last executing test programs: 11.385579909s ago: executing program 2 (id=5935): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0xd, 0xb8, 0x1, 0x10, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x744, 0x8, 0x9, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x78, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xda, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x108, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4374}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x8c0}, 0x2400c01d) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000680)=0x60) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000006c0)={0x10, 0x0, "edb8912db47b6f33aff9da87a61ffefc"}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000700), 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000740)="8518b377152887d3bad5a0f438792e1cd26c8df4b56049cfe0bb848914b23e8bd2a194c203767df2c2d13ade4fec892a036d2404d0c2dd7ccb2f303720e7f7810e27a24995f944a25bec1a60a278ffa6052934", 0x53, 0x0, &(0x7f00000007c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000940)={'pim6reg\x00', {0x2, 0x4e21, @loopback}}) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x50000}, 0x800) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x4, 0x74, "869d03ff80182b4a7bc0a3de3639a7da4861fdb3dadf604859cb2e4cdee9e34c764246339890107d77ea81df749f87aab7f643c6b3818febaccc568e8c1ca9acfc17a1e7eb9f13843b75c0a4da1d8659cff6af686f7498e898c8442bd4ce6bc1678724dce4355ea2f1b8628664d8106288397940"}, 0x7c) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000c40)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x9, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x3b, r2, r6}, {0x1, 0x100000000, 0x2, 0x7, 0x23f, 0x1, 0x8, 0x8}, {0xf1a, 0x7f, 0x101, 0x80000000}, 0x522, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d4, 0x33}, 0xa, @in=@local, 0x3507, 0x2, 0x3, 0x81, 0x6, 0x6}}, 0xe8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000d80)={r4, 0x6, 0x0, 0x401}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000dc0)=0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x101200, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000e40)={0xed9, 0x68aa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$sock(r7, &(0x7f0000017540)={&(0x7f00000172c0)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x80, &(0x7f00000174c0)=[{&(0x7f0000017340)="c1bc2d4ca79ba98ed83e75d4780764794f86227d685bddf5ec494c4f2650198c53cc182dede01732b8304b9eec864153450e9424a665f2cab0a8d0f24a82ba10f85365a72e0c4c009fbb225698b36f359b7db76c5504dd342966c891d1dca4fff7ae67cd", 0x64}, {&(0x7f00000173c0)="c9e06a0116f0d20ba21db178077754dabaf8b8f639dbfa7b3d17ef0f522f31159b63f048", 0x24}, {&(0x7f0000017400)="3ec81126f0792bd994f9ca1e18029639d5b0961ebcc13e62fe29b1ed48f7065441b6fc2092fdad50c148674c02ec87f794d1f2b70f34a59188920ab7dc4b24c9ed344f075cfd3b0e278d05b58a2aceab2c8726393d29454f245cb27f755082b1f72a446a090395757e89ff8b16ef2ac1aa2065c87c50db4efdbd59252958f840b6b8baac0dfb06d9005a7d510f33340e08329428865837464357", 0x9a}], 0x3, &(0x7f0000017500)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}, 0x4008000) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000017740)={&(0x7f0000017580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000017700)={&(0x7f00000175c0)={0x104, 0x464, 0x800, 0x70bd25, 0x25dfdbfd, "f31c21774a13c082cd9f071d957803dcfff0ec194dd486d181ec73929e9a540aa6a6de7a16f3befba0ae10383d36f720d0302e9e159f38ada72ea0924812b19cb0aa83a264574f1414475eb0e22ac0edbdf9a2fc5d104ba00d89f6f5aaccb3f73bcf70184be23c40d7c0ba476f51a5a9fadba9db1fbc06e6a18f4f662eb972587fc8e4df401dea29835df3f2e07415e08a64d8d2358ad5f85b691c7b7dc329f0fb9b8b4bc39fdbb5a9c1a144841d7e5fff60adddf9adb4f70fc6b4d41a8a7a7c743bc9b01e3b1e234730d54ef98c192f95232e99c55b75be2fd1d20e3c0af41bc910575c674c14c38afe2ab9ee7cf41104c987"}, 0x104}}, 0x41) bind(r5, &(0x7f0000017780)=@generic={0xf, "9762e6d2e62c5beaaea5f1bc1722a54998737357c340b8a133bffb7098718f23e6e5097e5abe098ba3de262d1c30cd5938f6d16116633c10007e06a08edfad082ce921f0b847555e49f84099e2c282665e273b73192c13a723d32a4b158969d0421b183a52fdd1377ea4d5da10760dcc67eb4181df58608c1e339d3213c2"}, 0x80) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000017800)) r8 = accept4$unix(r5, &(0x7f0000017840)=@abs, &(0x7f00000178c0)=0x6e, 0x400) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x810, r8, 0x8000) r9 = accept4(r3, 0x0, &(0x7f0000017900), 0x800) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000017980), r7) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f0000017a80)={&(0x7f0000017940)={0x10, 0x0, 0x0, 0x11010000}, 0xc, &(0x7f0000017a40)={&(0x7f00000179c0)={0x68, r10, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x95b}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfe01}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffffffffffff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x20000844) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000018ac0)={{0x0, 0xeb9, 0x7fffffff, 0x5d7a, 0x8, 0x2, 0x401, 0x8, 0x38ac, 0x9, 0x80, 0x81, 0xe3f, 0x7, 0x403}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11.118918032s ago: executing program 2 (id=5939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000006000061104c00000000005f500000000000009500000000000000", @ANYRESDEC, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@private0}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000006000061104c00000000005f500000000000009500000000000000", @ANYRESDEC, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) (async) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@private0}, 0x14) (async) 10.928499171s ago: executing program 2 (id=5944): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0xf, 0x3169, 0x9, 0x1, 0x6, 0x9, 0x8, 0x2, 0x8000fff, 0x10000, 0x4, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5, 0x1, 0x2400, 0xf529, 0x9, 0xede, 0x80000000}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r7, 0x1, 0x6, @multicast}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 9.952916112s ago: executing program 2 (id=5959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92462}, [@IFLA_MAP={0x24, 0xe, {0xd, 0x10001, 0x7, 0xa6a7, 0xb, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) 9.797746672s ago: executing program 2 (id=5961): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) socketpair(0x25, 0x6, 0x38000000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1, {[0x1, 0x2, 0x5, 0x6, 0x401, 0xd, 0x4, 0x80000001]}}, 0x5c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040850}, 0x40400c4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x3f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = accept$inet(r1, &(0x7f0000000400)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0x10) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x4, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x20, 0x10, 0x9, 0x9fc}}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x34}}, 0xc800) getsockname(r0, &(0x7f0000000740)=@isdn, &(0x7f00000007c0)=0x80) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ccd30d6fdbdd06bbb8fe0a20fdf4f8fb"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000012) ioctl(r6, 0x0, &(0x7f0000000900)="ed287796091f49bd19dc6a07aa74b55e605f01aea2757fddfb0a4e209d0d54908cd7582dac82153432d54ade94c39258b5a6ce68602153a301cb64bf327c91daeda6223a35382f575ac777fdefb28e60374c9b69bfe568e5728c88fb146abd535e74fc0cf9c08b5b619acb15e351888d67d48b3aa00b6ceeeeede5b8ea17f6f0807ba3f3c35445a45141fbb0fdaf6dcdb121ed6824e765195942c6fd26923210d4c6563fa62efcd03efa1f0e8d07962c5d793d9c17c1f26b9f5d24870a9845761b960517ca684cb4cf134bdb9fd1275eac2ab54a69f75b016ffeb4e98b50b24be5a8a2b5") r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000184}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x90, r10, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7b00}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4048010}, 0x4008040) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000bc0)={0x0, "6d171bd8af66809d0b163264bf36b488"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001bc0)={r11, 0x3, 0x65e65713bea80301, [0xffff, 0x7fffffffffffffff, 0x0, 0x1, 0x1], [0x9, 0x19e, 0x9, 0xff, 0x10001, 0x800, 0x6, 0x1ff, 0xffffffffffffffff, 0x9, 0x8, 0x4, 0x8000000000000001, 0x8000000000000001, 0x3, 0xebf, 0x5, 0x3, 0x1e, 0x604, 0x100, 0x8, 0xffff, 0x80, 0x9, 0x4, 0xfffffffffffffc00, 0x1, 0x8000000000000000, 0x5, 0x9, 0x7, 0x0, 0x7ff, 0x5, 0x1, 0x5, 0x2, 0x2360, 0x9, 0xffffffff80000001, 0xfffffffffffffc01, 0x0, 0xe, 0x8, 0x4d6e, 0x40, 0x24000000, 0xba, 0x3ff, 0x2, 0x8, 0x5, 0x8, 0x0, 0x6c, 0xe64, 0x7, 0x9, 0x1, 0xffff, 0x9, 0x0, 0x8, 0x9, 0x6b9, 0x0, 0x7fffffffffffffff, 0x7, 0xf4, 0x1, 0x6, 0xffffffffffffffbd, 0xfffffffffffffb18, 0x101, 0x9, 0xffff, 0x7, 0x4, 0x6, 0x8, 0x4, 0x2, 0x1000, 0xf327, 0x400, 0x8, 0x5, 0x7, 0x8000000000000000, 0x7ff, 0x9, 0x6, 0x4, 0xc, 0xa, 0x5, 0x9, 0x9, 0x5, 0x4, 0x3, 0x0, 0x5, 0x2, 0x0, 0x100, 0x0, 0xe00, 0x100, 0x100000000, 0x6, 0x8, 0x10, 0x8001, 0x8, 0x1c00000000, 0x3, 0x8c, 0x400, 0x4]}) r12 = accept4$inet6(r2, &(0x7f0000002000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000002040)=0x1c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002080)={0x0, 0x0, "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", "55c96ef93d170176746b371ab0604427a1a39da097826628de28211e80ab2d9693c8eec42261b859fa3f636c53b4251d38fef9f9698a1eeaf20b7c2493b31476b4bfbe1099a7909f57a03542af18abaa7549152a743e1a1b2cb24b947c6f6cc1b5bef035479a222c1d4304ee6cbc9346f979f302cdf42a57a991f3e5cc51693c0047ccfef4578ef56d46c71809253226bf9f031048d4262f0297ce3cda037efd53368f6a3807100ff2355845cce6a505c23e88b6078470953a6f7a73d004397fd263832c734702716a693db8789d7946d38da9445bad5ef4042c13173e27d445007aa9d9ae22a57ad6d123b5cfcbb23a9849e767a25d66babd661a16d0f0e58edbed2cf4d3758f7397abfb67f14af31ea57ab5dbaa5f31d7a47a0a07eb391edd60c9fd8fd97c0839055e15fea6441c193e9dd75d5ae96cefe6c3c9b91baef7330b44d779f2ae69b337d65fae26c6fb5a9343449035c3c033151dc64170f47ba0c50a6405339fd17d6ce2922d368493f36d0ba2411f85577542cdca05fdf64b7429d92d5115eba5aa9d8c72007cb69e10885ccfd4b0dd2e70e71cf789d2b50670dec1039ee225d56bfbdf9dcf31fdcb2d18532b71f378efc58536eb98f5e153215f1cf1e65ba85b016e5c34ac094b85fc898323540c5b06fb366e087508b45051d8bd04192c2bc37487040462f9d3282626d669b8a2abf699bee8628ccf1edcb502887a5632eb276a702ccc2eb4e5363facd0f8bdb03c497323166534828b189104a1e0bdaf0be07aa9212c35cfc412f743d683a6a6c2118fd4c47d3e45c510e0f201a717c19965b26fc7385e12281684d11ba0f5d09499993dd6c5ae8f63805024013d82a7363a359f4c3877a1b41b1d4362abfc879ac7afa58e0112d9641a27bc5cd0c5a3d8de52b4a53a1eb92214847223d397db33d697b619b006b3902d52cf466c697b407d86111c5ea6a27e5f7cbaf3eb77ddfc41021e4674193e9dbe81ec0889730c15a40c098a25585588274c9b521fbedb86000593614201fd72888643568218ab9a517341fd87119a3adb0ff1dbcd4dee525bc60b5541df6677d17b5cb640a1c0b3bae9ce172e2f7375249ff48b3e81daa38162d9eaa09c32ed6409a32ffc6c05b2aeb4dc60ceded1fcd2eb1fade63c6b0e00e5a7bd386b5ca3091371edb032c84c3ce861f7794c09f700a829da684a752853221889dd084ff7b7f272fd10746a60083144393db7f8838126cbd9dde8e1d80edfafa95323b0bf917be641f2857890d4cd0eba8ca756f57e59c493b92aae0fc8c4157e5e55ccb0561fc84a9cc64544e70e6e16c8d6cdaeebc19513d6a12c3c7492a4d85dce9a1e1e24871ff81e17ae79ade5b073aa9dd2912c8c8f4aa8f8648be6dad38f234fa0fc5026c8a334aa81319d910662beb79b8210e2122b32f6da0b3990388759c7a1abb9d0f47aaf72c4bd56a5a82472dc31a4e9ce88283319af784020bab02310c69784bbe5729a2936a5efbf0d96a9e8b8e9ee8dc78409c80bade523e5d5d692224daaa923c712672f8287eaac1f323e84c930e9daa652ddbfe5fbd0c483496be5ac0230a4319b359d92c44fe5b892ed863763c26abbc0b1b4d42b47aa6dc042101585c7ab978df3c153b800dcde23e7c2b6d55269e799478a1fa8918bf8d26d66d6705a6cab7bc313c2388c4edd717ee335273a693f6d5adedd25e433c4583a4eff0fc2d2967ed8677113dfdc4fff82b63b6187321b80b9de5d1e3be7c24c0fb8fa4e885c54ed81d6b6408b14f1484563246f74f95f7f688119e7b7420c154fe5ed52574f7ca67274601d56eedf29d7261e65adbc6c57acb3c7dc9c1ac263109ab391f157fb3449bdbb81ca461305ab381232d6daa44e202a3b3951020f941c703f2d450fe02fa4197fefe2aaf670116e323e857671b565c3f58edc2b8b85a910ff26e6297b670598a8b412fff3f6bf8f84a08d6f250c3fb6ff6caeef81eb80528fdb93bfd6c0736068b08b15883fbc14fc3433aee7029bf3a7fb7539473bc6f1d628c3029bb0e5847380a00bd701c96d0f004bc3b621a31736dbc16a562c6835d5a7254bdeaacd630f225e21ebbddcbb74cbe8a0ba7756e64621bc330000be143121a379b793108dab6bd9c88e19428d11bfe2428602fd4a9bccbfea6abef99b82edba10c0a5c44f8f87fd7f19dac43aa683662ef1a8e2e60704f5b4bc7947f54ba584a6db83052561ac8d10c56036a1c740203c00f399d5a396545a6962a6a88939fb7a0e4fcf51c7cd3fb3c0c72f9f8121407042d709af530f286a04be12bd270333ff25e37923199b37019d67b74ef9ceae0e5d95167ed8c96fc32204bd5613408600094f42e5a6bf7a45996aa369411ca317c99fcb21458c9560ec1b6209bea558fac14f311d7a91a7956b86bf8f22bf026a54796fca7f4345245542e775703fa47c5eecbe36db86c07afc44b3a0999811e10c905fa18e57cccbe22ecdf1413b767f2dad39aa9f47fd9b56e8c375ea838b8a13ff1e2f363df7d19afc8019fe6b2b8dbd4a16bf82281a9c5be8a22ec3bd56fa7d1a84a27473bbc2d85328c4496956fcacc91054fae6e145b33f2f8357d2d8a026946263449d934f5dd41830f04f9c742982ca50152faa46a3afc5ca17fd325bfa76d0e9397f104cc910ac1df1d971bc17b54b69cda9fd0793dbe43123d5bf9f56d19740ffb6b5f964ae026bdfea26aa43a752d2ffa30f82c9cd3ccf89ea1a2a4e2a797e1ef7c189d9b6dae397872c83476db84b1128368cd1fe899448441cc9af261227ab57bc321a1596bfb609e97ed15a11177f9242381a14d26c16feafca899ea3bea28a7641657c97427b2d58e8a17ff0c752196d540b9e42ca2674ea5e82c8a1e0a5148045d61cd9999dae85263bf88391b0d649ced3636a8f194a2ee1af60624d9a449271c9c41d77d5e90834a44b7e94c4d395a67fb40f9c8f320a107403b05775b61ae145725461a4fa4c8f3336210dcf1d652269a06229efd291237626cd661dd51a14059c4b47b7d20df200bec6607037ff29268e4b53a158076265f99c526ec25eba81dbd12fd7a87b9a225cf7f8ed8cc77a599b50c9abff26269edd7cf66854fd78e46f76c509846528791d7c414c5eab825009555c05d7f76f5a501d0c5a39923a4be3bbb1977c4441ad284a2cc2e2585a9ad2638f8e64184613e8d8eae0ee56653cd86be6ac9cfeb819cb834a7d1dcf0fac09e6d95f1e4421876da13654e87a596f6da801707e6eabaeb4e61c714ca9eccc96acfc58a018daa0aac303d4f5fa9e11bbd9dacfbec78dce6d963dd35abe8eb57c64b610e7ca14c503ed0ceb919e77d44da651d806b237beadad4f9e735170c908e83fe52f855f8f5165574bc6ef001feab960951b604e6e8de6508e377175fca7ca0e040ecc8b0d84603ad42cf9d77d4e5295bdf754b42c754e96394f0711f9b05e2802af48a12e84bf3b9580dc254f72cb4019487350a9682e9225139aa027aa398ec23ce05f9f4a07b5c15cab7592fd26473576940e24a6b9eab6584126162f14de86571b9a13446949e378dcbc089d3d437ab40e5ced66bbd88df0711f3379a8f4d1c7c64ce3934aa2423ea6a9c587ec7d608ca18b8f40b8b25e8a754b57f901f1468c471ed2c1db91732e7fc40163556205411eea35b1c24295172e15b3e328efd97e88502b722b38c8499c240a4dbfdfe368d06b94b5cb3f2558e6aa161718ccc5c26435005f8e52641fb9278da3a185ed6b56c05712e2162e9494c3648979d3aac3fc0faed0da809420a93b391a1fa0f70d4271d68c18250d69d3798c8cebe1c8c707c9b7ddcdc34d53314d844e1203234e3f7cd750928e58fba346c5b19bbb12aa6cea7776cf4b673f27a03d72f1f160cf2fe01d65aa77edc086d103de50c79f3dd9f908c1f828ad1412c201e75feb8601f23ef70b3d56d6abf236585867e942a1dbac396a5c242c8a68568ea93eb17936f0406a5fd59701edc0f7b21be3f15557fcfcdcad4c13ecf0c5c02f13aa996d8acef5461ced9e74cb881a9765f3e4c71d8832d20e9ba331ec7d6bed1ecad58cd737a21cafbca8569859482df0261ffe288a57d935eb20289fb25617be19884a346e13e9e67cff9f0e0b85be3a9ffa260545f76b1b15b70c2833a67e3d6449927151cb7c450eaddb53ae5fb89ed02f87c1210775c39803b6ace1a8c632ddc3e87affc676642d6b379fc4fb556c8df732a8aececd3da8de5547fbc3307e1231d672f9da775dc65d83d9b524470881f6ff2c5b3d657ea07ea4e698032055730dbef4f1066f56573177b4250c736010629bcea220c3b646d3d7b3d042a823988031b6f2841568fc8237c62b9000c83700ed5a958f8a711496f4ac6253f4d9621968e96620a29697026b2d17dbf044f130f18825e23ab066d116518890b7d5a86d98d57a76988de62993a20bb0e495139b9c53241a356651fee7fc411ecf1a6e86aba0b4199891e74aaa9deb094f19af5f15925241d4c578ef2d1ed30de8139da53c45ef7ba82d5eabcf3a3ee689a72d3dc81ac27c3da87ed6f67778b9ac777db497572db5bd4103bd5c9c56f7c0dffea3864db0ff2604b7928af0c6529ef7f27a62896905e0b053d672ea0a604caa52bdf5d382a8ab52de5b7d2c14ef3e66a87903429e32c97da3aee8776024900b373cd5c6bda9e43c1aa585a901aa5a856333b0da4a7a7156459fce7afa95f444dfab2b9da169fae4b364c25e666903f1b998d01c3ab3f535e902567a7e663145a0025642e26fe29bbe45167df019c34f307832e3c71ced77063d7c0987e0e91ebeeb0f7382b3e0f5b112b4fcf8995922468dd18c938e7a0bfe53eba7f3f33ab30cc3dea79c90c6e5a5d33a705d1b1cf9b31ceae387995dc163edbbb6386a72dbf764c3c478c28a44d08f974ca62c05537cba14ffbdde2cf951d46f4fbfa5aad2967cdd22af06eaa9612b5d0ef26eb6d96749d8f46099e6a20456a09675848c3ef11980a880d421f6685fffa690899eb1f3e42f469fffedbaffb9af2c8bcc8d0f96303a254a13f66181595aca2027576ecf20b6d48c340e11a8514449a45717e77d96dc5fa918b71a349be7ca3d2a130675b61e247819c7c141373d7783ae7185e8b9c52b59a03295b38de9ef7e9fbca5525ff7484951c639cc36f93c8a6379d4b2cb47d5048ad3344addf04c4b2f04819fefa202f7971bdd77e9d9e08df962912333e7671b1e008fa1f2ff4efae8cd9dcc74ac45c83f265ee71001524c4e5f0e2aa4a50fc5c249c4927a3e4446f03f1b49903a3d3b1050706e6432a2fc8ac119ee180d391af3447df838d1b06e8fbf1859421c913b4797d2f30cc94918418766397cdc2a35345f5f91327573a35e9829e42e5e702329017fa1389a3e8c1930cceebcfff1"}) ioctl$BTRFS_IOC_INO_LOOKUP(r12, 0xd0009412, &(0x7f0000003080)={r13, 0xb}) r14 = accept(r1, 0x0, &(0x7f0000004080)) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004100), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r14, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x24, r15, 0x0, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000004280)={'syztnl1\x00', &(0x7f0000004200)={'gretap0\x00', r9, 0x700, 0x8000, 0x7, 0x4, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x65, 0x0, 0x7f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@generic={0x86, 0xf, "de1639908ea7f3d632ae6ed20e"}, @lsrr={0x83, 0x23, 0x6, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @loopback, @broadcast, @rand_addr=0x64010101]}, @end, @end, @generic={0x44, 0x11, "49cd00ba553d1c44c9b79028814123"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000004300)={'syztnl1\x00', &(0x7f00000042c0)={'gre0\x00', r16, 0x8, 0x7, 0x1, 0x2, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0xb, 0x4, 0x0, @local, @private=0xa010102}}}}) 9.644854228s ago: executing program 2 (id=5963): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020a000014000000110000000000000102000a000000000000000000000000001000180006047200496804b657563a723dbacd394c9dd041aec849070950cd6b01bd7412bf132c0b14e2359b599b3a2a544b189e35ef491a674903ebf64e92fbe58282a2ec55fd4df734a33a04e6159e62188db126b17c4a0b5b2a4e340dbc68d7b9f06cbced2841b4723d9eaad89247e8e18687736c973aa22d000000000000"], 0xa0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7fff, 0x4) 5.067999751s ago: executing program 1 (id=5994): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x19) sendmmsg(r2, 0x0, 0x0, 0x0) writev(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000800)={0x3, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 4.660189301s ago: executing program 1 (id=5997): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200fd070049"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x40, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x31}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x44, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008094}, 0x20000090) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x31}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r11 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r11, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) socket(0x27, 0x5, 0xffff6a8c) 4.105553066s ago: executing program 1 (id=6001): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140)=0x7fff, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740), 0x10, 0x80000) accept4$vsock_stream(r5, &(0x7f0000000780)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e20, 0x6, @local}}, [0x101, 0xffffffffffffffff, 0xff, 0x8, 0x2, 0x0, 0x9, 0x449, 0x9, 0x8, 0x9, 0x4, 0x7, 0x100000001, 0x3ba]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000580)={r6, 0x6}, &(0x7f00000005c0)=0x8) listen(r2, 0x8) r7 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8) sendto$inet(r7, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="78c2d65e5887c88fa6b55fcc025d31be7400554fc56046a7001972f1bc8d36842836f25b50b26a18f128def9453d8a762242d31a639504e1c6e1f824ebb4040f49db", 0x42}, {&(0x7f0000000280)="2c1b2433e17edc19ff96ca64527ddb288353d78dde795ca6590fe9211207bd59025657e7e76705fb810d8b3ff48b6840521175ba304c5d326af4e333b69e3519e7ee58066f2129fee9235239358afaa6ecd85769a884b640f4022b9e72331f1832bdbbee8a80a4747e1ee3419cbabe1d3ea7b402e8c298e63b316bda653b977f90417901d535e6eb8326fd574c84aa4b12274b50f866a727", 0x98}, {&(0x7f0000000000)="09fbacdbfaa01a7032732a093bf16429b1a9eda3374a271ece5aeab071c7e310e47b3e721c966ced5c0d73cc", 0x2c}, {&(0x7f0000000340)="2826cc64544daa8fe591482f658568e8826c2cc90435d1f64af6e30b9025e541de6aa8f6b3dbf616f554133acf2fe9946c5a7cae4f3aed4c4b85a65e9c7bbd9c72af43b5b3a7914c5407fd58f4", 0x4d}, {&(0x7f00000003c0)="82d9ea0338603d61a0f754731f934f10a6a60f0ba92f01ec75c81aab2d5249e23b27e291c6f62d7270028cdfd88e8903c315e6415b8b855b7794083a43711ab3ccd9102adc33ef210f778b0bfd016a86c9a53c46602ef3a4db8bae873bd5bd6d6ce51bbbf4c59eb08a95467b38a38c44b7f76504919a6f1e6c683c0c2ca68aca8b83d68bd8965018a9d83b5c32fb13be22c01ac2788fd125dff9f9bf8d6df69a36a32eafe3e8438b783b4ba69d89a16359c14cce08e42c23e8b7cb5b0e550abfd3238ef5dfe13bf55cd7bfc3de23f9", 0xcf}], 0x5) close(0x3) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 3.548574351s ago: executing program 1 (id=6007): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000980)}}, {{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x9}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x7}, &(0x7f00000000c0)=0xc) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000340)={0x3, 'veth0_to_hsr\x00', {0x4}, 0xc8}) 3.275384071s ago: executing program 1 (id=6008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x2c, r1, 0x805, 0x70bd2b, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001340), r2) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001440)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40050) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x8, 0xffffff00, 0x2, @mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7, 0x10, 0x1, 0x10000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) 3.020547672s ago: executing program 1 (id=6010): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) 2.699373885s ago: executing program 4 (id=6012): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="2a000000010000", 0x7) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000014007f3700eaffffff000000102400002e816207988c147e9aecca95432295dad37ad62d700f869bac4437d798253018ce8b3d9801bd23708a645909ba9f8260f603280797ea136c723ef3ff84d6c2922f21d5107d8fc19ce329ec94e44bb291c1bb49733d4270b86e4d6ec2eb8c87695a59fc4ca58701c3f1e3db400364d6032ff2c769862b28605d683473ddbed25c6229ef19d705f2942583a6afcc4c256d9233b3c8d98ac7609e085ff6ac1bd02db4a8afb32e4cecb06685690e9cbd6e53913bc03c0d13cb0b60c60d6d2ac2ff8535c6b394c1a602625d8ead858a"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x2, 0x4) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r6, 0x1, {0x1, 0x1, 0x1}, 0x9796ef04c0904618}, 0x18) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r8, 0x0, 0x138) (async) getsockopt$bt_hci(r3, 0x11a, 0x1, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 2.520640661s ago: executing program 4 (id=6014): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x32, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x781a8894}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfda}, @exit, @generic={0x6, 0x0, 0xa, 0x4, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x8001, 0x87, &(0x7f00000003c0)=""/135, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x4, 0x6, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x4}, {0x5, 0x2, 0x10, 0x2}, {0x4, 0x2, 0xf, 0xa}, {0x5, 0x2, 0xd, 0x6}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0xffffffcd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0xffffffcd}, 0x94) 2.367600279s ago: executing program 4 (id=6015): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x1405c891) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="30010000087e90fe22028b9099ce1f7fd4333dd662106af6", @ANYRES16=r1, @ANYRESOCT=r1], 0x130}}, 0x0) 2.143492241s ago: executing program 0 (id=6018): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) 2.054891066s ago: executing program 0 (id=6019): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x1}, 0xff, 0xfe}], 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$inet6(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4002}, 0x90) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x118, 0x12, 0x2, 0x70bd27, 0x25dfdbfb, {0x26, 0x1, 0xb8, 0x0, {0x4e24, 0x4e23, [0x6, 0x6, 0x1000, 0x40], [0x0, 0xf, 0x3, 0x8], r5, [0x80000001, 0x9776e9b6]}, 0x1, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x26, 0x1, "b072e99290e48093408a9b547a7246389666a6e79fefe4edbb9e09ce6a1d77d879db"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "a046dfac76ac288d91538bae147be6d53a9d1d8b1578c897299fd59f1ff1de6ab2138bdd1628c00e1ddd2fbb8e0edc6f1fd9ce8fb72c3ea504465a2ffb2196d4bf15539799293c3fd9b46e836777ab1dc536531ede51708f5d464baf2215701584868032443f445e6e38f175b1eb381f886637df3f52ccabc67c7efadf17d9a972db92d3d8c1d19bf77af319200ede367a7078b82574f91101bb6df8b378ca"}]}, 0x118}, 0x1, 0x0, 0x0, 0xc801}, 0x848) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r6, 0x400, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400a1cd163f8a87d00afb9f4900000002000000"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) 1.751427494s ago: executing program 0 (id=6021): r0 = socket$kcm(0x10, 0x7, 0x0) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/184, 0xb8}], 0x6, &(0x7f0000000640)=""/205, 0xcd}, 0x0) r1 = socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0xff3c}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'team0\x00', 0x600}) 1.60574708s ago: executing program 3 (id=6023): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x40000002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x5, @private2, 0x9}, {0xa, 0x4e23, 0x3, @local, 0x4}, 0xffffffffffffffff, {[0x2, 0x1b1, 0x1, 0xd, 0x4, 0x0, 0x6]}}, 0x5c) 1.369627773s ago: executing program 3 (id=6024): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xfffeffff, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.369463452s ago: executing program 4 (id=6025): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'ipvlan0\x00', 0x7fff}) 1.219639748s ago: executing program 3 (id=6026): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0xf, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @jmp={0x5, 0x1, 0x3, 0x2, 0x92751a6c2de1ff59, 0x8, 0xfffffffffffffffc}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.178570006s ago: executing program 3 (id=6027): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r1, 0x4, {0x1, 0xfe, 0x2}}, 0x18, &(0x7f0000000200)={&(0x7f0000000b40)="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"/1912, 0x778}, 0x1, 0x0, 0x0, 0x20008850}, 0x24000005) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r1, 0x4, {0x1, 0xfe, 0x2}}, 0x18, &(0x7f0000000200)={&(0x7f0000000b40)="fd98a2b5d26c75348f703578d3d66a0dd76c74721a197ec6eb5d2392e6423771a3f60d80a2a8e371814912c9914957298d1d5b5863a2b18bd0a86be33e6285914571fa6dd76421b0fca2af8bb35d7df8f0b3276e8fe1b19e3408bec350389182b3aabb980d6c80353176d8e494229bd797dab32ffe27f84436be6ef8539227d559392a405863061bb11c2c12c734c3b2d95c21c3795b2b83cdb65a5cfacb618707e2e945ac7c40752d781cc3723d19690122103d6dde78c84cce9c46828e20fbe67ee46a32a3b2a9f61f2699baad975230b36249dc260f282b1988f57400f6d905855f6a937c050b9accf880490fa69a1e6648b587c389a003c89c811c43b8f1e75a16672af27282ebecf77931dae0a2f9a7b7618a4960088182cb559f952c4833db96581b0cb9e46348f027d8351ef3978e62006cda6b22a5abfb432a1127f682eb87ffaa652243428526c9527356fe1b7b712402b2a8be9f17dcb1c634dccab6e8943813ed144e1c10d9d6f76b6e8b1069f3874990f36afc2951d735217b76e8772e6c0622b14f9e03aad215c800556027a951beb93ee9f9c8ddfcc72e8e927bb9fe8c95bff42e1d1346ff8dc5038597ea1d60aa4f8d0f6de9d2c37e1a915e903bb7374aa5ace967e86bb7e9f40a9d6f53b07757d1bac8abf33b464aae6131e50aae50f28b6e8c27d6f0996357ed35742afd8ab09ea31498ae0e0270b054af13f8a356d49100d9dee1d3204536f582abdc09573c25246e826edaa739c0b072a6650f0d1b8c2415a8ec60faf99cf23fa23c4b3d98636dc51ac6c9967a1bfc070e092118e1bd13eaedc35081eeff1d96b5acd984974c1af5b0b7bab63a88eb2ad5868949907625c2d71edec80ee9c7c20cee59382e206db6f600815a1f093500d5679280a4a4e9560dadb5227fa104b9d96d0974dd009089b4c0b4a674c453a717de6c1a2929cb70cf6caf905a45267f45a3278d6d465d2837dcd697381f47b72f54822acc2b84be8545ce67e61af22838436bb55f43e9e2a7d5e1bf4a11c963d79a9409db5eed6ce4d805027b0e613b8e06ce27ac1e0f3c438233eb64c4def5185d70a906f114d08db571803f8a1955d2243511354d5a4da77b2856ae6532dc018f463cfaefce1a8ea9079554d012e12508afeb342ab5502e31e2d5fbf076f7c501a6deb99d6f0792134712a520b61b6d56bea8e0f15e16b38a456cc5a6f005f1cb13047709cf05e1a731e81392f17fa645a3737d5e3b32fa9ea3477544e804d1ffe72759903dfdcc8e3868fe5b10c68e0208f0e033a79786a4616cb3d90044d20edb8a061acbc36f2288026ecdd2e86b88ac1d76c53710dd68dadb3a7a82947a3810b2ce02a7aa572023dbcbbbc09680e8d71d04886191daa067b071d8109388e651a7f6874a662a8a80eb52c21947e634c2d4cc300aa0ddf48c9363e7a04dbd1bf8860082ba5f79f09ad0e8a991895b80b6e136c1361332124bb903a12fb1079e0eb5b77a0dc9ef5243b502f8ebd458a277a3b7dd261fcb452ce826eb22008c577d5db107b6a015b7c2fad0ca1410ad933ae1ca3cf887aa8aa3bb299ce2fb2350299b785273bc4e6aac418dd14be19a03a0b7062893a69d6d19507bd537eae0dfd9b2ad1f98c87da1758d450bd6af5049bc6ffbb3515289dfdf513e4c337ee60300f4f5f48ac891c58e06f599f5abd293e5f295bf8966752c608df91cccc2120a5be8398b7aba6bd1d737a780bfb3a38070a416a32d9ef99da58c1b6a48a9dc8e72689947489af81bbbdbf17d08f69b147b8d8a1753e4532f115789e6801c1a01aa44c985082620bae0f82079cc62608a477c5285c888c65f0a8df921edfc3ebbc39fc4de9718d27d23141cda3bc3bbe2fdfb219c5213cc6a60a5f190ffb9fb04c086e0fa5f590a300a0ade3f49936c9348922e3ebc27205542db50a2ee4922e3e0952f72b721de59efd5972a2c29371d3ff8b607fb7b51a33bbf22b3d9facdce2d5607345a757b995e904841d6dec99a7c48ba3f33dfda23c22ca9b2629458313a1a85ae3e96bf4e86d057302546825d0dd0fad79cbbb422e0b9ebc726ddbe64846499db63fce4d367928898c0133857f260ba3872a213fc0fd50436b827b2ff90ccb45db68eb63ba822d3a012e77f4a13060b6568e663f913c4705b19662235f2c15c5694843fbf0195bbf423618b50409ca82e1b4bddfd3b5ce68c4ec19b689a889d6d17cb5627aa303e0f5ac78a3fa65b26167dfc44e2565e27dffc740182e51d921de2a50eb33084e11abb985382be7407af64264814e89e3618bb262a85e12b4acad8c517576585ea332912f377c7dc33c745d2f772c4d0ebce95593db70e87329d4471e5332d5325baa881847b6b03633547f72e5070df49979d1e92f6bdc31028921305567e35e8216309af6d392c3b97acf986226e93ea2661636e8a37a9c0e05f1b8a8d2c81006afe24e267a5632344da9152bba1c82f4f08928f3f1f9d56ba55c6ef706b402173dad2cf33fa0000000000000000000000007967842e95a3f1eab610733ddc88937886eb2db020a0cfee4f21590b963b7f1acc745694fe7e7e94d69684fd5f595fc5e1393286fa12ac0c2d88b528d1fc8f29f4c15e906ece160f388ecadf6566808d433f39a0c78d95139c0d8bd26d40cbe651a1b43fb41be000"/1912, 0x778}, 0x1, 0x0, 0x0, 0x20008850}, 0x24000005) (async) 1.166665364s ago: executing program 4 (id=6028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = socket$isdn(0x22, 0x2, 0x3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0x4}}, 0x26) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001200)={0x0, "93c5c302700608337ff2e73c79eb6cbf"}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000002200)={{}, r11, 0x1c, @unused=[0x8, 0x1000, 0x434, 0x6455], @devid=r12}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 983.529984ms ago: executing program 0 (id=6029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000921300000f0000f50400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r1, 0x0) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, 0x0, 0x0}, 0x20) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="2c00238006000300e400000006000a000b00000008000b"], 0x48}}, 0x810) 942.206524ms ago: executing program 3 (id=6030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) bind$ax25(r1, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r5) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) r6 = accept(r0, &(0x7f0000000340), &(0x7f00000003c0)=0x80) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) ppoll(&(0x7f0000000400)=[{r1, 0x40c9}, {r3, 0x4}, {r4, 0x2000}, {r6, 0x4140}, {r2, 0x8120}, {r7, 0x4}], 0x6, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480)={[0x7]}, 0x8) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r9 = accept(r0, &(0x7f0000000040)=@generic, &(0x7f0000000240)=0x80) accept4$llc(r9, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x10, 0x800) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x5, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000095280500240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r11, @ANYBLOB="fad10847109813ff052676dda4d3b47823b75071347aacb7d323d8b211c5f059b92ce6d05f97eae7c64cc76ecd50a62c8c810c1d40a541265b930f5ffe17eb7681565577911e8f6b91383f6e3414d95b408c069c76cc2812852cb2086127df415a4918bcb6fb2dafe75a82241dad37905ef13c3a469641a573f9c5560b8883be3fcca80038f933e65c510146dd72d8a5bd90614f27556e3b6804bfb14ebe03f7c36b16eb277f9c2c700062aaf7a07bd8dd6270484a5bc282e749c89c892ab3afa648691b2d046951bc7b606b424d3094909e075a726a54b137828800"/233], 0x4c}}, 0x4000040) 722.731595ms ago: executing program 0 (id=6031): setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x5, 0x4, [0x5, 0x1, 0x9, 0x8]}, 0x10) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) 531.415226ms ago: executing program 3 (id=6032): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) readv(r1, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x3) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@bcast, @default, @rose, @remote, @null, @default, @null, @netrom]}, &(0x7f0000000240)=0x48) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f3, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a0500000000000000000002ff03000000000000797a30000000000900010073797a3000000000140000001100010000000000000020000300000a4197475b98e28fcd59a6571dfe673b97ab9e8a1c639cf34b5ab717bdbd90c3c33147eb1c0d97c6c2d5b52d3ff73077ab09a385144e0c5f6e4d4b1ea819389c692cf1f25c480b3d0804c1ce1579"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="10fb0020001a9dde750dd73730562aa0402c292780ba15618554232d7c6f9381313c3e7d066d0c3f66090013a92c315c501714f224295c04ad8d317e3f2404a3772df60f14d9b54f3b25ca8535d541afe25abf87df12617357bcc70d6ef6a8becccdd3ace1d6190923f50f6855facd07841b9b99870da7d369aef9f570358c82ab70f18163afbaa3373bd08ef757f07f78b98cc6cd89dd33b36ebaca5a636b5f480b7212ca540a7167bd03fc91946178054d7df92af0bb5f395bf47df80b3547c7cdeb", @ANYRES32=r7, @ANYBLOB="0c009900010000007a000000080057000100000008005700018000000800a100018000000800a000ffffff7f08009f000000000008009f00070000000800a0004e0f00000800a000030000000800a00002000000080026006c09000008002700030000000800570003000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x400c004) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029cc7000ffff7f0000000000080007001400000008000700ffffffff9d4c81bbf7"], 0x24}}, 0x0) syz_emit_ethernet(0x114, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde08004d23010600640000ff06907864010100ac1414bb0007471f82568000940401000012b8dc0974be47958e80a5b06ce071492800004e204e24", @ANYRES64=r11, @ANYRES32=r0, @ANYBLOB="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"], 0x0) 367.497685ms ago: executing program 0 (id=6033): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 0s ago: executing program 4 (id=6034): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$tun(r2, &(0x7f0000000ec0)={@void, @val={0x3, 0x80, 0x9, 0x80, 0xa21, 0x4}, @ipv4=@igmp={{0x17, 0x4, 0x1, 0x1d, 0x1064, 0x68, 0x0, 0x1, 0x2, 0x0, @local, @multicast2, {[@noop, @timestamp_addr={0x44, 0x1c, 0x23, 0x1, 0x6, [{@private=0xa010100, 0x23}, {@remote, 0x10000}, {@rand_addr=0x64010100, 0x3}]}, @ssrr={0x89, 0x23, 0x5f, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @multicast2, @remote, @rand_addr=0x64010100, @remote]}, @rr={0x7, 0x7, 0xb1, [@rand_addr=0x64010102]}]}}, {0x16, 0x1, 0x0, @multicast2, "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"}}}, 0x106e) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000080)={0x67, 0x8b8f, 0xb, 0x8, 0x2, 0x81}) kernel console output (not intermixed with test programs): entered allmulticast mode [ 432.133319][T19330] mac80211_hwsim hwsim53 wlan1: entered allmulticast mode [ 432.170614][T19335] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 432.220739][T19339] sctp: [Deprecated]: syz.1.3841 (pid 19339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.220739][T19339] Use struct sctp_sack_info instead [ 432.499930][T19356] openvswitch: netlink: Missing key (keys=40, expected=100) [ 432.643182][T19374] netlink: 'syz.0.3851': attribute type 1 has an invalid length. [ 432.669130][T19374] netlink: 'syz.0.3851': attribute type 2 has an invalid length. [ 432.752527][T19379] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 433.246909][T19401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.288922][T19404] netlink: 'syz.3.3857': attribute type 1 has an invalid length. [ 433.299347][T19399] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 433.351189][T19404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.599615][T19422] __nla_validate_parse: 8 callbacks suppressed [ 433.599638][T19422] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3864'. [ 433.725844][T19426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3865'. [ 433.749590][T19426] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 433.772934][T19426] tipc: Enabled bearer , priority 10 [ 434.092205][T19454] syzkaller1: entered promiscuous mode [ 434.108384][T19454] syzkaller1: entered allmulticast mode [ 434.127952][T19454] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 434.551706][T19489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3881'. [ 434.689821][T19489] netlink: 'syz.1.3881': attribute type 21 has an invalid length. [ 434.698216][T19489] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.704222][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3884'. [ 434.736386][T19496] tipc: Enabling of bearer rejected, failed to enable media [ 434.871004][T19503] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3886'. [ 434.894008][T13198] tipc: Node number set to 4236800303 [ 434.946698][T19503] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3886'. [ 435.028980][T19503] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3886'. [ 435.486581][T19538] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3889'. [ 435.501901][T19539] bond0: entered promiscuous mode [ 435.517014][T19539] bond_slave_0: entered promiscuous mode [ 435.539819][T19539] bond_slave_1: entered promiscuous mode [ 435.572142][T19539] dummy0: entered promiscuous mode [ 435.609010][T19542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3891'. [ 435.813965][T19548] veth0_to_team: entered promiscuous mode [ 435.824376][T19548] veth0_to_team: entered allmulticast mode [ 435.988569][T19558] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3896'. [ 437.578870][T19609] openvswitch: netlink: Flow actions attr not present in new flow. [ 437.689252][T19594] netlink: 'syz.1.3908': attribute type 1 has an invalid length. [ 437.701870][T19577] infiniband syz1: set active [ 437.707068][T19577] infiniband syz1: added bridge_slave_0 [ 437.718952][T19577] syz1: rxe_create_cq: returned err = -12 [ 437.725603][T19577] infiniband syz1: Couldn't create ib_mad CQ [ 437.735509][T19577] infiniband syz1: Couldn't open port 1 [ 437.821722][T19577] RDS/IB: syz1: added [ 437.835933][T19577] smc: adding ib device syz1 with port count 1 [ 437.852468][T19577] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 438.149324][T19629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.340288][T19636] netlink: 'syz.3.3919': attribute type 2 has an invalid length. [ 438.788296][T19662] tipc: Started in network mode [ 438.793291][T19662] tipc: Node identity aa61308d0068, cluster identity 4711 [ 438.802008][T19662] tipc: Enabled bearer , priority 0 [ 438.817028][T19660] tipc: Resetting bearer [ 438.951873][T19660] tipc: Disabling bearer [ 438.982245][T19669] __nla_validate_parse: 5 callbacks suppressed [ 438.982268][T19669] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3931'. [ 439.092286][T19672] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3933'. [ 439.182415][T19673] dvmrp8: entered allmulticast mode [ 439.190296][T19675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3934'. [ 439.485916][T19686] netlink: 'syz.3.3937': attribute type 1 has an invalid length. [ 439.509444][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 439.954801][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3945'. [ 440.041440][T19711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.048808][T19711] IPv6: NLM_F_CREATE should be set when creating new route [ 440.086413][T19710] lo: entered allmulticast mode [ 440.111357][T19710] tunl0: entered allmulticast mode [ 440.133426][T19710] gre0: entered allmulticast mode [ 440.160642][T19710] 0{X: entered allmulticast mode [ 440.180496][T19710] erspan0: entered allmulticast mode [ 440.202098][T19710] ip_vti0: entered allmulticast mode [ 440.213476][T19710] ip6_vti0: entered allmulticast mode [ 440.227953][T19710] sit0: entered allmulticast mode [ 440.241015][T19710] ip6tnl0: entered allmulticast mode [ 440.250444][T19710] ip6gre0: entered allmulticast mode [ 440.261899][T19710] syz_tun: entered allmulticast mode [ 440.278349][T19710] ip6gretap0: entered allmulticast mode [ 440.295704][T19710] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.303050][T19710] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.314979][T19710] vcan0: entered allmulticast mode [ 440.321521][T19710] bond0: left promiscuous mode [ 440.331082][T19710] bond_slave_0: left promiscuous mode [ 440.336964][T19710] bond_slave_1: left promiscuous mode [ 440.349654][T19710] dummy0: left promiscuous mode [ 440.358989][T19710] team0: entered allmulticast mode [ 440.370608][T19710] team_slave_0: entered allmulticast mode [ 440.377668][T19710] team_slave_1: entered allmulticast mode [ 440.391334][T19710] nlmon0: entered allmulticast mode [ 440.400480][T19710] caif0: entered allmulticast mode [ 440.426148][T19710] veth0: entered allmulticast mode [ 440.435759][T19710] veth1: entered allmulticast mode [ 440.447366][T19710] wg1: entered allmulticast mode [ 440.462117][T19710] wg2: entered allmulticast mode [ 440.471404][T19710] veth0_to_bridge: entered allmulticast mode [ 440.507007][T19710] veth1_to_bridge: entered allmulticast mode [ 440.539997][T19710] veth0_to_bond: entered allmulticast mode [ 440.571644][T19710] veth1_to_bond: entered allmulticast mode [ 440.590554][T19710] veth0_to_team: entered allmulticast mode [ 440.616764][T19710] veth1_to_team: entered allmulticast mode [ 440.637962][T19710] veth0_to_batadv: entered allmulticast mode [ 440.650607][T19710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.660257][T19710] batadv_slave_0: entered allmulticast mode [ 440.671639][T19710] veth1_to_batadv: entered allmulticast mode [ 440.683005][T19710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.691600][T19710] batadv_slave_1: entered allmulticast mode [ 440.702130][T19710] xfrm0: entered allmulticast mode [ 440.715404][T19710] veth0_to_hsr: entered allmulticast mode [ 440.726127][T19710] hsr_slave_0: entered allmulticast mode [ 440.741766][T19710] veth1_to_hsr: entered allmulticast mode [ 440.759803][T19710] hsr_slave_1: entered allmulticast mode [ 440.778522][T19710] hsr0: entered allmulticast mode [ 440.792876][T19710] veth1_virt_wifi: entered allmulticast mode [ 440.812226][T19710] veth0_virt_wifi: entered allmulticast mode [ 440.829139][T19710] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 440.843381][T19710] veth1_vlan: entered allmulticast mode [ 440.855712][T19710] veth0_vlan: entered allmulticast mode [ 440.892957][T19710] vlan0: entered allmulticast mode [ 440.900014][T19710] vlan1: entered allmulticast mode [ 440.910384][T19710] macvlan0: entered allmulticast mode [ 440.923676][T19710] macvlan1: entered allmulticast mode [ 440.940272][T19710] ipvlan0: entered allmulticast mode [ 440.947161][T19710] ipvlan1: entered allmulticast mode [ 440.955771][T19710] veth1_macvtap: entered allmulticast mode [ 440.968532][T19710] veth0_macvtap: entered allmulticast mode [ 440.978569][T19710] macvtap0: entered allmulticast mode [ 440.988819][T19710] macsec0: entered allmulticast mode [ 441.001752][T19710] geneve0: entered allmulticast mode [ 441.017091][T19710] geneve1: entered allmulticast mode [ 441.027061][T19710] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 441.038566][T19710] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 441.050715][T19710] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 441.062329][T19710] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 441.081982][T19710] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 441.098731][T19710] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 441.108914][T19710] : entered allmulticast mode [ 441.114112][T19710] syztnl1: entered allmulticast mode [ 441.119627][T19710] geneve2: entered allmulticast mode [ 441.125538][T19710] gtp0: entered allmulticast mode [ 441.130767][T19710] veth2: entered allmulticast mode [ 441.137611][T19710] ip6gre1: entered allmulticast mode [ 441.145310][T19710] ip6tnl1: entered allmulticast mode [ 441.152263][T19710] bridge1: entered allmulticast mode [ 441.160020][T19710] vxlan0: left promiscuous mode [ 441.167482][T19710] erspan1: entered allmulticast mode [ 441.173750][T19710] bridge2: entered allmulticast mode [ 441.181531][T19710] bond1: entered allmulticast mode [ 441.190703][T19710] vlan2: left promiscuous mode [ 441.196039][T19710] bond2: left promiscuous mode [ 441.202055][T19710] bond3: entered allmulticast mode [ 441.209180][T19710] bridge3: entered allmulticast mode [ 441.217020][T19710] sit1: entered allmulticast mode [ 441.245214][T19710] bridge4: entered allmulticast mode [ 441.251274][T19717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3948'. [ 441.400596][T19742] veth0_virt_wifi: renamed from veth0_vlan [ 441.413053][ T8379] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.433082][ T8379] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.443327][ T8379] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.489168][ T8379] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.529575][T19745] dvmrp8: left allmulticast mode [ 441.594003][ T8379] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.610346][ T8379] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.650851][T19747] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3954'. [ 441.788496][T19747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3954'. [ 441.842149][T19754] netlink: 'syz.3.3957': attribute type 7 has an invalid length. [ 442.059811][T19762] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3960'. [ 442.079081][T19762] netlink: 'syz.0.3960': attribute type 10 has an invalid length. [ 442.088087][T19762] mac80211_hwsim hwsim51 wlan1: left allmulticast mode [ 442.098059][T19762] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 442.106503][T19762] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 442.306076][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3964'. [ 442.340978][T19774] xfrm1: entered promiscuous mode [ 442.351995][T19774] xfrm1: entered allmulticast mode [ 442.362510][T19777] tipc: Enabling of bearer rejected, failed to enable media [ 442.373275][T19777] veth0_to_bond: entered promiscuous mode [ 442.386551][T19777] veth0_to_bond: entered allmulticast mode [ 442.420449][T19774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.767602][T19784] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 442.784310][T19784] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 443.230968][T19803] bridge0: port 3(vlan3) entered blocking state [ 443.264358][T19803] bridge0: port 3(vlan3) entered disabled state [ 443.286480][T19803] vlan3: entered allmulticast mode [ 443.328823][T19803] vlan3: left allmulticast mode [ 443.874079][T19827] tipc: Enabled bearer , priority 0 [ 443.902984][T19827] syzkaller0: entered promiscuous mode [ 443.923118][T19827] syzkaller0: entered allmulticast mode [ 443.974945][T19827] tipc: Resetting bearer [ 444.002149][T19825] tipc: Resetting bearer [ 444.069551][T19825] tipc: Disabling bearer [ 444.548271][T19867] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 444.836245][T19877] openvswitch: netlink: Key type 334 is out of range max 32 [ 444.976319][T19890] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 445.007115][T19894] netlink: 'syz.0.4006': attribute type 2 has an invalid length. [ 445.109537][T19896] 8021q: VLANs not supported on wg1 [ 445.258176][T19909] __nla_validate_parse: 10 callbacks suppressed [ 445.258200][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'. [ 445.349578][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.356040][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.369655][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4010'. [ 445.393004][T19913] openvswitch: netlink: Flow actions attr not present in new flow. [ 445.570999][T19917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4011'. [ 445.842504][T19933] syz_tun: entered allmulticast mode [ 446.020667][T19929] syz_tun: left allmulticast mode [ 446.075560][T19942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4020'. [ 446.449201][T19966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4027'. [ 446.463020][T19963] geneve2: entered promiscuous mode [ 446.488600][ T7626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.515904][T19973] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4030'. [ 446.530399][ T7626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.539438][T19974] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4030'. [ 446.589724][T19971] bridge1: entered promiscuous mode [ 446.595918][T19971] bridge1: entered allmulticast mode [ 446.629305][ T7626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.691326][ T7626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.733084][T19980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4031'. [ 446.821164][T19982] C: renamed from lo [ 446.836841][T19982] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 446.897954][T19991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4036'. [ 446.912792][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4036'. [ 447.097461][T20004] netlink: 'syz.2.4037': attribute type 1 has an invalid length. [ 447.134992][T20004] netlink: 'syz.2.4037': attribute type 1 has an invalid length. [ 447.742977][T20047] netlink: 'syz.1.4053': attribute type 3 has an invalid length. [ 447.830365][T20051] gretap0: entered promiscuous mode [ 447.836646][T20051] gretap0: entered allmulticast mode [ 448.099938][T20063] netlink: 'syz.3.4059': attribute type 12 has an invalid length. [ 448.530341][T20073] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.600566][T20075] netlink: 'syz.3.4064': attribute type 3 has an invalid length. [ 448.629379][T20088] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 448.715479][T20073] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.892889][T20073] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.042786][T20073] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.114105][T20112] netlink: 'syz.3.4073': attribute type 1 has an invalid length. [ 449.132246][T20112] netlink: 'syz.3.4073': attribute type 11 has an invalid length. [ 449.359165][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.385367][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.434541][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.487926][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.532781][T20128] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 449.902872][T20141] syzkaller0: entered promiscuous mode [ 449.918934][T20151] netlink: 'syz.0.4084': attribute type 3 has an invalid length. [ 449.924042][T20141] syzkaller0: entered allmulticast mode [ 450.259995][T20172] netlink: 'syz.3.4087': attribute type 28 has an invalid length. [ 450.279633][T20163] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 450.297159][T20172] netlink: 'syz.3.4087': attribute type 3 has an invalid length. [ 450.317270][T20172] __nla_validate_parse: 20 callbacks suppressed [ 450.317294][T20172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4087'. [ 450.463833][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.108329][T20186] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4093'. [ 451.242728][T20190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4095'. [ 451.273434][T20192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4095'. [ 452.455153][T20161] syzkaller1: entered promiscuous mode [ 452.460693][T20161] syzkaller1: entered allmulticast mode [ 452.567007][T20201] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 452.608997][T20203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4097'. [ 452.625214][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 452.752493][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4100'. [ 452.865680][T20216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.906115][T20216] bond0: (slave rose0): Enslaving as an active interface with an up link [ 453.071967][T20235] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 453.184081][T20245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4109'. [ 453.194769][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4109'. [ 453.238656][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'. [ 453.641900][T20273] netlink: 'syz.2.4119': attribute type 39 has an invalid length. [ 453.891672][T20286] bond4: entered allmulticast mode [ 453.897962][T20286] 8021q: adding VLAN 0 to HW filter on device bond4 [ 455.222362][T20349] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 455.264511][T20348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.306108][T20350] lo speed is unknown, defaulting to 1000 [ 455.312004][T20350] lo speed is unknown, defaulting to 1000 [ 455.323374][T20350] lo speed is unknown, defaulting to 1000 [ 455.340910][T20350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 455.381125][T20350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 455.400219][T20358] __nla_validate_parse: 7 callbacks suppressed [ 455.400242][T20358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4146'. [ 455.445811][T20360] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4144'. [ 455.538574][T20350] lo speed is unknown, defaulting to 1000 [ 455.552321][T20350] lo speed is unknown, defaulting to 1000 [ 455.560834][T20350] lo speed is unknown, defaulting to 1000 [ 455.576942][T20350] lo speed is unknown, defaulting to 1000 [ 455.592634][T20350] lo speed is unknown, defaulting to 1000 [ 455.631531][T20350] lo speed is unknown, defaulting to 1000 [ 455.656823][T20350] lo speed is unknown, defaulting to 1000 [ 455.677255][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4148'. [ 455.824430][T20373] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 456.383395][T20405] openvswitch: netlink: Missing key (keys=40, expected=100) [ 456.517487][T20411] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 456.527337][T20411] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4158'. [ 456.772334][T20419] openvswitch: netlink: Duplicate or invalid key (type 0). [ 456.788527][T20419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.890920][T20422] netlink: 'syz.2.4163': attribute type 10 has an invalid length. [ 456.949302][T20422] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 457.199481][T20443] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 457.373083][T20451] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 457.388426][T20451] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 458.790182][T20519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4193'. [ 458.840958][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'. [ 458.850392][T20526] openvswitch: netlink: Unknown nsh attribute 0 [ 458.857229][T20526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.886585][T20526] netlink: 'syz.0.4196': attribute type 10 has an invalid length. [ 458.907860][T20526] bridge0: port 2(team0) entered blocking state [ 458.925613][T20526] bridge0: port 2(team0) entered disabled state [ 458.950302][T20526] team0: entered promiscuous mode [ 458.970088][T20526] team_slave_0: entered promiscuous mode [ 458.994070][T20526] team_slave_1: entered promiscuous mode [ 459.014473][T20533] netlink: 'syz.0.4196': attribute type 3 has an invalid length. [ 459.044946][T20533] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4196'. [ 459.087103][T20538] syzkaller1: entered promiscuous mode [ 459.098000][T20538] syzkaller1: entered allmulticast mode [ 459.111833][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4197'. [ 459.118438][T20540] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 459.157304][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4197'. [ 459.280600][T20548] hsr0: entered promiscuous mode [ 459.294405][T20548] hsr0: entered allmulticast mode [ 459.299506][T20548] hsr_slave_0: entered allmulticast mode [ 459.309631][T20548] hsr_slave_1: entered allmulticast mode [ 459.657264][T20582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4207'. [ 459.692417][T20586] lo: left allmulticast mode [ 460.028624][T20604] delete_channel: no stack [ 460.110620][T20610] mac80211_hwsim hwsim53 wlan1: left allmulticast mode [ 460.423257][T20630] __nla_validate_parse: 5 callbacks suppressed [ 460.423279][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 460.485380][T20634] netlink: 'syz.4.4225': attribute type 29 has an invalid length. [ 460.497177][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 460.506849][T20632] syzkaller1: entered promiscuous mode [ 460.512465][T20632] syzkaller1: entered allmulticast mode [ 460.534077][T20634] netlink: 'syz.4.4225': attribute type 29 has an invalid length. [ 460.561228][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4225'. [ 460.640132][T20632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.662611][T20642] netlink: 'syz.2.4227': attribute type 24 has an invalid length. [ 460.676291][T20632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.689911][T20632] hsr0: entered promiscuous mode [ 460.977057][T20665] netlink: 'syz.1.4234': attribute type 1 has an invalid length. [ 460.998650][T20665] netlink: 'syz.1.4234': attribute type 10 has an invalid length. [ 461.015990][T20665] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4234'. [ 461.110649][T20676] tipc: Failed to obtain node identity [ 461.137356][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.172557][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4234'. [ 461.197088][T20676] tipc: Failed to obtain node identity [ 461.235955][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.293301][T20676] tipc: Failed to obtain node identity [ 461.333244][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.426926][T20676] tipc: Failed to obtain node identity [ 461.444760][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.580840][T20676] tipc: Failed to obtain node identity [ 461.595910][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.643269][T20700] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4238'. [ 461.668841][T20701] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4238'. [ 461.739232][T20676] tipc: Failed to obtain node identity [ 461.770586][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.808554][T20676] tipc: Failed to obtain node identity [ 461.841554][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.857383][T20676] tipc: Failed to obtain node identity [ 461.867841][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.898701][T20676] tipc: Failed to obtain node identity [ 461.907961][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.923083][T20676] tipc: Failed to obtain node identity [ 461.931562][T20676] tipc: Enabling of bearer rejected, failed to enable media [ 461.950815][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 462.043332][T20711] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 462.087147][T20721] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 462.188871][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4246'. [ 462.256734][T20733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4246'. [ 462.353140][T20741] team0: Device xfrm1 is up. Set it down before adding it as a team port [ 462.809587][T20773] netlink: 'syz.4.4258': attribute type 19 has an invalid length. [ 462.886901][T20782] netlink: 'syz.3.4259': attribute type 5 has an invalid length. [ 463.199051][T20802] netlink: 'syz.1.4268': attribute type 11 has an invalid length. [ 463.815254][T20832] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 463.982471][T20845] netlink: 'syz.4.4280': attribute type 11 has an invalid length. [ 464.024289][T20845] netlink: 'syz.4.4280': attribute type 11 has an invalid length. [ 464.187151][T20854] netlink: 'syz.2.4284': attribute type 3 has an invalid length. [ 464.487768][T20871] openvswitch: netlink: Unknown nsh attribute 0 [ 464.502344][T20871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.542098][T20872] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 464.871484][T20890] netlink: 'syz.1.4294': attribute type 10 has an invalid length. [ 464.946568][T20891] tipc: Enabling of bearer rejected, failed to enable media [ 465.044996][T20897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.125124][T20902] netlink: 'syz.4.4296': attribute type 8 has an invalid length. [ 465.313030][ T30] audit: type=1800 audit(1754003350.601:3): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4302" name="memory.events" dev="tmpfs" ino=1198 res=0 errno=0 [ 465.346319][ T30] audit: type=1804 audit(1754003350.631:4): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4302" name="/newroot/232/memory.events" dev="tmpfs" ino=1198 res=1 errno=0 [ 465.371177][T20911] netlink: 'syz.1.4302': attribute type 11 has an invalid length. [ 465.504954][T20922] netlink: 'syz.2.4305': attribute type 1 has an invalid length. [ 465.526440][T20922] __nla_validate_parse: 26 callbacks suppressed [ 465.526462][T20922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4305'. [ 465.633796][T20929] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 465.837440][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 465.850497][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 465.860034][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 465.869393][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 465.886972][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 465.906276][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 465.917181][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 465.978905][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 466.255352][T20954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4312'. [ 466.764121][T20973] netlink: 'syz.4.4318': attribute type 1 has an invalid length. [ 467.434636][T21009] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 473.027355][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 473.032457][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 478.146706][ T5158] Bluetooth: hci0: command 0x041b tx timeout [ 489.483948][T21017] __nla_validate_parse: 8 callbacks suppressed [ 489.483970][T21017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4333'. [ 489.721030][T21039] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4337'. [ 489.735179][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 489.750261][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 489.768564][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4337'. [ 490.080086][T21054] veth0: entered promiscuous mode [ 490.100603][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4342'. [ 490.454566][T21067] delete_channel: no stack [ 491.050186][T21112] syzkaller0: entered promiscuous mode [ 491.062066][T21112] syzkaller0: entered allmulticast mode [ 491.189403][T21121] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4362'. [ 491.208079][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4362'. [ 491.245205][T21121] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4362'. [ 491.274649][T21124] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 491.282272][T21124] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 491.292661][T21123] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 491.441275][T21133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4367'. [ 491.963771][T21164] netlink: 'syz.1.4376': attribute type 29 has an invalid length. [ 492.065226][T21166] veth0: entered promiscuous mode [ 492.224691][T21176] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 492.248976][T21179] netlink: 'syz.1.4381': attribute type 11 has an invalid length. [ 492.430916][T21168] veth0: left promiscuous mode [ 493.732697][T21267] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 493.801947][T21267] tipc: Started in network mode [ 493.821109][T21267] tipc: Node identity d2292167ce27, cluster identity 4711 [ 493.838876][T21267] tipc: Enabled bearer , priority 0 [ 493.853353][T21261] syzkaller0: entered promiscuous mode [ 493.867050][T21261] syzkaller0: entered allmulticast mode [ 493.951755][T21261] tipc: Resetting bearer [ 493.967746][T21260] tipc: Resetting bearer [ 494.015978][T21260] tipc: Disabling bearer [ 494.225049][T21297] netlink: 'syz.1.4410': attribute type 2 has an invalid length. [ 494.469097][T21312] tipc: Enabled bearer , priority 0 [ 494.513269][T21312] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 494.533099][T21312] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 494.631172][T21316] syzkaller0: entered promiscuous mode [ 494.663658][T21316] syzkaller0: entered allmulticast mode [ 494.679936][T21322] tipc: Resetting bearer [ 497.154366][T21375] 8021q: VLANs not supported on ip_vti0 [ 497.287882][T21384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.545757][T21403] __nla_validate_parse: 15 callbacks suppressed [ 497.545777][T21403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4441'. [ 497.602865][T21403] netlink: 'syz.4.4441': attribute type 6 has an invalid length. [ 497.687993][T21412] openvswitch: netlink: Duplicate or invalid key (type 0). [ 497.715984][T21412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.783508][T21418] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4443'. [ 498.028082][T21432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4446'. [ 498.037779][T21432] IPVS: Error connecting to the multicast addr [ 498.422459][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4449'. [ 498.492981][T21453] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 498.561847][T21459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4452'. [ 498.627085][T21461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4453'. [ 498.707281][T21462] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.717949][T21462] bond3: (slave bond4): making interface the new active one [ 498.726221][T21462] bond3: (slave bond4): Enslaving as an active interface with an up link [ 498.738309][T21462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4451'. [ 498.750116][T21462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.837124][T21453] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 499.228652][T21493] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 499.254214][T21493] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 499.351664][T21493] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 499.402064][T21500] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4463'. [ 499.489742][T21503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.583442][T21476] lo speed is unknown, defaulting to 1000 [ 500.360840][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4469'. [ 500.370727][T21521] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4469'. [ 500.792327][T21541] netlink: 'syz.1.4476': attribute type 23 has an invalid length. [ 500.820788][T21548] netlink: 'syz.3.4474': attribute type 1 has an invalid length. [ 500.870990][T21548] netlink: 'syz.3.4474': attribute type 1 has an invalid length. [ 500.934223][T21544] netlink: 'syz.3.4474': attribute type 1 has an invalid length. [ 500.935575][T21552] tipc: Enabled bearer , priority 0 [ 500.954442][T21544] netlink: 'syz.3.4474': attribute type 1 has an invalid length. [ 500.996603][T21559] syzkaller0: entered promiscuous mode [ 501.012619][T21559] syzkaller0: entered allmulticast mode [ 501.076073][T21552] tipc: Resetting bearer [ 501.254242][T21551] tipc: Resetting bearer [ 501.334629][T21551] tipc: Disabling bearer [ 501.918580][T21599] netlink: 'syz.3.4493': attribute type 1 has an invalid length. [ 501.948341][T21589] syzkaller0: entered promiscuous mode [ 501.976028][T21589] syzkaller0: entered allmulticast mode [ 502.197441][T21608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.485956][T21613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.745034][ T5158] Bluetooth: hci5: command 0x0406 tx timeout [ 504.237324][T21619] unknown channel width for channel at 909000KHz? [ 504.263512][T21619] unknown channel width for channel at 909000KHz? [ 504.273757][T21619] unknown channel width for channel at 909000KHz? [ 504.446740][T21630] delete_channel: no stack [ 504.462680][T21632] __nla_validate_parse: 5 callbacks suppressed [ 504.462702][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4503'. [ 504.513477][T21633] pim6reg1: entered promiscuous mode [ 504.529763][T21633] pim6reg1: entered allmulticast mode [ 504.722804][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4508'. [ 504.755529][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4505'. [ 504.761255][T21646] bridge_slave_1: left promiscuous mode [ 504.774108][T21646] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.813383][T21646] bridge_slave_0: left promiscuous mode [ 504.829905][T21646] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.020776][T21661] bond5: entered promiscuous mode [ 505.026694][T21661] bond5: entered allmulticast mode [ 505.032365][T21661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.328063][T21680] IPVS: Error connecting to the multicast addr [ 505.431473][T21689] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 505.552267][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4522'. [ 505.700059][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4525'. [ 505.747727][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4522'. [ 506.008184][T21722] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4528'. [ 506.019315][T21720] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 506.045708][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4528'. [ 506.079030][T21722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4528'. [ 506.113548][T20576] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.122255][T20576] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.137355][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4528'. [ 506.149755][T20576] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.169658][T20576] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.726236][T21763] netlink: 'syz.1.4546': attribute type 10 has an invalid length. [ 506.740703][T21763] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 507.267635][T21791] netlink: 'syz.2.4556': attribute type 21 has an invalid length. [ 507.276388][T21792] netlink: 'syz.2.4556': attribute type 21 has an invalid length. [ 507.678350][T21811] pimreg: entered allmulticast mode [ 508.075749][ T5850] Bluetooth: hci1: command 0x0405 tx timeout [ 508.119834][T21831] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 508.152955][T21831] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 508.230579][T21836] netlink: 'syz.0.4571': attribute type 8 has an invalid length. [ 508.591776][T21863] tipc: Enabled bearer , priority 0 [ 508.608306][T21866] netlink: 'syz.0.4577': attribute type 4 has an invalid length. [ 508.629244][T21866] vcan0: left allmulticast mode [ 508.714468][T21861] syzkaller0: entered promiscuous mode [ 508.721894][T21861] syzkaller0: entered allmulticast mode [ 508.728476][T21861] tipc: Resetting bearer [ 508.786658][T21859] tipc: Resetting bearer [ 509.653889][T10872] tipc: Node number set to 470688103 [ 510.788303][T21859] tipc: Disabling bearer [ 510.849818][T21893] __nla_validate_parse: 11 callbacks suppressed [ 510.849839][T21893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4584'. [ 510.869185][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4584'. [ 510.993833][T21898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4588'. [ 511.076160][T21913] openvswitch: netlink: Duplicate or invalid key (type 0). [ 511.095829][T21913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.114959][T21913] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.4588'. [ 511.655822][T21935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.695818][T21937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4598'. [ 511.995801][T21949] tipc: Started in network mode [ 512.000755][T21949] tipc: Node identity 3a2e299ceddc, cluster identity 4711 [ 512.059492][T21949] tipc: Enabled bearer , priority 0 [ 512.084243][T21955] syzkaller0: entered promiscuous mode [ 512.090308][T21955] syzkaller0: entered allmulticast mode [ 512.125308][T21956] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 512.158467][T21949] tipc: Resetting bearer [ 512.233949][T21947] tipc: Resetting bearer [ 512.326703][T21947] tipc: Disabling bearer [ 512.333133][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4606'. [ 512.333170][T21974] netlink: 'syz.2.4606': attribute type 1 has an invalid length. [ 512.333196][T21974] netlink: 'syz.2.4606': attribute type 1 has an invalid length. [ 512.333212][T21974] netlink: 'syz.2.4606': attribute type 2 has an invalid length. [ 512.389216][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4605'. [ 512.433151][T21969] can: request_module (can-proto-0) failed. [ 512.447221][T21962] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 512.453631][T21974] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4606'. [ 512.646265][T21981] netlink: 'syz.0.4609': attribute type 8 has an invalid length. [ 512.662631][T21982] netlink: 'syz.0.4609': attribute type 8 has an invalid length. [ 513.287545][T22019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4617'. [ 513.345051][T22022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4616'. [ 513.576540][T22033] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.584111][T22033] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.618990][T22033] bridge0: entered allmulticast mode [ 513.683344][T22038] tipc: Enabled bearer , priority 0 [ 513.694416][T22038] syzkaller0: entered promiscuous mode [ 513.700346][T22038] syzkaller0: entered allmulticast mode [ 513.771667][T22038] tipc: Resetting bearer [ 513.867576][T22052] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 513.928860][T22049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.949695][T22049] macvlan0: entered promiscuous mode [ 513.955430][T22049] macvlan0: entered allmulticast mode [ 513.962738][T22049] bond2: (slave macvlan0): Opening slave failed [ 514.031810][T22058] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 514.047451][T22058] netlink: zone id is out of range [ 514.144359][ T5850] Bluetooth: hci0: command tx timeout [ 514.464607][T22037] tipc: Resetting bearer [ 514.492674][T22037] tipc: Disabling bearer [ 514.537689][T22081] gre2: entered promiscuous mode [ 514.558067][T22081] gre2: entered allmulticast mode [ 514.571605][T22085] netlink: 'syz.4.4639': attribute type 1 has an invalid length. [ 514.584212][T22085] netlink: 'syz.4.4639': attribute type 11 has an invalid length. [ 515.825206][T22137] netlink: 'syz.1.4657': attribute type 21 has an invalid length. [ 516.276294][T22159] __nla_validate_parse: 20 callbacks suppressed [ 516.276316][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'. [ 516.346342][T22114] lo speed is unknown, defaulting to 1000 [ 516.587978][T22173] netlink: 'syz.3.4667': attribute type 1 has an invalid length. [ 516.759867][T22173] syzkaller0: refused to change device tx_queue_len [ 516.948424][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4671'. [ 517.194810][T22197] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4673'. [ 517.974318][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 518.407685][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4689'. [ 518.606485][T22271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4692'. [ 519.174055][T22304] IPVS: length: 153 != 24 [ 519.190044][T22304] netlink: 'syz.0.4703': attribute type 2 has an invalid length. [ 519.439116][T22309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4705'. [ 519.459232][T22306] bond4: entered allmulticast mode [ 519.480170][T22306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.489272][T22306] bridge0: port 1(bond4) entered blocking state [ 519.495916][T22306] bridge0: port 1(bond4) entered disabled state [ 519.505877][T22306] bond4: entered promiscuous mode [ 519.606522][T22306] tun0: tun_chr_ioctl cmd 1074025675 [ 519.631167][T22306] tun0: persist disabled [ 520.534005][T22350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4718'. [ 520.582445][T22359] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4720'. [ 520.783109][T22368] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4722'. [ 521.056366][T22384] netlink: 'syz.2.4727': attribute type 1 has an invalid length. [ 521.089216][T22382] netlink: 'syz.0.4725': attribute type 1 has an invalid length. [ 521.175526][T22389] IPVS: Error connecting to the multicast addr [ 521.184006][T22390] netlink: 'syz.2.4727': attribute type 2 has an invalid length. [ 521.208478][T22389] netlink: 'syz.3.4728': attribute type 4 has an invalid length. [ 521.241840][T22389] netlink: 'syz.3.4728': attribute type 4 has an invalid length. [ 521.296050][T22389] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 521.333341][T22394] __nla_validate_parse: 3 callbacks suppressed [ 521.333361][T22394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4729'. [ 521.562097][T22401] netlink: zone id is out of range [ 521.569122][T22401] netlink: zone id is out of range [ 521.589547][T22401] netlink: zone id is out of range [ 521.610901][T22401] netlink: zone id is out of range [ 521.619918][T22404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4733'. [ 521.623948][T22401] netlink: zone id is out of range [ 521.649277][T22406] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 521.660750][T22408] syzkaller0: entered promiscuous mode [ 521.666481][T22408] syzkaller0: entered allmulticast mode [ 521.667136][T22401] netlink: zone id is out of range [ 521.689862][T22407] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 521.693867][T22401] netlink: zone id is out of range [ 521.713332][T22401] netlink: zone id is out of range [ 521.858698][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4736'. [ 521.875240][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4737'. [ 521.982912][T22419] netlink: 'syz.2.4739': attribute type 8 has an invalid length. [ 521.994040][T22357] lo speed is unknown, defaulting to 1000 [ 522.005845][T22419] netlink: 'syz.2.4739': attribute type 8 has an invalid length. [ 522.266003][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'. [ 522.302715][T22434] ipvlan0: entered promiscuous mode [ 522.323386][T22436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4742'. [ 522.441910][T22438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4745'. [ 522.671145][T22449] netlink: 'syz.1.4748': attribute type 7 has an invalid length. [ 522.771198][T22454] veth0: entered promiscuous mode [ 523.149045][T22453] veth0: left promiscuous mode [ 523.170322][T22465] netlink: 'syz.1.4753': attribute type 4 has an invalid length. [ 523.183278][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4753'. [ 523.193176][T22465] nbd: must specify an index to disconnect [ 523.422794][T22487] team0: Device gtp0 is of different type [ 523.570770][T22489] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4759'. [ 524.407585][T22534] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4770'. [ 524.551968][T22544] validate_nla: 2 callbacks suppressed [ 524.551990][T22544] netlink: 'syz.0.4772': attribute type 10 has an invalid length. [ 524.595515][T22546] tc_dump_action: action bad kind [ 524.606825][T22544] team0: left allmulticast mode [ 524.619568][T22544] team0: left promiscuous mode [ 524.627098][T22544] team_slave_0: left promiscuous mode [ 524.636994][T22544] team_slave_1: left promiscuous mode [ 524.643199][T22544] bridge0: port 2(team0) entered disabled state [ 524.684102][T22544] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.686008][T22550] netlink: 'syz.1.4774': attribute type 6 has an invalid length. [ 524.720061][T22544] team0: entered allmulticast mode [ 524.757651][T22544] bond0: (slave team0): Enslaving as an active interface with an up link [ 524.881159][T22551] syzkaller1: entered promiscuous mode [ 524.895994][T20570] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 524.919701][T22551] syzkaller1: entered allmulticast mode [ 524.968159][T22567] netlink: 'syz.2.4778': attribute type 1 has an invalid length. [ 524.977560][T22567] netlink: 'syz.2.4778': attribute type 1 has an invalid length. [ 524.993993][T22567] netlink: 'syz.2.4778': attribute type 1 has an invalid length. [ 525.003090][T22567] netlink: 'syz.2.4778': attribute type 2 has an invalid length. [ 525.605657][T22575] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 525.627814][T22575] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 525.829023][T22585] netlink: 'syz.1.4781': attribute type 30 has an invalid length. [ 525.902098][T22585] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 525.956589][T22585] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 526.250781][T22617] vlan3: entered promiscuous mode [ 526.259339][T22617] bridge0: entered promiscuous mode [ 526.330194][T22618] bridge0: left allmulticast mode [ 526.351399][T22623] __nla_validate_parse: 5 callbacks suppressed [ 526.351420][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4792'. [ 526.377716][T22623] batman_adv: batadv0: Interface deactivated: dummy0 [ 526.386031][T22623] batman_adv: batadv0: Removing interface: dummy0 [ 526.399265][T22623] bond0: (slave bridge_slave_1): Releasing backup interface [ 526.411751][T22623] veth0_to_bond: left allmulticast mode [ 526.445929][T22623] veth0_to_bond: left promiscuous mode [ 526.452206][T22623] bridge3: port 1(veth0_to_bond) entered disabled state [ 526.525815][T22629] netlink: 'syz.1.4793': attribute type 2 has an invalid length. [ 526.536183][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4793'. [ 526.550209][T22623] bond1: (slave gretap1): Releasing active interface [ 526.582031][T22623] bond3: (slave bond4): Releasing backup interface [ 526.597222][T22623] bond3: (slave bond4): the permanent HWaddr of slave - ee:29:8b:39:03:32 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 526.617653][T22623] bond3: (slave gretap2): making interface the new active one [ 526.645949][T22623] bond3: (slave gretap2): Releasing backup interface [ 526.692106][T22624] team0: Mode changed to "loadbalance" [ 526.708974][T22623] syz.2.4792 (22623) used greatest stack depth: 18864 bytes left [ 526.719081][T22637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4796'. [ 526.792772][T22637] sch_tbf: burst 88 is lower than device veth1 mtu (1514) ! [ 527.343514][T22669] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4804'. [ 527.972874][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4817'. [ 527.982830][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4817'. [ 528.001254][T22716] net_ratelimit: 9 callbacks suppressed [ 528.001274][T22716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.020559][T22717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.085662][T22721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4819'. [ 528.150377][T22723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4819'. [ 528.181508][T10872] IPVS: starting estimator thread 0... [ 528.292103][T22727] IPVS: using max 25 ests per chain, 60000 per kthread [ 528.387609][T22733] syz.4.4825 (22733) used greatest stack depth: 17864 bytes left [ 528.511671][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4826'. [ 528.525278][T22744] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4826'. [ 528.699178][T22756] wg1: entered promiscuous mode [ 528.727315][T22751] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 529.176464][T22780] ksmbd: Unknown IPC event: 3, ignore. [ 529.401505][T22799] dummy0: entered promiscuous mode [ 529.439314][T22799] dummy0: left promiscuous mode [ 529.877927][T22822] sctp: [Deprecated]: syz.3.4852 (pid 22822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.877927][T22822] Use struct sctp_sack_info instead [ 530.075975][T22828] validate_nla: 5 callbacks suppressed [ 530.075995][T22828] netlink: 'syz.3.4855': attribute type 10 has an invalid length. [ 530.109058][T22828] netlink: 'syz.3.4855': attribute type 1 has an invalid length. [ 530.250074][T22837] netlink: 'syz.0.4856': attribute type 1 has an invalid length. [ 530.608520][T22858] pim6reg1: entered promiscuous mode [ 530.621836][T22858] pim6reg1: entered allmulticast mode [ 530.933298][T22878] syz.1.4869: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 530.995898][T22878] CPU: 0 UID: 0 PID: 22878 Comm: syz.1.4869 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 530.995931][T22878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.995952][T22878] Call Trace: [ 530.995960][T22878] [ 530.995974][T22878] dump_stack_lvl+0x189/0x250 [ 530.996003][T22878] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 530.996033][T22878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.996056][T22878] ? __pfx__printk+0x10/0x10 [ 530.996084][T22878] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 530.996109][T22878] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 530.996143][T22878] warn_alloc+0x214/0x310 [ 530.996173][T22878] ? __pfx_warn_alloc+0x10/0x10 [ 530.996207][T22878] ? __get_vm_area_node+0x28f/0x300 [ 530.996242][T22878] ? packet_set_ring+0x6f4/0x2380 [ 530.996273][T22878] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 530.996331][T22878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 530.996355][T22878] ? alloc_pages_mpol+0x3cd/0x4a0 [ 530.996390][T22878] ? packet_set_ring+0x6f4/0x2380 [ 530.996415][T22878] vzalloc_noprof+0xb2/0xf0 [ 530.996435][T22878] ? packet_set_ring+0x6f4/0x2380 [ 530.996462][T22878] packet_set_ring+0x6f4/0x2380 [ 530.996523][T22878] ? __pfx_packet_set_ring+0x10/0x10 [ 530.996573][T22878] ? _copy_from_user+0x94/0xb0 [ 530.996610][T22878] packet_setsockopt+0xc5a/0x12c0 [ 530.996639][T22878] ? __pfx_packet_setsockopt+0x10/0x10 [ 530.996672][T22878] ? __lock_acquire+0xab9/0xd20 [ 530.996709][T22878] ? aa_sk_perm+0x81e/0x950 [ 530.996743][T22878] ? __pfx_aa_sk_perm+0x10/0x10 [ 530.996772][T22878] ? __fget_files+0x2a/0x420 [ 530.996793][T22878] ? aa_sock_opt_perm+0x74/0x110 [ 530.996825][T22878] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 530.996850][T22878] ? __pfx_packet_setsockopt+0x10/0x10 [ 530.996878][T22878] do_sock_setsockopt+0x179/0x1b0 [ 530.996903][T22878] __x64_sys_setsockopt+0x13f/0x1b0 [ 530.996932][T22878] do_syscall_64+0xfa/0x3b0 [ 530.996963][T22878] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.996993][T22878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.997015][T22878] ? clear_bhb_loop+0x60/0xb0 [ 530.997042][T22878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.997063][T22878] RIP: 0033:0x7fe037d8eb69 [ 530.997090][T22878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.997110][T22878] RSP: 002b:00007fe035bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 530.997134][T22878] RAX: ffffffffffffffda RBX: 00007fe037fb6080 RCX: 00007fe037d8eb69 [ 530.997150][T22878] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 530.997163][T22878] RBP: 00007fe037e11df1 R08: 000000000000001c R09: 0000000000000000 [ 530.997176][T22878] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 530.997189][T22878] R13: 0000000000000000 R14: 00007fe037fb6080 R15: 00007fffc5197268 [ 530.997222][T22878] [ 530.997474][T22878] Mem-Info: [ 531.343707][T22878] active_anon:3622 inactive_anon:0 isolated_anon:0 [ 531.343707][T22878] active_file:1628 inactive_file:39995 isolated_file:0 [ 531.343707][T22878] unevictable:768 dirty:49 writeback:0 [ 531.343707][T22878] slab_reclaimable:12898 slab_unreclaimable:128923 [ 531.343707][T22878] mapped:29064 shmem:1363 pagetables:951 [ 531.343707][T22878] sec_pagetables:0 bounce:0 [ 531.343707][T22878] kernel_misc_reclaimable:0 [ 531.343707][T22878] free:1294902 free_pcp:14294 free_cma:0 [ 531.401865][T22878] Node 0 active_anon:14388kB inactive_anon:0kB active_file:6512kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116256kB dirty:196kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15480kB pagetables:3680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 531.438893][T22878] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 531.545958][T22878] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.582923][T22903] __nla_validate_parse: 15 callbacks suppressed [ 531.582944][T22903] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4876'. [ 531.599879][T22878] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 531.606041][T22878] Node 0 DMA32 free:1265964kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14440kB inactive_anon:0kB active_file:6512kB inactive_file:157952kB unevictable:1536kB writepending:196kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:35268kB local_pcp:17552kB free_cma:0kB [ 531.620051][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 531.639401][T22878] lowmem_reserve[]: 0 0 1 1 1 [ 531.652841][T22878] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 531.696924][T22878] lowmem_reserve[]: 0 0 0 0 0 [ 531.701917][T22878] Node 1 Normal free:3898268kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22040kB local_pcp:10288kB free_cma:0kB [ 531.736611][T22878] lowmem_reserve[]: 0 0 0 0 0 [ 531.741751][T22878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 531.755619][T22878] Node 0 DMA32: 1183*4kB (UME) 398*8kB (UME) 210*16kB (UM) 319*32kB (UME) 109*64kB (UME) 20*128kB (UM) 6*256kB (UM) 9*512kB (UME) 16*1024kB (UM) 4*2048kB (ME) 294*4096kB (UM) = 1265964kB [ 531.775018][T22878] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 531.789103][T22878] Node 1 Normal: 199*4kB (UE) 40*8kB (UME) 46*16kB (UME) 73*32kB (UME) 29*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3898268kB [ 531.809230][T22878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.820402][T22878] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.834022][T22878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.857102][T22878] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.880543][T22910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4881'. [ 531.887310][T22878] 42983 total pagecache pages [ 531.898162][T22878] 0 pages in swap cache [ 531.900316][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4881'. [ 531.902700][T22878] Free swap = 124996kB [ 531.924461][T22911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4880'. [ 531.945255][T22878] Total swap = 124996kB [ 531.960357][T22911] netlink: 'syz.2.4880': attribute type 1 has an invalid length. [ 531.970530][T22911] netlink: 'syz.2.4880': attribute type 2 has an invalid length. [ 531.974793][T22878] 2097051 pages RAM [ 531.982457][T22878] 0 pages HighMem/MovableOnly [ 531.996924][T22878] 424872 pages reserved [ 532.002192][T22878] 0 pages cma reserved [ 532.197160][T22922] nft_compat: unsupported protocol 1 [ 532.515915][T22939] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.559775][T22939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4889'. [ 532.781990][T22959] netlink: 'syz.1.4894': attribute type 11 has an invalid length. [ 532.840228][T22959] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4894'. [ 533.102418][T22976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4899'. [ 533.188842][T22984] netlink: 'syz.3.4900': attribute type 1 has an invalid length. [ 533.203835][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4900'. [ 533.294791][T22987] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 533.317556][T22990] tipc: Enabling of bearer rejected, already enabled [ 533.496179][T23002] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4907'. [ 534.602602][T23040] netlink: 'syz.4.4918': attribute type 2 has an invalid length. [ 534.674289][ T5850] Bluetooth: hci1: link tx timeout [ 534.680392][ T5850] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 534.906522][T23055] netlink: 'syz.3.4923': attribute type 9 has an invalid length. [ 534.985404][T23010] lo speed is unknown, defaulting to 1000 [ 535.169188][T23076] netlink: 'syz.4.4929': attribute type 30 has an invalid length. [ 535.199002][T23076] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 535.254268][T23076] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 535.934725][T23114] netlink: 'syz.2.4939': attribute type 1 has an invalid length. [ 536.009146][T23110] Can't find ip_set type bitmap:ip,mac [ 536.195188][T23124] netlink: 'syz.4.4940': attribute type 1 has an invalid length. [ 536.705263][ T5158] Bluetooth: hci1: command 0x0405 tx timeout [ 536.831226][T23153] veth1_macvtap: left promiscuous mode [ 537.124607][T23171] netlink: 'syz.1.4954': attribute type 13 has an invalid length. [ 537.132974][T23171] __nla_validate_parse: 15 callbacks suppressed [ 537.132995][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4954'. [ 537.157947][T23171] netlink: 'syz.1.4954': attribute type 13 has an invalid length. [ 537.166434][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4954'. [ 537.242923][T23177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.370118][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4959'. [ 537.572522][T23193] Bluetooth: MGMT ver 1.23 [ 538.122760][T23227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4972'. [ 538.300898][T23239] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4976'. [ 538.375963][T23246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4977'. [ 538.489901][T23253] pim6reg1: entered promiscuous mode [ 538.509872][T23253] pim6reg1: entered allmulticast mode [ 538.805553][T23266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4983'. [ 538.844406][T23269] netlink: 'syz.4.4984': attribute type 13 has an invalid length. [ 538.907588][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4985'. [ 539.014864][T23278] netlink: 'syz.3.4986': attribute type 4 has an invalid length. [ 539.063086][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4988'. [ 539.072714][T23282] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 539.080566][T23282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.156887][T23286] lo: entered allmulticast mode [ 539.163458][T23286] netlink: 'syz.4.4990': attribute type 1 has an invalid length. [ 539.172575][T23286] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4990'. [ 539.367128][T23296] netlink: 'syz.0.4993': attribute type 75 has an invalid length. [ 539.858544][T23326] netlink: 'syz.3.5003': attribute type 10 has an invalid length. [ 539.869105][T23326] team0: left allmulticast mode [ 539.899037][T23326] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.919996][T23326] team0: entered allmulticast mode [ 539.930497][T23326] bond0: (slave team0): Enslaving as an active interface with an up link [ 540.331598][T23351] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 540.337590][T23353] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 540.367873][T23351] netlink: 'syz.3.5010': attribute type 5 has an invalid length. [ 540.413836][T23358] netlink: 'syz.2.5012': attribute type 24 has an invalid length. [ 540.432061][T23344] eql: entered promiscuous mode [ 540.439386][T23359] sctp: [Deprecated]: syz.1.5013 (pid 23359) Use of int in maxseg socket option. [ 540.439386][T23359] Use struct sctp_assoc_value instead [ 540.458884][T23344] eql: entered allmulticast mode [ 540.478959][T23351] openvswitch: netlink: Message has 5 unknown bytes. [ 541.315629][T23408] team0: Cannot enslave team device to itself [ 541.486335][T23349] lo speed is unknown, defaulting to 1000 [ 541.817520][T23427] netlink: 'syz.3.5031': attribute type 1 has an invalid length. [ 541.847312][T23427] netlink: 'syz.3.5031': attribute type 1 has an invalid length. [ 541.907258][T23429] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 542.153439][T23441] __nla_validate_parse: 48 callbacks suppressed [ 542.153460][T23441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5037'. [ 542.249542][T23441] team0: Cannot enslave team device to itself [ 542.460604][T23453] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 542.592156][T23458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5042'. [ 542.676052][T23463] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5044'. [ 542.757050][T23462] netem: change failed [ 542.878833][T23469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 542.906749][T23469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 542.945266][T23469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 542.956104][T23473] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5046'. [ 542.970807][T23469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 542.983118][T23469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 543.139369][T23473] bond0 (unregistering): Released all slaves [ 543.216386][T23481] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5051'. [ 543.342613][T23488] netlink: 'syz.2.5053': attribute type 13 has an invalid length. [ 543.551785][T23488] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.791401][T23523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5063'. [ 544.107540][T23545] bridge5: entered promiscuous mode [ 544.121125][T23545] bridge5: entered allmulticast mode [ 544.238099][T23556] bond0: Device is already in use. [ 544.275422][T23560] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5073'. [ 544.783119][T23586] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5083'. [ 544.796208][T23586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5083'. [ 544.822191][T23592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5084'. [ 544.924226][T23597] netlink: 'syz.0.5086': attribute type 3 has an invalid length. [ 545.034422][T23600] bond0: entered promiscuous mode [ 545.039879][T23600] bond_slave_0: entered promiscuous mode [ 545.074275][T23600] bond_slave_1: entered promiscuous mode [ 545.091340][T23600] bridge0: entered promiscuous mode [ 545.114027][T23600] bond0: entered allmulticast mode [ 545.153053][T23600] bond_slave_0: entered allmulticast mode [ 545.176859][T23610] netlink: 'syz.1.5088': attribute type 2 has an invalid length. [ 545.193961][T23610] netlink: 'syz.1.5088': attribute type 1 has an invalid length. [ 545.194033][T23600] bond_slave_1: entered allmulticast mode [ 545.299488][T23614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.323225][T23623] net_ratelimit: 29 callbacks suppressed [ 545.323247][T23623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.377464][T23621] macvlan3: entered promiscuous mode [ 545.382872][T23621] macvlan3: entered allmulticast mode [ 545.570831][T23629] tipc: Started in network mode [ 545.587314][T23629] tipc: Node identity 6aa9a2b21494, cluster identity 4711 [ 545.615819][T23629] tipc: Enabled bearer , priority 0 [ 545.651515][T23635] team0: Device vti0 is up. Set it down before adding it as a team port [ 545.663978][ T5158] Bluetooth: hci1: command 0x0405 tx timeout [ 545.799163][T23629] syzkaller0: entered promiscuous mode [ 545.804985][T23629] syzkaller0: entered allmulticast mode [ 545.811353][T23629] tipc: Resetting bearer [ 545.839906][T23645] netlink: 'syz.3.5099': attribute type 10 has an invalid length. [ 545.875913][T23646] team0: Device gtp0 is of different type [ 545.952361][T23628] tipc: Resetting bearer [ 546.674180][T13195] tipc: Node number set to 2117968562 [ 548.134626][T23628] tipc: Disabling bearer [ 548.146995][T23645] veth0_vlan: left promiscuous mode [ 548.153281][T23645] veth0_vlan: entered promiscuous mode [ 548.161122][T23645] team0: Device veth0_vlan failed to register rx_handler [ 548.182868][T23639] tipc: Enabling of bearer rejected, failed to enable media [ 548.344122][T23669] bond0: (slave team0): Releasing backup interface [ 548.361421][T23669] team0: left allmulticast mode [ 548.385184][T23669] bond0: (slave dummy0): Releasing backup interface [ 548.402496][T23669] bond0: (slave bond_slave_0): Releasing backup interface [ 548.421474][T23669] bond0: (slave bond_slave_1): Releasing backup interface [ 548.439870][T23669] team0: Port device team_slave_0 removed [ 548.448891][T23669] team0: Port device team_slave_1 removed [ 548.457393][T23669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.469950][T23669] bond4: left promiscuous mode [ 548.475886][T23669] bridge0: port 1(bond4) entered disabled state [ 548.923886][T23694] tipc: Enabling of bearer rejected, already enabled [ 549.077649][T23698] bond3: entered promiscuous mode [ 549.082985][T23698] bond3: entered allmulticast mode [ 549.091883][T23698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.182614][T23704] openvswitch: netlink: IP tunnel TTL not specified. [ 549.353305][T23710] sctp: [Deprecated]: syz.0.5121 (pid 23710) Use of int in max_burst socket option. [ 549.353305][T23710] Use struct sctp_assoc_value instead [ 550.029336][T23740] __nla_validate_parse: 11 callbacks suppressed [ 550.029359][T23740] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5133'. [ 550.058654][T23744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5136'. [ 550.090520][T23747] netlink: 'syz.1.5135': attribute type 1 has an invalid length. [ 550.098965][T23745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5136'. [ 550.227131][T23753] netlink: 'syz.4.5138': attribute type 1 has an invalid length. [ 550.251428][T23753] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5138'. [ 550.280694][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5138'. [ 550.585564][T23775] ksmbd: Unknown IPC event: 3, ignore. [ 550.745642][T23781] netlink: zone id is out of range [ 550.750832][T23781] netlink: zone id is out of range [ 550.775799][T23781] netlink: zone id is out of range [ 550.787295][T23781] netlink: zone id is out of range [ 550.811997][T23781] netlink: zone id is out of range [ 550.859681][T23787] netlink: 'syz.0.5148': attribute type 11 has an invalid length. [ 550.866379][T23781] netlink: zone id is out of range [ 550.873020][T23781] netlink: zone id is out of range [ 550.921375][T23781] netlink: zone id is out of range [ 550.934142][T23781] netlink: zone id is out of range [ 550.949696][T23781] netlink: zone id is out of range [ 551.062118][T23800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5150'. [ 551.101800][T23802] netlink: 'syz.0.5151': attribute type 29 has an invalid length. [ 551.134416][T23802] netlink: 'syz.0.5151': attribute type 16 has an invalid length. [ 551.154110][T23802] netlink: 'syz.0.5151': attribute type 17 has an invalid length. [ 551.214364][T23806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5152'. [ 551.239314][T23811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5154'. [ 551.280765][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5152'. [ 551.290523][T23802] netlink: 'syz.0.5151': attribute type 29 has an invalid length. [ 551.315739][T23802] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5151'. [ 551.676708][T23833] bond0: Error: Cannot enslave bond to itself. [ 551.787951][T23841] dvmrp8: entered allmulticast mode [ 551.893282][T23850] syzkaller0: entered promiscuous mode [ 551.899490][T23850] syzkaller0: entered allmulticast mode [ 551.914074][T23850] netlink: 'syz.1.5166': attribute type 3 has an invalid length. [ 551.925466][T23851] netlink: 'syz.1.5166': attribute type 3 has an invalid length. [ 552.436376][T23876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 552.475376][T23880] netlink: 'syz.2.5173': attribute type 1 has an invalid length. [ 552.483348][T23880] netlink: 'syz.2.5173': attribute type 2 has an invalid length. [ 552.491390][T23880] netlink: 'syz.2.5173': attribute type 1 has an invalid length. [ 552.599768][T23890] IPv6: Can't replace route, no match found [ 553.074869][T23923] tipc: Enabling of bearer rejected, failed to enable media [ 553.214909][T23914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.898763][T23970] pim6reg1: entered promiscuous mode [ 553.910592][T23970] pim6reg1: entered allmulticast mode [ 554.075449][T23982] sctp: [Deprecated]: syz.0.5198 (pid 23982) Use of int in max_burst socket option deprecated. [ 554.075449][T23982] Use struct sctp_assoc_value instead [ 555.070777][T24033] __nla_validate_parse: 10 callbacks suppressed [ 555.070798][T24033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5214'. [ 555.122132][T24033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5214'. [ 555.140854][T24033] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5214'. [ 555.530855][T24051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5222'. [ 555.684822][T24069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5228'. [ 555.718438][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5226'. [ 555.729204][T24070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5227'. [ 556.404220][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5234'. [ 556.494753][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5235'. [ 556.529200][T24099] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 556.587484][T24103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5236'. [ 558.040803][ T30] audit: type=1107 audit(1754003443.331:5): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^A0fݴUEB8Pּ6sKI꺤RE0vְ8Hg,, priority 0 [ 561.672730][T24393] tipc: Disabling bearer [ 561.967351][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5335'. [ 562.093198][T24419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5338'. [ 562.148101][T24420] netlink: 'syz.1.5338': attribute type 1 has an invalid length. [ 562.177093][T24420] netlink: 'syz.1.5338': attribute type 2 has an invalid length. [ 562.222700][T24424] netlink: 'syz.0.5339': attribute type 27 has an invalid length. [ 562.316150][T24431] netlink: 'syz.4.5340': attribute type 1 has an invalid length. [ 562.324098][T24431] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5340'. [ 562.336244][T24431] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5340'. [ 562.379650][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880534f5400: rx timeout, send abort [ 562.388336][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880534f5400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 563.232921][T24482] bond0: (slave bridge0): Releasing backup interface [ 563.256908][T24482] bridge0: left promiscuous mode [ 563.318043][T24482] bridge_slave_0: left allmulticast mode [ 563.361444][T24482] bridge_slave_0: left promiscuous mode [ 563.401897][T24482] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.450602][T24482] bridge_slave_1: left allmulticast mode [ 563.471829][T24482] bridge_slave_1: left promiscuous mode [ 563.485464][T24482] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.513169][T24482] bond6: (slave veth0_to_bond): Releasing active interface [ 563.549471][T24482] veth0_to_bond: left promiscuous mode [ 563.584523][T24482] bond0: (slave bond_slave_0): Releasing backup interface [ 563.599651][T24482] bond_slave_0: left promiscuous mode [ 563.609273][T24482] bond_slave_0: left allmulticast mode [ 563.632913][T24482] bond0: (slave bond_slave_1): Releasing backup interface [ 563.645084][T24482] bond_slave_1: left promiscuous mode [ 563.650722][T24482] bond_slave_1: left allmulticast mode [ 563.677119][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880540cdc00: rx timeout, send abort [ 563.686068][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880540cdc00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 563.686180][T24482] team0: Port device team_slave_0 removed [ 563.738844][T24482] team0: Port device team_slave_1 removed [ 563.757602][T24482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.770641][T24482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.781220][T24482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.795740][T24482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.820490][T24482] bond2: (slave gretap1): Releasing active interface [ 563.849487][T24501] netlink: 'syz.2.5355': attribute type 4 has an invalid length. [ 563.868437][T24482] bond6: (slave veth5): Releasing active interface [ 563.880191][T13195] lo speed is unknown, defaulting to 1000 [ 564.745896][T24557] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 564.966317][T24571] netlink: 'syz.1.5377': attribute type 1 has an invalid length. [ 565.033322][T24577] netlink: 'syz.4.5379': attribute type 1 has an invalid length. [ 565.053082][T24580] netlink: 'syz.4.5379': attribute type 1 has an invalid length. [ 565.121059][T24571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.151841][T24577] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 565.180215][T24580] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 565.307862][T24589] __nla_validate_parse: 14 callbacks suppressed [ 565.307888][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5381'. [ 565.437057][T24599] netlink: 'syz.3.5384': attribute type 1 has an invalid length. [ 565.820788][T24619] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 565.846719][T24619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5391'. [ 565.934744][T24546] lo speed is unknown, defaulting to 1000 [ 566.046330][T24630] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 566.165219][T24637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5397'. [ 566.231321][T24635] bridge12: entered promiscuous mode [ 566.237034][T24635] bridge12: entered allmulticast mode [ 567.258805][T24678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5408'. [ 567.324644][T24682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5410'. [ 567.410924][T24683] nbd: must specify a device to reconfigure [ 567.569965][T24685] tipc: Enabled bearer , priority 0 [ 567.592106][T24685] syzkaller0: entered promiscuous mode [ 567.603766][T24685] syzkaller0: entered allmulticast mode [ 567.635995][T24692] netlink: 'syz.1.5414': attribute type 4 has an invalid length. [ 567.653179][T24685] tipc: Resetting bearer [ 567.697294][T24684] tipc: Resetting bearer [ 567.742830][T24684] tipc: Disabling bearer [ 568.434199][T24721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5421'. [ 568.447313][T24719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5422'. [ 568.650701][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5421'. [ 568.666254][T24733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5426'. [ 568.766581][T24739] netlink: 'syz.3.5421': attribute type 2 has an invalid length. [ 568.908979][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 569.163320][T24749] team0: Mode changed to "activebackup" [ 569.192172][T24753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.901754][T24808] sctp: [Deprecated]: syz.2.5449 (pid 24808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.901754][T24808] Use struct sctp_sack_info instead [ 569.935543][T24809] netlink: 'syz.3.5450': attribute type 27 has an invalid length. [ 569.978508][T24809] tunl0: left allmulticast mode [ 569.990561][T24809] gre0: left allmulticast mode [ 570.000478][T24809] 0{X: left allmulticast mode [ 570.021779][T24809] erspan0: left allmulticast mode [ 570.029838][T24809] ip_vti0: left allmulticast mode [ 570.036492][T24809] ip6_vti0: left allmulticast mode [ 570.042017][T24809] sit0: left allmulticast mode [ 570.047308][T24809] ip6tnl0: left allmulticast mode [ 570.052724][T24809] ip6gre0: left allmulticast mode [ 570.066257][T24809] syz_tun: left allmulticast mode [ 570.080743][T24809] ip6gretap0: left allmulticast mode [ 570.088563][T24809] vcan0: left allmulticast mode [ 570.100562][T24809] dummy0: left allmulticast mode [ 570.107578][T24809] nlmon0: left allmulticast mode [ 570.112935][T24809] caif0: left allmulticast mode [ 570.127950][T24809] veth0: left allmulticast mode [ 570.133333][T24809] veth1: left allmulticast mode [ 570.141907][T24809] wg1: left allmulticast mode [ 570.160889][T24809] wg2: left allmulticast mode [ 570.171802][T24824] netlink: 'syz.2.5453': attribute type 13 has an invalid length. [ 570.184220][T24809] veth0_to_bridge: left allmulticast mode [ 570.190726][T24809] bridge_slave_0: left allmulticast mode [ 570.197437][T24809] veth1_to_bridge: left allmulticast mode [ 570.206368][T24809] bridge_slave_1: left allmulticast mode [ 570.212395][T24809] veth0_to_bond: left allmulticast mode [ 570.218965][T24809] bond_slave_0: left allmulticast mode [ 570.225373][T24809] veth1_to_bond: left allmulticast mode [ 570.231334][T24809] bond_slave_1: left allmulticast mode [ 570.237411][T24809] veth0_to_team: left allmulticast mode [ 570.243427][T24809] team_slave_0: left allmulticast mode [ 570.249552][T24809] veth1_to_team: left allmulticast mode [ 570.255941][T24809] team_slave_1: left allmulticast mode [ 570.261858][T24809] veth0_to_batadv: left allmulticast mode [ 570.268291][T24809] batadv_slave_0: left allmulticast mode [ 570.274489][T24809] xfrm0: left allmulticast mode [ 570.281805][T24809] veth0_to_hsr: left allmulticast mode [ 570.288614][T24809] veth1_to_hsr: left allmulticast mode [ 570.301742][T24809] hsr0: left promiscuous mode [ 570.310539][T24809] hsr0: left allmulticast mode [ 570.316426][T24809] hsr_slave_0: left allmulticast mode [ 570.322118][T24809] hsr_slave_1: left allmulticast mode [ 570.336792][T24809] veth1_virt_wifi: left allmulticast mode [ 570.344718][T24809] veth0_virt_wifi: left allmulticast mode [ 570.351386][T24809] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 570.359648][T24809] veth1_macvtap: left allmulticast mode [ 570.365751][T24809] veth0_macvtap: left allmulticast mode [ 570.372291][T24809] macvtap0: left allmulticast mode [ 570.378603][T24809] macsec0: left allmulticast mode [ 570.385409][T24809] geneve0: left allmulticast mode [ 570.402422][T24809] geneve1: left allmulticast mode [ 570.408442][T24809] mac80211_hwsim hwsim31 wlan0: left allmulticast mode [ 570.416211][T24809] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 570.424486][T24809] : left allmulticast mode [ 570.429611][T24809] syztnl1: left allmulticast mode [ 570.435368][T24809] geneve2: left allmulticast mode [ 570.440771][T24809] gtp0: left allmulticast mode [ 570.446214][T24809] veth2: left allmulticast mode [ 570.451869][T24809] veth3: left allmulticast mode [ 570.457143][T24809] ip6gre1: left allmulticast mode [ 570.462639][T24809] ip6tnl1: left allmulticast mode [ 570.468340][T24809] bridge1: left allmulticast mode [ 570.474384][T24809] vxlan0: left allmulticast mode [ 570.479711][T24809] erspan1: left allmulticast mode [ 570.485371][T24809] bridge2: left allmulticast mode [ 570.490676][T24809] bond1: left allmulticast mode [ 570.496488][T24809] vlan2: left allmulticast mode [ 570.501479][T24809] bond2: left allmulticast mode [ 570.506664][T24809] bond3: left allmulticast mode [ 570.512099][T24809] bridge3: left allmulticast mode [ 570.517874][T24809] sit1: left allmulticast mode [ 570.523381][T24809] bridge4: left allmulticast mode [ 570.529666][T24809] xfrm1: left promiscuous mode [ 570.535171][T24809] xfrm1: left allmulticast mode [ 570.541119][T24809] gretap0: left promiscuous mode [ 570.546341][T24809] gretap0: left allmulticast mode [ 570.568841][T24809] bond4: left allmulticast mode [ 570.580055][T24809] macvlan3: left promiscuous mode [ 570.585507][T24809] macvlan3: left allmulticast mode [ 570.750689][T24864] netlink: 'syz.4.5458': attribute type 2 has an invalid length. [ 570.774203][T24864] __nla_validate_parse: 9 callbacks suppressed [ 570.774223][T24864] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5458'. [ 570.794257][T24866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5457'. [ 571.010848][T24884] tipc: Enabled bearer , priority 24 [ 571.374425][T24903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5468'. [ 571.391882][T24906] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5470'. [ 571.467825][T24900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5468'. [ 571.499530][T24900] netlink: 'syz.0.5468': attribute type 1 has an invalid length. [ 571.571474][T24915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5473'. [ 571.583964][T24915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5473'. [ 571.891108][T24927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5477'. [ 572.298924][T24940] IPv6: sit2: Disabled Multicast RS [ 572.324881][T24940] sit2: entered allmulticast mode [ 572.504239][T24950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5481'. [ 572.521308][T24941] netlink: 'syz.0.5481': attribute type 14 has an invalid length. [ 572.832660][T24959] lo: entered allmulticast mode [ 573.522978][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5506'. [ 573.624702][T25026] netlink: 'syz.4.5508': attribute type 1 has an invalid length. [ 573.634048][T25026] nbd: illegal input index 1048576 [ 573.639404][T25027] netlink: 'syz.4.5508': attribute type 1 has an invalid length. [ 573.648691][T25027] nbd: illegal input index 1048576 [ 573.813356][T25035] netlink: 'syz.3.5511': attribute type 1 has an invalid length. [ 573.944388][T25040] netlink: 'syz.4.5514': attribute type 2 has an invalid length. [ 574.096131][T25052] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 574.330950][T25063] netlink: 'syz.1.5520': attribute type 11 has an invalid length. [ 574.363263][T25063] netlink: 'syz.1.5520': attribute type 11 has an invalid length. [ 574.401130][T25066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.465062][T25071] netlink: 'syz.2.5523': attribute type 5 has an invalid length. [ 574.528497][T25074] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 574.676167][T25082] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 575.686509][T25147] validate_nla: 1 callbacks suppressed [ 575.686530][T25147] netlink: 'syz.1.5549': attribute type 10 has an invalid length. [ 575.738616][T25151] sctp: [Deprecated]: syz.0.5551 (pid 25151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.738616][T25151] Use struct sctp_sack_info instead [ 575.948159][T25164] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 575.962538][T25166] openvswitch: netlink: Actions may not be safe on all matching packets [ 576.246621][T25181] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 576.721502][T25206] __nla_validate_parse: 13 callbacks suppressed [ 576.721525][T25206] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5570'. [ 576.779672][T25204] netlink: 'syz.4.5570': attribute type 1 has an invalid length. [ 576.998178][T25219] vlan1: entered promiscuous mode [ 577.050663][T25219] erspan0: entered promiscuous mode [ 577.608158][T25251] netlink: 'syz.3.5580': attribute type 1 has an invalid length. [ 577.648248][T25251] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.5580'. [ 577.700760][T25253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5581'. [ 577.907821][T25269] netlink: 'syz.1.5585': attribute type 6 has an invalid length. [ 577.983742][ T5850] Bluetooth: hci0: command tx timeout [ 578.308840][T25280] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5587'. [ 578.468940][T24849] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 579.342276][T25315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5597'. [ 579.429511][T25322] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 580.478931][T25378] netlink: 'syz.2.5614': attribute type 23 has an invalid length. [ 580.514714][T25378] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.5614'. [ 580.556057][T25378] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 580.619820][T25383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'. [ 580.776612][T25391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.783253][T25390] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5617'. [ 580.838144][T25391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.122395][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5624'. [ 581.343132][T25430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5630'. [ 581.880206][T25446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5636'. [ 581.890213][T25454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5636'. [ 581.951693][T25446] bridge8: entered promiscuous mode [ 581.968834][T25446] bridge8: entered allmulticast mode [ 582.202453][T25469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5642'. [ 582.236716][T25469] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 582.680976][T25503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5653'. [ 582.705067][T25506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.919388][T25515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'. [ 583.106856][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5662'. [ 583.125464][T25525] (unnamed net_device) (uninitialized): option mode: invalid value (29) [ 583.307592][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5667'. [ 583.585090][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.646728][T25553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5668'. [ 583.879096][T25573] netlink: 'syz.0.5677': attribute type 11 has an invalid length. [ 583.926961][T25573] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5677'. [ 583.992552][T25578] netlink: 'syz.2.5679': attribute type 1 has an invalid length. [ 584.019947][T25578] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5679'. [ 584.118651][T25585] netlink: 'syz.0.5681': attribute type 29 has an invalid length. [ 584.148446][T25585] netlink: 'syz.0.5681': attribute type 29 has an invalid length. [ 584.158156][T25585] unsupported nla_type 58 [ 584.407514][T25603] tipc: Enabling of bearer rejected, failed to enable media [ 584.661259][T25613] macvtap1: entered promiscuous mode [ 584.709693][T25613] vlan0: entered promiscuous mode [ 584.755040][T25613] macvtap1: entered allmulticast mode [ 584.768133][T25613] vlan0: entered allmulticast mode [ 584.813738][T25613] veth0_vlan: entered allmulticast mode [ 585.524209][T25653] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 585.567798][T25659] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 585.589494][T25659] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 585.650565][T25661] sctp: [Deprecated]: syz.1.5703 (pid 25661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.650565][T25661] Use struct sctp_sack_info instead [ 585.655695][T25664] netlink: 'syz.3.5704': attribute type 3 has an invalid length. [ 585.853421][T25667] team0: Port device veth1_macvtap removed [ 585.967943][T25667] bond0: (slave gretap3): Releasing active interface [ 586.329619][T25697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.089718][T25746] __nla_validate_parse: 16 callbacks suppressed [ 587.089741][T25746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5731'. [ 587.106248][T25746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5731'. [ 587.113208][T25745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5730'. [ 587.115393][T25746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5731'. [ 587.183423][T25745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5730'. [ 587.468182][T25763] netlink: 'syz.1.5736': attribute type 1 has an invalid length. [ 587.478067][T25763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5736'. [ 587.486750][T25764] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 587.491786][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5736'. [ 587.503281][T25764] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 587.643418][T25770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.655924][T25770] netlink: 'syz.1.5737': attribute type 1 has an invalid length. [ 590.423056][T25770] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 590.449168][T25775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5739'. [ 590.851292][T25797] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5750'. [ 592.300680][T25876] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5772'. [ 592.347003][T25876] netem: invalid attributes len -24 [ 592.359026][T25876] netem: change failed [ 592.647413][T25894] netlink: 356 bytes leftover after parsing attributes in process `syz.4.5775'. [ 592.766220][T25899] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 592.812869][T25902] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 593.153201][T25919] bond4: entered promiscuous mode [ 593.159313][T25919] bond4: entered allmulticast mode [ 593.165238][T25919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.480011][T25931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5788'. [ 593.521055][T25926] netlink: 'syz.2.5786': attribute type 1 has an invalid length. [ 593.631304][T25926] 8021q: adding VLAN 0 to HW filter on device bond7 [ 593.657738][T25940] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5789'. [ 593.695664][T25941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5790'. [ 593.730740][T25941] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5790'. [ 593.915412][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.927354][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.936282][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.945334][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.953243][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.018593][T25948] netlink: 'syz.2.5791': attribute type 3 has an invalid length. [ 594.028697][T25950] syzkaller1: entered promiscuous mode [ 594.048275][T25950] syzkaller1: entered allmulticast mode [ 594.080004][T25948] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5791'. [ 594.116883][T25950] bond0: (slave team0): Releasing backup interface [ 594.127722][T25950] team0: left allmulticast mode [ 594.158778][T25950] bridge_slave_0: left promiscuous mode [ 594.180253][T25950] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.218366][T25950] bond0: (slave bridge_slave_1): Releasing backup interface [ 594.239319][T25950] bridge_slave_1: left allmulticast mode [ 594.304664][T25950] bond0: (slave bond_slave_0): Releasing backup interface [ 594.346145][T25950] bond0: (slave bond_slave_1): Releasing backup interface [ 594.368309][T25950] team0: Port device team_slave_0 removed [ 594.387614][T25950] team0: Port device team_slave_1 removed [ 594.394270][T25950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.402706][T25950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.420553][T25950] bond0: (slave wlan1): Releasing backup interface [ 594.430584][T25950] mac80211_hwsim hwsim51 wlan1: left allmulticast mode [ 594.482119][T25958] net veth1_virt_wifi .: renamed from virt_wifi0 [ 594.782640][T25965] sctp: [Deprecated]: syz.0.5798 (pid 25965) Use of int in max_burst socket option deprecated. [ 594.782640][T25965] Use struct sctp_assoc_value instead [ 594.918967][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5799'. [ 594.961758][T25972] netlink: 'syz.0.5800': attribute type 1 has an invalid length. [ 594.989751][T25944] lo speed is unknown, defaulting to 1000 [ 595.053643][T25979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5800'. [ 595.175816][T25980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5802'. [ 595.279564][T25990] netlink: 'syz.4.5805': attribute type 11 has an invalid length. [ 595.410212][T25944] chnl_net:caif_netlink_parms(): no params data found [ 595.596968][T25997] hsr_slave_0 (unregistering): left promiscuous mode [ 595.861196][T26012] tipc: Enabling of bearer rejected, failed to enable media [ 595.891260][T25944] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.899665][T25944] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.927267][T25944] bridge_slave_0: entered allmulticast mode [ 595.938011][T25944] bridge_slave_0: entered promiscuous mode [ 595.956939][T25944] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.973740][T25944] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.982892][T25944] bridge_slave_1: entered allmulticast mode [ 595.992761][ T5850] Bluetooth: hci2: command tx timeout [ 596.011139][T25944] bridge_slave_1: entered promiscuous mode [ 596.152188][T25944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.199767][T26027] tipc: Enabling of bearer rejected, already enabled [ 596.209871][T26032] tipc: Enabling of bearer rejected, already enabled [ 596.259649][T25944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.286881][T26026] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 596.303665][T26026] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 596.385234][T26040] unknown channel width for channel at 909000KHz? [ 596.391720][T26040] unknown channel width for channel at 909000KHz? [ 596.474889][T25944] team0: Port device team_slave_0 added [ 596.498159][T25944] team0: Port device team_slave_1 added [ 596.621142][T25944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.630999][T25944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.658378][T25944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.709841][T25944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.730456][T25944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.775145][T25944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.956795][T25944] hsr_slave_0: entered promiscuous mode [ 596.971471][T25944] hsr_slave_1: entered promiscuous mode [ 596.978348][T25944] debugfs: 'hsr0' already exists in 'hsr' [ 596.992129][T25944] Cannot create hsr debugfs directory [ 597.001265][T26071] netlink: 'syz.4.5831': attribute type 11 has an invalid length. [ 597.221979][T26076] tipc: Enabling of bearer rejected, already enabled [ 597.570367][T26097] tipc: Enabling of bearer rejected, already enabled [ 597.590462][T26097] syzkaller0: mtu less than device minimum [ 597.701616][T26102] __nla_validate_parse: 14 callbacks suppressed [ 597.701639][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5841'. [ 597.761490][T26102] netlink: 'syz.4.5841': attribute type 30 has an invalid length. [ 597.851619][T24850] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.860929][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5841'. [ 597.870917][T24850] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.884261][T26102] netlink: 'syz.4.5841': attribute type 30 has an invalid length. [ 597.893497][T24850] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.937619][T26106] team0: Device gtp0 is up. Set it down before adding it as a team port [ 598.045884][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5843'. [ 598.064129][ T5158] Bluetooth: hci2: command tx timeout [ 598.161330][T24850] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.177474][T25944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 598.191141][T25944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.216254][T25944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 598.251739][T25944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 598.401588][T25944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.439604][T25944] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.470666][T20570] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.477950][T20570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.488414][T26123] netlink: 'syz.1.5845': attribute type 21 has an invalid length. [ 598.496607][T26123] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5845'. [ 598.523491][T16945] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.530750][T16945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.599206][T26123] netlink: 'syz.1.5845': attribute type 4 has an invalid length. [ 598.619687][T26123] netlink: 'syz.1.5845': attribute type 5 has an invalid length. [ 598.652931][T26123] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5845'. [ 599.018969][T26152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5852'. [ 599.070816][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5852'. [ 599.093782][T26156] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5851'. [ 599.140925][T26152] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 599.153603][T26152] gretap4: entered promiscuous mode [ 599.158974][T26152] gretap4: entered allmulticast mode [ 599.322237][T26164] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5857'. [ 599.347863][T26165] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5857'. [ 599.364154][T26164] netlink: 'syz.1.5857': attribute type 3 has an invalid length. [ 599.410827][T26164] netlink: 'syz.1.5857': attribute type 2 has an invalid length. [ 599.454234][T26165] netlink: 'syz.1.5857': attribute type 3 has an invalid length. [ 599.475225][T26165] netlink: 'syz.1.5857': attribute type 2 has an invalid length. [ 599.501858][T25944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.524572][T26175] netlink: 'syz.4.5858': attribute type 4 has an invalid length. [ 599.562437][T26175] netlink: 'syz.4.5858': attribute type 4 has an invalid length. [ 599.648621][T26175] openvswitch: netlink: Flow key attr not present in new flow. [ 599.656816][T25944] veth0_vlan: entered promiscuous mode [ 599.706724][T25944] veth1_vlan: entered promiscuous mode [ 599.851617][T25944] veth0_macvtap: entered promiscuous mode [ 599.876534][T25944] veth1_macvtap: entered promiscuous mode [ 599.997981][T25944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.023062][T25944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.087814][T24850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.106439][T16945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.143302][T16945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.160180][ T5158] Bluetooth: hci2: command 0x040f tx timeout [ 600.194842][T16945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.232152][T26204] veth1_to_bond: entered allmulticast mode [ 600.337993][T26204] veth1_to_bond (unregistering): left allmulticast mode [ 600.584832][T24850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.592742][T24850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.720489][T16945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.752683][T16945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.778197][T26227] netlink: 'syz.2.5876': attribute type 1 has an invalid length. [ 600.799953][T26222] bond8: entered promiscuous mode [ 600.807700][T26222] bond8: entered allmulticast mode [ 600.813445][T26222] 8021q: adding VLAN 0 to HW filter on device bond8 [ 600.981575][T26222] bond8 (unregistering): Released all slaves [ 601.132058][T26233] tipc: Enabled bearer , priority 0 [ 601.182132][T26236] syzkaller0: entered promiscuous mode [ 601.212270][T26236] syzkaller0: entered allmulticast mode [ 601.228431][T26230] tipc: Resetting bearer [ 601.264814][T26223] tipc: Resetting bearer [ 601.358409][T26223] tipc: Disabling bearer [ 601.874647][T26288] netlink: 'syz.2.5891': attribute type 10 has an invalid length. [ 601.894134][T26288] dummy0: entered promiscuous mode [ 601.911957][T26288] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 602.224188][ T5850] Bluetooth: hci2: command 0x040f tx timeout [ 602.700760][T26337] vxcan1: tx address claim with dlc 0 [ 603.611916][T26367] x_tables: ip_tables: udp match: only valid for protocol 17 [ 603.710173][T26369] __nla_validate_parse: 16 callbacks suppressed [ 603.710198][T26369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'. [ 603.751192][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5912'. [ 603.871324][T26377] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 603.890725][T26377] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 604.082862][T26391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5920'. [ 604.304215][ T5850] Bluetooth: hci2: command 0x040f tx timeout [ 604.427559][T26414] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5924'. [ 604.691618][T26421] validate_nla: 5 callbacks suppressed [ 604.691640][T26421] netlink: 'syz.0.5928': attribute type 1 has an invalid length. [ 605.087307][T26437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5932'. [ 605.118744][T26437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5932'. [ 605.465455][T26452] netlink: 'syz.4.5937': attribute type 1 has an invalid length. [ 605.477925][T26454] netlink: 'syz.4.5937': attribute type 1 has an invalid length. [ 605.881657][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5945'. [ 605.957776][T26487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5947'. [ 606.424864][T26508] ip6gre1: entered allmulticast mode [ 606.561276][T26526] netlink: 'syz.1.5956': attribute type 4 has an invalid length. [ 606.582518][T26526] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5956'. [ 606.731417][T26531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5957'. [ 606.909691][T26539] openvswitch: netlink: Multiple metadata blocks provided [ 607.538804][T26565] tipc: Enabled bearer , priority 0 [ 607.570710][T26565] syzkaller0: entered promiscuous mode [ 607.598160][T26565] syzkaller0: entered allmulticast mode [ 607.714412][T26481] lo speed is unknown, defaulting to 1000 [ 607.781571][T26565] tipc: Resetting bearer [ 607.827230][T26563] tipc: Resetting bearer [ 607.868649][T26563] tipc: Disabling bearer [ 608.227934][ T3571] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.266177][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 608.277068][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 608.287855][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 608.306665][ T3571] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.322532][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 608.332769][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 608.437374][ T3571] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.487379][ T3571] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.574917][ T3571] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.586396][ T3571] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.691266][ T3571] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.731938][ T3571] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.244933][T26624] __nla_validate_parse: 4 callbacks suppressed [ 609.244954][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5985'. [ 609.909460][ T3571] dvmrp0 (unregistering): left allmulticast mode [ 610.051403][T26646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5991'. [ 610.384196][ T5158] Bluetooth: hci0: command tx timeout [ 610.600464][ T3571] bond1 (unregistering): Released all slaves [ 610.618918][ T3571] bond2 (unregistering): Released all slaves [ 610.752721][ T3571] bond3 (unregistering): Released all slaves [ 610.885490][ T3571] bond4 (unregistering): Released all slaves [ 611.019796][ T3571] bond5 (unregistering): Released all slaves [ 611.036526][ T3571] bond6 (unregistering): Released all slaves [ 611.199342][ T3571] bond0 (unregistering): Released all slaves [ 611.340368][ T3571] bond7 (unregistering): Released all slaves [ 611.383794][T26641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 611.545328][ T3571] tipc: Disabling bearer [ 611.562168][ T3571] tipc: Disabling bearer [ 611.594407][ T3571] tipc: Left network mode [ 611.603447][ T3571] IPVS: stopping master sync thread 20929 ... [ 611.769067][T26658] sctp: [Deprecated]: syz.0.5993 (pid 26658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.769067][T26658] Use struct sctp_sack_info instead [ 611.882316][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5996'. [ 611.947650][T26663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5996'. [ 611.963647][T26663] netlink: 'syz.3.5996': attribute type 1 has an invalid length. [ 611.991479][T26663] netlink: 'syz.3.5996': attribute type 1 has an invalid length. [ 612.000936][T26663] netlink: 'syz.3.5996': attribute type 2 has an invalid length. [ 612.018697][T26663] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5996'. [ 612.139152][T26585] lo speed is unknown, defaulting to 1000 [ 612.200650][T26667] netlink: 'syz.4.5998': attribute type 10 has an invalid length. [ 612.316638][T26667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.357279][T26667] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.389336][T26667] bond0: (slave team0): Enslaving as an active interface with an up link [ 612.465557][ T5158] Bluetooth: hci0: command tx timeout [ 612.618960][T26683] netlink: 'syz.3.6000': attribute type 12 has an invalid length. [ 612.650497][T26683] netlink: 'syz.3.6000': attribute type 29 has an invalid length. [ 612.665893][T26683] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6000'. [ 612.682724][T26683] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6000'. [ 612.870418][T26686] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6001'. [ 612.880551][T26686] 0{X: renamed from gretap0 (while UP) [ 612.892519][T26686] 0{X: entered allmulticast mode [ 612.910914][T26686] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 612.946146][T26693] netlink: 'syz.3.6004': attribute type 28 has an invalid length. [ 612.963764][T26693] netlink: 'syz.3.6004': attribute type 3 has an invalid length. [ 612.971563][T26693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6004'. [ 613.006330][T26656] lo speed is unknown, defaulting to 1000 [ 613.130515][T26700] sock: sock_set_timeout: `syz.4.6005' (pid 26700) tries to set negative timeout [ 613.278791][T26705] netlink: 'syz.3.6006': attribute type 1 has an invalid length. [ 613.290321][T26585] chnl_net:caif_netlink_parms(): no params data found [ 613.303614][T26705] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6006'. [ 613.321485][T26705] netlink: 'syz.3.6006': attribute type 1 has an invalid length. [ 614.007711][T26723] Bluetooth: MGMT ver 1.23 [ 614.086333][T26585] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.097634][T26585] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.109555][T26585] bridge_slave_0: entered allmulticast mode [ 614.146296][T26585] bridge_slave_0: entered promiscuous mode [ 614.188183][T26585] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.203878][T26585] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.221591][T26585] bridge_slave_1: entered allmulticast mode [ 614.241755][T26585] bridge_slave_1: entered promiscuous mode [ 614.474945][T26585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.526952][T26585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.544567][ T5158] Bluetooth: hci0: command tx timeout [ 614.574658][T26740] __nla_validate_parse: 1 callbacks suppressed [ 614.574681][T26740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6017'. [ 614.627628][T26740] openvswitch: netlink: Actions may not be safe on all matching packets [ 614.761764][T26746] bridge0: port 1(syz_tun) entered blocking state [ 614.775850][T26746] bridge0: port 1(syz_tun) entered disabled state [ 614.795183][T26746] syz_tun: entered promiscuous mode [ 614.887453][T26585] team0: Port device team_slave_0 added [ 614.990584][T26585] team0: Port device team_slave_1 added [ 614.997330][T26718] lo speed is unknown, defaulting to 1000 [ 615.109041][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6021'. [ 615.187789][T26585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.203806][T26585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.231090][T26585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.253309][T26753] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 615.264083][T26753] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 615.301883][T26585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.320376][T26585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.355655][T26585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.580961][T26769] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 616.096705][T26585] hsr_slave_0: entered promiscuous mode [ 616.115202][T26585] hsr_slave_1: entered promiscuous mode [ 616.159663][T26585] debugfs: 'hsr0' already exists in 'hsr' [ 616.168282][T26585] Cannot create hsr debugfs directory [ 616.296267][ T3571] hsr_slave_1: left promiscuous mode [ 616.331060][T26791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6032'. [ 616.368506][ T3571] vlan0: left allmulticast mode [ 616.386599][ T3571] veth0_vlan: left allmulticast mode [ 616.399885][ T3571] vlan0: left promiscuous mode [ 616.417547][ T3571] veth0_macvtap: left promiscuous mode [ 616.423375][ T3571] veth1_vlan: left promiscuous mode [ 616.432197][ T3571] veth0_vlan: left promiscuous mode [ 616.624256][ T5158] Bluetooth: hci0: command tx timeout [ 616.675099][ C1] ------------[ cut here ]------------ [ 616.687240][ C1] kernel BUG at arch/x86/mm/physaddr.c:28! [ 616.693381][ C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 616.699665][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 616.711227][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.721320][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 616.726580][ C1] Code: 40 ae 00 e9 45 ff ff ff e8 52 1e 4b 00 48 c7 c7 10 ef fa 8d 48 89 de 4c 89 f2 e8 e0 d9 87 03 e9 4d ff ff ff e8 36 1e 4b 00 90 <0f> 0b e8 2e 1e 4b 00 90 0f 0b e8 26 1e 4b 00 90 0f 0b 0f 1f 00 90 [ 616.746600][ C1] RSP: 0018:ffffc900001d7878 EFLAGS: 00010246 [ 616.752687][ C1] RAX: ffffffff8174927a RBX: 00007780ffff0000 RCX: ffff88801d6bda00 [ 616.760694][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 616.768691][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: ffffffff81a7f5d4 [ 616.776874][ C1] R10: dffffc0000000000 R11: ffffffff89f873b0 R12: ffffffff89f873b0 [ 616.784864][ C1] R13: ffffffff81a7f5d4 R14: 000000017fff0000 R15: dffffc0000000000 [ 616.792958][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 616.801943][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.808543][ C1] CR2: 00007f759c401000 CR3: 0000000026a72000 CR4: 00000000003526f0 [ 616.816533][ C1] Call Trace: [ 616.819851][ C1] [ 616.822789][ C1] ? in_dev_free_rcu+0x49/0x60 [ 616.827585][ C1] kfree+0x77/0x440 [ 616.831422][ C1] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 616.836730][ C1] ? rcu_core+0xc34/0x1710 [ 616.841188][ C1] in_dev_free_rcu+0x49/0x60 [ 616.845795][ C1] rcu_core+0xca8/0x1710 [ 616.850077][ C1] ? __pfx_rcu_core+0x10/0x10 [ 616.854784][ C1] ? rcu_qs+0xc4/0x170 [ 616.858883][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 616.863488][ C1] ? sched_clock_cpu+0x74/0x430 [ 616.868495][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 616.873285][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 616.878535][ C1] handle_softirqs+0x283/0x870 [ 616.883340][ C1] ? run_ksoftirqd+0x9b/0x100 [ 616.888045][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 616.893374][ C1] ? preempt_schedule_common+0x83/0xd0 [ 616.898892][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 616.903944][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 616.909042][ C1] run_ksoftirqd+0x9b/0x100 [ 616.913580][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 616.918720][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 616.924460][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 616.929659][ C1] smpboot_thread_fn+0x53f/0xa60 [ 616.934619][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 616.939932][ C1] kthread+0x70e/0x8a0 [ 616.944059][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 616.949592][ C1] ? __pfx_kthread+0x10/0x10 [ 616.954198][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.959441][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.964659][ C1] ? __pfx_kthread+0x10/0x10 [ 616.969471][ C1] ret_from_fork+0x3fc/0x770 [ 616.974103][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 616.979270][ C1] ? __switch_to_asm+0x39/0x70 [ 616.984053][ C1] ? __switch_to_asm+0x33/0x70 [ 616.988852][ C1] ? __pfx_kthread+0x10/0x10 [ 616.993463][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.998254][ C1] [ 617.001290][ C1] Modules linked in: [ 617.005279][ C1] ---[ end trace 0000000000000000 ]--- [ 617.010846][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 617.016084][ C1] Code: 40 ae 00 e9 45 ff ff ff e8 52 1e 4b 00 48 c7 c7 10 ef fa 8d 48 89 de 4c 89 f2 e8 e0 d9 87 03 e9 4d ff ff ff e8 36 1e 4b 00 90 <0f> 0b e8 2e 1e 4b 00 90 0f 0b e8 26 1e 4b 00 90 0f 0b 0f 1f 00 90 [ 617.035737][ C1] RSP: 0018:ffffc900001d7878 EFLAGS: 00010246 [ 617.041818][ C1] RAX: ffffffff8174927a RBX: 00007780ffff0000 RCX: ffff88801d6bda00 [ 617.049916][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 617.057950][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: ffffffff81a7f5d4 [ 617.066431][ C1] R10: dffffc0000000000 R11: ffffffff89f873b0 R12: ffffffff89f873b0 [ 617.074447][ C1] R13: ffffffff81a7f5d4 R14: 000000017fff0000 R15: dffffc0000000000 [ 617.082519][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 617.091484][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.098479][ C1] CR2: 00007f759c401000 CR3: 0000000026a72000 CR4: 00000000003526f0 [ 617.106519][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 617.114143][ C1] Kernel Offset: disabled [ 617.118493][ C1] Rebooting in 86400 seconds..