last executing test programs: 7.871143027s ago: executing program 2 (id=3932): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100), 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 7.431325434s ago: executing program 0 (id=3933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000176000d0b004000000000000003000800000000000800010002000000"], 0x20}}, 0x0) unshare(0x68040200) r2 = socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) ppoll(&(0x7f0000000000)=[{r2, 0xf040}, {r0, 0x4005}], 0x2, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}], 0x40) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.327884053s ago: executing program 2 (id=3934): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0300000000000000000002000900010073797a300000000014000000020a0302000010000000000002000003140000001100010000000000000000000000000aea2edcee96f992ca8c47d33bad1629ab361d453bfc4a8f5f134d96d2f326194393f179263dc2c3f17477c29163c4860e76498869e9486b525d7cded61842aa5dd0232cb2424dcb578bfa7b3b5df7e97723ff3c9f447e0eba43fbdf0ff930961e62e15ebaaf45e76dc20fde6a65650e5bac5a0eac4d18bcf834b57dcc"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000000bca900000000000300000000000000009500000000000000bf98000000000000560800b7000000000000009500"/81], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1ef", 0x23}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001146000002f0600ac141430e0000003808a8972bd0b72e410"], 0xdd12}], 0x1}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.664844402s ago: executing program 3 (id=3942): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000980)={0xa72, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000100)={@empty, @local, 0x1, "1f20c87e2b78e1c123a676e0bc24cdeccfea8edf38578e350959bfb1a9115b54", 0x8aa, 0x2, 0x7, 0x3ff}, 0x3c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000009900000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000010440)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x3, &(0x7f00000004c0)=""/10, 0xa}, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40400d0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0100000000000000000000000000013a01000000000000070800000000000080fe00000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x2, r6, 0x100}, 0xc) 5.014333792s ago: executing program 3 (id=3943): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.919233717s ago: executing program 3 (id=3946): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2c, r3, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1, 0x1000, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r10, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r8}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 3.735375718s ago: executing program 1 (id=3947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x439, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x12541, 0x44d03}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) 3.627551817s ago: executing program 4 (id=3948): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c19", 0x32}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 3.46163093s ago: executing program 3 (id=3949): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r2, 0x1, 0x13, &(0x7f0000000780)=""/16, &(0x7f00000007c0)=0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x1, 0xfff1}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x17c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8787}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4964}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc97757f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148e76fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72acfc8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f4aac8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75fc93bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x846d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e93ceb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x465e2ba0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf06ab0c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a452777}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66e72bc9}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19f0230a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9ad49c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea445db}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62435330}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22ad3ae6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9d9b4ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58dd0e68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a38649f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4084}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x1, 0x81, 0x4}) syz_init_net_socket$ax25(0x3, 0x3, 0x7) socket$inet(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x24020400) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x7, 0xad, 0xf2, 0xd}, {0x74, 0x45, 0x80, 0x9}]}, 0x59) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000100"}) 3.211302585s ago: executing program 0 (id=3950): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x5000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) setsockopt$inet6_buf(r3, 0x29, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) 3.210526487s ago: executing program 1 (id=3951): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff0000000000185100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000780)="daecbc0bd519f08fb6f683a5370d224e2892ad469f21d79f2d47bdd9b423611d7179a06adb5baa81c6f9b0cb2fe058323bef276fbfc25133a93a2e3e4d8708eecd34115fb1b807c3ada337ebd4fa4dcccb4141876f2267771508de13ccf9853e7cf20c9b07691ac105be249800b477de1e7a1027b2f0bda9f42c8f454d8cf271a629d3e29dd5436e6647e853060b31f1ca87a1527d3af23b34d37a5d1f780d6655751b18422c272d660f0baaab60fb52cbadf8d8d025348c4ef6", 0xba) r8 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r8, 0x5411, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.101746333s ago: executing program 0 (id=3952): socket(0x1e, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r3, 0x2, {0x2}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) write(r5, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r5, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmmsg$inet6(r6, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000000), 0x8000000000000000) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) 3.012761888s ago: executing program 1 (id=3953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) recvmmsg$unix(r1, &(0x7f0000012b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) 2.809087933s ago: executing program 3 (id=3954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058"], 0x184}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x74, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20}]}, 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0xc000) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB='/\x00\x00', @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=r10], 0x20) 2.616575414s ago: executing program 2 (id=3955): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x64}], 0x1, 0x40010001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x1000400121bf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) writev(r3, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x40000083) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.593151823s ago: executing program 1 (id=3956): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000040293d8ab7030000ffffff7f850000001c00000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x23}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3cbe6d0067c00da700000031", @ANYRES64=r0, @ANYBLOB], 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a4d1752a}, 0x4890) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000009, 0x10010, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3c8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@arp={@empty, @remote, 0xffffffff, 0xff, 0xf, 0xa, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0xccf, 0x7, 0xff, 0x6, 0x8000, 0xffff, 'rose0\x00', 'virt_wifi0\x00', {0xff}, {0xfb599f53acf56db0}, 0x0, 0x81}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x41f3, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf254d000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e00a80066697273746e616d65000000080001007005000000000200303030303a30303a31302e3000000000080001007063690011000200303030303a0000000800030000000000080003000300"/158], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x24004045) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r5, 0x0) unshare(0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r5}, 0x4) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000580)=0x4, 0xc) sendfile(r8, r7, 0x0, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 2.164526024s ago: executing program 3 (id=3957): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0xa3, 0x3, 0x2}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000008c0)={r3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000900)={r1, 0x7, 0x7fff, 0x8, 0x9, 0x2, 0x401, 0xb2, {r3, @in6={{0xa, 0x4e21, 0x2, @loopback, 0x80000000}}, 0x3ad7, 0x4f000, 0x4, 0x9, 0x5}}, &(0x7f0000000380)=0xb0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) getsockopt$ax25_int(r10, 0x101, 0x8, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000a00)={r3, 0x80000000}, 0x0) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$AUTOFS_IOC_SETTIMEOUT(r10, 0x80049367, &(0x7f0000000a80)=0x8000000000000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCRSGCAUSE(r13, 0x89e0, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@local, @multicast1, 0xffffff00, 0x0, 'syz_tun\x00', 'ipvlan0\x00', {}, {0xff}, 0x88, 0x0, 0x4}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'virt_wifi0\x00', {0x10000}}}}, {{@ip={@broadcast, @private=0xa010102, 0x7fffff80, 0x80ffff80, 'bond0\x00', 'veth1_to_batadv\x00', {}, {}, 0x29, 0x2, 0x2}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x7}}, @common=@set={{0x40}, {{0x0, [0x2, 0x5, 0x2, 0x4, 0x0, 0x4], 0x5}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0xa}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x8d0) 2.163600701s ago: executing program 0 (id=3967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000001000851000000600000018020000", @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd4, &(0x7f0000000340)=""/212}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0xfffffffffffffd25) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r1, 0x8) accept4$inet(r1, &(0x7f0000000100), 0x0, 0x80800) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x8004}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x801}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 2.162784379s ago: executing program 1 (id=3958): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c19", 0x32}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r6, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 2.130361958s ago: executing program 4 (id=3959): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2c, r3, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1, 0x1000, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r10, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r8}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 1.975482104s ago: executing program 0 (id=3960): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x1c4, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf}}]}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd7}}]}, @IPSET_ATTR_ADT={0xc4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x46b}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '}@]@\'\\\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_team\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x60004}, 0x20000805) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) 1.569218161s ago: executing program 4 (id=3961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x439, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x12541, 0x44d03}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) 1.295119292s ago: executing program 2 (id=3962): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x5000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) setsockopt$inet6_buf(r3, 0x29, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) 873.47325ms ago: executing program 4 (id=3963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r7}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 556.930151ms ago: executing program 2 (id=3964): socket$inet_sctp(0x2, 0xe6a75bb3fa8875d2, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x7, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000002000000014001a80100005800c"], 0x34}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000140)) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000008aa30000000000007b8af8ff00000000bfa20000004000000702000071f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 446.957558ms ago: executing program 4 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20008041) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r4 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="24de95"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000400009dd34e042f30a6aef4d2a3f9aef0c222df150000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r2, 0x1) r10 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r10) 261.822149ms ago: executing program 2 (id=3966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) recvmmsg$unix(r1, &(0x7f0000012b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) 219.098831ms ago: executing program 0 (id=3968): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r4, 0x2, {0x2}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) write(r6, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r10 = socket$inet6(0xa, 0x80003, 0xff) r11 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)}}], 0x2, 0x0, 0x0) 212.203135ms ago: executing program 1 (id=3969): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x5, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 0s ago: executing program 4 (id=3970): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c19", 0x32}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) kernel console output (not intermixed with test programs): link: zone id is out of range [ 398.925904][T13646] netlink: zone id is out of range [ 399.230511][T13646] net_ratelimit: 15 callbacks suppressed [ 399.230533][T13646] netlink: set zone limit has 4 unknown bytes [ 400.269502][T13677] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 400.282169][T13676] netlink: 'syz.3.2515': attribute type 1 has an invalid length. [ 400.378084][T13676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.463214][T13682] netlink: 'syz.1.2516': attribute type 10 has an invalid length. [ 400.464449][T13678] bond3: (slave geneve2): making interface the new active one [ 400.498302][T13678] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 400.545886][T13677] bond3: (slave geneve3): Releasing active interface [ 400.579447][T13677] bond4: (slave bridge0): Removing an active aggregator [ 400.587718][T13677] bond4: (slave bridge0): Releasing backup interface [ 400.601497][T13677] bridge0: left promiscuous mode [ 400.619366][T13677] bridge0: left allmulticast mode [ 400.638776][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.851063][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.888223][T13676] bond3: entered promiscuous mode [ 400.909024][T13676] geneve2: entered promiscuous mode [ 400.942116][T13682] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 400.965024][T13682] bond0: (slave wlan1): refused to change device type [ 401.004546][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.033213][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.083459][T13685] !: renamed from dummy0 (while UP) [ 401.581511][T13695] netlink: 'syz.0.2519': attribute type 13 has an invalid length. [ 402.087390][T13709] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2521'. [ 402.117468][T13709] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2521'. [ 402.483453][T13716] IPVS: persistence engine module ip_vs_pe_ not found [ 402.497832][T13720] tipc: Enabled bearer , priority 0 [ 402.506790][T13720] syzkaller0: entered promiscuous mode [ 402.506956][T13723] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2525'. [ 402.512299][T13720] syzkaller0: entered allmulticast mode [ 402.542448][T13720] tipc: Resetting bearer [ 402.557041][T13719] tipc: Resetting bearer [ 402.591351][T13719] tipc: Disabling bearer [ 402.806224][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2529'. [ 402.883228][T13734] netlink: 'syz.0.2529': attribute type 1 has an invalid length. [ 403.433859][T13743] netlink: 'syz.3.2531': attribute type 13 has an invalid length. [ 403.602419][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2533'. [ 403.915837][T13763] batadv0: entered promiscuous mode [ 403.933550][T13763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.170252][T13773] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2539'. [ 404.179555][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2539'. [ 404.193673][T13773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2539'. [ 404.317612][T13776] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 404.503498][T13783] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 404.568515][T13764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.713327][T13786] tipc: Enabled bearer , priority 0 [ 404.737173][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'. [ 404.741585][T13786] syzkaller0: entered promiscuous mode [ 404.764278][T13786] syzkaller0: entered allmulticast mode [ 404.834652][T13786] tipc: Resetting bearer [ 404.865809][T13785] tipc: Resetting bearer [ 404.927743][T13785] tipc: Disabling bearer [ 404.963426][T13793] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 405.195338][T13806] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 405.381102][T13814] batadv0: entered promiscuous mode [ 405.431027][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.485414][T13816] netlink: 'syz.4.2552': attribute type 10 has an invalid length. [ 405.511905][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2554'. [ 405.514925][T13816] team0: left promiscuous mode [ 405.592631][T13816] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.025640][T13840] tipc: Enabled bearer , priority 0 [ 406.049598][T13840] syzkaller0: entered promiscuous mode [ 406.070828][T13840] syzkaller0: entered allmulticast mode [ 406.091498][T13849] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 406.120801][T13853] batadv0: entered promiscuous mode [ 406.151340][T13853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.236716][T13857] tipc: Enabled bearer , priority 0 [ 406.277967][T13840] tipc: Resetting bearer [ 406.316719][T13852] syzkaller0: entered promiscuous mode [ 406.356032][T13852] syzkaller0: entered allmulticast mode [ 406.495678][T13839] tipc: Resetting bearer [ 406.593015][T13839] tipc: Disabling bearer [ 406.708775][ T30] audit: type=1800 audit(1755563125.115:7): pid=13859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2564" name="memory.events" dev="tmpfs" ino=2694 res=0 errno=0 [ 406.710738][T13857] tipc: Resetting bearer [ 406.818846][T13850] tipc: Resetting bearer [ 406.905135][T13850] tipc: Disabling bearer [ 406.954780][T13868] netlink: 'syz.1.2566': attribute type 5 has an invalid length. [ 406.998003][ T66] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.083827][ T66] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.319813][ T66] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.364632][ T66] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.413255][T13885] tipc: Enabled bearer , priority 0 [ 407.421176][T13885] syzkaller0: entered promiscuous mode [ 407.431413][T13885] syzkaller0: entered allmulticast mode [ 407.495250][T13885] tipc: Resetting bearer [ 407.501409][T13885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.544103][T13883] tipc: Resetting bearer [ 407.629627][T13883] tipc: Disabling bearer [ 407.905826][T13897] __nla_validate_parse: 4 callbacks suppressed [ 407.905846][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'. [ 407.942263][T13897] vlan0: entered promiscuous mode [ 407.948101][T13897] batadv0: entered promiscuous mode [ 407.979340][T13903] netlink: 'syz.0.2588': attribute type 13 has an invalid length. [ 408.035417][T13902] wireguard0: entered promiscuous mode [ 408.040969][T13902] wireguard0: entered allmulticast mode [ 408.142951][T13899] lo speed is unknown, defaulting to 1000 [ 408.151995][T13909] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2579'. [ 408.187403][T13909] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2579'. [ 408.681030][T13899] lo speed is unknown, defaulting to 1000 [ 408.762454][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 409.016838][T13929] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2586'. [ 409.031033][T13924] bond2: left allmulticast mode [ 409.049550][T13924] bond2: left promiscuous mode [ 409.065733][T13924] bridge0: port 4(bond2) entered disabled state [ 409.078485][T13924] dummy0: left allmulticast mode [ 409.083931][T13924] dummy0: left promiscuous mode [ 409.089944][T13924] bridge0: port 3(dummy0) entered disabled state [ 409.102157][T13924] bridge_slave_1: left allmulticast mode [ 409.109088][T13924] bridge_slave_1: left promiscuous mode [ 409.118535][T13924] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.133592][T13924] bridge_slave_0: left allmulticast mode [ 409.140826][T13924] bridge_slave_0: left promiscuous mode [ 409.150672][T13924] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.432352][T13933] Bluetooth: MGMT ver 1.23 [ 409.472664][T13933] geneve2: entered promiscuous mode [ 409.496872][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.516089][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.538595][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 409.548133][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.572204][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.797461][T13938] lo speed is unknown, defaulting to 1000 [ 410.114628][T13938] lo speed is unknown, defaulting to 1000 [ 411.178249][T13955] lo speed is unknown, defaulting to 1000 [ 411.486669][T13960] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2595'. [ 412.129062][T13971] tipc: Enabled bearer , priority 0 [ 412.141166][T13971] syzkaller0: entered promiscuous mode [ 412.158630][T13971] syzkaller0: entered allmulticast mode [ 412.233461][T13971] tipc: Resetting bearer [ 412.260649][T13970] tipc: Resetting bearer [ 412.292977][T13970] tipc: Disabling bearer [ 412.403505][T13955] lo speed is unknown, defaulting to 1000 [ 412.427661][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 412.549433][T13956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2593'. [ 412.613492][T13972] netlink: 'syz.2.2593': attribute type 13 has an invalid length. [ 412.624382][T13972] netlink: 'syz.2.2593': attribute type 17 has an invalid length. [ 412.763372][T13972] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.805488][T13972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.840195][ T5955] lo speed is unknown, defaulting to 1000 [ 412.856561][ T5955] syz0: Port: 1 Link ACTIVE [ 412.861418][T13984] tipc: Enabling of bearer rejected, failed to enable media [ 412.892977][ T5955] lo speed is unknown, defaulting to 1000 [ 412.910667][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 412.988309][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2602'. [ 413.051861][T13985] syzkaller0: entered promiscuous mode [ 413.067248][T13985] syzkaller0: entered allmulticast mode [ 413.520449][T13998] IPVS: persistence engine module ip_vs_pe_ not found [ 413.788041][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2609'. [ 413.808532][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 413.975029][T14014] vlan0: entered promiscuous mode [ 413.990963][T14016] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2611'. [ 414.003678][T14014] team0: entered promiscuous mode [ 414.032572][T14016] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 414.086945][T14017] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 414.111008][T14017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2611'. [ 414.196085][T14017] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 414.409503][T14023] netlink: 'syz.0.2615': attribute type 13 has an invalid length. [ 414.442205][T14021] lo speed is unknown, defaulting to 1000 [ 414.495490][T14031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.553665][T14034] bond2: (slave wireguard0): Releasing backup interface [ 414.594515][T14034] wireguard0: left promiscuous mode [ 414.603887][T14034] bond2: (slave wireguard1): making interface the new active one [ 414.634622][T14034] wireguard1: entered promiscuous mode [ 414.682611][T14030] netlink: 'syz.3.2614': attribute type 10 has an invalid length. [ 414.694803][T14034] bond2: (slave wireguard1): Releasing backup interface [ 414.735664][T14034] wireguard1: left promiscuous mode [ 414.877936][T14034] bond3: (slave geneve2): Releasing active interface [ 414.920690][T14034] geneve2: left promiscuous mode [ 414.967458][T14021] lo speed is unknown, defaulting to 1000 [ 414.967588][ T6190] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.030507][ T6190] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.091042][ T6190] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.155337][ T6190] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.177378][T14038] lo speed is unknown, defaulting to 1000 [ 415.493296][T14050] netlink: 'syz.3.2618': attribute type 13 has an invalid length. [ 416.006172][T14038] lo speed is unknown, defaulting to 1000 [ 416.499558][T14069] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 416.704767][T14076] lo speed is unknown, defaulting to 1000 [ 416.809707][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'. [ 416.890600][T14089] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2630'. [ 417.016282][T14076] lo speed is unknown, defaulting to 1000 [ 417.308184][T14095] tipc: Enabled bearer , priority 0 [ 417.335057][T14095] syzkaller0: entered promiscuous mode [ 417.346082][T14095] syzkaller0: entered allmulticast mode [ 417.482156][T14097] tipc: Resetting bearer [ 417.531243][T14094] tipc: Resetting bearer [ 417.568860][T14094] tipc: Disabling bearer [ 417.925583][T14114] lo speed is unknown, defaulting to 1000 [ 417.945852][T14119] netlink: 'syz.0.2638': attribute type 13 has an invalid length. [ 418.003782][T14119] netlink: 'syz.0.2638': attribute type 17 has an invalid length. [ 418.079328][T14127] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 418.144711][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2640'. [ 418.159347][T14130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2640'. [ 418.275833][T14119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.291642][T14119] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.328922][T14119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.409026][T14130] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 418.426937][T14130] gretap3: entered promiscuous mode [ 418.436454][T11641] lo speed is unknown, defaulting to 1000 [ 418.451153][T11641] syz2: Port: 1 Link ACTIVE [ 418.643202][T14143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2644'. [ 418.663599][T14114] lo speed is unknown, defaulting to 1000 [ 418.877480][T14140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2644'. [ 418.955358][T14156] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2650'. [ 419.471674][T14164] lo speed is unknown, defaulting to 1000 [ 419.969371][T14183] team_slave_0: left promiscuous mode [ 419.984437][T14183] team0: Port device team_slave_0 removed [ 419.991258][T14183] team_slave_1: left promiscuous mode [ 420.021151][T14183] team0: Port device team_slave_1 removed [ 420.050234][T14183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.067406][T14187] netlink: 'syz.0.2660': attribute type 13 has an invalid length. [ 420.068086][T14188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.089184][T14183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.102464][T14183] bond3: (slave bridge8): Releasing active interface [ 420.112692][T14183] bond4: (slave bond5): Releasing backup interface [ 420.123631][T14183] bond4: (slave bond5): the permanent HWaddr of slave - ee:8e:59:7e:bb:d8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 420.143087][T14183] bond4: (slave gretap3): making interface the new active one [ 420.157465][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 420.167260][T14183] bond4: (slave gretap3): Releasing backup interface [ 420.545876][T14189] team0: Failed to send options change via netlink (err -105) [ 420.557387][T14189] team0: Mode changed to "activebackup" [ 420.581192][T14191] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 420.592339][T11646] lo speed is unknown, defaulting to 1000 [ 420.596576][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.598680][T11646] syz2: Port: 1 Link DOWN [ 420.611774][T14194] bond0: (slave rose0): Error: Slave does not support XDP [ 420.632873][T14178] lo speed is unknown, defaulting to 1000 [ 420.644660][T14164] lo speed is unknown, defaulting to 1000 [ 420.647563][ T6188] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.674506][ T6188] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.704672][ T6188] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.734209][ T6188] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.794185][T14201] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.989648][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2663'. [ 421.045207][T14200] lo speed is unknown, defaulting to 1000 [ 421.193718][T14210] netlink: 'syz.4.2665': attribute type 13 has an invalid length. [ 421.307567][T14178] lo speed is unknown, defaulting to 1000 [ 421.320863][T14200] lo speed is unknown, defaulting to 1000 [ 421.534488][T14212] tipc: Enabled bearer , priority 0 [ 421.559074][T14212] syzkaller0: entered promiscuous mode [ 421.565009][T14212] syzkaller0: entered allmulticast mode [ 421.642349][T14212] tipc: Resetting bearer [ 421.655875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.664360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.780922][T14211] tipc: Resetting bearer [ 421.825652][T14211] tipc: Disabling bearer [ 421.849505][T14217] tipc: Enabled bearer , priority 0 [ 421.869727][T14215] syzkaller0: entered promiscuous mode [ 421.888531][T14215] syzkaller0: entered allmulticast mode [ 421.989672][T14215] tipc: Resetting bearer [ 422.023151][T14214] tipc: Resetting bearer [ 422.073858][T14221] netlink: 'syz.4.2669': attribute type 1 has an invalid length. [ 422.083536][T14214] tipc: Disabling bearer [ 422.092721][T14221] netlink: 'syz.4.2669': attribute type 2 has an invalid length. [ 422.103192][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 422.138187][T14219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 422.404067][T14225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.414668][T14225] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.433185][T14225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.495655][T14239] netlink: 'syz.0.2675': attribute type 13 has an invalid length. [ 422.765583][T14242] tipc: Enabled bearer , priority 0 [ 422.781980][T14235] tipc: Resetting bearer [ 422.830063][T14233] tipc: Disabling bearer [ 423.406022][T14263] syzkaller0: entered promiscuous mode [ 423.412535][T14263] syzkaller0: entered allmulticast mode [ 425.472973][T14286] vlan4: entered promiscuous mode [ 425.530885][T14292] netlink: 'syz.4.2686': attribute type 13 has an invalid length. [ 425.700711][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'. [ 427.106888][T14344] netlink: 'syz.0.2702': attribute type 13 has an invalid length. [ 427.354001][T14357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2706'. [ 427.911059][T14364] lo speed is unknown, defaulting to 1000 [ 427.977548][T14375] netlink: 'syz.3.2711': attribute type 1 has an invalid length. [ 428.301836][T14377] bond4: (slave gretap1): making interface the new active one [ 428.326415][T14377] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 428.358469][T14364] lo speed is unknown, defaulting to 1000 [ 428.381431][T14379] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 428.441139][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 428.462987][T14380] geneve2: left promiscuous mode [ 428.472318][T14380] team1: left promiscuous mode [ 428.473871][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 428.477519][T14380] team1: left allmulticast mode [ 428.504844][T14380] bridge5: left allmulticast mode [ 428.513477][T14380] bond4: left promiscuous mode [ 428.530426][T14380] bond4: left allmulticast mode [ 428.570190][T14384] tun0: tun_chr_ioctl cmd 2148045848 [ 428.576812][T14386] tun0: tun_chr_ioctl cmd 21731 [ 428.582547][ T6188] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.595400][ T6188] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.670853][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 428.777305][ T6188] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.853969][T14402] netlink: 'syz.4.2717': attribute type 1 has an invalid length. [ 428.882896][ T6188] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.940012][T14402] 8021q: adding VLAN 0 to HW filter on device bond7 [ 428.997647][T14406] vlan0: entered allmulticast mode [ 429.026984][T14406] bond7: (slave vlan0): Opening slave failed [ 429.164083][T14407] lo speed is unknown, defaulting to 1000 [ 429.180733][T14410] syzkaller1: entered promiscuous mode [ 429.186614][T14410] syzkaller1: entered allmulticast mode [ 429.718362][T14421] netlink: 'syz.0.2722': attribute type 13 has an invalid length. [ 429.726184][T14407] lo speed is unknown, defaulting to 1000 [ 430.349602][T14444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2728'. [ 430.359424][T14444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2728'. [ 430.471472][T14440] lo speed is unknown, defaulting to 1000 [ 430.739757][T14445] syzkaller0: entered promiscuous mode [ 430.764758][T14445] syzkaller0: entered allmulticast mode [ 431.331465][T14460] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2734'. [ 433.064271][T14440] lo speed is unknown, defaulting to 1000 [ 433.430555][T14468] lo speed is unknown, defaulting to 1000 [ 433.564699][T14477] tipc: Enabled bearer , priority 0 [ 433.601760][T14474] syzkaller0: entered promiscuous mode [ 433.620513][T14474] syzkaller0: entered allmulticast mode [ 433.757088][T14474] sch_fq: defrate 257 ignored. [ 433.789010][T14474] tipc: Resetting bearer [ 433.812105][T14471] tipc: Resetting bearer [ 433.848494][T14471] tipc: Disabling bearer [ 433.907271][T14468] lo speed is unknown, defaulting to 1000 [ 433.908134][T14472] lo speed is unknown, defaulting to 1000 [ 434.404006][T14488] netlink: 'syz.0.2741': attribute type 16 has an invalid length. [ 434.431128][T14488] netlink: 'syz.0.2741': attribute type 17 has an invalid length. [ 434.441682][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'. [ 434.491255][T14488] IPv6: NLM_F_REPLACE set, but no existing node found! [ 434.637159][T14472] lo speed is unknown, defaulting to 1000 [ 434.931388][T14502] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 434.975521][T14502] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2746'. [ 435.513812][T14504] lo speed is unknown, defaulting to 1000 [ 435.749815][T14519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.931750][T14523] tipc: Enabled bearer , priority 0 [ 435.988268][T14528] syzkaller0: entered promiscuous mode [ 435.999029][T14528] syzkaller0: entered allmulticast mode [ 436.116926][T14523] tipc: Resetting bearer [ 436.149583][T14521] tipc: Resetting bearer [ 436.188160][T14521] tipc: Disabling bearer [ 436.821463][T14504] lo speed is unknown, defaulting to 1000 [ 437.368309][T14554] tipc: Enabled bearer , priority 0 [ 437.376698][T14554] syzkaller0: entered promiscuous mode [ 437.382209][T14554] syzkaller0: entered allmulticast mode [ 437.841407][T14557] tipc: Resetting bearer [ 437.877497][T14553] tipc: Resetting bearer [ 438.056340][T14553] tipc: Disabling bearer [ 438.147913][ T5955] IPVS: starting estimator thread 0... [ 438.245230][T14567] IPVS: using max 33 ests per chain, 79200 per kthread [ 438.415657][T14563] lo speed is unknown, defaulting to 1000 [ 438.451003][T14580] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2763'. [ 438.638915][T14563] lo speed is unknown, defaulting to 1000 [ 439.247441][T14595] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2768'. [ 439.286997][T14592] lo speed is unknown, defaulting to 1000 [ 439.516677][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 440.241665][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2771'. [ 440.258538][T14592] lo speed is unknown, defaulting to 1000 [ 440.525607][T14626] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.731823][T14624] lo speed is unknown, defaulting to 1000 [ 440.923220][T14636] tipc: Enabled bearer , priority 10 [ 441.159321][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2780'. [ 441.326462][T14624] lo speed is unknown, defaulting to 1000 [ 441.341653][T14640] lo speed is unknown, defaulting to 1000 [ 441.699964][T14640] lo speed is unknown, defaulting to 1000 [ 441.794773][T14657] wg1: entered promiscuous mode [ 441.801714][T14657] wg1: entered allmulticast mode [ 441.900164][T14659] nbd: must specify at least one socket [ 441.917400][T14659] block nbd3: NBD_DISCONNECT [ 441.958841][T14659] block nbd3: Send disconnect failed -32 [ 441.967455][T14659] block nbd3: shutting down sockets [ 442.234001][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2787'. [ 442.550958][T14665] Bluetooth: MGMT ver 1.23 [ 442.741367][T14676] vlan0: entered promiscuous mode [ 442.747851][T14676] vlan0: entered allmulticast mode [ 442.753114][T14676] hsr_slave_1: entered allmulticast mode [ 442.834715][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2792'. [ 443.076792][T14683] lo speed is unknown, defaulting to 1000 [ 443.237488][T14672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.487264][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 443.744449][T14683] lo speed is unknown, defaulting to 1000 [ 444.264779][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2798'. [ 444.480628][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.806331][T14742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.818350][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2802'. [ 444.958596][T14752] netlink: 'syz.4.2803': attribute type 16 has an invalid length. [ 444.966865][T14752] netlink: 'syz.4.2803': attribute type 17 has an invalid length. [ 445.029782][T14752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.220031][T14756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2806'. [ 445.350116][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 445.868147][T14764] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2808'. [ 445.902798][T14765] tipc: Enabled bearer , priority 0 [ 445.921368][T14765] syzkaller0: entered promiscuous mode [ 445.936147][T14765] syzkaller0: entered allmulticast mode [ 446.029436][T14765] tipc: Resetting bearer [ 446.052063][T14763] tipc: Resetting bearer [ 446.109723][T14763] tipc: Disabling bearer [ 446.190572][ T6188] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 446.685234][T14799] netlink: 'syz.2.2817': attribute type 18 has an invalid length. [ 446.881020][T14791] netlink: 'syz.0.2812': attribute type 1 has an invalid length. [ 446.918849][T14791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2812'. [ 447.138441][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 447.492285][T14805] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.513462][T14822] tipc: Enabling of bearer rejected, failed to enable media [ 447.833063][T14823] lo speed is unknown, defaulting to 1000 [ 448.280907][T14849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.300253][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'. [ 448.320181][T14823] lo speed is unknown, defaulting to 1000 [ 448.346888][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'. [ 448.796259][T14863] __nla_validate_parse: 1 callbacks suppressed [ 448.796281][T14863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2834'. [ 448.826063][T14862] IPVS: persistence engine module ip_vs_pe_ not found [ 448.970074][T14874] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 448.980485][T14869] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2836'. [ 449.019818][T14869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2836'. [ 449.029214][T14869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2836'. [ 449.334152][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 449.347597][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 449.877514][T14890] tipc: Enabled bearer , priority 0 [ 449.910695][T14890] syzkaller0: entered promiscuous mode [ 449.924103][T14890] syzkaller0: entered allmulticast mode [ 450.145297][T14890] tipc: Resetting bearer [ 450.208155][T14899] lo speed is unknown, defaulting to 1000 [ 450.238093][T14889] tipc: Resetting bearer [ 450.636369][T14889] tipc: Disabling bearer [ 450.802223][T14899] lo speed is unknown, defaulting to 1000 [ 451.074713][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'. [ 452.094549][T14938] tipc: Enabling not permitted [ 452.100109][T14938] tipc: Enabling of bearer rejected, failed to enable media [ 452.381441][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 452.609799][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2863'. [ 453.068517][T14985] syzkaller0: entered promiscuous mode [ 453.074798][T14985] syzkaller0: entered allmulticast mode [ 453.245975][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 453.270182][T14988] macvtap0: entered promiscuous mode [ 453.280370][T14988] dummy0: entered promiscuous mode [ 453.289929][T14988] macvtap0: entered allmulticast mode [ 453.299128][T14988] dummy0: entered allmulticast mode [ 453.346075][T14991] dummy0: left allmulticast mode [ 453.356971][T14991] dummy0: left promiscuous mode [ 453.564623][T15000] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 453.684912][T15006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.019491][T15014] netlink: 'syz.3.2881': attribute type 1 has an invalid length. [ 454.059396][T15013] lo speed is unknown, defaulting to 1000 [ 454.135996][T15014] __nla_validate_parse: 3 callbacks suppressed [ 454.136016][T15014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2881'. [ 454.171614][T15021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.612890][ T928] lo speed is unknown, defaulting to 1000 [ 454.654828][ T928] syz0: Port: 1 Link DOWN [ 454.855240][T12093] lo speed is unknown, defaulting to 1000 [ 455.097058][T15013] lo speed is unknown, defaulting to 1000 [ 455.267274][T15037] netlink: 'syz.2.2889': attribute type 13 has an invalid length. [ 455.359519][T15047] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2892'. [ 455.476037][T15050] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2893'. [ 455.611665][T15044] lo speed is unknown, defaulting to 1000 [ 456.585406][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2895'. [ 456.821581][T15044] lo speed is unknown, defaulting to 1000 [ 456.899750][T15068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 457.093271][T15078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2900'. [ 457.142260][T15079] tipc: Enabled bearer , priority 0 [ 457.162031][T15070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2897'. [ 457.197651][T15075] syzkaller0: entered promiscuous mode [ 457.203185][T15075] syzkaller0: entered allmulticast mode [ 457.373827][T15075] tipc: Resetting bearer [ 457.421068][T15074] tipc: Resetting bearer [ 457.497709][T15074] tipc: Disabling bearer [ 457.679172][T15097] netlink: 'syz.4.2905': attribute type 18 has an invalid length. [ 457.708705][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 457.982160][T15107] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2907'. [ 458.393569][T15118] netlink: 'syz.0.2921': attribute type 2 has an invalid length. [ 458.425137][T15118] k›*·]‘: entered promiscuous mode [ 458.446547][T15118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.469341][T11641] lo speed is unknown, defaulting to 1000 [ 458.478119][T11641] syz2: Port: 1 Link ACTIVE [ 458.490405][T15119] lo speed is unknown, defaulting to 1000 [ 458.600750][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2912'. [ 459.459228][T15119] lo speed is unknown, defaulting to 1000 [ 459.612096][T15158] lo speed is unknown, defaulting to 1000 [ 460.030544][T15174] netlink: 'syz.0.2922': attribute type 9 has an invalid length. [ 460.181689][T15174] netlink: 'syz.0.2922': attribute type 6 has an invalid length. [ 460.372830][T15158] lo speed is unknown, defaulting to 1000 [ 461.610755][T15182] block nbd3: server does not support multiple connections per device. [ 461.619991][T15182] block nbd3: shutting down sockets [ 461.803633][T15184] netlink: 'syz.3.2927': attribute type 13 has an invalid length. [ 461.822543][T15186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2926'. [ 461.830708][T15188] netlink: 'syz.1.2928': attribute type 3 has an invalid length. [ 461.853721][T15184] tipc: Resetting bearer [ 461.982098][T15188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.991830][T15188] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.010115][T15188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.200107][T15196] netlink: 'syz.4.2930': attribute type 13 has an invalid length. [ 462.219725][T15197] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2931'. [ 462.268993][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 462.309616][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2931'. [ 462.326111][T15202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.333807][T15202] IPv6: NLM_F_CREATE should be set when creating new route [ 462.341721][T15202] IPv6: NLM_F_CREATE should be set when creating new route [ 462.349095][T15202] IPv6: NLM_F_CREATE should be set when creating new route [ 462.573352][T15212] lo speed is unknown, defaulting to 1000 [ 463.218689][T15220] ipvlan0: entered promiscuous mode [ 463.728221][T15228] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 463.906252][T15228] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 463.972030][T15228] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 464.107763][T15228] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 464.203499][T15234] tap0: tun_chr_ioctl cmd 1074025677 [ 464.227844][T15234] tap0: linktype set to 0 [ 464.527886][ T6184] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 464.544306][ T6184] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 464.644412][ T6184] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 464.728783][ T66] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 465.137427][T15246] nbd: nbd1 already in use [ 465.157349][T15246] block nbd1: NBD_DISCONNECT [ 465.162021][T15246] block nbd1: Send disconnect failed -32 [ 465.184919][T15246] block nbd1: shutting down sockets [ 465.483374][T15251] tipc: Enabled bearer , priority 0 [ 465.517991][T15251] syzkaller0: entered promiscuous mode [ 465.541906][T15251] syzkaller0: entered allmulticast mode [ 465.709262][T15252] tipc: Resetting bearer [ 466.005231][T15260] netlink: 'syz.4.2950': attribute type 29 has an invalid length. [ 466.098047][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 466.110929][T15267] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 466.211985][T15267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2951'. [ 466.229382][T15269] IPv6: Can't replace route, no match found [ 466.594266][ T5912] tipc: Node number set to 3524113389 [ 467.541943][T15289] batman_adv: batadv0: Adding interface: ip6gretap1 [ 467.561923][T15289] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.663204][T15289] batman_adv: batadv0: Interface activated: ip6gretap1 [ 467.946314][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2960'. [ 468.360188][T15298] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 468.419770][T15298] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 468.442572][T15299] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 468.448786][T15298] batman_adv: batadv0: Removing interface: ip6gretap1 [ 468.495118][T15299] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2961'. [ 468.601156][T15298] netlink: 'syz.1.2962': attribute type 10 has an invalid length. [ 468.627488][T15298] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 468.659692][T15298] bond0: (slave wlan1): refused to change device type [ 468.969479][ T61] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 469.059193][T15317] batadv0: entered promiscuous mode [ 469.105266][T15317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.524054][T15346] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 470.722506][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2973'. [ 470.885286][T15353] tipc: New replicast peer: 255.255.255.255 [ 470.892063][T15353] tipc: Enabled bearer , priority 10 [ 471.633643][T15356] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 471.699370][T15368] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2979'. [ 471.703709][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 472.228671][T15384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.261905][T15384] team0: Device gtp0 is up. Set it down before adding it as a team port [ 472.347833][T15381] lo speed is unknown, defaulting to 1000 [ 472.353577][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2983'. [ 474.329948][T15422] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2996'. [ 474.341448][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2996'. [ 474.351227][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2996'. [ 474.366479][T15426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2998'. [ 474.404700][T15427] netlink: 'syz.3.2996': attribute type 4 has an invalid length. [ 474.616297][T15432] IPVS: stopping backup sync thread 13806 ... [ 474.627898][T15432] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3001'. [ 474.640193][T15432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3001'. [ 474.650108][T15432] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3001'. [ 474.994033][T15442] netlink: 'syz.3.3004': attribute type 1 has an invalid length. [ 475.013112][T15442] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3004'. [ 475.336140][T15447] netlink: 'syz.3.3005': attribute type 13 has an invalid length. [ 475.362468][T15447] tipc: Resetting bearer [ 475.703395][T15459] netlink: 'syz.1.3007': attribute type 16 has an invalid length. [ 475.712213][T15459] netlink: 'syz.1.3007': attribute type 17 has an invalid length. [ 475.753677][T15459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.775986][T15457] lo speed is unknown, defaulting to 1000 [ 475.856357][T15467] tipc: Enabling of bearer rejected, already enabled [ 475.920004][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'. [ 476.193796][T15474] netlink: 'syz.0.3013': attribute type 13 has an invalid length. [ 476.368526][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3015'. [ 476.528097][T15484] pimreg: entered allmulticast mode [ 476.585876][T15485] netlink: 'syz.0.3016': attribute type 1 has an invalid length. [ 476.722523][T15484] pimreg: left allmulticast mode [ 476.990895][T15463] lo speed is unknown, defaulting to 1000 [ 478.605313][T15487] lo speed is unknown, defaulting to 1000 [ 478.971702][T15497] lo speed is unknown, defaulting to 1000 [ 479.748141][T15533] netlink: 'syz.2.3026': attribute type 13 has an invalid length. [ 481.103817][T15557] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 481.143954][T15557] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 481.351951][T15564] lo speed is unknown, defaulting to 1000 [ 481.411264][T15568] __nla_validate_parse: 1 callbacks suppressed [ 481.411286][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 481.838383][T15574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.094359][T15586] syzkaller1: entered allmulticast mode [ 482.111655][T15587] netlink: 'syz.0.3038': attribute type 13 has an invalid length. [ 482.677189][T15598] netlink: 'syz.0.3040': attribute type 18 has an invalid length. [ 482.924278][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.180894][T15605] lo speed is unknown, defaulting to 1000 [ 483.312096][T15612] netlink: 'syz.1.3045': attribute type 7 has an invalid length. [ 483.322314][T15608] netlink: 'syz.3.3043': attribute type 4 has an invalid length. [ 483.331684][T15612] netlink: 'syz.1.3045': attribute type 8 has an invalid length. [ 483.338463][T15608] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3043'. [ 483.372952][T15608] Ã: renamed from bond0 (while UP) [ 483.476772][T15615] netlink: 'syz.2.3046': attribute type 13 has an invalid length. [ 483.699008][T15618] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 484.166505][T15633] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 484.191250][T15633] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 484.206604][T15633] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 484.292368][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3053'. [ 484.416075][T15642] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 484.454419][T15642] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 484.504478][T15642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3049'. [ 484.687507][T15622] lo speed is unknown, defaulting to 1000 [ 484.867376][ T6184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.889763][ T6184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.959589][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 485.143018][T15657] team0: Unable to change to the same mode the team is in [ 485.461772][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.498440][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.539592][T15647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.744326][T15661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.869138][T15673] batadv0: left promiscuous mode [ 485.894667][T15673] bond3: left promiscuous mode [ 485.899672][T15673] bond3: left allmulticast mode [ 485.905593][T15673] gretap2: left promiscuous mode [ 485.923024][T15673] geneve2: left promiscuous mode [ 485.938594][T15673] tipc: Resetting bearer [ 485.968293][T15673] syzkaller0: left promiscuous mode [ 485.991772][T15673] syzkaller0: left allmulticast mode [ 486.022590][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3062'. [ 486.061042][T15678] hsr_slave_0: left promiscuous mode [ 486.092307][T15678] hsr_slave_1: left promiscuous mode [ 486.257050][T15682] netlink: 'syz.1.3065': attribute type 10 has an invalid length. [ 486.299655][T15682] bond0: (slave team0): refused to change device type [ 486.464811][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 486.551101][T15689] lo speed is unknown, defaulting to 1000 [ 486.761676][T15698] netlink: 'syz.1.3072': attribute type 18 has an invalid length. [ 486.875460][T15701] netlink: 'syz.0.3071': attribute type 1 has an invalid length. [ 486.940992][T15701] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3071'. [ 487.066168][T15709] netlink: 'syz.1.3075': attribute type 1 has an invalid length. [ 487.088229][T15709] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3075'. [ 487.348716][T15711] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 487.854829][T15723] netlink: 'syz.2.3068': attribute type 13 has an invalid length. [ 487.918887][T15723] netlink: 'syz.2.3068': attribute type 17 has an invalid length. [ 488.305740][T15723] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.349996][T15723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.381025][T15731] netlink: 'syz.4.3079': attribute type 13 has an invalid length. [ 488.400395][ T5912] lo speed is unknown, defaulting to 1000 [ 488.454176][ T5912] syz0: Port: 1 Link ACTIVE [ 488.464368][T11641] lo speed is unknown, defaulting to 1000 [ 488.745015][T15728] netlink: 'syz.1.3080': attribute type 21 has an invalid length. [ 488.782697][T15728] ipvlan2: entered promiscuous mode [ 488.913267][T15737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.075183][T15737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.342953][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 489.452290][T15751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.005954][T15763] lo speed is unknown, defaulting to 1000 [ 490.588767][T15771] netlink: 'syz.0.3091': attribute type 1 has an invalid length. [ 490.597526][T15771] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3091'. [ 490.608103][T15771] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3091'. [ 490.627564][T15770] netlink: 'syz.3.3092': attribute type 13 has an invalid length. [ 490.666267][T15770] tipc: Resetting bearer [ 490.748741][T15762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.410552][T15779] macvtap0: left promiscuous mode [ 491.419970][T15779] macvtap0: left allmulticast mode [ 491.443629][T15785] lo speed is unknown, defaulting to 1000 [ 492.398290][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 493.265609][T15835] : entered promiscuous mode [ 493.715014][T15845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.755358][T15843] lo speed is unknown, defaulting to 1000 [ 493.801055][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'. [ 493.978117][T15849] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3110'. [ 494.143895][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 494.411847][T15861] !: renamed from dummy0 [ 494.506216][T15866] nbd: couldn't find device at index 0 [ 494.586082][T15863] lo speed is unknown, defaulting to 1000 [ 494.915214][T15882] batadv0: entered promiscuous mode [ 494.968486][T15882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.126710][T15886] netlink: 'syz.3.3118': attribute type 1 has an invalid length. [ 495.179001][T15886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3118'. [ 495.411725][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3120'. [ 495.431379][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3120'. [ 495.512624][T15895] team0: entered promiscuous mode [ 495.562845][T15895] debugfs: 'hsr0' already exists in 'hsr' [ 495.590757][T15895] Cannot create hsr debugfs directory [ 495.613939][T15895] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 495.647275][T15895] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 495.649427][T15900] Unsupported ieee802154 address type: 0 [ 496.212956][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 496.277785][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 496.666826][T15921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3125'. [ 497.843252][T15942] netlink: 'syz.3.3130': attribute type 1 has an invalid length. [ 497.902511][T15944] netlink: 'syz.1.3131': attribute type 13 has an invalid length. [ 498.041025][T15938] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 498.215406][T15950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.437072][T15958] __nla_validate_parse: 1 callbacks suppressed [ 498.437094][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 498.485366][T15971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3136'. [ 498.517954][T15950] syzkaller1: entered allmulticast mode [ 498.716331][T15975] lo speed is unknown, defaulting to 1000 [ 498.787642][T15979] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 499.348729][T15997] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 499.381259][T15997] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3141'. [ 500.033901][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3143'. [ 500.207077][T16023] netlink: 'syz.0.3145': attribute type 13 has an invalid length. [ 500.279923][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'. [ 500.310731][T16025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3146'. [ 500.477499][T16034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'. [ 501.119772][T16043] netlink: 'syz.2.3150': attribute type 1 has an invalid length. [ 501.197846][T16043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3150'. [ 501.395760][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3151'. [ 501.868310][T16054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.934433][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3152'. [ 503.260446][T16070] netlink: 'syz.2.3158': attribute type 1 has an invalid length. [ 503.279950][T16070] netlink: 'syz.2.3158': attribute type 1 has an invalid length. [ 503.372026][T16068] lo speed is unknown, defaulting to 1000 [ 503.418086][T16072] netlink: 'syz.3.3159': attribute type 13 has an invalid length. [ 503.467586][T16072] tipc: Resetting bearer [ 503.528294][T16078] netlink: 'syz.2.3158': attribute type 1 has an invalid length. [ 503.807809][T16078] 8021q: adding VLAN 0 to HW filter on device bond6 [ 503.937825][T16080] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 504.137036][T16070] vlan0: entered allmulticast mode [ 504.152642][T16070] veth1: entered allmulticast mode [ 504.170228][T16070] bond6: (slave vlan0): Opening slave failed [ 504.230952][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.271296][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.429153][T16089] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3162'. [ 504.879725][T16096] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.410766][T16096] bond8 (unregistering): Released all slaves [ 506.742932][T16142] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 506.777692][T16141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.803813][T16142] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3173'. [ 506.908815][T16140] team0: Mode changed to "activebackup" [ 507.433333][T16158] lo speed is unknown, defaulting to 1000 [ 507.587090][T16165] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131 [ 508.088219][T16179] bond6: (slave wlan0): Releasing active interface [ 508.151952][T16156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.182562][T16179] team0: Unable to change to the same mode the team is in [ 508.689062][T16198] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3188'. [ 509.016338][T16205] netlink: 'syz.1.3189': attribute type 1 has an invalid length. [ 509.076416][T16205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3189'. [ 509.192136][T16206] lo speed is unknown, defaulting to 1000 [ 509.809846][T16227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.859017][T16231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.131351][T16221] lo speed is unknown, defaulting to 1000 [ 510.470647][T16242] tipc: Enabled bearer , priority 0 [ 510.482832][T16244] syzkaller0: entered promiscuous mode [ 510.507095][T16244] syzkaller0: entered allmulticast mode [ 510.585661][T16242] tipc: Resetting bearer [ 510.598780][T16241] tipc: Resetting bearer [ 510.632773][T16241] tipc: Disabling bearer [ 510.831848][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3199'. [ 510.903698][T16250] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 510.923172][T16250] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 510.967272][T16250] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 511.111299][T16255] tipc: Enabled bearer , priority 0 [ 511.140268][T16255] syzkaller0: entered promiscuous mode [ 511.154343][T16255] syzkaller0: entered allmulticast mode [ 511.235232][T16259] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3201'. [ 511.266049][T16266] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 511.275969][T16266] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 511.286743][T16255] tipc: Resetting bearer [ 511.537110][T16274] tipc: Resetting bearer [ 511.598905][T16274] bond4: (slave gretap1): Releasing active interface [ 511.644276][T16274] bond4: (slave gretap1): the permanent HWaddr of slave - 0e:b2:4c:f2:74:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 511.734752][T16274] bond4: (slave gretap2): making interface the new active one [ 511.817773][T16284] netlink: 'syz.2.3206': attribute type 13 has an invalid length. [ 511.827280][T16274] bond4: (slave gretap2): Releasing active interface [ 511.934535][T16285] team0: Mode changed to "activebackup" [ 511.945463][T16288] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3207'. [ 512.077997][T16286] veth21: entered promiscuous mode [ 512.668558][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'. [ 512.986773][T16321] bond0: Device is already in use. [ 513.077367][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3215'. [ 513.199374][T16329] IPVS: stopping backup sync thread 14874 ... [ 513.443638][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'. [ 513.698335][T16341] lo speed is unknown, defaulting to 1000 [ 513.732500][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3220'. [ 514.128509][T16353] netlink: 'syz.1.3222': attribute type 13 has an invalid length. [ 514.353182][T16357] lo speed is unknown, defaulting to 1000 [ 514.453393][T16366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.512617][T16370] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 514.538126][T16370] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 514.717625][T16366] syzkaller1: entered allmulticast mode [ 514.801591][T16382] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 514.977074][T16382] 8021q: adding VLAN 0 to HW filter on device bond8 [ 515.203507][T16387] netlink: 'syz.0.3229': attribute type 3 has an invalid length. [ 516.255703][T16399] netlink: 'syz.4.3232': attribute type 1 has an invalid length. [ 516.295980][T16399] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3232'. [ 516.364702][T16405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3234'. [ 516.373718][T16405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3234'. [ 516.444739][T16405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3234'. [ 516.474001][T16405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3234'. [ 516.781388][T16417] netlink: 'syz.1.3236': attribute type 13 has an invalid length. [ 517.161355][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 518.047429][T16453] tipc: Enabling of bearer rejected, already enabled [ 518.065446][T16453] syzkaller0: entered promiscuous mode [ 518.071002][T16453] syzkaller0: entered allmulticast mode [ 518.152834][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'. [ 518.210260][T16455] geneve2: entered promiscuous mode [ 518.219180][T16455] geneve2: entered allmulticast mode [ 518.253071][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.273728][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.311290][ T66] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.365486][T16464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 518.402230][T16459] lo speed is unknown, defaulting to 1000 [ 518.583085][ T66] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.717812][T16464] lo speed is unknown, defaulting to 1000 [ 518.977942][T16475] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 519.154324][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3250'. [ 519.180407][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3251'. [ 520.466669][T16496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.850285][T16501] team0: Mode changed to "activebackup" [ 521.927296][T16525] lo speed is unknown, defaulting to 1000 [ 522.123371][T16530] __nla_validate_parse: 2 callbacks suppressed [ 522.123394][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 522.204051][T16530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.669482][T16528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 522.683101][T16541] syzkaller1: entered allmulticast mode [ 523.061323][T16552] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 523.483035][T16564] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 523.553926][T16564] 8021q: adding VLAN 0 to HW filter on device bond9 [ 523.564060][T16569] netlink: 'syz.4.3267': attribute type 13 has an invalid length. [ 523.591796][T16567] bond9: (slave wlan0): Enslaving as an active interface with a down link [ 523.704394][T16573] netlink: 432 bytes leftover after parsing attributes in process `syz.2.3269'. [ 523.856851][T16580] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 523.857409][T16577] IPVS: stopping backup sync thread 16580 ... [ 524.181626][T16587] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 524.257454][T16587] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.343220][T16593] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 524.343533][T16589] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 524.421884][T16587] vlan4: entered allmulticast mode [ 524.428441][T16587] veth1: entered allmulticast mode [ 524.435353][T16587] bond5: (slave vlan4): Opening slave failed [ 524.499846][T16593] 8021q: adding VLAN 0 to HW filter on device bond10 [ 524.531662][T16596] bond9: (slave wlan0): Releasing active interface [ 524.557099][T16596] bond10: (slave wlan0): Enslaving as an active interface with a down link [ 524.623703][T16598] lo speed is unknown, defaulting to 1000 [ 525.037967][T16607] tipc: Enabling of bearer rejected, already enabled [ 525.119934][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3278'. [ 525.488703][T16620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.636636][T16624] syzkaller1: entered allmulticast mode [ 526.748962][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3284'. [ 527.002166][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'. [ 527.500057][T16646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.593699][T16646] vxcan0: entered promiscuous mode [ 527.823406][T16647] lo speed is unknown, defaulting to 1000 [ 528.240550][T16652] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 528.265685][T16652] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3287'. [ 528.285451][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 528.330418][T16651] lo speed is unknown, defaulting to 1000 [ 528.517324][T16659] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3288'. [ 528.548406][T16659] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3288'. [ 528.602926][T16662] netlink: 'syz.0.3289': attribute type 1 has an invalid length. [ 528.635513][T16662] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3289'. [ 528.800883][T16665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.835803][T16665] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.886054][T16665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.052680][T16659] rdma_rxe: rxe_newlink: failed to add lo [ 529.649480][T16671] lo speed is unknown, defaulting to 1000 [ 529.738259][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 529.764253][T16676] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 530.943312][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'. [ 531.538347][T16699] bridge8: port 1(veth23) entered blocking state [ 531.545487][T16699] bridge8: port 1(veth23) entered disabled state [ 531.564697][T16699] veth23: entered allmulticast mode [ 531.598722][T16699] veth23: entered promiscuous mode [ 531.622873][T16700] bridge8: port 2(veth0_to_bond) entered blocking state [ 531.638068][T16700] bridge8: port 2(veth0_to_bond) entered disabled state [ 531.664635][T16700] veth0_to_bond: entered allmulticast mode [ 531.685287][T16700] veth0_to_bond: entered promiscuous mode [ 531.716650][T16701] vlan4: entered allmulticast mode [ 531.722182][T16701] bridge8: port 3(vlan4) entered blocking state [ 531.729370][T16701] bridge8: port 3(vlan4) entered disabled state [ 531.748324][T16701] vlan4: entered promiscuous mode [ 531.753588][T16701] veth1: entered promiscuous mode [ 532.084791][T16711] syzkaller0: left promiscuous mode [ 532.121514][T16711] syzkaller0: left allmulticast mode [ 533.170720][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3301'. [ 533.221351][T16603] Set syz1 is full, maxelem 65536 reached [ 533.415419][T16731] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 533.468679][T16731] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3302'. [ 533.581435][T16732] lo speed is unknown, defaulting to 1000 [ 533.819056][T16738] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 533.844484][T16738] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3304'. [ 533.986351][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 534.150623][T16742] netlink: 'syz.0.3306': attribute type 13 has an invalid length. [ 534.484941][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 534.705670][T16759] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 534.729539][T16759] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 534.791115][T16762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.797627][T16754] veth21: left promiscuous mode [ 535.041847][T16759] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 535.634435][T11641] lo speed is unknown, defaulting to 1000 [ 535.635573][T16759] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 535.640558][T11641] syz0: Port: 1 Link DOWN [ 535.669083][T16763] bond10: (slave wlan0): Releasing active interface [ 535.688102][ T5960] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.718264][ T5960] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.747399][ T5912] lo speed is unknown, defaulting to 1000 [ 535.800847][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 536.123700][ T5960] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.177447][ T5960] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.355475][T16793] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 536.399248][T16793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3316'. [ 536.930385][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'. [ 537.617572][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'. [ 537.647994][T16810] netlink: 'syz.1.3320': attribute type 13 has an invalid length. [ 537.889371][T16819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3323'. [ 537.929205][T16819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3323'. [ 538.163100][T16823] lo speed is unknown, defaulting to 1000 [ 538.659043][T16834] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 538.724733][T16834] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 538.952807][T16842] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 539.161488][T16842] 8021q: adding VLAN 0 to HW filter on device bond11 [ 539.229460][T16845] bond11: (slave wlan0): Enslaving as an active interface with a down link [ 539.307928][T16841] lo speed is unknown, defaulting to 1000 [ 539.863452][T16852] __nla_validate_parse: 2 callbacks suppressed [ 539.863474][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 540.031337][T16855] tipc: Resetting bearer [ 540.109343][T16855] syzkaller0: left promiscuous mode [ 540.146174][T16855] syzkaller0: left allmulticast mode [ 540.275491][T16861] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 540.523657][T16861] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 540.732783][T16861] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 540.787855][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3334'. [ 540.832901][T16868] lo speed is unknown, defaulting to 1000 [ 540.862953][T16861] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 541.139793][ T6188] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 541.202932][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 541.265746][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 541.322368][ T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 541.356661][T16880] lo speed is unknown, defaulting to 1000 [ 542.672081][T16907] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 542.871846][T16912] dvmrp8: entered allmulticast mode [ 542.880899][T16924] bond11: (slave wlan0): Releasing active interface [ 542.895159][T16924] bond4: (slave bridge4): Releasing active interface [ 542.908266][T16924] bond5: (slave gretap2): Releasing backup interface [ 542.920101][T16924] bond6: (slave bridge5): Releasing active interface [ 542.932197][T16924] bond7: (slave bridge7): Releasing backup interface [ 542.946835][T16911] dvmrp8: left allmulticast mode [ 542.991031][T16924] team0: Mode changed to "activebackup" [ 543.530036][T16953] netlink: 'syz.0.3356': attribute type 1 has an invalid length. [ 543.539028][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 543.561487][T16953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3356'. [ 543.850841][T16961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.880940][T16960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3359'. [ 543.977463][T16962] syzkaller1: entered allmulticast mode [ 544.302727][T16967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3360'. [ 544.408144][T16969] team0: Unable to change to the same mode the team is in [ 544.894281][T16981] netlink: 'syz.4.3365': attribute type 83 has an invalid length. [ 544.936149][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3362'. [ 544.978646][T16985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.108741][T16987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.557883][T17003] lo speed is unknown, defaulting to 1000 [ 546.341428][T17010] rdma_rxe: rxe_newlink: failed to add lo [ 546.355019][T17004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.578079][T17013] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 547.052795][T17042] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3379'. [ 547.087313][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3378'. [ 547.099275][T17042] netlink: 'syz.3.3379': attribute type 29 has an invalid length. [ 547.566295][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3384'. [ 547.605226][T17055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3382'. [ 547.708533][T17061] lo speed is unknown, defaulting to 1000 [ 547.720551][T17066] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3384'. [ 548.011764][T17080] syzkaller1: entered promiscuous mode [ 548.018052][T17080] syzkaller1: entered allmulticast mode [ 548.045204][T17080] netlink: 'syz.1.3389': attribute type 15 has an invalid length. [ 548.068104][T17082] netlink: 'syz.2.3387': attribute type 1 has an invalid length. [ 548.115161][T17082] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3387'. [ 548.159558][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'. [ 548.402232][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 548.673657][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 549.270356][T17121] pimreg: entered allmulticast mode [ 549.339365][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.491543][T17130] lo speed is unknown, defaulting to 1000 [ 549.602009][T17134] netlink: 'syz.3.3401': attribute type 1 has an invalid length. [ 549.856757][T17134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.960334][T17138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.975528][T17138] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 550.001651][T17138] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 550.053815][T17143] __nla_validate_parse: 2 callbacks suppressed [ 550.053835][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 550.079599][T17141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3400'. [ 550.195653][T17134] veth15: entered promiscuous mode [ 550.206268][T17148] netlink: 'syz.4.3400': attribute type 13 has an invalid length. [ 550.214676][T17148] netlink: 'syz.4.3400': attribute type 17 has an invalid length. [ 550.241062][T17145] erspan0: entered allmulticast mode [ 550.321173][T17148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.542713][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 550.790304][T17166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.919271][T17165] lo speed is unknown, defaulting to 1000 [ 551.508283][T17185] netlink: 'syz.1.3413': attribute type 13 has an invalid length. [ 551.891697][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 552.427833][T17189] lo speed is unknown, defaulting to 1000 [ 552.735503][T17223] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3424'. [ 552.769858][T17225] netlink: 'syz.3.3422': attribute type 1 has an invalid length. [ 552.779126][T17223] batadv2: entered promiscuous mode [ 552.786466][T17223] batadv2: entered allmulticast mode [ 552.792430][T17225] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3422'. [ 552.941828][T17230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3424'. [ 553.213192][T17232] netlink: 'syz.4.3425': attribute type 13 has an invalid length. [ 554.632741][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 554.968063][T17268] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 554.968353][T17265] IPVS: stopping backup sync thread 17268 ... [ 555.375856][T17279] netlink: 'syz.2.3438': attribute type 13 has an invalid length. [ 555.376366][T17282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.466420][T17283] netlink: 'syz.3.3436': attribute type 10 has an invalid length. [ 555.523430][T17283] team0: Port device 0! added [ 555.549715][T17286] netlink: 'syz.3.3436': attribute type 10 has an invalid length. [ 555.599449][T17286] team0: Port device 0! removed [ 555.628605][T17286] Ã: (slave 0!): Enslaving as an active interface with an up link [ 555.712198][T17290] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3441'. [ 555.730124][T17290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3441'. [ 555.743907][T17263] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 555.759418][T17292] netlink: 'syz.2.3440': attribute type 1 has an invalid length. [ 555.768277][T17292] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3440'. [ 555.769547][T17290] rdma_rxe: rxe_newlink: failed to add lo [ 555.795291][T17291] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 555.795582][T17263] netlink: 'syz.0.3433': attribute type 4 has an invalid length. [ 555.808589][T17291] netlink: 'syz.0.3433': attribute type 4 has an invalid length. [ 555.861186][T17290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.873570][T17263] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3433'. [ 555.875052][T17291] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3433'. [ 555.906808][T17290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.262859][T17302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.402302][T17311] sctp: [Deprecated]: syz.3.3444 (pid 17311) Use of int in max_burst socket option deprecated. [ 556.402302][T17311] Use struct sctp_assoc_value instead [ 556.426205][T17310] lo speed is unknown, defaulting to 1000 [ 556.546020][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3444'. [ 557.083356][T17329] netlink: 'syz.0.3448': attribute type 6 has an invalid length. [ 557.349589][T17338] netlink: 'syz.3.3450': attribute type 13 has an invalid length. [ 557.369852][T17338] tipc: Resetting bearer [ 557.472176][T17342] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3453'. [ 557.556924][T17342] batadv2: entered promiscuous mode [ 557.587096][T17342] batadv2: entered allmulticast mode [ 557.587399][T17340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.647082][T17348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3453'. [ 557.816480][T17340] vxcan2: entered promiscuous mode [ 557.965201][ T66] wlan0: Trigger new scan to find an IBSS to join [ 558.174545][T17371] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3457'. [ 558.850207][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3460'. [ 559.162589][T17382] lo speed is unknown, defaulting to 1000 [ 559.345494][T17397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.686763][T17399] sctp: [Deprecated]: syz.1.3464 (pid 17399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 559.686763][T17399] Use struct sctp_sack_info instead [ 560.413113][T17407] bond0 (unregistering): Released all slaves [ 560.473793][T17389] lo speed is unknown, defaulting to 1000 [ 560.930910][T17429] validate_nla: 2 callbacks suppressed [ 560.930929][T17429] netlink: 'syz.2.3470': attribute type 1 has an invalid length. [ 560.974445][T17429] __nla_validate_parse: 3 callbacks suppressed [ 560.974463][T17429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3470'. [ 561.027971][ T61] wlan0: Trigger new scan to find an IBSS to join [ 561.864418][T17448] tipc: Enabling of bearer rejected, failed to enable media [ 561.895899][T17430] lo speed is unknown, defaulting to 1000 [ 561.986382][T17452] netlink: 'syz.2.3472': attribute type 1 has an invalid length. [ 562.017409][T17452] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3472'. [ 562.599785][T17461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.796559][T17461] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 563.198706][T17472] netlink: 'syz.4.3478': attribute type 13 has an invalid length. [ 563.949977][T17489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.974621][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.822679][T17484] batadv0: left promiscuous mode [ 564.856805][T17484] wg1: left promiscuous mode [ 564.861741][T17484] wg1: left allmulticast mode [ 564.898267][T17484] bridge8: left allmulticast mode [ 564.921869][T17484] geneve2: left promiscuous mode [ 564.929938][T17484] geneve2: left allmulticast mode [ 564.939646][T17484] gretap2: left promiscuous mode [ 564.949914][T17484] hsr0: left allmulticast mode [ 564.960250][T17484] hsr_slave_0: left allmulticast mode [ 564.966427][T17484] hsr_slave_1: left allmulticast mode [ 564.982452][T17484] hsr0: left promiscuous mode [ 564.988921][T17484] macvlan0: left promiscuous mode [ 564.995128][T17484] macvlan0: left allmulticast mode [ 565.011510][T17484] gretap3: left promiscuous mode [ 565.047254][T17484] tipc: Resetting bearer [ 565.065721][T17500] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 565.094398][T17500] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3483'. [ 565.121225][ T5960] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 565.133716][ T5960] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 565.143590][ T5960] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 565.199529][ T5960] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 565.293775][T17512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3485'. [ 565.473585][T17521] smc: net device bond0 applied user defined pnetid SYZ2 [ 565.521522][T17521] smc: net device bond0 erased user defined pnetid SYZ2 [ 565.541576][T17516] lo speed is unknown, defaulting to 1000 [ 565.562530][T17521] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 565.574670][T17521] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 565.650925][T17527] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3486'. [ 566.018643][T17546] netlink: 'syz.2.3491': attribute type 1 has an invalid length. [ 566.048213][T17546] netlink: 'syz.2.3491': attribute type 1 has an invalid length. [ 566.276279][T17556] netlink: 'syz.2.3491': attribute type 1 has an invalid length. [ 566.476237][T17556] 8021q: adding VLAN 0 to HW filter on device bond7 [ 566.642938][T17546] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 566.710377][T17552] vlan0: entered allmulticast mode [ 567.005390][T17561] lo speed is unknown, defaulting to 1000 [ 567.564641][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 568.367010][T17575] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 568.389200][T17578] netlink: 'syz.3.3496': attribute type 4 has an invalid length. [ 568.421087][T17580] netlink: 'syz.2.3498': attribute type 1 has an invalid length. [ 568.436517][T17580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3498'. [ 568.703856][T17582] lo speed is unknown, defaulting to 1000 [ 568.733244][T17590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.707065][T17607] team0: Unable to change to the same mode the team is in [ 570.063492][T17620] netlink: 'syz.1.3505': attribute type 18 has an invalid length. [ 570.296104][T17626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3507'. [ 570.336472][T17622] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3506'. [ 570.740383][T17638] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 570.751716][T17644] ÿ: renamed from bond_slave_0 [ 570.753269][T17638] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3508'. [ 570.827766][T17638] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3508'. [ 570.856096][ T30] audit: type=1800 audit(1755563289.265:8): pid=17628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3507" name="memory.events" dev="tmpfs" ino=3513 res=0 errno=0 [ 571.141500][T17650] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3511'. [ 571.782576][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'. [ 572.580717][T17685] netlink: 'syz.2.3518': attribute type 18 has an invalid length. [ 573.066755][T17692] syzkaller1: entered allmulticast mode [ 573.432526][T17700] lo speed is unknown, defaulting to 1000 [ 574.442274][T17717] veth0_to_bond: left allmulticast mode [ 574.504215][T17717] veth0_to_bond: left promiscuous mode [ 574.510015][T17717] bridge8: port 2(veth0_to_bond) entered disabled state [ 574.620509][T17717] bond5: (slave wlan0): Releasing active interface [ 574.660313][T17717] veth23: left allmulticast mode [ 574.668628][T17717] veth23: left promiscuous mode [ 574.673824][T17717] bridge8: port 1(veth23) entered disabled state [ 574.697583][T17717] vlan4: left allmulticast mode [ 574.709216][T17717] vlan4: left promiscuous mode [ 574.723945][T17731] netlink: 'syz.0.3528': attribute type 13 has an invalid length. [ 574.724251][T17717] veth1: left promiscuous mode [ 574.745222][T17729] netlink: 'syz.4.3529': attribute type 18 has an invalid length. [ 574.759219][T17717] bridge8: port 3(vlan4) entered disabled state [ 574.957789][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'. [ 575.137400][T17740] sctp: [Deprecated]: syz.1.3531 (pid 17740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.137400][T17740] Use struct sctp_sack_info instead [ 575.425952][T17756] batadv0: entered promiscuous mode [ 575.445911][T17756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.934462][T17765] syzkaller1: entered allmulticast mode [ 576.842647][T17790] team0: Unable to change to the same mode the team is in [ 576.956565][T17793] netlink: 'syz.0.3542': attribute type 1 has an invalid length. [ 577.006489][T17793] netlink: 'syz.0.3542': attribute type 1 has an invalid length. [ 577.187269][T17798] lo speed is unknown, defaulting to 1000 [ 577.227040][T17803] netlink: 'syz.0.3542': attribute type 1 has an invalid length. [ 577.312420][T17802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.342431][T17803] 8021q: adding VLAN 0 to HW filter on device bond12 [ 577.363337][T17810] bond12: (slave wlan0): Enslaving as an active interface with a down link [ 577.379350][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 577.529563][T17802] siw: device registration error -23 [ 577.678641][T17822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3547'. [ 577.750155][T17822] lo speed is unknown, defaulting to 1000 [ 578.745629][T17865] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 578.794738][T17865] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 578.989847][T17864] sctp: [Deprecated]: syz.3.3556 (pid 17864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.989847][T17864] Use struct sctp_sack_info instead [ 578.991103][T17856] lo speed is unknown, defaulting to 1000 [ 579.073595][T17874] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 579.384275][T17874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.425461][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 579.452212][T17878] bond0: (slave wlan0): Enslaving as an active interface with a down link [ 579.726835][T17887] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 579.764229][T17887] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 580.020727][T17902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.056036][T17905] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 580.479412][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 580.486676][T17905] 8021q: adding VLAN 0 to HW filter on device bond8 [ 580.678575][T17909] bond0: (slave wlan0): Releasing active interface [ 580.732744][T17909] bond8: (slave wlan0): Enslaving as an active interface with a down link [ 580.805109][T17924] batman_adv: batadv0: Adding interface: ip6gretap2 [ 580.830726][T17924] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.904461][T17924] batman_adv: batadv0: Interface activated: ip6gretap2 [ 581.606245][T17949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.661671][T17950] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 581.693649][T17950] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 581.962772][T17956] can: request_module (can-proto-3) failed. [ 581.979232][T17966] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 582.118470][T17966] 8021q: adding VLAN 0 to HW filter on device bond6 [ 582.124260][T17974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3577'. [ 582.472583][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3577'. [ 582.555576][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 583.146370][T17999] netlink: 'syz.4.3582': attribute type 10 has an invalid length. [ 583.164843][T17999] dummy0: entered promiscuous mode [ 583.171650][T17999] team0: Port device dummy0 added [ 583.334281][T18009] lo speed is unknown, defaulting to 1000 [ 584.322743][T18010] lo speed is unknown, defaulting to 1000 [ 584.711238][T18023] lo speed is unknown, defaulting to 1000 [ 585.431690][T18044] geneve3: entered promiscuous mode [ 585.468587][T18044] geneve3: entered allmulticast mode [ 585.582375][T18046] batman_adv: batadv0: Adding interface: macvlan3 [ 585.601261][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3589'. [ 585.609412][T18046] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.648792][T18046] batman_adv: batadv0: Interface activated: macvlan3 [ 585.660347][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 39372 - 0 [ 585.676861][ T61] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 33993 - 0 [ 585.696538][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 39372 - 0 [ 585.771331][ T61] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 33993 - 0 [ 585.818593][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 39372 - 0 [ 585.836255][T18052] sctp: [Deprecated]: syz.2.3590 (pid 18052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.836255][T18052] Use struct sctp_sack_info instead [ 585.848154][ T61] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 33993 - 0 [ 585.976723][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 39372 - 0 [ 585.995538][ T61] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 33993 - 0 [ 586.264290][T18070] netlink: 'syz.1.3595': attribute type 10 has an invalid length. [ 586.328339][T18072] bond7: (slave wlan0): Releasing active interface [ 586.489116][T18074] netlink: 'syz.0.3592': attribute type 3 has an invalid length. [ 586.523068][T18072] team0: Unable to change to the same mode the team is in [ 586.889890][T18083] lo speed is unknown, defaulting to 1000 [ 587.253984][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 587.456745][T18106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3602'. [ 587.636338][T18114] sctp: [Deprecated]: syz.2.3604 (pid 18114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.636338][T18114] Use struct sctp_sack_info instead [ 587.700263][T18116] dummy0: left promiscuous mode [ 587.762830][T18116] team0: Port device dummy0 removed [ 587.799359][T18116] bond8: (slave wlan0): Releasing active interface [ 587.963123][T18121] team0: Unable to change to the same mode the team is in [ 588.033209][T18124] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 588.044732][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 588.100247][T18124] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 588.329230][T18133] netlink: 'syz.4.3608': attribute type 1 has an invalid length. [ 588.337784][T18133] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3608'. [ 588.430614][T18136] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 588.548814][T18132] lo speed is unknown, defaulting to 1000 [ 588.733360][T18136] 8021q: adding VLAN 0 to HW filter on device bond13 [ 588.771659][T18139] vlan3: entered allmulticast mode [ 588.798079][T18139] veth1: entered allmulticast mode [ 588.845923][T18139] bond13: (slave vlan3): Opening slave failed [ 589.222360][T18130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.533137][T18165] netlink: 'syz.4.3614': attribute type 1 has an invalid length. [ 589.573963][T18165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3614'. [ 590.059811][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'. [ 590.285946][T18199] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 590.346485][T18199] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3621'. [ 590.467115][T18188] lo speed is unknown, defaulting to 1000 [ 590.725525][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3622'. [ 591.117233][T18221] netlink: 'syz.1.3626': attribute type 1 has an invalid length. [ 591.188375][T18221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3626'. [ 591.409879][T18215] lo speed is unknown, defaulting to 1000 [ 591.655443][T18229] team0: Unable to change to the same mode the team is in [ 591.985988][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 591.995102][T18235] netlink: 'syz.2.3629': attribute type 10 has an invalid length. [ 592.007189][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3630'. [ 592.093824][T18230] lo speed is unknown, defaulting to 1000 [ 592.114508][T18237] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 592.920696][T18250] netlink: 'syz.2.3633': attribute type 1 has an invalid length. [ 593.574890][T18261] netlink: 'syz.4.3635': attribute type 13 has an invalid length. [ 593.695711][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3636'. [ 593.907497][T18270] netlink: 'syz.4.3639': attribute type 1 has an invalid length. [ 594.069931][T18277] bond9: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 594.118043][ T37] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 594.133993][T18283] 8021q: adding VLAN 0 to HW filter on device bond9 [ 594.214632][T18270] veth15: entered promiscuous mode [ 594.226668][T18270] bond9: (slave veth15): Enslaving as a backup interface with a down link [ 594.254214][T18277] bond9: (slave ip6gretap0): Removing an active aggregator [ 594.265864][ T6184] bond9: Warning: Found an uninitialized port [ 594.286964][T18277] bond9: (slave ip6gretap0): Releasing backup interface [ 594.307096][T18277] bond9: (slave ip6gretap0): the permanent HWaddr of slave - ce:27:ab:7e:28:80 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 594.350905][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 594.397719][T18277] bond9: (slave veth15): Releasing backup interface [ 594.896234][T18308] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 594.916668][T18308] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 595.006187][T18312] netlink: 'syz.1.3649': attribute type 13 has an invalid length. [ 595.205598][T18317] lo speed is unknown, defaulting to 1000 [ 595.253309][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3650'. [ 595.283414][T18322] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 595.299173][T18321] pim6reg: entered allmulticast mode [ 595.307973][T18321] pim6reg: left allmulticast mode [ 595.435410][T18322] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.555726][T18324] vlan0: entered allmulticast mode [ 595.562651][T18324] bond8: (slave vlan0): Opening slave failed [ 595.720277][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3652'. [ 595.981998][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'. [ 596.184729][T18346] tipc: Resetting bearer [ 596.282583][T18346] Ã: (slave 0!): Releasing backup interface [ 596.470826][T18346] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 596.498811][T18346] batman_adv: batadv0: Removing interface: ip6gretap2 [ 596.548982][T18353] team0: Unable to change to the same mode the team is in [ 596.885334][T18362] team0: Unable to change to the same mode the team is in [ 597.484276][T18375] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 597.514201][T18375] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 597.533684][T18376] netlink: 'syz.3.3663': attribute type 1 has an invalid length. [ 597.587987][T18376] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3663'. [ 597.642572][T18380] siw: device registration error -23 [ 597.727261][T18383] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 597.737104][T18380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3665'. [ 597.842511][T18383] vlan0: entered allmulticast mode [ 598.152861][T18395] team0: Unable to change to the same mode the team is in [ 598.438334][T18406] team0: Unable to change to the same mode the team is in [ 598.575575][T18407] lo speed is unknown, defaulting to 1000 [ 599.953672][T18442] netlink: 'syz.2.3676': attribute type 10 has an invalid length. [ 600.089251][T18410] lo speed is unknown, defaulting to 1000 [ 600.613110][T18449] netlink: 'syz.1.3677': attribute type 1 has an invalid length. [ 600.670849][T18449] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3677'. [ 600.935901][T18454] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 600.958788][T18454] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 601.113917][T18457] netlink: 'syz.1.3681': attribute type 13 has an invalid length. [ 601.168657][T18418] lo speed is unknown, defaulting to 1000 [ 601.221358][T18461] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 601.352212][T18454] vlan0: entered allmulticast mode [ 601.517705][T18469] bond12: (slave wlan0): Releasing active interface [ 601.602977][T18473] team0: Unable to change to the same mode the team is in [ 602.145714][T18490] team0: Unable to change to the same mode the team is in [ 602.407818][T18492] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 602.429552][T18492] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 602.442168][T18492] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 602.948773][T18505] validate_nla: 1 callbacks suppressed [ 602.948795][T18505] netlink: 'syz.2.3693': attribute type 13 has an invalid length. [ 602.988269][T18505] netlink: 'syz.2.3693': attribute type 17 has an invalid length. [ 603.135477][T18511] netlink: 'syz.3.3695': attribute type 1 has an invalid length. [ 603.168344][T18511] netlink: 'syz.3.3695': attribute type 1 has an invalid length. [ 603.365339][T18505] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.433841][T18505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.470591][T18525] netlink: 'syz.3.3695': attribute type 1 has an invalid length. [ 603.512577][ T5955] lo speed is unknown, defaulting to 1000 [ 603.523142][T18520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.544323][ T5955] syz0: Port: 1 Link ACTIVE [ 603.591142][T11648] lo speed is unknown, defaulting to 1000 [ 603.666933][T18508] lo speed is unknown, defaulting to 1000 [ 603.816855][T18526] vlan0: entered allmulticast mode [ 603.824015][T18526] veth1: entered allmulticast mode [ 603.883278][T18528] team0: Unable to change to the same mode the team is in [ 604.093018][T18538] tipc: Resetting bearer [ 604.131755][T18539] batman_adv: batadv0: Adding interface: macvlan0 [ 604.141705][T18539] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.205114][T18539] batman_adv: batadv0: Interface activated: macvlan0 [ 604.230076][T18538] team0: Unable to change to the same mode the team is in [ 604.372051][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3701'. [ 604.577066][T18552] netlink: 'syz.3.3704': attribute type 10 has an invalid length. [ 604.738778][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3705'. [ 604.830502][T18552] Ã: (slave 0!): Enslaving as an active interface with an up link [ 604.951649][T18574] netlink: 'syz.2.3706': attribute type 16 has an invalid length. [ 604.970242][T18574] netlink: 'syz.2.3706': attribute type 17 has an invalid length. [ 605.167468][T18574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.436524][T18580] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 605.530029][T18586] netlink: 'syz.3.3712': attribute type 1 has an invalid length. [ 605.606790][T18587] batman_adv: batadv0: Interface deactivated: macvlan0 [ 605.631392][T18587] batman_adv: batadv0: Removing interface: macvlan0 [ 605.667791][T18591] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.803216][T18580] veth17: entered promiscuous mode [ 605.833396][T18580] bond10: (slave veth17): Enslaving as a backup interface with a down link [ 605.855016][T18588] bond10: (slave veth17): Releasing backup interface [ 606.001554][T18599] 8021q: adding VLAN 0 to HW filter on device bond6 [ 606.011175][T18600] team0: Unable to change to the same mode the team is in [ 606.159041][T18607] team0: Unable to change to the same mode the team is in [ 606.308889][T18612] erspan0: entered promiscuous mode [ 606.411623][T18612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.440163][T18627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.519809][T18612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.570256][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3720'. [ 606.696245][T18638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3718'. [ 606.774942][T18625] lo speed is unknown, defaulting to 1000 [ 606.935054][T18613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.475092][T18655] sctp: [Deprecated]: syz.0.3724 (pid 18655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.475092][T18655] Use struct sctp_sack_info instead [ 607.599780][T18658] tipc: Resetting bearer [ 607.629646][T18658] Ã: (slave 0!): Releasing backup interface [ 607.759353][T18658] team0: Unable to change to the same mode the team is in [ 608.152808][T18668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3728'. [ 608.204830][T18675] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.966602][T18695] validate_nla: 6 callbacks suppressed [ 608.966624][T18695] netlink: 'syz.0.3735': attribute type 10 has an invalid length. [ 609.039626][T18698] netlink: 'syz.0.3735': attribute type 10 has an invalid length. [ 609.289842][T18702] batman_adv: batadv0: Interface deactivated: macvlan3 [ 609.312566][T18702] batman_adv: batadv0: Removing interface: macvlan3 [ 609.362638][T18705] netlink: 'syz.2.3738': attribute type 13 has an invalid length. [ 609.787438][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3743'. [ 609.803986][T18723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3744'. [ 609.809499][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3743'. [ 609.830498][T18721] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3743'. [ 609.849359][T18721] netlink: 'syz.0.3743': attribute type 3 has an invalid length. [ 609.859945][T18721] netlink: 'syz.0.3743': attribute type 2 has an invalid length. [ 609.883978][T18721] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3743'. [ 609.925903][T18721] netlink: 'syz.0.3743': attribute type 2 has an invalid length. [ 609.967121][T18729] syzkaller0: entered allmulticast mode [ 610.040651][T18729] syzkaller0 (unregistering): left allmulticast mode [ 610.298815][T18741] batadv0: entered promiscuous mode [ 610.342943][T18741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.956743][T18751] IPVS: persistence engine module ip_vs_pe_ not found [ 611.033696][T18760] netlink: 'syz.3.3752': attribute type 13 has an invalid length. [ 611.037754][T18758] team0: Unable to change to the same mode the team is in [ 611.050955][T18760] tipc: Resetting bearer [ 612.312898][T18810] lo speed is unknown, defaulting to 1000 [ 612.313854][T18814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.562909][T18814] syzkaller1: entered allmulticast mode [ 612.604255][T18819] netlink: 'syz.3.3768': attribute type 13 has an invalid length. [ 612.633466][T18819] tipc: Resetting bearer [ 612.912468][T18825] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.046910][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 614.619431][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 614.637681][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 615.154801][T18876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3781'. [ 615.220229][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 615.276187][T18876] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3781'. [ 615.327608][T18876] netlink: 'syz.3.3781': attribute type 3 has an invalid length. [ 615.376676][T18876] netlink: 'syz.3.3781': attribute type 2 has an invalid length. [ 615.427881][T18876] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3781'. [ 615.538018][T18876] netlink: 'syz.3.3781': attribute type 2 has an invalid length. [ 615.560445][T18880] lo speed is unknown, defaulting to 1000 [ 615.692391][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 615.863885][T18904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.063306][T18908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3786'. [ 616.099700][T18905] syzkaller1: entered allmulticast mode [ 616.239238][T18914] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3787'. [ 617.133803][T18921] lo speed is unknown, defaulting to 1000 [ 617.546005][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3791'. [ 617.726570][T18954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3795'. [ 617.833286][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3796'. [ 618.144443][T18966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.586560][T18963] lo speed is unknown, defaulting to 1000 [ 618.589490][T18975] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 618.913476][T18981] netlink: 'syz.4.3801': attribute type 1 has an invalid length. [ 618.934793][T18981] NCSI netlink: No device for ifindex 0 [ 619.081405][T18983] wg1: entered promiscuous mode [ 619.094783][T18983] wg1: entered allmulticast mode [ 619.358580][T18990] syzkaller1: entered allmulticast mode [ 619.433982][T18980] lo speed is unknown, defaulting to 1000 [ 620.306181][T18997] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 620.672128][T19009] __nla_validate_parse: 2 callbacks suppressed [ 620.672149][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3808'. [ 620.939741][T19011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.116410][T19019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.917624][T19034] netlink: 'syz.4.3813': attribute type 10 has an invalid length. [ 621.937877][T19034] dummy0: entered promiscuous mode [ 621.943885][T19034] team0: Port device dummy0 added [ 622.003096][T19034] netlink: 'syz.4.3813': attribute type 10 has an invalid length. [ 622.113483][T19034] dummy0: left promiscuous mode [ 622.173280][T19034] team0: Port device dummy0 removed [ 622.390269][T19048] netlink: 'syz.3.3817': attribute type 13 has an invalid length. [ 622.432981][T19048] tipc: Resetting bearer [ 622.854779][T19062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.988622][T19069] netlink: 'syz.1.3820': attribute type 6 has an invalid length. [ 622.996796][T19068] syzkaller1: entered allmulticast mode [ 623.633325][T19092] netlink: 'syz.3.3825': attribute type 13 has an invalid length. [ 623.656985][T19092] tipc: Resetting bearer [ 623.857570][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3827'. [ 623.913071][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3826'. [ 624.005449][T19101] team0: Unable to change to the same mode the team is in [ 624.257902][T19111] tipc: Resetting bearer [ 624.339552][T19114] netlink: 'syz.0.3829': attribute type 10 has an invalid length. [ 624.468334][T19114] netlink: 'syz.0.3829': attribute type 10 has an invalid length. [ 624.539781][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3833'. [ 625.117981][T19129] netlink: 'syz.4.3834': attribute type 6 has an invalid length. [ 625.397278][T19134] netlink: 'syz.1.3837': attribute type 13 has an invalid length. [ 626.003161][T19141] geneve2: left promiscuous mode [ 626.008386][T19141] geneve2: left allmulticast mode [ 626.034495][T19141] vlan0: left allmulticast mode [ 626.044645][T11644] lo speed is unknown, defaulting to 1000 [ 626.050996][T11644] syz0: Port: 1 Link DOWN [ 626.058936][T11644] lo speed is unknown, defaulting to 1000 [ 626.180690][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3840'. [ 626.308128][T19163] netlink: 'syz.1.3841': attribute type 10 has an invalid length. [ 626.316749][T19163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3841'. [ 626.328423][T19163] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 626.363559][T19163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3841'. [ 626.393202][T19170] syzkaller1: entered allmulticast mode [ 626.416391][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'. [ 626.445909][T19163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 626.591130][T19174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3845'. [ 626.632411][T19174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3845'. [ 626.905397][T19182] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.944635][T19182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.986754][ T5955] lo speed is unknown, defaulting to 1000 [ 626.993009][ T5955] syz0: Port: 1 Link ACTIVE [ 627.019139][T11648] lo speed is unknown, defaulting to 1000 [ 627.122853][T19184] lo speed is unknown, defaulting to 1000 [ 627.177610][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.360227][T19187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.471474][T19186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.623986][T19190] validate_nla: 2 callbacks suppressed [ 627.624007][T19190] netlink: 'syz.0.3849': attribute type 13 has an invalid length. [ 628.076061][T19191] lo speed is unknown, defaulting to 1000 [ 628.112810][T19202] tipc: Resetting bearer [ 628.483532][T19215] netlink: 'syz.3.3856': attribute type 10 has an invalid length. [ 628.535700][T19217] netlink: 'syz.3.3856': attribute type 10 has an invalid length. [ 628.571486][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 628.650457][T19215] team0: Port device 0! added [ 628.720109][T19223] netlink: 704 bytes leftover after parsing attributes in process `syz.2.3857'. [ 628.797823][T19217] team0: Port device 0! removed [ 628.872559][T19217] Ã: (slave 0!): Enslaving as an active interface with an up link [ 628.910212][T19227] netlink: 'syz.1.3858': attribute type 1 has an invalid length. [ 629.220450][T19227] bond7 (unregistering): Released all slaves [ 629.453840][T19238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 630.043673][T19252] netlink: 'syz.1.3863': attribute type 13 has an invalid length. [ 630.090209][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 630.202094][T19241] syzkaller1: entered allmulticast mode [ 630.268735][T19255] netlink: 'syz.2.3862': attribute type 3 has an invalid length. [ 630.938408][T19269] tipc: Resetting bearer [ 630.963594][T19269] Ã: (slave 0!): Releasing backup interface [ 631.330360][T19274] lo speed is unknown, defaulting to 1000 [ 631.333704][T19281] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3869'. [ 631.660354][T19295] netlink: 'syz.4.3872': attribute type 10 has an invalid length. [ 631.749734][T19295] dummy0: entered promiscuous mode [ 631.808128][T19297] netlink: 'syz.4.3872': attribute type 10 has an invalid length. [ 631.885505][T19295] team0: Port device dummy0 added [ 631.932681][T19297] dummy0: left promiscuous mode [ 632.118826][T19297] team0: Port device dummy0 removed [ 632.530925][T19304] netlink: 'syz.3.3875': attribute type 21 has an invalid length. [ 632.599962][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3875'. [ 632.754268][T19314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 632.791734][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3875'. [ 632.806187][T19304] netlink: 'syz.3.3875': attribute type 6 has an invalid length. [ 632.893017][T19304] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3875'. [ 632.903858][T19301] lo speed is unknown, defaulting to 1000 [ 633.306426][T19322] syzkaller1: entered allmulticast mode [ 633.688344][T19331] netlink: 'syz.0.3877': attribute type 2 has an invalid length. [ 633.703438][T19331] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3877'. [ 633.876612][T19337] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3879'. [ 633.905960][T19338] netlink: 'syz.4.3878': attribute type 13 has an invalid length. [ 633.913848][T19338] netlink: 'syz.4.3878': attribute type 17 has an invalid length. [ 634.114452][T19338] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.182311][T19338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.310154][T19338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.448610][T19338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.513861][T19344] lo speed is unknown, defaulting to 1000 [ 635.154888][T19359] netlink: 'syz.2.3885': attribute type 10 has an invalid length. [ 635.206947][T19362] netlink: 'syz.2.3885': attribute type 10 has an invalid length. [ 635.958168][T19375] lo speed is unknown, defaulting to 1000 [ 636.016160][T19376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.303773][T19388] netlink: 'syz.2.3890': attribute type 10 has an invalid length. [ 636.358250][T19391] netlink: 'syz.2.3890': attribute type 10 has an invalid length. [ 636.378100][T19379] geneve3: left promiscuous mode [ 636.383420][T19379] geneve3: left allmulticast mode [ 636.616435][ T5960] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 39372 - 0 [ 636.639216][ T5960] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 33993 - 0 [ 636.689751][ T5960] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 39372 - 0 [ 636.724289][ T5960] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 33993 - 0 [ 636.800543][ T5960] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 39372 - 0 [ 636.838233][ T5960] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 33993 - 0 [ 636.917600][ T5960] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 39372 - 0 [ 636.935329][ T5960] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 33993 - 0 [ 636.969354][T19396] netlink: 'syz.2.3893': attribute type 1 has an invalid length. [ 637.158191][T19396] 8021q: adding VLAN 0 to HW filter on device bond9 [ 637.181331][T19408] netlink: 'syz.1.3895': attribute type 1 has an invalid length. [ 637.353515][T19408] 8021q: adding VLAN 0 to HW filter on device bond7 [ 637.557763][T19417] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3896'. [ 637.567380][T19405] lo speed is unknown, defaulting to 1000 [ 638.055644][T19421] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 639.141633][T19452] validate_nla: 2 callbacks suppressed [ 639.141655][T19452] netlink: 'syz.3.3903': attribute type 10 has an invalid length. [ 639.230576][T19453] netlink: 'syz.3.3903': attribute type 10 has an invalid length. [ 639.315008][T19452] team0: Port device 0! added [ 639.437226][T19453] team0: Port device 0! removed [ 639.537486][T19453] Ã: (slave 0!): Enslaving as an active interface with an up link [ 640.260694][T19486] netlink: 'syz.2.3910': attribute type 13 has an invalid length. [ 640.798140][T19498] erspan0: left allmulticast mode [ 640.810424][T19498] tipc: Resetting bearer [ 640.819442][T19498] 8021q: adding VLAN 0 to HW filter on device à [ 640.849508][T19498] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 640.962386][T19498] veth0_to_team: entered promiscuous mode [ 640.970849][T19498] veth0_to_team: entered allmulticast mode [ 641.003964][T19508] team0: Unable to change to the same mode the team is in [ 641.249461][T19516] netlink: 'syz.2.3919': attribute type 10 has an invalid length. [ 641.298881][T19516] netlink: 'syz.2.3919': attribute type 10 has an invalid length. [ 641.408610][T19521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.500031][T19528] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 641.509044][T19528] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 641.522643][T19528] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 641.560388][T19521] syzkaller1: entered allmulticast mode [ 641.739982][T19528] 8021q: adding VLAN 0 to HW filter on device bond14 [ 641.751716][T19531] bond14: (slave wlan0): Enslaving as an active interface with a down link [ 641.770094][T19533] vlan3: entered allmulticast mode [ 641.787519][T19533] bond14: (slave vlan3): Opening slave failed [ 642.351497][T19553] sctp: [Deprecated]: syz.2.3926 (pid 19553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.351497][T19553] Use struct sctp_sack_info instead [ 642.473732][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3925'. [ 642.524260][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 643.462432][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3932'. [ 643.620382][T19584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 643.851384][T19586] lo speed is unknown, defaulting to 1000 [ 644.477411][T19601] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 644.506025][T19601] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 644.544979][T19601] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 644.670372][T19601] 8021q: adding VLAN 0 to HW filter on device bond8 [ 644.770660][T19603] bond8: (slave wlan0): Enslaving as an active interface with a down link [ 644.890921][T19614] sctp: [Deprecated]: syz.4.3938 (pid 19614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.890921][T19614] Use struct sctp_sack_info instead [ 645.196945][T19589] lo speed is unknown, defaulting to 1000 [ 645.391003][T19628] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.036762][T19633] syzkaller1: entered allmulticast mode [ 646.239705][T19644] netlink: 'syz.3.3943': attribute type 10 has an invalid length. [ 646.303877][T19645] netlink: 'syz.3.3943': attribute type 10 has an invalid length. [ 646.414730][T19644] Ã: (slave 0!): Releasing backup interface [ 646.483663][T19644] team0: Port device 0! added [ 646.563729][T19645] team0: Port device 0! removed [ 646.609297][T19645] Ã: (slave 0!): Enslaving as an active interface with an up link [ 646.690894][T19647] netlink: 452 bytes leftover after parsing attributes in process `syz.4.3944'. [ 647.025378][T19654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3945'. [ 647.127366][T19652] batman_adv: batadv0: Adding interface: macvlan4 [ 647.143144][T19652] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.199191][T19652] batman_adv: batadv0: Interface activated: macvlan4 [ 647.757119][T19672] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.809943][T19673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3949'. [ 648.651770][T19695] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3954'. [ 648.723492][T19699] tipc: Resetting bearer [ 648.740402][T19699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.779520][T19705] netlink: 'syz.2.3955': attribute type 1 has an invalid length. [ 648.812377][T19705] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3955'. [ 649.263470][T19725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.577976][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3957'. [ 649.936414][T19732] syzkaller1: entered allmulticast mode [ 650.444240][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.601245][T19755] team0: Unable to change to the same mode the team is in [ 650.842735][T19760] netlink: 'syz.4.3965': attribute type 1 has an invalid length. [ 651.133354][T19773] lo speed is unknown, defaulting to 1000 [ 651.189980][T19772] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 651.202676][T19772] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 651.212804][T19772] CPU: 1 UID: 0 PID: 19772 Comm: modprobe Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 651.226236][T19772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.236328][T19772] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 651.242170][T19772] Code: 01 48 c7 c7 c0 4b 98 8b be 4b 03 00 00 48 c7 c2 00 4c 98 8b e8 24 bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 [ 651.261790][T19772] RSP: 0018:ffffc9001be476f8 EFLAGS: 00010206 [ 651.267872][T19772] RAX: 000000001fffe000 RBX: ffffffff822bc679 RCX: 02580e210dd50000 [ 651.275861][T19772] RDX: 0000000000000000 RSI: ffffffff8be333e0 RDI: ffffffff8be333a0 [ 651.283844][T19772] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc679 [ 651.291835][T19772] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 651.299820][T19772] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 651.307800][T19772] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 651.316735][T19772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.323324][T19772] CR2: 00007fdcc4bcae9c CR3: 0000000075b8e000 CR4: 00000000003526f0 [ 651.331317][T19772] Call Trace: [ 651.334611][T19772] [ 651.337555][T19772] refill_obj_stock+0x254/0x850 [ 651.342428][T19772] ? refill_obj_stock+0x116/0x850 [ 651.347468][T19772] __memcg_slab_free_hook+0x127/0x3d0 [ 651.352858][T19772] ? unlink_anon_vmas+0x614/0x670 [ 651.357896][T19772] kmem_cache_free+0x223/0x400 [ 651.362675][T19772] unlink_anon_vmas+0x614/0x670 [ 651.367540][T19772] free_pgtables+0x57a/0x9c0 [ 651.372140][T19772] ? __pfx_free_pgtables+0x10/0x10 [ 651.377610][T19772] ? __pfx_down_write+0x10/0x10 [ 651.383078][T19772] ? __mas_set_range+0x12f/0x3c0 [ 651.388119][T19772] exit_mmap+0x444/0xb50 [ 651.392377][T19772] ? uprobe_clear_state+0x20f/0x290 [ 651.398191][T19772] ? __pfx_exit_mmap+0x10/0x10 [ 651.402974][T19772] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 651.408626][T19772] ? __pfx_exit_aio+0x10/0x10 [ 651.413347][T19772] ? uprobe_clear_state+0x274/0x290 [ 651.418553][T19772] __mmput+0x118/0x420 [ 651.422630][T19772] exit_mm+0x1da/0x2c0 [ 651.426713][T19772] ? __pfx_exit_mm+0x10/0x10 [ 651.431429][T19772] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 651.437000][T19772] ? rcu_is_watching+0x15/0xb0 [ 651.442309][T19772] do_exit+0x648/0x2300 [ 651.447187][T19772] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.452918][T19772] ? __pfx_do_exit+0x10/0x10 [ 651.457625][T19772] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.462857][T19772] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.468259][T19772] do_group_exit+0x21c/0x2d0 [ 651.473054][T19772] __x64_sys_exit_group+0x3f/0x40 [ 651.478105][T19772] x64_sys_call+0x21f7/0x2200 [ 651.483059][T19772] do_syscall_64+0xfa/0x3b0 [ 651.487665][T19772] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.492962][T19772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.499039][T19772] ? clear_bhb_loop+0x60/0xb0 [ 651.503721][T19772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.509618][T19772] RIP: 0033:0x7fdcc4d296c5 [ 651.514058][T19772] Code: Unable to access opcode bytes at 0x7fdcc4d2969b. [ 651.521084][T19772] RSP: 002b:00007ffddbff9e58 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 651.529525][T19772] RAX: ffffffffffffffda RBX: 00007fdcc4e2afe8 RCX: 00007fdcc4d296c5 [ 651.537515][T19772] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 651.545493][T19772] RBP: 0000000000000001 R08: 00007ffddbff9de8 R09: 0000000000000000 [ 651.553469][T19772] R10: 00007ffddbff9c80 R11: 0000000000000206 R12: 0000000000000000 [ 651.561442][T19772] R13: 0000000000000001 R14: 00007fdcc4e29680 R15: 00007fdcc4e2b000 [ 651.569427][T19772] [ 651.572460][T19772] Modules linked in: [ 651.577579][T19772] ---[ end trace 0000000000000000 ]--- [ 651.583324][T19772] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 651.589483][T19772] Code: 01 48 c7 c7 c0 4b 98 8b be 4b 03 00 00 48 c7 c2 00 4c 98 8b e8 24 bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 [ 651.609473][T19772] RSP: 0018:ffffc9001be476f8 EFLAGS: 00010206 [ 651.615979][T19772] RAX: 000000001fffe000 RBX: ffffffff822bc679 RCX: 02580e210dd50000 [ 651.623988][T19772] RDX: 0000000000000000 RSI: ffffffff8be333e0 RDI: ffffffff8be333a0 [ 651.632601][T19772] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc679 [ 651.640904][T19772] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 651.649218][T19772] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 651.657476][T19772] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 651.666715][T19772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.673489][T19772] CR2: 00007fdcc4bcae9c CR3: 0000000075b8e000 CR4: 00000000003526f0 [ 651.681534][T19772] Kernel panic - not syncing: Fatal exception [ 651.687973][T19772] Kernel Offset: disabled [ 651.692303][T19772] Rebooting in 86400 seconds..