last executing test programs: 4.644614306s ago: executing program 0 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0x5, 0x1, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.267016464s ago: executing program 0 (id=2573): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) unshare(0x20400) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) epoll_create(0x3) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4004) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.231366808s ago: executing program 3 (id=2585): unshare(0x62040200) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001a00)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x4000800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000005209aa2a9d906eb8d0ac00"/26, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000df1cb09f716f00ba3516c8d46e6489af081eeff1f00c0096d2e8"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x90000009}) epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback, 0x80, r3}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, r3}, 0x14) 3.186731057s ago: executing program 0 (id=2586): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffc, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xfffbffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000065888435300000005000085070000000900000005000000060000000c000000000000000b0000000700000002000000e10000000300000001000000080000000a00000003000000c80e00000d0000000000000b0500000000304c2e5f0098cfad2a7860985840717abb6dcdd23e0ae58925edae123d36fce2933081cf59c2b583347eece5e0ec6fdba981b7e0efe48a0af61c1950ae708c6e356aa0f4acd877fa1a51e4825c609b"], &(0x7f0000000440)=""/130, 0x72, 0x82, 0x1, 0x200}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cgroup.controllers\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x14, &(0x7f00000002c0)="010000000980ffff", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x16, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd8ba}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r5}, 0x94) 3.012267082s ago: executing program 0 (id=2587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3, 0x9}, &(0x7f00000001c0)=0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 2.767156159s ago: executing program 0 (id=2589): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x2, 0x4e23, 0x0, 0x4e26, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {0x8000000000000001}, 0x101, 0x80000}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001900)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6b9, @remote, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="84b145e1db0e47c0691e4f5c8fd1400ddace20db27efb996323255c48ec0cbd38a3ce835e02b10575f2d9dbfb28cbb4b2d6ded4bc538aec5d296f35ef89b4b23f7210ed6249bcfa57b7c254f1ea8e89c157a7bc2e4cb47de3b20e4eda4b71165794a4589e5c8a75d56", 0x69}, {&(0x7f0000000240)="618cc220dbde0eee6b6fa3be581d298b56f37d74660852abf45b8e877c5f28f807391835cd5f7827960226fce602797d14ff8ce715501e1cda8b66e0e34203a68edad636f38c13fd118bebbc9a569dd7222db6f7236b3ab97c2580598f5cb4674d936bb3fc18ffe066a56ca329beb17659cd8a9e28993069b87a4d685d2b33829868", 0x82}, {&(0x7f0000000100)="9d4405e0329f6848785d91a630f070b653d1041f0e6d55ef212be8fa2305af9800746a4265127460acd23c3e01d2c28ccfb86a9767f04b23dc6860d4006c289fc7025d9a4d", 0x45}, {&(0x7f0000000300)="1a81d5259f93e70198e89bdf820e93849e6b1f20d97b8a6b89b35b1ef8899b21ef1962c1afaabe90d9e226698ef6eaa31b63fe5262bb4c2dfba9bad41a20ff65db04208ec531161338ecd09d5dbed20ed2f16bb3d96b441526b35ff63e60f5ce2f3fe8a83fd31186a05f363939bbc9c2bd028e987f70cb433d13ff9c2696b71a870276fa3e7ea31b1360eaaad2ff681446f2671b12cb40ef17a0a458722c47fec6df5b00cc5e167ba8129d7e6ad7ec39cb1bb59f51fc312124ab846065af74eb0ece8538483777cc75cae82161ed6659df2731d3518d8b076f4f297e796a25bee030de8ff64f98f1e2ed", 0xea}], 0x4, &(0x7f00000019c0)=[@hopopts_2292={{0xc8, 0x29, 0x36, {0x4, 0x15, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0xd, 0x9, [0x7, 0x2]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xe7, 0x7fff, [0x0, 0x1, 0x2, 0x80000001, 0xb9cf, 0xfffffffffffffff9, 0xfffffffffffffffa]}}, @pad1, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8001}, @generic={0x0, 0x23, "e9e908c0ec3a4258bd3807f397ac06a1df2af37de8c9af8e16df17c8d1db69771ca972"}]}}}], 0xc8}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000480)="da3f7f730f725f80563e25043579bda042003bb06a8f6a65b9f3ba704ca83301bc848cb0b509152225281cf8e0f1bf1e36468816318ae5e571802d039ab7ad4a105e830183b1084c2391690130ea07fefd626523fdd8fbc5e3dc71f37e5e9091dce88b026344018018f7e9a6aba746aae4ea1589c6f8c84384ed4e50096303bd5f5a822902cc594e9057863dd1495b9887324842c294ffe7faa9a727bfe69518022b75f4d0a8a0a566beefb3492fb42b3912823f418610c64592b6eeb45d5f0f7f2a03df", 0xc4}, {&(0x7f0000000580)="0d1e88bcf7b64a5f8a49b1f64129cc4ffed2f98172477d72faa94cb0f0c3545d79994a2d76dc4febce04d060581db87eb4e8031d203f8add99b96cf1961577422ce725b9b71bbd5e5334919251782e81cdd6456050ed2f9dc34fdb00b01badf57cda1aa08cac8aa906c44853451b4d70066e49058559b4f22b47d60e8a74ccd80eb45c9aafd8c056413211f66b9c633417e0a72fd42151c4838968eb197f1bd1846004cb8a56400d3b506cc26e28ccd3f76bbc124da5fe0901f612e6bf449b13e943e9c95271982834d373926ef9a02a17219f2a78a98523c6dd9d59fca1b8d25fdcc8d9e6106826682a88ccd52a09e25b6e287cf241e2af25f67d4f953fddada77e6019b964af9cdeb39a3e64c91eae737532ceaf5fd25d2bca39c997e6823f7c46d1c061cd484ad01025f4c28d41be3466d316482c7ba1e80026f50cdc7d1d2d29d312eca578d2151086e2bb7f37d930924104e1e9ef0fecde3c01e27bf7a7ebf29426902f7c26ec5c41beee6727a315eaa08096a9f1f151cdecfc534881cd16f85a06f7fa75e9197e99e5a49a014bb44f0ee6b1dc3b853180b28506defce48a5505ac644ddff10783c51956a9e9818a781a7518328a42c9c0dc1d77773deff82088b5f33e641c40477f2917492a81846971ed64091fe239925674152002ed4da98aa15a62b084202842c056d49d7eb53c4dbb5845a0f90351b68b2f192b8afa5258cf279a878d940f0c06168e08213195ccb0231c686cfb3835c34131226c3fcbfc70a0f9ba6ae55d127c8c2be5693925edf97f4863614cfc8619c46b2ee725f355865f77e1a7dafa82653692ed4463c0e0c1c6490588513f14655597f344f8b84f38bb2c4979589dd57d2aafcbf57ae574076e0ea177d0380c318142c5a13c6017165de595bff5222e441a0bc736b51a167b4681d70ea3867030fb1cdd2d32d909c6016e3b8eb9c31304fe355fcabacfb6559a94eaa241e3847534039e655ca419a621a2dc900712142238c4e8435d41250d0ea7318f6416550a9de3213835e10420c5246060154b89c210795519cdf5d85ec2ab27330d88145c3f72a622deba07d8129852dc496f1424b3fced23f6b765a57426a48983a7f5cb4ab2a1f1651b5e1e22bb459c3f6ecaa4bde25b3a8ddef57419251c814882b60e1e45fe454601fed409e76fcb8bd5c85b43ce4d89554d6f48c84126069e574a18a5144094c2c3d9992675e5e33ceb7e792f734666ba2b86fe978e8a744392666c63adee473c4ca5d6d5b6587287f52dcebfc300f9070f765f43d9877dc01b183a219829f55f882c0221bf54ec1f29682baf32f50dc073deeab0f07e276df6c4f67ff5dc4bbd4ff6468516bad7fe83a172dd5ca6b44ffc25af5013932e5ef30f676bba92fe3cb8471c0884914a0efdfcfaa49f2ed68744c7b5fd01a992e0c7d090a00d5ddf6fd2a13daca19d2eb7d3a16a0628f4319af92f1f0a9cdb1c9c268d8b9bf1ebe5437e6c58e4d942e4d003d00c147433265bd608c228419d7e2f95e2e0c5bfcfa8e3177f4fd7caa93ca98b430ce3bbc3b48194bd571aaae1721d4160f8756f5948dcae1d96e24fcebb15aa5e60a6ad3571298f74fdb58ee2e01b71afc0aa52e08531b69b27f752f96fd1560ef3984917286d2a45241f3818a56e0d0ef23aedaa25ec5d96d5d72481617742814ecc0edc8cb53f4af34b2647a52c338fbec3a277eec50fac9a17f96ad6c44273efa54aeb573032566454278d8a100bb523b4a2fde31467138295e5d389508c38297332f1471952338d9ee09334d07e2ef71782cd61b0900bc92438906355f4cbcfc500d818af25283bd29644df113b49d66ea48e51d6b3a051c2e62de22fb048c65083344826698c7b001568a6fa260d6ef036ac68075ff7cee689a1b2c9b957f35a1ad99c9dbc7541fbfefeb7c5bee7827f8adda26e896ccfef6c862be1316613f462924fff415392bc86d952620b75a812489f9b8c88ad96b8fb2b214fe6166da2058d6d64262ab54c14d341f187642c38968f5d296cff4e0c8e04a37b366952c0877700735ba55e17fe2a1fb9c15a26630ca39f508fd9706830098391abadbe310a0931194c0e4428a16ead682baed79c949227a4d5092b1bad9915803dda74e7b49c04f38ac7565c1c6293a568c659c19d2750d04555544cf2cdb25d39aade2a0d8f8dd48f7bbcb9a25ffd591aea4bc4a14b9667a56bad528c6e4362b3ad27321559de4dfb63f06456148bd63e18b380e28271006e8594ff915f77a4f620b20d1e0d34adcf15f5d0901b827a9a49f801b7fa486f3ffa21e2992db58b6628edab74bb779b9da9776bcb8922516fbc0105e048d6cd6b99386bff6ba95532178a1d466efa72954ad6d756795ab732c6dc2d72ad7085e3760280f6507dcc349448e7fb4a11f2e7c319f8ed0021e5db2fdec11acf53ae91f288aee5b940ca172201d4997ecd2ec48c8eff4a1124f5416c571012903ae7b574069621103f03761e4721b3bcff51e9fa2863335307238f30146291da896289609f7bdd7ddad526b793689e2add901b38a17a9498fae6ecf76e80a1fb559d812a92b62379243fcd0a9095b0f97cc8bd0ac0d4e0177e4e18d662c92ff86d45617ef8d637e065180e688be6712a9bc434fc247593c530f6d3ee3834db7fbec5b898392d60f3717745690ef9d9cfaa6e987bccb826793ef1d43c97923ac5912b3bee6c5e99aeb8d39a350d8539286f3f5ae79a4dd4a665d063a008c1c9ae765a6964315f790943140f2620f7060f4b2dfb2572007fae153bb4b714d2c49db89b5eb6b3857f19e1524bef23415369cf950223af0f87381c4b40c0354973340b55dc5a44892a6c610a0cae0e5c9d7ff461126bc01a6a6302c768a356ddb111e66b503806b667d7ce3e8ce1f09cda924de508e7779ea5fd379c304d1aa00c3e7a6c698ca1d2841729a594aa29788ad214a2acc5533424d1e14feea4a62427d79d51d1e8256d6ef597bc288dbd176634ecf80db8da1439ca85cedf682a290ec2fae11988481642462269a1b11845c468544d407452dc8d5d4c8c61912eb0446f3650d945cd592769dcf19ffb6faceb18128d8e2c52c2722485f7eb4eb5f007aa29ddc5efe62bad4c4b5cf115ae26cffd5c45705e34c17bfb83de5d0727d8f14f7e8a281c070c2d34397c64a263888d3c385645d6227e0fa26b510f4df403892a373b2f3a8fae7a318e4e63cbdd7bb76ea6a1a0b3329a03852393d1e8dc810a0e05d7d714ebb76be82f375cb08a5228c303cd2e6a31f4b689bda96d6ba20b6c2e41dfd790955d58e6c84fbe3121b31eda6d3ff9f88bece4a90d6b11ebbb3b09c5bac916b25c744564d5586e35c65ae12729874cfa4c59c0761926ec3df04ff1ef967558ac33b89213a0ac8572d0c953eb53151aba03ddae3c2d0f611032ba401906d578d32b7655b19d1996f226deaac138f45a9a1aae70a5b8f4c801c59ea5595e730b86028aa3d83d93607735271aa36f5dd9e9647af0de431e4a294a89a68dc315ddaa8c94b4ed73c9486b0001a89cbd1706f4d52e856c260eb9fb349e4d1f687444b134bb2dc87505861cd22e2cf8699122c9886455df01f1ef6b8da62a2dc91005d113aba3479a32b9f2dfe290563c00fc4a156a658023e3ef71834fefe05e6283e1efb00d98db099891acf5743bc34303879f1d957431080ff37b95e82a2f4a993e82b65845b4191a204859bbfd26cd34d7cdc7d8472c3dfcc513776cc7927abf52b0b4318eb4a508ddd9cae23fd49e5dd04ad9b5c9afd1faa013dc08cd58bda2bc8d87f4d8e2c1ba8a89bc8d54bcb39bcb074f4737018cbe3d174eb647130add800789a40861e08186182bd291516c2ce69b3b5529a61cfc8ba043ea158588e622ffa7c01348e4cf636e0ef2fadb038a308619f20179d45a761c4571deec965cd34efc98615ec50a28a820b660acf7a09774a7e0b2bf60543c0ddad955d62f8109f436b0a03cf3079e925da48673396f39928fa72725f73ae1cad1310fe1641d0456439f9ffd888553f9118c2836a338a660ff5278e9eb568d953620ac77f37e92351a4e24c395d4ec6f32048fcbd0feccd9863c7cd88502f6a15368c0d4fee2208e38af077f88ee86173b3b6f95c1e4f147663dee382210aae845f9231eac2ff32da3bf7d186e031b5432b6760c52b52da871310243f3ac75c59281481ed266f8404cb31d906fc28497f875dfcf5f0429dac8ffbd2f4d1d71d6091a6907aa185f9e2d4ff5d52c8ecc54f32e3d2ba043e9ffaee3ed22a9f4011dae28f9d053d7b5a6dcca901b0fc78155c606aad346317782bfa2505527c7d0c64d7a15d4b87ea321177f1d4620d78963277e48b2b018e583e514f4bf871c522738ea679c51e3fcce477c1af06d633be2726dee26e759f233dbafc5aeb683baf14730f49c7b556d618dc7c87e6f0829bbc12e893e99bc07f78bf95015b30062939960cd9fd0a111777dcdd6ae9278e2d832a9a4c0d148f78af4b9d2eb6ffa72d6061c9ad218a2d4a155fe19f8d1b4bda05d80bd672133cf10c317f08627617eb13c5ce6c0a69038e401b6e51c5d14f5cf808fa71553a933bf1894df5b8c34d5fc03c0085a8eb2b4de0b57b462372bf63cb849ef07647a633854f7fec6cfcca1a95dc087fbcd5cd071f486c6aedc337dbeaa03e4ac6b1ede04ee13cb1dd94cded00b0e19b4b0c7380126c80431d7addffb99dfcb81009f19df7740253942ab77cd4e3d03d098d2188c43f95cd88fea8a601a32c66b26816a15c149f5ef4ae47f8054515a8583bba7efcb3d0e8bb9df2bdba8a8ddeb3c13c91442408728d2ab1504941605b9bfa3b13da82b36431d5192bf3820d4060f0a34a11ea4f2cde97343b40a418b09ddd69f3a2a94b65a71c2f483622f533d0bbf03d3f4cde8044e5e49f3c009f7b0e5b469e95ee7da865b14d1b1b5cb27b7bf7269be207d8f6b1e54b648374064a6f773386c6e1f14684a124b11387355c93e7ff91b1cfa90d773e2133c35db679b3657a806f7d1106cc9eb20d460d3cdd9b0fb0442a2f7c9ba5b52f9103ff222b712635e2bb80ba33bdf5ee4d646ebdd79b9d9a10100e3f8524f4884e91602e6769a5f3e462e6c1651c80f006bfb8c68a31482d2c670311c06cd9108398913021942db2846e0526405b6cc394687fe24a0b6fb3d66921c93355289a57955bd7c9669df35e1935f86a7005c0f3d82dcc9b5d2a52696529cebbd5f6f79cba9a0bc25ea0bd97c1d399560312456b522f9687263d0097aeaf0436dde2cb43bb456cbce937821909abc4c570d781a0a224a47916cedabf4e3aefd8d87bda76b12826bf858d1eae68bf62c21e3002ce8f2dc0135efeffe2c25410b8363bce9522ed2456e6c13214e1a36f2618b308270bcf24288cf05676c1ee85837ce479d5d3047947469e8df06f8871327ce51227a9fe7087561462376c098662f70b55be8974e456b2b6db8ad59b446307d46853c32060a4af1fe98923e2d33e61e6ab85d2b838736ffe5f4c74d36e0f93a4b4fb23d6ec06e3821e0165aac6f3e52949c4554a1b3d468effc642f964d6ae232853f58213e7c3583beac22b899c85377295e7a86ad6288ea326a90af757aa7ead093fd700be3a754219bc51328e044b1a5ab077c7eeb2d0bc0d4b7f87bfc4c09075ce3914208e15c8c63d122e51e03227cae21270307341d2b531f19f21adf1a7cdf8be6897b038d72088b7ec4159526b5372a7de6de0b8e2a29c1dc9c7c4557404b818110512d6fe6161c023b41c0d4244279b4a228", 0x1000}, {&(0x7f0000001580)="c653f86fb34ca0f8522958fe53e7d3a7ff8387f3317c84995abb038e00e999b29196d401b042bcc7945cec1884eb2588d4a7e98cba129082ba189aa241a2990590634e99fcd23f3e1931f95c3831042796be17f03b4b335b8fa55f25d2d2964d9921fde84f9d366be230311a6cae09f1fc4727e89cb3671c9c413e97d8dc73caed18390a61d853e325eae329c2e55ab1a29bacb5420bb02459a700894ebecf9b02ed2a18deac7df72ca92c1c35e66b7252f14b2dcd86f2835c196027ace8163e1fc357c9e57b135ffe8bebdcd5ac5bb47df00bd6528958e5267f480c7487dc098f4220def63aecdcd73092ef49ae15", 0xef}, {&(0x7f0000001680)="04497aa8f993f4a24d4fa3c94e0081d3685a48b9dadf468cc1", 0x19}, {&(0x7f00000016c0)="e82cd2755186f670f30b0bd594515724d1ba33f6b0a9", 0x16}, {&(0x7f0000001700)="6d8c36bc397defe8c6d8d3a257646d2b0ef566a15a84970d73a30a9a4b17eb94013eac5a2271470a062378bc8668446f9c6e60c66ec621100a201ed13fbf8c6eadfa77aed48619f60d0d31882d5804f91e0230759d45d966b64ab18e5766e338a34ea24b8988d67405081a4b1f28cb90b10fa8721929a7d921ffd97ba5f08e5a6361c7676fc1709fe5f5af5d686a7348c34bce5c018525e2cfa1e83eb510000c31db7d58dd5d2fa7c3", 0xa9}, {&(0x7f00000017c0)="201c5da471da84384d64c0dec5452d65857e3c59ece2968b2bb3c9a877cfa26a0023a7df97e453af7d1d546feac00d94009584b0567785e555310055b2d1a3b8875d6b3689006d8fc87a2c413b4ceb676b6510edd397f15f0f54e597", 0x5c}], 0x7, &(0x7f00000018c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x0, 0x1, 0x0, [@loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x40}}], 0x2, 0x4001c00) 2.58313435s ago: executing program 3 (id=2591): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x2000000004c0, 0x2000000004f0, 0x200000000520], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000008a724d8297106c813112119bb50200000000000000000000000000000000000020000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/144]}, 0x108) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x5}, 0x94) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) 2.455064036s ago: executing program 4 (id=2592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x20000000}) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) shutdown(r2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000580)="b6c4e790b597c7b5545df36063d3f158392c2cd1e92bca03f7e2c31ad8766c3e504af7398b77100f00b63a37f3115c6a01d59cfeb23a85dc8edd99cd1d19893339b46405bd9aafa068b152cde34e7b1ae7776ca710b80cb9f1036c04a6ddee77d2e83b3afc356be222", 0x69) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001000000000000000000000000000000000000000000000601b08bfec24ae1c43692d90daa59236d5baf1371ca91f2eb8f730901d6d34c29037bb03b944b4985d6cd6ca025d858047a962cb7cc52b768102cb7b98860200d98e00"/105], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000001c0), &(0x7f0000000300)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 2.244256387s ago: executing program 1 (id=2593): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c010000100001000000000000000000fc020000000000000000000000000000e0000001000000000000000000000000000000000000fffe0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000008900010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008020000ca8bdaf566099b58"], 0x17c}}, 0x0) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0xa}]}, 0x10) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2d5264b8e59578525c2cbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584add4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 2.238497711s ago: executing program 4 (id=2594): unshare(0x400) 2.064159948s ago: executing program 4 (id=2596): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) unshare(0x20400) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) epoll_create(0x3) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4004) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.063869823s ago: executing program 1 (id=2597): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) close(r3) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x1c) getpeername(r1, 0x0, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2d, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) socket$kcm(0x21, 0x2, 0x2) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) (async) close(r3) (async) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) getpeername(r1, 0x0, &(0x7f0000000080)) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2d, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) (async) 1.916267885s ago: executing program 1 (id=2598): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) epoll_pwait(r0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, 0x81, &(0x7f0000000580)={[0xffffffffffffffff]}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000885"], 0x34}}, 0x4008000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffffff000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$key(0xf, 0x3, 0x2) r7 = accept4(r6, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2834502005cab8e82e00000001"], 0x128}, 0x4810) r11 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000040)={0xc, 0x0, 0x2}, 0xc) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$inet_tcp_int(r11, 0x6, 0x11, &(0x7f0000000780)=0x8, 0x4) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.512407621s ago: executing program 3 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.154905157s ago: executing program 3 (id=2602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="15062cbd7000ffdbdf252a000000050036000100000008002f00000000000c00050000000000000000000a0001007770616e31000000b5584c6c207f63c033ef621eb9fd4df9e751eed4ec77e123dd03f98977113fabe13ce65eed51745f8f40f3cb07003443ec681c214886b8974201f9809c7c17266f4a54dc134e852459cb496694542c5ab82502fe0be8fbe5b8355cab4f91148adea2f26b1c8f9956348ec7"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0xc040) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008895}, 0x8004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f3fd65bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e208000000729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e7095d6744756e17ece06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00dd02", 0x1c, 0x6, 0x0, @empty, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0x13, 0x2}]}}}}}}}}, 0x0) listen(r5, 0x7fffffff) socket$unix(0x1, 0x1, 0x0) unshare(0x26020480) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newnexthop={0x20, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRES32=r7, @ANYBLOB="830405001b34bf261c0012800b00018067726574617000000c00028008000700ac1414", @ANYBLOB="1fb32f5df1c8aa96e9c5a6a1143cfc569448b4d2c724f02d48b7ed2b9e18244e09558a3830d6fa1be792a79b7228dc5d014815611289471d150109c5759d6c0f6898e134a29a07002a26c911e90e51e1c44c337f536b", @ANYRESOCT=r0, @ANYRES64=r6, @ANYBLOB="de07cf73d63c2c793bed5bc3fc5665b5f741c541aa20e41f1e7fb5ffc31f384425aab1008c79f1b3cc000dc16b84cbcb9b085a626de383d1ad9d0ffa35a9405b92ab9444f4b4ab0ead50d25c98f5e6fdf2e44e70d315279d1abf757a857c509d5067204bccf4159154c3b695dcfcfa4d06e46541112bb5dcb93a", @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4002) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48050}, 0x20004014) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20004011) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000000000000000000000021b2c55acec00000", @ANYRES32=0x0, @ANYBLOB="1011935784800000140003006e657464657673696d30000000000000140014007866726d30000000000000000000000018001680140001801000020000000000ff0c00007e000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x2c004000) 1.092508643s ago: executing program 2 (id=2603): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14000850}, 0x4004) 1.025827405s ago: executing program 2 (id=2604): r0 = socket(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r0], 0x40}}, 0x0) read(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x8, 0x700, 0x8, 0x50, {{0x29, 0x4, 0x3, 0x3, 0xa4, 0x64, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x23, 0xf7, [@multicast2, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}]}, @generic={0x94, 0x2}, @cipso={0x86, 0x2c, 0x2, [{0x7, 0xd, "b58b08af897addb134299f"}, {0x2, 0xf, "5fa3a3a1ef86be156265e2474c"}, {0x6, 0xa, "1fb16cedde708480"}]}, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0xf, [{@remote, 0x10001}, {@broadcast, 0x6}, {@remote, 0x8001}, {@private=0xa010101, 0x400}]}, @generic={0x94, 0x6, "b182dfe2"}, @lsrr={0x83, 0x13, 0xa7, [@remote, @empty, @broadcast, @broadcast]}]}}}}}) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x2, 0x8}, 0xc) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async, rerun: 64) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4000}, 0x18) (async, rerun: 64) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffff8, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x10000, 0x5d, &(0x7f0000000340)=""/93, 0x41100, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r5, r6, r7, r8], &(0x7f00000006c0)=[{0x2, 0x4, 0x7, 0x6}, {0xc918, 0x3, 0xe, 0x2}, {0x0, 0x3, 0x4, 0xb}, {0x4, 0x5, 0xd}], 0x10, 0x4}, 0x94) 997.051593ms ago: executing program 4 (id=2605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x800, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x64}}, 0x0) 872.434392ms ago: executing program 1 (id=2606): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@broadcast, @broadcast]}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000", @ANYRES32=r5], 0x68}}, 0x0) 793.794571ms ago: executing program 2 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r4 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r4, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000b00)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x0) 695.702467ms ago: executing program 4 (id=2608): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom$inet6(r0, &(0x7f00000003c0)=""/125, 0x7d, 0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000480)}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @private0, 0x2}, 0x1c, 0x0}}], 0x2, 0x4c000) 586.650485ms ago: executing program 1 (id=2609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x1b2, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "7d9f75", 0x17c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, {[@srh={0x2b, 0x4, 0x4, 0x2, 0x8, 0x0, 0xc, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x2f, 0xe, 0x1, 0xf, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}]}, @dstopts={0x3c, 0xa, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x639b}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0xf8, 0x63, [0x2, 0xfffffffffffffffc, 0x8]}}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x112}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3a, 0x0, 0x8, 0x1, 0x0, 0x12, 0x65}, @srh={0x1d, 0x0, 0x4, 0x0, 0x73, 0x28, 0xff}], {0x4e21, 0x4e23, 0x74, 0x0, @wg=@data={0x4, 0x81, 0x2ad, "4a05992a9056b9e780f15efdf9adb9a7cf69d4b467bc7266c5eead5f8c7191aed02b7ee45fe00bc5e63bf529c773721077705117dd8ca3204106f101526c1536fef9e3755507d09f2a041fac5d3576aba93b29d6b9e5016a97650051"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 584.691837ms ago: executing program 0 (id=2610): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c01000019000100b86c1d3ec9511e0000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a8934809fcf3fd63e16745f7721b7f320e05acefaa9d628ccb20c9ba1249319306b238ed0423a8bf28f0e7ddd538144b8a578c97690472b013624d230a40ad955", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000002000000fe80000000000000000000000000000c000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) r8 = socket$netlink(0x10, 0x3, 0x6) writev(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) unshare(0x22020400) r9 = socket$alg(0x26, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4008, r9}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r5, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000002c0)={0xc8, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0xb}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 464.071535ms ago: executing program 4 (id=2611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000a8a100000000000007010000f8ffe8ffb702000008000000b7030000000000838500000071009f400400009500000000000000304e72289319dea25a95f7755d379f0c4529ba97f0a1e4e99c5cf74856576dd6e6d7ae6e44b3adc0a01fce84d52636b5de40ba644d8c181502aee10df4305ff27d95c4d10180000000000000585a3f57c1df2a240a444e7b693ebee7e282a750117c99824391a2d6e10bcba854bcb1a92c9622e4d61722fd6b77d5ff4944d4915cb519514d09d4875e0428a44a26a72228c2f005b79f9b21bf027279d4ad428628796a71055fc5ee1f8c57c89ecc89fbcfe42b81bfcd3d0b8adbd7b87b9062be35c2160d9cb2d2f8221e7da74700"/309], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x2) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x800) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00000002c0)="889c29d5efbaf3a2d9e01a4ae26efc751f827c32148a344dddd5539d7ba2578f20e4d76113579dea47d5fca1", 0x2c) shutdown(r1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}}, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x7}}, 0x14}}, 0x40000) 463.726631ms ago: executing program 2 (id=2612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x2000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r7, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) sendmsg$802154_dgram(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="aac6be871dce2eed972d42d881527588f18d37f46ab7a1b4fd76884ea282d46de5c480c0998752db22f01a6527b389aa3d9283ea8bb1e03d1e3a28015a5196e65d529563d1e9015d427f059f5be5896b4e010a95fe8a804985412c", 0x5b}, 0x1, 0x0, 0x0, 0x1000}, 0x140) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x88, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x48, 0xa9, @random="3689f4e1521627560e4293ca93f0c4674df5fc6240797ec463d6d20222752c804ab0d17654727da33f47dfe97b76d3d3058553d4b64890c63a400ecc8e4591de34f55adc"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20004814) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xb}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) 425.933365ms ago: executing program 1 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x40}}, 0x24010855) bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={r8, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 357.43452ms ago: executing program 2 (id=2614): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x1, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x20, 0x9, 0x4}}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0x3, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000180)={0x0, 0xfffffffa}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000002c0)={r0, 0xb, 0x6, 0x7}) sendmsg$nl_route_sched(r5, &(0x7f0000000d80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000340)=@deltfilter={0x9d4, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {0x10, 0x2}, {0x2, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @filter_kind_options=@f_flow={{0x9}, {0x440, 0x2, [@TCA_FLOW_POLICE={0x43c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x9, 0x4, 0xffff8a23, 0x800000, 0x6, 0x92, 0x85, 0xb366, 0x0, 0x6, 0x3, 0x22, 0x2, 0xff, 0x2, 0x8c14, 0x8, 0x2, 0x6, 0x10, 0x2, 0x2, 0x7fffffff, 0x0, 0x2, 0x40, 0x551, 0x4, 0x1, 0xffffffff, 0x5, 0x4, 0xa7, 0x0, 0x3, 0x100, 0xa0, 0x1, 0x8, 0x0, 0x1, 0xf1, 0x1, 0x76, 0x6, 0xfffffffc, 0x6, 0x7fffffff, 0x9, 0x7, 0x3a6f0898, 0x5, 0x3, 0x2, 0x4, 0x6, 0x4, 0x6000000, 0x3, 0x2, 0x6, 0x96a, 0xffff, 0x9, 0xa, 0xe072, 0xffffffff, 0x0, 0x9, 0x1ff, 0x6, 0x4, 0x0, 0x9, 0xf, 0x10000, 0x7, 0x8, 0xfffffffc, 0x351, 0x80000000, 0x51a, 0x1, 0x200, 0x9, 0x7ff, 0x5, 0x3, 0x1, 0xa, 0x4001, 0x1ff, 0xffffffff, 0x8, 0x80, 0x3, 0x10000, 0x5, 0x100, 0xfffffc7a, 0x9, 0x3, 0x6, 0x6, 0x9, 0x4, 0x9, 0x1, 0xffffffff, 0x7f, 0xfffffff7, 0x6, 0x9, 0x8001, 0xf, 0x7, 0x1ff, 0x3, 0x6, 0x2, 0x533, 0x3, 0x1, 0x6, 0x9, 0x9, 0x7f, 0xd, 0x2000000, 0x0, 0x401, 0xb, 0x3, 0x0, 0x8, 0x9b, 0x400, 0xfffffffc, 0x8, 0x2, 0xb, 0x4, 0x7ff, 0x1, 0x1, 0xd3, 0x93, 0x61, 0xfffff837, 0x6, 0xfffff802, 0x10, 0x10000, 0x340000, 0xfffffffa, 0xd, 0x3020, 0x0, 0xe, 0xf, 0xfffffffd, 0x2, 0x6, 0xf0a, 0x5, 0x1, 0xb2bc, 0xfffffb2d, 0x2ed2, 0x4, 0x5, 0x10000, 0x5, 0x0, 0x2, 0xaf1, 0x4, 0x101, 0x7f, 0x7, 0x2, 0xff, 0x0, 0x7, 0x8, 0x3, 0x7, 0x8, 0x5, 0x5, 0x2, 0x47, 0x5a9d, 0x9, 0x2, 0x80, 0x80000000, 0x2, 0x71, 0x0, 0xc0, 0x26, 0x3, 0x0, 0x5, 0x10000, 0xffff, 0x1, 0xad5, 0x5, 0x1, 0x4, 0x5acd, 0x9, 0xcdf2, 0x6, 0x8, 0x8000, 0x388, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0x200, 0x8000, 0x1, 0x5, 0xffff, 0xf, 0xa07, 0x80000001, 0x80000000, 0x1ff, 0xd33, 0x9674, 0x7fff, 0x20000000, 0x1, 0x5ef, 0x5, 0x4, 0x6, 0x0, 0x6, 0xfff, 0xfffffffe, 0xffff0001, 0x10, 0x6, 0xff, 0xb, 0x7, 0xfffffff9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3dac}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfc31}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @filter_kind_options=@f_matchall={{0xd}, {0x524, 0x2, [@TCA_MATCHALL_ACT={0x240, 0x2, [@m_vlan={0x144, 0xb, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7000000, 0x2, 0x20000000, 0x400, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb77}]}, {0xdb, 0x6, "16b4958232de1d4cab441f985bc8bb45e57c8a1cd1c19c5a671ad73de1af8c1f23b4851ed324b2db4b5a78297f20f21969052049266947228e6b5f658a274a46115c8b39d27b2f5ab5a33eb05b4c136f71ce4d3546e574cbbccd998e152e31db3f095bd55de19bf5a8129ef442a6fc3d82225c0bb828844e34de1e454350b55a1826fa40c2cdd6abfff4e718518c1f10e2d777140c6d0ce653096f4713c847d50ffc6ebce7116a294bda676b42da935e65b9254235d1192e463a19aa46002f76bb7bf765c96efce40211a964695e8cc608f780cace88f1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xf8, 0x3, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6b5, 0x5}}]}, {0xbe, 0x6, "4bfc60067335d95dba331b5a51ffc844a9eb7260566d5a835637c1569f3219f7ceb3789e1eb6cec51dc5699e0eeda3556c9c54bac03fde268d3c47e4b4d3207a7a9abb0d2d940b091260edf2d08e76d31d715ab64a44213001b77fe298f65ebde759e053f7bd8492ccf06735bfec6baaa835ff6a890005fec27260fcfc8c1c0cf3fc34fc0f666417408c794d6ae503ab7adceac6108aba57f169ecdcd92de9f9db296402db4490a5b34499948aca050429050a1f87a4f7c92a30"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x2d0, 0x2, [@m_csum={0x1b8, 0x10, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x80000000, 0x4, 0x4}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xc, 0x2, 0x3, 0x6}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x1, 0x86, 0x4}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0xfffffff3, 0x6, 0x1, 0x6bc4201b}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0xffffffffffffffff, 0x6, 0x9f84}, 0x1a}}]}, {0x100, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x114, 0x2, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x7, 0x0, 0xffffffff, 0x2}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0xc0, 0x6, "e39e1d6160766bc4fd20e66c549daca5def7c559141d45e9c971f26c22587c5911ffaf854019dbecea0242f0b18f3ada8fccc9c03ac49d8a70a9a284fd2e9620392510424e615018480fd0f2beebbea568585fde04854cfdb3fe049a9c0f4ece2e9fdf4d81ed6a39e8301af66872bba66aee8e6a3d3166228b548c683cd74bb8cf97b66c27bdaef6dcfbc9fabc47afda237031138eff64e1b392da9191cab0b397b03b2ab3dfd7a40416dc0455a4b8ba824adacfb167ab9311b5285c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf7}}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000dc0)={r4, 0x2c, "6e0fb02a05cf3fec65be447719cec719f756f62ce46e01b45d259f57d670df5ae4aad83de54410b3681cc1fe"}, &(0x7f0000000e00)=0x34) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000e40)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000e80)={'NETMAP\x00'}, &(0x7f0000000ec0)=0x1e) r7 = accept$netrom(r5, &(0x7f0000000f00)={{0x3, @netrom}, [@rose, @remote, @bcast, @remote, @netrom, @remote, @rose, @rose]}, &(0x7f0000000f80)=0x48) recvmsg(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000fc0)=""/173, 0xad}, {&(0x7f0000001080)=""/157, 0x9d}, {&(0x7f0000001140)=""/107, 0x6b}], 0x3}, 0x40016020) r8 = accept(r0, &(0x7f0000001240)=@isdn, &(0x7f00000012c0)=0x80) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000001300)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="ca1f1a136d0f6d293a16602a1e9df12a578c43cbde9d14987c4fcea1b0d272fa8c3755af0b5e8b64039371ab4c85e10bf76fc8c2c6aae29c8b90708aa5670dea4514bc326b5718f75ec24de5b6f381a2a8ca99930d86acd50167bcdc38740ff939a9880da0b76fe002686643265f164cec483fc7bdc9ee8c8999e2e41117b14041b7e7ce1e9b4a3b2d1a56389e058bb6bfa764fe8ad6", 0x96}, {&(0x7f0000002400)="5760cb2381af2ac261670680f541a2db50ade86a04cdc8ae2d5397f9e36deb0930a04ec6a772fae938df28b4bbfd9671732b37b0c7ae233290fc520c96da11405c216758b1608e54523e0a42f5d3b086ffda30908371", 0x56}, {&(0x7f0000002480)="675a03fdff5b3f1a33e853de8c002a385e93b663b1d8e5fa8aa26c9de88f82352773f24d980b3dde38a49c5ea42a6e172282ca0a13eb5213daf7c5c6", 0x3c}], 0x4}}], 0x1, 0x4000840) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000002540)={{0x21, @dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x3, 'fo\x00', 0x14, 0xffff0000, 0x5d}, {@broadcast, 0x4e23, 0x4, 0x8405, 0xcfd, 0x40}}, 0x44) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000025c0)={r4}, &(0x7f0000002600)=0x8) r9 = accept4$vsock_stream(r8, &(0x7f0000002640)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x140000) bind$vsock_stream(r9, &(0x7f0000002680)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000026c0)=0x3, 0x4) openat$cgroup_devices(r5, &(0x7f0000002700)='devices.allow\x00', 0x2, 0x0) r10 = accept4(r5, &(0x7f0000002740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000027c0)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f0000002800)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000028c0), 0x8) connect$vsock_stream(r11, &(0x7f0000002900)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$tipc(r8, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002940)="5fdac48697aa05748f755880f0c67ebafc3a3ce833510c1d362ef589fa01ba319e90baa4c9183ec827c7f2b02e32c8fbead5d89d87ff46a237d85fd41cc571327bb72d58143c09bd0d64afef8ef2842a5f7acff6e96f583a0424c2e7ec477c184422a24a2cd44e5eeae16118f9acb9376947f1ffd3baccbd1bad7cbd216d794dec918cc3d3595fec91ab57894aa10a1927dfd25467916b6afc27c8568430e6aff70e444843a50bf0dba5d418891ce39682173e928dd88a3a2c17ae02eb4e7dbf27b81ee0c21c91396c1f4372dedfb8f22fb2a002b1775c0909bb95dbb08fb567eb5b38f8dae7541d", 0xe8}], 0x1, &(0x7f0000002a80)="1d2ee43b41823336653f11acf22e1c04f2e2112755950ec40beea9a4c59e0ab3fe23a18f5c52275d92d4883d192bd3fcaa5edda13cc6454fd38665e615fcf4368e2b077e161a0e73a631369ec1a01b4f2581ca476ff12d7abd308663a2afe2011cea11dee794269d4628a05f779c2a1de00623e0c93315a4b33904d65d1c24376ac73602735e86b8f58250c9cab9049c712dd3c865243265b50668ffb5e1", 0x9e, 0x40}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002bc0), r11) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000002fc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f80)={&(0x7f0000002c00)={0x364, r12, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x7fff, 0x6, 0x2, 0x6b3b, 0x3, 0xee3]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x48, 0x5, 0x6, 0x16, 0x16, 0xc, 0x43, 0x5, 0x9, 0x30, 0xb, 0x3, 0x3, 0x9, 0x12, 0x16, 0x36, 0x53, 0xb, 0x60, 0x4, 0x1, 0x36, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0x8, 0x5, 0x4, 0x1, 0xc, 0xfffe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0xfffc, 0x3, 0x28, 0x2, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x6, 0x7, 0x0, 0x2e75, 0x7ff, 0x5, 0xbb70]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1}, {0x5, 0x9}, {0x2, 0x9}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0x7}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x9}, {0x1, 0x5}, {0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x6, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x6}, {0x4, 0x9}, {0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x1}, {0x2, 0x9}, {}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x9}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x4}, {0x3, 0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x1b]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x16, 0x2, 0x18, 0x30, 0x6, 0x24, 0x1b, 0x12, 0x2, 0x6, 0x6c, 0x5, 0x4c, 0x36, 0x9, 0x9, 0xc]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x0, 0x12, 0xc, 0xb, 0x12, 0x6, 0x3, 0xc, 0x3b, 0x6c, 0x48, 0x2, 0x19, 0x2b, 0x30, 0x1b, 0x16, 0x4, 0x3, 0x26, 0x3f]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xebe3, 0x6, 0x1, 0x3, 0x1, 0xff, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x2}, {0x6, 0x5}, {0x5, 0x6}, {0x3, 0xa}, {0x7, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0xff, 0x100, 0x7fff, 0x200, 0xa6d9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x3}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x1}, {0x6}, {0x6, 0x8}, {0x4, 0x9}, {0x4, 0x2}, {0x1}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0x5}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x3, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x910, 0x10, 0x5, 0x9, 0x8, 0x844f, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfffd, 0x8, 0x3, 0x0, 0x81, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x1}, {0x3}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x4, 0x1}, {0x2, 0x3}, {}, {0x3, 0x8}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x4}, {0x7}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x2}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x2, 0x4}, {0x6, 0x6}, {0x6, 0x4}, {0x5, 0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x1}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0x3}, {0x4}, {0x6, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x2, 0x5, 0x5, 0x9, 0x9661, 0x8]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x7}, {0x5, 0x2}, {0x1, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x7}, {0x6}, {0x0, 0xa}, {0x7}, {0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x6}, {0x1}, {0x5, 0xa}, {0x2, 0x3}, {}, {0x4, 0x5}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0xa}, {0x3, 0x4}]}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x364}, 0x1, 0x0, 0x0, 0x4880}, 0x5c4a099f463764d1) 198.788159ms ago: executing program 2 (id=2615): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0x4, 0x12}]}, 0x14}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 187.942747ms ago: executing program 3 (id=2616): accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x80, 0x800) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x1, r4, 0x200002}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7800, 0x7, 0x296ab12b, 0x5, {{0xd, 0x4, 0x1, 0x4, 0x34, 0x64, 0x0, 0x29, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x1f, 0xf5, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r6}) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0xc21, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, 0x503}, [@IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c000100", @ANYRES32=r9, @ANYBLOB="0800038000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r13, @ANYRES32=r13], 0x44}}, 0x2000800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r15, 0x400000) r16 = socket(0x400000000010, 0x3, 0x0) (async) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r18, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf250c00000090000180140002007767300000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000300000008000100", @ANYRES32=r7, @ANYBLOB="14000200697036746e6c300000000000000000001400020077673100000000000000000000000000140002006e657470636930000000000000000000140002007767310000000000000000000000000008000300010000001c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000380040001000c000380040001000400010050000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r18, @ANYBLOB="080003000200000014000200766972745f7769666930000000000000140002007369743000000000000000000000000070000180080003000100000008000300010000001400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14008000000000000000000000000000000000000800030003003b95c2a4030002000000140200006272696467655f736c6176655f3100000800030001000000"], 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 0s ago: executing program 3 (id=2617): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0x1, 0x2, 0x7f, 0x7}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000a300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) kernel console output (not intermixed with test programs): pressed [ 142.427259][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.350'. [ 142.477472][ T7411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.672289][ T7411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.745315][ T7437] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 142.810188][ T7411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.992359][ T42] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.064932][ T42] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.081737][ T42] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.132675][ T42] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.136935][ T7485] netlink: del zone limit has 4 unknown bytes [ 144.272018][ T7490] tipc: Enabled bearer , priority 0 [ 144.289228][ T7490] syzkaller0: entered promiscuous mode [ 144.305332][ T7490] syzkaller0: entered allmulticast mode [ 144.425544][ T7490] tipc: Resetting bearer [ 144.467449][ T7487] tipc: Resetting bearer [ 144.504821][ T7487] tipc: Disabling bearer [ 144.574253][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 144.615649][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 144.946780][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.966330][ T7519] batadv_slave_0: entered promiscuous mode [ 145.183791][ T7524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.222276][ T7526] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 145.279607][ T42] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.459178][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.910300][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 145.914846][ T7552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.944869][ T7552] macvlan2: entered promiscuous mode [ 145.974744][ T7552] macvlan2: entered allmulticast mode [ 145.992743][ T7559] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 145.997192][ T7552] veth0: entered promiscuous mode [ 146.010148][ T7552] veth0: entered allmulticast mode [ 146.020098][ T7552] bond1: (slave macvlan2): making interface the new active one [ 146.029639][ T7552] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 146.038931][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 146.229179][ T7570] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 146.659510][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 146.717353][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 146.728871][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 146.739717][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 147.054718][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 147.099379][ T7616] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 147.295856][ T7622] bridge_slave_0: left allmulticast mode [ 147.310334][ T7622] bridge_slave_0: left promiscuous mode [ 147.319629][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.333951][ T7622] bridge_slave_1: left allmulticast mode [ 147.341284][ T7622] bridge_slave_1: left promiscuous mode [ 147.347249][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.360803][ T7622] bond0: (slave bond_slave_0): Releasing backup interface [ 147.374038][ T7622] bond0: (slave bond_slave_1): Releasing backup interface [ 147.419624][ T7622] team0: Port device team_slave_0 removed [ 147.430676][ T7622] team0: Port device team_slave_1 removed [ 147.437323][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.466572][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.488247][ T7622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.588275][ T7623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.267987][ T7665] netlink: 'syz.3.409': attribute type 15 has an invalid length. [ 148.308567][ T7666] __nla_validate_parse: 2 callbacks suppressed [ 148.308589][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 148.356007][ T7666] syz_tun: entered promiscuous mode [ 148.379756][ T7666] macvtap1: entered promiscuous mode [ 148.416015][ T7666] macvtap1: entered allmulticast mode [ 148.429093][ T7666] syz_tun: entered allmulticast mode [ 148.467117][ T7658] syz_tun: left allmulticast mode [ 148.488337][ T7658] syz_tun: left promiscuous mode [ 148.544907][ T7672] tipc: Enabled bearer , priority 0 [ 148.558535][ T7672] sit0: entered promiscuous mode [ 148.580612][ T7672] sit0: entered allmulticast mode [ 149.521398][ T7672] tipc: Disabling bearer [ 149.557333][ T7694] bond1: option mode: unable to set because the bond device has slaves [ 150.439857][ T7697] infiniband syz1: set down [ 150.450026][ T7697] infiniband syz1: added syz_tun [ 150.480139][ T7697] syz1: rxe_create_cq: returned err = -12 [ 150.497396][ T7697] infiniband syz1: Couldn't create ib_mad CQ [ 150.545709][ T7697] infiniband syz1: Couldn't open port 1 [ 150.645319][ T7732] raw_sendmsg: syz.4.425 forgot to set AF_INET. Fix it! [ 150.702550][ T7697] RDS/IB: syz1: added [ 150.718150][ T7697] smc: adding ib device syz1 with port count 1 [ 150.741218][ T7697] smc: ib device syz1 port 1 has no pnetid [ 151.028924][ T7744] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 151.142968][ T7757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.430'. [ 151.556254][ T7770] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 151.564832][ T7770] netlink: 232 bytes leftover after parsing attributes in process `syz.0.433'. [ 151.579117][ T7770] netlink: 332 bytes leftover after parsing attributes in process `syz.0.433'. [ 151.589486][ T7770] netlink: 104 bytes leftover after parsing attributes in process `syz.0.433'. [ 151.601447][ T7770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'. [ 151.664452][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.685940][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.707330][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.721370][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.889127][ T7786] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.436'. [ 152.306486][ T7806] netlink: 96 bytes leftover after parsing attributes in process `syz.0.443'. [ 152.317021][ T7805] netlink: 96 bytes leftover after parsing attributes in process `syz.0.443'. [ 153.781471][ T7761] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.805630][ T7761] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.856610][ T7831] tipc: Started in network mode [ 153.865398][ T7831] tipc: Node identity 9a007ea5a545, cluster identity 4711 [ 153.882782][ T7831] tipc: Enabled bearer , priority 0 [ 153.963381][ T7831] syzkaller0: entered promiscuous mode [ 153.970989][ T7831] syzkaller0: entered allmulticast mode [ 153.997424][ T7831] tipc: Resetting bearer [ 154.005649][ T7830] tipc: Resetting bearer [ 154.019655][ T7830] tipc: Disabling bearer [ 154.437857][ T7844] can: request_module (can-proto-0) failed. [ 154.565742][ T7849] sit1: entered promiscuous mode [ 154.593515][ T7858] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20000 [ 154.835752][ T7863] tipc: Enabled bearer , priority 0 [ 155.098623][ T7863] syzkaller0: entered promiscuous mode [ 155.104621][ T7863] syzkaller0: entered allmulticast mode [ 155.111265][ T7863] tipc: Resetting bearer [ 155.157502][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.461'. [ 155.173242][ T7861] tipc: Resetting bearer [ 155.186304][ T7880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.459'. [ 155.903065][ T5898] tipc: Node number set to 1212978739 [ 156.569208][ T7861] tipc: Disabling bearer [ 156.587732][ T7879] ip6gre1: entered allmulticast mode [ 156.770568][ T7901] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 156.808068][ T7901] team0: Failed to send options change via netlink (err -105) [ 156.826103][ T7901] team0: Port device dummy0 added [ 156.879375][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 157.274474][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 157.294769][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 157.786706][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'. [ 157.808662][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'. [ 157.820202][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'. [ 157.840975][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'. [ 157.861241][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'. [ 157.893866][ T30] audit: type=1800 audit(1759874961.963:4): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.476" name="memory.events" dev="tmpfs" ino=436 res=0 errno=0 [ 158.536792][ T7973] netlink: 'syz.3.482': attribute type 21 has an invalid length. [ 158.690624][ T7973] tipc: Enabled bearer , priority 0 [ 158.796727][ T7974] syzkaller0: entered promiscuous mode [ 158.802728][ T7974] syzkaller0: entered allmulticast mode [ 158.810501][ T7974] tipc: Resetting bearer [ 158.883116][ T6099] tipc: Resetting bearer [ 158.932340][ T7972] tipc: Resetting bearer [ 159.791509][ T5901] tipc: Node number set to 1061519013 [ 160.275947][ T7972] tipc: Disabling bearer [ 160.440825][ T7987] syz_tun: entered allmulticast mode [ 160.460110][ T7987] dvmrp8: entered allmulticast mode [ 160.559369][ T7992] netlink: 'syz.3.487': attribute type 23 has an invalid length. [ 161.074151][ T7999] bond0: option resend_igmp: invalid value (1793847487) [ 161.090102][ T8000] x_tables: duplicate underflow at hook 2 [ 161.092842][ T7999] bond0: option resend_igmp: allowed values 0 - 255 [ 161.285724][ T7986] syz_tun: left allmulticast mode [ 161.302811][ T7986] dvmrp8: left allmulticast mode [ 161.409918][ T8006] __nla_validate_parse: 167 callbacks suppressed [ 161.409940][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 161.443783][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 161.487245][ T7985] tipc: Enabled bearer , priority 0 [ 161.495464][ T7985] syzkaller0: entered promiscuous mode [ 161.501101][ T7985] syzkaller0: entered allmulticast mode [ 161.543622][ T7985] tipc: Resetting bearer [ 162.059854][ T7984] tipc: Resetting bearer [ 162.128597][ T7984] tipc: Disabling bearer [ 162.538196][ T8022] netlink: 100 bytes leftover after parsing attributes in process `syz.2.495'. [ 162.582358][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 162.600198][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 162.613292][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'. [ 162.623410][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 162.636315][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'. [ 162.647509][ T8027] netlink: 'syz.1.498': attribute type 6 has an invalid length. [ 162.790414][ T8022] veth3: entered promiscuous mode [ 163.598699][ T8047] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.503'. [ 163.629262][ T8044] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.503'. [ 163.959948][ T8059] netlink: 'syz.4.508': attribute type 13 has an invalid length. [ 165.213365][ T8121] tipc: Started in network mode [ 165.227945][ T8121] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 165.236931][ T8121] tipc: Enabling of bearer rejected, failed to enable media [ 165.348496][ T8128] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 165.797167][ T8153] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 165.822419][ T8150] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.443052][ T8186] __nla_validate_parse: 9 callbacks suppressed [ 166.443075][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 166.781190][ T8182] syz.3.541 (8182) used greatest stack depth: 15488 bytes left [ 166.870081][ T8202] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 166.930896][ T8198] nbd0: detected capacity change from 0 to 127 [ 166.942342][ T8198] tipc: Enabling of bearer rejected, failed to enable media [ 166.992262][ T5826] block nbd0: Receive control failed (result -32) [ 167.732141][ T8223] netlink: 80 bytes leftover after parsing attributes in process `syz.3.552'. [ 167.763034][ T8223] vlan0: entered promiscuous mode [ 167.965684][ T8233] geneve1: mtu less than device minimum [ 168.024995][ T8236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.557'. [ 168.169824][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 168.275343][ T8236] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 168.360123][ T8236] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.056195][ T8266] netlink: 84 bytes leftover after parsing attributes in process `syz.0.563'. [ 169.118341][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 169.321493][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.563'. [ 169.511393][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.519470][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.559865][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 170.310510][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.001271][ T8251] veth0: left allmulticast mode [ 171.152188][ T6103] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.203756][ T6103] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.260152][ T6103] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.291878][ T6103] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.956985][ T8305] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 172.460251][ T8308] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.769437][ T8320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.575'. [ 173.204088][ T8333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.578'. [ 173.342462][ T8337] netlink: 'syz.4.579': attribute type 11 has an invalid length. [ 174.093272][ T8354] netlink: 'syz.0.584': attribute type 11 has an invalid length. [ 174.268620][ T8370] netlink: 'syz.1.588': attribute type 16 has an invalid length. [ 174.279225][ T8370] netlink: 'syz.1.588': attribute type 17 has an invalid length. [ 174.295318][ T8371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 174.409331][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.431698][ T8370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.537267][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 174.588934][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 174.812401][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'. [ 175.001521][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 175.012838][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.593'. [ 175.243927][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.597'. [ 175.454753][ T8401] team0 (unregistering): Port device team_slave_0 removed [ 175.464364][ T8401] team0 (unregistering): Port device team_slave_1 removed [ 175.886850][ T8440] netlink: 3 bytes leftover after parsing attributes in process `syz.1.605'. [ 175.950054][ T8440] 0ªX¹¦À: renamed from caif0 [ 176.007981][ T8440] 0ªX¹¦À: entered allmulticast mode [ 176.013419][ T8440] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 176.216996][ T8448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 176.927572][ T8463] tipc: Enabled bearer , priority 0 [ 176.949650][ T8463] tipc: Resetting bearer [ 177.055421][ T8462] tipc: Disabling bearer [ 178.246837][ T8519] netlink: 'syz.3.622': attribute type 9 has an invalid length. [ 178.446224][ T8521] __nla_validate_parse: 1 callbacks suppressed [ 178.446250][ T8521] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.623'. [ 178.542232][ T8522] can: request_module (can-proto-0) failed. [ 178.802338][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 178.835135][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.627'. [ 178.901312][ T8539] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 178.995072][ T8539] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.188360][ T8586] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.640'. [ 180.389149][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 180.651711][ T8572] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 180.821527][ T8615] tc_dump_action: action bad kind [ 180.848982][ T8615] trusted_key: syz.1.651 sent an empty control message without MSG_MORE. [ 180.911776][ T8619] geneve2: entered promiscuous mode [ 180.970740][ T5117] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.992708][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.652'. [ 181.124032][ T5117] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.133617][ T5117] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.179920][ T5117] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.952566][ T8649] netlink: 104 bytes leftover after parsing attributes in process `syz.3.661'. [ 182.008930][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.294008][ T8664] netlink: 14 bytes leftover after parsing attributes in process `syz.2.665'. [ 182.566444][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 182.578324][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 182.799225][ T8689] Bluetooth: MGMT ver 1.23 [ 183.116753][ T8694] wg1: entered promiscuous mode [ 183.131060][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 183.139128][ T8694] wg1: entered allmulticast mode [ 183.193265][ T8696] vlan2: entered promiscuous mode [ 183.209656][ T8696] dummy0: entered promiscuous mode [ 183.677888][ T8701] netlink: 'syz.4.678': attribute type 1 has an invalid length. [ 183.697313][ T8702] __nla_validate_parse: 2 callbacks suppressed [ 183.697333][ T8702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.678'. [ 183.715861][ T8701] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 183.878202][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 183.906686][ T8715] x_tables: duplicate underflow at hook 2 [ 183.915987][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 183.990684][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'. [ 184.009016][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 184.167375][ T8726] bond3: entered promiscuous mode [ 184.183855][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 184.222152][ T8726] bond3: entered allmulticast mode [ 184.236439][ T8726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.682794][ T8745] bond0: option packets_per_slave: invalid value (16779898) [ 184.690485][ T8745] bond0: option packets_per_slave: allowed values 0 - 65535 [ 185.745932][ T8760] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 185.874837][ T8767] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 185.945346][ T8764] bond2: (slave gretap1): making interface the new active one [ 185.954644][ T8764] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 185.983251][ T8767] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 186.005438][ T8767] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 186.022026][ T8767] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 186.032003][ T8767] team0: Failed to send options change via netlink (err -105) [ 186.043273][ T8767] team0: Port device netdevsim0 added [ 186.501071][ T8788] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 186.540405][ T8788] netlink: 'syz.1.702': attribute type 4 has an invalid length. [ 186.596133][ T8788] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.702'. [ 187.830340][ T8834] lo: entered promiscuous mode [ 187.844097][ T8834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.092576][ T8843] tipc: Started in network mode [ 188.108534][ T8843] tipc: Node identity ac14140f, cluster identity 4711 [ 188.116225][ T8843] tipc: New replicast peer: 255.255.255.255 [ 188.127526][ T8843] tipc: Enabled bearer , priority 10 [ 188.167957][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.169289][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 188.638848][ T8856] netlink: 40 bytes leftover after parsing attributes in process `syz.2.719'. [ 188.672898][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.719'. [ 188.689349][ T8843] siw: device registration error -23 [ 188.707920][ T8856] netlink: 'syz.2.719': attribute type 4 has an invalid length. [ 188.790912][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 188.829164][ T8859] 8021q: VLANs not supported on vcan0 [ 188.896201][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 188.922312][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.027165][ T8861] bridge_slave_1 (unregistering): left allmulticast mode [ 189.038279][ T8861] bridge_slave_1 (unregistering): left promiscuous mode [ 189.046487][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.258090][ T10] tipc: Node number set to 2886997007 [ 190.123329][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.728'. [ 190.133166][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.728'. [ 190.154752][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 190.356681][ T8876] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 191.137107][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 191.229608][ T8912] netlink: 204 bytes leftover after parsing attributes in process `syz.0.733'. [ 191.257976][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 191.335548][ T8915] ipvlan2: entered promiscuous mode [ 191.370411][ T8918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'. [ 191.848079][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 192.218122][ T8934] nbd: must specify a size in bytes for the device [ 192.417283][ T8942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.742'. [ 194.025563][ T9018] netlink: 'syz.0.762': attribute type 30 has an invalid length. [ 194.363388][ T9032] tipc: Enabling of bearer rejected, failed to enable media [ 194.492811][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.500182][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.004019][ T9057] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.769'. [ 195.015755][ T9054] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.769'. [ 195.068369][ T9056] tipc: Enabled bearer , priority 0 [ 195.195664][ T9056] syzkaller0: entered promiscuous mode [ 195.201408][ T9056] syzkaller0: entered allmulticast mode [ 195.208647][ T9056] tipc: Resetting bearer [ 195.247563][ T9055] tipc: Resetting bearer [ 195.260456][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 195.466543][ T9078] netlink: 2 bytes leftover after parsing attributes in process `syz.1.775'. [ 196.087915][ T3090] tipc: Node number set to 1029478061 [ 196.825249][ T9055] tipc: Disabling bearer [ 196.864167][ T9085] netlink: 96 bytes leftover after parsing attributes in process `syz.4.776'. [ 197.455558][ T9108] sctp: [Deprecated]: syz.0.782 (pid 9108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.455558][ T9108] Use struct sctp_sack_info instead [ 197.690671][ T9116] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 197.969050][ T9124] netlink: 'syz.3.787': attribute type 6 has an invalid length. [ 198.322450][ T9135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 199.340679][ T9156] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 199.375019][ T9156] veth3: entered promiscuous mode [ 199.424858][ T9158] : renamed from veth0_to_bond (while UP) [ 199.435724][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 199.620807][ T9158] vlan2: entered allmulticast mode [ 199.626226][ T9158] veth1: entered allmulticast mode [ 200.074919][ T9181] netlink: 128 bytes leftover after parsing attributes in process `syz.2.803'. [ 200.356377][ T9194] netlink: 108 bytes leftover after parsing attributes in process `syz.1.806'. [ 200.512781][ T9193] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 200.519369][ T9197] ip6gre1: entered allmulticast mode [ 201.095475][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 201.265499][ T9220] vlan2: entered promiscuous mode [ 201.278359][ T9220] vlan2: entered allmulticast mode [ 201.294740][ T9220] hsr_slave_1: entered allmulticast mode [ 201.345893][ T9224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.816'. [ 201.395139][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 201.436846][ T5901] IPVS: starting estimator thread 0... [ 201.511034][ T9230] netlink: 'syz.1.815': attribute type 6 has an invalid length. [ 201.548410][ T9229] IPVS: using max 22 ests per chain, 52800 per kthread [ 202.266336][ T9247] tipc: Enabled bearer , priority 0 [ 202.409564][ T9247] syzkaller0: entered promiscuous mode [ 202.427171][ T9247] syzkaller0: entered allmulticast mode [ 202.450521][ T9249] tipc: Resetting bearer [ 202.567210][ T9247] ip6gre2: entered allmulticast mode [ 203.163061][ T9247] tipc: Resetting bearer [ 203.307777][ T5901] tipc: Node number set to 4278321153 [ 203.729856][ T9268] netlink: 'syz.4.824': attribute type 11 has an invalid length. [ 204.406755][ T9259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.477428][ T9247] tipc: Disabling bearer [ 206.050196][ T9300] netlink: 72 bytes leftover after parsing attributes in process `syz.4.836'. [ 206.547275][ T9327] netlink: 364 bytes leftover after parsing attributes in process `syz.4.843'. [ 206.558196][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'. [ 208.544341][ T9383] syzkaller0: entered promiscuous mode [ 208.561881][ T9383] syzkaller0: entered allmulticast mode [ 208.625038][ T9383] bond5 (unregistering): Released all slaves [ 208.936505][ T9400] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.865'. [ 208.975210][ T9400] netlink: 'syz.4.865': attribute type 10 has an invalid length. [ 208.992181][ T9400] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 209.004753][ T9411] Bluetooth: MGMT ver 1.23 [ 209.423587][ T9427] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.431434][ T9427] bridge0: port 1(bond5) entered blocking state [ 209.439256][ T9427] bridge0: port 1(bond5) entered disabled state [ 209.446606][ T9427] bond5: entered allmulticast mode [ 209.458928][ T9427] bond5: entered promiscuous mode [ 209.562376][ T9430] netlink: 256 bytes leftover after parsing attributes in process `syz.0.872'. [ 209.627168][ T9432] netlink: 256 bytes leftover after parsing attributes in process `syz.2.873'. [ 209.658613][ T9432] unsupported nlmsg_type 40 [ 209.758942][ T9436] tipc: Enabled bearer , priority 0 [ 209.866540][ T9436] syzkaller0: entered promiscuous mode [ 209.892031][ T9436] syzkaller0: entered allmulticast mode [ 209.911537][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.877'. [ 209.931143][ T9436] tipc: Resetting bearer [ 209.970165][ T9435] tipc: Resetting bearer [ 211.931151][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 211.931500][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 211.937345][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 211.943543][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.135107][ T9435] tipc: Disabling bearer [ 212.208220][ T9452] syzkaller0: entered promiscuous mode [ 212.214605][ T9452] syzkaller0: entered allmulticast mode [ 212.401081][ T9462] netlink: 348 bytes leftover after parsing attributes in process `syz.3.880'. [ 212.807002][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.884'. [ 213.935475][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.898'. [ 214.423004][ T9553] netlink: 'syz.3.904': attribute type 7 has an invalid length. [ 214.466284][ T9553] netlink: 'syz.3.904': attribute type 8 has an invalid length. [ 214.482081][ T9553] netlink: 'syz.3.904': attribute type 13 has an invalid length. [ 214.638508][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.902'. [ 214.694074][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 214.707815][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 214.824125][ T9562] dvmrp8: entered allmulticast mode [ 215.248113][ T9583] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 215.288209][ T9577] netlink: 'syz.2.909': attribute type 12 has an invalid length. [ 215.629389][ T9593] netlink: 648 bytes leftover after parsing attributes in process `syz.1.913'. [ 216.033405][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 216.154422][ T9617] netlink: 'syz.4.920': attribute type 8 has an invalid length. [ 216.179056][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.918'. [ 216.323290][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 216.469966][ T9624] netlink: 'syz.3.922': attribute type 3 has an invalid length. [ 217.076687][ T9635] bond0: (slave dummy0): Releasing backup interface [ 217.111288][ T9635] bridge_slave_0: left promiscuous mode [ 217.117241][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.138785][ T9628] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 217.140878][ T9635] bridge_slave_1: left allmulticast mode [ 217.154413][ T9635] bridge_slave_1: left promiscuous mode [ 217.155224][ T9641] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 217.161019][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.171947][ T9641] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 217.192004][ T9635] bond0: (slave bond_slave_0): Releasing backup interface [ 217.202742][ T9635] bond0: (slave bond_slave_1): Releasing backup interface [ 217.216249][ T9635] team0: Port device team_slave_0 removed [ 217.226316][ T9635] team0: Port device team_slave_1 removed [ 217.233837][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.241810][ T9635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.251694][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.259664][ T9635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.269126][ T9635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.322940][ T9628] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.344756][ T9642] tipc: Enabled bearer , priority 0 [ 217.456983][ T9640] syzkaller0: entered promiscuous mode [ 217.466302][ T9640] syzkaller0: entered allmulticast mode [ 217.596036][ T9640] tipc: Resetting bearer [ 217.629050][ T9639] tipc: Resetting bearer [ 217.718800][ T9639] tipc: Disabling bearer [ 218.617250][ T9680] __nla_validate_parse: 2 callbacks suppressed [ 218.617271][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 218.711412][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 218.750629][ T9682] bridge_slave_0: left allmulticast mode [ 218.769332][ T9682] bridge_slave_0: left promiscuous mode [ 218.775295][ T9682] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.786836][ T9693] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 219.321538][ T9700] veth1_to_bond: entered allmulticast mode [ 219.344346][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 219.344710][ T9699] tipc: Enabled bearer , priority 0 [ 219.398618][ T9700] bond0: (slave bond_slave_1): Releasing backup interface [ 219.439178][ T9700] veth1_to_bond (unregistering): left allmulticast mode [ 219.475590][ T9699] syzkaller0: entered promiscuous mode [ 219.482642][ T9699] syzkaller0: entered allmulticast mode [ 219.536264][ T9699] netlink: 224 bytes leftover after parsing attributes in process `syz.0.939'. [ 219.559593][ T9699] tipc: Can't bind to reserved service type 1 [ 219.590713][ T9713] netlink: 388 bytes leftover after parsing attributes in process `syz.1.941'. [ 219.647209][ T9699] tipc: Resetting bearer [ 219.670498][ T9698] tipc: Resetting bearer [ 219.711210][ T9698] tipc: Disabling bearer [ 219.867485][ T9724] netlink: 'syz.0.945': attribute type 10 has an invalid length. [ 219.881907][ T9724] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 220.113204][ T9727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.122958][ T9727] bond0: (slave bond2): Enslaving as an active interface with an up link [ 220.160251][ T9732] bond6: option ad_select: invalid value (34) [ 220.179207][ T9732] bond6 (unregistering): Released all slaves [ 221.787704][ T5143] block nbd2: Receive control failed (result -32) [ 222.206683][ T9776] syzkaller0: entered promiscuous mode [ 222.215073][ T9776] syzkaller0: entered allmulticast mode [ 222.348519][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 222.468244][ T9790] netlink: 48 bytes leftover after parsing attributes in process `syz.3.962'. [ 222.495733][ T9791] netlink: 2376 bytes leftover after parsing attributes in process `syz.3.962'. [ 222.985662][ T9821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.062045][ T9823] geneve2: entered promiscuous mode [ 223.082381][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 223.098668][ T6098] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.108237][ T6098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.151195][ T6098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.216463][ T6098] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.640361][ T9832] bridge0: port 1(veth0_to_bridge) entered blocking state [ 223.642003][ T9834] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 223.667844][ T9832] bridge0: port 1(veth0_to_bridge) entered disabled state [ 223.675243][ T9832] veth0_to_bridge: entered allmulticast mode [ 223.789914][ T9832] veth0_to_bridge: entered promiscuous mode [ 223.804695][ T9832] bridge0: port 1(veth0_to_bridge) entered blocking state [ 223.812251][ T9832] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 224.333608][ T9845] team0: Port device netdevsim0 removed [ 224.957277][ T9869] x_tables: duplicate underflow at hook 3 [ 225.044320][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 225.054306][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 225.129604][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 225.139569][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 226.004704][ T9904] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 226.023084][ T9904] netlink: 76 bytes leftover after parsing attributes in process `syz.2.996'. [ 226.062668][ T9904] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 226.090135][ T9904] netlink: 76 bytes leftover after parsing attributes in process `syz.2.996'. [ 226.360717][ T9918] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1001'. [ 226.378423][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 226.382242][ T9918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1001'. [ 226.508370][ T9925] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1003'. [ 226.924690][ T9908] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 228.168324][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.387531][T10012] netlink: 'syz.4.1024': attribute type 21 has an invalid length. [ 228.738159][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 228.949431][T10021] siw: device registration error -23 [ 229.226107][T10032] netlink: 'syz.3.1031': attribute type 1 has an invalid length. [ 229.498721][T10035] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.510595][T10035] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 229.576197][T10038] bond3: (slave bridge0): Enslaving as an active interface with a down link [ 229.600413][T10032] macvlan3: entered promiscuous mode [ 229.605790][T10032] macvlan3: entered allmulticast mode [ 229.621842][T10032] bond3: entered promiscuous mode [ 229.628286][T10032] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.663885][T10032] bond3: left promiscuous mode [ 230.239961][T10062] netlink: 'syz.1.1038': attribute type 13 has an invalid length. [ 230.278380][T10062] __nla_validate_parse: 4 callbacks suppressed [ 230.278401][T10062] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.1038'. [ 230.556522][T10081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.581207][T10085] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 230.671992][T10088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1045'. [ 230.781930][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1046'. [ 230.796557][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 231.891458][T10148] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.081103][T10158] xt_time: unknown flags 0xf4 [ 232.159589][T10163] netlink: 'syz.4.1069': attribute type 13 has an invalid length. [ 232.177945][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 232.356224][T10163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.376870][T10152] xt_CT: No such helper "netbios-ns" [ 232.427460][T10170] netlink: zone id is out of range [ 232.435051][T10163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.447516][T10170] netlink: zone id is out of range [ 232.469228][T10170] netlink: zone id is out of range [ 232.474411][T10170] netlink: zone id is out of range [ 232.480954][T10170] netlink: zone id is out of range [ 232.494239][T10170] netlink: zone id is out of range [ 232.513548][T10170] netlink: zone id is out of range [ 232.527085][T10170] netlink: zone id is out of range [ 232.538259][T10170] netlink: zone id is out of range [ 232.639956][T10174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1072'. [ 232.697443][T10174] tipc: Enabled bearer , priority 0 [ 232.709156][T10174] syzkaller0: entered promiscuous mode [ 232.722421][T10174] syzkaller0: entered allmulticast mode [ 232.975009][T10174] tipc: Resetting bearer [ 233.011882][T10172] tipc: Resetting bearer [ 233.039651][T10172] tipc: Disabling bearer [ 233.949965][T10222] bond3: ARP target 9.0.0.0 is already present [ 233.957700][T10222] bond3: option arp_ip_target: invalid value (9) [ 234.460885][T10222] bond3 (unregistering): Released all slaves [ 234.538634][T10237] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 235.122222][T10234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.148468][T10234] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 235.204592][T10234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.218162][T10234] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 235.236612][T10249] xt_bpf: check failed: parse error [ 235.321715][T10234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.329861][T10234] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 235.357528][T10234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.374806][T10234] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 235.414696][T10234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.436273][T10234] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 235.918091][T10259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.123914][T10267] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 236.135552][T10259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.337344][T10267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.415206][T10270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.438318][T10270] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.468772][T10270] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 236.720671][T10259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.763783][T10272] veth5: entered promiscuous mode [ 236.776167][T10272] bond3: (slave veth5): Enslaving as an active interface with a down link [ 237.036987][T10259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.137839][T10295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1098'. [ 237.310161][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.399418][ T6098] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.475942][ T6098] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.508130][T10306] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1102'. [ 237.541408][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.808766][T10313] pimreg: entered allmulticast mode [ 237.827378][T10319] pimreg: left allmulticast mode [ 238.001228][T10326] syzkaller1: entered promiscuous mode [ 238.017851][T10326] syzkaller1: entered allmulticast mode [ 238.470488][T10342] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 238.623422][T10342] bond4: entered promiscuous mode [ 238.648664][T10342] bond4: entered allmulticast mode [ 238.654356][T10342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.783265][T10351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.835021][T10351] bond5: entered promiscuous mode [ 238.846091][T10351] bond5: entered allmulticast mode [ 238.860402][T10351] bond4: (slave bond5): Enslaving as a backup interface with a down link [ 239.641072][T10395] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 239.727068][T10395] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.789075][T10399] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.797050][T10399] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.809286][T10399] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 240.146205][T10395] veth7: entered promiscuous mode [ 240.274738][T10395] bond6: (slave veth7): Enslaving as an active interface with a down link [ 240.476079][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 240.493234][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 240.836843][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1125'. [ 241.311232][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 241.320385][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 241.375795][T10452] nbd: must specify a device to reconfigure [ 241.667456][T10465] netlink: 'syz.1.1134': attribute type 76 has an invalid length. [ 242.214816][T10482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1137'. [ 242.394125][T10490] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1138'. [ 242.456755][T10490] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 242.535112][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 242.654963][T10498] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 243.523215][T10517] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 243.550488][T10520] netlink: 'syz.1.1142': attribute type 13 has an invalid length. [ 243.578195][T10519] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 243.872099][T10536] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.143291][T10547] netlink: 'syz.2.1150': attribute type 12 has an invalid length. [ 244.159487][T10547] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1150'. [ 244.169326][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 244.247524][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1153'. [ 244.350995][T10563] netlink: 'syz.0.1153': attribute type 4 has an invalid length. [ 244.393406][T10563] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1153'. [ 244.519008][T10563] .`: renamed from bond0 [ 244.571974][T10569] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 244.915491][T10589] tipc: Enabled bearer , priority 0 [ 245.031217][T10589] tipc: Disabling bearer [ 245.456487][T10601] netlink: 'syz.4.1160': attribute type 16 has an invalid length. [ 245.486927][T10601] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1160'. [ 245.549281][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 245.870609][T10619] tipc: Enabled bearer , priority 0 [ 246.032575][T10619] tipc: Disabling bearer [ 246.510370][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 247.300313][T10685] netlink: 'syz.0.1179': attribute type 4 has an invalid length. [ 247.646406][T10697] __nla_validate_parse: 5 callbacks suppressed [ 247.646428][T10697] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1182'. [ 247.663987][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1183'. [ 247.889776][T10713] netlink: 'syz.0.1187': attribute type 3 has an invalid length. [ 247.932878][T10713] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1187'. [ 247.943767][T10717] netlink: 'syz.3.1189': attribute type 276 has an invalid length. [ 247.999399][T10713] net_ratelimit: 15 callbacks suppressed [ 247.999423][T10713] wlan1: mtu less than device minimum [ 248.022312][T10713] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 248.113353][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1193'. [ 248.301076][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 248.336205][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1195'. [ 248.633875][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 248.669949][T10751] x_tables: duplicate underflow at hook 1 [ 248.816627][T10757] vlan2: entered allmulticast mode [ 248.869282][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 249.047149][T10775] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1204'. [ 250.101753][T10805] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 250.326341][T10807] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.422743][T10807] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.565797][T10807] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.643264][T10807] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.013874][T10823] team0 (unregistering): Port device team_slave_0 removed [ 252.029392][T10823] team0 (unregistering): Port device team_slave_1 removed [ 252.049014][T10823] team0 (unregistering): Port device dummy0 removed [ 252.243105][T10831] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 252.519185][T10833] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 253.620393][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 253.892386][T10877] validate_nla: 1 callbacks suppressed [ 253.892410][T10877] netlink: 'syz.0.1230': attribute type 4 has an invalid length. [ 254.515544][T10895] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 254.556983][ T10] syz1: Port: 1 Link ACTIVE [ 254.673381][T10900] netlink: 'syz.4.1237': attribute type 10 has an invalid length. [ 254.692014][T10900] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 254.701757][T10903] lo: entered promiscuous mode [ 254.714424][T10903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.719304][T10906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1238'. [ 254.785769][T10900] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.913371][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 255.333076][T10934] vlan2: entered allmulticast mode [ 255.339211][T10934] dummy0: entered allmulticast mode [ 255.669710][T10949] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 255.931934][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.941634][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.941763][T10963] sctp: [Deprecated]: syz.0.1257 (pid 10963) Use of int in max_burst socket option. [ 255.941763][T10963] Use struct sctp_assoc_value instead [ 256.109334][T10970] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 256.179589][T10976] tipc: Enabled bearer , priority 0 [ 256.218656][T10970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1260'. [ 256.303669][T10976] tipc: Disabling bearer [ 256.389785][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 256.409849][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 256.548950][T10986] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1266'. [ 256.580285][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1268'. [ 256.608032][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1268'. [ 256.609011][T10998] tipc: New replicast peer: 255.255.255.255 [ 256.634999][T10998] tipc: Enabled bearer , priority 10 [ 256.919284][T11013] veth1_virt_wifi: entered promiscuous mode [ 256.925514][T11013] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 257.087828][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 257.158162][T11019] wg1: entered promiscuous mode [ 257.173828][T11019] wg1: entered allmulticast mode [ 257.750275][T11035] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 257.909042][T11039] block nbd0: must specify backend [ 257.924885][T11039] netlink: 'syz.3.1283': attribute type 2 has an invalid length. [ 259.043041][T11067] __nla_validate_parse: 8 callbacks suppressed [ 259.043065][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 259.152199][T11067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.399654][T11079] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1293'. [ 259.419698][T11080] netlink: 'syz.3.1293': attribute type 3 has an invalid length. [ 259.628629][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1297'. [ 260.189794][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1302'. [ 260.282376][T11123] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 260.350569][T11123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.493610][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 260.802376][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 260.854433][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 260.966433][T11155] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 261.696066][T11170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'. [ 261.900409][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 261.962729][T11176] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.049347][T11184] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1324'. [ 262.182507][T11181] netlink: 'syz.3.1323': attribute type 3 has an invalid length. [ 262.229178][T11195] netlink: 'syz.4.1324': attribute type 5 has an invalid length. [ 262.745867][T11217] tipc: Enabled bearer , priority 0 [ 262.806472][T11222] syzkaller0: entered promiscuous mode [ 262.846115][T11222] syzkaller0: entered allmulticast mode [ 263.084745][T11217] tipc: Resetting bearer [ 263.123094][T11217] tipc: Disabling bearer [ 263.174838][T11231] tipc: Enabling of bearer rejected, failed to enable media [ 264.621111][T11268] __nla_validate_parse: 4 callbacks suppressed [ 264.621131][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 264.686017][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 264.716397][T11274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'. [ 264.720484][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1344'. [ 265.120495][T11284] bond5: ARP target 9.0.0.0 is already present [ 265.126729][T11284] bond5: option arp_ip_target: invalid value (9) [ 265.166466][T11284] bond5 (unregistering): Released all slaves [ 265.263990][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 265.372540][T11274] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 265.387214][T11274] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 265.414138][T11274] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1346'. [ 265.756950][T11300] veth0: entered promiscuous mode [ 265.859915][T11298] veth0: left promiscuous mode [ 266.176418][T11321] syzkaller1: entered promiscuous mode [ 266.194098][T11321] syzkaller1: entered allmulticast mode [ 266.660818][T11341] syzkaller0: entered promiscuous mode [ 266.666522][T11341] syzkaller0: entered allmulticast mode [ 267.092221][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 267.250605][T11355] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.321089][T11360] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.349255][T11367] x_tables: duplicate underflow at hook 1 [ 267.361104][T11360] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 267.407466][T11360] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 267.674055][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 267.842697][T11383] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 268.249499][T11389] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 268.784211][T11406] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 269.849398][ T5826] Bluetooth: hci3: command tx timeout [ 271.764229][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 271.819628][T11515] lo: entered allmulticast mode [ 272.668882][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 274.105542][T11575] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 274.140545][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 275.192034][T11602] geneve0: entered allmulticast mode [ 275.576851][T11618] netlink: 'syz.0.1434': attribute type 32 has an invalid length. [ 275.585951][T11618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1434'. [ 275.622189][T11617] erspan0: entered promiscuous mode [ 275.916816][T11639] IPVS: length: 209 != 24 [ 276.005137][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 276.133767][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.145643][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.152449][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.158446][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.164389][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.190649][T11648] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 276.203290][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.215333][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.223798][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.249960][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.264632][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.289775][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.297337][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.311365][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.377508][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.389660][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.410367][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.416508][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.423614][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.430085][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.461666][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.467469][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.498277][T11656] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1443'. [ 276.511031][T11656] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1443'. [ 276.538646][T11656] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1443'. [ 276.637450][T11666] netlink: 'syz.4.1446': attribute type 11 has an invalid length. [ 276.664321][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.689836][T11656] syzkaller1: entered promiscuous mode [ 276.719946][T11656] syzkaller1: entered allmulticast mode [ 276.729197][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.758938][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.795264][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.890717][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.898993][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.906742][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.936443][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.943022][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 276.949668][T11649] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 277.312085][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1451'. [ 277.556638][T11696] netlink: 'syz.4.1453': attribute type 13 has an invalid length. [ 277.583042][T11697] tipc: Failed to remove unknown binding: 66,1,1/1061519013:2047572978/2047572981 [ 277.618035][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 277.628666][T11698] tipc: Failed to remove unknown binding: 66,1,1/1061519013:2047572978/2047572981 [ 277.644898][T11697] tipc: Failed to remove unknown binding: 66,1,1/1061519013:2047572978/2047572981 [ 277.672459][T11699] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 278.014385][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 278.040920][T11706] netlink: 'syz.4.1456': attribute type 20 has an invalid length. [ 278.063797][T11706] netlink: 'syz.4.1456': attribute type 21 has an invalid length. [ 278.582863][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 278.775923][T11726] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 278.889469][T11726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.958530][T11733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.982980][T11726] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 279.008103][T11733] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.040238][T11733] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 279.579422][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 279.989732][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1469'. [ 280.293220][T11754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.979361][T11758] macvtap1: entered allmulticast mode [ 282.026734][T11758] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 282.066745][T11758] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 282.235923][T11771] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 282.681826][T11786] netlink: 'syz.3.1478': attribute type 6 has an invalid length. [ 283.079108][T11799] bond4: option downdelay: invalid value (18446744073709551615) [ 283.087119][T11799] bond4: option downdelay: allowed values 0 - 2147483647 [ 283.098599][T11799] bond4 (unregistering): Released all slaves [ 283.704734][T11824] tipc: Enabled bearer , priority 0 [ 283.731354][T11824] syzkaller0: entered promiscuous mode [ 283.748478][T11824] syzkaller0: entered allmulticast mode [ 283.789647][T11824] tipc: Resetting bearer [ 283.816638][T11821] tipc: Resetting bearer [ 283.836841][T11821] tipc: Disabling bearer [ 283.924176][T11832] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 283.938918][T11832] bond4 (unregistering): Released all slaves [ 283.983715][T11838] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 284.170942][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 284.226179][T11855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1495'. [ 284.275213][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1495'. [ 284.350534][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 284.375144][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 284.831415][T11869] tipc: Enabled bearer , priority 10 [ 284.923967][T11871] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 285.219055][T11880] netlink: 'syz.4.1504': attribute type 13 has an invalid length. [ 285.226929][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 285.311574][T11880] bond9: option fail_over_mac: invalid value (6) [ 285.322548][T11880] bond9 (unregistering): Released all slaves [ 285.392949][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 286.081314][T11915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1516'. [ 286.469654][T11926] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.493838][T11926] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.648730][T11926] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.664735][T11926] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.855744][T11937] netlink: 'syz.1.1522': attribute type 10 has an invalid length. [ 286.865921][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1522'. [ 286.892595][T11926] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.903535][T11926] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.944700][T11937] geneve0: left allmulticast mode [ 286.960742][T11937] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 287.062288][T11926] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.074435][T11926] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.455655][ T6098] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.466740][ T6098] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.494405][ T6098] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.503804][ T6098] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.543492][ T6098] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.552530][ T6098] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.590745][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.601522][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.636822][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1526'. [ 287.888632][T11960] gre2: entered promiscuous mode [ 287.893652][T11960] gre2: entered allmulticast mode [ 287.938713][T11960] sit0: left promiscuous mode [ 287.945363][T11960] sit0: left allmulticast mode [ 289.620403][T12039] netlink: 'syz.0.1552': attribute type 2 has an invalid length. [ 289.645441][T12039] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 289.682080][T12039] __nla_validate_parse: 3 callbacks suppressed [ 289.682102][T12039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1552'. [ 290.313763][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 290.335970][T12060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.478974][T12066] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 290.528816][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 290.708785][T12080] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1565'. [ 291.063894][T12099] macsec2: entered promiscuous mode [ 291.488003][T12116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1574'. [ 291.581595][T12112] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.630829][T12124] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1577'. [ 291.641693][T12124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1577'. [ 291.665269][T12124] macsec1: entered allmulticast mode [ 291.671776][T12124] vlan0: entered allmulticast mode [ 291.677066][T12124] veth0_vlan: entered allmulticast mode [ 291.689240][T12124] vlan0: left allmulticast mode [ 291.698022][T12124] veth0_vlan: left allmulticast mode [ 291.726416][T12112] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.827495][T12112] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.906713][T12112] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.296723][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.423225][ T6101] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.485540][ T6101] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.588777][T12143] batadv_slave_1: entered promiscuous mode [ 292.684812][T12143] batadv_slave_1: left promiscuous mode [ 292.691722][ T6092] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.899589][T12164] tipc: Enabled bearer , priority 0 [ 292.954802][T12169] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1588'. [ 293.096019][T12172] tipc: Resetting bearer [ 293.310621][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1593'. [ 293.402905][T12189] netlink: 'syz.4.1594': attribute type 6 has an invalid length. [ 293.804842][T12207] dvmrp1: entered allmulticast mode [ 293.818601][T12208] dvmrp1: left allmulticast mode [ 293.908163][T12212] tipc: Enabling of bearer rejected, already enabled [ 294.066970][T12215] netlink: 'syz.4.1602': attribute type 21 has an invalid length. [ 294.078311][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1602'. [ 294.166708][T12224] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 294.175676][T12223] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 294.560518][T12233] vxcan0: entered allmulticast mode [ 295.080214][T12232] lec:lec_atm_close: lec0: Shut down! [ 295.131280][T12257] __nla_validate_parse: 4 callbacks suppressed [ 295.131301][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 295.881328][T12290] netlink: 'syz.2.1622': attribute type 21 has an invalid length. [ 295.971582][T12293] ip6gre0: entered allmulticast mode [ 295.977389][T12290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1622'. [ 296.007189][T12290] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 296.180596][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 296.204706][T12306] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1626'. [ 296.263430][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1626'. [ 296.316793][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 296.854333][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1630'. [ 296.903028][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1631'. [ 296.911592][T12322] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1630'. [ 296.934243][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1630'. [ 297.120685][T12329] tipc: Enabling of bearer rejected, already enabled [ 297.307178][T12328] nbd: socks must be embedded in a SOCK_ITEM attr [ 297.335111][T12338] !: renamed from dummy0 (while UP) [ 297.642246][T12348] tipc: Enabled bearer , priority 0 [ 297.675280][T12348] syzkaller0: entered promiscuous mode [ 297.684115][T12348] syzkaller0: entered allmulticast mode [ 297.866002][T12356] tipc: Resetting bearer [ 297.896057][T12356] tipc: Disabling bearer [ 299.229658][T12406] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 299.317302][T12407] bridge_slave_0: entered promiscuous mode [ 299.390082][T12411] bond6: (slave gretap1): making interface the new active one [ 299.415559][T12411] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 299.461648][T12406] vlan2: entered allmulticast mode [ 299.474463][T12406] bond6: entered allmulticast mode [ 299.483293][T12406] gretap1: entered allmulticast mode [ 299.509495][T12406] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 299.583644][T12426] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.786227][T12433] Cannot find set identified by id 3 to match [ 299.880265][T12436] gretap2: entered promiscuous mode [ 300.440599][T12456] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.859863][T12466] "syz.2.1670" (12466) uses obsolete ecb(arc4) skcipher [ 300.883907][T12473] netlink: 'syz.0.1671': attribute type 10 has an invalid length. [ 300.945994][T12473] __nla_validate_parse: 9 callbacks suppressed [ 300.946033][T12473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1671'. [ 301.074859][T12483] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.108869][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 301.535039][T12473] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 301.645239][T12495] pim6reg: entered allmulticast mode [ 301.977187][T12512] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1681'. [ 302.204801][T12519] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 302.233649][T12519] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 302.252949][T12497] macvtap1: entered allmulticast mode [ 302.258485][T12497] veth1_vlan: entered allmulticast mode [ 302.265809][T12497] veth1_vlan: left allmulticast mode [ 302.297884][T12523] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1685'. [ 302.604115][T12537] tipc: Enabled bearer , priority 10 [ 302.750868][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 303.380791][T12557] netlink: 'syz.1.1693': attribute type 83 has an invalid length. [ 303.813099][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1697'. [ 303.921021][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 303.930741][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1697'. [ 303.935481][T12573] tipc: Enabled bearer , priority 0 [ 304.048475][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 304.058343][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1697'. [ 304.083228][T12573] syzkaller0: entered promiscuous mode [ 304.103319][T12573] syzkaller0: entered allmulticast mode [ 304.125929][ T6099] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.142184][ T6099] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.237368][ T6099] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.258169][ T6099] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.323302][T12578] tipc: Resetting bearer [ 304.347076][T12570] tipc: Resetting bearer [ 304.427002][T12570] tipc: Disabling bearer [ 304.776351][T12597] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 305.340730][T12614] tipc: Enabled bearer , priority 0 [ 305.366307][T12614] syzkaller0: entered promiscuous mode [ 305.373213][T12614] syzkaller0: entered allmulticast mode [ 305.663328][T12614] tipc: Resetting bearer [ 305.782615][T12613] tipc: Resetting bearer [ 305.799802][T12613] tipc: Disabling bearer [ 305.804292][T12628] netlink: 'syz.0.1712': attribute type 13 has an invalid length. [ 306.012479][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 306.029620][T12636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'. [ 306.063720][T12634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1724'. [ 306.111535][ T6099] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.128737][ T6099] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.145201][ T6099] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.163041][ T6099] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.175012][T12636] nbd: socks must be embedded in a SOCK_ITEM attr [ 306.383537][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 306.418707][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 306.424566][T12647] netlink: 'syz.4.1715': attribute type 13 has an invalid length. [ 306.456453][T12647] netlink: 'syz.4.1715': attribute type 17 has an invalid length. [ 306.523983][T12647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.639701][T12647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.949436][T12670] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 307.980732][T12671] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 308.006103][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'. [ 308.020071][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'. [ 308.634961][T12693] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1729'. [ 308.652506][T12688] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1729'. [ 309.400038][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 309.924731][T12723] netlink: 'syz.0.1740': attribute type 3 has an invalid length. [ 310.998783][T12749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.146645][T12749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.616923][T12759] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 311.662243][T12759] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 311.827410][T12766] __nla_validate_parse: 3 callbacks suppressed [ 311.827433][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 312.034790][T12772] Cannot find del_set index 16384 as target [ 312.477034][T12782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1753'. [ 312.723691][T12787] bond4: Unable to set down delay as MII monitoring is disabled [ 312.750722][T12787] bond4 (unregistering): Released all slaves [ 313.637129][T12807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.745807][T12823] tipc: Enabled bearer , priority 0 [ 313.856308][T12823] tipc: Disabling bearer [ 314.085290][T12839] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1770'. [ 314.104475][T12841] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1771'. [ 314.352953][T12851] geneve3: entered promiscuous mode [ 314.372280][T12853] nbd: must specify a device to reconfigure [ 315.224338][T12883] vlan0: entered promiscuous mode [ 315.389449][T12889] netlink: 'syz.0.1787': attribute type 8 has an invalid length. [ 315.430120][T12889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.654430][T12895] netlink: 'syz.0.1792': attribute type 2 has an invalid length. [ 315.731562][T12895] : entered promiscuous mode [ 315.889781][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1794'. [ 315.889879][T12911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1794'. [ 315.989387][T12884] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1784'. [ 316.798903][T12944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1799'. [ 317.224194][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 317.270716][T12954] netlink: 'syz.4.1801': attribute type 10 has an invalid length. [ 317.343764][T12965] netlink: 'syz.0.1804': attribute type 1 has an invalid length. [ 317.351988][T12965] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1804'. [ 317.400486][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.575838][T12974] tipc: Enabled bearer , priority 0 [ 317.653737][T12974] tipc: Disabling bearer [ 317.938471][T12994] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 318.120898][T13000] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 318.134352][T13000] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 318.222013][T12994] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 319.125851][T13031] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1820'. [ 319.296664][T13038] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 319.622378][T13045] gtp1: entered promiscuous mode [ 319.630688][T13045] gtp1: entered allmulticast mode [ 319.664666][T13051] : renamed from bond_slave_0 [ 320.482247][T13094] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1832'. [ 320.933513][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1835'. [ 321.051346][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 321.561104][T13131] erspan0: entered promiscuous mode [ 321.595588][T13131] erspan0: left promiscuous mode [ 321.693779][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'. [ 321.820331][T13143] pim6reg1: entered allmulticast mode [ 321.931690][T13146] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1846'. [ 322.086955][T13157] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 322.175522][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1851'. [ 322.286335][T13154] can: request_module (can-proto-3) failed. [ 322.705847][T13189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1860'. [ 322.732800][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1860'. [ 322.748776][T13191] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 322.995990][T13198] vti0: entered promiscuous mode [ 323.228641][T13206] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1864'. [ 323.238687][T13206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1864'. [ 323.412386][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 323.434773][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1867'. [ 323.725531][T13225] bridge3: entered allmulticast mode [ 323.733694][T13226] netlink: 'syz.2.1868': attribute type 21 has an invalid length. [ 323.745093][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 323.770753][T13226] netlink: 'syz.2.1868': attribute type 21 has an invalid length. [ 323.780292][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 324.317221][T13253] netlink: 'syz.3.1876': attribute type 1 has an invalid length. [ 324.335497][T13253] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1876'. [ 324.438308][T13259] netlink: 'syz.1.1878': attribute type 2 has an invalid length. [ 324.478083][T13259] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 324.562365][T13265] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 324.564045][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1879'. [ 325.544062][T13307] syzkaller0: entered promiscuous mode [ 325.551289][T13307] syzkaller0: entered allmulticast mode [ 325.615815][T13309] tipc: Failed to remove unknown binding: 66,1,1/2886997007:630515640/630515642 [ 325.632815][T13309] tipc: Failed to remove unknown binding: 66,1,1/2886997007:630515640/630515642 [ 325.966561][T13321] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 326.129102][T13324] tipc: Enabled bearer , priority 0 [ 326.136715][T13324] syzkaller0: entered promiscuous mode [ 326.151586][T13324] syzkaller0: entered allmulticast mode [ 326.249246][T13324] tipc: Resetting bearer [ 326.299934][T13320] tipc: Resetting bearer [ 326.344547][T13320] tipc: Disabling bearer [ 326.498872][T13350] bond0: (slave 0!): Releasing backup interface [ 326.542171][T13350] bond0: (slave bond_slave_0): Releasing backup interface [ 326.603785][T13350] team0: Port device team_slave_0 removed [ 326.622489][T13350] team0: Port device team_slave_1 removed [ 326.657319][T13350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.675255][T13350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.701771][T13350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.718967][T13350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.759880][T13350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.888261][T13352] syzkaller0: left promiscuous mode [ 326.893544][T13352] syzkaller0: left allmulticast mode [ 327.954768][T13391] __nla_validate_parse: 9 callbacks suppressed [ 327.954790][T13391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1917'. [ 329.565549][T13449] netlink: 'syz.1.1934': attribute type 1 has an invalid length. [ 330.569000][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 330.590731][T13484] netlink: 'syz.1.1942': attribute type 7 has an invalid length. [ 330.608333][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 330.631565][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 330.685923][T13484] netlink: 'syz.1.1942': attribute type 7 has an invalid length. [ 330.738214][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 332.025217][T13532] netlink: 'syz.4.1955': attribute type 3 has an invalid length. [ 332.512675][T13543] tipc: Enabling of bearer rejected, already enabled [ 332.598961][T13542] syzkaller0: entered promiscuous mode [ 332.604496][T13542] syzkaller0: entered allmulticast mode [ 333.625024][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 334.586310][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1972'. [ 334.882131][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 335.115922][T13607] netlink: 'syz.4.1978': attribute type 12 has an invalid length. [ 335.585536][T13622] tipc: Enabling of bearer rejected, already enabled [ 335.601349][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 336.955213][T13667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1995'. [ 337.149613][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1996'. [ 337.819220][T13698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2005'. [ 338.082315][T13706] bridge4: entered allmulticast mode [ 338.769198][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2014'. [ 339.338587][T13743] netlink: 'syz.2.2018': attribute type 4 has an invalid length. [ 340.540363][T13795] netlink: 'syz.4.2032': attribute type 29 has an invalid length. [ 340.549503][T13797] netlink: 'syz.4.2032': attribute type 29 has an invalid length. [ 341.515746][T13846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2045'. [ 342.034103][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 342.058912][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 342.120984][T13863] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.137205][T13863] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.264860][T13863] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.297975][T13863] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.424011][T13863] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.455194][T13863] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.535868][T13875] tipc: New replicast peer: 255.255.255.255 [ 342.560642][T13875] tipc: Enabled bearer , priority 10 [ 342.919359][T13863] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.929637][T13863] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.089959][ T6099] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.099204][ T6099] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.179971][ T6101] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.189194][ T6101] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.204235][ T6101] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.213670][ T6101] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.320798][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.339379][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.500392][T13902] vlan0: entered promiscuous mode [ 343.594306][T13908] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2060'. [ 344.369826][T13945] netlink: 'syz.1.2066': attribute type 2 has an invalid length. [ 344.403634][T13945] netlink: 4264 bytes leftover after parsing attributes in process `syz.1.2066'. [ 344.726835][T13953] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2068'. [ 344.831956][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 345.364498][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2074'. [ 345.389619][T13970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2074'. [ 345.416279][T13970] tipc: Enabled bearer , priority 0 [ 345.515805][T13969] tipc: Disabling bearer [ 346.011732][T13985] netlink: 'syz.3.2078': attribute type 1 has an invalid length. [ 346.021688][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 346.255583][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2080'. [ 346.265187][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2080'. [ 346.684108][T14009] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2084'. [ 348.751474][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'. [ 349.416899][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2103'. [ 349.468636][T14084] tc_dump_action: action bad kind [ 349.668414][T14093] syz_tun: entered allmulticast mode [ 349.759146][T14093] netlink: 'syz.2.2105': attribute type 23 has an invalid length. [ 350.084024][T14110] netlink: 'syz.0.2110': attribute type 2 has an invalid length. [ 350.320085][T14090] syz_tun: left allmulticast mode [ 350.444935][T14118] netlink: 'syz.0.2112': attribute type 39 has an invalid length. [ 351.405923][T14150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2119'. [ 351.449250][T14150] IPVS: Error connecting to the multicast addr [ 351.853457][T14160] netlink: 'syz.4.2125': attribute type 19 has an invalid length. [ 351.878288][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2125'. [ 351.936625][T14160] netlink: 'syz.4.2125': attribute type 19 has an invalid length. [ 351.965782][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2125'. [ 352.095570][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 352.139894][T14173] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 352.154531][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2123'. [ 352.176235][T14168] veth12: entered promiscuous mode [ 352.182089][T14168] veth12: entered allmulticast mode [ 352.333260][T14178] netlink: 'syz.4.2129': attribute type 17 has an invalid length. [ 352.403766][T14178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.855782][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 352.871196][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 352.884919][T14206] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 353.024511][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 353.206065][T14224] netlink: 'syz.4.2142': attribute type 13 has an invalid length. [ 353.220816][T14224] netlink: 'syz.4.2142': attribute type 17 has an invalid length. [ 353.229882][T14224] netlink: 'syz.4.2142': attribute type 27 has an invalid length. [ 353.524716][T14239] netlink: 'syz.1.2146': attribute type 13 has an invalid length. [ 353.575332][T14242] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 353.732033][T14244] pimreg: entered allmulticast mode [ 353.780291][T14242] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.794093][T14242] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.933387][T14242] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.945519][T14242] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.021554][T14242] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.048049][T14242] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.104059][T14259] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2151'. [ 354.115830][T14259] syzkaller0: entered promiscuous mode [ 354.126290][T14259] syzkaller0: entered allmulticast mode [ 354.192673][T14242] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.209329][T14242] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.423799][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.459095][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.532478][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.546229][T14287] __nla_validate_parse: 2 callbacks suppressed [ 354.546251][T14287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2160'. [ 354.563841][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.695443][ T6098] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.704982][ T6098] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.908820][T14297] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2161'. [ 354.963486][ T6092] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.003384][T14297] netlink: 'syz.2.2161': attribute type 1 has an invalid length. [ 355.011980][ T6092] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.551329][T14326] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2167'. [ 355.591807][T14321] batadv_slave_0: entered promiscuous mode [ 355.822620][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2171'. [ 355.845148][ T30] audit: type=1107 audit(1759875159.913:5): pid=14327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 356.914813][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 356.925941][T14386] validate_nla: 2 callbacks suppressed [ 356.925960][T14386] netlink: 'syz.4.2185': attribute type 4 has an invalid length. [ 356.934453][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 356.967847][T14390] 0ªX¹¦À: left allmulticast mode [ 356.978835][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 356.978875][T14396] netlink: 'syz.4.2185': attribute type 4 has an invalid length. [ 357.007065][T14390] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 357.116250][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 357.138847][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 357.168422][T14404] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 357.181087][T14404] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 357.260012][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2188'. [ 357.284480][T14412] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 357.440808][T14418] ipvlan2: entered promiscuous mode [ 357.651040][T14433] netlink: 'syz.4.2195': attribute type 1 has an invalid length. [ 357.840625][T14428] can: request_module (can-proto-3) failed. [ 358.000011][T14445] netlink: 'syz.0.2199': attribute type 2 has an invalid length. [ 358.069729][T14446] syzkaller1: entered promiscuous mode [ 358.093826][T14446] syzkaller1: entered allmulticast mode [ 358.124277][T14450] vlan2: entered promiscuous mode [ 358.132600][T14450] bond0: entered promiscuous mode [ 358.142756][T14450] bond2: entered promiscuous mode [ 358.153281][T14450] vlan2: entered allmulticast mode [ 358.160379][T14450] bond0: entered allmulticast mode [ 358.186517][T14450] bond2: entered allmulticast mode [ 358.307162][T14446] 8021q: adding VLAN 0 to HW filter on device bond11 [ 358.460943][T14464] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 358.964890][T14478] bond12: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 359.001997][T14478] bond12 (unregistering): Released all slaves [ 359.260388][T14488] tipc: Enabled bearer , priority 0 [ 359.277478][T14488] syzkaller0: entered promiscuous mode [ 359.283190][T14488] syzkaller0: entered allmulticast mode [ 359.658777][T14500] __nla_validate_parse: 7 callbacks suppressed [ 359.658801][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 360.038798][T14487] tipc: Resetting bearer [ 360.089809][T14487] tipc: Disabling bearer [ 360.361264][T14526] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2225'. [ 360.430275][T14526] hsr_slave_0: left promiscuous mode [ 360.444050][T14526] hsr_slave_1: left promiscuous mode [ 360.736097][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2229'. [ 360.823931][T14547] netlink: 'syz.4.2230': attribute type 13 has an invalid length. [ 360.834571][T14549] netlink: 'syz.4.2230': attribute type 13 has an invalid length. [ 360.899063][T14548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2231'. [ 360.908702][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2231'. [ 361.007384][T14547] bridge0: port 1(veth0_to_bridge) entered disabled state [ 361.360706][T14547] tipc: Resetting bearer [ 361.417731][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.440034][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.474700][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.500077][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.530716][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.554162][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.582464][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.605196][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.633735][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 361.702021][ T6092] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.712789][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 361.734496][ T6092] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.752356][ T6092] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.773412][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2235'. [ 361.790697][ T6092] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.139481][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 362.151180][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 364.010517][T14646] netlink: 'syz.4.2253': attribute type 30 has an invalid length. [ 364.160759][T14649] tipc: Enabled bearer , priority 0 [ 364.181305][T14649] syzkaller0: entered promiscuous mode [ 364.186831][T14649] syzkaller0: entered allmulticast mode [ 364.238504][T14649] tipc: Resetting bearer [ 364.266831][T14647] tipc: Resetting bearer [ 364.299279][T14647] tipc: Disabling bearer [ 364.305118][T14652] IPVS: set_ctl: invalid protocol: 79 224.0.0.2:0 [ 364.588683][T14665] vlan2: entered allmulticast mode [ 364.599929][T14665] bridge_slave_0: entered allmulticast mode [ 365.424334][T14679] __nla_validate_parse: 13 callbacks suppressed [ 365.424358][T14679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2266'. [ 365.470226][T14681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2266'. [ 365.722814][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 365.827076][T14692] netlink: 'syz.1.2270': attribute type 1 has an invalid length. [ 366.126706][T14705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2272'. [ 366.421199][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'. [ 366.467404][T14727] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 366.477244][T14727] bond0: (slave wlan1): Opening slave failed [ 366.514481][T14731] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 366.522859][T14731] team0: Cannot enslave team device to itself [ 366.702074][T14734] tipc: Enabled bearer , priority 0 [ 366.710556][T14734] syzkaller0: entered promiscuous mode [ 366.716262][T14734] syzkaller0: entered allmulticast mode [ 366.750372][T14734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 366.797836][T14734] tipc: Resetting bearer [ 366.818383][T14733] tipc: Resetting bearer [ 366.844840][T14733] tipc: Disabling bearer [ 366.914815][T14736] netlink: 'syz.0.2282': attribute type 10 has an invalid length. [ 367.019682][T14741] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2283'. [ 367.228370][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2285'. [ 367.420694][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'. [ 367.463111][T14754] bond7: entered promiscuous mode [ 367.469494][T14754] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.723981][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2291'. [ 367.736295][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 367.904024][T14764] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 367.958688][T14768] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 369.453072][T14835] 8021q: adding VLAN 0 to HW filter on device .` [ 369.538769][T14835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.029004][T14848] syzkaller0: entered promiscuous mode [ 370.034771][T14848] syzkaller0: entered allmulticast mode [ 372.043891][T14865] __nla_validate_parse: 19 callbacks suppressed [ 372.043912][T14865] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2318'. [ 372.146414][T14874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2320'. [ 372.853419][T14900] netlink: 'syz.1.2328': attribute type 12 has an invalid length. [ 373.278685][T14917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2332'. [ 374.084645][T14929] bond13: Unable to set up delay as MII monitoring is disabled [ 374.099802][T14929] bond13 (unregistering): Released all slaves [ 374.143669][T14930] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 374.324111][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2340'. [ 374.402725][T14943] vlan2: entered promiscuous mode [ 374.414223][T14943] bond0: entered promiscuous mode [ 374.428919][T14943] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 374.446690][T14943] syz_tun: entered promiscuous mode [ 376.044981][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2353'. [ 376.187036][T14997] 8021q: VLANs not supported on nlmon0 [ 376.219078][T14999] vlan2: entered promiscuous mode [ 376.224240][T14999] geneve1: entered promiscuous mode [ 376.234654][T14999] vlan2: entered allmulticast mode [ 376.250670][T14999] geneve1: entered allmulticast mode [ 376.351911][T15004] ip6gre0: entered promiscuous mode [ 376.361204][T15004] netlink: 'syz.2.2356': attribute type 2 has an invalid length. [ 376.540644][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2357'. [ 376.750665][T15015] wg1 speed is unknown, defaulting to 1000 [ 376.778451][T15015] wg1 speed is unknown, defaulting to 1000 [ 376.852063][T15015] wg1 speed is unknown, defaulting to 1000 [ 376.949462][T15015] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 377.095243][T15015] wg1 speed is unknown, defaulting to 1000 [ 377.104131][T15015] wg1 speed is unknown, defaulting to 1000 [ 377.134536][T15015] wg1 speed is unknown, defaulting to 1000 [ 377.161860][T15015] wg1 speed is unknown, defaulting to 1000 [ 377.171345][T15015] wg1 speed is unknown, defaulting to 1000 [ 377.221753][T15038] dvmrp8: entered allmulticast mode [ 377.277056][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2366'. [ 377.611701][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 377.715358][T15053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2368'. [ 377.806077][T15038] wg1 speed is unknown, defaulting to 1000 [ 378.038884][T15062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2370'. [ 378.079987][T15037] dvmrp8: left allmulticast mode [ 378.420950][T15074] bond6 (unregistering): Released all slaves [ 378.751910][T15087] tipc: Enabled bearer , priority 0 [ 378.945412][T15087] syzkaller0: entered promiscuous mode [ 378.951246][T15087] syzkaller0: entered allmulticast mode [ 378.958250][T15087] tipc: Resetting bearer [ 378.964576][T15091] netlink: 'syz.1.2377': attribute type 14 has an invalid length. [ 379.024545][T15084] tipc: Resetting bearer [ 379.065815][T15101] netlink: 'syz.3.2382': attribute type 13 has an invalid length. [ 379.078295][T15101] netlink: 'syz.3.2382': attribute type 17 has an invalid length. [ 379.130575][T15104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2382'. [ 379.220444][T15106] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2383'. [ 380.795176][T15084] tipc: Disabling bearer [ 380.804476][T15101] lo: left promiscuous mode [ 380.840310][T15101] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.929668][T15101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.009858][T15109] vlan2: entered promiscuous mode [ 381.014962][T15109] bridge0: entered promiscuous mode [ 381.016519][T15118] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 381.228651][T15118] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 381.255295][T15118] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 381.335049][T15120] bond8: (slave bridge5): Enslaving as an active interface with a down link [ 381.360504][T15127] gretap2: entered promiscuous mode [ 381.365945][T15127] gretap2: entered allmulticast mode [ 381.377450][T15127] bond8: (slave gretap2): making interface the new active one [ 381.388557][T15127] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 381.425002][T15129] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.476665][T15138] tipc: Enabled bearer , priority 0 [ 381.495431][T15130] syzkaller0: entered promiscuous mode [ 381.503744][T15130] syzkaller0: entered allmulticast mode [ 381.614986][T15129] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 381.653550][T15134] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 381.827462][T15130] tipc: Resetting bearer [ 381.972432][T15128] tipc: Resetting bearer [ 382.259558][T15128] tipc: Disabling bearer [ 382.274635][T15156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2396'. [ 382.366784][T15162] netlink: 'syz.3.2397': attribute type 4 has an invalid length. [ 382.415307][T15162] netlink: 'syz.3.2397': attribute type 4 has an invalid length. [ 383.349998][T15201] netlink: 'syz.3.2408': attribute type 10 has an invalid length. [ 383.393433][T15201] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 383.402946][ T12] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aaaa error=-28 [ 383.669826][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'. [ 383.990053][T15219] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 384.038607][T15219] batman_adv: batadv0: Adding interface: gretap1 [ 384.057711][T15219] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.101493][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 384.111634][T15219] batman_adv: batadv0: Interface activated: gretap1 [ 384.155538][T15222] macsec3: entered promiscuous mode [ 384.165123][T15222] ip6gretap0: entered promiscuous mode [ 384.177105][T15222] ip6gretap0: left promiscuous mode [ 384.239307][T15229] lo: left promiscuous mode [ 384.270693][T15229] batadv_slave_0: left promiscuous mode [ 384.289700][T15229] vlan0: left promiscuous mode [ 384.303345][T15229] batadv1: left promiscuous mode [ 384.318975][T15229] batadv1: left allmulticast mode [ 384.330615][T15229] macvlan2: left promiscuous mode [ 384.356145][T15229] macvlan2: left allmulticast mode [ 384.366874][T15229] geneve2: left promiscuous mode [ 384.383725][T15229] veth5: left promiscuous mode [ 384.398957][T15229] bond4: left promiscuous mode [ 384.412654][T15229] bond5: left promiscuous mode [ 384.424363][T15229] bond4: left allmulticast mode [ 384.430460][T15229] bond5: left allmulticast mode [ 384.436090][T15229] veth7: left promiscuous mode [ 384.443709][T15229] gtp1: left promiscuous mode [ 384.452271][T15229] gtp1: left allmulticast mode [ 384.478434][T15229] bridge3: left allmulticast mode [ 384.502671][T15229] vlan2: left promiscuous mode [ 384.531460][T15229] geneve1: left promiscuous mode [ 384.536806][T15229] vlan2: left allmulticast mode [ 384.543321][T15229] geneve1: left allmulticast mode [ 384.560100][T15245] netlink: 336 bytes leftover after parsing attributes in process `syz.0.2422'. [ 384.652212][T15251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2423'. [ 384.685059][T15253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2424'. [ 385.356976][T15285] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20001 [ 385.509511][T15292] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2435'. [ 385.556984][T15297] FAULT_INJECTION: forcing a failure. [ 385.556984][T15297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.573674][T15297] CPU: 1 UID: 0 PID: 15297 Comm: syz.2.2434 Not tainted syzkaller #0 PREEMPT(full) [ 385.573706][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.573718][T15297] Call Trace: [ 385.573727][T15297] [ 385.573735][T15297] dump_stack_lvl+0x189/0x250 [ 385.573765][T15297] ? __pfx____ratelimit+0x10/0x10 [ 385.573794][T15297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.573815][T15297] ? __pfx__printk+0x10/0x10 [ 385.573851][T15297] should_fail_ex+0x414/0x560 [ 385.573880][T15297] _copy_to_user+0x31/0xb0 [ 385.573911][T15297] simple_read_from_buffer+0xe1/0x170 [ 385.573940][T15297] proc_fail_nth_read+0x1b3/0x220 [ 385.573973][T15297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.574007][T15297] ? rw_verify_area+0x2a6/0x4d0 [ 385.574051][T15297] ? __lock_acquire+0xab9/0xd20 [ 385.574077][T15297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.574114][T15297] vfs_read+0x1fd/0xa30 [ 385.574134][T15297] ? fdget_pos+0x247/0x320 [ 385.574164][T15297] ? __pfx___mutex_lock+0x10/0x10 [ 385.574184][T15297] ? __pfx_vfs_read+0x10/0x10 [ 385.574208][T15297] ? __fget_files+0x2a/0x420 [ 385.574238][T15297] ? __fget_files+0x3a0/0x420 [ 385.574258][T15297] ? __fget_files+0x2a/0x420 [ 385.574293][T15297] ksys_read+0x145/0x250 [ 385.574317][T15297] ? __pfx_ksys_read+0x10/0x10 [ 385.574342][T15297] ? do_syscall_64+0xbe/0xfa0 [ 385.574376][T15297] do_syscall_64+0xfa/0xfa0 [ 385.574400][T15297] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.574427][T15297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.574446][T15297] ? clear_bhb_loop+0x60/0xb0 [ 385.574472][T15297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.574490][T15297] RIP: 0033:0x7f8d1eb8d8dc [ 385.574510][T15297] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 385.574527][T15297] RSP: 002b:00007f8d1f9c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.574550][T15297] RAX: ffffffffffffffda RBX: 00007f8d1ede6090 RCX: 00007f8d1eb8d8dc [ 385.574564][T15297] RDX: 000000000000000f RSI: 00007f8d1f9c00a0 RDI: 0000000000000004 [ 385.574577][T15297] RBP: 00007f8d1f9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 385.574589][T15297] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 385.574601][T15297] R13: 00007f8d1ede6128 R14: 00007f8d1ede6090 R15: 00007ffc37719be8 [ 385.574640][T15297] [ 386.185265][T15315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2441'. [ 386.263677][T15310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2438'. [ 386.737719][T15335] ip6gretap2: entered promiscuous mode [ 386.768442][T15338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2448'. [ 386.770231][T15303] wg1 speed is unknown, defaulting to 1000 [ 387.173894][T15353] netlink: 'syz.2.2451': attribute type 4 has an invalid length. [ 387.809570][T15375] sctp: [Deprecated]: syz.1.2456 (pid 15375) Use of int in max_burst socket option. [ 387.809570][T15375] Use struct sctp_assoc_value instead [ 388.000940][T15386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.074462][T15388] bond8: option arp_validate: invalid value (18446744073491447809) [ 388.085230][T15388] bond8 (unregistering): Released all slaves [ 388.108499][T15392] netlink: 'syz.0.2459': attribute type 13 has an invalid length. [ 388.116447][T15392] netlink: 'syz.0.2459': attribute type 4 has an invalid length. [ 388.134981][T15393] pim6reg1: entered promiscuous mode [ 388.140860][T15393] pim6reg1: entered allmulticast mode [ 388.465108][T15407] netlink: 'syz.4.2465': attribute type 13 has an invalid length. [ 388.646717][T15407] batman_adv: batadv0: Interface deactivated: gretap1 [ 388.672786][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.682690][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.693299][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.712134][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.796972][T15414] netlink: 'syz.4.2468': attribute type 29 has an invalid length. [ 388.815646][T15414] netlink: 'syz.4.2468': attribute type 29 has an invalid length. [ 388.825147][T15414] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2468'. [ 388.922425][T15416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2467'. [ 388.980361][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2467'. [ 389.027362][T15416] netlink: 'syz.0.2467': attribute type 2 has an invalid length. [ 389.272214][T15430] sctp: [Deprecated]: syz.4.2470 (pid 15430) Use of int in maxseg socket option. [ 389.272214][T15430] Use struct sctp_assoc_value instead [ 389.744581][T15424] wg1 speed is unknown, defaulting to 1000 [ 389.834701][T15449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2476'. [ 389.903146][T15450] 8021q: VLANs not supported on vxcan1 [ 389.929726][T15449] 8021q: VLANs not supported on vxcan1 [ 390.255550][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 390.282278][T15458] tipc: Enabled bearer , priority 18 [ 390.399685][T15463] netlink: 'syz.2.2481': attribute type 13 has an invalid length. [ 390.408806][T15462] netlink: 'syz.2.2481': attribute type 13 has an invalid length. [ 390.417150][T15462] netlink: 'syz.2.2481': attribute type 17 has an invalid length. [ 390.440968][T15463] ip6gre0: left promiscuous mode [ 390.458899][T15463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.508440][T15462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.631037][T15437] wg1 speed is unknown, defaulting to 1000 [ 390.723396][T15425] wg1 speed is unknown, defaulting to 1000 [ 390.793073][T15473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2484'. [ 390.852026][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 391.702511][T15500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2492'. [ 392.490760][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 392.884244][T15553] bond11: entered promiscuous mode [ 392.894983][T15553] bond11: entered allmulticast mode [ 392.901304][T15553] 8021q: adding VLAN 0 to HW filter on device bond11 [ 393.136690][T15553] bond11 (unregistering): Released all slaves [ 393.218322][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 393.405537][T15591] validate_nla: 1 callbacks suppressed [ 393.405557][T15591] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 394.412015][T15610] wg1 speed is unknown, defaulting to 1000 [ 394.713330][T15648] netlink: 'syz.3.2526': attribute type 6 has an invalid length. [ 394.763574][T15648] netlink: 'syz.3.2526': attribute type 12 has an invalid length. [ 394.771889][T15648] __nla_validate_parse: 2 callbacks suppressed [ 394.771910][T15648] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2526'. [ 395.400919][T15661] vlan3: entered promiscuous mode [ 395.406009][T15661] team0: entered promiscuous mode [ 396.370293][T15709] veth1_to_team: entered promiscuous mode [ 396.390874][T15709] bond0: entered promiscuous mode [ 396.395992][T15709] syz_tun: entered promiscuous mode [ 396.415388][T15709] bond0: left promiscuous mode [ 396.420726][T15709] syz_tun: left promiscuous mode [ 396.438881][T15709] veth1_to_team: left promiscuous mode [ 396.687373][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 396.726404][T15729] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 396.742285][T15729] netlink: 'syz.3.2552': attribute type 3 has an invalid length. [ 396.759032][T15729] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2552'. [ 396.786463][T15729] netlink: 'syz.3.2552': attribute type 9 has an invalid length. [ 397.548925][ T3090] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.609728][T15764] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2562'. [ 397.630071][T15764] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2562'. [ 397.748367][ T3090] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.754644][T15768] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 397.989674][T15786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2568'. [ 398.060417][T15786] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2568'. [ 398.394202][T15814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'. [ 398.554297][T15822] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2575'. [ 398.633922][T15822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.810381][T15832] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 399.109573][T15842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2583'. [ 399.595281][T15854] netlink: 'syz.0.2587': attribute type 1 has an invalid length. [ 399.755798][T15847] wg1 speed is unknown, defaulting to 1000 [ 400.413816][T15880] __nla_validate_parse: 1 callbacks suppressed [ 400.413839][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 400.468811][T15880] syzkaller1: entered promiscuous mode [ 400.475614][T15880] syzkaller1: entered allmulticast mode [ 400.492392][T15880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2595'. [ 400.511240][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 400.669380][T15891] batadv_slave_0: entered promiscuous mode [ 400.714424][T15863] wg1 speed is unknown, defaulting to 1000 [ 401.523219][T15912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2604'. [ 401.712390][T15918] syzkaller0: entered promiscuous mode [ 401.720471][T15918] syzkaller0: entered allmulticast mode [ 401.732614][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 402.050100][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 402.077459][T15936] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2610'. [ 402.131317][T15940] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2611'. [ 402.487780][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 402.839206][T15960] [ 402.841592][T15960] ====================================================== [ 402.848627][T15960] WARNING: possible circular locking dependency detected [ 402.855797][T15960] syzkaller #0 Not tainted [ 402.860320][T15960] ------------------------------------------------------ [ 402.867367][T15960] syz.3.2617/15960 is trying to acquire lock: [ 402.873455][T15960] ffffffff8f62d718 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 402.883089][T15960] [ 402.883089][T15960] but task is already holding lock: [ 402.890572][T15960] ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 402.900296][T15960] [ 402.900296][T15960] which lock already depends on the new lock. [ 402.900296][T15960] [ 402.910988][T15960] [ 402.910988][T15960] the existing dependency chain (in reverse order) is: [ 402.920030][T15960] [ 402.920030][T15960] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 402.927995][T15960] lock_acquire+0x120/0x360 [ 402.933065][T15960] _raw_spin_lock_bh+0x36/0x50 [ 402.938384][T15960] nr_rt_ioctl+0x390/0xd50 [ 402.943352][T15960] sock_do_ioctl+0xd9/0x300 [ 402.948474][T15960] sock_ioctl+0x576/0x790 [ 402.953412][T15960] __se_sys_ioctl+0xf9/0x170 [ 402.958656][T15960] do_syscall_64+0xfa/0xfa0 [ 402.963727][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.970410][T15960] [ 402.970410][T15960] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 402.978498][T15960] lock_acquire+0x120/0x360 [ 402.983586][T15960] _raw_spin_lock_bh+0x36/0x50 [ 402.988874][T15960] nr_rt_ioctl+0x193/0xd50 [ 402.993902][T15960] sock_do_ioctl+0xd9/0x300 [ 402.998929][T15960] sock_ioctl+0x576/0x790 [ 403.003782][T15960] __se_sys_ioctl+0xf9/0x170 [ 403.008909][T15960] do_syscall_64+0xfa/0xfa0 [ 403.013961][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.020548][T15960] [ 403.020548][T15960] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 403.028468][T15960] validate_chain+0xb9b/0x2140 [ 403.033764][T15960] __lock_acquire+0xab9/0xd20 [ 403.038972][T15960] lock_acquire+0x120/0x360 [ 403.044004][T15960] _raw_spin_lock_bh+0x36/0x50 [ 403.049729][T15960] nr_rt_device_down+0xa9/0x720 [ 403.055104][T15960] nr_device_event+0x137/0x150 [ 403.060388][T15960] notifier_call_chain+0x1b6/0x3e0 [ 403.066021][T15960] __dev_notify_flags+0x18d/0x2e0 [ 403.071569][T15960] netif_change_flags+0xe8/0x1a0 [ 403.077144][T15960] dev_change_flags+0x130/0x260 [ 403.082520][T15960] dev_ioctl+0x7b4/0x1150 [ 403.087377][T15960] sock_do_ioctl+0x22c/0x300 [ 403.092577][T15960] sock_ioctl+0x576/0x790 [ 403.097430][T15960] __se_sys_ioctl+0xf9/0x170 [ 403.102638][T15960] do_syscall_64+0xfa/0xfa0 [ 403.107681][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.114098][T15960] [ 403.114098][T15960] other info that might help us debug this: [ 403.114098][T15960] [ 403.124439][T15960] Chain exists of: [ 403.124439][T15960] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 403.124439][T15960] [ 403.138369][T15960] Possible unsafe locking scenario: [ 403.138369][T15960] [ 403.145815][T15960] CPU0 CPU1 [ 403.151180][T15960] ---- ---- [ 403.156543][T15960] lock(nr_neigh_list_lock); [ 403.161223][T15960] lock(&nr_node->node_lock); [ 403.168507][T15960] lock(nr_neigh_list_lock); [ 403.175713][T15960] lock(nr_node_list_lock); [ 403.180390][T15960] [ 403.180390][T15960] *** DEADLOCK *** [ 403.180390][T15960] [ 403.188529][T15960] 2 locks held by syz.3.2617/15960: [ 403.193719][T15960] #0: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 403.202692][T15960] #1: ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 403.212892][T15960] [ 403.212892][T15960] stack backtrace: [ 403.218782][T15960] CPU: 1 UID: 0 PID: 15960 Comm: syz.3.2617 Not tainted syzkaller #0 PREEMPT(full) [ 403.218803][T15960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.218813][T15960] Call Trace: [ 403.218821][T15960] [ 403.218830][T15960] dump_stack_lvl+0x189/0x250 [ 403.218850][T15960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.218865][T15960] ? __pfx__printk+0x10/0x10 [ 403.218882][T15960] ? print_lock_name+0xde/0x100 [ 403.218898][T15960] print_circular_bug+0x2ee/0x310 [ 403.218917][T15960] check_noncircular+0x134/0x160 [ 403.218936][T15960] validate_chain+0xb9b/0x2140 [ 403.218959][T15960] ? rt6_disable_ip+0x6b3/0x720 [ 403.218979][T15960] ? __lock_acquire+0xab9/0xd20 [ 403.219001][T15960] __lock_acquire+0xab9/0xd20 [ 403.219024][T15960] ? nr_rt_device_down+0xa9/0x720 [ 403.219042][T15960] lock_acquire+0x120/0x360 [ 403.219062][T15960] ? nr_rt_device_down+0xa9/0x720 [ 403.219086][T15960] ? nr_rt_device_down+0xa9/0x720 [ 403.219104][T15960] _raw_spin_lock_bh+0x36/0x50 [ 403.219124][T15960] ? nr_rt_device_down+0xa9/0x720 [ 403.219143][T15960] nr_rt_device_down+0xa9/0x720 [ 403.219163][T15960] ? do_raw_spin_unlock+0x122/0x240 [ 403.219183][T15960] nr_device_event+0x137/0x150 [ 403.219201][T15960] notifier_call_chain+0x1b6/0x3e0 [ 403.219220][T15960] __dev_notify_flags+0x18d/0x2e0 [ 403.219242][T15960] ? __pfx___dev_notify_flags+0x10/0x10 [ 403.219261][T15960] ? __dev_change_flags+0x4cc/0x6d0 [ 403.219285][T15960] ? __pfx___dev_change_flags+0x10/0x10 [ 403.219305][T15960] ? full_name_hash+0x92/0xe0 [ 403.219328][T15960] netif_change_flags+0xe8/0x1a0 [ 403.219350][T15960] dev_change_flags+0x130/0x260 [ 403.219372][T15960] dev_ioctl+0x7b4/0x1150 [ 403.219392][T15960] sock_do_ioctl+0x22c/0x300 [ 403.219410][T15960] ? __pfx_sock_do_ioctl+0x10/0x10 [ 403.219433][T15960] sock_ioctl+0x576/0x790 [ 403.219449][T15960] ? __pfx_sock_ioctl+0x10/0x10 [ 403.219464][T15960] ? __fget_files+0x3a0/0x420 [ 403.219481][T15960] ? __fget_files+0x2a/0x420 [ 403.219499][T15960] ? bpf_lsm_file_ioctl+0x9/0x20 [ 403.219513][T15960] ? __pfx_sock_ioctl+0x10/0x10 [ 403.219527][T15960] __se_sys_ioctl+0xf9/0x170 [ 403.219551][T15960] do_syscall_64+0xfa/0xfa0 [ 403.219574][T15960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.219588][T15960] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.219604][T15960] ? clear_bhb_loop+0x60/0xb0 [ 403.219621][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.219636][T15960] RIP: 0033:0x7f9b7278eec9 [ 403.219650][T15960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.219664][T15960] RSP: 002b:00007f9b735e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.219681][T15960] RAX: ffffffffffffffda RBX: 00007f9b729e5fa0 RCX: 00007f9b7278eec9 [ 403.219692][T15960] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 403.219703][T15960] RBP: 00007f9b72811f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.219713][T15960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.219722][T15960] R13: 00007f9b729e6038 R14: 00007f9b729e5fa0 R15: 00007ffe7ba4aa88 [ 403.219741][T15960]