last executing test programs: 5.203135274s ago: executing program 4 (id=2225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24000045) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf250700000011000200000000000000f0ffffffffffe000000114000300fc000000000000cbb72f3e7fd7acbc2993f1ba831516f4bcba7d00000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000325bd7000fddbdf250700000808000400ffffffff14000600766c616e3000000075f8dfd67e3e232c"], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4000001) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0xfffffffffffffe1e) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@deltclass={0x4d8, 0x29, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x2, 0x8}, {0x3, 0x5}}, [@c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0x9}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xffff}}]}}, @c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x5, 0xbf, 0x40, 0x1, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x21, 0x2, 0x16, 0x9, 0x9, 0x7, 0x6, 0xd}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1b, 0x0, 0x11, 0x5, 0xfffffff1, 0x10, 0x7, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x0, 0x1f, 0x7, 0x3ff, 0xd, 0x1af8, 0x462}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x8, 0x7f, 0x4, 0x7, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x2, 0x3, 0x400, 0x1, 0x7fffffff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x6, 0x2, 0x8, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x1, 0x6, 0x7, 0x5, 0x3, 0x7fff, 0x9, 0x5, 0x4, 0x5, 0x2, 0xfffffc00, 0xd, 0x4, 0x1, 0x6, 0x7fff, 0xcac, 0x8000, 0x1ff, 0xff6, 0x9, 0xfffffff7, 0x4, 0x2, 0x5, 0x2a, 0x4, 0x7, 0x4, 0x10, 0x401, 0x6, 0xe4e, 0x9, 0x2c6b, 0x9, 0x3a87, 0x8, 0x8, 0x8, 0x3, 0x5, 0xb34c, 0x6, 0xbecc, 0xffffff6e, 0x7, 0x1, 0x10001, 0xffffff6d, 0x3, 0x7, 0x8149, 0xe000000, 0x2, 0xc484, 0x0, 0x2, 0x4, 0x5, 0x7ff, 0x40, 0x80000000, 0xf, 0x7, 0x10000, 0x101, 0x6, 0x7fffffff, 0x7f, 0xfffffff9, 0x1, 0x10000, 0x1, 0x0, 0x8, 0x5, 0x8, 0xff, 0x70, 0x0, 0x7fffffff, 0xe, 0x8, 0x10, 0x1, 0x5b, 0xdd7d, 0xffffb525, 0x8, 0xfffffffe, 0x0, 0x3, 0x800, 0xe, 0x9, 0x7, 0xffffffff, 0x6, 0x920, 0xf99, 0x2558dccd, 0x9, 0xfffffff9, 0xfffffffd, 0x5, 0x10, 0xfc5b, 0x401, 0x10001, 0x3, 0x1000, 0x0, 0x6, 0x0, 0x7, 0x6, 0x3, 0x8, 0x5, 0x5833ec7e, 0x4, 0x10000, 0x5, 0x8, 0x3, 0x2, 0x0, 0x1, 0x7c, 0x7d, 0x5, 0x80, 0x951, 0xce, 0x0, 0x6, 0x1, 0x8, 0x2, 0x9, 0x78, 0x27, 0x1ff, 0x0, 0x6, 0x1, 0x80, 0x7, 0x6, 0x7, 0x1ff, 0x1, 0xfffffff8, 0x8, 0xab64, 0x400, 0x9, 0x225, 0x1, 0x46e4, 0xa, 0x200, 0xc1000000, 0xfffff000, 0x1000, 0xbb23, 0x9, 0x2, 0x10, 0xffff, 0xb, 0x7f, 0x0, 0x2, 0x1, 0x8009, 0x5, 0x9, 0x401, 0x83d, 0x40000, 0x1, 0x8001, 0x40, 0x1ff, 0x4, 0x7, 0x8, 0x0, 0x800, 0x9, 0xec0, 0x0, 0x0, 0x4, 0xfffffff8, 0x1, 0xcc, 0x2b, 0xb6a2, 0xfffffff7, 0x3, 0x8001, 0x8, 0x8, 0x1ff, 0x81, 0x3, 0x101, 0x70, 0x3, 0x80, 0x357, 0x3, 0x101, 0x6, 0x3, 0xfffffff0, 0x1, 0x3, 0x9, 0xdf81, 0x1000, 0x7, 0xfffffff7, 0x9, 0x1, 0x5, 0x7f, 0x51, 0x8, 0x40, 0x7, 0x2, 0xfffffffe, 0x5, 0x7, 0xaf, 0x1, 0xfffffffb, 0x2, 0x2, 0x1, 0x3, 0x7fff, 0x5, 0x3, 0x2, 0x3, 0x6, 0x10000, 0x5, 0x3]}]}}]}, 0x4d8}}, 0x20000000) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) 4.919439926s ago: executing program 3 (id=2229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001280)=@delchain={0x24, 0x65, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0xfff1, 0xb}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0xc081) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) 4.515963465s ago: executing program 0 (id=2232): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0020000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000d1b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='f2fs_write_begin\x00', r0}, 0x18) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="00010d0004000600f4044d1d00760068000007339078ac1410c070000001ff000000020000000c820d4a88d54c152599dfaf3f6600000077adf1db1c1960691567b0c600000000ccd8d85aa608c369996896dd24f61732410a9115410c3824696fd97af41bab889ba66bb5da3da0cf3bf546796a9f58005679"], 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r7, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040044) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x4004010) socket$nl_generic(0x10, 0x3, 0x10) 4.377689788s ago: executing program 1 (id=2235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) r3 = getpid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000340)=0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={r3, r4, 0xee01}, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x40, 0x40, 0xe81e, 0x200, {{0x12, 0x4, 0x0, 0x23, 0x48, 0x64, 0x0, 0x69, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0x3, 'g'}, @generic={0x86, 0x12, "bd11c3996b68ce8d85e3430188b9e2f5"}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x4, [{@rand_addr=0x64010101, 0x6}, {@multicast2, 0x4}]}, @timestamp={0x44, 0x8, 0x82, 0x0, 0x4, [0x1dd18]}]}}}}}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0) (async) poll(&(0x7f0000000080)=[{r9, 0x4429}], 0x1, 0x6) 4.310707502s ago: executing program 3 (id=2237): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20008081}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1021) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r10, 0x0, 0xc9804) 4.189945219s ago: executing program 3 (id=2238): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5, 0x3}) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'rlimit'}]}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@cb_func={0x18, 0xa}, @jmp={0x5, 0x1, 0xb, 0x8, 0x3, 0xc, 0x4}, @exit, @ldst={0x1, 0x0, 0x6, 0x3, 0x1, 0x50, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x401, 0x32, &(0x7f0000000100)=""/50, 0x41000, 0x2, '\x00', 0x0, @fallback=0x24, r0, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xf, 0x800, 0x3}, 0x10, 0x0, r0, 0x5, &(0x7f00000001c0)=[r0, r0, r0], &(0x7f0000000200)=[{0x5, 0x3, 0x7}, {0x0, 0x4, 0xa, 0x2}, {0x1, 0x3, 0xa, 0x16}, {0x4, 0x4, 0x10, 0x75373a1c575bba31}, {0x3, 0x4, 0xd, 0xc}], 0x10, 0x2}, 0x94) r2 = socket$isdn(0x22, 0x3, 0x21) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) poll(&(0x7f0000000380)=[{r0, 0x440}, {0xffffffffffffffff, 0x88}, {r0, 0x22}, {r0}, {r0, 0x440c}, {r1, 0x80}, {r2, 0xc000}, {r3, 0x190}, {r0, 0x104}], 0x9, 0x8) socket$kcm(0x29, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x10004004}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x3, 0xb]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40051}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x9b, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x0, 0x1, 0x8, 0x0, 0x1, 0x10001, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x1}, 0x50) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000b40)={0x1, 0x1, 0x1000, 0xb3, &(0x7f0000000a00)="670b4f7af7b7857b6ecfe56506d918fa970045c0b8bbe1fecfc702a36dbf66fa9e7812fc97e318c7e3f4241f472f950a8ef10c8330d4ab448dc74dd9dd5eb594936208cbff9576e246f0be7700e6b6259319e948d21af9373364255caa0c7c664bfe3fe132c1c0fd3197da90328b2d09658f9f090cdace56cc84658d7877d1bc7b84d19896117b3bc28873452898c03cf27d3c77a2aa0cd2c7dc511a671c42429d70452ef5601d77ff848ba5338e1f6933f3db", 0x76, 0x0, &(0x7f0000000ac0)="10baefcbb5cfed4e8f894cffc1bf02353cde0719de4d1b71e31ec5a6b1968a4ea3e98692f497c63590a6e3314cc56b543fab47220a324460c932552a9fb0ce1d8a968c193520891cbdda73c0e99a524f78ffa50094d85a1e494cbce3a27611d3a57358b56ba67e3957e12ebd9f5af4f4947c312a9b2a"}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, r8, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_REG_RULES={0xa8, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4238}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcfa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd0}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd91}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x181) write$cgroup_subtree(r0, &(0x7f0000000dc0)={[{0x2b, 'io'}, {0x2d, 'net'}, {0x2d, 'cpuset'}, {0x6, 'hugetlb'}, {0x2d, 'net'}, {0x2b, 'devices'}, {0x0, 'cpu'}, {0x2b, 'net_cls'}]}, 0x36) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000e00)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000e40)={0x0, @in6={{0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, 0x4, 0x7fffffff, 0x81, 0x7, 0x80000000}, &(0x7f0000000f00)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000f40)={r9, @in6={{0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5da1}}, 0x8, 0x0, 0x5, 0x1, 0x8001}, &(0x7f0000001000)=0x98) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000001040)=0x2, 0x4) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000001080), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000010c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e22, 0x81, @loopback}, @in6={0xa, 0x4e22, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}], 0xa8) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r8, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0xa}}}}, [""]}, 0x20}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000001300)={'gre0\x00', &(0x7f0000001280)={'syztnl2\x00', r7, 0x20, 0x20, 0x6, 0x9, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x6, 0x2b, 0x0, @local, @empty, {[@end, @timestamp_addr={0x44, 0x34, 0x74, 0x1, 0x5, [{@loopback, 0x8}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010101, 0xd4b}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010102, 0xc}]}]}}}}}) close(r2) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000001340)={0x5, 0x7, 0xa, 0xfc, 0x81, 0x8, 0x15, "dd6861cf058c5f1abe8f6a668503a08fd3ee037b", "d3f32b9e4e52e5182bea63e1234716d224352ae3"}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000001380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800, @bcast, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 4.187513344s ago: executing program 1 (id=2239): unshare(0x400) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x39e) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}}, 0x0) listen(0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32=r10, @ANYBLOB="14000100ff0500000000000000000000000000010800080002040000"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) 4.154928382s ago: executing program 3 (id=2241): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x11) (async) shutdown(r0, 0x1) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r1, r2}, 0xc) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001200)={0x60000010}) (async) r6 = epoll_create1(0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000300)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000600)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) sendmmsg$inet(r8, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a35b", 0x137}, {&(0x7f00000007c0)="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", 0xde5}, {&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f675fa786894a977f03a578cd0952", 0x27}, {&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdcc16d17eb847d268f96dbef0cb2788f69128e5807cabf5febbea9f3af1728c43010321fe35ab1bd50b26531473ec12eeb24c15f6247c30b4ba41347fd2ecb64c7f2f254c5566f8dad74e53cad7bf18ef03acc9475cbecaca73d4f425247fb72e587a4df6f89a99da2f70b36cecaf4192de5b95d59528bf443cb2eea28def8c0e2afe6d20317e6018103ed06b2fd36f473043435594f7910a5b4810ee7", 0xb4}, {&(0x7f0000002600)="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", 0xf25}], 0x7}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) (async) splice(r3, 0x0, r8, 0x0, 0x8000000000025a5, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x4) 3.945178867s ago: executing program 2 (id=2242): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 3.750209792s ago: executing program 4 (id=2243): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB='\b\x00\v\x00!'], 0x54}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) (async) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x6, 0x2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x20000000) 3.730799742s ago: executing program 1 (id=2244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 3.711196289s ago: executing program 2 (id=2245): r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000000)=""/16, 0x10, 0x40002020, &(0x7f0000000380)=@hci={0x1f, 0x3}, 0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=0xffffffffffffffff, 0xc, 0x1, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, @void, @value, @void, @void, r4}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='f2fs_write_end\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000600)=0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x15, @val=@tcx={@void, @value=r5, @void, @void, r4}}, 0x1c) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r7, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="150000002020000000000000", @ANYRES32=r7, @ANYBLOB="a4f56702e336cc7b330fed5f79c7e72a73b1041ad9ec048bd46dd412ca6e", @ANYRES64=r4], 0x20) unshare(0x2c020400) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, 0x0, 0x0}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f03000005eb0000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a32270da4271ba3f457a38d4245685ec94fbc85908ada89a69bb49b032bce695e57a020dd047c85011caf0bec7d", 0x70}, {&(0x7f0000000900)="8d47487e5461ba7b8d2c87fe38df2f1b003ea2ccddbefcfdcc", 0x19}, {&(0x7f0000000040)="11b5b97e86e02eec26884253aa7cf63aea4f14d84d2f511f3a722d55c2aa821bc8d0456199feebf6961c762197590a87130ebf02bdc35d0c39eb56af6d2a36bb2df01de7bff3120dc45473b23122927aafbed2c5e5164d442cd684105b0af956b2e58360bbc5e1ea112082f231de48f24c738d90e15cc529f22fff4a42e9da7673e8679809f13262692f777b935ff501cbe986513c7572381871aa662c94b334549d7def3cbd563553c89f68884a501ead0f161f5c98d7ecbf279ea5a52aab17742786a7d91c101dca7d1b53e3fdbff645a2f3d61de59e6a8fb2424a8380", 0xde}, {&(0x7f0000000180)="36fc10f339cac3631a47c90c50f75f009f242036f97d3eb93d8538c7b77457b149080c14dff3e89fa6cdada4c78a8a3a79e155f5b679c0900ad8549d39c85734aa2b825c07d5be67e28746ef8f63eba8a7f35a4ed6923bf9ea330fc9ff98517af434481f451cecc4b9f263be79fe9faa2aaaefc9ea23e3dbe8cb6abe0c881b4db7483488a9983a64", 0x88}, {&(0x7f0000000240)="532b52ef0bd362a27b58635275f440b97e9bf8a0501ddd08002a16e0b88a013115acaf58f61dcb670bdf3273eb85e2928d65d386c1de5a7617a0dad8860be130d725496600181a909aef8ce2dbe287ac64210ef517bcc7e71af5e02acf2c2d3c2a010148cff5fb68c22a1c0c2531645cf590d0fa5c678950fc56ed5370040df640761f5d7c", 0x85}], 0x5, 0x0, 0x0, 0x1f000801}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) 3.570292189s ago: executing program 4 (id=2246): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.553222135s ago: executing program 1 (id=2247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r2}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r6, 0x0, 0x44}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x106, 0x106, 0x4, [@datasec={0x3, 0x7, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x9}, {0x1, 0xfffffff7}, {0x1, 0x779, 0x8}, {0x1, 0xfffffff8, 0x3}, {0x3, 0x81, 0x6}, {0x5, 0x95, 0xffff}, {0x5, 0x3, 0x5}], "c8f1"}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @union={0x1, 0x6, 0x0, 0x5, 0x1, 0x9, [{0xd, 0x1, 0xffffd006}, {0x4, 0x4, 0xca}, {0x10, 0x4, 0x100}, {0x6, 0x2, 0xf3d037d}, {0x0, 0x0, 0x3}, {0x6, 0x4, 0xffff}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x66, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x33, 0x0, 0x5, 0x4}, @float={0xa, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000180)=""/56, 0x124, 0x38, 0x0, 0x10000, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xfff, 0x0, r1, 0x1a4, '\x00', r6, r7, 0x0, 0x4, 0x4}, 0x50) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) writev(r3, &(0x7f0000001180)=[{&(0x7f0000001240)="06367d6d", 0x4}], 0x1) 3.534073312s ago: executing program 0 (id=2248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x3cdb3160d727cdab, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0xfffffffffffffec6, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095", @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x9a, &(0x7f00000001c0)=""/154}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3600000014000007"], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x0, 0x1a, 0x0, &(0x7f0000000700)=""/26, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x3cdb3160d727cdab, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0xfffffffffffffec6, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095", @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x9a, &(0x7f00000001c0)=""/154}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3600000014000007"], 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x0, 0x1a, 0x0, &(0x7f0000000700)=""/26, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}, 0x4c) (async) 3.404697825s ago: executing program 0 (id=2249): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x8}, 0x8) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) 3.194152411s ago: executing program 3 (id=2250): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="181100008854a722dafa81c8a5fa6b863b65fef2224b61d691c5b3a436b5ff73f90db4efda083205fcb8d8601e9cbd069c0bcd5c9bacdee8af35159fdf3b56813ec2cf98c0438169823c59", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xb0, &(0x7f0000000440)=""/176, 0x41100, 0x58, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xe, 0x4, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x1, 0x9, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x5, 0x5, 0x10, 0x9}, {0x4, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="181100008854a722dafa81c8a5fa6b863b65fef2224b61d691c5b3a436b5ff73f90db4efda083205fcb8d8601e9cbd069c0bcd5c9bacdee8af35159fdf3b56813ec2cf98c0438169823c59", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0xb0, &(0x7f0000000440)=""/176, 0x41100, 0x58, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xe, 0x4, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x1, 0x9, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x5, 0x5, 0x10, 0x9}, {0x4, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80000015, 0x0, 0x0, 0x20980, 0x1}, 0x94) socket(0x1e, 0x1, 0x0) (async) r3 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0xfffffffd, 0x9}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000280)={0x6, 0x7, 0x4, 0x5}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000280)={0x6, 0x7, 0x4, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000000)=0x2e592894, 0x4) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r5, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020000001100010000000000000000000000000aabdcd275"], 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020000001100010000000000000000000000000aabdcd275"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xc}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xc}, &(0x7f0000000100)=0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340", @ANYRES32], 0xc0}}, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) 3.188663428s ago: executing program 0 (id=2251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000), 0x2) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000001000c000000210000000200000000000004ed010000007eab6c3e0dedc03019ec78df04000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000080)="6719", 0x2, 0x20004810, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3a, 0x0) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) splice(r8, 0x0, r13, 0x0, 0x80, 0x8) r14 = socket$inet_udp(0x2, 0x2, 0x0) splice(r12, 0x0, r14, 0x0, 0x100000004, 0x0) write(r10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x27, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8f5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffbd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @jmp={0x5, 0x1, 0x8, 0x1, 0x4, 0x30, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x2, 0x4, 0xa, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000040)={0xe71, 'syz1\x00'}) 2.842957344s ago: executing program 1 (id=2252): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b000100697036746e6c0000100002800500090004000000040013000800040000050000"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 2.841934873s ago: executing program 2 (id=2253): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async) unshare(0x24020400) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2af, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) (async, rerun: 64) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x401c5820, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_MON_SET(r2, 0x0, 0x8000) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7}, {0xd, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r7, 0x607d8000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000000006a5473116d0000000000182d000080d19112bbd97254c9c1c8fed0d2be1d34ce068b4aa01ac1dae0d0e48b3f03b6c19deb143126579c8c403281b738a54695f3dd1cd9ee6ee36da377c065918dc613fa51fbd66e28d7127bc819de655d1728a272dcc5fa1b301e41381b07955b84e66cfbe45bc5bb81f6a569a51e46bd5a500018bc2b5ce249055016fe939bdf3b96a67664df15b46433dee3e2a9774f731a0be0bef49b6f929ba0d0c3b4846fbb26571094f49ef874514215ab02b87dc772889ce6688863dfb68023998bb5f60b136e8bb932362fbf7afb597a51e914b2742378bfcf0d217d2e167bf1a590f62fcf1f0d2ec345d244dd000983bab4aaa8e47fbd37b4e0034f836c3ad2c2a512c8fe94b001a350cf8c", @ANYRES32=r7, @ANYBLOB="00000000cf0f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000009500a50500000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) (rerun: 64) 2.77783521s ago: executing program 3 (id=2254): unshare(0x22020600) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) unshare(0x22020600) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) poll(&(0x7f0000000180)=[{r0, 0x2}], 0x1, 0x7f) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 2.594355775s ago: executing program 2 (id=2255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x20, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0xdb, 0x0, 0x0, 0xce7}, 0x80000001}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x4, 0x1}]}, 0x1c}}, 0x4010) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x4}, 0x8) 2.593903154s ago: executing program 4 (id=2256): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) close(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}}) r1 = socket(0x1d, 0x2, 0x6) bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) (async) close(r9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) recvmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r8) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r8) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='$ \x00\x00', @ANYRES16=r10, @ANYBLOB="000228bd7000fddbdf2501000000050003000400000005000300a1000000"], 0x24}, 0x1, 0x0, 0x0, 0x404d001}, 0x20008000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1) 2.55805356s ago: executing program 1 (id=2257): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x200000000000011, 0x2, 0xe6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) getpeername$packet(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x34}], 0x1, 0x90f0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.388706183s ago: executing program 4 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r4, &(0x7f00000053c0)=[{{&(0x7f0000000500)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00'], 0x70}}], 0x1, 0x80b4) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@multicast2, 0x4e23, 0x2, 0xcd, 0x9000000, 0x3}}, 0x44) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000c9"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f0000000640)=""/108}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, 0x0}, 0x20) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r8 = socket(0xd92ea6045f0bcb6c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0xfffffd, {0x60, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x200}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffe0, 0x1}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet6(r7, &(0x7f00000003c0)="93208b9817c2060000000000000079f7b0878b3b3330fd26285ac0c2a7219b14fa", 0x21, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x5, &(0x7f0000000400)=ANY=[@ANYRESDEC=r10], &(0x7f0000000140)='GPL\x00'}, 0x94) r12 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r12, r11}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x94) 1.609834969s ago: executing program 2 (id=2259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8180, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) r1 = socket(0x2, 0x4, 0x1d2) connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b8, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfd, {0xe}, [@generic="24659d1e986c2780412c0a23d6011e64d26164d8a04d4933d5c839ae07382ab3bd545b841b50eb7c5d0692e0d9df495cc2ffcf662be4b5dc74e1dd1640cee0d42756150edefb58f16947894559fe7d6e7395ac591bbde1a6d6cea750dbaa3c5ef55323ccb8b241ea4a2e7e6e7f6034f14d6bae74287ccb376c47395293453538dfb9969fbb7d4dbb8273e04cc79456756da43c105a241be7b461a320e2084204be0e97c2ccbee42fb5d0357db7", @generic="017d59281b44ab21dc198cb55356f63695d2457d77ddac8053141587b4943507d342e4dc44406976d34d928b80c6e703b26a0c662d6ff487d5dbc7a00ffb9d29c4a24e3a2421ed0b0d3d8311df096c674a13a927d605db2fcc7c748b5c967c7abff09afcb6e7ad5602aa9dc568a31e034f99e73e827e3e5acdce506c108dee86308838260cdcc52d786eeec6e741fefa5ecff4f26fb7fbe24375a9a44b3c31e57cd765bab29bc1d345672e6bcf9ad8e7c99a25662d542c13eefab45151d5a0dd5baeffd3aba37a40cf4bcc31aaf1d04d67aef3b04b2238b9d40fc7afdf372d4dcf9f90a8438a5d09ed667878", @typed={0x8, 0xc2, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2fc, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xfa, 0xfa, "afa839638f6334429370893350a36edb18723d2a06395bf0a320fb972e426d0e1dfe39b60113eb8762041355a781dccd4f3d9625c32bbc231a9232e9e033a74de3cd26a1fb972b89d46cad0d2ba72b01d43de9554a1af6fd26da1b0300508a056cedfeaa492d72c6b3778702db27a8bc8a7c895e32b6321a24971fd847622ba510f44d934c36151e9401fead9bb225087dc00c54a4e4ae6ea49b7bc65077acd17709165887705d5b905710c132d228e023b63e3bb1c5401a15a45be5050b67b1775f1750e0199742b52f56aa89691e017161fbe0668f5711db9275986afe94642c34ac5ee265ae5dad8bb7b9c781ab63869e26f909d8"}, @NL80211_ATTR_FILS_ERP_RRK={0xbe, 0xfc, "4ec655b56a3ad8348797b21a9e0e2bbf8ebfcad24ca5dece35d5e1ac2040f1dd48662b22704e7a116deb15a0310c96cfe5c1ceedd40502eb210d7919f6568ce8306f21ebc9ed665bc71166e144089e4026634586574f3570b5a4be028faf9b79899f33889851b7a945e516ade5d4301ead9d16f3a88bf04e43316cf544f1d254d12c94b8497902bae66adc3ff6e9c49746362913e70fefac62412884d68fe4422244567044afa6882c099f600a666fc12e7fe27b6b4ff1dff3ad"}, @NL80211_ATTR_FILS_ERP_REALM={0x103, 0xfa, "bbe6237ab6c49499e9b099ecbd8fe52b31d23d11a247ac7fffd4cae264eee92bb95018fe389eafca80f6389b9b389b62ffe2771f0b10277062223923c698efe291cdfb2543ccfcc86d6a3b62a00a3eb7b37fdc80db6daf4357a0d01739dc505b8bfcebf6944d52d7868a33266636370f25e4fd095a608ba4ae6f74857035727559663f2a0f0fff432883befc13fcd41cc02ed515d6fcf6a4e5c66bc9ea277ed155a55af42e90b3c5d3e9e7527218e3ec1df87b4bfad57cbee3a1d6b9cde06c5e611bac33f2e241f1612eb8cefa574679d6adfae4f5e09ec5e5a38df7d129d3a4cbed830ce10db1ea438ecbfdf1849c10ea4e462aae2e04f0a22307c63a2669"}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="845106fbf043"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x993}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000900)={0x80000008}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000940)='macvtap0\x00') (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000980)={0x3, 'bridge0\x00', {0x8}, 0x3ff}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x22, 0x1, 0x7) (async) syz_emit_ethernet(0x26, &(0x7f00000009c0)={@remote, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "5c5cb84a2e88e5d5"}}}}, &(0x7f0000000a00)={0x1, 0x2, [0x422, 0xd5a, 0x258, 0x265]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x81}]}, @NFT_MSG_NEWRULE={0x2a4, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xe7, 0x7, 0x1, 0x0, "37540fc2d0434c67482bfc78ab862aa406376d0d29e41e1e4818b57e8f4f33c3778529d05786b6ab0fb699208374677aec5b09dc167baf4d4741177a39730376a31459e10e0efa6a1322bd39b611079099728c24f7a9924f27e5b985d21277b36b8e50780191f6ab6c01351d06d86e9b21a64ac20fdc95d80c6d7fd559798f7c0b9223f1263f90da2a73d00e8224224e9942551e99eb3c99621a85178afe5d1ff1463bb80d4cec84e08ad1df15089fb0caf77606e67de66669bccc63391602469ae1ceb42fb338017c58e9d53a3b9693dd7e4bf5b3d46cdc503a375bd92f716e082d95"}, @NFTA_RULE_USERDATA={0xc2, 0x7, 0x1, 0x0, "f55111c01f68ea746ee05c6089184bb189aee4eeda65a3942b281351af35dac22313931ee4ea4374c1881d88be20f4da9db89497af239e10689a67ea8b6793f77a6beeeeac285fb4c0076920757f51cd7fcd7021b9cd470cb9586b86bd552675add3a25ab11d78ff71122b3d96e03f282b956d1bf578ad8ad0b3bf398a7e7649fcb9b2a5ae032727f3784949052767ac2c13c63cd276f5d056e93b4624ea16daf204b0adb3f4f42d226670b9f990e4aa7bc33a8fb5e64b10b5ada9ed23de"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x100}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff9}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_DELOBJ={0xb0, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x70, 0x8, "a1d71c98bffbaf1a97f998de57d3962bc78b09e569258950f84aff00f415dd01cdaf872eb7bfd2ffac6d64ea946c2c2d552c77b32457094d0e30746b230db3a2e432d541204f59d834ad573c3c4bc347518f5725fe17eb62f266d95cd39e152a719a2664bd1e32df727a2177"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xdeae}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x440}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x1e, 0x400, 0x70bd2b, 0x25dfdbff, {0x17}, [@typed={0x8, 0x114, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0xa8d91d0199998812}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x80}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044150}, 0xc0) (async) bind$netlink(r4, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) (async) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x216a}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004040) (async) r7 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f00000012c0)={0x0, 0x101, 0x8eb6, 0x6}, 0x10) (async) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000001300)={0xa4a, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010a40), r4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000010b00)={&(0x7f0000010a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000010ac0)={&(0x7f0000010a80)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x41}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x1}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004001) (async) unshare(0x10000) bind$netlink(r5, &(0x7f0000010b40)={0x10, 0x0, 0x25dfdbfe, 0x10000880}, 0xc) (async) unshare(0x80) 1.463071749s ago: executing program 4 (id=2260): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c000400140070a102000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x5c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40015}, 0x24000800) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[{0x10, 0x29, 0x5}], 0x10}}], 0x1, 0x80c1) (async, rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r4, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) (async, rerun: 64) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r6, r7}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8) connect$packet(r5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r8, 0x0, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8) (async) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async, rerun: 32) close(0x3) (rerun: 32) 232.600339ms ago: executing program 2 (id=2261): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000002200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x1f0, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xf}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x59}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfca}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff9}]}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80010}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000000c000c000100000001000000e6b820be6653acd6fee029d2d297cef3ffffff9ba3ce223ab2068b2be61d3cbb38bda0208d98940b66d563b3a8d67e08542dd0e4d36608b43ac09e8c0b08b1e14f34adf831df3819b98921478f819a0899eba0d901921fa6dcf37756d10710552b3658ea7f47ba6ca0634e867e63c69fbeeca0ea9ed11ed3315c28334f2a50518f7ef3f390fabc4d891dd8c5db1fb66aba497013da629bf444524f318c5fbacea6d5d0c525140cbc23260f218ab49d11a51aab4a8e8d69f690cc478aba4012276de0e008f27d9a822ddb2eb87779badd0608cd0a3f16d96a22854bef6ac2d0167bb94c3e16e47b037fd417999859485cb9f5a44d8de821efa457dfb3cd5357d5401a6f805c9d8df31549c0bbb854a7102903c48dfc148289788a324260407e32a08017620b64d282ee8e66a68bcf0d82f7f00d76167fabec6b8e9c3d6be4300d7c5a87973393221495f90a3e237801d64fb61381fd5eb1"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x9a9, &(0x7f0000000300)=0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x3, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe7be759}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x6, 0x1}, {0x5, 0x1, 0x1, 0xa, 0xd3d, 0x1}, 0x7, 0x4b3b, 0x19c5}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc068fa965e4d9ca}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0xfffffffffffffece, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x100, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x6}, {0xffff, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 162.346333ms ago: executing program 0 (id=2262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)="d140ca", 0x84, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r5 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000000)={0x4a, 0x848d, 0x5, 0x4}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @struct={0x6, 0x9, 0x0, 0x4, 0x1, 0x2, [{0xf, 0x1, 0x500000}, {0xd, 0x4, 0x6}, {0x1, 0x0, 0x14f7d38d}, {0x9, 0x4}, {0x3, 0x2, 0xe}, {0x0, 0x0, 0x9}, {0xe, 0x4, 0x9}, {0x9, 0x0, 0xcc}, {0x11, 0x0, 0x1a54}]}, @union={0xe, 0x1, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x4, 0x4}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000003c0)=""/98, 0xb8, 0x62, 0x0, 0x2}, 0x28) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000600)=0x1, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5a38564d, '\x00', 0x0, r7, 0x3, 0x2, 0x2}, 0x50) 0s ago: executing program 0 (id=2263): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000080)="e3ee581e7e", 0x5, 0x0, &(0x7f0000000040)={0x2, 0xff7e, @loopback}, 0x10) listen(r0, 0xda8c) r1 = accept4(r0, &(0x7f0000000240)=@ethernet={0x0, @multicast}, &(0x7f00000001c0)=0x80, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000840)={0x11, 0x4, r7, 0x1, 0x5e, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0xe, 0x40, 0xc274, 0x8000, {{0x21, 0x4, 0x1, 0x39, 0x84, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x18, 0x0, [{0x5, 0x12, "a7a869c8bf59df88f34388c62ab1b6cd"}]}, @generic={0x89, 0xb, "d6f9082b3f2b813922"}, @lsrr={0x83, 0xb, 0x80, [@empty, @multicast1]}, @generic={0x86, 0xc, "2f75bd743c82d40b48c4"}, @timestamp={0x44, 0x18, 0x82, 0x0, 0x8, [0x3, 0xa11, 0x10001, 0x8, 0x62]}, @timestamp_addr={0x44, 0x14, 0x86, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x10}}, {@multicast2, 0x100}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x7, 0x10, 0x3, 0xfffffff7, {{0x22, 0x4, 0x2, 0x3f, 0x88, 0x68, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x24, 0x2c, 0x0, 0x7, [0xfffffffd, 0xaf07, 0x100, 0x3, 0xfffffffc, 0x46a, 0x8, 0x81]}, @timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x1, [{@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x1ff}]}, @timestamp_addr={0x44, 0x1c, 0xda, 0x1, 0x3, [{@loopback, 0xf3}, {@empty}, {@rand_addr=0x64010102, 0x8001}]}, @ssrr={0x89, 0x7, 0x91, [@local]}, @lsrr={0x83, 0x17, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2566514cbaf5b42d}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8c0}, 0x814) r12 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40efd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200009}, 0x94) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x20008850) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, 0x0, 0x0) r16 = accept4(r15, 0x0, 0x0, 0x0) sendmmsg$unix(r16, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de1cee2fc8", 0x6}, {&(0x7f0000001840)="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", 0xa3a}], 0x2, 0x0, 0x0, 0x24008000}}], 0x1, 0x0) recvmmsg(r16, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x5}, 0x6}], 0x1, 0x28144, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000066c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {0x10, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): de [ 168.767683][ T8246] bond0: entered promiscuous mode [ 168.772752][ T8246] bond_slave_0: entered promiscuous mode [ 168.783439][ T8246] bond_slave_1: entered promiscuous mode [ 169.522617][ T8287] netlink: 'syz.2.551': attribute type 18 has an invalid length. [ 170.159984][ T8310] tipc: Enabled bearer , priority 0 [ 170.193939][ T8310] syzkaller0: entered promiscuous mode [ 170.199455][ T8310] syzkaller0: entered allmulticast mode [ 170.269773][ T8310] tipc: Resetting bearer [ 170.399737][ T8322] tipc: Resetting bearer [ 170.526105][ T8322] tipc: Disabling bearer [ 170.693929][ T8356] tipc: Enabled bearer , priority 0 [ 170.702309][ T8348] tipc: Enabled bearer , priority 0 [ 170.724378][ T8353] bridge0: entered allmulticast mode [ 170.759917][ T8355] syzkaller0: entered promiscuous mode [ 170.765602][ T8355] syzkaller0: entered allmulticast mode [ 170.799805][ T8348] tipc: Resetting bearer [ 170.811874][ T8362] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.820453][ T8354] tipc: Disabling bearer [ 170.822967][ T8362] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.850029][ T8355] tipc: Resetting bearer [ 170.865971][ T8355] tipc: Disabling bearer [ 171.039151][ T8383] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 171.446941][ T8402] veth0_vlan: entered allmulticast mode [ 171.510654][ T8406] syz_tun: entered allmulticast mode [ 171.552672][ T8406] dvmrp8: entered allmulticast mode [ 171.681737][ T8409] netlink: 'syz.3.585': attribute type 23 has an invalid length. [ 171.730623][ T8406] lo speed is unknown, defaulting to 1000 [ 171.747507][ T8406] lo speed is unknown, defaulting to 1000 [ 172.015517][ T8405] syz_tun: left allmulticast mode [ 172.020820][ T8405] dvmrp8: left allmulticast mode [ 172.118244][ T8431] lo speed is unknown, defaulting to 1000 [ 172.126784][ T8431] lo speed is unknown, defaulting to 1000 [ 172.831456][ T8452] tipc: Enabled bearer , priority 0 [ 172.841152][ T8452] syzkaller0: entered promiscuous mode [ 172.847230][ T8452] syzkaller0: entered allmulticast mode [ 172.877060][ T8462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.992546][ T8468] __nla_validate_parse: 10 callbacks suppressed [ 172.992564][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 173.069584][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.079112][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.425773][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.441155][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.499305][ T8464] gretap1: left promiscuous mode [ 173.549637][ T8452] tipc: Resetting bearer [ 173.560949][ T1209] lo speed is unknown, defaulting to 1000 [ 173.568768][ T1209] syz2: Port: 1 Link DOWN [ 173.681291][ T7424] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.710251][ T7424] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.833979][ T5976] tipc: Node number set to 2516594046 [ 173.869467][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.876583][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 173.882973][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.902191][ T8450] tipc: Resetting bearer [ 173.919996][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 173.939252][ T8450] tipc: Disabling bearer [ 173.956959][ T8472] lo speed is unknown, defaulting to 1000 [ 174.012191][ T8472] lo speed is unknown, defaulting to 1000 [ 174.240661][ T8525] netlink: 48 bytes leftover after parsing attributes in process `syz.0.614'. [ 174.266966][ T8525] netlink: 48 bytes leftover after parsing attributes in process `syz.0.614'. [ 174.276206][ T8524] lo speed is unknown, defaulting to 1000 [ 174.284301][ T8524] lo speed is unknown, defaulting to 1000 [ 174.527660][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 174.573646][ T8536] tipc: Enabled bearer , priority 0 [ 174.596022][ T8536] syzkaller0: entered promiscuous mode [ 174.606667][ T8536] syzkaller0: entered allmulticast mode [ 174.644408][ T8536] tipc: Resetting bearer [ 174.764811][ T8534] tipc: Resetting bearer [ 174.787937][ T8534] tipc: Disabling bearer [ 174.799719][ T8548] veth1_macvtap: left promiscuous mode [ 174.806689][ T8548] macsec0: entered promiscuous mode [ 174.811923][ T8548] macsec0: entered allmulticast mode [ 174.866318][ T8549] veth1_macvtap: entered promiscuous mode [ 174.890587][ T8549] veth1_macvtap: entered allmulticast mode [ 174.910716][ T8549] macsec0: left promiscuous mode [ 174.923787][ T8549] macsec0: left allmulticast mode [ 174.928862][ T8549] veth1_macvtap: left allmulticast mode [ 175.301932][ T8557] lo speed is unknown, defaulting to 1000 [ 175.345326][ T8557] lo speed is unknown, defaulting to 1000 [ 175.519473][ T8551] syz.4.619 (8551) used greatest stack depth: 16608 bytes left [ 176.154888][ T8600] tipc: Enabled bearer , priority 0 [ 176.182148][ T8589] syzkaller0: entered promiscuous mode [ 176.218060][ T8589] syzkaller0: entered allmulticast mode [ 176.344025][ T8589] tipc: Resetting bearer [ 176.377217][ T8586] tipc: Resetting bearer [ 176.409425][ T8586] tipc: Disabling bearer [ 176.638215][ T8618] lo speed is unknown, defaulting to 1000 [ 176.665028][ T8618] lo speed is unknown, defaulting to 1000 [ 176.995304][ T8637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.636'. [ 177.132318][ T8632] lo speed is unknown, defaulting to 1000 [ 177.155710][ T8632] lo speed is unknown, defaulting to 1000 [ 177.829830][ T8664] syzkaller0: entered promiscuous mode [ 177.838940][ T8664] syzkaller0: entered allmulticast mode [ 177.999572][ T8673] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 178.010742][ T8673] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 178.032877][ T8673] netlink: 224 bytes leftover after parsing attributes in process `syz.4.645'. [ 178.080043][ T8673] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 178.873021][ T24] IPVS: starting estimator thread 0... [ 178.879340][ T8683] IPVS: set_ctl: invalid protocol: 15 4.0.0.0:2048 [ 178.984760][ T8685] IPVS: using max 34 ests per chain, 81600 per kthread [ 179.544439][ T8673] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 179.658501][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'. [ 179.699370][ T8693] netlink: 'syz.4.650': attribute type 1 has an invalid length. [ 179.710869][ T8695] netlink: 'syz.2.649': attribute type 2 has an invalid length. [ 179.712596][ T8690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.648'. [ 179.727365][ T8695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.649'. [ 179.749865][ T8693] netlink: 'syz.4.650': attribute type 2 has an invalid length. [ 179.767932][ T8692] netlink: 'syz.4.650': attribute type 1 has an invalid length. [ 179.784256][ T8692] netlink: 'syz.4.650': attribute type 2 has an invalid length. [ 179.817874][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 180.037874][ T8711] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 180.203004][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'. [ 180.308785][ T8725] tipc: Enabling of bearer rejected, failed to enable media [ 180.318776][ T8726] netlink: 112 bytes leftover after parsing attributes in process `syz.3.661'. [ 180.369579][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 181.138476][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.670'. [ 181.253084][ T5976] IPVS: starting estimator thread 0... [ 181.347986][ T8767] IPVS: using max 31 ests per chain, 74400 per kthread [ 181.430183][ T8772] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 181.438492][ T8772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.443898][ T8753] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 181.444236][ T8752] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 181.452949][ T8753] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.668'. [ 181.893068][ T8797] lo speed is unknown, defaulting to 1000 [ 181.906237][ T8797] lo speed is unknown, defaulting to 1000 [ 182.026897][ T8804] lo speed is unknown, defaulting to 1000 [ 182.081891][ T8804] lo speed is unknown, defaulting to 1000 [ 182.603682][ T8841] lo speed is unknown, defaulting to 1000 [ 182.627406][ T8841] lo speed is unknown, defaulting to 1000 [ 182.708801][ T8846] lo speed is unknown, defaulting to 1000 [ 182.877656][ T8846] lo speed is unknown, defaulting to 1000 [ 183.167112][ T8855] lo speed is unknown, defaulting to 1000 [ 183.191852][ T8855] lo speed is unknown, defaulting to 1000 [ 183.380828][ T8876] netlink: 'syz.3.698': attribute type 11 has an invalid length. [ 183.624419][ T8885] validate_nla: 3 callbacks suppressed [ 183.624436][ T8885] netlink: 'syz.2.692': attribute type 2 has an invalid length. [ 183.897249][ T8887] tipc: Enabled bearer , priority 0 [ 183.925457][ T8893] syzkaller0: entered promiscuous mode [ 183.931041][ T8893] syzkaller0: entered allmulticast mode [ 183.944762][ T8910] netlink: 'syz.3.703': attribute type 27 has an invalid length. [ 183.960259][ T8887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 183.970632][ T8910] netlink: 'syz.3.703': attribute type 27 has an invalid length. [ 184.024439][ T8907] lo speed is unknown, defaulting to 1000 [ 184.032530][ T8893] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 184.060929][ T8887] __nla_validate_parse: 5 callbacks suppressed [ 184.060945][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.700'. [ 184.110764][ T8907] lo speed is unknown, defaulting to 1000 [ 184.185948][ T8897] tipc: Resetting bearer [ 184.211212][ T8884] tipc: Resetting bearer [ 184.254879][ T8884] tipc: Disabling bearer [ 184.375794][ T8921] lo speed is unknown, defaulting to 1000 [ 184.386088][ T8921] lo speed is unknown, defaulting to 1000 [ 184.685513][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 184.808208][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 184.836653][ T8914] lo speed is unknown, defaulting to 1000 [ 184.853263][ T8914] lo speed is unknown, defaulting to 1000 [ 184.867740][ T8937] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 184.972935][ T8945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.990812][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 185.000049][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 185.010562][ T8945] netlink: 'syz.3.711': attribute type 7 has an invalid length. [ 185.018462][ T8945] netlink: 'syz.3.711': attribute type 13 has an invalid length. [ 185.057058][ T5976] lo speed is unknown, defaulting to 1000 [ 185.178166][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 185.208470][ T8953] tipc: Can't bind to reserved service type 2 [ 185.281259][ T8957] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 185.410247][ T8957] bond3: (slave gretap1): making interface the new active one [ 185.440731][ T8957] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 185.520015][ T8965] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 185.622395][ T8974] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 185.632701][ T8976] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 185.805510][ T8976] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 185.829799][ T8974] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 187.279569][ T9025] bond0: (slave team0): Releasing backup interface [ 187.345910][ T9025] bond0: (slave dummy0): Releasing backup interface [ 187.370298][ T9025] bridge_slave_0: left allmulticast mode [ 187.390394][ T9025] bridge_slave_0: left promiscuous mode [ 187.409434][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.438587][ T9025] bridge_slave_1: left allmulticast mode [ 187.454852][ T9025] bridge_slave_1: left promiscuous mode [ 187.460694][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.512464][ T9025] bond0: (slave bond_slave_0): Releasing backup interface [ 187.546819][ T9025] bond0: (slave bond_slave_1): Releasing backup interface [ 187.580050][ T9025] team0: Port device team_slave_0 removed [ 187.599426][ T9025] team0: Port device team_slave_1 removed [ 187.623420][ T9025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.651248][ T9025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.672014][ T9025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.695797][ T9025] veth0_vlan: left allmulticast mode [ 187.816782][ T9034] netlink: 'syz.2.732': attribute type 10 has an invalid length. [ 187.871683][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.872976][ T9035] netlink: 'syz.2.732': attribute type 10 has an invalid length. [ 187.881168][ T9034] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 187.918888][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.732'. [ 187.963969][ T9035] batadv0: entered promiscuous mode [ 187.969432][ T9035] batadv0: entered allmulticast mode [ 188.014372][ T9035] bond0: (slave batadv0): Releasing backup interface [ 188.048952][ T9035] bridge0: port 4(batadv0) entered blocking state [ 188.063578][ T9035] bridge0: port 4(batadv0) entered disabled state [ 188.189494][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 188.199224][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 188.251701][ T9039] nbd: couldn't find device at index 536870912 [ 188.490528][ T9056] IPVS: set_ctl: invalid protocol: 232 255.255.255.255:20000 [ 188.509422][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 188.639921][ T9069] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 188.674092][ T9069] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 188.674783][ T9070] netlink: 256 bytes leftover after parsing attributes in process `syz.2.744'. [ 188.785552][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.744'. [ 188.960273][ T9085] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 188.986149][ T9078] bond2: entered promiscuous mode [ 189.010093][ T9078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.044255][ T9085] bond0: entered promiscuous mode [ 189.068006][ T9085] bond0: entered allmulticast mode [ 189.098075][ T9085] bridge0: port 1(bond0) entered blocking state [ 189.104653][ T9085] bridge0: port 1(bond0) entered disabled state [ 189.152108][ T9084] lo speed is unknown, defaulting to 1000 [ 189.174672][ T9084] lo speed is unknown, defaulting to 1000 [ 189.184293][ T9088] lo speed is unknown, defaulting to 1000 [ 189.239176][ T9088] lo speed is unknown, defaulting to 1000 [ 189.262620][ T9097] Bluetooth: MGMT ver 1.23 [ 189.417417][ T9103] __nla_validate_parse: 2 callbacks suppressed [ 189.417435][ T9103] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.753'. [ 189.561498][ T9109] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.754'. [ 189.729562][ T9116] netlink: 56 bytes leftover after parsing attributes in process `syz.2.755'. [ 190.068254][ T9119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.152669][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.758'. [ 190.181785][ T9126] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.758'. [ 190.186689][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.759'. [ 190.246695][ T9119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.368950][ T9132] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.380729][ T9134] netlink: 5 bytes leftover after parsing attributes in process `syz.4.760'. [ 190.431410][ T9119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.500025][ T9132] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.560762][ T9119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.618392][ T9137] netlink: 48 bytes leftover after parsing attributes in process `syz.4.763'. [ 190.641850][ T9132] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.726979][ T9137] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 190.756242][ T9132] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.832606][ T7424] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.897918][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.929377][ T9139] lo speed is unknown, defaulting to 1000 [ 190.979013][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.989691][ T9139] lo speed is unknown, defaulting to 1000 [ 191.022187][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.124229][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.182991][ T1332] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.269024][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.285815][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.476731][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'. [ 191.488065][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 191.672866][ T9182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.738078][ T9174] bond2: entered promiscuous mode [ 191.743777][ T9174] bond2: entered allmulticast mode [ 191.750848][ T9187] netlink: 'syz.1.775': attribute type 5 has an invalid length. [ 191.754077][ T9174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.031959][ T9179] lo speed is unknown, defaulting to 1000 [ 192.042984][ T9197] lo speed is unknown, defaulting to 1000 [ 192.051007][ T9179] lo speed is unknown, defaulting to 1000 [ 192.060355][ T9197] lo speed is unknown, defaulting to 1000 [ 192.349780][ T9202] bridge0: entered promiscuous mode [ 192.355638][ T9202] vlan3: entered promiscuous mode [ 192.965449][ T9227] netlink: 'syz.0.785': attribute type 21 has an invalid length. [ 192.980693][ T9227] netlink: 'syz.0.785': attribute type 4 has an invalid length. [ 193.226162][ T9234] v: renamed from ip6_vti0 (while UP) [ 193.578126][ T49] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 194.251160][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514964][ T9259] lo speed is unknown, defaulting to 1000 [ 194.539788][ T9259] lo speed is unknown, defaulting to 1000 [ 194.637837][ T9264] tipc: Enabled bearer , priority 0 [ 194.661080][ T9264] syzkaller0: entered promiscuous mode [ 194.667091][ T9264] syzkaller0: entered allmulticast mode [ 194.675156][ T9266] syzkaller1: entered promiscuous mode [ 194.690111][ T9266] syzkaller1: entered allmulticast mode [ 194.720766][ T9263] tipc: Resetting bearer [ 194.750517][ T9263] tipc: Disabling bearer [ 194.832241][ T9269] __nla_validate_parse: 6 callbacks suppressed [ 194.832260][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 194.852425][ T9269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.799'. [ 194.876189][ T9269] netlink: 34 bytes leftover after parsing attributes in process `syz.1.799'. [ 195.286560][ T9274] syzkaller0: entered promiscuous mode [ 195.292193][ T9274] syzkaller0: entered allmulticast mode [ 195.352852][ T9291] Bluetooth: MGMT ver 1.23 [ 195.360640][ T9288] tipc: Enabled bearer , priority 0 [ 195.415930][ T9282] tipc: Disabling bearer [ 195.546753][ T9301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.672585][ T9308] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 195.681672][ T9304] netlink: 1 bytes leftover after parsing attributes in process `syz.3.810'. [ 195.692612][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 195.772917][ T9306] trusted_key: syz.4.811 sent an empty control message without MSG_MORE. [ 196.324066][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.334233][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.335868][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 197.564080][ T9344] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.588216][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 197.621354][ T9347] netlink: 52 bytes leftover after parsing attributes in process `syz.1.821'. [ 197.661495][ T9341] netlink: 20896 bytes leftover after parsing attributes in process `syz.3.818'. [ 197.680714][ T9347] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 197.695316][ T9341] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 197.753892][ T9347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.810208][ T9347] bond4: (slave bridge2): making interface the new active one [ 197.821885][ T9347] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 197.931199][ T9364] netlink: 104 bytes leftover after parsing attributes in process `syz.4.824'. [ 197.989650][ T9347] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 198.180616][ T9379] netlink: 'syz.2.827': attribute type 12 has an invalid length. [ 198.204973][ T9379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.827'. [ 198.848894][ T9426] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 199.034040][ T9436] tipc: Enabled bearer , priority 0 [ 199.041711][ T9436] syzkaller0: entered promiscuous mode [ 199.047539][ T9436] syzkaller0: entered allmulticast mode [ 199.089078][ T9435] tipc: Resetting bearer [ 199.115773][ T9435] tipc: Disabling bearer [ 200.088394][ T9490] sctp: [Deprecated]: syz.1.861 (pid 9490) Use of int in max_burst socket option deprecated. [ 200.088394][ T9490] Use struct sctp_assoc_value instead [ 200.309390][ T9504] __nla_validate_parse: 4 callbacks suppressed [ 200.309408][ T9504] netlink: 13 bytes leftover after parsing attributes in process `syz.2.862'. [ 200.344812][ T9504] netlink: 13 bytes leftover after parsing attributes in process `syz.2.862'. [ 200.715148][ T9535] netlink: 'syz.4.872': attribute type 10 has an invalid length. [ 200.870977][ T9537] lo speed is unknown, defaulting to 1000 [ 200.880502][ T9537] lo speed is unknown, defaulting to 1000 [ 201.219361][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'. [ 201.269320][ T9559] tipc: Enabling of bearer rejected, failed to enable media [ 201.282331][ T9552] veth0: entered promiscuous mode [ 201.300359][ T9551] veth0: left promiscuous mode [ 201.316910][ T9554] tipc: Enabled bearer , priority 0 [ 201.324727][ T9558] netlink: 'syz.2.877': attribute type 4 has an invalid length. [ 201.334401][ T9554] syzkaller0: entered promiscuous mode [ 201.348155][ T9554] syzkaller0: entered allmulticast mode [ 201.357603][ T9558] netlink: 'syz.2.877': attribute type 4 has an invalid length. [ 201.547999][ T9568] tipc: Resetting bearer [ 201.618255][ T9553] tipc: Resetting bearer [ 201.697680][ T9553] tipc: Disabling bearer [ 201.803045][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 201.842930][ T9571] lo speed is unknown, defaulting to 1000 [ 201.864103][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 201.877271][ T9571] lo speed is unknown, defaulting to 1000 [ 202.141859][ T9582] veth0_to_bridge: entered promiscuous mode [ 202.149488][ T9581] veth0_to_bridge: left promiscuous mode [ 202.251196][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 202.293500][ T9599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.324221][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 202.389704][ T9600] lo speed is unknown, defaulting to 1000 [ 202.556173][ T9600] lo speed is unknown, defaulting to 1000 [ 202.556920][ T9615] netlink: 'syz.3.892': attribute type 12 has an invalid length. [ 202.571884][ T9613] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 202.579850][ T9613] netlink: 244 bytes leftover after parsing attributes in process `syz.1.891'. [ 202.589413][ T9615] netlink: 'syz.3.892': attribute type 4 has an invalid length. [ 202.606115][ T9613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.891'. [ 202.615393][ T9615] netlink: 156 bytes leftover after parsing attributes in process `syz.3.892'. [ 202.626301][ T9599] lo speed is unknown, defaulting to 1000 [ 202.672492][ T9599] lo speed is unknown, defaulting to 1000 [ 202.775968][ T9618] tipc: Enabled bearer , priority 0 [ 202.802918][ T9618] syzkaller0: entered promiscuous mode [ 202.811930][ T9618] syzkaller0: entered allmulticast mode [ 202.867785][ T9618] tipc: Resetting bearer [ 203.183546][ T9638] bridge_slave_0: left allmulticast mode [ 203.189247][ T9638] bridge_slave_0: left promiscuous mode [ 203.195470][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.221826][ T9638] bridge_slave_1: left allmulticast mode [ 203.240939][ T9638] bridge_slave_1: left promiscuous mode [ 203.272872][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.292125][ T9646] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 203.340760][ T9638] bond0: (slave bond_slave_0): Releasing backup interface [ 203.361572][ T9638] bond_slave_0: left promiscuous mode [ 203.394708][ T9638] bond0: (slave bond_slave_1): Releasing backup interface [ 203.418636][ T9638] bond_slave_1: left promiscuous mode [ 203.475744][ T9638] team0: Port device team_slave_0 removed [ 203.480311][ T9656] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 203.501848][ T9660] netlink: 'syz.2.904': attribute type 4 has an invalid length. [ 203.505540][ T9638] team0: Port device team_slave_1 removed [ 203.517444][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.527881][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.539634][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.548056][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.568795][ T9638] bond3: (slave gretap1): Releasing active interface [ 203.642361][ T9646] bond0: (slave wlan1): Opening slave failed [ 203.787453][ T9668] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 203.814949][ T9668] bridge0: port 5(syz_tun) entered blocking state [ 203.830426][ T9668] bridge0: port 5(syz_tun) entered disabled state [ 203.846843][ T9668] syz_tun: entered allmulticast mode [ 203.853267][ T9] tipc: Node number set to 4278190080 [ 203.859375][ T9668] syz_tun: entered promiscuous mode [ 203.877718][ T9668] bridge0: port 5(syz_tun) entered blocking state [ 203.884345][ T9668] bridge0: port 5(syz_tun) entered forwarding state [ 203.952930][ T9675] _ÐZ`Ô€@: entered promiscuous mode [ 204.107635][ T9677] tipc: Enabling of bearer rejected, already enabled [ 204.438813][ T9702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.452244][ T9702] netlink: 'syz.1.915': attribute type 7 has an invalid length. [ 204.469549][ T9713] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 204.530223][ T9710] bond_slave_0: entered promiscuous mode [ 204.536002][ T9710] bond_slave_1: entered promiscuous mode [ 204.609889][ T9710] macsec1: entered promiscuous mode [ 204.638233][ T9710] bond0: entered promiscuous mode [ 204.819405][ T9724] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 205.094183][ T9748] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 205.397983][ T9766] __nla_validate_parse: 7 callbacks suppressed [ 205.398001][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 205.449799][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'. [ 205.537785][ T9766] ip6tnl2: entered promiscuous mode [ 205.589874][ T9780] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.678726][ T9780] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.799069][ T9796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.944'. [ 205.938308][ T9780] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.012427][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 206.059954][ T9810] pim6reg: entered allmulticast mode [ 206.110160][ T9780] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.358699][ T9825] netlink: 'syz.2.950': attribute type 11 has an invalid length. [ 206.371745][ T9823] syzkaller0: entered promiscuous mode [ 206.384789][ T9823] syzkaller0: entered allmulticast mode [ 206.409954][ T9827] netlink: 52 bytes leftover after parsing attributes in process `syz.4.949'. [ 206.546532][ T7424] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.569838][ T7424] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.607665][ T9829] netlink: 92 bytes leftover after parsing attributes in process `syz.2.951'. [ 206.612192][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.953'. [ 206.630895][ T9833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.951'. [ 206.654461][ T1140] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.656434][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 206.687088][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 206.711036][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.786121][ T9834] lo speed is unknown, defaulting to 1000 [ 206.812442][ T9834] lo speed is unknown, defaulting to 1000 [ 206.966589][ T9835] lo speed is unknown, defaulting to 1000 [ 206.985374][ T9835] lo speed is unknown, defaulting to 1000 [ 207.621708][ T9873] lo speed is unknown, defaulting to 1000 [ 207.645626][ T9873] lo speed is unknown, defaulting to 1000 [ 207.897368][ T9888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.119283][ T9900] netlink: 'syz.2.967': attribute type 13 has an invalid length. [ 208.145546][ T9902] IPv6: addrconf: prefix option has invalid lifetime [ 208.671096][ T9928] RDS: rds_bind could not find a transport for 4004:0:20::, load rds_tcp or rds_rdma? [ 209.073474][ T9940] can: request_module (can-proto-4) failed. [ 209.136245][ T9944] erspan0: left allmulticast mode [ 209.151765][ T9944] erspan0: left promiscuous mode [ 209.162086][ T9944] bridge0: port 3(erspan0) entered disabled state [ 209.197139][ T9944] syz_tun: left allmulticast mode [ 209.214352][ T9944] syz_tun: left promiscuous mode [ 209.219717][ T9944] bridge0: port 5(syz_tun) entered disabled state [ 209.286755][ T9944] bridge0: port 4(batadv0) entered disabled state [ 209.292178][ T9957] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 209.330854][ T9944] bridge_slave_0: left allmulticast mode [ 209.342330][ T9944] bridge_slave_0: left promiscuous mode [ 209.344736][ T9959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.348972][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.378243][ T9956] netlink: 'syz.3.990': attribute type 4 has an invalid length. [ 209.389902][ T9944] bridge_slave_1: left allmulticast mode [ 209.395758][ T9944] bridge_slave_1: left promiscuous mode [ 209.401645][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.418494][ T9944] bond0: (slave bond_slave_0): Releasing backup interface [ 209.429037][ T9944] bond_slave_0: left promiscuous mode [ 209.433694][ T9961] netlink: 'syz.3.990': attribute type 4 has an invalid length. [ 209.442970][ T9944] bond0: (slave bond_slave_1): Releasing backup interface [ 209.458324][ T9944] bond_slave_1: left promiscuous mode [ 209.476915][ T9944] team0: Port device team_slave_0 removed [ 209.496659][ T9944] team0: Port device team_slave_1 removed [ 209.504036][ T9944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.511494][ T9944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.520324][ T9944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.529522][ T9944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.632504][ T9944] team0: Port device batadv1 removed [ 209.717323][ T43] lo speed is unknown, defaulting to 1000 [ 209.728374][ T1209] lo speed is unknown, defaulting to 1000 [ 210.204560][T10002] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 210.344163][ T9992] bridge_slave_1: left allmulticast mode [ 210.350049][ T9992] bridge_slave_1: left promiscuous mode [ 210.360019][ T9992] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.376991][ T9992] bridge_slave_0: left allmulticast mode [ 210.386186][ T9992] bridge_slave_0: left promiscuous mode [ 210.392200][ T9992] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.541314][T10006] tun0: tun_chr_ioctl cmd 1074025672 [ 210.546959][T10006] tun0: ignored: set checksum disabled [ 210.766358][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.794090][T10018] __nla_validate_parse: 16 callbacks suppressed [ 210.794108][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 210.905805][T10018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.918491][T10018] bond4: (slave bond5): Enslaving as an active interface with an up link [ 210.974669][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 211.011845][T10027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.029208][T10023] syzkaller0: entered promiscuous mode [ 211.038255][T10023] syzkaller0: entered allmulticast mode [ 213.308250][T10033] macsec1: entered promiscuous mode [ 213.316136][T10033] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 213.325051][T10033] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 213.505427][T10062] tap0: tun_chr_ioctl cmd 1074025677 [ 213.531770][T10062] tap0: linktype set to 800 [ 213.572195][T10066] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1021'. [ 213.591181][T10068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1022'. [ 213.738936][T10073] tipc: Enabled bearer , priority 0 [ 213.754682][T10073] syzkaller0: entered promiscuous mode [ 213.771862][T10073] syzkaller0: entered allmulticast mode [ 213.802349][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 213.816888][T10073] tipc: Resetting bearer [ 213.828682][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 213.840654][T10072] tipc: Resetting bearer [ 213.877430][T10072] tipc: Disabling bearer [ 214.094897][T10081] bridge0: entered promiscuous mode [ 214.116034][T10081] bridge0: left promiscuous mode [ 214.165897][T10080] bridge0: entered promiscuous mode [ 214.174105][T10080] bridge0: left promiscuous mode [ 214.347776][T10100] netlink: 'syz.1.1030': attribute type 30 has an invalid length. [ 214.376591][T10101] netlink: 'syz.2.1029': attribute type 10 has an invalid length. [ 214.391957][T10101] team0: Port device dummy0 added [ 214.400565][T10104] syz.1.1030 uses old SIOCAX25GETINFO [ 214.450048][T10101] netlink: 'syz.2.1029': attribute type 10 has an invalid length. [ 214.559190][T10101] team0: Port device dummy0 removed [ 214.578444][T10101] dummy0: entered promiscuous mode [ 214.586357][T10101] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 214.755047][T10110] lo speed is unknown, defaulting to 1000 [ 214.787989][T10110] lo speed is unknown, defaulting to 1000 [ 215.049010][T10136] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 215.067409][T10136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1040'. [ 215.101125][T10133] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 215.168610][T10136] dummy0: entered promiscuous mode [ 215.193241][T10136] dummy0: entered allmulticast mode [ 215.237683][T10136] bond0: (slave dummy0): Releasing backup interface [ 215.265945][T10136] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 215.293918][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 215.303049][T10139] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 215.323352][T10139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.325452][T10133] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 215.364114][T10143] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.389802][T10133] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 215.409316][T10144] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.411070][T10133] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 215.655247][T10161] openvswitch: netlink: Duplicate or invalid key (type 0). [ 215.678027][T10161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.368941][T10193] lo speed is unknown, defaulting to 1000 [ 216.406083][T10193] lo speed is unknown, defaulting to 1000 [ 216.585079][T10212] !: renamed from dummy0 (while UP) [ 216.847806][T10217] lo speed is unknown, defaulting to 1000 [ 216.891230][T10217] lo speed is unknown, defaulting to 1000 [ 217.090594][T10188] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 217.162365][T10233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1063'. [ 217.218260][T10233] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 217.250674][T10235] netlink: 'syz.3.1064': attribute type 32 has an invalid length. [ 218.096499][T10276] netlink: 'syz.1.1074': attribute type 12 has an invalid length. [ 218.122092][ T5947] IPVS: starting estimator thread 0... [ 218.190554][T10284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1075'. [ 218.213677][T10279] IPVS: using max 32 ests per chain, 76800 per kthread [ 218.428775][T10296] veth0_to_team: entered promiscuous mode [ 218.518192][T10304] netlink: 'syz.4.1083': attribute type 22 has an invalid length. [ 218.666960][ T30] audit: type=1800 audit(1756713580.328:3): pid=10316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1085" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1055 res=0 errno=0 [ 218.686197][T10319] lo speed is unknown, defaulting to 1000 [ 218.745143][T10319] lo speed is unknown, defaulting to 1000 [ 218.766751][T10325] netlink: 'syz.4.1088': attribute type 6 has an invalid length. [ 218.877699][T10325] bond4: entered promiscuous mode [ 218.995190][T10335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1092'. [ 218.998173][T10332] sit0: entered promiscuous mode [ 219.013208][T10332] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 219.021059][T10332] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1089'. [ 219.094004][T10340] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 219.110707][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 219.141046][T10339] netlink: 'syz.3.1091': attribute type 10 has an invalid length. [ 219.208330][T10339] bridge0: port 3(macsec0) entered blocking state [ 219.234962][T10339] bridge0: port 3(macsec0) entered disabled state [ 219.271422][T10339] macsec0: entered allmulticast mode [ 219.296856][T10339] veth1_macvtap: entered allmulticast mode [ 219.305985][T10339] macsec0: entered promiscuous mode [ 219.312531][T10339] bridge0: port 3(macsec0) entered blocking state [ 219.319173][T10339] bridge0: port 3(macsec0) entered forwarding state [ 219.462203][T10361] team0: Refused to change device type [ 219.573680][T10348] syzkaller0: entered promiscuous mode [ 219.582254][T10348] syzkaller0: entered allmulticast mode [ 219.650953][T10348] netlink: 'syz.1.1094': attribute type 10 has an invalid length. [ 219.669222][T10348] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1094'. [ 219.801514][T10348] team0: entered promiscuous mode [ 219.811493][T10348] team_slave_0: entered promiscuous mode [ 219.827809][T10348] team_slave_1: entered promiscuous mode [ 219.874940][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.049477][T10392] lo speed is unknown, defaulting to 1000 [ 220.058481][T10392] lo speed is unknown, defaulting to 1000 [ 220.267413][T10400] lo speed is unknown, defaulting to 1000 [ 220.276520][T10400] lo speed is unknown, defaulting to 1000 [ 220.383729][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 221.867845][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 221.908785][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 221.924481][T10466] "syz.1.1121" (10466) uses obsolete ecb(arc4) skcipher [ 222.028624][T10478] netlink: 'syz.3.1125': attribute type 39 has an invalid length. [ 222.618275][T10510] sch_tbf: burst 127 is lower than device ipvlan0 mtu (1514) ! [ 222.655926][T10510] tipc: Enabled bearer , priority 0 [ 222.668381][T10510] tipc: Resetting bearer [ 222.677116][T10509] tipc: Resetting bearer [ 222.699626][T10509] tipc: Disabling bearer [ 223.111691][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 223.263562][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 223.290023][T10537] tipc: Enabled bearer , priority 0 [ 223.307624][T10537] syzkaller0: entered promiscuous mode [ 223.314040][T10537] syzkaller0: entered allmulticast mode [ 223.429823][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 223.488764][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 223.505130][T10559] lo speed is unknown, defaulting to 1000 [ 223.527553][T10559] lo speed is unknown, defaulting to 1000 [ 223.536896][T10553] netlink: 'syz.4.1148': attribute type 13 has an invalid length. [ 223.739513][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1152'. [ 223.846574][T10575] lo speed is unknown, defaulting to 1000 [ 223.854824][T10575] lo speed is unknown, defaulting to 1000 [ 223.910447][T10583] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1156'. [ 223.970853][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 224.147383][T10596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 224.167133][T10561] tipc: Resetting bearer [ 224.193258][T10561] tipc: Disabling bearer [ 224.225891][T10589] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 224.513389][T10595] lo speed is unknown, defaulting to 1000 [ 224.521020][T10595] lo speed is unknown, defaulting to 1000 [ 224.695500][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 224.742419][T10625] tipc: Enabling of bearer rejected, failed to enable media [ 224.762730][T10625] ªªªªªª: renamed from wg2 (while UP) [ 224.795881][T10595] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 225.055685][T10641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.146557][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 225.422784][T10653] netlink: zone id is out of range [ 225.438814][T10653] netlink: zone id is out of range [ 225.457498][T10653] netlink: zone id is out of range [ 225.462857][T10653] netlink: zone id is out of range [ 225.468935][T10653] netlink: zone id is out of range [ 225.482052][T10653] netlink: zone id is out of range [ 225.498890][T10653] netlink: zone id is out of range [ 225.602591][T10653] netlink: zone id is out of range [ 225.657572][T10653] netlink: zone id is out of range [ 226.149934][ T1332] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.196806][ T1332] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.238502][ T1332] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.260030][ T1332] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.284778][T10677] pim6reg1: entered allmulticast mode [ 226.603389][T10683] netlink: 'syz.3.1186': attribute type 6 has an invalid length. [ 226.929928][T10686] tipc: Enabled bearer , priority 0 [ 226.950428][T10686] syzkaller0: entered promiscuous mode [ 226.965132][T10686] syzkaller0: entered allmulticast mode [ 226.997272][T10691] tipc: Enabling of bearer rejected, already enabled [ 227.020871][T10686] tipc: Resetting bearer [ 227.072420][T10689] tipc: Enabled bearer , priority 0 [ 227.091471][T10689] syzkaller0: entered promiscuous mode [ 227.106525][T10689] syzkaller0: entered allmulticast mode [ 227.125941][T10685] tipc: Resetting bearer [ 227.190755][T10685] tipc: Disabling bearer [ 227.263551][T10689] tipc: Resetting bearer [ 227.291295][T10688] tipc: Resetting bearer [ 227.358663][T10688] tipc: Disabling bearer [ 227.420545][T10694] lo speed is unknown, defaulting to 1000 [ 227.440925][T10703] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 227.465901][T10694] lo speed is unknown, defaulting to 1000 [ 227.943476][T10720] tun0: tun_chr_ioctl cmd 2148045848 [ 227.970946][T10720] tun0: tun_chr_ioctl cmd 21731 [ 228.331259][T10726] lo speed is unknown, defaulting to 1000 [ 228.374698][T10726] lo speed is unknown, defaulting to 1000 [ 228.955379][T10741] __nla_validate_parse: 42 callbacks suppressed [ 228.955397][T10741] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1199'. [ 229.165025][T10749] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1200'. [ 229.929358][T10748] infiniband syz0: set active [ 229.973905][T10748] infiniband syz0: added veth1_to_hsr [ 229.982137][T10748] syz0: rxe_create_cq: returned err = -12 [ 229.992547][T10748] infiniband syz0: Couldn't create ib_mad CQ [ 229.998934][T10748] infiniband syz0: Couldn't open port 1 [ 230.006672][T10787] syzkaller1: entered allmulticast mode [ 230.060291][T10748] RDS/IB: syz0: added [ 230.066842][T10748] smc: adding ib device syz0 with port count 1 [ 230.073658][T10748] smc: ib device syz0 port 1 has pnetid [ 230.148053][T10792] pim6reg1: entered promiscuous mode [ 230.158328][T10792] pim6reg1: entered allmulticast mode [ 230.572078][T10800] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.1214'. [ 230.606146][T10800] net_ratelimit: 52 callbacks suppressed [ 230.606165][T10800] openvswitch: netlink: Message has 5 unknown bytes. [ 230.756064][T10808] netlink: 'syz.1.1218': attribute type 11 has an invalid length. [ 230.936933][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'. [ 231.042721][T10822] netlink: 'syz.3.1219': attribute type 9 has an invalid length. [ 231.052242][T10822] netlink: 'syz.3.1219': attribute type 6 has an invalid length. [ 231.060747][T10818] dvmrp8: entered allmulticast mode [ 231.072015][T10818] dvmrp8: left allmulticast mode [ 231.151977][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.162736][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.179250][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.669532][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 231.783605][T10852] lo speed is unknown, defaulting to 1000 [ 231.791127][T10852] lo speed is unknown, defaulting to 1000 [ 231.899787][ T30] audit: type=1107 audit(1756713593.558:4): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ïÉ OØ×TºŠö´Ž¹°¬ao'.3Á¶Ê™wïÏqäé,HülQ“º#rÿûÓâë]eúkÅ«hÿ' [ 232.106054][T10862] syzkaller0: entered promiscuous mode [ 232.111674][T10862] syzkaller0: entered allmulticast mode [ 232.162979][T10867] netlink: 'syz.1.1233': attribute type 11 has an invalid length. [ 232.774624][T10888] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1229'. [ 233.057875][T10883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.070457][T10883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.234247][T10883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.252379][T10883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.455459][T10883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.474928][T10883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.506987][T10897] syzkaller1: entered promiscuous mode [ 233.512606][T10897] syzkaller1: entered allmulticast mode [ 233.625759][T10883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.652757][T10883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.765363][T10912] netlink: 'syz.1.1242': attribute type 39 has an invalid length. [ 233.871269][T10913] geneve3: entered allmulticast mode [ 233.944862][T10919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1244'. [ 233.955960][ T1332] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.987448][ T1332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.052223][ T1332] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.061726][ T1332] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.079113][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.087851][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.112330][ T59] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.124053][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.352409][T10938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1249'. [ 234.870242][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'. [ 234.948744][T10973] netlink: 'syz.2.1258': attribute type 2 has an invalid length. [ 234.974208][T10973] k›*·]‘: entered promiscuous mode [ 234.981067][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1258'. [ 234.990826][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1258'. [ 235.327137][T10990] lo speed is unknown, defaulting to 1000 [ 235.338688][T10990] lo speed is unknown, defaulting to 1000 [ 235.405945][T10991] lo speed is unknown, defaulting to 1000 [ 235.418800][T10989] lo speed is unknown, defaulting to 1000 [ 235.431317][T10991] lo speed is unknown, defaulting to 1000 [ 235.450551][T10989] lo speed is unknown, defaulting to 1000 [ 236.211217][T11025] lo speed is unknown, defaulting to 1000 [ 236.219048][T11025] lo speed is unknown, defaulting to 1000 [ 236.848625][T11052] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1278'. [ 236.952008][T11053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.119574][T11059] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 237.229917][T11059] bond5: (slave gretap2): making interface the new active one [ 237.238258][T11059] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 237.253050][T11062] vlan2: entered allmulticast mode [ 237.261262][T11062] bond5: entered allmulticast mode [ 237.270786][T11062] gretap2: entered allmulticast mode [ 237.320055][T11062] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 237.361713][T11049] lo speed is unknown, defaulting to 1000 [ 237.379047][T11049] lo speed is unknown, defaulting to 1000 [ 237.756190][T11075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1286'. [ 237.847153][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 237.961978][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 238.153029][T11089] bond0: Device is already in use. [ 238.599832][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 238.607763][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 238.668643][T11093] lo speed is unknown, defaulting to 1000 [ 238.739641][T11093] lo speed is unknown, defaulting to 1000 [ 238.870792][T11106] netlink: 'syz.1.1295': attribute type 11 has an invalid length. [ 239.413487][T11122] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 239.419098][T11124] __nla_validate_parse: 1 callbacks suppressed [ 239.419117][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1299'. [ 239.434176][T11122] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1298'. [ 239.448575][T11126] tipc: Enabling of bearer rejected, already enabled [ 239.504670][T11112] lo speed is unknown, defaulting to 1000 [ 239.512577][T11112] lo speed is unknown, defaulting to 1000 [ 239.758573][T11140] sit0: left promiscuous mode [ 239.761987][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1304'. [ 239.819718][T11140] team0: left promiscuous mode [ 239.830466][T11140] team_slave_0: left promiscuous mode [ 239.843846][T11140] team_slave_1: left promiscuous mode [ 239.861189][T11140] dummy0: left promiscuous mode [ 239.868661][T11140] dummy0: left allmulticast mode [ 239.897777][T11140] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 239.941041][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1304'. [ 240.049129][T11150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1306'. [ 240.488372][T11157] can: request_module (can-proto-0) failed. [ 240.610885][T11163] openvswitch: netlink: IP tunnel dst address not specified [ 240.755494][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 240.772681][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1310'. [ 240.990371][T11175] netlink: 'syz.4.1312': attribute type 4 has an invalid length. [ 241.107251][T11177] dvmrp8: entered allmulticast mode [ 241.249030][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 241.391891][T11194] vlan4: entered promiscuous mode [ 241.399427][T11194] macvtap0: entered promiscuous mode [ 241.595936][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 241.607557][T11210] netlink: 'syz.2.1323': attribute type 21 has an invalid length. [ 241.660871][T11217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1324'. [ 241.681999][T11218] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 241.813049][T11225] netlink: 'syz.1.1324': attribute type 2 has an invalid length. [ 241.882423][T11225] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 242.303762][T11248] tipc: Enabling of bearer rejected, already enabled [ 242.718140][T11263] lo speed is unknown, defaulting to 1000 [ 242.744956][T11263] lo speed is unknown, defaulting to 1000 [ 243.044571][T11290] bond0: Unable to set up delay as MII monitoring is disabled [ 243.640231][T11321] tipc: Enabled bearer , priority 0 [ 243.702151][T11324] raw_sendmsg: syz.0.1349 forgot to set AF_INET. Fix it! [ 243.888931][T11332] lo speed is unknown, defaulting to 1000 [ 243.939972][T11332] lo speed is unknown, defaulting to 1000 [ 244.539898][T11341] __nla_validate_parse: 31 callbacks suppressed [ 244.539918][T11341] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1353'. [ 244.564680][T11341] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1353'. [ 244.829022][T11353] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 244.871521][T11353] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1356'. [ 245.061118][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 245.082184][T11365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1359'. [ 245.170371][T11365] gretap1: entered promiscuous mode [ 245.376596][T11370] !: renamed from dummy0 [ 245.668936][T11395] IPv6: Can't replace route, no match found [ 246.335765][T11440] syzkaller1: entered promiscuous mode [ 246.341273][T11440] syzkaller1: entered allmulticast mode [ 246.351897][T11440] netlink: get zone limit has 8 unknown bytes [ 246.438443][T11443] lo speed is unknown, defaulting to 1000 [ 246.466145][T11443] lo speed is unknown, defaulting to 1000 [ 246.480758][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 246.582724][T11439] lo speed is unknown, defaulting to 1000 [ 246.611714][T11439] lo speed is unknown, defaulting to 1000 [ 247.010125][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1375'. [ 247.030189][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 248.012830][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 248.020085][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 248.060012][T11516] netlink: 'syz.4.1390': attribute type 20 has an invalid length. [ 248.078953][T11518] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 248.133814][T11516] netlink: 'syz.4.1390': attribute type 20 has an invalid length. [ 248.348264][T11535] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 248.402210][T11536] block nbd1: server does not support multiple connections per device. [ 248.424792][T11536] block nbd1: shutting down sockets [ 248.434701][T11542] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 248.455265][T11535] team0: Port device dummy0 added [ 248.523600][T11542] team0: Port device dummy0 removed [ 248.551520][T11542] dummy0: entered promiscuous mode [ 248.581342][T11542] dummy0: entered allmulticast mode [ 248.599143][T11542] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.612944][T11401] bridge0: port 1(bond0) entered blocking state [ 248.619353][T11401] bridge0: port 1(bond0) entered forwarding state [ 248.697705][T11549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.293442][T11568] netlink: 'syz.3.1404': attribute type 12 has an invalid length. [ 249.316522][T11568] netlink: 'syz.3.1404': attribute type 4 has an invalid length. [ 249.810303][T11587] tipc: Enabled bearer , priority 0 [ 249.820118][T11587] syzkaller0: entered promiscuous mode [ 249.826049][T11587] syzkaller0: entered allmulticast mode [ 249.914969][T11587] tipc: Resetting bearer [ 249.938839][T11586] tipc: Resetting bearer [ 249.985197][T11586] tipc: Disabling bearer [ 250.192892][T11597] bridge0: port 1(erspan0) entered blocking state [ 250.202758][T11597] bridge0: port 1(erspan0) entered disabled state [ 250.212437][T11597] erspan0: entered allmulticast mode [ 250.221157][T11597] erspan0: entered promiscuous mode [ 250.232190][T11597] bridge0: port 1(erspan0) entered blocking state [ 250.238785][T11597] bridge0: port 1(erspan0) entered forwarding state [ 250.276515][T11601] erspan0: left allmulticast mode [ 250.281595][T11601] erspan0: left promiscuous mode [ 250.357598][T11601] bridge0: port 1(erspan0) entered disabled state [ 250.622919][T11614] dvmrp8: entered allmulticast mode [ 250.664823][T11614] dvmrp8: left allmulticast mode [ 250.922168][T11638] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 250.962853][T11642] __nla_validate_parse: 9 callbacks suppressed [ 250.962872][T11642] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1423'. [ 251.002389][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1424'. [ 251.122366][T11638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.190148][T11638] veth5: entered promiscuous mode [ 251.198942][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 251.229479][T11652] bridge0: port 1(bond0) entered disabled state [ 251.287390][T11652] bond0: (slave dummy0): Releasing backup interface [ 251.321159][T11652] dummy0: left promiscuous mode [ 251.335322][T11652] dummy0: left allmulticast mode [ 251.359296][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 251.536327][T11664] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 251.677072][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1428'. [ 251.697352][T11670] bond5: (slave geneve2): making interface the new active one [ 251.707465][T11670] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 251.725501][T11401] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.737505][T11401] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.748192][T11401] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.764566][T11674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.773392][T11401] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.776127][T11676] netlink: 1116 bytes leftover after parsing attributes in process `syz.2.1431'. [ 251.791195][T11676] openvswitch: netlink: Flow key attr not present in new flow. [ 251.930213][T11681] sctp: [Deprecated]: syz.0.1433 (pid 11681) Use of int in maxseg socket option. [ 251.930213][T11681] Use struct sctp_assoc_value instead [ 251.948646][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 252.610620][T11708] lo speed is unknown, defaulting to 1000 [ 252.636639][T11708] lo speed is unknown, defaulting to 1000 [ 252.711512][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 252.828567][T11724] syzkaller1: entered promiscuous mode [ 252.842789][T11724] syzkaller1: entered allmulticast mode [ 253.054938][T11740] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 253.237485][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 253.516897][T11765] lo speed is unknown, defaulting to 1000 [ 253.565513][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 253.628890][T11765] lo speed is unknown, defaulting to 1000 [ 253.912208][T11780] lo speed is unknown, defaulting to 1000 [ 253.947868][T11780] lo speed is unknown, defaulting to 1000 [ 254.027750][T11789] lo speed is unknown, defaulting to 1000 [ 254.035581][T11789] lo speed is unknown, defaulting to 1000 [ 255.259155][T11830] ip6gre0: entered promiscuous mode [ 255.275165][T11830] ip6gre0: entered allmulticast mode [ 255.378429][T11826] lo speed is unknown, defaulting to 1000 [ 255.417780][T11826] lo speed is unknown, defaulting to 1000 [ 255.458947][T11837] netlink: 'syz.1.1476': attribute type 2 has an invalid length. [ 255.691197][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.381837][T11859] netlink: 'syz.1.1481': attribute type 13 has an invalid length. [ 256.392658][T11859] netlink: 'syz.1.1481': attribute type 17 has an invalid length. [ 256.794723][T11859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.819807][T11859] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.831787][T11859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.847682][ T24] lo speed is unknown, defaulting to 1000 [ 256.853227][T11856] lo speed is unknown, defaulting to 1000 [ 256.853669][ T24] syz2: Port: 1 Link ACTIVE [ 256.860789][T11856] lo speed is unknown, defaulting to 1000 [ 257.316938][T11872] lo speed is unknown, defaulting to 1000 [ 257.324792][T11872] lo speed is unknown, defaulting to 1000 [ 257.811789][T11889] netlink: 'syz.2.1490': attribute type 3 has an invalid length. [ 257.819851][T11889] __nla_validate_parse: 8 callbacks suppressed [ 257.819868][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 257.952850][T11891] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1490'. [ 258.868826][T11911] netlink: 'syz.3.1498': attribute type 15 has an invalid length. [ 259.031416][T11923] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.102933][T11925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1503'. [ 259.197648][T11928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1504'. [ 259.224639][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 259.259193][T11930] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 259.286834][T11932] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 259.303298][T11930] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1505'. [ 259.452147][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1508'. [ 259.615915][T11951] lo speed is unknown, defaulting to 1000 [ 259.639553][T11951] lo speed is unknown, defaulting to 1000 [ 259.914629][T11963] tipc: Enabling of bearer rejected, already enabled [ 260.038763][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 260.065265][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 260.083418][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1517'. [ 260.106772][T11967] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.278632][T11967] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.432068][T11967] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.552353][T11967] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.562694][T11982] netlink: 'syz.0.1520': attribute type 10 has an invalid length. [ 260.604448][T11982] veth0_vlan: left promiscuous mode [ 260.610799][T11982] veth0_vlan: entered promiscuous mode [ 260.659390][T11982] team0: Device veth0_vlan failed to register rx_handler [ 260.778392][T11407] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.810310][T11407] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.831713][T11409] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.890372][T11409] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.129916][T12000] tipc: Enabled bearer , priority 0 [ 261.145554][T12000] syzkaller0: entered promiscuous mode [ 261.156571][T12000] syzkaller0: entered allmulticast mode [ 261.171717][T12004] gretap3: entered promiscuous mode [ 261.195018][T11999] tipc: Resetting bearer [ 261.217109][T12004] netlink: 'syz.4.1528': attribute type 7 has an invalid length. [ 261.252892][T11999] tipc: Disabling bearer [ 261.310240][T12012] ip6gretap2: entered allmulticast mode [ 261.410327][T12014] lo speed is unknown, defaulting to 1000 [ 261.451555][T12014] lo speed is unknown, defaulting to 1000 [ 261.486272][T12024] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 261.596142][T12024] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 261.663535][T12024] netlink: 'syz.2.1533': attribute type 2 has an invalid length. [ 261.951416][T12038] veth7: entered promiscuous mode [ 261.973953][T12039] macvlan2: entered allmulticast mode [ 261.987111][T12039] veth1_vlan: entered allmulticast mode [ 262.013835][T12039] veth1_vlan: left allmulticast mode [ 262.305992][T12053] tipc: Enabled bearer , priority 0 [ 262.324321][T12053] syzkaller0: entered promiscuous mode [ 262.364875][T12053] syzkaller0: entered allmulticast mode [ 262.490244][T12053] tipc: Resetting bearer [ 262.523692][T12051] tipc: Resetting bearer [ 262.584910][T12051] tipc: Disabling bearer [ 262.688083][T12067] netlink: 'syz.3.1546': attribute type 29 has an invalid length. [ 263.130834][T12095] netlink: 'syz.0.1555': attribute type 9 has an invalid length. [ 263.344744][T12114] __nla_validate_parse: 10 callbacks suppressed [ 263.344763][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 263.411217][T12114] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 263.418176][T12115] syzkaller0: entered promiscuous mode [ 263.516052][T12115] syzkaller0: entered allmulticast mode [ 263.666294][T12129] lo speed is unknown, defaulting to 1000 [ 263.678841][T12129] lo speed is unknown, defaulting to 1000 [ 263.706605][T12139] lo speed is unknown, defaulting to 1000 [ 263.716640][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1566'. [ 263.741703][T12139] lo speed is unknown, defaulting to 1000 [ 263.754441][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'. [ 264.131233][T12160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.220440][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 264.240453][T11409] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.316867][T11409] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.444880][T12169] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1573'. [ 264.479466][T11409] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.500584][T11409] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.621324][T11409] bridge0: port 3(macsec0) entered disabled state [ 264.665786][T12166] lo speed is unknown, defaulting to 1000 [ 264.673717][T12166] lo speed is unknown, defaulting to 1000 [ 264.940991][T12188] netlink: 'syz.3.1578': attribute type 13 has an invalid length. [ 264.987692][T12188] netlink: 'syz.3.1578': attribute type 17 has an invalid length. [ 265.104330][T12188] ip6gre0: left promiscuous mode [ 265.111297][T12188] ip6gre0: left allmulticast mode [ 265.232616][T12200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.280180][T12188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.321877][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 265.400046][T12202] syzkaller0: entered promiscuous mode [ 265.405800][T12202] syzkaller0: entered allmulticast mode [ 265.717059][T12189] lo speed is unknown, defaulting to 1000 [ 265.790023][T12189] lo speed is unknown, defaulting to 1000 [ 265.872456][T12224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1588'. [ 265.901985][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 266.211222][T12234] netlink: 'syz.2.1591': attribute type 9 has an invalid length. [ 266.918214][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1594'. [ 267.318007][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 267.392642][T12256] netlink: 'syz.0.1598': attribute type 21 has an invalid length. [ 267.401458][T12258] dvmrp0: left allmulticast mode [ 267.413448][T12258] dvmrp8: left allmulticast mode [ 269.053908][T12264] tipc: Enabled bearer , priority 0 [ 269.060849][T12269] syzkaller0: entered promiscuous mode [ 269.066734][T12269] syzkaller0: entered allmulticast mode [ 269.082113][T12275] tipc: Resetting bearer [ 269.098877][T12263] tipc: Resetting bearer [ 269.128009][T12263] tipc: Disabling bearer [ 269.212985][T12284] tipc: Enabled bearer , priority 0 [ 269.236507][T12284] tipc: Resetting bearer [ 269.242479][T12286] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 269.307174][T12286] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 269.320028][T12283] tipc: Disabling bearer [ 269.409868][T12291] __nla_validate_parse: 2 callbacks suppressed [ 269.409886][T12291] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1607'. [ 269.494379][ T24] hid-generic 0005:0C45:0009.0001: unknown main item tag 0x0 [ 269.510011][ T24] hid-generic 0005:0C45:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 269.698566][T12318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1614'. [ 269.758677][T12321] pim6reg: left allmulticast mode [ 269.767720][T12318] netlink: 'syz.4.1614': attribute type 4 has an invalid length. [ 269.776169][T12318] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1614'. [ 269.827244][T12319] lo speed is unknown, defaulting to 1000 [ 269.930706][T12319] lo speed is unknown, defaulting to 1000 [ 269.971219][T12331] netlink: 'syz.4.1619': attribute type 21 has an invalid length. [ 270.017041][T12331] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1619'. [ 270.043501][T12326] lo speed is unknown, defaulting to 1000 [ 270.059894][T12326] lo speed is unknown, defaulting to 1000 [ 270.065830][T12331] netlink: 'syz.4.1619': attribute type 5 has an invalid length. [ 270.082005][T12331] netlink: 'syz.4.1619': attribute type 6 has an invalid length. [ 270.090986][T12331] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1619'. [ 270.732300][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1627'. [ 270.742518][T12359] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1626'. [ 270.777570][T12359] batadv1: entered promiscuous mode [ 270.783008][T12359] batadv1: entered allmulticast mode [ 271.310164][T12378] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1631'. [ 271.477822][T12386] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 271.479480][T12387] netlink: 'syz.4.1634': attribute type 13 has an invalid length. [ 271.514008][T12387] netlink: 'syz.4.1634': attribute type 17 has an invalid length. [ 271.637289][T12386] nbd1: detected capacity change from 0 to 63 [ 271.643997][T12389] block nbd1: NBD_DISCONNECT [ 271.650976][T12389] block nbd1: Disconnected due to user request. [ 271.657741][T12389] block nbd1: shutting down sockets [ 271.751906][T12398] netlink: 'syz.1.1636': attribute type 1 has an invalid length. [ 271.761922][T12398] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1636'. [ 271.842283][T12387] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.851902][T12387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.907683][T12399] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 271.922966][T12399] ip6gretap0: entered promiscuous mode [ 271.978126][T12388] lo speed is unknown, defaulting to 1000 [ 272.010165][T12388] lo speed is unknown, defaulting to 1000 [ 272.148631][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 272.391749][T12417] tipc: Enabled bearer , priority 0 [ 272.417629][T12417] syzkaller0: entered promiscuous mode [ 272.425636][T12417] syzkaller0: entered allmulticast mode [ 272.526614][T12425] veth1_macvtap: left allmulticast mode [ 272.534086][T12425] veth1_macvtap: left promiscuous mode [ 272.556451][T12425] bridge0: port 3(macsec0) entered disabled state [ 272.580333][T12425] macsec0 (unregistering): left allmulticast mode [ 272.587173][T12425] macsec0 (unregistering): left promiscuous mode [ 272.597467][T12425] bridge0: port 3(macsec0) entered disabled state [ 272.660360][T12417] tipc: Resetting bearer [ 272.699710][T12417] tipc: Resetting bearer [ 272.763011][T12417] tipc: Disabling bearer [ 272.978590][T12443] netlink: 'syz.3.1646': attribute type 4 has an invalid length. [ 272.983411][T12450] Can't find ip_set type hash:ip$mec [ 273.019548][T12456] .70·: renamed from hsr0 (while UP) [ 273.099812][T12456] .70·: entered allmulticast mode [ 273.122373][T12456] hsr_slave_0: entered allmulticast mode [ 273.144707][T12456] hsr_slave_1: entered allmulticast mode [ 273.150885][T12456] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 273.594284][T12480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.602879][T12480] bond0: (slave bond6): Enslaving as an active interface with an up link [ 273.974995][T12501] dvmrp0: entered allmulticast mode [ 274.039093][T12504] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.082975][T12510] netlink: 'syz.1.1662': attribute type 1 has an invalid length. [ 274.398269][T12523] syzkaller1: entered promiscuous mode [ 274.412051][T12523] syzkaller1: entered allmulticast mode [ 274.535522][T12535] __nla_validate_parse: 10 callbacks suppressed [ 274.535539][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1671'. [ 274.572719][T12537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.598717][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 274.648763][T12542] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1674'. [ 274.766910][T12545] netlink: 'syz.1.1675': attribute type 22 has an invalid length. [ 274.781324][T12549] netlink: 'syz.1.1675': attribute type 22 has an invalid length. [ 274.791623][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 274.791908][T12547] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1676'. [ 274.805008][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 274.974421][T12545] netlink: 'syz.1.1675': attribute type 22 has an invalid length. [ 274.982270][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 275.075322][T12549] netlink: 'syz.1.1675': attribute type 22 has an invalid length. [ 275.091268][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 275.465421][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 275.554687][T12588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1683'. [ 275.692487][T12587] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 275.830917][T12600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 276.592767][T12635] syzkaller1: entered promiscuous mode [ 276.599239][T12635] syzkaller1: entered allmulticast mode [ 277.270011][T12660] netlink: 'syz.2.1707': attribute type 13 has an invalid length. [ 277.296203][T12660] netlink: 'syz.2.1707': attribute type 17 has an invalid length. [ 277.539905][T12660] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.579043][T12660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.723883][T12663] lo speed is unknown, defaulting to 1000 [ 277.746923][T12663] lo speed is unknown, defaulting to 1000 [ 278.406730][T12703] syzkaller0: entered promiscuous mode [ 278.412287][T12703] syzkaller0: entered allmulticast mode [ 278.612928][T12714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.637305][T12711] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.727537][T12721] netlink: 'syz.1.1725': attribute type 13 has an invalid length. [ 278.735680][T12721] netlink: 'syz.1.1725': attribute type 17 has an invalid length. [ 279.072803][T12721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.107849][T12719] lo speed is unknown, defaulting to 1000 [ 279.117692][T12739] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 279.170034][T12719] lo speed is unknown, defaulting to 1000 [ 279.557276][T12756] lo speed is unknown, defaulting to 1000 [ 279.608044][T12756] lo speed is unknown, defaulting to 1000 [ 279.632471][T12762] __nla_validate_parse: 6 callbacks suppressed [ 279.632490][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1739'. [ 280.210336][T12776] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1744'. [ 280.236353][T12778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1745'. [ 280.308072][T12778] IPVS: length: 141 != 8 [ 280.442600][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 280.578586][T12793] netlink: 'syz.0.1750': attribute type 8 has an invalid length. [ 280.596571][T12797] delete_channel: no stack [ 280.799307][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 280.897627][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1755'. [ 281.041662][T12820] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1758'. [ 281.051825][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1758'. [ 281.056640][T12824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1759'. [ 281.070618][T12821] tipc: Enabled bearer , priority 0 [ 281.081382][T12826] syzkaller0: entered promiscuous mode [ 281.087813][T12826] syzkaller0: entered allmulticast mode [ 281.133683][T12820] tipc: Resetting bearer [ 281.147630][T12818] tipc: Resetting bearer [ 281.173325][T12818] tipc: Disabling bearer [ 281.190272][T12828] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1760'. [ 281.302023][T12837] netlink: 'syz.2.1762': attribute type 7 has an invalid length. [ 281.457666][T12837] bridge6: port 1(bond6) entered blocking state [ 281.464595][T12837] bridge6: port 1(bond6) entered disabled state [ 281.471353][T12837] bond6: entered allmulticast mode [ 281.907936][T12870] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.142506][T12887] netlink: 'syz.1.1774': attribute type 10 has an invalid length. [ 282.179436][T12887] team0: Port device dummy0 added [ 282.201197][T12890] netlink: 'syz.1.1774': attribute type 10 has an invalid length. [ 282.230231][T12890] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 282.293929][T12890] team0: Failed to send options change via netlink (err -105) [ 282.333815][T12890] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 282.346568][T12893] netlink: 'syz.2.1775': attribute type 16 has an invalid length. [ 282.360292][T12890] team0: Port device dummy0 removed [ 282.378794][T12893] netlink: 'syz.2.1775': attribute type 17 has an invalid length. [ 282.417422][T12890] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 283.845315][T11415] wlan0: Trigger new scan to find an IBSS to join [ 284.056667][T12933] netlink: 'syz.4.1783': attribute type 11 has an invalid length. [ 284.065328][T12934] netlink: 'syz.4.1783': attribute type 11 has an invalid length. [ 284.137122][T12893] bond0: left promiscuous mode [ 284.142021][T12893] !: left promiscuous mode [ 284.208560][ T5947] syz0: Port: 1 Link DOWN [ 284.315797][T12923] lo speed is unknown, defaulting to 1000 [ 284.329380][T12923] lo speed is unknown, defaulting to 1000 [ 284.950531][T12969] netlink: 'syz.3.1791': attribute type 13 has an invalid length. [ 284.979916][T12969] netlink: 'syz.3.1791': attribute type 17 has an invalid length. [ 285.025808][T12969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.361646][T12960] lo speed is unknown, defaulting to 1000 [ 285.385173][T12960] lo speed is unknown, defaulting to 1000 [ 285.728999][T12999] __nla_validate_parse: 11 callbacks suppressed [ 285.729017][T12999] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1799'. [ 285.950909][T13005] syz_tun: entered allmulticast mode [ 285.969488][T13005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 285.998041][T13008] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0 [ 286.125846][T13005] dvmrp10: entered allmulticast mode [ 286.131869][T13006] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1802'. [ 286.145812][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 286.169693][T13003] syz_tun: left allmulticast mode [ 286.194785][T13003] dvmrp10: left allmulticast mode [ 286.292943][T13012] pim6reg: entered allmulticast mode [ 286.591201][T13025] tc_dump_action: action bad kind [ 286.813511][T11407] wlan0: Trigger new scan to find an IBSS to join [ 286.840046][T13030] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1810'. [ 286.856623][T13031] lo speed is unknown, defaulting to 1000 [ 286.873372][T13031] lo speed is unknown, defaulting to 1000 [ 286.975374][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 287.249438][T13051] lo speed is unknown, defaulting to 1000 [ 287.271729][T13051] lo speed is unknown, defaulting to 1000 [ 287.296017][T13060] netlink: 'syz.3.1819': attribute type 21 has an invalid length. [ 287.307622][T13060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1819'. [ 287.592887][T13068] lo speed is unknown, defaulting to 1000 [ 287.614076][T13068] lo speed is unknown, defaulting to 1000 [ 288.986976][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1827'. [ 289.012803][T13109] lo speed is unknown, defaulting to 1000 [ 289.026160][T13109] lo speed is unknown, defaulting to 1000 [ 289.037386][T13113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1827'. [ 289.071888][T13105] netlink: 'syz.4.1827': attribute type 1 has an invalid length. [ 289.101211][T13105] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1827'. [ 289.127473][T13105] netlink: 'syz.4.1827': attribute type 1 has an invalid length. [ 289.156199][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 289.174615][T13105] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 289.294263][T13129] bond0: entered promiscuous mode [ 289.302064][T13129] bond_slave_0: entered promiscuous mode [ 289.326405][T13129] bond_slave_1: entered promiscuous mode [ 289.337824][T13129] bond3: entered promiscuous mode [ 289.343561][T13129] bond6: entered promiscuous mode [ 289.348780][T13129] dummy0: entered promiscuous mode [ 289.366913][T13129] bond0: left promiscuous mode [ 289.371806][T13129] bond_slave_0: left promiscuous mode [ 289.378953][T13129] bond_slave_1: left promiscuous mode [ 289.388870][T13129] bond3: left promiscuous mode [ 289.394795][T13129] bond6: left promiscuous mode [ 289.399814][T13129] dummy0: left promiscuous mode [ 289.446458][T13137] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 289.798299][T13159] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 289.837725][T13153] lo speed is unknown, defaulting to 1000 [ 289.862628][T11399] wlan0: Trigger new scan to find an IBSS to join [ 289.871300][T13157] lo speed is unknown, defaulting to 1000 [ 289.880022][T13157] lo speed is unknown, defaulting to 1000 [ 289.888418][T13153] lo speed is unknown, defaulting to 1000 [ 290.137953][T13176] openvswitch: netlink: IP tunnel dst address not specified [ 290.272960][T13179] erspan0: entered promiscuous mode [ 290.711632][T13182] lo speed is unknown, defaulting to 1000 [ 290.749430][T13182] lo speed is unknown, defaulting to 1000 [ 290.804008][T11399] wlan1: Trigger new scan to find an IBSS to join [ 290.844035][T11409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.887293][T13188] team0: entered promiscuous mode [ 290.894844][T13188] __nla_validate_parse: 8 callbacks suppressed [ 290.894860][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 291.079349][T13188] team0 (unregistering): left promiscuous mode [ 291.420773][T13193] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.457544][T13193] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 291.469426][T13193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 291.868299][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 291.927135][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 291.941025][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 291.968900][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 291.999260][T13225] netlink: 'syz.4.1862': attribute type 20 has an invalid length. [ 292.074406][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 292.113896][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 292.138791][T13225] netlink: 'syz.4.1862': attribute type 20 has an invalid length. [ 292.331376][T13239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1864'. [ 292.335261][T13237] netlink: 'syz.0.1865': attribute type 83 has an invalid length. [ 292.500370][T13250] bond0: entered promiscuous mode [ 292.506575][T13250] bond_slave_0: entered promiscuous mode [ 292.512570][T13250] bond_slave_1: entered promiscuous mode [ 292.526386][T13250] bond3: entered promiscuous mode [ 292.531616][T13250] bond6: entered promiscuous mode [ 292.539055][T13250] dummy0: entered promiscuous mode [ 292.556170][T13250] bond0: left promiscuous mode [ 292.561926][T13250] bond_slave_0: left promiscuous mode [ 292.569149][T13250] bond_slave_1: left promiscuous mode [ 292.575064][T13250] bond3: left promiscuous mode [ 292.580340][T13250] bond6: left promiscuous mode [ 292.585806][T13250] dummy0: left promiscuous mode [ 292.596688][T13253] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 292.630668][T13261] netlink: 'syz.0.1872': attribute type 3 has an invalid length. [ 292.645312][T13261] syz_tun: left allmulticast mode [ 292.652382][T13261] siw: device registration error -23 [ 292.683565][T13261] bond0: left promiscuous mode [ 292.688445][T13261] bond0: left allmulticast mode [ 292.699785][T13261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.750622][T13263] smc: net device bond0 applied user defined pnetid SYZ2 [ 292.881355][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 293.203620][T13298] tipc: Enabled bearer , priority 0 [ 293.211335][T13298] syzkaller0: entered promiscuous mode [ 293.217149][T13298] syzkaller0: entered allmulticast mode [ 293.247690][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 293.259451][T13298] tipc: Resetting bearer [ 293.270185][T13297] tipc: Resetting bearer [ 293.298354][T13297] tipc: Disabling bearer [ 293.464483][T13308] vlan5: entered allmulticast mode [ 293.469844][T13308] gretap0: entered allmulticast mode [ 293.649761][T13322] GUP no longer grows the stack in syz.3.1892 (13322): 200000006000-20000000a000 (200000005000) [ 293.681347][T13322] CPU: 0 UID: 0 PID: 13322 Comm: syz.3.1892 Not tainted syzkaller #0 PREEMPT(full) [ 293.681377][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.681395][T13322] Call Trace: [ 293.681403][T13322] [ 293.681411][T13322] dump_stack_lvl+0x189/0x250 [ 293.681441][T13322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.681461][T13322] ? __pfx__printk+0x10/0x10 [ 293.681480][T13322] ? find_vma+0xe7/0x160 [ 293.681501][T13322] ? mas_next_slot+0xc27/0xcf0 [ 293.681538][T13322] __get_user_pages+0x24d0/0x2ce0 [ 293.681556][T13322] ? __lock_acquire+0xab9/0xd20 [ 293.681607][T13322] ? __gup_longterm_locked+0xc68/0x1660 [ 293.681642][T13322] __gup_longterm_locked+0xde9/0x1660 [ 293.681668][T13322] ? try_grab_folio_fast+0x1be/0x4f0 [ 293.681701][T13322] ? gup_fast_fallback+0x195f/0x2010 [ 293.681725][T13322] gup_fast_fallback+0x1e6a/0x2010 [ 293.681782][T13322] ? __pfx_gup_fast_fallback+0x10/0x10 [ 293.681799][T13322] ? __mutex_lock+0x335/0x1350 [ 293.681827][T13322] ? is_valid_gup_args+0x11f/0x200 [ 293.681850][T13322] ? get_user_pages_fast+0x4d/0xb0 [ 293.681873][T13322] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 293.681899][T13322] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 293.681921][T13322] ? wait_for_space+0x24d/0x2d0 [ 293.681946][T13322] iov_iter_get_pages2+0x5e/0xa0 [ 293.681970][T13322] __se_sys_vmsplice+0x548/0x10d0 [ 293.682003][T13322] ? futex_private_hash_put+0x4b/0x280 [ 293.682030][T13322] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 293.682056][T13322] ? __pfx_futex_wake+0x10/0x10 [ 293.682089][T13322] ? __lock_acquire+0xab9/0xd20 [ 293.682156][T13322] ? rcu_is_watching+0x15/0xb0 [ 293.682179][T13322] ? do_syscall_64+0xbe/0x3b0 [ 293.682201][T13322] do_syscall_64+0xfa/0x3b0 [ 293.682217][T13322] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.682234][T13322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.682251][T13322] ? clear_bhb_loop+0x60/0xb0 [ 293.682272][T13322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.682288][T13322] RIP: 0033:0x7f1d1e38ebe9 [ 293.682309][T13322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.682323][T13322] RSP: 002b:00007f1d1f1b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 293.682345][T13322] RAX: ffffffffffffffda RBX: 00007f1d1e5c5fa0 RCX: 00007f1d1e38ebe9 [ 293.682358][T13322] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e [ 293.682369][T13322] RBP: 00007f1d1e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 293.682379][T13322] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 293.682389][T13322] R13: 00007f1d1e5c6038 R14: 00007f1d1e5c5fa0 R15: 00007ffd97769788 [ 293.682421][T13322] [ 293.948019][T11415] wlan1: Trigger new scan to find an IBSS to join [ 294.198412][T13348] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 294.244408][T13348] bond6: entered promiscuous mode [ 294.252086][T13348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.338247][T13348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.345662][T13348] IPv6: NLM_F_CREATE should be set when creating new route [ 294.352987][T13348] IPv6: NLM_F_CREATE should be set when creating new route [ 294.375062][T13354] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.401881][T13348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.410996][T13354] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 294.427806][T13354] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 294.436004][T13346] syz.1.1895: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.456115][T13346] CPU: 1 UID: 0 PID: 13346 Comm: syz.1.1895 Not tainted syzkaller #0 PREEMPT(full) [ 294.456138][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.456149][T13346] Call Trace: [ 294.456156][T13346] [ 294.456164][T13346] dump_stack_lvl+0x189/0x250 [ 294.456191][T13346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.456208][T13346] ? __pfx__printk+0x10/0x10 [ 294.456228][T13346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.456248][T13346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.456269][T13346] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 294.456289][T13346] warn_alloc+0x214/0x310 [ 294.456316][T13346] ? __pfx_warn_alloc+0x10/0x10 [ 294.456349][T13346] ? __get_vm_area_node+0x28f/0x300 [ 294.456371][T13346] ? xskq_create+0xbf/0x170 [ 294.456390][T13346] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 294.456438][T13346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.456466][T13346] ? __kasan_kmalloc+0x93/0xb0 [ 294.456490][T13346] vmalloc_user_noprof+0xad/0xf0 [ 294.456531][T13346] ? xskq_create+0xbf/0x170 [ 294.456547][T13346] xskq_create+0xbf/0x170 [ 294.456566][T13346] xsk_init_queue+0xb0/0x110 [ 294.456590][T13346] xsk_setsockopt+0x57b/0x8d0 [ 294.456615][T13346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.456637][T13346] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.456665][T13346] ? __fget_files+0x2a/0x420 [ 294.456679][T13346] ? aa_sock_opt_perm+0xff/0x1b0 [ 294.456698][T13346] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 294.456714][T13346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.456736][T13346] do_sock_setsockopt+0x179/0x1b0 [ 294.456761][T13346] __x64_sys_setsockopt+0x13f/0x1b0 [ 294.456797][T13346] do_syscall_64+0xfa/0x3b0 [ 294.456814][T13346] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.456829][T13346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.456844][T13346] ? clear_bhb_loop+0x60/0xb0 [ 294.456864][T13346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.456880][T13346] RIP: 0033:0x7f05e9b8ebe9 [ 294.456897][T13346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.456912][T13346] RSP: 002b:00007f05eaa92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.456931][T13346] RAX: ffffffffffffffda RBX: 00007f05e9dc5fa0 RCX: 00007f05e9b8ebe9 [ 294.456944][T13346] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d [ 294.456955][T13346] RBP: 00007f05e9c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 294.456964][T13346] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 294.456973][T13346] R13: 00007f05e9dc6038 R14: 00007f05e9dc5fa0 R15: 00007ffcec0deb68 [ 294.457001][T13346] [ 294.457019][T13346] Mem-Info: [ 294.729110][T13346] active_anon:6876 inactive_anon:0 isolated_anon:0 [ 294.729110][T13346] active_file:3077 inactive_file:39927 isolated_file:0 [ 294.729110][T13346] unevictable:778 dirty:192 writeback:0 [ 294.729110][T13346] slab_reclaimable:12293 slab_unreclaimable:212810 [ 294.729110][T13346] mapped:29047 shmem:1433 pagetables:994 [ 294.729110][T13346] sec_pagetables:0 bounce:0 [ 294.729110][T13346] kernel_misc_reclaimable:0 [ 294.729110][T13346] free:1204249 free_pcp:15661 free_cma:0 [ 294.731167][T13354] bond6: (slave wireguard0): making interface the new active one [ 294.783679][T13346] Node 0 active_anon:27504kB inactive_anon:0kB active_file:12308kB inactive_file:159500kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:116188kB dirty:768kB writeback:0kB shmem:4196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12792kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.819297][T13354] wireguard0: entered promiscuous mode [ 294.823682][T13346] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.829158][T13354] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 294.861327][T13346] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.900511][T13346] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 294.906847][T13346] Node 0 DMA32 free:908380kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27512kB inactive_anon:0kB active_file:12308kB inactive_file:157948kB unevictable:1580kB writepending:768kB present:3129332kB managed:2557424kB mlocked:44kB bounce:0kB free_pcp:43708kB local_pcp:16268kB free_cma:0kB [ 294.919835][T13348] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 294.953960][T13346] lowmem_reserve[]: 0 0 1 1 1 [ 294.959177][T13346] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 294.992812][T13348] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 295.026926][T11399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.039374][T13346] lowmem_reserve[]: 0 0 0 0 0 [ 295.045305][T13346] Node 1 Normal free:3892972kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18880kB local_pcp:10736kB free_cma:0kB [ 295.083633][T13346] lowmem_reserve[]: 0 0 0 0 0 [ 295.088394][T13346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.103496][T13346] Node 0 DMA32: 1325*4kB (UME) 463*8kB (UME) 289*16kB (UME) 981*32kB (UME) 500*64kB (UME) 199*128kB (UME) 98*256kB (UM) 25*512kB (UME) 8*1024kB (UME) 3*2048kB (UM) 184*4096kB (M) = 908380kB [ 295.122879][T13346] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 295.137304][T13346] Node 1 Normal: 173*4kB (UE) 63*8kB (UME) 48*16kB (UME) 86*32kB (UME) 36*64kB (UME) 5*128kB (UME) 3*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3892972kB [ 295.200948][T13346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.212791][T13346] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.266470][T13346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.291095][T13346] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.292444][T13371] netlink: 'syz.4.1903': attribute type 3 has an invalid length. [ 295.311839][T13346] 44365 total pagecache pages [ 295.337986][T13346] 0 pages in swap cache [ 295.356981][T13346] Free swap = 124996kB [ 295.376772][T13346] Total swap = 124996kB [ 295.387256][T13346] 2097051 pages RAM [ 295.398989][T13346] 0 pages HighMem/MovableOnly [ 295.414185][T13346] 425669 pages reserved [ 295.425953][T13346] 0 pages cma reserved [ 295.844555][T13409] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 295.908968][T13409] __nla_validate_parse: 8 callbacks suppressed [ 295.908985][T13409] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1913'. [ 296.113997][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 296.232621][T13443] pim6reg: entered allmulticast mode [ 296.366716][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 296.660048][T13462] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 296.707829][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1930'. [ 296.880128][T13463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1928'. [ 297.229136][T13491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1934'. [ 297.636126][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'. [ 297.651395][T13520] syzkaller0: entered promiscuous mode [ 297.663216][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 297.675531][T13520] syzkaller0: entered allmulticast mode [ 298.075901][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 298.120148][T13550] lo speed is unknown, defaulting to 1000 [ 298.150018][T13550] lo speed is unknown, defaulting to 1000 [ 298.285022][T13569] lo speed is unknown, defaulting to 1000 [ 298.300942][T13568] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.377242][T13569] lo speed is unknown, defaulting to 1000 [ 298.424509][T13568] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.517449][T13568] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.572315][T13578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1956'. [ 298.651035][T13568] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.779751][T13592] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 298.944222][T13592] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.071439][T11409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.133291][T13594] lo speed is unknown, defaulting to 1000 [ 299.269037][T13594] lo speed is unknown, defaulting to 1000 [ 299.290531][T11394] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.395529][T11394] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.422111][T13603] syzkaller0: Caught tx_queue_len zero misconfig [ 299.593212][T11394] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.730182][T13617] tipc: Enabling of bearer rejected, failed to enable media [ 300.796176][T13657] hsr_slave_0: left promiscuous mode [ 300.802484][T13657] hsr_slave_1: left promiscuous mode [ 301.016424][T13669] __nla_validate_parse: 10 callbacks suppressed [ 301.016443][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1979'. [ 301.017854][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1980'. [ 301.290920][T13686] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 301.337499][T13688] lo speed is unknown, defaulting to 1000 [ 301.345023][T13688] lo speed is unknown, defaulting to 1000 [ 301.662430][T13699] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 301.923364][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 302.074043][T13707] veth0: entered promiscuous mode [ 302.348180][T13706] veth0: left promiscuous mode [ 302.450904][T13733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.771922][T13738] lo speed is unknown, defaulting to 1000 [ 302.879432][T13747] syzkaller0: entered promiscuous mode [ 302.903624][T13747] syzkaller0: entered allmulticast mode [ 302.933242][T13738] lo speed is unknown, defaulting to 1000 [ 303.020486][T13760] netlink: 'syz.4.1999': attribute type 7 has an invalid length. [ 303.076225][T13758] lo speed is unknown, defaulting to 1000 [ 303.090552][T13758] lo speed is unknown, defaulting to 1000 [ 304.881993][T13766] vlan1: entered allmulticast mode [ 304.887585][T13766] bridge_slave_0: entered allmulticast mode [ 305.199414][T13787] kthread_run failed with err -4 [ 305.295686][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 305.809361][T13819] netlink: 'syz.4.2013': attribute type 12 has an invalid length. [ 305.922508][T13818] tipc: Enabled bearer , priority 0 [ 305.945571][T13821] syzkaller0: entered promiscuous mode [ 305.951090][T13821] syzkaller0: entered allmulticast mode [ 305.970958][T13819] syz_tun: entered promiscuous mode [ 306.056947][T13822] lo speed is unknown, defaulting to 1000 [ 306.062950][T13817] tipc: Resetting bearer [ 306.102494][T13817] tipc: Disabling bearer [ 306.119805][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2015'. [ 306.139358][T13822] lo speed is unknown, defaulting to 1000 [ 306.476683][T13845] lo speed is unknown, defaulting to 1000 [ 306.505189][T13845] lo speed is unknown, defaulting to 1000 [ 306.638635][T13853] bridge7: entered allmulticast mode [ 306.766199][T13856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2022'. [ 306.814760][T13859] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2023'. [ 306.881015][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2020'. [ 306.900915][T13849] netlink: 'syz.3.2020': attribute type 13 has an invalid length. [ 306.908976][T13849] netlink: 'syz.3.2020': attribute type 17 has an invalid length. [ 306.935781][T13849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.975422][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.120743][T13866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.135403][T13866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.146951][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.901919][T13882] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2029'. [ 308.157737][T13892] netlink: 'syz.0.2031': attribute type 39 has an invalid length. [ 308.168769][T13878] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2028'. [ 308.554226][T13909] netlink: 'syz.0.2037': attribute type 4 has an invalid length. [ 308.586150][T13909] netlink: 'syz.0.2037': attribute type 4 has an invalid length. [ 308.779702][T13925] bridge0: port 1(batadv1) entered blocking state [ 308.814668][T13925] bridge0: port 1(batadv1) entered disabled state [ 308.821945][T13925] batadv1: entered allmulticast mode [ 308.842965][T13925] batadv1: entered promiscuous mode [ 308.992872][T13932] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 309.236198][T13941] bond7: (slave ip6gretap1): making interface the new active one [ 309.251131][T13941] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 309.260269][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 309.269980][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 309.285442][T13944] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 309.317221][T13944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.739848][T13971] 8021q: VLANs not supported on ip_vti0 [ 310.028124][T13980] lo speed is unknown, defaulting to 1000 [ 310.040883][T13984] geneve3: entered allmulticast mode [ 310.050905][T13980] lo speed is unknown, defaulting to 1000 [ 310.133828][T13995] tipc: Enabling of bearer rejected, already enabled [ 310.415595][T11413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.445797][T11413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.603833][T14012] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 311.374883][T14053] tipc: Enabling of bearer rejected, already enabled [ 311.425511][T14047] lo speed is unknown, defaulting to 1000 [ 311.477787][T14047] lo speed is unknown, defaulting to 1000 [ 311.677978][T14069] __nla_validate_parse: 14 callbacks suppressed [ 311.677996][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 311.781104][T14076] netlink: 'syz.3.2084': attribute type 39 has an invalid length. [ 311.863499][T14078] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 311.871269][T14078] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2085'. [ 311.910181][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2085'. [ 311.941791][T14078] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2085'. [ 311.957536][T14078] openvswitch: netlink: Flow key attr not present in new flow. [ 311.965883][T14086] tipc: Enabling of bearer rejected, already enabled [ 312.036060][T14090] veth0: entered promiscuous mode [ 312.214159][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'. [ 312.318414][T14087] veth0: left promiscuous mode [ 312.362082][T14107] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 312.463443][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 312.688697][T14115] bond8: (slave gretap4): making interface the new active one [ 312.704309][T14115] bond8: (slave gretap4): Enslaving as an active interface with an up link [ 312.747071][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 312.756728][T14125] IPv6: sit2: Disabled Multicast RS [ 312.909292][T14137] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 312.919561][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'. [ 312.981536][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2102'. [ 313.024662][T14142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2102'. [ 313.255467][T14152] tc_dump_action: action bad kind [ 313.337245][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.370560][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.373222][T14162] netlink: 'syz.2.2110': attribute type 21 has an invalid length. [ 313.391342][T14162] netlink: 'syz.2.2110': attribute type 4 has an invalid length. [ 313.471713][T14166] lo speed is unknown, defaulting to 1000 [ 313.499840][T14166] lo speed is unknown, defaulting to 1000 [ 313.548052][T14175] debugfs: 'netdev:nicvf0' already exists in 'phy7' [ 313.559348][T14174] netlink: 'syz.0.2113': attribute type 8 has an invalid length. [ 313.968610][T14205] netlink: 'syz.0.2118': attribute type 4 has an invalid length. [ 313.982257][T14198] syzkaller1: entered allmulticast mode [ 313.990446][T14200] syzkaller1: left allmulticast mode [ 314.002369][T14202] bond3: entered promiscuous mode [ 314.022658][T14203] netlink: 'syz.0.2118': attribute type 4 has an invalid length. [ 314.329887][T14207] lo speed is unknown, defaulting to 1000 [ 314.520394][T14207] lo speed is unknown, defaulting to 1000 [ 315.632088][ T5976] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 315.642854][ T5976] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 315.669994][ T5976] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 316.113878][T14273] netlink: 'syz.2.2138': attribute type 2 has an invalid length. [ 316.190204][T14273] þ: entered promiscuous mode [ 316.366878][T14287] lo speed is unknown, defaulting to 1000 [ 316.376630][T14287] lo speed is unknown, defaulting to 1000 [ 316.767966][T14308] __nla_validate_parse: 47 callbacks suppressed [ 316.767984][T14308] netlink: 344 bytes leftover after parsing attributes in process `syz.0.2149'. [ 316.787664][T14299] bond5: (slave geneve2): Releasing active interface [ 316.792822][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2149'. [ 316.812119][T14299] bond6: (slave wireguard0): Releasing backup interface [ 316.819503][T14299] wireguard0: left promiscuous mode [ 316.825228][T14299] bond6: (slave wireguard1): making interface the new active one [ 316.832979][T14299] wireguard1: entered promiscuous mode [ 316.858126][T14299] bond6: (slave wireguard1): Releasing backup interface [ 316.871505][T14299] wireguard1: left promiscuous mode [ 316.886881][T14299] bond8: (slave gretap4): Releasing active interface [ 316.941521][ T12] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.950174][ T12] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.973960][ T12] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.994175][T11413] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.129592][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291120][T14326] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 317.320545][T14330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2153'. [ 317.368485][T14332] nbd: nbd0 already in use [ 317.486627][T14336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2158'. [ 317.516170][T14335] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 317.648329][T14335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.678238][T14342] vlan3: entered promiscuous mode [ 317.698401][T14342] bond5: entered promiscuous mode [ 317.704898][T14342] vlan3: entered allmulticast mode [ 317.710499][T14342] bond5: entered allmulticast mode [ 317.721347][T14344] tipc: Enabling of bearer rejected, already enabled [ 317.802428][T14335] bond5: (slave gretap1): making interface the new active one [ 317.810956][T14335] gretap1: entered promiscuous mode [ 317.820754][T14335] gretap1: entered allmulticast mode [ 317.830562][T14335] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 318.286432][T14377] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 318.336281][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2170'. [ 318.357575][T14377] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2169'. [ 318.383594][T14384] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.393851][T14375] syzkaller0: entered promiscuous mode [ 318.399591][T14375] syzkaller0: entered allmulticast mode [ 318.690180][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 319.673422][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 319.722960][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2182'. [ 319.756743][T14427] netlink: 'syz.1.2182': attribute type 7 has an invalid length. [ 319.865701][T14439] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 319.875431][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 319.884535][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 320.000413][T14450] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 320.271267][T14469] 0·: renamed from .70· [ 320.301760][T14469] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.316774][T14469] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.331082][T14469] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 320.458512][T14479] netlink: 'syz.1.2198': attribute type 5 has an invalid length. [ 321.726882][T14536] batadv_slave_0: entered promiscuous mode [ 321.796673][T14536] __nla_validate_parse: 3 callbacks suppressed [ 321.796692][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 321.837187][T14536] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 321.934048][T14544] bond8: entered promiscuous mode [ 321.939639][T14544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 322.025481][T14535] batadv_slave_0: left promiscuous mode [ 322.346309][T14567] lo speed is unknown, defaulting to 1000 [ 322.385495][T14567] lo speed is unknown, defaulting to 1000 [ 322.405739][T14578] xfrm0: entered promiscuous mode [ 322.486010][T14578] xfrm0: entered allmulticast mode [ 322.969607][T14603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2234'. [ 322.994128][T14600] nbd1: detected capacity change from 0 to 549764202496 [ 323.020402][ T5864] block nbd1: Receive control failed (result -32) [ 323.304253][T14618] lo speed is unknown, defaulting to 1000 [ 323.311807][T14618] lo speed is unknown, defaulting to 1000 [ 323.824155][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 323.883130][T14641] netlink: 'syz.2.2245': attribute type 10 has an invalid length. [ 323.890983][T14641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2245'. [ 323.917858][T14648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2248'. [ 323.938170][T14649] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2248'. [ 324.039774][T14655] sctp: [Deprecated]: syz.0.2249 (pid 14655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.039774][T14655] Use struct sctp_sack_info instead [ 324.364531][T14645] tipc: Resetting bearer [ 324.416093][T14641] bond0: entered promiscuous mode [ 324.421346][T14641] !: entered promiscuous mode [ 324.436749][T14641] bond0: entered allmulticast mode [ 324.457374][T14641] !: entered allmulticast mode [ 324.466726][T14641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.479454][T14641] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.525088][ T59] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.540428][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.677924][ T59] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.694730][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.708941][ T59] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.717710][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.768918][ T59] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.811575][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.896708][T14686] lo speed is unknown, defaulting to 1000 [ 324.926343][T14697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 324.935607][T14697] netlink: 'syz.1.2257': attribute type 7 has an invalid length. [ 324.943633][T14697] netlink: 'syz.1.2257': attribute type 8 has an invalid length. [ 324.951451][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 324.993260][T14686] lo speed is unknown, defaulting to 1000 [ 325.006596][T14697] team0: entered promiscuous mode [ 325.011669][T14697] team_slave_0: entered promiscuous mode [ 325.026808][T14697] team_slave_1: entered promiscuous mode [ 325.041687][T14697] team0: left promiscuous mode [ 325.048670][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 325.055220][T14697] team_slave_0: left promiscuous mode [ 325.082639][T14697] team_slave_1: left promiscuous mode [ 327.114111][T14705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.143303][T14705] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 327.247432][T14705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 327.262882][T14725] netlink: 'syz.2.2261': attribute type 12 has an invalid length. [ 327.267253][T14705] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 327.301271][T14705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.314959][T14705] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 327.331879][T14728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.359074][T14705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.369154][T14705] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 327.432313][T14705] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 327.444234][T14705] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 327.452655][T14705] CPU: 1 UID: 0 PID: 14705 Comm: syz.1.2257 Not tainted syzkaller #0 PREEMPT(full) [ 327.462035][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.472101][T14705] RIP: 0010:klist_remove+0x14a/0x340 [ 327.477396][T14705] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 327.497001][T14705] RSP: 0018:ffffc9000c057800 EFLAGS: 00010202 [ 327.503064][T14705] RAX: 000000000000000b RBX: ffff888078425a00 RCX: 0000000000000000 [ 327.511023][T14705] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 327.518981][T14705] RBP: ffffc9000c057900 R08: ffffffff8f8a0d43 R09: 1ffffffff1f141a8 [ 327.526958][T14705] R10: dffffc0000000000 R11: fffffbfff1f141a9 R12: 0000000000000000 [ 327.534922][T14705] R13: 1ffff1100f01168c R14: ffff88807808b460 R15: dffffc0000000000 [ 327.542886][T14705] FS: 00007f05eaa506c0(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 327.551804][T14705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.558379][T14705] CR2: 00007fbf15cf56c0 CR3: 0000000053708000 CR4: 00000000003526f0 [ 327.566344][T14705] Call Trace: [ 327.569613][T14705] [ 327.572537][T14705] ? __pfx_klist_remove+0x10/0x10 [ 327.577644][T14705] ? __pfx_kobject_move+0x10/0x10 [ 327.582658][T14705] ? do_raw_spin_unlock+0x122/0x240 [ 327.587852][T14705] ? get_device_parent+0x366/0x3a0 [ 327.592956][T14705] device_move+0x193/0x700 [ 327.597377][T14705] hci_conn_del_sysfs+0xb8/0x170 [ 327.602307][T14705] hci_conn_del+0xc33/0x11b0 [ 327.606885][T14705] hci_conn_hash_flush+0x191/0x230 [ 327.611989][T14705] hci_dev_close_sync+0xaef/0x1330 [ 327.617093][T14705] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 327.622638][T14705] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 327.628543][T14705] hci_dev_do_close+0x2f/0x90 [ 327.633216][T14705] hci_rfkill_set_block+0x21d/0x2e0 [ 327.638406][T14705] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 327.644111][T14705] rfkill_set_block+0x1d2/0x440 [ 327.648957][T14705] rfkill_fop_write+0x44b/0x570 [ 327.653792][T14705] ? __pfx_rfkill_fop_write+0x10/0x10 [ 327.659152][T14705] ? security_kernfs_init_security+0x250/0x290 [ 327.665305][T14705] ? rw_verify_area+0x255/0x4d0 [ 327.670146][T14705] ? __lock_acquire+0xab9/0xd20 [ 327.674990][T14705] ? __pfx_rfkill_fop_write+0x10/0x10 [ 327.680350][T14705] vfs_write+0x27e/0xb30 [ 327.684583][T14705] ? __pfx_vfs_write+0x10/0x10 [ 327.689337][T14705] ? __fget_files+0x2a/0x420 [ 327.693911][T14705] ? __fget_files+0x2a/0x420 [ 327.698489][T14705] ? __fget_files+0x3a0/0x420 [ 327.703147][T14705] ? __fget_files+0x2a/0x420 [ 327.707736][T14705] ksys_write+0x145/0x250 [ 327.712052][T14705] ? __pfx_ksys_write+0x10/0x10 [ 327.716896][T14705] ? do_syscall_64+0xbe/0x3b0 [ 327.721570][T14705] do_syscall_64+0xfa/0x3b0 [ 327.726065][T14705] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.731258][T14705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.737316][T14705] ? clear_bhb_loop+0x60/0xb0 [ 327.741984][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.747864][T14705] RIP: 0033:0x7f05e9b8ebe9 [ 327.752265][T14705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.771858][T14705] RSP: 002b:00007f05eaa50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.780270][T14705] RAX: ffffffffffffffda RBX: 00007f05e9dc6180 RCX: 00007f05e9b8ebe9 [ 327.788232][T14705] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 327.796191][T14705] RBP: 00007f05e9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.804153][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.812118][T14705] R13: 00007f05e9dc6218 R14: 00007f05e9dc6180 R15: 00007ffcec0deb68 [ 327.820091][T14705] [ 327.823097][T14705] Modules linked in: [ 327.827778][T14705] ---[ end trace 0000000000000000 ]--- [ 327.850130][T14705] RIP: 0010:klist_remove+0x14a/0x340 [ 327.855603][T14705] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 327.877282][T14705] RSP: 0018:ffffc9000c057800 EFLAGS: 00010202 [ 327.883789][T14705] RAX: 000000000000000b RBX: ffff888078425a00 RCX: 0000000000000000 [ 327.891872][T14705] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 327.900250][T14705] RBP: ffffc9000c057900 R08: ffffffff8f8a0d43 R09: 1ffffffff1f141a8 [ 327.908379][T14705] R10: dffffc0000000000 R11: fffffbfff1f141a9 R12: 0000000000000000 [ 327.916465][T14705] R13: 1ffff1100f01168c R14: ffff88807808b460 R15: dffffc0000000000 [ 327.925738][T14705] FS: 00007f05eaa506c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 327.935166][T14705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.941786][T14705] CR2: 000000110c3a9f92 CR3: 0000000053708000 CR4: 00000000003526f0 [ 327.949912][T14705] Kernel panic - not syncing: Fatal exception [ 327.956266][T14705] Kernel Offset: disabled [ 327.960581][T14705] Rebooting in 86400 seconds..