last executing test programs: 33.283030497s ago: executing program 0 (id=1428): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c00000002000000096c9d8fc6c37c21ba7f2a19492c6f5dfa6d6cffc648108a47701ae28a7bdef50549dbe99eaf083c968a2c2c413cf120c256612c3a31eb195e29744bb84b9ff5d3f55dce9b32e31db4cc90b14e198f704e9ba173456c6ba5e97ad2fdd57350e0809b09540dbb3965959f13066e090a023eced3da7f91486c877ac3da442934b991bccf9aaacfd33068d5bc8f0f72e95cfbff86d161197a15d18dd354fcec0c05eb2cef6aa9ff2bece0b4287e2846d41b37b856971fd11cf72cdaa95825f24eaa837caa7977e4acf9533caf8e814abc798d3d504e84d11cf805e4850200935efaf0e7", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0xd0, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0x9b, 0xd, 0x1, 0x0, "ead1f361514a6228bae56bc56d709b5214d7909b22e009603193a48981fc92142d0b99e5f1ea86649c3a9409502156d24d6736eb4c1abf12cf7326c686f3941aac8076a918265614c301b1930e1d85de5b8370ad03291020248f827f8779089d7276eeda1e5d516373fde8ea5ecf2e579440593951860c7e9aef6479be24d35de4621e034c5c9cad87bd023e334f4bd0f36018e6c722ad"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x54}}, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'batadv0\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x800, 0x7}}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)=ANY=[], 0x24}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) (async) socket$netlink(0x10, 0x3, 0x12) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) (async) socket$inet(0xa, 0x801, 0x0) 33.276153204s ago: executing program 0 (id=1430): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 33.26506501s ago: executing program 0 (id=1435): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="d5d3d0fe", 0x4}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x1, 0x8, 0x1, 0xdc39}, {0x8, 0x1, 0xff, 0x100}]}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) splice(r0, 0x0, r1, 0x0, 0x10504, 0x3) 29.193362917s ago: executing program 0 (id=1435): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="d5d3d0fe", 0x4}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x1, 0x8, 0x1, 0xdc39}, {0x8, 0x1, 0xff, 0x100}]}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) splice(r0, 0x0, r1, 0x0, 0x10504, 0x3) 18.433243516s ago: executing program 0 (id=1435): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="d5d3d0fe", 0x4}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x1, 0x8, 0x1, 0xdc39}, {0x8, 0x1, 0xff, 0x100}]}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) splice(r0, 0x0, r1, 0x0, 0x10504, 0x3) 9.624335687s ago: executing program 0 (id=1435): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="d5d3d0fe", 0x4}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x1, 0x8, 0x1, 0xdc39}, {0x8, 0x1, 0xff, 0x100}]}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) splice(r0, 0x0, r1, 0x0, 0x10504, 0x3) 5.139173907s ago: executing program 1 (id=1695): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028008000500000000000500160001000000040012000800150000000028"], 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd70000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400040004000380"], 0x38}}, 0x0) socket(0x1000000010, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 3.686556253s ago: executing program 1 (id=1702): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async) close(0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001640)={0x48, r2, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x21, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0x3d8e}, @device_a, @device_b, @random="6f2e9cb26770", {0x1, 0x41}}, @tdls_setup_cfm={0xc, 0x2, {0x5, 0x1}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x9]}]}, 0x48}}, 0x40054) (async) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev}, &(0x7f0000000100)=0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 3.589167855s ago: executing program 1 (id=1704): unshare(0x20000400) (async, rerun: 64) r0 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0xd) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r3, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x80, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x69d}]}, 0xfffffffffffffeed}, 0x1, 0x0, 0x0, 0x20008000}, 0x1400000000000000) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500040e000000000000000000000005000600000000000a00000000000000ff010000000000000000000000000001000000000000000002000100000000000000000000000000050007003c009fab6e1bd64f4f00000a00000000000000fe8000"/112], 0x70}, 0x1, 0x7}, 0x0) 3.366305961s ago: executing program 1 (id=1707): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r4, 0x29, 0x18, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(0x4) close(0x3) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0x1, 0x80}) r8 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000080)=r1, 0x4) sendmsg$kcm(r8, 0x0, 0x44080) mmap(&(0x7f00006e7000/0x3000)=nil, 0x3000, 0x2, 0x110, r5, 0x1000) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffc000) mmap(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0x5d071000) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) 3.229757346s ago: executing program 1 (id=1710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x2e, 0x4000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x3, 0x2}, {0x7}, {0x0, 0x0, 0x2000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3.016221459s ago: executing program 1 (id=1712): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 2.636192549s ago: executing program 4 (id=1715): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x13, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x20400) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) setsockopt(r1, 0x0, 0x82, 0x0, 0x55) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000210000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000210000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xf2a9, 0x7, 0x10000, 0xff, 0x1, 0x3f80, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000003c0)=""/182, 0x1209000, 0x0, 0xfffffe00, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000003c0)=""/182, 0x1209000, 0x0, 0xfffffe00, 0x1}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x3f8, 0x1f8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1d8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@recent1={{0x108}, {0x1, 0x38000, 0x0, 0x0, 'syz0\x00', 0x1, [0xffffffff, 0x0, 0xff000000, 0xff]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2, 0x2}, {0x4, 0x2, 0x6}, {0x1, 0x5, 0x5}, 0x7, 0x7fff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 2.164197073s ago: executing program 3 (id=1716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001180)={0xdb4, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={&(0x7f00000000c0), 0xc, &(0x7f0000000740)={&(0x7f0000000300)=@updpolicy={0x410, 0x19, 0x10, 0x70bd2c, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x4e23, 0x5, 0x4e21, 0x0, 0x2, 0x20, 0xa0, 0x87, 0x0, r4}, {0xfffffffffffffffc, 0x5, 0xf38, 0xe, 0x100000001, 0xff, 0x5, 0xb}, {0x8, 0x3ff, 0x5, 0x5}, 0x401, 0x6e6bbb, 0x2, 0x0, 0x3, 0x3}, [@srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @lifetime_val={0x24, 0x9, {0x7, 0xffff, 0x7ca}}, @migrate={0x180, 0x11, [{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, @in=@local, 0x32, 0x4, 0x0, 0x3503, 0x0, 0x2}, {@in6=@mcast1, @in6=@loopback, @in=@private=0xa010100, @in6=@empty, 0x2b, 0x3, 0x0, 0x3507, 0xa, 0xa}, {@in=@remote, @in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c, 0x2, 0x0, 0x3502, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in6=@private1, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x32, 0x1, 0x0, 0x3503, 0xa, 0x2}, {@in=@empty, @in=@multicast1, @in=@rand_addr=0x64010102, @in=@multicast1, 0x6c, 0x1, 0x0, 0x3506, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x0, 0xa}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@mcast2, 0x0, 0x2}}, @algo_crypt={0x145, 0x2, {{'ctr-serpent-avx2\x00'}, 0x7e8, "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"}}]}, 0x410}, 0x1, 0x0, 0x0, 0x200040d0}, 0x4040810) (async) socket(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}]}}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000980)=ANY=[], 0x1f0}}, 0x20000000) 1.785275837s ago: executing program 2 (id=1717): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_netdev_private(r1, 0x8922, &(0x7f0000000040)="f7618fc5e7ce492ceb4e3a") r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @private1, 0x9}, 0x1c) sendmmsg$alg(r2, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="d8000000000000002900000034"], 0xd8}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x24, 0x301, 0x0, 0x25dfdbfd, {0x1}, [@typed={0xc, 0x14b, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x4000) 1.726715468s ago: executing program 3 (id=1718): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x5e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="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", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3}}], 0x4000000000002e4, 0x4000000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000000c0)=0xfff) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r3}, 0x8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 1.650813358s ago: executing program 4 (id=1719): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x4, 0x70bd26, 0x9, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004864}, 0x20048040) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001280)={&(0x7f0000000180), 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1054, 0x0, 0x3, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5ea}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2000}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x1054}, 0x1, 0x0, 0x0, 0xc081}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001300)={'dummy0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001340)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x44, 0x0, "a5fdb9a28c6d496ca36a3a9a19098b1c96203a7905d181969bce84d200de27692c36c6e4fbf51e7dd6d312468b706e66e66e3d7a6a3dc4566bca8116cf49a5fe70982f0fbefa3deda28fe55c471e1886"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x2, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10004810}, 0x20000001) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd4ad}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000016c0)={'vxcan1\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x1e, &(0x7f0000001700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbe4d, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf359}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x1, 0xd, 0xf, 0x2, 0xfffffffffffffff8, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001800)='GPL\x00', 0x10001, 0xa7, &(0x7f0000001840)=""/167, 0x41100, 0x23, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x0, 0x3, 0xd, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x2, &(0x7f0000001980)=[r0], &(0x7f00000019c0)=[{0x1, 0x3, 0xd, 0x6}, {0x5, 0x1, 0x0, 0x7}], 0x10, 0x7fff, @void, @value}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000001ac0)={0x8001, 0x7fffffffffffffff, 0xd64, 0x3, 0x2, 0x5}) sendto$isdn(r0, &(0x7f0000001b00)={0x1, 0x5, "e24b35e5cb037f9b61f2c7a7b2b7654278eddb1480b92d57dc37c09b393ad55cd3846ac9c7c8b9c997436ea9386f6b5f8e46fb4f3b898e8dbeb7825741fe9a7d77ebc2ea279cbbcbb781e5d9c51afac9cd57d364f21e9f53391913266331a64ba512768564012358bb37787d58567bbeba41fd6dc19aa27e894165b709d7f39821d88cc908d828977e36edba180682d99301366abe69c6df0e464edb8ce6ec83a208305ff6529fc7bc9ea2a8c33de41295cca323d8887bd9592acc1bc61f65c9e04560fe5f19f665d37e2528813cba342614041d5f42245daedfb1ba020f5e5d80620d3d036794"}, 0xef, 0x20040004, &(0x7f0000001c00)={0x22, 0x2, 0xe, 0x2, 0x4}, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x21, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2f67abf904a75b22, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x7, 0xb, 0x7, 0x100, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x4, 0x7, 0x4, 0xfffffffffffffff0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x4ff, 0xde, &(0x7f0000001e00)=""/222, 0x40f00, 0x8, '\x00', r6, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001f00)={0x2, 0x9, 0xb, 0xff41}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001f40)=[r0, r0, r0], &(0x7f0000001f80)=[{0xb, 0x3, 0xa, 0x1}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000001c40)='cachefiles_write\x00', r7, 0x0, 0x8000000000000001}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000020c0)=0x1000, 0x8) socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000002100)=0x10001, 0x4) r8 = accept4(0xffffffffffffffff, &(0x7f0000002140)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f00000021c0)=0x80, 0x100800) sendmsg$AUDIT_TRIM(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3f6, 0x1, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002340), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f00000027c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000002380)={0x3cc, r9, 0x1813f750bd5ee5fa, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x170}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb10b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7456c8d8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xcaf0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfffffff9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x13b9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x68, 0x3, "7cf1d16f5a310caf234cddce9e775abab8a894e9a07c38a1f4fb838c24f306ba2dcde81d5281c7f9e58af36ba759210ede9e3b50bfb3fa7c6302344355b3feb68471f8ac4348f725ccbfdea2f70dcb4e875b66dfb3b21319a04a820e4c4892e2179df262"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x10000081}, 0x40810) 1.305084391s ago: executing program 4 (id=1720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x1c, 0x1a, 0x11, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18}}, 0x1c}, 0x1, 0x0, 0x0, 0x4018}, 0x4000040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x20004) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000001c0), 0x4) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0x9, 0x1, {{0x1e, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0xfb, 0x2f, 0x0, @broadcast, @remote, {[@end, @lsrr={0x83, 0x7, 0xf, [@private=0xa010100]}, @lsrr={0x83, 0x2b, 0xad, [@remote, @rand_addr=0x64010100, @multicast2, @broadcast, @multicast1, @loopback, @local, @multicast1, @private=0xa010101, @private=0xa010100]}, @cipso={0x86, 0x30, 0x2, [{0x1, 0x8, "3034c995438f"}, {0x0, 0xc, "fef5ff2ca9f4c19cd656"}, {0x0, 0xc, "983cceb65cc624d2e62e"}, {0x0, 0xa, "b39f56544b28472c"}]}]}}}}}) recvfrom$packet(r4, &(0x7f0000000280)=""/165, 0xa5, 0x1, &(0x7f0000000440)={0x11, 0x8, r5, 0x1, 0xb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 1.072122114s ago: executing program 3 (id=1721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='cpuhp_exit\x00', r3, 0x0, 0xfffffffffffffffa}, 0x18) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e0001006970366772657461700000002c000280140006002001000000000000000000000000000214000700fc00000000000000000000000000000108000a00", @ANYRES32=r5, @ANYBLOB="c3de545f452e9740eb55325a7d957c9bec83b1e09b58"], 0x68}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r7, &(0x7f0000002040)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="8a0c", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x48004) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES8=r6], 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x5, 0xd, 0x0, {0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x20}}, 0x20000000) ppoll(&(0x7f0000000440)=[{r4, 0x1000}, {r6, 0x240}], 0x2, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0x8000]}, 0x8) 1.013755976s ago: executing program 4 (id=1722): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xffffffffffffffc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$vsock_stream(0x28, 0x1, 0x0) 890.732902ms ago: executing program 4 (id=1723): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000) accept$alg(r4, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000001400)=""/104, 0x68}], 0x3}, 0x40000100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xd0, 0x0, &(0x7f00000003c0)) r7 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000400)="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", &(0x7f00000000c0)=""/74, &(0x7f0000000040)="cd3431cde068669f56c6020a0e4771639797bb2797f3293c42995245f671d2d7b8d695c311", &(0x7f0000000140)="2c915c101debc0272f2e973100257727c0e7a5ba1686839efd13a2411f59afa91f163ea0953652394cd4dc550babac275aab5ee2b975504a59dc8de155136d0b455d45d62bfbda6ed415e3e8", 0x0, r7}, 0x38) 636.169565ms ago: executing program 3 (id=1724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0xff12, 0x0, 0x2, 0x0, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000071113c000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x970b) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2c}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MAP={0x24, 0xe, {0x4, 0x3, 0xffffffffffffffff, 0x7f, 0x1, 0x7}}]}, 0x64}}, 0x0) 621.222801ms ago: executing program 2 (id=1725): socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250c00000008000300", @ANYRES32=r4, @ANYBLOB="0ce6deed4500508001000200000000000a070600080211000005000012c0f0f624f3a97f9c4d24d593f93ba5a81ef5ee84614e2e4b9184360b87d2bab101ef14f349b42298c9a609e957e7002d7ae9f3a850728d41d732cd94229953e6e1b47e1794abecfa3dc361f2ac2e53d608294e6b25fe249b0c18e03cc371c98d1a23ad21a67a2b6455a2d761a70763912ba797ff51822c207b3437809ebbf605d7683897d793b97a1988d48ef99dbd61d8a3a4ea4fb26b0d97e6c6d1a71178960e18da49ecb8e4a992a58106a06b3b7ad4"], 0x34}, 0x1, 0x0, 0x0, 0x4480}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000200000000000000000000000000000903000000000000000000000a"], 0x0, 0x4a, 0x3d, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001000090425bd7000fbdbdf2500000000", @ANYRES16=r5, @ANYBLOB="4c00010019c0000024001280110001006272696467655f736c617665000000000c00058005001b", @ANYRES8=r1, @ANYRES32=0x0, @ANYRES64=r7, @ANYBLOB="e66b5549a0a4b8efdd6babe6b8e1e3ee415205d1133e3444b554a1250f31a05558ac11bdc8ba65ee25b5db0ef1276af8712c103d0bc1e97e4a41cd3498387d787dbfeec5795811da1114b606b42c1988c7d01fbbfd988022f0b31e4c20cf30e4c776d6b01d2911cb8ea78ee2e11a6bff5e6040c7969dec7e4117f397257f55c056a8d11011f94f7e0ee9c57ccd77", @ANYRES32=r8, @ANYRESDEC=r4, @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x12) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async, rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000000)={0x1d, r9}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0x57, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0eb", &(0x7f0000000000), 0x7}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x34, 0x11, 0xfffffffffffffffb, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xffe0, 0x6}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}]}, 0x34}}, 0x40044) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r12, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x8, 0x0, 0x0}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r13}, 0x4) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="c68f95463d6002b60c23bfcca4bbe19f2ee3677d12a98e3effa2eb92efa0fdee2d0a29d57221a18d79055fbfc0ff8ce53689f0e625748298e37a5f63c26a08682e11610f98b2d5a15954d0cfcadd16735c52419c0f579bc990589c466558b1f14c248bd78bf713015b841a9d46985490581c930963221aaa72eb7e81f3b5b7b00f5242b9ba58201555fd98d18a019d9836771046de14262ff2dccb3249c448b4c155d45a04bf6cae7c1fb168a8f191a375ff1662e20072833b6c2285fcc9422f9b3f2e7493404a5dd75f0b490390eef061590a50914b3e466d", @ANYRES32, @ANYBLOB="030000002000090000000000", @ANYRES32=r13, @ANYRES16=r8], 0x20) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000200000900020073797a30000000001c0007800c000280080001400a0101010c000180080001400000000005000500020000000500010006000000"], 0x68}}, 0x0) 533.223063ms ago: executing program 4 (id=1726): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x459f1d18}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x5, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x5, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f0000000000003490f82bf77b2a82a671c1209e6e873b9a19135d607149c68d0daa96906e4da3c227a9acb2c3375c46c0ba56dc4f8d9d38b589d9186011473191ed5f2a8ed07eeacc55e3f2ab18e97b0ec7bf5ba59d120dc6aa8139383d1a56ae44e6f30032482a4f1160b92532ba84de32848e8944e29e7ff15ad8901a8d04"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES16=r0, @ANYRES64=r2, @ANYBLOB="dd924f238ae7c6245b8e6569947b3e2c9aa77147b519c8bb5de2c71365eaf7fa6670eef9a8077dd18a19db1254fdc0d9544618ebea8d2f3879f332665f400cc5cb80ab015d647db7ee4e802dbd1fef1e7e041c54ed9b01263b62b82ff18ed81e3788b82bd5ad25c1afa14b3b722357b35a8227be7160e61004f47784b57c6bbbdab01ac13e3b1c582a8a605a56bf65ed9ed7f2df613befdc6bd05e12bccc9fb1e484c55cdcb893ee5b418b8526bc71163925fa4164cecac2a2abd158aa604803cb024605263394efdb34474867aee53bf31cd80aca6b89137de5200d45fc47ad"], 0xfdef) 416.169997ms ago: executing program 2 (id=1727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x5, &(0x7f00000000c0)=@framed={{}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061151000000000009507000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="080026008500000000001c005a8018000180140003b6720047ae8a4b21a3cfca929b197cdec70fa2f63fe199a87de40697e3f0feb3bc0116090a165156123c6d9eaf9bdafd3771a1daf969602c06c3a35e4c0ea6bbd642493393dc82eacd2dafd58c6a562aba7719b36f36a259fc2f757d746e696b8127c180e9137bf9024de9e314cc6c15ee321f397d58b06398d4434074867b745c3ca01c5f1d1a289f30fc5ceaaa4e6b2226631ff50722d9a57d5dca172b098859d40c7c8a35d8bd650ca54270ae250736c1db50c4bfaa06d0bd20f88d03a4b29c462e6b5265e3946400"/232], 0x4c}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000080)=0x8001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) 290.006134ms ago: executing program 2 (id=1728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x48) (async) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x49, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa371544aeaaaaaa080045ee8e3b0000000000019078ac1e0001ac1414aa0000907800680007169e1ba38452a14503dc5d4ead37f1c184b3d8713afa78ad95d08af2aa62d0b84db9fa0906"], 0x0) (async, rerun: 32) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r5, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp=r6}, 0x20) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f00000000c0)="daa170", &(0x7f00000002c0)=@udp6=r7}, 0x20) (async, rerun: 64) close(r6) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0xfffffffc, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) 262.789823ms ago: executing program 3 (id=1729): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0x100000001) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x7b52, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) (async) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}}}, 0x0) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) read(r6, &(0x7f0000005f40)=""/175, 0xaf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 72.310506ms ago: executing program 2 (id=1730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x1, 0x803, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb767, @private2, 0x5, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.351101ms ago: executing program 3 (id=1731): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c00028035000100299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c620000fa13000000020a0101000000000000000000000008140000001000010000000000000000000084000a1172df99dfad9ef2ca2e3095b54df56472a80d10da74edce7aa61d0e93a08cf68d69667f1c884996da0d0e0985defd6dd291ac3274e3a9168e94217d0dde8dc64419fb13b18f8640f1d3"], 0x128}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@local, r4}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x101, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000b609c5d8cc5a475dd466048a2af0057092bcc1631cb63d7cdb"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 2 (id=1732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001010000b704000000000000850000003300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r5], 0x44}}, 0x0) kernel console output (not intermixed with test programs): T6886] ? __pfx_____sys_recvmsg+0x10/0x10 [ 91.887725][ T6886] __sys_recvmsg+0x291/0x390 [ 91.892318][ T6886] ? __pfx___sys_recvmsg+0x10/0x10 [ 91.897428][ T6886] ? __mutex_unlock_slowpath+0x21e/0x790 [ 91.903066][ T6886] ? __fget_files+0x2a/0x410 [ 91.907671][ T6886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.914001][ T6886] ? do_syscall_64+0x100/0x230 [ 91.918766][ T6886] ? do_syscall_64+0xb6/0x230 [ 91.923448][ T6886] do_syscall_64+0xf3/0x230 [ 91.927992][ T6886] ? clear_bhb_loop+0x35/0x90 [ 91.932699][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.938603][ T6886] RIP: 0033:0x7f2c3b185d29 [ 91.943019][ T6886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.962650][ T6886] RSP: 002b:00007f2c3bf8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 91.971076][ T6886] RAX: ffffffffffffffda RBX: 00007f2c3b376080 RCX: 00007f2c3b185d29 [ 91.979042][ T6886] RDX: 0000000000000104 RSI: 0000000020001500 RDI: 0000000000000003 [ 91.987009][ T6886] RBP: 00007f2c3bf8d090 R08: 0000000000000000 R09: 0000000000000000 [ 91.994974][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.002939][ T6886] R13: 0000000000000001 R14: 00007f2c3b376080 R15: 00007ffeb7d04968 [ 92.010945][ T6886] [ 92.096909][ T6887] delete_channel: no stack [ 92.350452][ T6916] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 92.350513][ T6915] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 92.424198][ T6916] syz.3.255 (6916) used greatest stack depth: 18672 bytes left [ 92.825653][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.4.263'. [ 92.901903][ T6951] Cannot find add_set index 0 as target [ 93.071691][ T6957] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.266'. [ 93.146388][ T6961] netlink: 332 bytes leftover after parsing attributes in process `syz.0.267'. [ 93.323585][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 93.638003][ T5882] hid-generic 0005:0C45:0058.0001: item fetching failed at offset 0/1 [ 93.647373][ T5882] hid-generic 0005:0C45:0058.0001: probe with driver hid-generic failed with error -22 [ 94.332368][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 94.395142][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 94.521672][ T7037] netlink: 76 bytes leftover after parsing attributes in process `syz.4.288'. [ 94.602154][ T7037] netlink: 'syz.4.288': attribute type 10 has an invalid length. [ 94.699914][ T7037] team0: Port device wlan1 added [ 94.981134][ T7055] netlink: 'syz.1.294': attribute type 3 has an invalid length. [ 94.996792][ T7055] netlink: 224 bytes leftover after parsing attributes in process `syz.1.294'. [ 95.069369][ T7057] tap0: tun_chr_ioctl cmd 1074025677 [ 95.079993][ T7057] tap0: linktype set to 804 [ 95.395920][ T7069] raw_sendmsg: syz.3.296 forgot to set AF_INET. Fix it! [ 95.452478][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 95.474162][ T7069] nbd: socks must be embedded in a SOCK_ITEM attr [ 95.587976][ T7078] netlink: 'syz.3.296': attribute type 1 has an invalid length. [ 95.601253][ T7078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.296'. [ 95.836572][ T7087] IPv6: Can't replace route, no match found [ 96.502263][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 96.524293][ T7108] tc_dump_action: action bad kind [ 96.831672][ T7124] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 96.854906][ T7124] netlink: 244 bytes leftover after parsing attributes in process `syz.1.312'. [ 97.370263][ T7141] netlink: 'syz.0.317': attribute type 8 has an invalid length. [ 97.384734][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 97.769435][ T7148] pim6reg: entered allmulticast mode [ 97.776666][ T7148] pim6reg: left allmulticast mode [ 98.269475][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.325'. [ 99.508574][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 99.600019][ T7201] @ÿ: renamed from veth0_vlan (while UP) [ 99.952813][ T7226] trusted_key: syz.1.344 sent an empty control message without MSG_MORE. [ 100.026817][ T7228] netlink: 'syz.1.346': attribute type 29 has an invalid length. [ 100.037264][ T7228] netlink: 'syz.1.346': attribute type 29 has an invalid length. [ 100.045960][ T7228] netlink: 500 bytes leftover after parsing attributes in process `syz.1.346'. [ 100.141175][ T7234] netlink: 44 bytes leftover after parsing attributes in process `syz.1.347'. [ 100.229010][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'. [ 100.299025][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 100.308322][ T7238] bridge_slave_1: left allmulticast mode [ 100.317343][ T7238] bridge_slave_1: left promiscuous mode [ 100.324181][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.341229][ T7238] bridge_slave_0: left allmulticast mode [ 100.349626][ T7238] bridge_slave_0: left promiscuous mode [ 100.360580][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.004251][ T7272] netlink: 176 bytes leftover after parsing attributes in process `syz.0.360'. [ 101.042760][ T7272] netlink: 176 bytes leftover after parsing attributes in process `syz.0.360'. [ 102.129261][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 102.177720][ T7317] nbd: must specify a size in bytes for the device [ 102.211527][ T7323] netlink: 144 bytes leftover after parsing attributes in process `syz.0.373'. [ 102.351992][ T7328] netlink: 'syz.2.376': attribute type 3 has an invalid length. [ 102.373230][ T7328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.376'. [ 102.471279][ T7332] atomic_op ffff888061b88198 conn xmit_atomic 0000000000000000 [ 102.553234][ T7337] tipc: Started in network mode [ 102.581779][ T7337] tipc: Node identity ac14140f, cluster identity 4711 [ 102.593210][ T7337] tipc: New replicast peer: 255.255.255.255 [ 102.638399][ T7337] tipc: Enabled bearer , priority 10 [ 102.785884][ T7349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.513856][ T7406] netlink: 'syz.1.399': attribute type 6 has an invalid length. [ 103.756728][ T5905] tipc: Node number set to 2886997007 [ 104.070065][ T7434] FAULT_INJECTION: forcing a failure. [ 104.070065][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.098218][ T7438] netlink: 'syz.4.404': attribute type 2 has an invalid length. [ 104.108145][ T7438] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 104.118655][ T7438] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 104.134362][ T7434] CPU: 1 UID: 0 PID: 7434 Comm: syz.3.403 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 104.144998][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.155085][ T7434] Call Trace: [ 104.158386][ T7434] [ 104.161334][ T7434] dump_stack_lvl+0x241/0x360 [ 104.166046][ T7434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.171299][ T7434] ? __pfx__printk+0x10/0x10 [ 104.175920][ T7434] ? __pfx_lock_release+0x10/0x10 [ 104.180979][ T7434] should_fail_ex+0x3b0/0x4e0 [ 104.185688][ T7434] _copy_from_user+0x2f/0xc0 [ 104.190312][ T7434] copy_msghdr_from_user+0xae/0x680 [ 104.195547][ T7434] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.201383][ T7434] ? __fget_files+0x2a/0x410 [ 104.206003][ T7434] ? __fget_files+0x2a/0x410 [ 104.210761][ T7434] __sys_sendmmsg+0x32b/0x720 [ 104.215488][ T7434] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.220742][ T7434] ? __pfx_lock_release+0x10/0x10 [ 104.225796][ T7434] ? kstrtouint_from_user+0x128/0x190 [ 104.231266][ T7434] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 104.237190][ T7434] ? ksys_write+0x22a/0x2b0 [ 104.241728][ T7434] ? __pfx_lock_release+0x10/0x10 [ 104.246784][ T7434] ? vfs_write+0x730/0xd30 [ 104.251246][ T7434] ? __mutex_unlock_slowpath+0x21e/0x790 [ 104.256933][ T7434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.262943][ T7434] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.269300][ T7434] ? do_syscall_64+0x100/0x230 [ 104.274094][ T7434] __x64_sys_sendmmsg+0xa0/0xb0 [ 104.278976][ T7434] do_syscall_64+0xf3/0x230 [ 104.283504][ T7434] ? clear_bhb_loop+0x35/0x90 [ 104.288213][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.294145][ T7434] RIP: 0033:0x7f2c3b185d29 [ 104.298589][ T7434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.318219][ T7434] RSP: 002b:00007f2c3bfae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.326639][ T7434] RAX: ffffffffffffffda RBX: 00007f2c3b375fa0 RCX: 00007f2c3b185d29 [ 104.334607][ T7434] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 104.342574][ T7434] RBP: 00007f2c3bfae090 R08: 0000000000000000 R09: 0000000000000000 [ 104.350539][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.358508][ T7434] R13: 0000000000000000 R14: 00007f2c3b375fa0 R15: 00007ffeb7d04968 [ 104.366493][ T7434] [ 104.398571][ T7442] batadv1: entered promiscuous mode [ 104.669606][ T7452] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 104.752358][ T7456] __nla_validate_parse: 4 callbacks suppressed [ 104.752378][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 105.118226][ T7472] tipc: Failed to remove unknown binding: 66,1,1/0:1593389688/1593389690 [ 105.210676][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 105.301376][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 105.587751][ T7501] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 105.609645][ T7502] sctp: [Deprecated]: syz.4.426 (pid 7502) Use of int in max_burst socket option. [ 105.609645][ T7502] Use struct sctp_assoc_value instead [ 105.610868][ T7501] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 105.637314][ T7501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.992187][ T7518] netlink: 84 bytes leftover after parsing attributes in process `syz.4.433'. [ 106.002154][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'. [ 106.018107][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.433'. [ 106.225107][ T7531] netlink: 'syz.1.436': attribute type 10 has an invalid length. [ 106.476965][ T7538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.501498][ T7547] netlink: 104 bytes leftover after parsing attributes in process `syz.4.439'. [ 106.559013][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 106.660259][ T7538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.856626][ T7538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.862917][ T7559] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 106.889569][ T7559] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 106.904495][ T7559] vlan0: entered promiscuous mode [ 106.941574][ T7559] team0: Port device vlan0 added [ 106.986735][ T7538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.097523][ T7568] netlink: 'syz.4.443': attribute type 2 has an invalid length. [ 107.188266][ T7538] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.225801][ T7538] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.240218][ T7538] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.286106][ T7538] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.347063][ T7577] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 107.429631][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 107.446643][ T7577] bond1: entered promiscuous mode [ 107.451776][ T7577] bond1: entered allmulticast mode [ 107.602989][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 107.635023][ T7592] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 107.771291][ T7601] tipc: Enabled bearer , priority 0 [ 107.869248][ T7601] syzkaller0: entered promiscuous mode [ 107.878140][ T7601] syzkaller0: entered allmulticast mode [ 107.896374][ T7601] tipc: Resetting bearer [ 107.921474][ T7599] tipc: Resetting bearer [ 108.785988][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 109.882282][ T7599] tipc: Disabling bearer [ 109.898323][ T7619] syz_tun: entered promiscuous mode [ 109.906366][ T7619] syz_tun: left promiscuous mode [ 110.550050][ T7653] __nla_validate_parse: 2 callbacks suppressed [ 110.550069][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 110.631218][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.470'. [ 110.696599][ T7656] netlink: 'syz.2.470': attribute type 29 has an invalid length. [ 110.747006][ T7637] xt_CT: No such helper "netbios-ns" [ 111.220836][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 111.470298][ T7681] delete_channel: no stack [ 111.626520][ T7689] openvswitch: netlink: nsh attr 15107 is out of range max 3 [ 111.642158][ T7689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.883167][ T7701] netlink: 412 bytes leftover after parsing attributes in process `syz.3.483'. [ 111.895592][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 111.904976][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 111.920174][ T7701] netlink: 'syz.3.483': attribute type 5 has an invalid length. [ 111.982204][ T7701] netlink: 104 bytes leftover after parsing attributes in process `syz.3.483'. [ 112.681581][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 112.734594][ T7743] netlink: 72 bytes leftover after parsing attributes in process `syz.1.495'. [ 112.746678][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'. [ 112.827517][ T7747] netlink: 'syz.0.496': attribute type 29 has an invalid length. [ 112.958090][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.028112][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.076853][ T7762] netlink: 'syz.0.496': attribute type 29 has an invalid length. [ 113.110579][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.406390][ T7772] : entered promiscuous mode [ 113.919597][ T7789] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 113.979997][ T7789] bond3: entered promiscuous mode [ 113.986959][ T7789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.062917][ T7793] batadv2: entered promiscuous mode [ 114.114825][ T7793] batadv2: entered allmulticast mode [ 114.143708][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 114.175913][ T7793] bond3: (slave batadv2): making interface the new active one [ 114.207298][ T7793] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 114.316528][ T7801] netlink: 'syz.1.511': attribute type 13 has an invalid length. [ 114.334707][ T7801] netlink: 'syz.1.511': attribute type 11 has an invalid length. [ 114.530872][ T7807] sctp: [Deprecated]: syz.1.513 (pid 7807) Use of int in max_burst socket option deprecated. [ 114.530872][ T7807] Use struct sctp_assoc_value instead [ 114.975947][ T7823] IPVS: length: 118 != 24 [ 115.079587][ T7831] vlan3: entered promiscuous mode [ 115.128941][ T7831] vlan3: entered allmulticast mode [ 115.455051][ T7841] netlink: 'syz.2.524': attribute type 12 has an invalid length. [ 115.650142][ T7845] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 115.706494][ T7847] __nla_validate_parse: 6 callbacks suppressed [ 115.706515][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 115.857463][ T7853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.528'. [ 116.182373][ T7865] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 116.199339][ T7865] batman_adv: batadv0: Adding interface: wlan0 [ 116.207096][ T7865] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.240853][ T7865] batman_adv: batadv0: Interface activated: wlan0 [ 116.379953][ T7871] ax25_connect(): syz.4.532 uses autobind, please contact jreuter@yaina.de [ 116.401220][ T7871] vxcan1: entered allmulticast mode [ 116.967763][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 116.989847][ T7889] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 117.024264][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 117.291488][ T7898] FAULT_INJECTION: forcing a failure. [ 117.291488][ T7898] name failslab, interval 1, probability 0, space 0, times 1 [ 117.313509][ T7898] CPU: 1 UID: 0 PID: 7898 Comm: syz.0.541 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 117.324163][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.334240][ T7898] Call Trace: [ 117.337529][ T7898] [ 117.340473][ T7898] dump_stack_lvl+0x241/0x360 [ 117.345180][ T7898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.350406][ T7898] ? __pfx__printk+0x10/0x10 [ 117.355029][ T7898] should_fail_ex+0x3b0/0x4e0 [ 117.359735][ T7898] should_failslab+0xac/0x100 [ 117.364462][ T7898] ? skb_clone+0x20c/0x390 [ 117.368895][ T7898] kmem_cache_alloc_noprof+0x70/0x380 [ 117.374292][ T7898] skb_clone+0x20c/0x390 [ 117.378559][ T7898] __netlink_deliver_tap+0x3cc/0x7f0 [ 117.383868][ T7898] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.389081][ T7898] netlink_deliver_tap+0x19d/0x1b0 [ 117.394219][ T7898] netlink_unicast+0x7c4/0x990 [ 117.399005][ T7898] ? __pfx_netlink_unicast+0x10/0x10 [ 117.404301][ T7898] ? __virt_addr_valid+0x45f/0x530 [ 117.409431][ T7898] ? __phys_addr_symbol+0x2f/0x70 [ 117.414468][ T7898] ? __check_object_size+0x47a/0x730 [ 117.419772][ T7898] netlink_sendmsg+0x8e4/0xcb0 [ 117.424570][ T7898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.429877][ T7898] ? aa_sock_msg_perm+0x91/0x160 [ 117.434834][ T7898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.440131][ T7898] __sock_sendmsg+0x221/0x270 [ 117.444829][ T7898] ____sys_sendmsg+0x52a/0x7e0 [ 117.449618][ T7898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.454916][ T7898] ? __fget_files+0x2a/0x410 [ 117.459544][ T7898] ? __fget_files+0x2a/0x410 [ 117.464161][ T7898] __sys_sendmmsg+0x36a/0x720 [ 117.468871][ T7898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.474102][ T7898] ? __pfx_lock_release+0x10/0x10 [ 117.479139][ T7898] ? kstrtouint_from_user+0x128/0x190 [ 117.484553][ T7898] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 117.490474][ T7898] ? ksys_write+0x22a/0x2b0 [ 117.494995][ T7898] ? __pfx_lock_release+0x10/0x10 [ 117.500052][ T7898] ? vfs_write+0x730/0xd30 [ 117.504489][ T7898] ? __mutex_unlock_slowpath+0x21e/0x790 [ 117.510162][ T7898] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.516169][ T7898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.522520][ T7898] ? do_syscall_64+0x100/0x230 [ 117.527313][ T7898] __x64_sys_sendmmsg+0xa0/0xb0 [ 117.532218][ T7898] do_syscall_64+0xf3/0x230 [ 117.536740][ T7898] ? clear_bhb_loop+0x35/0x90 [ 117.541697][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.547606][ T7898] RIP: 0033:0x7f570c585d29 [ 117.552033][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.571654][ T7898] RSP: 002b:00007f570d2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.580089][ T7898] RAX: ffffffffffffffda RBX: 00007f570c776080 RCX: 00007f570c585d29 [ 117.588076][ T7898] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 117.596063][ T7898] RBP: 00007f570d2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.604047][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.612028][ T7898] R13: 0000000000000000 R14: 00007f570c776080 R15: 00007ffc2c4a2e08 [ 117.620029][ T7898] [ 118.343717][ T7917] netlink: 'syz.2.547': attribute type 5 has an invalid length. [ 118.425559][ T7917] netlink: 'syz.2.547': attribute type 5 has an invalid length. [ 118.502322][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 118.786261][ T7938] FAULT_INJECTION: forcing a failure. [ 118.786261][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 118.799946][ T7938] CPU: 0 UID: 0 PID: 7938 Comm: syz.4.554 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 118.810578][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.820676][ T7938] Call Trace: [ 118.823985][ T7938] [ 118.826935][ T7938] dump_stack_lvl+0x241/0x360 [ 118.831661][ T7938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.836885][ T7938] ? __pfx__printk+0x10/0x10 [ 118.841507][ T7938] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 118.846909][ T7938] ? __pfx___might_resched+0x10/0x10 [ 118.852226][ T7938] should_fail_ex+0x3b0/0x4e0 [ 118.856934][ T7938] should_failslab+0xac/0x100 [ 118.861644][ T7938] __kmalloc_node_noprof+0xe1/0x4d0 [ 118.866869][ T7938] ? qdisc_alloc+0x9a/0xa80 [ 118.871402][ T7938] qdisc_alloc+0x9a/0xa80 [ 118.875764][ T7938] qdisc_create+0x182/0x11a0 [ 118.880384][ T7938] ? __pfx_qdisc_create+0x10/0x10 [ 118.885440][ T7938] tc_modify_qdisc+0xa26/0x1e40 [ 118.890345][ T7938] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 118.895688][ T7938] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 118.901008][ T7938] rtnetlink_rcv_msg+0x73f/0xcf0 [ 118.905976][ T7938] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 118.911109][ T7938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.916583][ T7938] ? ref_tracker_free+0x643/0x7e0 [ 118.921618][ T7938] netlink_rcv_skb+0x1e3/0x430 [ 118.926383][ T7938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.931845][ T7938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.937142][ T7938] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.942342][ T7938] netlink_unicast+0x7f6/0x990 [ 118.947112][ T7938] ? __pfx_netlink_unicast+0x10/0x10 [ 118.952393][ T7938] ? __virt_addr_valid+0x45f/0x530 [ 118.957503][ T7938] ? __phys_addr_symbol+0x2f/0x70 [ 118.962527][ T7938] ? __check_object_size+0x47a/0x730 [ 118.967816][ T7938] netlink_sendmsg+0x8e4/0xcb0 [ 118.972589][ T7938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.977873][ T7938] ? aa_sock_msg_perm+0x91/0x160 [ 118.982809][ T7938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.988091][ T7938] __sock_sendmsg+0x221/0x270 [ 118.992768][ T7938] ____sys_sendmsg+0x52a/0x7e0 [ 118.997535][ T7938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.002813][ T7938] ? __fget_files+0x2a/0x410 [ 119.007408][ T7938] ? __fget_files+0x2a/0x410 [ 119.012003][ T7938] __sys_sendmmsg+0x36a/0x720 [ 119.016685][ T7938] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.021888][ T7938] ? __pfx_lock_release+0x10/0x10 [ 119.026908][ T7938] ? kstrtouint_from_user+0x128/0x190 [ 119.032294][ T7938] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 119.038190][ T7938] ? ksys_write+0x22a/0x2b0 [ 119.042691][ T7938] ? __pfx_lock_release+0x10/0x10 [ 119.047715][ T7938] ? vfs_write+0x730/0xd30 [ 119.052133][ T7938] ? __mutex_unlock_slowpath+0x21e/0x790 [ 119.057812][ T7938] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.063797][ T7938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.070143][ T7938] ? do_syscall_64+0x100/0x230 [ 119.074916][ T7938] __x64_sys_sendmmsg+0xa0/0xb0 [ 119.079772][ T7938] do_syscall_64+0xf3/0x230 [ 119.084282][ T7938] ? clear_bhb_loop+0x35/0x90 [ 119.088968][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.094869][ T7938] RIP: 0033:0x7f1f3e785d29 [ 119.099291][ T7938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.118988][ T7938] RSP: 002b:00007f1f3f677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.127400][ T7938] RAX: ffffffffffffffda RBX: 00007f1f3e975fa0 RCX: 00007f1f3e785d29 [ 119.135367][ T7938] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 119.143332][ T7938] RBP: 00007f1f3f677090 R08: 0000000000000000 R09: 0000000000000000 [ 119.151295][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.159272][ T7938] R13: 0000000000000000 R14: 00007f1f3e975fa0 R15: 00007fff2c097048 [ 119.167255][ T7938] [ 119.186828][ T7942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'. [ 119.236874][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 119.500675][ T7945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.558'. [ 119.686210][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.760441][ T7963] netdevsim netdevsim3 »»»»»»: renamed from netdevsim0 (while UP) [ 119.814784][ T7963] tipc: Enabling of bearer rejected, failed to enable media [ 120.006100][ T7978] atomic_op ffff8880607f0198 conn xmit_atomic 0000000000000000 [ 120.143529][ T7982] delete_channel: no stack [ 120.152376][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 120.169516][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 120.394446][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 120.543354][ T7993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.991394][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 121.010688][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 121.045003][ T8013] veth1_to_hsr: entered allmulticast mode [ 121.088568][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 121.097958][ T8015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.106332][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.118081][ T8015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.126136][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.218291][ T8023] ipt_REJECT: TCP_RESET invalid for non-tcp [ 121.535736][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 121.545472][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 121.557754][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 121.570272][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 121.706209][ T8038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.589'. [ 121.711375][ T8040] dccp_invalid_packet: P.Data Offset(127) too large [ 121.806505][ T8041] netlink: 'syz.0.589': attribute type 39 has an invalid length. [ 122.080913][ T8050] netlink: zone id is out of range [ 122.091783][ T8050] netlink: zone id is out of range [ 122.102375][ T8050] netlink: zone id is out of range [ 122.108918][ T8054] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 122.120627][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.128166][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.273150][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.593'. [ 122.295016][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'. [ 122.602311][ T8069] syz.4.597[8069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.602408][ T8069] syz.4.597[8069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.618179][ T8069] syz.4.597[8069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.698133][ T8067] dvmrp0: entered allmulticast mode [ 122.756509][ T8073] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 122.804642][ T8073] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 122.951566][ T8083] netem: incorrect ge model size [ 123.000686][ T8083] netem: change failed [ 123.056746][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 123.064344][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.114764][ T8095] FAULT_INJECTION: forcing a failure. [ 123.114764][ T8095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.137296][ T8095] CPU: 0 UID: 0 PID: 8095 Comm: syz.2.607 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 123.147945][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.158037][ T8095] Call Trace: [ 123.161320][ T8095] [ 123.164248][ T8095] dump_stack_lvl+0x241/0x360 [ 123.168933][ T8095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.174132][ T8095] ? __pfx__printk+0x10/0x10 [ 123.178725][ T8095] ? __pfx_lock_release+0x10/0x10 [ 123.183791][ T8095] should_fail_ex+0x3b0/0x4e0 [ 123.188466][ T8095] _copy_from_user+0x2f/0xc0 [ 123.193057][ T8095] copy_msghdr_from_user+0xae/0x680 [ 123.198265][ T8095] ? __pfx___might_resched+0x10/0x10 [ 123.203552][ T8095] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.209359][ T8095] ? __fget_files+0x2a/0x410 [ 123.213955][ T8095] ? __sys_sendmmsg+0x392/0x720 [ 123.218918][ T8095] ? __might_fault+0xaa/0x120 [ 123.223597][ T8095] __sys_sendmmsg+0x32b/0x720 [ 123.228288][ T8095] ? __pfx___sys_sendmmsg+0x10/0x10 [ 123.233496][ T8095] ? __pfx_lock_release+0x10/0x10 [ 123.238522][ T8095] ? kstrtouint_from_user+0x128/0x190 [ 123.243910][ T8095] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 123.249811][ T8095] ? ksys_write+0x22a/0x2b0 [ 123.254316][ T8095] ? __pfx_lock_release+0x10/0x10 [ 123.259346][ T8095] ? vfs_write+0x730/0xd30 [ 123.263765][ T8095] ? __mutex_unlock_slowpath+0x21e/0x790 [ 123.269421][ T8095] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.275418][ T8095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.281748][ T8095] ? do_syscall_64+0x100/0x230 [ 123.286522][ T8095] __x64_sys_sendmmsg+0xa0/0xb0 [ 123.291379][ T8095] do_syscall_64+0xf3/0x230 [ 123.295888][ T8095] ? clear_bhb_loop+0x35/0x90 [ 123.300571][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.306466][ T8095] RIP: 0033:0x7fa4d0b85d29 [ 123.310882][ T8095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.330488][ T8095] RSP: 002b:00007fa4d197d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.338904][ T8095] RAX: ffffffffffffffda RBX: 00007fa4d0d75fa0 RCX: 00007fa4d0b85d29 [ 123.346879][ T8095] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 123.354849][ T8095] RBP: 00007fa4d197d090 R08: 0000000000000000 R09: 0000000000000000 [ 123.362822][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.370796][ T8095] R13: 0000000000000000 R14: 00007fa4d0d75fa0 R15: 00007ffd91f3aea8 [ 123.378783][ T8095] [ 124.009211][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.060404][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.107793][ T8146] FAULT_INJECTION: forcing a failure. [ 124.107793][ T8146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.121668][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.4.619 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 124.132304][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.142394][ T8146] Call Trace: [ 124.145706][ T8146] [ 124.148660][ T8146] dump_stack_lvl+0x241/0x360 [ 124.153382][ T8146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.158612][ T8146] ? __pfx__printk+0x10/0x10 [ 124.163502][ T8146] ? snprintf+0xda/0x120 [ 124.167778][ T8146] should_fail_ex+0x3b0/0x4e0 [ 124.172475][ T8146] _copy_to_user+0x31/0xb0 [ 124.176934][ T8146] simple_read_from_buffer+0xca/0x150 [ 124.182337][ T8146] proc_fail_nth_read+0x1e9/0x250 [ 124.187390][ T8146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.192964][ T8146] ? rw_verify_area+0x55e/0x6f0 [ 124.197838][ T8146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.203402][ T8146] vfs_read+0x1fc/0xb70 [ 124.207556][ T8146] ? __pfx___mutex_lock+0x10/0x10 [ 124.212573][ T8146] ? __pfx_vfs_read+0x10/0x10 [ 124.217244][ T8146] ? __fget_files+0x2a/0x410 [ 124.221839][ T8146] ? __fget_files+0x395/0x410 [ 124.226536][ T8146] ? __fget_files+0x2a/0x410 [ 124.231137][ T8146] ksys_read+0x18f/0x2b0 [ 124.235383][ T8146] ? __pfx_ksys_read+0x10/0x10 [ 124.240143][ T8146] ? do_syscall_64+0x100/0x230 [ 124.244922][ T8146] ? do_syscall_64+0xb6/0x230 [ 124.249629][ T8146] do_syscall_64+0xf3/0x230 [ 124.254152][ T8146] ? clear_bhb_loop+0x35/0x90 [ 124.258838][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.264735][ T8146] RIP: 0033:0x7f1f3e78473c [ 124.269146][ T8146] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.288774][ T8146] RSP: 002b:00007f1f3f677030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.297204][ T8146] RAX: ffffffffffffffda RBX: 00007f1f3e975fa0 RCX: 00007f1f3e78473c [ 124.305174][ T8146] RDX: 000000000000000f RSI: 00007f1f3f6770a0 RDI: 0000000000000005 [ 124.313140][ T8146] RBP: 00007f1f3f677090 R08: 0000000000000000 R09: 0000000000000000 [ 124.321195][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.329165][ T8146] R13: 0000000000000000 R14: 00007f1f3e975fa0 R15: 00007fff2c097048 [ 124.337147][ T8146] [ 124.495054][ T8160] vlan2: entered promiscuous mode [ 124.759837][ T8172] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 124.901136][ T8182] syz_tun: entered promiscuous mode [ 124.913503][ T8182] syz_tun: left promiscuous mode [ 124.945195][ T8186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.189463][ T5905] IPVS: starting estimator thread 0... [ 125.297059][ T8199] IPVS: using max 20 ests per chain, 48000 per kthread [ 125.783846][ T8226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.232374][ T8248] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 126.440041][ T8256] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 126.448449][ T8256] __nla_validate_parse: 14 callbacks suppressed [ 126.448465][ T8256] netlink: 224 bytes leftover after parsing attributes in process `syz.4.653'. [ 126.471232][ T8263] netlink: 104 bytes leftover after parsing attributes in process `syz.3.655'. [ 126.612414][ T8268] xt_hashlimit: overflow, try lower: 18446744073709551615/2047 [ 127.691068][ T8326] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 127.702315][ T8326] netlink: 3 bytes leftover after parsing attributes in process `syz.2.672'. [ 127.742766][ T8326] batadv1: entered promiscuous mode [ 127.786122][ T8326] batadv1: entered allmulticast mode [ 128.364988][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.674'. [ 128.839096][ T8378] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 128.850010][ T8376] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 128.858810][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'. [ 128.954310][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 129.349349][ T8403] ebt_among: dst integrity fail: 200 [ 129.539117][ T8417] netlink: 7084 bytes leftover after parsing attributes in process `syz.0.698'. [ 129.752183][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 129.781803][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 129.851348][ T8432] netlink: 165 bytes leftover after parsing attributes in process `syz.3.703'. [ 130.158564][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 130.369754][ T8468] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 131.089481][ T8495] bridge1: entered promiscuous mode [ 131.112845][ T8495] bridge1: entered allmulticast mode [ 131.189340][ T8497] bridge0: entered promiscuous mode [ 131.220247][ T8497] macvtap1: entered promiscuous mode [ 131.235923][ T8497] macvtap1: entered allmulticast mode [ 131.250381][ T8497] bridge0: entered allmulticast mode [ 131.271007][ T8501] bridge0: left allmulticast mode [ 131.297997][ T8501] bridge0: left promiscuous mode [ 131.537211][ T8511] __nla_validate_parse: 3 callbacks suppressed [ 131.537230][ T8511] netlink: 256 bytes leftover after parsing attributes in process `syz.2.725'. [ 131.584222][ T8509] netlink: 200 bytes leftover after parsing attributes in process `syz.0.726'. [ 132.038415][ T8536] syz.3.732: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.041273][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.732'. [ 132.090910][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.3.732 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 132.101568][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.111655][ T8536] Call Trace: [ 132.114970][ T8536] [ 132.117943][ T8536] dump_stack_lvl+0x241/0x360 [ 132.122661][ T8536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.127899][ T8536] ? __pfx__printk+0x10/0x10 [ 132.132525][ T8536] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 132.138978][ T8536] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 132.145519][ T8536] warn_alloc+0x278/0x410 [ 132.149876][ T8536] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 132.155973][ T8536] ? __pfx_warn_alloc+0x10/0x10 [ 132.160849][ T8536] ? kasan_save_track+0x3f/0x80 [ 132.165724][ T8536] ? __kasan_kmalloc+0x98/0xb0 [ 132.170518][ T8536] ? xsk_setsockopt+0x4ea/0x950 [ 132.175403][ T8536] ? do_sock_setsockopt+0x3af/0x720 [ 132.180638][ T8536] ? __x64_sys_setsockopt+0x1ee/0x280 [ 132.186032][ T8536] ? do_syscall_64+0xf3/0x230 [ 132.190738][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.196840][ T8536] __vmalloc_node_range_noprof+0x126/0x1380 [ 132.202792][ T8536] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.209162][ T8536] ? __kasan_kmalloc+0x98/0xb0 [ 132.213959][ T8536] vmalloc_user_noprof+0x74/0x80 [ 132.218920][ T8536] ? xskq_create+0xb6/0x170 [ 132.223449][ T8536] xskq_create+0xb6/0x170 [ 132.227817][ T8536] xsk_init_queue+0xa1/0x100 [ 132.232441][ T8536] xsk_setsockopt+0x4ea/0x950 [ 132.237150][ T8536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.242383][ T8536] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.247265][ T8536] ? aa_sock_opt_perm+0x79/0x120 [ 132.252227][ T8536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.257452][ T8536] do_sock_setsockopt+0x3af/0x720 [ 132.262514][ T8536] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 132.268096][ T8536] ? __fget_files+0x395/0x410 [ 132.272802][ T8536] ? __fget_files+0x2a/0x410 [ 132.277429][ T8536] __x64_sys_setsockopt+0x1ee/0x280 [ 132.282665][ T8536] do_syscall_64+0xf3/0x230 [ 132.287196][ T8536] ? clear_bhb_loop+0x35/0x90 [ 132.291902][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.297818][ T8536] RIP: 0033:0x7f2c3b185d29 [ 132.302292][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.321934][ T8536] RSP: 002b:00007f2c3bf8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.330386][ T8536] RAX: ffffffffffffffda RBX: 00007f2c3b376080 RCX: 00007f2c3b185d29 [ 132.338386][ T8536] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 132.346387][ T8536] RBP: 00007f2c3b201aa8 R08: 0000000000000004 R09: 0000000000000000 [ 132.354394][ T8536] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.362397][ T8536] R13: 0000000000000001 R14: 00007f2c3b376080 R15: 00007ffeb7d04968 [ 132.370420][ T8536] [ 132.375706][ T8536] Mem-Info: [ 132.378862][ T8536] active_anon:5415 inactive_anon:0 isolated_anon:0 [ 132.378862][ T8536] active_file:1277 inactive_file:38277 isolated_file:0 [ 132.378862][ T8536] unevictable:768 dirty:71 writeback:0 [ 132.378862][ T8536] slab_reclaimable:10065 slab_unreclaimable:101091 [ 132.378862][ T8536] mapped:28543 shmem:1956 pagetables:722 [ 132.378862][ T8536] sec_pagetables:0 bounce:0 [ 132.378862][ T8536] kernel_misc_reclaimable:0 [ 132.378862][ T8536] free:1336006 free_pcp:5543 free_cma:0 [ 132.424639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.482351][ T8536] Node 0 active_anon:19460kB inactive_anon:0kB active_file:5108kB inactive_file:153036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114172kB dirty:280kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11360kB pagetables:2988kB sec_pagetables:0kB all_unreclaimable? no [ 132.504869][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 132.523324][ T8536] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 132.567337][ T8536] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.598885][ T8536] lowmem_reserve[]: 0 2465 2466 0 0 [ 132.607603][ T8536] Node 0 DMA32 free:1444872kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19524kB inactive_anon:0kB active_file:5108kB inactive_file:152212kB unevictable:1536kB writepending:280kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1604kB local_pcp:632kB free_cma:0kB [ 132.644376][ T8536] lowmem_reserve[]: 0 0 0 0 0 [ 132.649300][ T8536] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 132.679036][ T8536] lowmem_reserve[]: 0 0 0 0 0 [ 132.683868][ T8536] Node 1 Normal free:3906768kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.712953][ T8536] lowmem_reserve[]: 0 0 0 0 0 [ 132.717802][ T8536] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.732128][ T8536] Node 0 DMA32: 15*4kB (ME) 82*8kB (ME) 143*16kB (UME) 263*32kB (UME) 721*64kB (UME) 226*128kB (UME) 41*256kB (UM) 10*512kB (UME) 3*1024kB (UM) 2*2048kB (UM) 326*4096kB (UM) = 1444572kB [ 132.780309][ T8536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 132.809207][ T8536] Node 1 Normal: 258*4kB (UME) 49*8kB (UME) 38*16kB (UME) 233*32kB (UME) 99*64kB (UME) 30*128kB (UME) 14*256kB (UME) 13*512kB (UM) 4*1024kB (UM) 3*2048kB (UE) 944*4096kB (UM) = 3906768kB [ 132.868826][ T8536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.941818][ T8536] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.970024][ T8536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.000586][ T8536] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.031014][ T8536] 40985 total pagecache pages [ 133.041151][ T8536] 0 pages in swap cache [ 133.061660][ T8536] Free swap = 124996kB [ 133.084191][ T8536] Total swap = 124996kB [ 133.088709][ T8536] 2097051 pages RAM [ 133.095290][ T8557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.739'. [ 133.120783][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.128014][ T8536] 0 pages HighMem/MovableOnly [ 133.133233][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.144599][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.144962][ T8536] 427011 pages reserved [ 133.155661][ T8559] netlink: 232 bytes leftover after parsing attributes in process `syz.2.740'. [ 133.166381][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.171368][ T8536] 0 pages cma reserved [ 133.489124][ T8582] netlink: 240 bytes leftover after parsing attributes in process `syz.2.745'. [ 133.502825][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.510956][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.528197][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.547370][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.561677][ T8562] batman_adv: batadv0: Interface deactivated: wlan0 [ 133.569501][ T8562] batman_adv: batadv0: Removing interface: wlan0 [ 133.711348][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.747'. [ 133.794535][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.875245][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 133.894786][ T8600] netlink: 'syz.0.749': attribute type 10 has an invalid length. [ 134.386129][ T8619] openvswitch: netlink: Message has 1247 unknown bytes. [ 134.481012][ T8619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.645964][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 134.823293][ T8645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.991347][ T8655] pimreg: entered allmulticast mode [ 135.008279][ T8655] pimreg: left allmulticast mode [ 135.044599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.558787][ T8689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.648676][ T8739] bridge0: entered promiscuous mode [ 136.660951][ T8739] bridge0: entered allmulticast mode [ 136.681330][ T8737] __nla_validate_parse: 67 callbacks suppressed [ 136.681351][ T8737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.791'. [ 136.912452][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.795'. [ 137.700040][ T8789] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.807'. [ 137.748587][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 137.771050][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 137.793439][ T8788] delete_channel: no stack [ 138.023760][ T8809] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 138.032289][ T8810] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 138.163090][ T8815] sch_fq: defrate 117 ignored. [ 138.239293][ T6138] net_ratelimit: 12 callbacks suppressed [ 138.239314][ T6138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.266600][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.296668][ T6138] tipc: Subscription rejected, illegal request [ 138.327332][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.370209][ T8825] netlink: 'syz.4.818': attribute type 21 has an invalid length. [ 138.379079][ T8825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.818'. [ 138.776358][ T8839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.832562][ T8839] bond2: entered promiscuous mode [ 138.838711][ T8839] team0: Port device bond2 added [ 139.011293][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 139.495727][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.833'. [ 139.532598][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 139.559296][ T8871] netlink: 'syz.3.833': attribute type 1 has an invalid length. [ 139.604987][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 139.619733][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.628990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.674785][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.700990][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.710242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.759824][ T8882] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(21523203614711) <= P.seqno(0) <= S.SWH(21523203614785)) and (P.ackno exists or LAWL(168729647128870) <= P.ackno(168729647128871) <= S.AWH(168729647128871), sending SYNC... [ 139.821054][ T8882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.175541][ T8914] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 140.487765][ T1205] IPVS: starting estimator thread 0... [ 140.599282][ T8937] IPVS: using max 21 ests per chain, 50400 per kthread [ 140.774901][ T8955] sctp: [Deprecated]: syz.2.856 (pid 8955) Use of int in max_burst socket option deprecated. [ 140.774901][ T8955] Use struct sctp_assoc_value instead [ 141.609144][ T8975] netlink: 'syz.2.862': attribute type 21 has an invalid length. [ 141.734702][ T8984] __nla_validate_parse: 4 callbacks suppressed [ 141.734721][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 141.779200][ T8984] syz_tun: entered promiscuous mode [ 141.801935][ T8987] veth2: entered allmulticast mode [ 142.226463][ T9006] netlink: 148 bytes leftover after parsing attributes in process `syz.4.872'. [ 142.419220][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 142.558615][ T9021] netlink: 44 bytes leftover after parsing attributes in process `syz.3.876'. [ 142.577313][ T9021] netlink: 'syz.3.876': attribute type 21 has an invalid length. [ 142.586558][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.0.877'. [ 142.607897][ T9021] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.619937][ T9021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.627316][ T9021] IPv6: NLM_F_CREATE should be set when creating new route [ 142.634635][ T9021] IPv6: NLM_F_CREATE should be set when creating new route [ 142.641871][ T9021] IPv6: NLM_F_CREATE should be set when creating new route [ 142.777106][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 142.782932][ T9030] syzkaller1: entered promiscuous mode [ 142.792315][ T9030] syzkaller1: entered allmulticast mode [ 142.800066][ T9033] netlink: 'syz.3.881': attribute type 21 has an invalid length. [ 142.809510][ T9033] netlink: 128 bytes leftover after parsing attributes in process `syz.3.881'. [ 142.823240][ T9033] netlink: 'syz.3.881': attribute type 5 has an invalid length. [ 142.833164][ T9033] netlink: 'syz.3.881': attribute type 6 has an invalid length. [ 142.842151][ T9033] netlink: 3 bytes leftover after parsing attributes in process `syz.3.881'. [ 142.906036][ T9034] netlink: 'syz.3.881': attribute type 2 has an invalid length. [ 143.038450][ T9039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.883'. [ 143.107730][ T9039] ip6gretap0: entered promiscuous mode [ 143.130923][ T9039] batadv_slave_0: entered promiscuous mode [ 143.166242][ T9039] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 143.208489][ T9039] Cannot create hsr debugfs directory [ 143.594335][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.887307][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 144.103744][ T9087] net_ratelimit: 13 callbacks suppressed [ 144.103762][ T9087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.306936][ T9102] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 144.328515][ T9101] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 144.383781][ T9102] team0: Device veth1_macvtap failed to register rx_handler [ 144.438852][ T9101] team0: Device veth1_macvtap failed to register rx_handler [ 144.450305][ T9112] sit0: entered promiscuous mode [ 144.548262][ T9117] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 144.747319][ T9130] validate_nla: 1 callbacks suppressed [ 144.747339][ T9130] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 144.763049][ T9130] netlink: 'syz.2.907': attribute type 4 has an invalid length. [ 144.810644][ T9130] NCSI netlink: No device for ifindex 458760 [ 144.886729][ T9136] netlink: 'syz.0.909': attribute type 7 has an invalid length. [ 145.012367][ T9127] infiniband syz2: set down [ 145.017826][ T9127] infiniband syz2: added ipvlan0 [ 145.074692][ T9127] RDS/IB: syz2: added [ 145.080900][ T9127] smc: adding ib device syz2 with port count 1 [ 145.087860][ T9127] smc: ib device syz2 port 1 has pnetid [ 145.333299][ T9148] netlink: 'syz.1.912': attribute type 6 has an invalid length. [ 145.596720][ T9157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.635746][ T9157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.646476][ T9157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.657587][ T9157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.705601][ T9157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.721505][ T9157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.743072][ T9153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.766887][ T9153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.825169][ T9152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.079854][ T9156] team_slave_0: entered promiscuous mode [ 146.086130][ T9156] team_slave_1: entered promiscuous mode [ 146.091949][ T9156] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 146.111196][ T9156] macvtap2: entered promiscuous mode [ 146.116909][ T9156] team0: entered promiscuous mode [ 146.122727][ T9156] macvtap2: entered allmulticast mode [ 146.133028][ T9156] team0: entered allmulticast mode [ 146.139838][ T9156] team_slave_0: entered allmulticast mode [ 146.148214][ T9156] team_slave_1: entered allmulticast mode [ 146.156837][ T9156] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 146.168049][ T9156] vlan0: entered allmulticast mode [ 146.173181][ T9156] veth0_vlan: entered allmulticast mode [ 146.180655][ T9156] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 146.199975][ T9163] team0: left allmulticast mode [ 146.208101][ T9163] team_slave_0: left allmulticast mode [ 146.213691][ T9163] team_slave_1: left allmulticast mode [ 146.219489][ T9163] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 146.230313][ T9163] vlan0: left allmulticast mode [ 146.235538][ T9163] veth0_vlan: left allmulticast mode [ 146.242273][ T9163] team0: left promiscuous mode [ 146.252467][ T9163] team_slave_0: left promiscuous mode [ 146.258403][ T9163] team_slave_1: left promiscuous mode [ 146.264074][ T9163] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 146.332360][ T9173] bridge_slave_1: left allmulticast mode [ 146.348509][ T9173] bridge_slave_1: left promiscuous mode [ 146.364258][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.383722][ T9173] bridge_slave_0: left allmulticast mode [ 146.407581][ T9173] bridge_slave_0: left promiscuous mode [ 146.424183][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.974544][ T9186] __nla_validate_parse: 12 callbacks suppressed [ 146.974565][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 147.133232][ T5936] IPVS: starting estimator thread 0... [ 147.155159][ T9193] xt_l2tp: wrong L2TP version: 0 [ 147.230852][ T9194] IPVS: using max 29 ests per chain, 69600 per kthread [ 147.478869][ T9200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.925'. [ 147.489899][ T9200] bridge_slave_0: entered allmulticast mode [ 147.597128][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 147.608882][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 147.661514][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.927'. [ 148.006554][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 148.034459][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.933'. [ 148.227145][ T9231] netlink: 'syz.4.936': attribute type 21 has an invalid length. [ 148.541247][ T9206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.632344][ T9248] netlink: 'syz.1.941': attribute type 4 has an invalid length. [ 148.657824][ T9248] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.941'. [ 148.768276][ T9253] xt_hashlimit: overflow, try lower: 18446744073709551615/2047 [ 148.936149][ T9260] netlink: 100 bytes leftover after parsing attributes in process `syz.1.943'. [ 148.945987][ T9260] netlink: 100 bytes leftover after parsing attributes in process `syz.1.943'. [ 149.116728][ T9265] netlink: 'syz.2.945': attribute type 39 has an invalid length. [ 149.224598][ T9278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 149.463329][ T9291] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 149.687755][ T9307] bridge0: port 1(hsr0) entered blocking state [ 149.721463][ T9307] bridge0: port 1(hsr0) entered disabled state [ 149.729418][ T9307] hsr0: entered allmulticast mode [ 149.745236][ T9307] hsr_slave_0: entered allmulticast mode [ 149.751003][ T9307] hsr_slave_1: entered allmulticast mode [ 149.793514][ T9307] hsr0: entered promiscuous mode [ 150.019218][ T9326] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 150.044929][ T9326] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 150.234456][ T5144] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 150.237067][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.630053][ T9361] can: request_module (can-proto-0) failed. [ 150.768472][ T9375] netlink: 'syz.0.977': attribute type 15 has an invalid length. [ 151.779220][ T9396] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 151.926930][ T9398] xfrm1: entered allmulticast mode [ 153.297807][ T9408] net_ratelimit: 5 callbacks suppressed [ 153.297825][ T9408] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 153.326689][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 153.347456][ T9408] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 153.358574][ T9408] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 153.411143][ T9408] __nla_validate_parse: 8 callbacks suppressed [ 153.411164][ T9408] netlink: 144 bytes leftover after parsing attributes in process `syz.1.987'. [ 153.446202][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 153.462783][ T9416] netlink: 6 bytes leftover after parsing attributes in process `syz.0.990'. [ 153.505654][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 153.628870][ T9427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.993'. [ 153.640858][ T9425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.992'. [ 153.684243][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 153.852901][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'. [ 153.958728][ T9444] netlink: 56 bytes leftover after parsing attributes in process `syz.3.999'. [ 154.133381][ T9449] ipvlan0: entered promiscuous mode [ 154.194847][ T9459] netlink: 'syz.4.1005': attribute type 7 has an invalid length. [ 154.211218][ T9459] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1005'. [ 154.248812][ T9461] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1002'. [ 154.369697][ T9485] netlink: 'syz.4.1007': attribute type 2 has an invalid length. [ 154.417921][ T9492] xt_socket: unknown flags 0x4 [ 154.795562][ T9521] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 154.896032][ T9529] netlink: 'syz.1.1018': attribute type 10 has an invalid length. [ 154.936259][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.956128][ T9529] bond0: (slave team0): Enslaving as an active interface with an up link [ 155.631297][ T9549] team0: No ports can be present during mode change [ 155.660775][ T9547] ip6gre1: entered promiscuous mode [ 155.666157][ T9547] ip6gre1: entered allmulticast mode [ 155.750455][ T9554] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 156.031964][ T9571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.073583][ T9563] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 156.182272][ T9574] netlink: 'syz.2.1031': attribute type 58 has an invalid length. [ 156.250554][ T9563] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 156.276342][ T9563] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 156.294887][ T9563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.472854][ T9597] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 156.474158][ T9600] tap0: tun_chr_ioctl cmd 2147767507 [ 156.717352][ T9609] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 156.988696][ T9624] tap0: tun_chr_ioctl cmd 1074025678 [ 157.007476][ T9624] tap0: group set to 0 [ 157.118325][ T9630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.476956][ T9646] netlink: 'syz.4.1049': attribute type 7 has an invalid length. [ 157.483050][ T9647] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 157.520851][ T9646] netlink: 'syz.4.1049': attribute type 3 has an invalid length. [ 157.542137][ T9647] syz_tun: entered promiscuous mode [ 157.610153][ T9647] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 157.768832][ T9664] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 157.952597][ T9674] netlink: 'syz.2.1057': attribute type 9 has an invalid length. [ 157.962349][ T9674] netlink: 'syz.2.1057': attribute type 7 has an invalid length. [ 157.971619][ T9674] netlink: 'syz.2.1057': attribute type 8 has an invalid length. [ 158.373703][ T9689] xt_policy: neither incoming nor outgoing policy selected [ 158.512130][ T9695] __nla_validate_parse: 18 callbacks suppressed [ 158.512153][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 158.557265][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 158.955680][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 158.974816][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 158.996128][ T9720] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20003 [ 159.279934][ T9726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.308172][ T9726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.378339][ T9726] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1072'. [ 159.510844][ T9732] openvswitch: netlink: IP tunnel dst address not specified [ 159.711239][ T9735] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 159.805107][ T9738] syzkaller1: entered promiscuous mode [ 159.810751][ T9738] syzkaller1: entered allmulticast mode [ 160.004962][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1076'. [ 160.221153][ T9738] netdevsim netdevsim3 »»»»»»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.230997][ T9738] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.240421][ T9738] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.249739][ T9738] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.563318][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 160.619866][ T9770] netlink: zone id is out of range [ 160.675003][ T9770] netlink: zone id is out of range [ 160.680178][ T9770] netlink: zone id is out of range [ 160.711354][ T9770] netlink: zone id is out of range [ 160.712261][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 160.730060][ T9770] netlink: zone id is out of range [ 160.738616][ T9770] netlink: zone id is out of range [ 160.744034][ T9770] netlink: zone id is out of range [ 160.749190][ T9770] netlink: zone id is out of range [ 160.791657][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 160.801634][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'. [ 160.844591][ T9780] FAULT_INJECTION: forcing a failure. [ 160.844591][ T9780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.864952][ T9780] CPU: 1 UID: 0 PID: 9780 Comm: syz.0.1085 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 160.875694][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.885777][ T9780] Call Trace: [ 160.889080][ T9780] [ 160.892031][ T9780] dump_stack_lvl+0x241/0x360 [ 160.896746][ T9780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.901979][ T9780] ? __pfx__printk+0x10/0x10 [ 160.906599][ T9780] ? __pfx_lock_release+0x10/0x10 [ 160.911662][ T9780] should_fail_ex+0x3b0/0x4e0 [ 160.916364][ T9780] _copy_from_user+0x2f/0xc0 [ 160.920967][ T9780] copy_msghdr_from_user+0xae/0x680 [ 160.926176][ T9780] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 160.931986][ T9780] ? __fget_files+0x2a/0x410 [ 160.936579][ T9780] ? __fget_files+0x2a/0x410 [ 160.941176][ T9780] __sys_sendmsg+0x209/0x350 [ 160.945775][ T9780] ? __pfx_lock_release+0x10/0x10 [ 160.950803][ T9780] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.955920][ T9780] ? __pfx_vfs_write+0x10/0x10 [ 160.960697][ T9780] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.967025][ T9780] ? do_syscall_64+0x100/0x230 [ 160.971961][ T9780] ? do_syscall_64+0xb6/0x230 [ 160.976664][ T9780] do_syscall_64+0xf3/0x230 [ 160.981194][ T9780] ? clear_bhb_loop+0x35/0x90 [ 160.985885][ T9780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.991777][ T9780] RIP: 0033:0x7f570c585d29 [ 160.996189][ T9780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.015797][ T9780] RSP: 002b:00007f570a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.024208][ T9780] RAX: ffffffffffffffda RBX: 00007f570c776160 RCX: 00007f570c585d29 [ 161.032174][ T9780] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 161.040138][ T9780] RBP: 00007f570a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.048110][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.056078][ T9780] R13: 0000000000000000 R14: 00007f570c776160 R15: 00007ffc2c4a2e08 [ 161.064056][ T9780] [ 161.155451][ T9787] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 161.575361][ T9807] xt_hashlimit: max too large, truncated to 1048576 [ 161.582711][ T9808] xt_hashlimit: max too large, truncated to 1048576 [ 161.592184][ T9808] No such timeout policy "syz1" [ 161.621770][ T9807] No such timeout policy "syz1" [ 161.974961][ T9830] validate_nla: 2 callbacks suppressed [ 161.974974][ T9830] netlink: 'syz.3.1103': attribute type 7 has an invalid length. [ 161.989150][ T9830] netlink: 'syz.3.1103': attribute type 3 has an invalid length. [ 162.790445][ T9868] syzkaller0: entered promiscuous mode [ 162.798768][ T9868] syzkaller0: entered allmulticast mode [ 163.148105][ T9895] nbd: couldn't find a device at index 1073741824 [ 164.873059][ T9914] __nla_validate_parse: 7 callbacks suppressed [ 164.873079][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 164.926375][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 164.961130][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 164.964039][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'. [ 164.993100][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 165.041394][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 165.724384][ T9] IPVS: starting estimator thread 0... [ 165.814848][ T9944] IPVS: using max 23 ests per chain, 55200 per kthread [ 166.197551][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 166.509458][ T9973] bridge1: entered promiscuous mode [ 166.518402][ T9973] bridge1: entered allmulticast mode [ 166.532487][ T9973] team0: Port device bridge1 added [ 166.539701][ T9974] netlink: 'syz.2.1138': attribute type 13 has an invalid length. [ 166.983040][ T9993] dvmrp5: entered allmulticast mode [ 167.158104][ T9993] dvmrp0: left allmulticast mode [ 167.266190][ T9992] dvmrp5: left allmulticast mode [ 167.468427][T10010] team0: Device gtp0 is of different type [ 167.741522][T10020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 168.033463][T10016] can: request_module (can-proto-5) failed. [ 168.592186][T10034] netlink: 'syz.1.1153': attribute type 6 has an invalid length. [ 168.642351][T10034] netlink: 'syz.1.1153': attribute type 7 has an invalid length. [ 168.678256][T10034] netlink: 'syz.1.1153': attribute type 8 has an invalid length. [ 169.122988][T10040] tipc: Started in network mode [ 169.128005][T10040] tipc: Node identity e6f3e1fb64e5, cluster identity 4711 [ 169.135830][T10040] tipc: Enabled bearer , priority 0 [ 169.174912][T10040] syzkaller0: entered promiscuous mode [ 169.180521][T10040] syzkaller0: entered allmulticast mode [ 169.186743][T10040] tipc: Resetting bearer [ 169.207254][T10043] syzkaller1: entered allmulticast mode [ 169.207990][T10052] delete_channel: no stack [ 169.768347][T10076] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1165'. [ 169.796472][T10039] tipc: Resetting bearer [ 170.224442][ T5884] tipc: Node number set to 2182537723 [ 171.941502][T10039] tipc: Disabling bearer [ 171.961992][T10084] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 172.093539][T10096] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 172.101693][T10096] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1169'. [ 172.114786][T10096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1169'. [ 172.152339][T10096] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1169'. [ 172.167609][T10096] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1169'. [ 172.184174][T10096] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1169'. [ 172.437439][T10105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1174'. [ 172.636331][T10111] netlink: 'syz.3.1172': attribute type 4 has an invalid length. [ 173.346399][T10125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1171'. [ 174.535441][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1179'. [ 174.628725][T10146] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1180'. [ 175.090716][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 175.151961][T10166] batadv0: entered promiscuous mode [ 175.167947][T10166] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.195792][T10166] batadv0: left promiscuous mode [ 175.245050][T10173] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 175.319483][T10175] syz.4.1188[10175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.319609][T10175] syz.4.1188[10175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.367289][T10175] syz.4.1188[10175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.406589][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 175.478161][T10177] team0: Mode changed to "loadbalance" [ 175.686631][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 175.743036][T10192] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 175.764914][T10192] bridge0: left promiscuous mode [ 175.770119][T10192] bridge0: left allmulticast mode [ 175.797203][T10192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 175.826576][T10192] syz.1.1193 (10192) used greatest stack depth: 18512 bytes left [ 176.040782][T10195] ax25_connect(): syz.1.1194 uses autobind, please contact jreuter@yaina.de [ 176.055504][T10201] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.301517][T10215] sctp: [Deprecated]: syz.0.1201 (pid 10215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.301517][T10215] Use struct sctp_sack_info instead [ 176.439790][T10219] bond_slave_0: entered promiscuous mode [ 176.445863][T10219] bond_slave_1: entered promiscuous mode [ 176.487357][T10219] macvtap1: entered promiscuous mode [ 176.493775][T10219] bond0: entered promiscuous mode [ 176.524936][T10219] macvtap1: entered allmulticast mode [ 176.530387][T10219] bond0: entered allmulticast mode [ 176.541885][T10219] bond_slave_0: entered allmulticast mode [ 176.564643][T10219] bond_slave_1: entered allmulticast mode [ 176.584516][T10219] syz_tun: entered allmulticast mode [ 176.605821][T10219] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 176.653882][T10222] bond0: left allmulticast mode [ 176.672463][T10222] bond_slave_0: left allmulticast mode [ 176.685247][T10222] bond_slave_1: left allmulticast mode [ 176.702362][T10222] syz_tun: left allmulticast mode [ 176.709091][T10222] bond0: left promiscuous mode [ 176.723690][T10222] bond_slave_0: left promiscuous mode [ 176.729644][T10222] bond_slave_1: left promiscuous mode [ 177.116867][T10263] netlink: 'syz.0.1217': attribute type 21 has an invalid length. [ 177.147838][T10263] netlink: 'syz.0.1217': attribute type 6 has an invalid length. [ 177.184682][T10263] __nla_validate_parse: 6 callbacks suppressed [ 177.184701][T10263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1217'. [ 177.543433][T10282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'. [ 177.589602][T10282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'. [ 177.601072][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 177.653555][T10282] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1221'. [ 177.968464][T10297] ip6t_rpfilter: unknown options [ 178.199796][T10315] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 178.372065][T10327] ax25_connect(): syz.0.1233 uses autobind, please contact jreuter@yaina.de [ 178.690757][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 179.145570][T10368] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1248'. [ 179.174373][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1249'. [ 179.331330][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 179.830941][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 179.975310][T10407] bond2: entered promiscuous mode [ 179.989776][T10423] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 179.999089][T10423] netlink: 'syz.1.1261': attribute type 4 has an invalid length. [ 180.007377][T10423] NCSI netlink: No device for ifindex 458760 [ 180.144792][T10430] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 180.168363][T10430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.185348][T10432] lo: entered promiscuous mode [ 180.258352][T10432] lo: left promiscuous mode [ 180.410247][T10442] sctp: [Deprecated]: syz.4.1268 (pid 10442) Use of int in max_burst socket option. [ 180.410247][T10442] Use struct sctp_assoc_value instead [ 180.813816][T10473] netlink: 'syz.3.1278': attribute type 1 has an invalid length. [ 180.835289][T10473] netlink: 'syz.3.1278': attribute type 2 has an invalid length. [ 180.896459][T10480] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 181.044341][ T29] audit: type=1107 audit(1735217597.971:2): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 181.146068][T10492] vlan1: entered promiscuous mode [ 181.164436][T10492] team0: Device vlan1 is already an upper device of the team interface [ 181.399068][T10505] xt_hashlimit: size too large, truncated to 1048576 [ 182.368574][T10529] xt_cgroup: invalid path, errno=-2 [ 183.062008][T10541] bridge0: port 1(veth0_to_bridge) entered blocking state [ 183.078509][T10541] bridge0: port 1(veth0_to_bridge) entered disabled state [ 183.087655][T10541] veth0_to_bridge: entered allmulticast mode [ 183.102038][T10541] veth0_to_bridge: entered promiscuous mode [ 183.191989][T10541] IPv6: syztnl0: Disabled Multicast RS [ 183.573037][T10550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 183.655769][T10550] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 183.675149][T10550] gretap1: entered promiscuous mode [ 183.685469][T10550] gretap1: entered allmulticast mode [ 183.926208][T10567] vlan3: entered promiscuous mode [ 183.931781][T10567] bridge0: entered promiscuous mode [ 183.938690][T10567] bridge0: port 3(vlan3) entered blocking state [ 183.949048][T10567] bridge0: port 3(vlan3) entered disabled state [ 183.956152][T10567] vlan3: entered allmulticast mode [ 183.961433][T10567] bridge0: entered allmulticast mode [ 183.975219][T10567] vlan3: left allmulticast mode [ 183.982149][T10567] bridge0: left allmulticast mode [ 184.000598][T10567] bridge0: left promiscuous mode [ 184.314158][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.647870][T10599] __nla_validate_parse: 13 callbacks suppressed [ 184.647891][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 185.352493][T10618] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1317'. [ 185.367696][T10600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.397359][T10600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.421895][T10600] bond0 (unregistering): Released all slaves [ 185.595256][T10628] delete_channel: no stack [ 185.680058][T10637] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 185.721198][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 185.735515][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 185.833084][T10649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.879824][T10655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'. [ 185.971059][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 186.105540][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 186.136442][T10673] ipvlan2: entered allmulticast mode [ 186.286169][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 186.342415][T10683] sctp: [Deprecated]: syz.1.1335 (pid 10683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.342415][T10683] Use struct sctp_sack_info instead [ 186.421118][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.421141][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 186.421181][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 186.429063][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 186.746482][T10706] x_tables: unsorted underflow at hook 3 [ 186.756294][T10707] x_tables: unsorted underflow at hook 3 [ 186.835862][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 186.850684][T10717] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 186.943747][T10722] pim6reg1: entered promiscuous mode [ 186.949336][T10722] pim6reg1: entered allmulticast mode [ 187.085121][T10726] veth1_vlan: left promiscuous mode [ 187.106531][T10726] batman_adv: batadv0: Adding interface: macvlan1 [ 187.119134][T10726] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.146640][T10726] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 187.158078][T10726] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 187.175502][T10727] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 187.293229][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 187.512079][T10744] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 187.543113][T10743] bond3: (slave gretap2): making interface the new active one [ 187.552054][T10743] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 187.561870][T10751] No such timeout policy "syz0" [ 187.646802][ T29] audit: type=1107 audit(1735217604.581:3): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 187.750123][T10754] sctp: [Deprecated]: syz.1.1358 (pid 10754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.750123][T10754] Use struct sctp_sack_info instead [ 187.860460][T10765] dvmrp1: entered allmulticast mode [ 187.923930][T10767] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 188.135980][T10776] sctp: [Deprecated]: syz.1.1365 (pid 10776) Use of int in max_burst socket option deprecated. [ 188.135980][T10776] Use struct sctp_assoc_value instead [ 188.286473][T10786] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 188.294436][T10781] tipc: Started in network mode [ 188.299334][T10781] tipc: Node identity 82066f684a76, cluster identity 4711 [ 188.325003][T10781] tipc: Enabled bearer , priority 0 [ 188.402984][T10781] syzkaller0: entered promiscuous mode [ 188.414844][T10781] syzkaller0: entered allmulticast mode [ 188.421184][T10781] tipc: Resetting bearer [ 188.451867][T10780] tipc: Resetting bearer [ 188.719068][T10803] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 189.403392][T10819] dccp_v4_rcv: dropped packet with invalid checksum [ 189.438478][ T9] tipc: Node number set to 3362811752 [ 190.356275][T10780] tipc: Disabling bearer [ 190.372067][T10808] vlan3: entered allmulticast mode [ 190.377962][T10808] bond0: entered allmulticast mode [ 190.383109][T10808] team0: entered allmulticast mode [ 190.388780][T10808] bridge0: entered allmulticast mode [ 190.397711][T10808] bond0: left allmulticast mode [ 190.402578][T10808] team0: left allmulticast mode [ 190.407569][T10808] bridge0: left allmulticast mode [ 190.642632][T10832] __nla_validate_parse: 5 callbacks suppressed [ 190.642654][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 190.741439][T10843] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1383'. [ 190.831471][T10849] netlink: 'syz.3.1385': attribute type 2 has an invalid length. [ 190.840204][T10849] netlink: 'syz.3.1385': attribute type 8 has an invalid length. [ 190.852784][T10849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1385'. [ 191.025740][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 191.058215][T10861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1388'. [ 191.081554][T10861] gtp0: entered promiscuous mode [ 191.092274][T10861] gtp0: entered allmulticast mode [ 191.189207][T10874] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1390'. [ 191.590291][T10893] veth0_to_team: entered promiscuous mode [ 191.597844][T10893] veth0_to_team: entered allmulticast mode [ 191.651717][T10899] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.660662][T10899] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.669209][T10899] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.677618][T10899] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.701838][T10903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.016527][T10932] netlink: 560 bytes leftover after parsing attributes in process `syz.0.1406'. [ 192.105708][T10936] netlink: 'syz.0.1408': attribute type 12 has an invalid length. [ 192.132533][T10939] xt_policy: neither incoming nor outgoing policy selected [ 192.132542][T10938] xt_policy: neither incoming nor outgoing policy selected [ 192.167229][T10938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1409'. [ 192.196914][T10941] syzkaller1: entered promiscuous mode [ 192.202568][T10941] syzkaller1: entered allmulticast mode [ 192.500149][T10959] delete_channel: no stack [ 193.115410][T10991] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1420'. [ 193.133550][T10991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1420'. [ 193.457454][T11007] hsr0: entered promiscuous mode [ 193.781027][T11025] netlink: 'syz.3.1433': attribute type 4 has an invalid length. [ 193.795446][T11026] netlink: 'syz.4.1434': attribute type 8 has an invalid length. [ 193.803620][T11026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.894090][T11025] ip6t_srh: unknown srh invflags 4000 [ 194.233768][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.245690][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.253831][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.262351][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.270615][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.279226][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.507488][T11031] chnl_net:caif_netlink_parms(): no params data found [ 194.619330][T11031] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.637489][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.661629][T11031] bridge_slave_0: entered allmulticast mode [ 194.671163][T11031] bridge_slave_0: entered promiscuous mode [ 194.679418][T11031] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.686826][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.694275][T11031] bridge_slave_1: entered allmulticast mode [ 194.700982][T11031] bridge_slave_1: entered promiscuous mode [ 194.710411][T11046] openvswitch: netlink: Flow key attr not present in new flow. [ 194.767929][T11031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.790458][T11031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.887068][T11031] team0: Port device team_slave_0 added [ 194.908699][T11031] team0: Port device team_slave_1 added [ 194.940876][T11031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.953458][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.985985][T11031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.999669][T11031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.009065][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.036259][T11031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.103093][T11031] hsr_slave_0: entered promiscuous mode [ 195.110247][T11031] hsr_slave_1: entered promiscuous mode [ 195.126877][T11031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.138331][T11031] Cannot create hsr debugfs directory [ 195.315414][T11031] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.392931][T11031] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.460382][T11075] netlink: 'syz.3.1447': attribute type 27 has an invalid length. [ 195.475618][T11031] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.754228][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 195.896776][T11031] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.156100][T11031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.178056][T11031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.195744][T11031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.208413][T11031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.221451][T11105] netlink: 'syz.1.1454': attribute type 10 has an invalid length. [ 196.250210][T11105] syz_tun: entered promiscuous mode [ 196.280861][T11105] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 196.318397][ T5843] Bluetooth: hci3: command tx timeout [ 196.396310][T11031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.445505][T11031] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.466984][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.474148][ T9464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.494596][T11094] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 196.502942][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.511396][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.589406][T11110] netlink: 'syz.1.1456': attribute type 10 has an invalid length. [ 196.933358][T11031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.040542][T11031] veth0_vlan: entered promiscuous mode [ 197.064855][T11031] veth1_vlan: entered promiscuous mode [ 197.103442][T11031] veth0_macvtap: entered promiscuous mode [ 197.113653][T11031] veth1_macvtap: entered promiscuous mode [ 197.141238][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.156650][T11144] __nla_validate_parse: 13 callbacks suppressed [ 197.156669][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 197.164031][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.199191][T11031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.220825][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.236532][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.249022][T11031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.277459][T11031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.290350][T11031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.299847][T11031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.309622][T11031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.378435][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 197.391387][ T9464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.399922][ T9464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.409409][T11148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1466'. [ 197.439939][T11148] vlan3: entered allmulticast mode [ 197.452615][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.461396][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.671977][T11155] netlink: 'syz.4.1469': attribute type 1 has an invalid length. [ 197.692931][T11155] bond0: entered promiscuous mode [ 197.698620][T11155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.709028][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1469'. [ 197.777891][T11160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1471'. [ 198.126491][T11176] tipc: Enabling of bearer rejected, failed to enable media [ 198.158874][T11172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1475'. [ 198.244082][T11178] syzkaller0: entered promiscuous mode [ 198.250317][T11178] syzkaller0: entered allmulticast mode [ 198.318627][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1477'. [ 199.174429][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.191376][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.200699][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.220208][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.248459][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 199.258547][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.703628][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 200.794968][ T6155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.913642][ T6155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.969690][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 201.134647][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 201.301890][T11232] openvswitch: netlink: Tunnel attr 5 has unexpected len 6 expected 0 [ 201.354274][ T54] Bluetooth: hci3: command tx timeout [ 201.465600][ T6155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.628728][T11201] chnl_net:caif_netlink_parms(): no params data found [ 201.736333][ T6155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.906237][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.913379][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.972939][T11201] bridge_slave_0: entered allmulticast mode [ 201.993905][T11201] bridge_slave_0: entered promiscuous mode [ 202.036458][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.059653][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.102469][T11201] bridge_slave_1: entered allmulticast mode [ 202.130752][T11201] bridge_slave_1: entered promiscuous mode [ 202.239286][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.249324][T11273] delete_channel: no stack [ 202.291104][T11271] __nla_validate_parse: 2 callbacks suppressed [ 202.291125][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 202.335362][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.493919][ T6155] bridge_slave_1: left allmulticast mode [ 202.500342][ T6155] bridge_slave_1: left promiscuous mode [ 202.525298][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 202.560831][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.615192][ T6155] bridge_slave_0: left allmulticast mode [ 202.620992][ T6155] bridge_slave_0: left promiscuous mode [ 202.644339][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.657987][T11285] IPVS: set_ctl: invalid protocol: 12 172.30.1.2:20003 [ 202.966461][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 203.232873][ T6155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.244390][ T6155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.256527][ T6155] bond0 (unregistering): Released all slaves [ 203.274664][T11285] tipc: Started in network mode [ 203.279570][T11285] tipc: Node identity ffffffff, cluster identity 4711 [ 203.289862][T11285] tipc: Node number set to 4294967295 [ 203.349525][T11201] team0: Port device team_slave_0 added [ 203.368842][T11201] team0: Port device team_slave_1 added [ 203.436478][ T54] Bluetooth: hci3: command tx timeout [ 203.520418][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.545251][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.600012][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.631846][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.648439][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.684979][T11311] SET target dimension over the limit! [ 203.704402][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.136667][ T6155] hsr_slave_0: left promiscuous mode [ 204.161906][ T6155] hsr_slave_1: left promiscuous mode [ 204.178521][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.190685][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.210768][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.229265][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.243726][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 204.258257][T11347] netlink: 816 bytes leftover after parsing attributes in process `syz.4.1518'. [ 204.283877][ T6155] veth1_macvtap: left promiscuous mode [ 204.300806][ T6155] veth0_macvtap: left promiscuous mode [ 204.307541][ T6155] veth1_vlan: left promiscuous mode [ 204.315672][ T6155] veth0_vlan: left promiscuous mode [ 204.780178][ T6155] team0 (unregistering): Port device team_slave_1 removed [ 204.833337][ T6155] team0 (unregistering): Port device team_slave_0 removed [ 205.232697][T11201] hsr_slave_0: entered promiscuous mode [ 205.240608][T11201] hsr_slave_1: entered promiscuous mode [ 205.248945][T11201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.257929][T11201] Cannot create hsr debugfs directory [ 205.285214][T11334] bridge0: entered promiscuous mode [ 205.290903][T11334] bridge0: left promiscuous mode [ 205.299872][T11342] hsr0: left allmulticast mode [ 205.304835][T11342] hsr_slave_0: left allmulticast mode [ 205.310226][T11342] hsr_slave_1: left allmulticast mode [ 205.316691][T11342] hsr0: left promiscuous mode [ 205.321593][T11342] bridge0: port 1(hsr0) entered disabled state [ 205.382402][T11351] netlink: 'syz.3.1520': attribute type 2 has an invalid length. [ 205.519568][ T54] Bluetooth: hci3: command tx timeout [ 205.910598][T11367] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1526'. [ 206.187954][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 206.311798][T11377] tc_dump_action: action bad kind [ 206.403387][T11201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.417587][T11201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.430563][T11201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.469275][T11201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.615347][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.635622][T11201] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.679323][T11201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.699341][T11201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.727337][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.734516][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.749621][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.756798][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.113491][T11201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.121150][T11408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1536'. [ 207.239869][T11201] veth0_vlan: entered promiscuous mode [ 207.279871][T11201] veth1_vlan: entered promiscuous mode [ 207.341540][T11201] veth0_macvtap: entered promiscuous mode [ 207.452804][T11201] veth1_macvtap: entered promiscuous mode [ 207.470023][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.480609][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.492059][T11201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.501579][T11201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.512192][T11201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.523353][T11201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.533281][T11201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.542179][T11201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.551034][T11201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.559865][T11201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.594313][ T54] Bluetooth: hci3: command tx timeout [ 207.848945][T11424] lo: entered allmulticast mode [ 208.012512][T11431] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20001 [ 208.046815][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 208.051362][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.085260][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.117781][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.160435][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.568616][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1549'. [ 208.727225][T11460] x_tables: unsorted underflow at hook 2 [ 209.152478][T11482] siw: device registration error -23 [ 209.599071][T11497] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20000 [ 209.830407][T11503] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1562'. [ 209.867110][T11503] netlink: zone id is out of range [ 209.872708][T11503] netlink: zone id is out of range [ 209.879807][T11503] netlink: zone id is out of range [ 209.885268][T11503] netlink: zone id is out of range [ 209.892270][T11503] netlink: zone id is out of range [ 209.898289][T11503] netlink: zone id is out of range [ 209.903632][T11503] netlink: zone id is out of range [ 209.910071][T11503] netlink: zone id is out of range [ 209.917652][T11503] netlink: zone id is out of range [ 209.922974][T11503] netlink: zone id is out of range [ 210.147195][ T9478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.174895][T11513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1564'. [ 210.203136][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.212964][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.221893][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.226292][T11523] netlink: 'syz.1.1564': attribute type 10 has an invalid length. [ 210.229864][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.246630][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.253966][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.442861][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 210.474827][T11531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1568'. [ 210.598224][ T9478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.736151][ T9478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.857999][ T9478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.920558][T11545] syzkaller1: entered promiscuous mode [ 210.927984][T11545] syzkaller1: entered allmulticast mode [ 211.180060][ T9478] bridge_slave_1: left allmulticast mode [ 211.194290][ T9478] bridge_slave_1: left promiscuous mode [ 211.215072][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.256498][ T9478] bridge_slave_0: left allmulticast mode [ 211.262212][ T9478] bridge_slave_0: left promiscuous mode [ 211.275711][T11574] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 211.287043][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.682287][ T9478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.693587][ T9478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.703840][ T9478] bond0 (unregistering): Released all slaves [ 211.758858][T11521] chnl_net:caif_netlink_parms(): no params data found [ 211.938225][T11595] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.965491][T11595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1585'. [ 212.142261][T11613] netlink: 'syz.2.1587': attribute type 13 has an invalid length. [ 212.188965][T11613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1587'. [ 212.257210][T11613] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 212.284948][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.292069][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.299641][T11521] bridge_slave_0: entered allmulticast mode [ 212.307375][T11521] bridge_slave_0: entered promiscuous mode [ 212.316251][ T5843] Bluetooth: hci3: command tx timeout [ 212.452453][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.473204][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.483759][T11521] bridge_slave_1: entered allmulticast mode [ 212.491585][T11521] bridge_slave_1: entered promiscuous mode [ 212.562832][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.606940][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.721249][T11521] team0: Port device team_slave_0 added [ 212.742389][T11521] team0: Port device team_slave_1 added [ 212.863031][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.884187][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.937883][T11648] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1595'. [ 212.944776][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.976089][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.998797][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.032029][T11655] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1597'. [ 213.053494][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.180953][ T9478] hsr_slave_0: left promiscuous mode [ 213.195539][ T9478] hsr_slave_1: left promiscuous mode [ 213.205820][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.221070][ T9478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.240838][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.254772][ T9478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.297306][ T9478] veth1_macvtap: left promiscuous mode [ 213.310381][ T9478] veth0_macvtap: left promiscuous mode [ 213.316773][ T9478] veth1_vlan: left promiscuous mode [ 213.322041][ T9478] veth0_vlan: left promiscuous mode [ 213.742782][ T9478] team0 (unregistering): Port device team_slave_1 removed [ 213.793325][ T9478] team0 (unregistering): Port device team_slave_0 removed [ 214.319816][T11665] netlink: 'syz.2.1600': attribute type 3 has an invalid length. [ 214.341201][T11665] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1600'. [ 214.369248][T11521] hsr_slave_0: entered promiscuous mode [ 214.382750][T11521] hsr_slave_1: entered promiscuous mode [ 214.392249][T11521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.394486][ T5843] Bluetooth: hci3: command tx timeout [ 214.401695][T11521] Cannot create hsr debugfs directory [ 215.283755][T11521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.298625][T11521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.312257][T11702] set match dimension is over the limit! [ 215.330429][T11702] pim6reg: entered allmulticast mode [ 215.345998][T11521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.369532][T11702] pim6reg: left allmulticast mode [ 215.389899][T11704] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1615'. [ 215.399414][T11521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.561693][T11521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.606973][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.637325][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.644538][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.676391][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.683574][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.774598][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 215.800167][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 215.949903][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 215.990928][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 216.005067][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 216.065662][T11728] netlink: 'syz.1.1620': attribute type 19 has an invalid length. [ 216.087299][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.199115][T11521] veth0_vlan: entered promiscuous mode [ 216.246536][T11521] veth1_vlan: entered promiscuous mode [ 216.304708][T11521] veth0_macvtap: entered promiscuous mode [ 216.338178][T11521] veth1_macvtap: entered promiscuous mode [ 216.368835][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.407875][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.425631][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.461531][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.473387][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.484793][ T5843] Bluetooth: hci3: command tx timeout [ 216.505463][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.508247][T11745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1624'. [ 216.519876][T11521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.532714][T11521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.541625][T11521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.550984][T11521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.625049][T11747] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1624'. [ 216.636323][T11747] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1624'. [ 216.688583][ T9478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.706716][ T9478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.763223][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.775221][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.102491][T11763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.505753][T11780] net_ratelimit: 6 callbacks suppressed [ 217.505773][T11780] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.637805][T11774] delete_channel: no stack [ 217.688572][T11788] wg0: entered allmulticast mode [ 218.049955][ T29] audit: type=1107 audit(1735217634.981:4): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 218.288997][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.162541][T11830] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 219.169444][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.199914][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.230259][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.251938][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.260957][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.269516][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.336663][T11830] bond4: entered promiscuous mode [ 219.357648][T11830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.482790][T11828] vxcan1 (unregistering): left allmulticast mode [ 220.049637][T11835] chnl_net:caif_netlink_parms(): no params data found [ 220.110816][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.131099][T11888] sctp: [Deprecated]: syz.3.1664 (pid 11888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.131099][T11888] Use struct sctp_sack_info instead [ 220.158888][T11890] sctp: [Deprecated]: syz.3.1664 (pid 11890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.158888][T11890] Use struct sctp_sack_info instead [ 220.160800][T11889] __nla_validate_parse: 5 callbacks suppressed [ 220.160817][T11889] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1663'. [ 220.203420][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 220.222028][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 220.302695][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.429630][T11903] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 220.457903][T11901] @ÿ: renamed from veth0_vlan (while UP) [ 220.463724][T11907] netlink: 'syz.4.1667': attribute type 8 has an invalid length. [ 220.561947][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.667911][T11835] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.675590][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.682794][T11835] bridge_slave_0: entered allmulticast mode [ 220.699100][T11835] bridge_slave_0: entered promiscuous mode [ 220.711563][T11915] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 220.719953][T11915] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1671'. [ 220.744510][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.772542][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.790183][T11915] x_tables: duplicate underflow at hook 2 [ 220.794251][T11835] bridge_slave_1: entered allmulticast mode [ 220.819779][T11835] bridge_slave_1: entered promiscuous mode [ 220.930402][T11835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.953647][T11835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.031878][T11835] team0: Port device team_slave_0 added [ 221.082094][T11835] team0: Port device team_slave_1 added [ 221.201343][ T35] bridge_slave_1: left allmulticast mode [ 221.212113][ T35] bridge_slave_1: left promiscuous mode [ 221.233947][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.269568][ T35] bridge_slave_0: left allmulticast mode [ 221.277049][ T35] bridge_slave_0: left promiscuous mode [ 221.293423][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.356443][ T5843] Bluetooth: hci3: command tx timeout [ 221.874993][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.887496][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.899131][ T35] bond0 (unregistering): Released all slaves [ 221.909910][T11835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.917797][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.944549][T11835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.957747][T11835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.965207][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.992718][T11835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.280475][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 222.293203][T11835] hsr_slave_0: entered promiscuous mode [ 222.309238][T11835] hsr_slave_1: entered promiscuous mode [ 222.334586][T11835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.363574][T11835] Cannot create hsr debugfs directory [ 222.609901][T11997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1691'. [ 222.656819][T12003] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 222.704550][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1690'. [ 222.744360][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1690'. [ 222.796728][T12006] netlink: 'syz.3.1693': attribute type 11 has an invalid length. [ 222.854632][T12009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'. [ 222.893315][ T35] hsr_slave_0: left promiscuous mode [ 222.894789][T12009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'. [ 222.926484][ T35] hsr_slave_1: left promiscuous mode [ 222.941673][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.953120][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.973294][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.989268][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.026400][ T35] veth1_macvtap: left promiscuous mode [ 223.032043][ T35] veth0_macvtap: left promiscuous mode [ 223.045416][ T35] veth1_vlan: left promiscuous mode [ 223.050838][ T35] veth0_vlan: left promiscuous mode [ 223.434586][ T5843] Bluetooth: hci3: command tx timeout [ 223.560069][ T35] team0 (unregistering): Port device team_slave_1 removed [ 223.603863][ T35] team0 (unregistering): Port device team_slave_0 removed [ 224.183722][T12033] Cannot find del_set index 4 as target [ 224.637277][T11835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.694102][T11835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.731667][T11835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.744676][T11835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.914721][T12074] xt_hashlimit: size too large, truncated to 1048576 [ 224.953113][T11835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.986020][T12077] : renamed from bond0 (while UP) [ 225.162796][T11835] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.271739][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.278963][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.316325][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.323540][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.512962][T12059] __nla_validate_parse: 1 callbacks suppressed [ 225.512982][T12059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1708'. [ 225.534238][ T54] Bluetooth: hci3: command tx timeout [ 225.548479][T12059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1708'. [ 225.876583][T11835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.083283][T11835] veth0_vlan: entered promiscuous mode [ 226.099537][T11835] veth1_vlan: entered promiscuous mode [ 226.206576][T11835] veth0_macvtap: entered promiscuous mode [ 226.244948][T11835] veth1_macvtap: entered promiscuous mode [ 226.300086][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.354145][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.391324][T11835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.448315][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.470485][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.491991][T11835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.517380][T11835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.536597][T11835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.554310][T11835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.563082][T11835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.643688][T12118] netlink: 'syz.4.1720': attribute type 3 has an invalid length. [ 226.699053][T12118] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1720'. [ 226.745749][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.772294][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.826252][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.834863][T12120] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 226.849726][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.882733][T12120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.595175][ T54] Bluetooth: hci3: command 0x0419 tx timeout [ 227.881617][T11912] ================================================================== [ 227.889704][T11912] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 227.897176][T11912] Read of size 8 at addr ffff88804b734060 by task khidpd_00080003/11912 [ 227.905512][T11912] [ 227.907859][T11912] CPU: 1 UID: 0 PID: 11912 Comm: khidpd_00080003 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 227.919071][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.929161][T11912] Call Trace: [ 227.932469][T11912] [ 227.935416][T11912] dump_stack_lvl+0x241/0x360 [ 227.940124][T11912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.945339][T11912] ? __pfx__printk+0x10/0x10 [ 227.949943][T11912] ? _printk+0xd5/0x120 [ 227.954109][T11912] ? __virt_addr_valid+0x183/0x530 [ 227.959237][T11912] ? __virt_addr_valid+0x183/0x530 [ 227.964364][T11912] print_report+0x169/0x550 [ 227.968884][T11912] ? __virt_addr_valid+0x183/0x530 [ 227.974007][T11912] ? __virt_addr_valid+0x183/0x530 [ 227.979128][T11912] ? __virt_addr_valid+0x45f/0x530 [ 227.984248][T11912] ? __phys_addr+0xba/0x170 [ 227.988754][T11912] ? __mutex_lock+0x7fb/0xee0 [ 227.993429][T11912] kasan_report+0x143/0x180 [ 227.997944][T11912] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.003832][T11912] ? __mutex_lock+0x7fb/0xee0 [ 228.008505][T11912] __mutex_lock+0x7fb/0xee0 [ 228.013005][T11912] ? __mutex_lock+0x5ef/0xee0 [ 228.017689][T11912] ? l2cap_unregister_user+0x6a/0x1c0 [ 228.023058][T11912] ? __pfx___mutex_lock+0x10/0x10 [ 228.028076][T11912] ? __pfx___timer_delete_sync+0x10/0x10 [ 228.033702][T11912] l2cap_unregister_user+0x6a/0x1c0 [ 228.038890][T11912] hidp_session_thread+0x450/0x490 [ 228.043990][T11912] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 228.049878][T11912] ? __pfx_hidp_session_thread+0x10/0x10 [ 228.055504][T11912] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.061389][T11912] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 228.067621][T11912] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 228.073852][T11912] ? __kthread_parkme+0x169/0x1d0 [ 228.078874][T11912] ? __pfx_hidp_session_thread+0x10/0x10 [ 228.084500][T11912] kthread+0x2f0/0x390 [ 228.088559][T11912] ? __pfx_hidp_session_thread+0x10/0x10 [ 228.094186][T11912] ? __pfx_kthread+0x10/0x10 [ 228.098766][T11912] ret_from_fork+0x4b/0x80 [ 228.103171][T11912] ? __pfx_kthread+0x10/0x10 [ 228.107778][T11912] ret_from_fork_asm+0x1a/0x30 [ 228.112550][T11912] [ 228.115569][T11912] [ 228.117891][T11912] Allocated by task 11835: [ 228.122291][T11912] kasan_save_track+0x3f/0x80 [ 228.126964][T11912] __kasan_kmalloc+0x98/0xb0 [ 228.131547][T11912] __kmalloc_noprof+0x285/0x4c0 [ 228.136395][T11912] hci_alloc_dev_priv+0x27/0x2030 [ 228.141412][T11912] vhci_create_device+0x116/0x6a0 [ 228.146430][T11912] vhci_write+0x3cf/0x490 [ 228.150751][T11912] vfs_write+0xaeb/0xd30 [ 228.154980][T11912] ksys_write+0x18f/0x2b0 [ 228.159294][T11912] do_syscall_64+0xf3/0x230 [ 228.163788][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.169688][T11912] [ 228.172008][T11912] Freed by task 11835: [ 228.176074][T11912] kasan_save_track+0x3f/0x80 [ 228.180758][T11912] kasan_save_free_info+0x40/0x50 [ 228.185784][T11912] __kasan_slab_free+0x59/0x70 [ 228.190539][T11912] kfree+0x196/0x430 [ 228.194431][T11912] hci_release_dev+0x1525/0x16b0 [ 228.199366][T11912] bt_host_release+0x83/0x90 [ 228.203948][T11912] device_release+0x99/0x1c0 [ 228.208533][T11912] kobject_put+0x22f/0x480 [ 228.212937][T11912] vhci_release+0x88/0xd0 [ 228.217264][T11912] __fput+0x23c/0xa50 [ 228.221243][T11912] task_work_run+0x24f/0x310 [ 228.225829][T11912] do_exit+0xa2f/0x28e0 [ 228.229976][T11912] do_group_exit+0x207/0x2c0 [ 228.234571][T11912] __x64_sys_exit_group+0x3f/0x40 [ 228.239602][T11912] x64_sys_call+0x26a8/0x26b0 [ 228.244287][T11912] do_syscall_64+0xf3/0x230 [ 228.248791][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.254678][T11912] [ 228.256996][T11912] Last potentially related work creation: [ 228.262699][T11912] kasan_save_stack+0x3f/0x60 [ 228.267382][T11912] __kasan_record_aux_stack+0xac/0xc0 [ 228.272759][T11912] insert_work+0x3e/0x330 [ 228.277082][T11912] __queue_work+0xc8b/0xf50 [ 228.281582][T11912] call_timer_fn+0x187/0x650 [ 228.286168][T11912] __run_timer_base+0x695/0x8e0 [ 228.291008][T11912] run_timer_softirq+0xb7/0x170 [ 228.295853][T11912] handle_softirqs+0x2d4/0x9b0 [ 228.300608][T11912] do_softirq+0x11b/0x1e0 [ 228.304934][T11912] __local_bh_enable_ip+0x1bb/0x200 [ 228.310125][T11912] dev_deactivate_many+0x54a/0xb10 [ 228.315230][T11912] __dev_close_many+0x1a4/0x300 [ 228.320081][T11912] dev_close_many+0x24e/0x4c0 [ 228.324763][T11912] unregister_netdevice_many_notify+0x530/0x1da0 [ 228.331087][T11912] unregister_netdevice_queue+0x303/0x370 [ 228.336795][T11912] __tun_detach+0x6b9/0x1600 [ 228.341394][T11912] tun_chr_close+0x105/0x1b0 [ 228.345992][T11912] __fput+0x23c/0xa50 [ 228.349979][T11912] task_work_run+0x24f/0x310 [ 228.354568][T11912] syscall_exit_to_user_mode+0x13f/0x340 [ 228.360205][T11912] do_syscall_64+0x100/0x230 [ 228.364790][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.370682][T11912] [ 228.372990][T11912] Second to last potentially related work creation: [ 228.379563][T11912] kasan_save_stack+0x3f/0x60 [ 228.384239][T11912] __kasan_record_aux_stack+0xac/0xc0 [ 228.389613][T11912] insert_work+0x3e/0x330 [ 228.393932][T11912] __queue_work+0xb66/0xf50 [ 228.398422][T11912] queue_work_on+0x1c2/0x380 [ 228.403002][T11912] process_scheduled_works+0xa66/0x1840 [ 228.408538][T11912] worker_thread+0x870/0xd30 [ 228.413119][T11912] kthread+0x2f0/0x390 [ 228.417178][T11912] ret_from_fork+0x4b/0x80 [ 228.421584][T11912] ret_from_fork_asm+0x1a/0x30 [ 228.426345][T11912] [ 228.428658][T11912] The buggy address belongs to the object at ffff88804b734000 [ 228.428658][T11912] which belongs to the cache kmalloc-8k of size 8192 [ 228.442716][T11912] The buggy address is located 96 bytes inside of [ 228.442716][T11912] freed 8192-byte region [ffff88804b734000, ffff88804b736000) [ 228.456511][T11912] [ 228.458826][T11912] The buggy address belongs to the physical page: [ 228.465241][T11912] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b730 [ 228.473994][T11912] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.482491][T11912] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 228.490030][T11912] page_type: f5(slab) [ 228.494006][T11912] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 228.502586][T11912] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 228.511158][T11912] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 228.519820][T11912] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 228.528487][T11912] head: 00fff00000000003 ffffea00012dcc01 ffffffffffffffff 0000000000000000 [ 228.537165][T11912] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 228.545819][T11912] page dumped because: kasan: bad access detected [ 228.552229][T11912] page_owner tracks the page as allocated [ 228.557931][T11912] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11784, tgid 11783 (syz.4.1636), ts 217570245434, free_ts 213230232524 [ 228.579283][T11912] post_alloc_hook+0x1f3/0x230 [ 228.584054][T11912] get_page_from_freelist+0x365c/0x37a0 [ 228.589598][T11912] __alloc_pages_noprof+0x292/0x710 [ 228.594785][T11912] alloc_pages_mpol_noprof+0x3e8/0x680 [ 228.600235][T11912] alloc_slab_page+0x6a/0x110 [ 228.604899][T11912] allocate_slab+0x5a/0x2b0 [ 228.609397][T11912] ___slab_alloc+0xc27/0x14a0 [ 228.614070][T11912] __slab_alloc+0x58/0xa0 [ 228.618434][T11912] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 228.624837][T11912] kmalloc_reserve+0x111/0x2a0 [ 228.629592][T11912] __alloc_skb+0x1f3/0x440 [ 228.633999][T11912] netlink_dump+0x1ee/0xe10 [ 228.638500][T11912] netlink_recvmsg+0x6bb/0x11d0 [ 228.643359][T11912] sock_recvmsg_nosec+0x18e/0x1d0 [ 228.648388][T11912] ____sys_recvmsg+0x3cd/0x480 [ 228.653145][T11912] do_recvmmsg+0x426/0xab0 [ 228.657552][T11912] page last free pid 11659 tgid 11659 stack trace: [ 228.664035][T11912] free_unref_page+0xd3f/0x1010 [ 228.668879][T11912] __put_partials+0x160/0x1c0 [ 228.673548][T11912] put_cpu_partial+0x17c/0x250 [ 228.678299][T11912] __slab_free+0x290/0x380 [ 228.682705][T11912] qlist_free_all+0x9a/0x140 [ 228.687283][T11912] kasan_quarantine_reduce+0x14f/0x170 [ 228.692727][T11912] __kasan_slab_alloc+0x23/0x80 [ 228.697569][T11912] __kmalloc_node_track_caller_noprof+0x237/0x4c0 [ 228.703976][T11912] kmemdup_noprof+0x2a/0x60 [ 228.708474][T11912] shmem_symlink+0x227/0x630 [ 228.713054][T11912] vfs_symlink+0x137/0x2e0 [ 228.717462][T11912] do_symlinkat+0x222/0x3a0 [ 228.721954][T11912] __x64_sys_symlinkat+0x95/0xb0 [ 228.726880][T11912] do_syscall_64+0xf3/0x230 [ 228.731379][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.737268][T11912] [ 228.739580][T11912] Memory state around the buggy address: [ 228.745195][T11912] ffff88804b733f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.753241][T11912] ffff88804b733f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.761308][T11912] >ffff88804b734000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.769415][T11912] ^ [ 228.776619][T11912] ffff88804b734080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.784675][T11912] ffff88804b734100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.792722][T11912] ================================================================== [ 228.801694][T11912] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.808913][T11912] CPU: 1 UID: 0 PID: 11912 Comm: khidpd_00080003 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 228.820124][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.830194][T11912] Call Trace: [ 228.833472][T11912] [ 228.836398][T11912] dump_stack_lvl+0x241/0x360 [ 228.841081][T11912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.846278][T11912] ? __pfx__printk+0x10/0x10 [ 228.850867][T11912] ? vscnprintf+0x5d/0x90 [ 228.855197][T11912] panic+0x349/0x880 [ 228.859088][T11912] ? check_panic_on_warn+0x21/0xb0 [ 228.864196][T11912] ? __pfx_panic+0x10/0x10 [ 228.868607][T11912] ? mark_lock+0x9a/0x360 [ 228.872929][T11912] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 228.878812][T11912] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.884696][T11912] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 228.891014][T11912] ? print_report+0x502/0x550 [ 228.895681][T11912] check_panic_on_warn+0x86/0xb0 [ 228.900617][T11912] ? __mutex_lock+0x7fb/0xee0 [ 228.905285][T11912] end_report+0x77/0x160 [ 228.909517][T11912] kasan_report+0x154/0x180 [ 228.914012][T11912] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.919907][T11912] ? __mutex_lock+0x7fb/0xee0 [ 228.924578][T11912] __mutex_lock+0x7fb/0xee0 [ 228.929089][T11912] ? __mutex_lock+0x5ef/0xee0 [ 228.933757][T11912] ? l2cap_unregister_user+0x6a/0x1c0 [ 228.939136][T11912] ? __pfx___mutex_lock+0x10/0x10 [ 228.944171][T11912] ? __pfx___timer_delete_sync+0x10/0x10 [ 228.949822][T11912] l2cap_unregister_user+0x6a/0x1c0 [ 228.955027][T11912] hidp_session_thread+0x450/0x490 [ 228.960158][T11912] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 228.966057][T11912] ? __pfx_hidp_session_thread+0x10/0x10 [ 228.971685][T11912] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.977568][T11912] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 228.983796][T11912] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 228.990025][T11912] ? __kthread_parkme+0x169/0x1d0 [ 228.995039][T11912] ? __pfx_hidp_session_thread+0x10/0x10 [ 229.000668][T11912] kthread+0x2f0/0x390 [ 229.004730][T11912] ? __pfx_hidp_session_thread+0x10/0x10 [ 229.010355][T11912] ? __pfx_kthread+0x10/0x10 [ 229.014938][T11912] ret_from_fork+0x4b/0x80 [ 229.019342][T11912] ? __pfx_kthread+0x10/0x10 [ 229.023922][T11912] ret_from_fork_asm+0x1a/0x30 [ 229.028677][T11912] [ 229.031934][T11912] Kernel Offset: disabled [ 229.036251][T11912] Rebooting in 86400 seconds..