0x18f/0x400 [ 461.029835][T16317] xfrm_state_gc_task+0x52d/0x6b0 [ 461.034868][T16317] process_scheduled_works+0xae1/0x17b0 [ 461.040416][T16317] worker_thread+0x8a0/0xda0 [ 461.045014][T16317] kthread+0x70e/0x8a0 [ 461.049090][T16317] ret_from_fork+0x3f9/0x770 [ 461.053771][T16317] ret_from_fork_asm+0x1a/0x30 [ 461.058557][T16317] [ 461.060882][T16317] The buggy address belongs to the object at ffff888032cf1100 [ 461.060882][T16317] which belongs to the cache xfrm_state of size 928 [ 461.074858][T16317] The buggy address is located 816 bytes inside of [ 461.074858][T16317] freed 928-byte region [ffff888032cf1100, ffff888032cf14a0) [ 461.088671][T16317] [ 461.091007][T16317] The buggy address belongs to the physical page: [ 461.097448][T16317] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032cf2640 pfn:0x32cf0 [ 461.107524][T16317] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 461.116025][T16317] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 461.123580][T16317] page_type: f5(slab) [ 461.127582][T16317] raw: 00fff00000000040 ffff888145ad5a00 dead000000000122 0000000000000000 [ 461.136166][T16317] raw: ffff888032cf2640 00000000800f0007 00000000f5000000 0000000000000000 [ 461.144749][T16317] head: 00fff00000000040 ffff888145ad5a00 dead000000000122 0000000000000000 [ 461.153436][T16317] head: ffff888032cf2640 00000000800f0007 00000000f5000000 0000000000000000 [ 461.162116][T16317] head: 00fff00000000002 ffffea0000cb3c01 00000000ffffffff 00000000ffffffff [ 461.170795][T16317] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 461.179466][T16317] page dumped because: kasan: bad access detected [ 461.185890][T16317] page_owner tracks the page as allocated [ 461.191605][T16317] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6232, tgid 6230 (syz.4.78), ts 100644119821, free_ts 100641332435 [ 461.210725][T16317] post_alloc_hook+0x240/0x2a0 [ 461.215506][T16317] get_page_from_freelist+0x21e4/0x22c0 [ 461.221052][T16317] __alloc_frozen_pages_noprof+0x181/0x370 [ 461.226864][T16317] alloc_pages_mpol+0x232/0x4a0 [ 461.231749][T16317] allocate_slab+0x8a/0x370 [ 461.236251][T16317] ___slab_alloc+0xbeb/0x1410 [ 461.240938][T16317] kmem_cache_alloc_noprof+0x283/0x3c0 [ 461.246409][T16317] xfrm_state_alloc+0x24/0x2f0 [ 461.251191][T16317] xfrm_state_find+0x37d4/0x5400 [ 461.256132][T16317] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 461.262290][T16317] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 461.267672][T16317] xfrm_lookup_route+0x3c/0x1c0 [ 461.272526][T16317] ip6_datagram_dst_update+0x75c/0xcb0 [ 461.277997][T16317] __ip6_datagram_connect+0xbd1/0x1150 [ 461.283485][T16317] ip6_datagram_connect_v6_only+0x63/0xa0 [ 461.289224][T16317] __sys_connect+0x316/0x440 [ 461.293831][T16317] page last free pid 6230 tgid 6230 stack trace: [ 461.300152][T16317] __free_frozen_pages+0xbc4/0xd30 [ 461.305271][T16317] __slab_free+0x303/0x3c0 [ 461.309685][T16317] qlist_free_all+0x97/0x140 [ 461.314284][T16317] kasan_quarantine_reduce+0x148/0x160 [ 461.319751][T16317] __kasan_slab_alloc+0x22/0x80 [ 461.324611][T16317] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 461.330094][T16317] vm_area_dup+0x2b/0x680 [ 461.334431][T16317] __split_vma+0x1a9/0xa00 [ 461.338871][T16317] vma_modify+0x12c3/0x1970 [ 461.343386][T16317] vma_modify_flags+0x1e8/0x230 [ 461.348236][T16317] mprotect_fixup+0x407/0x9c0 [ 461.352908][T16317] do_mprotect_pkey+0x8cd/0xce0 [ 461.357758][T16317] __x64_sys_mprotect+0x80/0x90 [ 461.362604][T16317] do_syscall_64+0xfa/0x3b0 [ 461.367109][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.373005][T16317] [ 461.375430][T16317] Memory state around the buggy address: [ 461.381061][T16317] ffff888032cf1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.389121][T16317] ffff888032cf1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.397184][T16317] >ffff888032cf1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.405305][T16317] ^ [ 461.410948][T16317] ffff888032cf1480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 461.419131][T16317] ffff888032cf1500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 461.427285][T16317] ================================================================== [ 461.472704][T16019] veth0_vlan: entered promiscuous mode [ 461.474881][T16317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 461.474907][T16317] CPU: 0 UID: 0 PID: 16317 Comm: syz.0.2983 Not tainted syzkaller #0 PREEMPT(full) [ 461.474935][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.474952][T16317] Call Trace: [ 461.474962][T16317] [ 461.474972][T16317] dump_stack_lvl+0x99/0x250 [ 461.475019][T16317] ? __asan_memcpy+0x40/0x70 [ 461.475048][T16317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.475077][T16317] ? __pfx__printk+0x10/0x10 [ 461.475117][T16317] vpanic+0x281/0x750 [ 461.475144][T16317] ? preempt_schedule+0xae/0xc0 [ 461.475179][T16317] ? __pfx_vpanic+0x10/0x10 [ 461.475205][T16317] ? preempt_schedule_common+0x83/0xd0 [ 461.475239][T16317] ? preempt_schedule+0xae/0xc0 [ 461.475268][T16317] ? __pfx_preempt_schedule+0x10/0x10 [ 461.475307][T16317] panic+0xb9/0xc0 [ 461.475334][T16317] ? __pfx_panic+0x10/0x10 [ 461.475363][T16317] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 461.475400][T16317] ? xfrm_state_find+0x2cf2/0x5400 [ 461.475425][T16317] check_panic_on_warn+0x89/0xb0 [ 461.475459][T16317] ? xfrm_state_find+0x2cf2/0x5400 [ 461.475481][T16317] end_report+0x78/0x160 [ 461.475515][T16317] kasan_report+0x129/0x150 [ 461.475549][T16317] ? xfrm_state_find+0x2cf2/0x5400 [ 461.475578][T16317] xfrm_state_find+0x2cf2/0x5400 [ 461.475607][T16317] ? __pfx___find_rr_leaf+0x10/0x10 [ 461.475653][T16317] ? xfrm_state_find+0x1da/0x5400 [ 461.475683][T16317] ? __pfx_xfrm_state_find+0x10/0x10 [ 461.475705][T16317] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 461.475747][T16317] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 461.475791][T16317] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 461.475833][T16317] ? ip6_pol_route+0x162/0x1180 [ 461.475863][T16317] ? __pfx_ip6_pol_route+0x10/0x10 [ 461.475896][T16317] ? __lock_acquire+0xab9/0xd20 [ 461.475931][T16317] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 461.475962][T16317] ? __lock_acquire+0xab9/0xd20 [ 461.476015][T16317] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 461.476052][T16317] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 461.476083][T16317] ? xfrm_expand_policies+0x41f/0x6a0 [ 461.476117][T16317] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 461.476148][T16317] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 461.476183][T16317] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 461.476213][T16317] ? txopt_get+0x335/0x3f0 [ 461.476249][T16317] ? aa_label_sk_perm+0x4cd/0x630 [ 461.476285][T16317] ? __pfx_txopt_get+0x10/0x10 [ 461.476320][T16317] ? save_fpregs_to_fpstate+0xa3/0x210 [ 461.476355][T16317] xfrm_lookup_route+0x3c/0x1c0 [ 461.476385][T16317] rawv6_sendmsg+0xdab/0x1820 [ 461.476430][T16317] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 461.476473][T16317] ? finish_task_switch+0x266/0x950 [ 461.476512][T16317] ? __pfx_aa_sk_perm+0x10/0x10 [ 461.476548][T16317] ? sock_rps_record_flow+0x19/0x410 [ 461.476581][T16317] ? inet_sendmsg+0x2f4/0x370 [ 461.476610][T16317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.476639][T16317] __sock_sendmsg+0x19c/0x270 [ 461.476675][T16317] ____sys_sendmsg+0x52d/0x830 [ 461.476705][T16317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.476737][T16317] ? import_iovec+0x74/0xa0 [ 461.476767][T16317] ___sys_sendmsg+0x21f/0x2a0 [ 461.476794][T16317] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.476843][T16317] ? __fget_files+0x2a/0x420 [ 461.476880][T16317] ? __fget_files+0x3a0/0x420 [ 461.476921][T16317] __sys_sendmmsg+0x227/0x430 [ 461.476951][T16317] ? __pfx___sys_sendmmsg+0x10/0x10 [ 461.476974][T16317] ? do_futex+0x395/0x420 [ 461.477034][T16317] ? rcu_is_watching+0x15/0xb0 [ 461.477062][T16317] __x64_sys_sendmmsg+0xa0/0xc0 [ 461.477091][T16317] do_syscall_64+0xfa/0x3b0 [ 461.477113][T16317] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.477147][T16317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.477172][T16317] ? clear_bhb_loop+0x60/0xb0 [ 461.477199][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.477223][T16317] RIP: 0033:0x7f5028f8ebe9 [ 461.477244][T16317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.477266][T16317] RSP: 002b:00007f50271d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 461.477293][T16317] RAX: ffffffffffffffda RBX: 00007f50291c6090 RCX: 00007f5028f8ebe9 [ 461.477312][T16317] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 000000000000000a [ 461.477328][T16317] RBP: 00007f5029011e19 R08: 0000000000000000 R09: 0000000000000000 [ 461.477355][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.477369][T16317] R13: 00007f50291c6128 R14: 00007f50291c6090 R15: 00007fff7fe0e2b8 [ 461.477398][T16317] [ 461.478551][T16317] Kernel Offset: disabled