last executing test programs: 10.029108883s ago: executing program 0 (id=2082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000"], 0x1c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6(0xa, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x1012}, {r2}], 0x2, 0x85) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}, "911e20f8a4d40108"}}}}, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x5d) 7.608095216s ago: executing program 0 (id=2100): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5.641527617s ago: executing program 4 (id=2117): socketpair(0x8, 0x800, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, [@sadb_key={0x6, 0x9, 0x140, 0x0, "858ffc3b23c3b8dff0398a8b9368b0ba77014743b15c570ed77167ba8db383bc1385bf2582f1f1f7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x1d}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x5, 0x6, 0xb}, @sadb_lifetime={0x4, 0x4, 0x9, 0x3, 0xfffffffffffffffb, 0x7fff}]}, 0xa0}, 0x1, 0x7}, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000002c0)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)={0x24, 0x31, 0x1, 0x0, 0xfffffffe, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0xd8}]}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) 5.411461976s ago: executing program 4 (id=2120): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x4}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x4) close(0x3) 4.856317358s ago: executing program 1 (id=2127): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'vxcan0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xd, 0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r9) r11 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r11, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x18, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207104e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x50}, 0x0) 4.768072965s ago: executing program 0 (id=2128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_extract_tcp_res(0x0, 0x28eb, 0x1) 4.568019995s ago: executing program 0 (id=2130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000003c0)=0x9c) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x410, 0x108, 0x218, 0x218, 0x328, 0x108, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x4, {0x7}}}}, {{@arp={@remote, @broadcast, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff, 0x0, 0x60645ae6b93fcf65]}}, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xefd, 0x0, 0x3, 0x7ff, 0xffff, 0xd6, 'team0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x238}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @private=0xa010100, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8a2c49155956", @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 4.467059056s ago: executing program 4 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0xff, 0x4}}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, 0x0, 0x3c}, 0x80, 0x0}, 0x24000000) 4.41668575s ago: executing program 0 (id=2132): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3, @any, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x50044) socketpair(0x28, 0x5, 0x28, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000400)=0x4000) shutdown(r8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x420, 0x240, 0x240, 0x420, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x16, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x100000, 0x1ff, 0x100000, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x2, 0x4}, 0x0, 0x260, 0x2c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x7fff, 0x5, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x4e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 4.415305988s ago: executing program 1 (id=2134): bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe22, 0x500, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 4.320194902s ago: executing program 3 (id=2135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000efffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r2, 0x0, 0x0) 4.28951251s ago: executing program 4 (id=2136): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.1863652s ago: executing program 3 (id=2137): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 4.134332704s ago: executing program 2 (id=2138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4.02012175s ago: executing program 3 (id=2139): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f00000002c0)="922b22c06d", 0x5) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newlink={0x2a0, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2010, 0x20000}}}}}}, @IFLA_VF_PORTS={0x250, 0x18, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a8afd178bfb1a238ff5a8a90ce4d14ef"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a59a14d0f953f01fb5281fdace513332"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x6aad8000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a0fe2875e4ee5af8722c193f41db61f"}, @IFLA_PORT_PROFILE={0x8, 0x2, '^-(\x00'}, @IFLA_PORT_PROFILE={0x16, 0x2, 'blkio.bfq.sectors\x00'}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "baf2edfe1e75dc2ca4c8f5ad568ac34b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "398c986dfa4415614d399c8233107561"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ef46b833d21bc2a8c0f2074fc9f5878d"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_PROFILE={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x11, 0x2, '^\xeb:^/]$-d[\'-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x53}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "89cff2656fce4adcff194104d77f4f7a"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a3cdae69f463e0aaaa4a0dbc28aa45bb"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "827961e8cb332e7e9462bc2f096f2afa"}, @IFLA_PORT_PROFILE={0xd, 0x2, 'mptcp_pm\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0xc0000000}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "da1256e1d370da44d82eeeb3df2b6046"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1f11fc9af64f4a010d6498043839b9b1"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "91743bfdc04c1936fe31c4874868a137"}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ed3d}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8084}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.832244715s ago: executing program 4 (id=2140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x68442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {0x0, 0x8902}, {0xa, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3.733248398s ago: executing program 2 (id=2141): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32, @ANYBLOB="0000000000000101851000000700800018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600000000000000000000001851000009000000000000000000000085100000faffffff5318ffff10000000bf91000000000000b702000001"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", 0x0, 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.717676621s ago: executing program 3 (id=2142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c00"], 0x1c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6(0xa, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x1012}, {r2}], 0x2, 0x85) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}, "911e20f8a4d40108"}}}}, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x5d) 3.647558544s ago: executing program 2 (id=2143): syz_emit_ethernet(0x3e, &(0x7f0000000780)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x8, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xb, 0x5}}}}}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0xd, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f0000000300)=""/213, 0x2b, 0xd5, 0x0, 0xb, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x5, 0x8, 0x3, 0x2690, r0, 0x5, '\x00', 0x0, r1, 0x3, 0x3, 0x4, 0x6, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x7f, 0xd9, 0x8200, r0, 0x90, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @value=r2, @void, @void, @value}, 0x50) 3.645688839s ago: executing program 4 (id=2144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x8040480) unshare(0x2a020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) unshare(0x42000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) close(r0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001ec0)={0xf1d, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 3.557246774s ago: executing program 0 (id=2145): syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x6, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x10}}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_pi_setprio\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) write$bt_hci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x50, 0x0, &(0x7f0000000100)) unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x6c}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) 3.291825551s ago: executing program 1 (id=2146): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3, @any, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x50044) socketpair(0x28, 0x5, 0x28, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000400)=0x4000) shutdown(r8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x420, 0x240, 0x240, 0x420, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x16, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x100000, 0x1ff, 0x100000, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x2, 0x4}, 0x0, 0x260, 0x2c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x7fff, 0x5, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x4e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 3.291525403s ago: executing program 2 (id=2147): socket$netlink(0x10, 0x3, 0xf) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000070a0101"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 3.243209817s ago: executing program 2 (id=2148): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'wg0\x00', 0x400}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x8) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.974944182s ago: executing program 1 (id=2149): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x840000000002, 0x3, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x0) 1.380060486s ago: executing program 1 (id=2150): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x22, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a8cf", 0x2, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000680)="537eb9f8d6b418d097c30e82bf7225819ec127c93ee0b62cef59c421632aa9448bf5bd16ca751c056ff49e38244880af0192a18af714c6025db7a9a549edda11a0e903c417290de77f413b5c83faab8abf8550b1c01619febda43e6c3eef35cc", 0x60}], 0x1}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@int=0x45, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="df91e9", 0x3, 0x80, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 976.392803ms ago: executing program 2 (id=2151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, 0x0, 0xc001) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x4880}, 0x4095) 572.748701ms ago: executing program 3 (id=2152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f00000002c0)="922b22c06d", 0x5) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newlink={0x2a0, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2010, 0x20000}}}}}}, @IFLA_VF_PORTS={0x250, 0x18, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a8afd178bfb1a238ff5a8a90ce4d14ef"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a59a14d0f953f01fb5281fdace513332"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x6aad8000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a0fe2875e4ee5af8722c193f41db61f"}, @IFLA_PORT_PROFILE={0x8, 0x2, '^-(\x00'}, @IFLA_PORT_PROFILE={0x16, 0x2, 'blkio.bfq.sectors\x00'}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "baf2edfe1e75dc2ca4c8f5ad568ac34b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "398c986dfa4415614d399c8233107561"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ef46b833d21bc2a8c0f2074fc9f5878d"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_PROFILE={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x11, 0x2, '^\xeb:^/]$-d[\'-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x53}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "89cff2656fce4adcff194104d77f4f7a"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a3cdae69f463e0aaaa4a0dbc28aa45bb"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "827961e8cb332e7e9462bc2f096f2afa"}, @IFLA_PORT_PROFILE={0xd, 0x2, 'mptcp_pm\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0xc0000000}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "da1256e1d370da44d82eeeb3df2b6046"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1f11fc9af64f4a010d6498043839b9b1"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "91743bfdc04c1936fe31c4874868a137"}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ed3d}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8084}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 362.670412ms ago: executing program 1 (id=2153): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e) 0s ago: executing program 3 (id=2154): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e00cd0214fffffffffffff80765", 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000140)=[{r0, 0x1000}, {0xffffffffffffffff, 0x4001}, {r0, 0x400}], 0x3, &(0x7f0000000240), &(0x7f00000002c0)={[0x3725]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(ccm(anubis))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) kernel console output (not intermixed with test programs): .098413][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 138.135521][ T5851] Bluetooth: hci4: link tx timeout [ 138.141054][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.230807][ T6974] xt_hashlimit: size too large, truncated to 1048576 [ 138.890992][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 139.054495][ T6994] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 140.090311][ T7024] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 140.180410][ T7030] __nla_validate_parse: 1 callbacks suppressed [ 140.180427][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 140.195105][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 140.201700][ T7033] netlink: 52 bytes leftover after parsing attributes in process `syz.4.297'. [ 140.254517][ T7033] veth3: entered promiscuous mode [ 140.274329][ T7033] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 140.709974][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 140.983367][ T7042] lo speed is unknown, defaulting to 1000 [ 141.614216][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 141.634686][ T7062] xt_hashlimit: size too large, truncated to 1048576 [ 142.022068][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 142.348908][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.315'. [ 142.615774][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 142.636517][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 142.701247][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.315'. [ 142.874678][ T7078] lo speed is unknown, defaulting to 1000 [ 143.864908][ T7107] xt_hashlimit: size too large, truncated to 1048576 [ 144.853486][ T7115] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 144.980945][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 145.363185][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 145.399288][ T7130] bridge0: port 4(batadv1) entered blocking state [ 145.428049][ T7130] bridge0: port 4(batadv1) entered disabled state [ 145.435836][ T7130] batadv1: entered allmulticast mode [ 145.444083][ T7130] batadv1: entered promiscuous mode [ 145.668456][ T7137] netlink: 168 bytes leftover after parsing attributes in process `syz.4.334'. [ 145.758166][ T6042] IPVS: starting estimator thread 0... [ 145.864509][ T53] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 145.874339][ T53] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 145.875375][ T7139] IPVS: using max 27 ests per chain, 64800 per kthread [ 146.055264][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 146.768091][ T7171] lo speed is unknown, defaulting to 1000 [ 147.322789][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'. [ 148.348066][ T7205] openvswitch: netlink: Message has 744 unknown bytes. [ 149.192998][ T7225] netlink: ct family unspecified [ 149.265521][ T7225] openvswitch: netlink: Actions may not be safe on all matching packets [ 149.307197][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.364'. [ 149.564567][ T7235] syzkaller1: entered promiscuous mode [ 149.637566][ T7235] syzkaller1: entered allmulticast mode [ 150.044490][ T7245] netlink: ct family unspecified [ 150.049806][ T7245] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.063276][ T7245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.371'. [ 150.272520][ T7252] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.375279][ T7261] netlink: ct family unspecified [ 150.380328][ T7261] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.465204][ T7261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.377'. [ 150.564432][ T7266] lo speed is unknown, defaulting to 1000 [ 151.561671][ T7288] syz_tun: entered allmulticast mode [ 151.604833][ T7291] dvmrp8: entered allmulticast mode [ 151.665274][ T7288] syz_tun: left allmulticast mode [ 151.670580][ T7288] dvmrp8: left allmulticast mode [ 151.849159][ T7293] netlink: 'syz.4.385': attribute type 29 has an invalid length. [ 151.896448][ T7293] netlink: 500 bytes leftover after parsing attributes in process `syz.4.385'. [ 151.910728][ T7296] netlink: ct family unspecified [ 151.918377][ T7296] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.950857][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 151.984368][ T7294] netlink: 'syz.4.385': attribute type 29 has an invalid length. [ 152.219304][ T7302] netlink: 264 bytes leftover after parsing attributes in process `syz.2.388'. [ 152.380770][ T7304] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.473126][ T7312] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.522213][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 152.582514][ T7304] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.653294][ T7312] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.701273][ T7304] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.753329][ T7312] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.031911][ T7304] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.075161][ T7312] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.321195][ T7327] lo speed is unknown, defaulting to 1000 [ 153.379421][ T7312] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.440334][ T7312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.547439][ T7312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.576432][ T7304] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.614863][ T7312] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.682506][ T7304] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.757519][ T7304] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.811286][ T7304] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.109592][ T7340] syzkaller1: entered promiscuous mode [ 154.150375][ T7340] syzkaller1: entered allmulticast mode [ 154.335454][ T7345] netlink: ct family unspecified [ 154.340490][ T7345] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.401565][ T7345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.399'. [ 154.778970][ T7358] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 154.864093][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 154.873127][ T7360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'. [ 155.036000][ T7358] veth5: entered promiscuous mode [ 155.062034][ T7358] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 155.161801][ T7364] lo speed is unknown, defaulting to 1000 [ 155.208030][ T7367] xt_hashlimit: size too large, truncated to 1048576 [ 155.833269][ T7374] netlink: 'syz.2.407': attribute type 2 has an invalid length. [ 155.891370][ T7377] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 156.036110][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 156.173965][ T7379] veth7: entered promiscuous mode [ 156.190757][ T7379] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 156.230066][ T7383] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.371073][ T7383] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.034885][ T7383] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.220392][ T7383] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.290334][ T7401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.414'. [ 157.668453][ T7383] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.724269][ T7407] veth0_to_bond: entered promiscuous mode [ 157.809527][ T7383] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.940300][ T7383] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.970676][ T7406] veth0_to_bond: left promiscuous mode [ 158.012695][ T7383] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.105827][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 158.284743][ T7415] netlink: 168 bytes leftover after parsing attributes in process `syz.3.419'. [ 158.362603][ T6025] IPVS: starting estimator thread 0... [ 158.428248][ T7423] sctp: [Deprecated]: syz.3.421 (pid 7423) Use of int in max_burst socket option. [ 158.428248][ T7423] Use struct sctp_assoc_value instead [ 158.465475][ T7419] IPVS: using max 31 ests per chain, 74400 per kthread [ 158.547287][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 158.570625][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 158.619504][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 158.665605][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 158.691991][ T7429] syzkaller1: entered promiscuous mode [ 158.711783][ T7429] syzkaller1: entered allmulticast mode [ 159.439626][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 159.616897][ T7436] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.697314][ T7436] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.828172][ T7436] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.912539][ T7436] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.073029][ T7436] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.121309][ T7436] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.224365][ T7436] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.264702][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 160.297422][ T7436] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.513842][ T7469] unknown channel width for channel at 909000KHz? [ 160.710087][ T7475] sctp: [Deprecated]: syz.4.440 (pid 7475) Use of int in max_burst socket option. [ 160.710087][ T7475] Use struct sctp_assoc_value instead [ 160.818041][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 161.644720][ T7504] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 161.827912][ T7504] veth9: entered promiscuous mode [ 161.840352][ T7504] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 162.285700][ T7531] sctp: [Deprecated]: syz.0.458 (pid 7531) Use of int in max_burst socket option. [ 162.285700][ T7531] Use struct sctp_assoc_value instead [ 162.401496][ T7536] __nla_validate_parse: 7 callbacks suppressed [ 162.401515][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.461'. [ 162.453405][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 162.478583][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 162.489603][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 162.498928][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 162.663879][ T7548] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.709954][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 162.745884][ T7548] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.817368][ T7548] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.876077][ T7557] vlan3: entered promiscuous mode [ 162.898524][ T7557] hsr0: entered promiscuous mode [ 162.964431][ T7548] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.153640][ T7548] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.239819][ T7548] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.342627][ T7548] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.478981][ T7548] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.692229][ T7581] lo speed is unknown, defaulting to 1000 [ 164.204610][ T7595] team0 (unregistering): Port device team_slave_0 removed [ 164.236097][ T7595] team0 (unregistering): Port device team_slave_1 removed [ 164.548550][ T7609] sctp: [Deprecated]: syz.2.480 (pid 7609) Use of int in max_burst socket option. [ 164.548550][ T7609] Use struct sctp_assoc_value instead [ 164.621850][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 164.700737][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 164.792662][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 164.871286][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 165.068646][ T7623] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.212977][ T7623] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.317262][ T7623] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.462569][ T7623] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.787276][ T7623] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.909137][ T7623] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.960862][ T7653] lo speed is unknown, defaulting to 1000 [ 166.039242][ T7623] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.112887][ T7623] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.940465][ T7681] syzkaller1: entered promiscuous mode [ 166.969957][ T7681] syzkaller1: entered allmulticast mode [ 168.087781][ T7726] xt_hashlimit: size too large, truncated to 1048576 [ 168.157695][ T7730] __nla_validate_parse: 4 callbacks suppressed [ 168.157716][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 168.277284][ T7728] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.539787][ T7728] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.570800][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 168.711215][ T7728] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.932537][ T7728] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.076918][ T7728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.129113][ T7728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.181158][ T7728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.224510][ T7728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.837589][ T7767] syzkaller1: entered promiscuous mode [ 169.849890][ T7765] netlink: 168 bytes leftover after parsing attributes in process `syz.3.526'. [ 169.865380][ T7767] syzkaller1: entered allmulticast mode [ 169.891897][ T7767] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 170.041714][ T7771] lo speed is unknown, defaulting to 1000 [ 170.178019][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 170.380821][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 170.430747][ T7781] hsr_slave_0: left promiscuous mode [ 170.477446][ T7781] hsr_slave_1: left promiscuous mode [ 170.801409][ T7789] lo speed is unknown, defaulting to 1000 [ 171.630787][ T7810] netlink: 96 bytes leftover after parsing attributes in process `syz.1.539'. [ 171.892611][ T7819] trusted_key: syz.1.542 sent an empty control message without MSG_MORE. [ 172.630121][ T7837] pim6reg1: entered promiscuous mode [ 172.644594][ T7837] pim6reg1: entered allmulticast mode [ 172.661671][ T7835] netlink: 64 bytes leftover after parsing attributes in process `syz.1.548'. [ 172.946605][ T7846] netlink: 168 bytes leftover after parsing attributes in process `syz.3.550'. [ 173.160360][ T7852] netlink: 64 bytes leftover after parsing attributes in process `syz.2.553'. [ 173.283664][ T7862] netlink: zone id is out of range [ 173.306130][ T7862] netlink: zone id is out of range [ 173.322380][ T7862] netlink: zone id is out of range [ 173.342384][ T7862] netlink: zone id is out of range [ 173.359361][ T7862] netlink: zone id is out of range [ 173.377776][ T7862] netlink: zone id is out of range [ 173.383169][ T7862] netlink: zone id is out of range [ 173.392698][ T7862] netlink: zone id is out of range [ 173.403136][ T7862] netlink: zone id is out of range [ 173.416677][ T7862] netlink: zone id is out of range [ 173.542209][ T7870] lo speed is unknown, defaulting to 1000 [ 173.572347][ T7875] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 173.709648][ T7880] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 174.373037][ T7891] netlink: 168 bytes leftover after parsing attributes in process `syz.4.563'. [ 174.752271][ T7897] syzkaller1: entered promiscuous mode [ 174.763466][ T7897] syzkaller1: entered allmulticast mode [ 174.982868][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 175.261213][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 175.338287][ T7917] lo speed is unknown, defaulting to 1000 [ 175.999084][ T7939] netlink: 168 bytes leftover after parsing attributes in process `syz.0.576'. [ 176.419397][ T7950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.579'. [ 177.643466][ T7992] lo speed is unknown, defaulting to 1000 [ 177.854325][ T8005] No such timeout policy "syz0" [ 178.753357][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 178.856134][ T8024] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.067808][ T8024] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.251645][ T8024] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.397459][ T8024] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.706476][ T8039] netlink: 64 bytes leftover after parsing attributes in process `syz.4.603'. [ 179.740323][ T8024] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.796779][ T8024] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.892943][ T8024] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.018011][ T8024] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.928252][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.617'. [ 180.938037][ T8072] lo speed is unknown, defaulting to 1000 [ 181.022175][ T8080] netlink: 64 bytes leftover after parsing attributes in process `syz.1.618'. [ 182.240352][ T8098] netlink: 64 bytes leftover after parsing attributes in process `syz.0.620'. [ 182.449318][ T8111] xt_hashlimit: size too large, truncated to 1048576 [ 182.457668][ T8112] TCP: TCP_TX_DELAY enabled [ 183.163677][ T8125] netlink: 96 bytes leftover after parsing attributes in process `syz.3.627'. [ 183.265211][ T8133] net_ratelimit: 382 callbacks suppressed [ 183.265230][ T8133] netlink: ct family unspecified [ 183.275830][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'. [ 183.366069][ T8133] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.425918][ T8133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'. [ 183.522241][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 183.541136][ T8136] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.788539][ T8142] netlink: 64 bytes leftover after parsing attributes in process `syz.3.632'. [ 183.822394][ T8136] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.958679][ T8136] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.057835][ T8136] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.094186][ T8158] lo speed is unknown, defaulting to 1000 [ 184.201741][ T8136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.359402][ T8136] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.501226][ T8136] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.608956][ T8136] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.961606][ T8174] can: request_module (can-proto-0) failed. [ 185.161802][ T8182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.198852][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 186.272618][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 186.484074][ T8226] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.776960][ T8226] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.860266][ T8226] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.922076][ T8226] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.081803][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 187.100503][ T8248] IPVS: Error connecting to the multicast addr [ 187.111344][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 187.501080][ T8260] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.589529][ T8260] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.623265][ T8262] syzkaller1: entered promiscuous mode [ 187.633988][ T8262] syzkaller1: entered allmulticast mode [ 187.660925][ T8260] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.754681][ T8260] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.922782][ T8260] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.967770][ T8260] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.990556][ T8226] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.021809][ T8260] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.039143][ T8226] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.069477][ T8226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.090141][ T8260] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.121622][ T8226] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.249041][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.674'. [ 188.266865][ T8277] IPVS: Error connecting to the multicast addr [ 188.979468][ T8310] netlink: 168 bytes leftover after parsing attributes in process `syz.1.683'. [ 189.020899][ T6018] IPVS: starting estimator thread 0... [ 189.135255][ T8311] IPVS: using max 26 ests per chain, 62400 per kthread [ 189.165975][ T8313] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 189.182346][ T8313] netlink: 'syz.1.684': attribute type 2 has an invalid length. [ 189.199888][ T8313] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.684'. [ 189.256321][ T8313] bridge0: port 3(vlan2) entered blocking state [ 189.263918][ T8313] bridge0: port 3(vlan2) entered disabled state [ 189.273485][ T8313] vlan2: entered allmulticast mode [ 189.279604][ T8313] bond0: entered allmulticast mode [ 189.284826][ T8313] bond_slave_0: entered allmulticast mode [ 189.290849][ T8313] bond_slave_1: entered allmulticast mode [ 189.299621][ T8313] vlan2: entered promiscuous mode [ 189.305515][ T8313] bond0: entered promiscuous mode [ 189.310643][ T8313] bond_slave_0: entered promiscuous mode [ 189.317289][ T8313] bond_slave_1: entered promiscuous mode [ 189.512175][ T8321] pim6reg1: entered promiscuous mode [ 189.545244][ T8321] pim6reg1: entered allmulticast mode [ 189.802745][ T8330] lo speed is unknown, defaulting to 1000 [ 190.349155][ T8350] sctp: [Deprecated]: syz.1.693 (pid 8350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.349155][ T8350] Use struct sctp_sack_info instead [ 190.379286][ T8347] bridge0: port 5(vlan3) entered blocking state [ 190.401001][ T8347] bridge0: port 5(vlan3) entered disabled state [ 190.410537][ T8347] vlan3: entered allmulticast mode [ 190.415975][ T8347] bridge0: entered allmulticast mode [ 190.443473][ T8347] vlan3: left allmulticast mode [ 190.449173][ T8347] bridge0: left allmulticast mode [ 191.204087][ T8357] team0 (unregistering): Port device team_slave_0 removed [ 191.242852][ T8357] team0 (unregistering): Port device team_slave_1 removed [ 191.825753][ T8374] netlink: 64 bytes leftover after parsing attributes in process `syz.4.699'. [ 192.014360][ T8377] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 192.049505][ T8377] netlink: 'syz.1.701': attribute type 2 has an invalid length. [ 192.058133][ T8377] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.701'. [ 192.175140][ T8383] lo speed is unknown, defaulting to 1000 [ 192.848681][ T8411] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 192.915892][ T8411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.711'. [ 193.004525][ T8415] veth3: entered promiscuous mode [ 193.022527][ T8415] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 193.414593][ T8422] netlink: 92 bytes leftover after parsing attributes in process `syz.3.712'. [ 193.613554][ T8409] lo speed is unknown, defaulting to 1000 [ 193.813384][ T8432] xt_hashlimit: size too large, truncated to 1048576 [ 193.855299][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 193.883028][ T8430] syz_tun: entered allmulticast mode [ 193.891836][ T8426] syz_tun: left allmulticast mode [ 194.156655][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 194.268691][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.275339][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.372642][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 194.496434][ T8452] pim6reg1: entered promiscuous mode [ 194.512034][ T8452] pim6reg1: entered allmulticast mode [ 194.758871][ T8458] lo speed is unknown, defaulting to 1000 [ 195.002891][ T8462] netlink: 64 bytes leftover after parsing attributes in process `syz.0.725'. [ 195.536397][ T8478] syz_tun: entered promiscuous mode [ 195.543599][ T8478] syz_tun: left promiscuous mode [ 195.603264][ T8483] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 195.679408][ T8487] xt_hashlimit: size too large, truncated to 1048576 [ 195.682327][ T8488] netlink: 52 bytes leftover after parsing attributes in process `syz.3.729'. [ 195.824777][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 195.849673][ T8490] veth5: entered promiscuous mode [ 195.862222][ T8490] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 196.436690][ T8511] lo speed is unknown, defaulting to 1000 [ 197.022848][ T8528] __nla_validate_parse: 2 callbacks suppressed [ 197.022870][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.744'. [ 198.300726][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.755'. [ 199.729626][ T8575] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.863548][ T8575] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.898375][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 199.978857][ T8575] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.031200][ T8601] lo speed is unknown, defaulting to 1000 [ 200.042849][ T8575] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.160053][ T8575] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.193382][ T8575] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.222495][ T8575] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.269388][ T8575] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.410132][ T8608] netlink: 168 bytes leftover after parsing attributes in process `syz.1.766'. [ 200.628500][ T8610] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.706405][ T8610] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.770801][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 200.792114][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 200.792343][ T8610] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.869245][ T8610] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.232835][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 201.302391][ T8637] syzkaller1: entered promiscuous mode [ 201.316252][ T8637] syzkaller1: entered allmulticast mode [ 201.846403][ T8643] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 201.878683][ T8643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.914764][ T8643] bond4: (slave veth7): Enslaving as an active interface with a down link [ 201.939683][ T8643] bond4: (slave dummy0): making interface the new active one [ 201.949427][ T8643] dummy0: entered promiscuous mode [ 201.955507][ T8643] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 202.412584][ T8662] netlink: ct family unspecified [ 202.426981][ T8662] openvswitch: netlink: Actions may not be safe on all matching packets [ 202.474209][ T8662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.784'. [ 202.725770][ T8681] netlink: 168 bytes leftover after parsing attributes in process `syz.0.792'. [ 202.872397][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'. [ 202.948687][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 203.782279][ T8610] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.832332][ T8610] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.929317][ T8610] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.012874][ T8610] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.094261][ T8715] netlink: 168 bytes leftover after parsing attributes in process `syz.0.803'. [ 204.247455][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 204.560147][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 204.852114][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 204.959885][ T8747] pim6reg1: entered promiscuous mode [ 204.974357][ T8747] pim6reg1: entered allmulticast mode [ 205.963582][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'. [ 206.021646][ T8784] IPVS: Error connecting to the multicast addr [ 206.272148][ T8800] netlink: 156 bytes leftover after parsing attributes in process `syz.0.829'. [ 206.459391][ T8794] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 206.470459][ T8794] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 206.762632][ T8811] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 206.986671][ T8823] netlink: ct family unspecified [ 206.991860][ T8823] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.007688][ T8817] veth3: entered promiscuous mode [ 207.037639][ T8817] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 207.461613][ T8844] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 207.872804][ T8858] lo speed is unknown, defaulting to 1000 [ 207.944606][ T8862] pim6reg1: entered promiscuous mode [ 207.956989][ T8862] pim6reg1: entered allmulticast mode [ 209.204221][ T8885] lo speed is unknown, defaulting to 1000 [ 209.812798][ T8896] __nla_validate_parse: 3 callbacks suppressed [ 209.812820][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.852'. [ 209.995044][ T8902] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 210.348235][ T8914] pim6reg1: entered promiscuous mode [ 210.353708][ T8914] pim6reg1: entered allmulticast mode [ 210.929857][ T8921] bridge: RTM_NEWNEIGH with invalid ether address [ 211.156971][ T6042] IPVS: starting estimator thread 0... [ 211.255114][ T8937] IPVS: using max 27 ests per chain, 64800 per kthread [ 211.705442][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 211.705478][ T55] Bluetooth: hci0: command 0x0401 tx timeout [ 211.712297][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 211.718098][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 212.601873][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 212.761113][ T8954] lo speed is unknown, defaulting to 1000 [ 214.922419][ T8996] netlink: 64 bytes leftover after parsing attributes in process `syz.2.874'. [ 215.344829][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 215.772086][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 215.855631][ T2911] dummy0: left promiscuous mode [ 216.330998][ T9052] xt_hashlimit: size too large, truncated to 1048576 [ 216.400286][ T9053] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 216.425233][ T9053] netlink: 'syz.3.891': attribute type 2 has an invalid length. [ 216.458156][ T9053] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.891'. [ 216.493453][ T9056] bridge0: port 3(vlan2) entered blocking state [ 216.515500][ T9056] bridge0: port 3(vlan2) entered disabled state [ 216.532714][ T9056] vlan2: entered allmulticast mode [ 216.546220][ T9056] bond0: entered allmulticast mode [ 216.558340][ T9056] bond_slave_0: entered allmulticast mode [ 216.574255][ T9056] bond_slave_1: entered allmulticast mode [ 216.602654][ T9056] vlan2: entered promiscuous mode [ 216.626426][ T9056] bond0: entered promiscuous mode [ 216.631583][ T9056] bond_slave_0: entered promiscuous mode [ 216.638210][ T9056] bond_slave_1: entered promiscuous mode [ 216.812034][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 216.839127][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.893'. [ 217.103183][ T9069] lo speed is unknown, defaulting to 1000 [ 217.196142][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 217.211023][ T9080] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 217.223066][ T9074] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.405403][ T9084] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 217.420115][ T9074] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.481098][ T9080] veth5: entered promiscuous mode [ 217.557541][ T9074] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.817151][ T9074] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.024099][ T9074] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.084235][ T9074] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.122264][ T9074] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.220840][ T9074] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.263397][ T9098] syz_tun: entered allmulticast mode [ 218.359062][ T9096] syz_tun: left allmulticast mode [ 218.497913][ T9100] lo speed is unknown, defaulting to 1000 [ 218.556739][ T9105] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 218.629172][ T9105] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.652828][ T9109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.662604][ T9109] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 218.685766][ T9109] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 218.759507][ T9105] ip6erspan0: entered promiscuous mode [ 218.799716][ T9105] bond5: (slave ip6erspan0): making interface the new active one [ 218.834556][ T9105] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 218.943267][ T9119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'. [ 219.212560][ T9126] lo speed is unknown, defaulting to 1000 [ 219.462083][ T9133] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 220.082707][ T9145] veth7: entered promiscuous mode [ 220.502002][ T9170] netlink: 'syz.3.921': attribute type 4 has an invalid length. [ 220.819599][ T9181] xt_hashlimit: size too large, truncated to 1048576 [ 221.434066][ T9199] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 221.482011][ T9199] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 221.513261][ T9199] veth5: entered promiscuous mode [ 221.749613][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 221.929540][ T9216] wg2: entered promiscuous mode [ 221.957885][ T9216] wg2: entered allmulticast mode [ 222.090271][ T9221] netlink: ct family unspecified [ 222.100382][ T9221] openvswitch: netlink: Actions may not be safe on all matching packets [ 222.157661][ T9221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.938'. [ 223.302307][ T9246] lo speed is unknown, defaulting to 1000 [ 223.931171][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 224.272452][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.947'. [ 224.855307][ T9279] ip6gretap3: entered allmulticast mode [ 225.113682][ T9286] netlink: ct family unspecified [ 225.118805][ T9286] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.150281][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.955'. [ 225.228739][ T9289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.380749][ T9289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.573413][ T9289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.687138][ T9289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.768588][ T9295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.957'. [ 225.952648][ T9289] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.001943][ T9289] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.030433][ T9289] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.083999][ T9289] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.578302][ T9309] lo speed is unknown, defaulting to 1000 [ 226.593373][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 227.258140][ T9337] netlink: ct family unspecified [ 227.263165][ T9337] openvswitch: netlink: Actions may not be safe on all matching packets [ 227.281745][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.966'. [ 227.412136][ T9334] syzkaller1: entered promiscuous mode [ 227.425195][ T9334] syzkaller1: entered allmulticast mode [ 227.750431][ T9345] tipc: Enabled bearer , priority 0 [ 227.908875][ T9345] syzkaller0: entered promiscuous mode [ 227.934784][ T9345] syzkaller0: entered allmulticast mode [ 227.959850][ T9345] tipc: Resetting bearer [ 228.082037][ T9344] tipc: Resetting bearer [ 228.449916][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'. [ 228.693490][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 228.708716][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 228.940820][ T9378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.758912][ T9344] tipc: Disabling bearer [ 229.798785][ T9371] vlan3: entered promiscuous mode [ 229.803979][ T9371] gretap0: entered promiscuous mode [ 230.030375][ T9389] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 230.116247][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 230.759138][ T9415] lo speed is unknown, defaulting to 1000 [ 231.323620][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 231.977470][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 232.146530][ T9427] lo speed is unknown, defaulting to 1000 [ 232.492823][ T9454] pim6reg1: entered promiscuous mode [ 232.516469][ T9454] pim6reg1: entered allmulticast mode [ 232.548741][ T9457] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 232.947834][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 233.412968][ T9480] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 233.973299][ T9492] netlink: ct family unspecified [ 233.982082][ T9492] openvswitch: netlink: Actions may not be safe on all matching packets [ 234.002086][ T9492] netlink: 32 bytes leftover after parsing attributes in process `syz.3.999'. [ 234.056455][ T9497] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.148708][ T9500] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1001'. [ 234.190455][ T9502] pim6reg1: entered promiscuous mode [ 234.198133][ T9502] pim6reg1: entered allmulticast mode [ 234.370122][ T9509] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 234.557187][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1005'. [ 234.628552][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 234.712998][ T5847] Bluetooth: hci4: link tx timeout [ 234.718492][ T5847] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 234.791461][ T9527] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 234.849049][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 234.884223][ T9529] ipvlan2: entered promiscuous mode [ 234.897044][ T9529] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 235.176186][ T9541] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1015'. [ 235.445544][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 235.562179][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'. [ 235.593314][ T9557] IPVS: Error connecting to the multicast addr [ 236.201621][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 236.747195][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 237.775341][ T9574] lo speed is unknown, defaulting to 1000 [ 238.104917][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 238.351716][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1030'. [ 238.413174][ T9622] IPVS: Error connecting to the multicast addr [ 239.291129][ T9655] tipc: Started in network mode [ 239.321164][ T9655] tipc: Node identity 9ed7ab361415, cluster identity 4711 [ 239.371085][ T9655] tipc: Enabled bearer , priority 0 [ 239.810451][ T9659] syzkaller0: entered promiscuous mode [ 239.818140][ T9659] syzkaller0: entered allmulticast mode [ 239.824375][ T9659] tipc: Resetting bearer [ 239.868538][ T9665] xt_hashlimit: size too large, truncated to 1048576 [ 240.005641][ T12] tipc: Resetting bearer [ 240.085314][ T9650] tipc: Resetting bearer [ 240.366203][ T5909] tipc: Node number set to 2328013622 [ 240.554537][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 240.893692][ T9689] sctp: [Deprecated]: syz.4.1038 (pid 9689) Use of int in max_burst socket option. [ 240.893692][ T9689] Use struct sctp_assoc_value instead [ 240.990250][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 241.013964][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 241.029646][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 241.062082][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1038'. [ 241.921413][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 242.921141][ T9650] tipc: Disabling bearer [ 243.169474][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 243.341629][ T9731] lo speed is unknown, defaulting to 1000 [ 243.862497][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 244.790461][ T9784] sctp: [Deprecated]: syz.1.1053 (pid 9784) Use of int in max_burst socket option. [ 244.790461][ T9784] Use struct sctp_assoc_value instead [ 244.826962][ T9776] tipc: Started in network mode [ 244.832044][ T9776] tipc: Node identity 8ad132b8ac0c, cluster identity 4711 [ 244.845860][ T9776] tipc: Enabled bearer , priority 0 [ 244.936087][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 244.958670][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 244.967292][ T9780] syzkaller0: entered promiscuous mode [ 244.973513][ T9780] syzkaller0: entered allmulticast mode [ 244.982857][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 244.991408][ T9780] tipc: Resetting bearer [ 245.037186][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'. [ 245.053005][ T9790] syzkaller1: entered promiscuous mode [ 245.065262][ T9790] syzkaller1: entered allmulticast mode [ 245.072594][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'. [ 245.101888][ T9775] tipc: Resetting bearer [ 245.717268][ T9805] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 245.955613][ T5925] tipc: Node number set to 652030648 [ 246.446729][ T9775] tipc: Disabling bearer [ 246.501327][ T9805] tipc: Started in network mode [ 246.508151][ T9805] tipc: Node identity ac1414aa, cluster identity 4711 [ 246.522437][ T9805] tipc: Enabled bearer , priority 10 [ 246.696847][ T9810] netlink: ct family unspecified [ 246.715352][ T9810] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.719902][ T9807] lo speed is unknown, defaulting to 1000 [ 246.758190][ T9810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1060'. [ 246.770143][ T9811] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 246.781670][ T9811] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1059'. [ 246.794888][ T9816] netlink: 'syz.0.1062': attribute type 4 has an invalid length. [ 246.812392][ T9817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1058'. [ 247.254323][ T9828] netlink: 'syz.0.1066': attribute type 4 has an invalid length. [ 247.629933][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.638090][ T6025] tipc: Node number set to 2886997162 [ 247.650681][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.443633][ T9859] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.917647][ T9873] netlink: ct family unspecified [ 248.926265][ T9873] openvswitch: netlink: Actions may not be safe on all matching packets [ 248.948521][ T9873] __nla_validate_parse: 8 callbacks suppressed [ 248.948540][ T9873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1074'. [ 248.967950][ T9859] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.149082][ T9859] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.492693][ T9859] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.560213][ T9901] dummy0: entered promiscuous mode [ 249.585407][ T9901] vlan0: entered promiscuous mode [ 249.773218][ T9859] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.863298][ T9859] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.884814][ T9920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.947175][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 249.983390][ T9859] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.058466][ T9859] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.071984][ T9920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.113358][ T9922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 250.189263][ T9920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.339132][ T9920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.457448][ T9932] pim6reg1: entered promiscuous mode [ 250.462836][ T9932] pim6reg1: entered allmulticast mode [ 250.472484][ T9936] lo speed is unknown, defaulting to 1000 [ 250.589707][ T9920] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.676770][ T9920] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.716310][ T9920] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.759557][ T9920] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.068292][ T9952] xt_hashlimit: size too large, truncated to 1048576 [ 251.542433][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'. [ 252.424368][ T9989] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 252.457650][ T9989] netlink: 192668 bytes leftover after parsing attributes in process `syz.3.1099'. [ 252.569534][ T9993] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.616377][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 252.674199][ T9993] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.749757][ T9993] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.840630][ T9993] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.764326][T10016] netlink: 'syz.0.1106': attribute type 13 has an invalid length. [ 254.014421][ T9993] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.064719][ T9993] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.069974][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 254.099597][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 254.156799][ T9993] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.232249][ T9993] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.333420][T10031] netlink: ct family unspecified [ 254.345189][T10031] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.378480][T10031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1113'. [ 254.636407][T10038] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.787782][T10038] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.885918][T10038] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.029696][T10038] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.720331][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.727202][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.741996][T10069] IPv6: sit1: Disabled Multicast RS [ 256.844629][T10072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1124'. [ 256.857858][T10069] syzkaller0: entered promiscuous mode [ 256.863891][T10069] syzkaller0: entered allmulticast mode [ 257.093486][T10086] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1123'. [ 257.096755][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 258.444290][T10038] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.504671][T10038] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.521676][ T9891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.538778][ T9891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.554191][T10038] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.615634][T10038] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.891385][T10114] x_tables: duplicate underflow at hook 2 [ 259.270593][T10122] netlink: 'syz.4.1134': attribute type 29 has an invalid length. [ 259.297463][T10122] netlink: 'syz.4.1134': attribute type 29 has an invalid length. [ 259.388397][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1134'. [ 259.407002][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 260.253764][T10130] lo speed is unknown, defaulting to 1000 [ 260.671952][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 260.834430][T10138] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 260.976014][T10140] bond4: (slave gretap1): making interface the new active one [ 260.999745][T10140] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 261.005542][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 262.954328][T10170] lo speed is unknown, defaulting to 1000 [ 263.513722][T10189] Unknown status report in ack skb [ 264.794866][T10097] Set syz1 is full, maxelem 65536 reached [ 265.355564][T10216] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.403699][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 265.497316][T10216] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.636258][T10216] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.754071][T10216] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.783991][T10225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1161'. [ 266.057712][T10216] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.096276][T10216] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.176682][T10216] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.232638][T10216] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.404649][T10249] sctp: [Deprecated]: syz.3.1167 (pid 10249) Use of int in max_burst socket option. [ 266.404649][T10249] Use struct sctp_assoc_value instead [ 266.446349][T10250] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.510578][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 266.528447][T10250] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.538559][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 266.548067][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 266.564078][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 266.573697][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 266.658936][T10250] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.724515][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1169'. [ 266.760257][T10250] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.831361][T10264] batadv_slave_1: entered promiscuous mode [ 266.913141][T10267] netlink: ct family unspecified [ 266.932650][T10267] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.943499][T10269] lo speed is unknown, defaulting to 1000 [ 267.189579][T10275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1171'. [ 267.570746][T10260] batadv_slave_1: left promiscuous mode [ 267.802928][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 268.443960][T10289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.627594][T10289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.730895][T10296] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 268.760616][T10289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.788829][T10298] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 268.910379][T10289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.129570][T10289] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.169629][T10289] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.195349][T10304] lo speed is unknown, defaulting to 1000 [ 269.209809][T10289] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.339981][T10289] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.793983][T10320] sctp: [Deprecated]: syz.3.1183 (pid 10320) Use of int in max_burst socket option. [ 269.793983][T10320] Use struct sctp_assoc_value instead [ 270.206728][T10250] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.234778][T10250] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.305997][T10250] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.348108][T10250] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.476548][T10332] __nla_validate_parse: 9 callbacks suppressed [ 270.476577][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'. [ 270.602227][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 270.792444][T10334] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.013983][T10334] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.113340][T10341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.285688][T10336] lo speed is unknown, defaulting to 1000 [ 271.292289][T10346] pim6reg1: entered promiscuous mode [ 271.298759][T10346] pim6reg1: entered allmulticast mode [ 271.384864][T10334] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.688650][T10354] netlink: ct family unspecified [ 271.693721][T10354] openvswitch: netlink: Actions may not be safe on all matching packets [ 271.827088][T10334] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.886022][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1191'. [ 272.382564][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 272.603674][T10379] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.621070][T10379] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 272.676343][T10383] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 272.867809][T10387] sctp: [Deprecated]: syz.3.1197 (pid 10387) Use of int in max_burst socket option. [ 272.867809][T10387] Use struct sctp_assoc_value instead [ 273.017092][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 273.041310][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 273.072793][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 273.149028][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 273.292193][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1201'. [ 273.312716][T10402] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 273.360788][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1201'. [ 273.496825][T10408] netlink: ct family unspecified [ 273.501957][T10408] openvswitch: netlink: Actions may not be safe on all matching packets [ 273.580077][T10334] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.601848][T10334] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.625801][T10334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.656764][T10334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.733132][T10412] netlink: 'syz.1.1204': attribute type 10 has an invalid length. [ 273.785450][T10412] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 273.794201][T10412] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 273.803472][T10412] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.860162][T10416] lo speed is unknown, defaulting to 1000 [ 273.862664][T10419] netlink: 'syz.2.1205': attribute type 1 has an invalid length. [ 274.013307][T10419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.122742][T10421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.144421][T10421] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 274.212694][T10421] bond3: (slave vcan1): Error -95 calling set_mac_address [ 274.664675][T10444] xt_hashlimit: size too large, truncated to 1048576 [ 275.121169][T10449] pim6reg1: entered promiscuous mode [ 275.135202][T10449] pim6reg1: entered allmulticast mode [ 275.490801][T10459] sctp: [Deprecated]: syz.1.1216 (pid 10459) Use of int in max_burst socket option. [ 275.490801][T10459] Use struct sctp_assoc_value instead [ 275.607282][T10461] __nla_validate_parse: 2 callbacks suppressed [ 275.607304][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 275.626192][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 275.646898][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 275.898894][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 275.941772][T10471] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.978666][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 276.063036][T10471] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.219181][T10471] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.257862][T10482] xt_TCPMSS: Only works on TCP SYN packets [ 276.320652][T10471] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.380299][T10481] lo speed is unknown, defaulting to 1000 [ 276.522315][T10487] tipc: Enabled bearer , priority 0 [ 276.600783][T10489] xt_hashlimit: size too large, truncated to 1048576 [ 276.686765][T10487] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 276.717219][T10487] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 276.971811][T10471] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.010668][T10471] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.230565][T10471] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.332319][T10471] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.386102][T10500] lo speed is unknown, defaulting to 1000 [ 277.442584][T10506] netlink: ct family unspecified [ 277.490549][T10506] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.531733][T10506] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1229'. [ 278.005894][T10525] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1233'. [ 278.136715][T10523] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 279.607359][T10550] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.675294][T10553] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 279.686516][T10550] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.737724][T10553] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 279.802572][T10550] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.907766][T10550] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.971342][T10557] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.005137][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 280.130336][T10557] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.230052][T10557] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.316736][T10550] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.350406][T10557] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.418756][T10550] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.465944][T10550] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.527124][T10550] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.661485][T10589] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1245'. [ 280.669073][T10557] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.715752][T10557] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.763449][T10557] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.829456][T10557] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.888895][T10597] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 280.921970][T10597] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 280.935604][T10597] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 280.947310][T10597] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1246'. [ 280.979068][T10599] tipc: Can't bind to reserved service type 0 [ 281.220013][T10612] lo speed is unknown, defaulting to 1000 [ 281.708429][T10621] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.874727][T10621] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.996989][T10621] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.044620][T10629] set match dimension is over the limit! [ 282.098057][T10621] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.173302][T10629] pim6reg: entered allmulticast mode [ 282.318473][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 282.643927][T10637] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.951674][T10637] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.961846][T10644] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1257'. [ 283.050816][T10637] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.119220][T10637] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.375158][T10648] lo speed is unknown, defaulting to 1000 [ 283.946883][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1264'. [ 284.021703][T10621] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.097744][T10621] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.140822][T10637] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.174576][T10680] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 284.223709][T10621] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.284874][T10684] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1268'. [ 284.293030][T10637] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.422026][T10680] bond3: entered promiscuous mode [ 284.436771][T10680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.501225][T10682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.550139][T10682] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 284.575694][T10682] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 284.616790][T10682] bond3: (slave ip6gre1): making interface the new active one [ 284.628571][T10682] ip6gre1: entered promiscuous mode [ 284.636431][T10682] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 284.657856][T10621] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.737121][T10637] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.877618][T10637] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.230689][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 285.285095][T10701] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.700564][T10709] lo speed is unknown, defaulting to 1000 [ 286.112891][ T9886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.134748][T10731] vlan2: entered promiscuous mode [ 286.145013][ T9886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.152767][T10731] vlan2: entered allmulticast mode [ 286.182220][T10731] hsr_slave_1: entered allmulticast mode [ 286.251333][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 286.549963][T10721] lo speed is unknown, defaulting to 1000 [ 287.583738][T10754] lo speed is unknown, defaulting to 1000 [ 288.590391][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 288.681890][T10775] netlink: 2716 bytes leftover after parsing attributes in process `syz.4.1285'. [ 289.528892][T10788] lo speed is unknown, defaulting to 1000 [ 289.720053][T10796] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1292'. [ 289.747986][T10792] tipc: Enabled bearer , priority 0 [ 289.972780][T10799] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 289.995054][T10799] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 290.022806][T10799] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 290.035490][T10799] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1293'. [ 290.045937][T10801] netlink: 'syz.1.1294': attribute type 3 has an invalid length. [ 290.333218][T10804] lo speed is unknown, defaulting to 1000 [ 290.696538][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'. [ 291.884855][T10832] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.895290][T10809] lo speed is unknown, defaulting to 1000 [ 291.929800][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 292.008024][T10832] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.208564][T10832] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.272044][T10832] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.367372][T10832] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.392402][T10832] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.415911][T10832] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.440821][T10832] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.615053][T10860] netlink: 'syz.3.1307': attribute type 10 has an invalid length. [ 293.642541][T10860] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 293.655746][T10860] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 293.664290][T10860] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.729653][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 293.904498][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 294.903773][T10892] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.011913][T10892] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.102483][T10892] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.194757][T10892] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.231564][T10902] lo speed is unknown, defaulting to 1000 [ 295.524708][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 296.056242][T10932] Cannot find del_set index 2 as target [ 297.276896][T10892] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.322734][T10945] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1326'. [ 297.344243][T10892] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.466910][T10954] bond4: (slave dummy0): Releasing active interface [ 297.512319][T10954] batman_adv: batadv0: Adding interface: dummy0 [ 297.526104][T10954] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.580803][T10954] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 297.750943][T10892] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.830726][T10950] lo speed is unknown, defaulting to 1000 [ 297.940023][T10892] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.197782][T10977] lo speed is unknown, defaulting to 1000 [ 299.529072][T10993] netlink: ct family unspecified [ 299.534104][T10993] openvswitch: netlink: Actions may not be safe on all matching packets [ 299.573117][T10993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1337'. [ 300.139080][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 301.216984][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1342'. [ 301.282142][T11011] bridge_slave_1: entered allmulticast mode [ 301.384263][T11031] netlink: 'syz.2.1343': attribute type 10 has an invalid length. [ 301.487593][T11039] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1345'. [ 301.686286][T11045] netlink: 'syz.1.1344': attribute type 16 has an invalid length. [ 301.694192][T11045] netlink: 'syz.1.1344': attribute type 17 has an invalid length. [ 301.722807][T11045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.747738][ T6042] lo speed is unknown, defaulting to 1000 [ 301.759159][T11049] netlink: ct family unspecified [ 301.764328][T11049] openvswitch: netlink: Actions may not be safe on all matching packets [ 301.788631][T11049] Set syz1 is full, maxelem 65536 reached [ 301.908417][T11049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1348'. [ 302.169625][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 302.186606][T11055] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.807204][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1352'. [ 302.862230][T11061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1350'. [ 302.872372][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1350'. [ 302.888511][T11061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1350'. [ 302.919408][T11061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1350'. [ 303.023219][T11072] pim6reg1: entered promiscuous mode [ 303.028866][T11072] pim6reg1: entered allmulticast mode [ 303.218892][T11075] lo speed is unknown, defaulting to 1000 [ 303.262952][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 303.604021][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 303.605657][T11094] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 303.622983][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 303.689416][T11095] netlink: 'syz.2.1356': attribute type 14 has an invalid length. [ 303.713492][T11095] netlink: 'syz.2.1356': attribute type 13 has an invalid length. [ 303.713947][T11097] dccp_invalid_packet: P.Data Offset(102) too large [ 303.774792][T11094] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 303.785530][T11094] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 303.795650][T11094] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.345320][T11102] wg1: entered promiscuous mode [ 304.354761][T11102] wg1: entered allmulticast mode [ 304.473621][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 305.194669][T11124] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 305.271590][T11126] sctp: [Deprecated]: syz.1.1364 (pid 11126) Use of int in max_burst socket option. [ 305.271590][T11126] Use struct sctp_assoc_value instead [ 305.385876][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 305.396533][T11128] pim6reg1: entered promiscuous mode [ 305.401868][T11128] pim6reg1: entered allmulticast mode [ 305.549198][T11138] ipt_ECN: cannot use operation on non-tcp rule [ 305.931407][T11148] batman_adv: batadv0: Removing interface: dummy0 [ 305.949284][T11148] bridge_slave_0: left allmulticast mode [ 305.957681][T11148] bridge_slave_0: left promiscuous mode [ 305.963529][T11148] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.976851][T11148] bridge_slave_1: left promiscuous mode [ 305.982845][T11150] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 305.996147][T11148] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.029064][T11148] bond0: (slave bond_slave_0): Releasing backup interface [ 306.087974][T11148] bond_slave_0: left promiscuous mode [ 306.106048][T11148] bond_slave_0: left allmulticast mode [ 306.164070][T11148] bond0: (slave bond_slave_1): Releasing backup interface [ 306.212503][T11148] bond_slave_1: left promiscuous mode [ 306.224159][T11148] bond_slave_1: left allmulticast mode [ 306.235644][T11148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.244473][T11148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.257967][T11148] bond0: (slave wlan1): Releasing backup interface [ 306.268216][T11148] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 306.275668][T11148] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 306.294552][T11148] bond2: (slave veth3): Releasing backup interface [ 306.304307][T11148] bond3: (slave veth5): Releasing backup interface [ 306.318424][T11148] bond4: (slave veth7): Releasing active interface [ 306.329318][T11148] vlan2: left allmulticast mode [ 306.334248][T11148] bond0: left allmulticast mode [ 306.349543][T11148] vlan2: left promiscuous mode [ 306.354654][T11148] bond0: left promiscuous mode [ 306.362434][T11148] bridge0: port 3(vlan2) entered disabled state [ 306.376176][T11148] bond5: (slave ip6erspan0): Releasing active interface [ 306.395859][T11173] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 306.406006][T11173] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 306.415426][T11173] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 306.937942][T11186] pim6reg1: entered promiscuous mode [ 306.959635][T11186] pim6reg1: entered allmulticast mode [ 307.331741][T11198] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 307.373202][T11198] bond0: (slave wlan1): Opening slave failed [ 307.657743][T11208] sctp: [Deprecated]: syz.2.1383 (pid 11208) Use of int in max_burst socket option. [ 307.657743][T11208] Use struct sctp_assoc_value instead [ 308.843336][T11230] __nla_validate_parse: 8 callbacks suppressed [ 308.843354][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 309.451746][T11250] netlink: 'syz.2.1392': attribute type 10 has an invalid length. [ 309.543644][T11252] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 309.562337][T11252] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 309.776468][T11263] sctp: [Deprecated]: syz.3.1397 (pid 11263) Use of int in max_burst socket option. [ 309.776468][T11263] Use struct sctp_assoc_value instead [ 309.837927][T11267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1396'. [ 309.847417][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1396'. [ 309.856848][T11267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1396'. [ 309.867206][T11267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1396'. [ 309.890663][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 309.914240][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 309.928318][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 309.940895][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 309.950475][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 310.420945][T11272] netlink: 'syz.1.1399': attribute type 3 has an invalid length. [ 310.448306][T11272] macvlan3: entered promiscuous mode [ 310.453709][T11272] macvlan3: entered allmulticast mode [ 310.832833][T11286] lo speed is unknown, defaulting to 1000 [ 311.306981][T11293] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 311.377494][T11295] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 311.467344][T11295] tipc: Enabled bearer , priority 10 [ 311.753237][T11304] netlink: ct family unspecified [ 311.761358][T11304] openvswitch: netlink: Actions may not be safe on all matching packets [ 312.294274][T11321] sctp: [Deprecated]: syz.3.1413 (pid 11321) Use of int in max_burst socket option. [ 312.294274][T11321] Use struct sctp_assoc_value instead [ 312.400297][T11322] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.483785][T11322] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.627434][T11328] bridge0: port 3(vlan0) entered blocking state [ 312.635380][T11328] bridge0: port 3(vlan0) entered disabled state [ 312.643276][T11328] vlan0: entered allmulticast mode [ 312.649074][T11328] bond0: entered allmulticast mode [ 312.654499][T11328] bond_slave_0: entered allmulticast mode [ 312.670954][T11328] bond_slave_1: entered allmulticast mode [ 312.677198][T11328] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 312.687172][T11328] vlan0: entered promiscuous mode [ 312.692235][T11328] bond0: entered promiscuous mode [ 312.697745][T11328] bond_slave_0: entered promiscuous mode [ 312.703659][T11328] bond_slave_1: entered promiscuous mode [ 312.709718][T11328] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 312.727507][T11322] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.932729][T11322] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.139229][T11322] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.170082][T11322] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.249347][T11322] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.360866][T11322] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.673090][T11350] Bluetooth: MGMT ver 1.23 [ 313.746431][T11353] syzkaller0: Caught tx_queue_len zero misconfig [ 313.914441][T11339] lo speed is unknown, defaulting to 1000 [ 313.936433][T11357] __nla_validate_parse: 11 callbacks suppressed [ 313.936452][T11357] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1420'. [ 314.062455][T11370] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1426'. [ 314.216341][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 314.256056][T11370] tipc: Enabling of bearer rejected, failed to enable media [ 314.589570][T11382] sctp: [Deprecated]: syz.1.1428 (pid 11382) Use of int in max_burst socket option. [ 314.589570][T11382] Use struct sctp_assoc_value instead [ 314.619324][T11379] lo speed is unknown, defaulting to 1000 [ 314.680509][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 314.710851][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 314.734168][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 314.763368][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 314.805198][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 314.935649][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 314.935874][T11386] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.965332][T11386] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.989169][T11386] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.014758][T11386] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.126371][T11392] bridge0: entered promiscuous mode [ 315.132241][T11392] macvlan0: entered promiscuous mode [ 315.139648][T11392] bridge0: port 4(macvlan0) entered blocking state [ 315.146801][T11392] bridge0: port 4(macvlan0) entered disabled state [ 315.153778][T11392] macvlan0: entered allmulticast mode [ 315.159821][T11392] bridge0: entered allmulticast mode [ 315.175714][T11392] macvlan0: left allmulticast mode [ 315.181021][T11392] bridge0: left allmulticast mode [ 315.182057][T11388] syz.0.1430 (11388) used greatest stack depth: 18696 bytes left [ 315.217774][T11392] bridge0: left promiscuous mode [ 315.424659][T11396] lo speed is unknown, defaulting to 1000 [ 315.451444][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 315.496446][T11380] netlink: 'syz.3.1427': attribute type 1 has an invalid length. [ 316.054150][T11394] lo speed is unknown, defaulting to 1000 [ 316.187792][T11420] netlink: 'syz.4.1437': attribute type 11 has an invalid length. [ 316.196971][T11420] netlink: 'syz.4.1437': attribute type 11 has an invalid length. [ 316.205211][T11420] netlink: 'syz.4.1437': attribute type 11 has an invalid length. [ 317.166260][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.172793][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.282871][T11451] sctp: [Deprecated]: syz.4.1444 (pid 11451) Use of int in max_burst socket option. [ 318.282871][T11451] Use struct sctp_assoc_value instead [ 318.625843][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.633658][T11442] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.647165][T11459] netlink: 'syz.1.1443': attribute type 16 has an invalid length. [ 318.655244][T11459] netlink: 'syz.1.1443': attribute type 17 has an invalid length. [ 318.848129][T11442] wg1: left promiscuous mode [ 318.852778][T11442] wg1: left allmulticast mode [ 319.059363][T11442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.108824][T11442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.381398][T11442] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.390553][T11442] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.399447][T11442] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.409410][T11442] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.445418][T11442] vlan2: left promiscuous mode [ 319.450228][T11442] hsr0: left promiscuous mode [ 319.470358][T11442] veth5: left promiscuous mode [ 319.477732][T11442] tipc: Resetting bearer [ 319.602233][T11469] sctp: [Deprecated]: syz.2.1447 (pid 11469) Use of int in max_burst socket option. [ 319.602233][T11469] Use struct sctp_assoc_value instead [ 319.624160][T11469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.639701][T11459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.674291][ T5895] syz1: Port: 1 Link DOWN [ 319.681991][T11470] __nla_validate_parse: 8 callbacks suppressed [ 319.682010][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 319.705033][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 319.713995][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 319.723745][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 319.732727][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 319.811305][T11472] netlink: 'syz.1.1448': attribute type 11 has an invalid length. [ 319.820697][T11472] netlink: 'syz.1.1448': attribute type 11 has an invalid length. [ 319.828727][T11472] netlink: 'syz.1.1448': attribute type 11 has an invalid length. [ 319.837024][T11472] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1448'. [ 320.168001][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 320.182364][T11483] netlink: 'syz.4.1452': attribute type 27 has an invalid length. [ 320.255782][T11480] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 320.270225][T11487] sctp: [Deprecated]: syz.3.1455 (pid 11487) Use of int in max_burst socket option. [ 320.270225][T11487] Use struct sctp_assoc_value instead [ 320.362863][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 320.415420][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 320.424364][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 320.832604][T11503] netlink: 'syz.2.1460': attribute type 11 has an invalid length. [ 320.842052][T11503] netlink: 'syz.2.1460': attribute type 11 has an invalid length. [ 320.851354][T11503] netlink: 'syz.2.1460': attribute type 11 has an invalid length. [ 322.053571][T11539] lo speed is unknown, defaulting to 1000 [ 322.172796][T11545] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 322.410999][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.443212][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.586198][T11561] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 322.764754][T11569] netlink: 'syz.0.1483': attribute type 16 has an invalid length. [ 322.805262][T11569] netlink: 'syz.0.1483': attribute type 17 has an invalid length. [ 322.831983][T11569] netlink: 'syz.0.1483': attribute type 27 has an invalid length. [ 322.940504][T11578] xt_l2tp: v2 doesn't support IP mode [ 323.018135][T11582] netlink: 'syz.2.1487': attribute type 11 has an invalid length. [ 323.496092][T11601] lo speed is unknown, defaulting to 1000 [ 323.950830][T11614] netlink: 'syz.4.1495': attribute type 10 has an invalid length. [ 324.024553][T11614] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 324.062085][T11614] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 324.100057][T11614] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 324.490416][T11623] netlink: 'syz.4.1499': attribute type 10 has an invalid length. [ 324.549506][T11630] netlink: 'syz.4.1499': attribute type 10 has an invalid length. [ 325.370223][T11643] netlink: ct family unspecified [ 325.375390][T11643] openvswitch: netlink: Actions may not be safe on all matching packets [ 325.411175][T11643] __nla_validate_parse: 8 callbacks suppressed [ 325.411195][T11643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1507'. [ 325.483403][T11644] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 326.351384][T11649] pim6reg1: entered promiscuous mode [ 326.377271][T11649] pim6reg1: entered allmulticast mode [ 326.394632][T11646] lo speed is unknown, defaulting to 1000 [ 326.436984][T11644] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 326.479617][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 326.998377][T11673] bridge_slave_1: left allmulticast mode [ 327.023253][T11673] veth3: left promiscuous mode [ 327.029031][T11673] veth5: left promiscuous mode [ 327.064130][T11673] ip6erspan0: left promiscuous mode [ 327.090815][T11680] netlink: ct family unspecified [ 327.096340][T11680] openvswitch: netlink: Actions may not be safe on all matching packets [ 327.116314][T11680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1519'. [ 327.176405][T11657] lo speed is unknown, defaulting to 1000 [ 327.529703][T11694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.645844][T11696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1523'. [ 327.655186][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 327.664221][T11696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1523'. [ 327.673413][T11696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1523'. [ 328.590240][T11710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.717643][T11709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1528'. [ 328.727307][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1528'. [ 328.745523][T11709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1528'. [ 328.975964][T11720] netlink: ct family unspecified [ 328.989107][T11720] openvswitch: netlink: Actions may not be safe on all matching packets [ 329.409084][T11728] lo speed is unknown, defaulting to 1000 [ 330.479757][T11747] lo speed is unknown, defaulting to 1000 [ 331.334376][T11768] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 331.474030][T11768] __nla_validate_parse: 4 callbacks suppressed [ 331.474050][T11768] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1543'. [ 332.130575][T11779] lo speed is unknown, defaulting to 1000 [ 333.114145][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 333.181426][T11812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1553'. [ 333.191481][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 333.204558][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 333.512771][T11817] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1555'. [ 333.693083][T11678] Set syz1 is full, maxelem 65536 reached [ 334.011369][T11831] netlink: 'syz.2.1562': attribute type 11 has an invalid length. [ 334.019684][T11831] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1562'. [ 334.087920][T11835] netlink: 'syz.0.1559': attribute type 27 has an invalid length. [ 334.199405][T11836] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1565'. [ 334.214460][T11831] netlink: 752 bytes leftover after parsing attributes in process `syz.2.1562'. [ 334.278058][T11848] Set syz1 is full, maxelem 65536 reached [ 335.012657][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 335.022672][T11861] vlan0: left allmulticast mode [ 335.027942][T11861] bond0: left allmulticast mode [ 335.032895][T11861] bond_slave_0: left allmulticast mode [ 335.039145][T11861] bond_slave_1: left allmulticast mode [ 335.045231][T11861] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 335.052146][T11861] vlan0: left promiscuous mode [ 335.057077][T11861] bond0: left promiscuous mode [ 335.061869][T11861] bond_slave_0: left promiscuous mode [ 335.067781][T11861] bond_slave_1: left promiscuous mode [ 335.073442][T11861] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 335.084054][T11861] bridge0: port 3(vlan0) entered disabled state [ 335.119699][T11861] bridge_slave_1: left allmulticast mode [ 335.125812][T11861] bridge_slave_1: left promiscuous mode [ 335.131648][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.141872][T11861] bridge_slave_0: left allmulticast mode [ 335.147860][T11861] bridge_slave_0: left promiscuous mode [ 335.154188][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.483150][T11873] netlink: 'syz.1.1573': attribute type 11 has an invalid length. [ 335.922400][T11884] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 335.937146][T11884] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 336.022824][T11888] netlink: 'syz.2.1577': attribute type 11 has an invalid length. [ 336.039361][T11888] netlink: 'syz.2.1577': attribute type 11 has an invalid length. [ 336.051154][T11888] netlink: 'syz.2.1577': attribute type 11 has an invalid length. [ 336.523550][T11894] __nla_validate_parse: 5 callbacks suppressed [ 336.523569][T11894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1581'. [ 337.092676][T11919] netlink: 'syz.2.1585': attribute type 1 has an invalid length. [ 337.094335][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 337.101581][T11919] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1585'. [ 337.297349][T11928] netlink: 'syz.2.1589': attribute type 11 has an invalid length. [ 337.309116][T11928] netlink: 'syz.2.1589': attribute type 11 has an invalid length. [ 337.317624][T11928] netlink: 'syz.2.1589': attribute type 11 has an invalid length. [ 337.325729][T11928] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1589'. [ 337.481029][T11934] netlink: 'syz.2.1592': attribute type 10 has an invalid length. [ 337.500332][ T6033] syz1: Port: 1 Link ACTIVE [ 337.572177][T11936] netlink: ct family unspecified [ 337.577409][T11936] openvswitch: netlink: Actions may not be safe on all matching packets [ 337.616766][T11936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1593'. [ 337.693692][T11938] netlink: 'syz.2.1595': attribute type 15 has an invalid length. [ 337.702318][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1595'. [ 337.936886][T11945] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.127282][T11952] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 338.135324][T11952] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1599'. [ 338.136134][T11963] netlink: 'syz.0.1601': attribute type 11 has an invalid length. [ 338.153212][T11963] netlink: 'syz.0.1601': attribute type 11 has an invalid length. [ 338.161449][T11963] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1601'. [ 338.243352][T11945] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.374648][T11968] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 338.392508][T11968] bond0: (slave wlan1): refused to change device type [ 338.477924][T11945] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.613526][T11945] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.877443][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 338.927818][T11945] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.975444][T11986] pim6reg1: entered promiscuous mode [ 338.980887][T11986] pim6reg1: entered allmulticast mode [ 339.067401][T11945] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.214815][T11945] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.259328][T11945] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.288493][T11989] tipc: Enabling of bearer rejected, failed to enable media [ 339.509862][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1615'. [ 339.530005][T12003] bridge0: entered promiscuous mode [ 339.535478][T12003] bridge0: entered allmulticast mode [ 339.914091][T12019] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 339.947337][T12019] pim6reg1: entered promiscuous mode [ 339.952716][T12019] pim6reg1: entered allmulticast mode [ 339.988124][T12019] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 340.290956][T12031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.684006][T12056] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 340.694505][T12056] pim6reg1: entered promiscuous mode [ 340.700520][T12056] pim6reg1: entered allmulticast mode [ 340.758573][T12056] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 341.028040][T12072] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.101723][T12072] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.182521][T12072] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.303359][T12072] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.453345][T12093] netlink: ct family unspecified [ 341.461941][T12093] openvswitch: netlink: Actions may not be safe on all matching packets [ 341.801877][T12114] __nla_validate_parse: 1 callbacks suppressed [ 341.801900][T12114] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1656'. [ 341.883319][T12116] netlink: 'syz.0.1657': attribute type 10 has an invalid length. [ 341.938754][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 342.032761][T12126] syzkaller1: entered promiscuous mode [ 342.038496][T12126] syzkaller1: entered allmulticast mode [ 342.535346][T12072] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.552767][T12072] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.571945][T12072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.595119][T12072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.715700][T12137] netlink: 'syz.1.1665': attribute type 10 has an invalid length. [ 342.975515][T12149] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1667'. [ 343.021300][T12147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1667'. [ 343.036686][T12152] netlink: 'syz.1.1670': attribute type 9 has an invalid length. [ 343.087538][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 343.383754][T12166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.498856][T12166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.581511][T12166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.691368][T12166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.744764][T12182] netlink: 'syz.2.1678': attribute type 27 has an invalid length. [ 344.291972][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 344.333863][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 344.410511][T12189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.771117][T12200] netlink: ct family unspecified [ 344.786440][T12200] openvswitch: netlink: Actions may not be safe on all matching packets [ 344.929585][T12207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1684'. [ 345.104353][T12213] wg2: left promiscuous mode [ 345.119638][T12213] wg2: left allmulticast mode [ 345.126154][T12213] bridge_slave_1: left allmulticast mode [ 345.142269][T12213] veth3: left promiscuous mode [ 345.152488][T12213] veth5: left promiscuous mode [ 345.158807][T12213] bond3: left promiscuous mode [ 345.163699][T12213] ip6gre1: left promiscuous mode [ 345.378889][T12227] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1695'. [ 345.472432][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 345.571642][T12238] netlink: ct family unspecified [ 345.580260][T12238] openvswitch: netlink: Actions may not be safe on all matching packets [ 345.712249][T12242] lo speed is unknown, defaulting to 1000 [ 346.037463][T12244] lo speed is unknown, defaulting to 1000 [ 346.647272][T12268] netlink: ct family unspecified [ 346.652309][T12268] openvswitch: netlink: Actions may not be safe on all matching packets [ 346.820639][T12166] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.892132][T12166] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.929934][T12166] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.971799][T12282] netlink: 'syz.4.1715': attribute type 9 has an invalid length. [ 346.992706][T12166] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.434085][T12302] netlink: ct family unspecified [ 347.450019][T12302] openvswitch: netlink: Actions may not be safe on all matching packets [ 347.534747][T12302] __nla_validate_parse: 2 callbacks suppressed [ 347.534770][T12302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1723'. [ 347.601518][T12317] nla_validate_range_unsigned: 1 callbacks suppressed [ 347.601553][T12317] netlink: 'syz.2.1731': attribute type 11 has an invalid length. [ 347.621305][T12317] netlink: 'syz.2.1731': attribute type 11 has an invalid length. [ 347.629588][T12317] netlink: 'syz.2.1731': attribute type 11 has an invalid length. [ 347.637672][T12317] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1731'. [ 348.697614][T12357] lo speed is unknown, defaulting to 1000 [ 349.262872][T12379] netlink: 'syz.4.1756': attribute type 11 has an invalid length. [ 349.271053][T12379] netlink: 'syz.4.1756': attribute type 11 has an invalid length. [ 349.279424][T12379] netlink: 'syz.4.1756': attribute type 11 has an invalid length. [ 349.287570][T12379] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1756'. [ 349.321094][T12383] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1758'. [ 349.836947][T12402] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1767'. [ 350.034475][T12410] netlink: 'syz.2.1770': attribute type 11 has an invalid length. [ 350.042987][T12410] netlink: 'syz.2.1770': attribute type 11 has an invalid length. [ 350.051031][T12410] netlink: 'syz.2.1770': attribute type 11 has an invalid length. [ 350.059048][T12410] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1770'. [ 350.300922][T12416] lo speed is unknown, defaulting to 1000 [ 350.718535][T12434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.151296][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 351.813568][T12458] lo speed is unknown, defaulting to 1000 [ 353.627538][T12537] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.652012][T12525] lo speed is unknown, defaulting to 1000 [ 353.678296][T12541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1815'. [ 353.687418][T12541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1815'. [ 353.696575][T12541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1815'. [ 353.706477][T12541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1815'. [ 354.360766][T12535] lo speed is unknown, defaulting to 1000 [ 354.494613][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1819'. [ 354.858016][T12569] netlink: ct family unspecified [ 354.863183][T12569] openvswitch: netlink: Actions may not be safe on all matching packets [ 354.889344][T12569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1825'. [ 355.026606][T12575] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 355.034484][T12575] netlink: 'syz.2.1828': attribute type 2 has an invalid length. [ 355.044565][T12575] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1828'. [ 355.201253][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 355.226085][T12585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1829'. [ 355.245770][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1829'. [ 355.887644][T12601] netlink: ct family unspecified [ 355.892845][T12601] openvswitch: netlink: Actions may not be safe on all matching packets [ 356.032210][ T9891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.043252][ T9891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.167445][T12609] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 356.178622][T12609] netlink: 'syz.3.1841': attribute type 2 has an invalid length. [ 356.512633][T12623] lo speed is unknown, defaulting to 1000 [ 356.629650][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.642015][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.839178][T12625] lo speed is unknown, defaulting to 1000 [ 357.761588][T12674] nbd: device at index 64 is going down [ 358.533772][T12705] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 358.629012][T12707] bond0: entered promiscuous mode [ 358.634195][T12707] bond_slave_0: entered promiscuous mode [ 358.640169][T12707] bond_slave_1: entered promiscuous mode [ 358.646812][T12707] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 358.655762][T12707] batadv0: entered promiscuous mode [ 358.662514][T12707] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 358.672732][T12707] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 358.683861][T12707] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 358.955811][T12718] __nla_validate_parse: 16 callbacks suppressed [ 358.955833][T12718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 359.461241][T12736] netlink: ct family unspecified [ 359.469981][T12736] openvswitch: netlink: Actions may not be safe on all matching packets [ 359.483618][T12736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1890'. [ 359.689048][T12748] netlink: 'syz.0.1896': attribute type 10 has an invalid length. [ 359.734004][T12753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.836624][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1897'. [ 359.845730][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1897'. [ 359.854704][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1897'. [ 359.865093][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1897'. [ 359.975664][T12766] netlink: ct family unspecified [ 360.009413][T12766] openvswitch: netlink: Actions may not be safe on all matching packets [ 360.062902][T12766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1902'. [ 360.352240][T12785] netlink: 'syz.1.1910': attribute type 10 has an invalid length. [ 360.507826][T12791] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 360.516816][T12791] netlink: 'syz.1.1913': attribute type 2 has an invalid length. [ 360.524671][T12791] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.1913'. [ 360.588923][T12793] lo speed is unknown, defaulting to 1000 [ 360.651209][T12798] netlink: ct family unspecified [ 360.656493][T12798] openvswitch: netlink: Actions may not be safe on all matching packets [ 360.691197][T12798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1916'. [ 361.547554][T12823] tipc: Resetting bearer [ 361.582587][T12823] bridge0: left promiscuous mode [ 361.587750][T12823] bridge0: left allmulticast mode [ 361.606279][ T5895] syz1: Port: 1 Link DOWN [ 361.743503][T12830] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 361.751550][T12830] netlink: 'syz.2.1927': attribute type 2 has an invalid length. [ 361.759532][T12830] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1927'. [ 361.852187][T12833] netlink: ct family unspecified [ 361.858038][T12833] openvswitch: netlink: Actions may not be safe on all matching packets [ 362.562727][T12845] netlink: 'syz.4.1933': attribute type 11 has an invalid length. [ 362.584365][T12845] netlink: 'syz.4.1933': attribute type 11 has an invalid length. [ 362.602613][T12845] netlink: 'syz.4.1933': attribute type 11 has an invalid length. [ 362.885072][T12857] netlink: 'syz.4.1936': attribute type 12 has an invalid length. [ 362.892951][T12857] netlink: 'syz.4.1936': attribute type 29 has an invalid length. [ 362.920756][T12848] lo speed is unknown, defaulting to 1000 [ 364.331502][T12859] lo speed is unknown, defaulting to 1000 [ 364.495511][T12889] netlink: 'syz.4.1945': attribute type 11 has an invalid length. [ 364.509910][T12889] netlink: 'syz.4.1945': attribute type 11 has an invalid length. [ 364.530244][T12890] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.545293][T12889] netlink: 'syz.4.1945': attribute type 11 has an invalid length. [ 364.563479][T12889] __nla_validate_parse: 3 callbacks suppressed [ 364.563497][T12889] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1945'. [ 364.721955][T12890] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.821460][T12890] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.884688][T12890] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.899770][T12865] lo speed is unknown, defaulting to 1000 [ 365.024505][T12890] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.064876][T12890] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.130929][T12890] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.197015][T12890] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.294813][T12899] veth3: left promiscuous mode [ 365.322242][T12899] veth5: left promiscuous mode [ 365.341941][T12899] veth7: left promiscuous mode [ 365.364967][T12899] veth9: left promiscuous mode [ 365.375814][T12899] ip6gretap3: left allmulticast mode [ 366.626227][T12923] syzkaller1: entered promiscuous mode [ 366.631767][T12923] syzkaller1: entered allmulticast mode [ 366.956404][T12931] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 366.964201][T12931] netlink: 'syz.0.1961': attribute type 2 has an invalid length. [ 366.995090][T12931] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1961'. [ 367.778166][T12961] : entered promiscuous mode [ 367.947501][T12967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1977'. [ 367.965354][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1977'. [ 368.039790][T12967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1977'. [ 368.070471][T12967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1977'. [ 368.435751][T12983] netlink: ct family unspecified [ 368.453086][T12983] openvswitch: netlink: Actions may not be safe on all matching packets [ 368.537539][T12987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1982'. [ 368.614700][T12988] IPv6: sit1: Disabled Multicast RS [ 368.689783][T12988] sit1: entered allmulticast mode [ 368.963111][T13000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.577885][T13017] netlink: 'syz.1.1992': attribute type 11 has an invalid length. [ 369.603718][T13017] netlink: 'syz.1.1992': attribute type 11 has an invalid length. [ 369.632861][T13017] netlink: 'syz.1.1992': attribute type 11 has an invalid length. [ 369.650818][T13017] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1992'. [ 369.911451][T13024] lo speed is unknown, defaulting to 1000 [ 370.862065][T13035] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1997'. [ 371.174241][T13048] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.296443][T13053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.518079][T13060] netlink: ct family unspecified [ 371.523220][T13060] openvswitch: netlink: Actions may not be safe on all matching packets [ 371.547698][T13060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2006'. [ 371.697462][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 372.182359][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.212502][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.263607][T13077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.716198][T13090] syzkaller1: entered promiscuous mode [ 372.721880][T13090] syzkaller1: entered allmulticast mode [ 372.767007][T13092] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2016'. [ 373.042690][T13104] netlink: ct family unspecified [ 373.048579][T13104] openvswitch: netlink: Actions may not be safe on all matching packets [ 373.063314][T13104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2018'. [ 373.471274][T13112] netlink: 'syz.1.2022': attribute type 10 has an invalid length. [ 373.985223][T13134] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2024'. [ 374.072314][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 374.253095][T13142] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2031'. [ 374.601835][T13152] netlink: 'syz.4.2033': attribute type 10 has an invalid length. [ 374.796390][T13159] lo speed is unknown, defaulting to 1000 [ 374.804502][T13163] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 374.826466][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2039'. [ 374.849251][ T6033] syz1: Port: 1 Link ACTIVE [ 374.859623][T13163] netlink: 'syz.3.2038': attribute type 2 has an invalid length. [ 374.895001][T13163] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.2038'. [ 375.014879][T13172] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2043'. [ 375.590937][T13197] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2052'. [ 375.953751][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2053'. [ 376.170034][T13215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2056'. [ 376.270533][T13219] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.336740][T13222] netlink: 'syz.2.2057': attribute type 11 has an invalid length. [ 376.350965][T13222] netlink: 'syz.2.2057': attribute type 11 has an invalid length. [ 376.358984][T13222] netlink: 'syz.2.2057': attribute type 11 has an invalid length. [ 376.366968][T13222] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2057'. [ 377.302806][T13244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.366804][T13253] netlink: 'syz.3.2069': attribute type 10 has an invalid length. [ 377.385713][T13253] bond0: (slave wlan1): refused to change device type [ 377.413221][T13255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2065'. [ 377.458884][T13255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2065'. [ 377.483176][T13255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2065'. [ 378.150043][T13269] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 378.390361][T13272] lo speed is unknown, defaulting to 1000 [ 378.591993][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.605055][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.806319][T13286] lo speed is unknown, defaulting to 1000 [ 379.673400][T13302] lo speed is unknown, defaulting to 1000 [ 380.074509][T13301] __nla_validate_parse: 1 callbacks suppressed [ 380.074530][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'. [ 380.097972][T13301] unsupported nlmsg_type 40 [ 380.694039][T13330] netlink: 'syz.3.2091': attribute type 10 has an invalid length. [ 380.710775][T13328] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 380.752054][T13330] bond0: (slave wlan1): refused to change device type [ 380.763239][T13331] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 380.991342][T13335] lo speed is unknown, defaulting to 1000 [ 381.449032][T13345] netlink: 'syz.2.2097': attribute type 10 has an invalid length. [ 381.734177][T13349] lo speed is unknown, defaulting to 1000 [ 382.073707][T13367] netlink: 'syz.1.2103': attribute type 7 has an invalid length. [ 382.116769][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 382.576338][T13366] syzkaller1: entered promiscuous mode [ 382.581936][T13366] syzkaller1: entered allmulticast mode [ 382.832024][T13378] tipc: Enabling of bearer rejected, already enabled [ 382.962425][T13384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.074122][T13386] netlink: 'syz.3.2108': attribute type 10 has an invalid length. [ 383.137949][T13386] bond0: (slave wlan1): refused to change device type [ 383.746099][T13413] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 383.759519][T13413] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 383.872692][T13417] netlink: 'syz.4.2120': attribute type 4 has an invalid length. [ 383.975136][T13420] netlink: 'syz.2.2122': attribute type 10 has an invalid length. [ 384.044081][T13422] xt_hashlimit: size too large, truncated to 1048576 [ 384.364250][T13431] lo speed is unknown, defaulting to 1000 [ 384.512600][T13436] pim6reg1: entered promiscuous mode [ 384.542223][T13436] pim6reg1: entered allmulticast mode [ 384.763608][T13447] netlink: 'syz.2.2133': attribute type 10 has an invalid length. [ 385.204560][T13450] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2132'. [ 385.815570][T13490] lo speed is unknown, defaulting to 1000 [ 385.861045][T13499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.874160][T13499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2147'. [ 386.206541][T13509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2146'. [ 386.801973][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 386.908348][T13507] lo speed is unknown, defaulting to 1000 [ 387.491579][T13516] macsec1: entered promiscuous mode [ 388.104235][T13522] sctp: [Deprecated]: syz.1.2150 (pid 13522) Use of int in max_burst socket option deprecated. [ 388.104235][T13522] Use struct sctp_assoc_value instead [ 388.779225][T13532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2152'. [ 388.821264][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2152'. [ 388.873034][T13532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2152'. [ 388.939004][T13532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2152'. [ 389.272689][T13534] ------------[ cut here ]------------ [ 389.278781][T13534] WARNING: CPU: 1 PID: 13534 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 389.289501][T13534] Modules linked in: [ 389.293647][T13534] CPU: 1 UID: 0 PID: 13534 Comm: syz.1.2153 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 389.305561][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 389.315677][T13534] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 389.322132][T13534] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 389.342033][T13534] RSP: 0018:ffffc90003eefc48 EFLAGS: 00010293 [ 389.348362][T13534] RAX: ffffffff8a93fdfc RBX: 0000000000000001 RCX: ffff8880550c1e00 [ 389.356416][T13534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 389.364411][T13534] RBP: 0000000000000000 R08: ffffffff8a93fade R09: 1ffffffff20bfb2e [ 389.372474][T13534] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff86de0c80 [ 389.380532][T13534] R13: dffffc0000000000 R14: ffff88807ef452f8 R15: 0000000000000000 [ 389.388581][T13534] FS: 000055556f8c6500(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 389.397849][T13534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.404467][T13534] CR2: 00007f76800fdf98 CR3: 00000000437f2000 CR4: 00000000003526f0 [ 389.412601][T13534] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.420678][T13534] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.428823][T13534] Call Trace: [ 389.432138][T13534] [ 389.435138][T13534] udpv6_destroy_sock+0x212/0x270 [ 389.440211][T13534] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 389.445807][T13534] sk_common_release+0x71/0x2e0 [ 389.450689][T13534] inet_release+0x17d/0x200 [ 389.455240][T13534] sock_close+0xbc/0x240 [ 389.459515][T13534] ? __pfx_sock_close+0x10/0x10 [ 389.464392][T13534] __fput+0x3e9/0x9f0 [ 389.469318][T13534] task_work_run+0x251/0x310 [ 389.473958][T13534] ? _raw_spin_unlock+0x28/0x50 [ 389.478961][T13534] ? __pfx_task_work_run+0x10/0x10 [ 389.484142][T13534] ? syscall_exit_to_user_mode+0xa3/0x340 [ 389.489969][T13534] syscall_exit_to_user_mode+0x13f/0x340 [ 389.495685][T13534] do_syscall_64+0x100/0x230 [ 389.500322][T13534] ? clear_bhb_loop+0x45/0xa0 [ 389.505071][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.510985][T13534] RIP: 0033:0x7fdc27f8d169 [ 389.515466][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.535183][T13534] RSP: 002b:00007ffcd378f1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 389.543646][T13534] RAX: 0000000000000000 RBX: 000000000005ef1e RCX: 00007fdc27f8d169 [ 389.552687][T13534] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 389.560875][T13534] RBP: 00007fdc281a7ba0 R08: 0000000000000001 R09: 00000009d378f4bf [ 389.568941][T13534] R10: 00007fdc27e00000 R11: 0000000000000246 R12: 00007fdc281a5fac [ 389.576988][T13534] R13: 00007fdc281a5fa0 R14: ffffffffffffffff R15: 00007ffcd378f2e0 [ 389.585046][T13534] [ 389.588103][T13534] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 389.595503][T13534] CPU: 1 UID: 0 PID: 13534 Comm: syz.1.2153 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 389.607239][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 389.617407][T13534] Call Trace: [ 389.620706][T13534] [ 389.623658][T13534] dump_stack_lvl+0x241/0x360 [ 389.628383][T13534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.633619][T13534] ? __pfx__printk+0x10/0x10 [ 389.638255][T13534] ? vscnprintf+0x5d/0x90 [ 389.642609][T13534] panic+0x349/0x880 [ 389.646530][T13534] ? __warn+0x174/0x4d0 [ 389.650715][T13534] ? __pfx_panic+0x10/0x10 [ 389.655192][T13534] __warn+0x344/0x4d0 [ 389.659207][T13534] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 389.665037][T13534] report_bug+0x2b3/0x500 [ 389.669388][T13534] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 389.675300][T13534] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 389.681148][T13534] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 389.686999][T13534] handle_bug+0x89/0x170 [ 389.691265][T13534] exc_invalid_op+0x1a/0x50 [ 389.695791][T13534] asm_exc_invalid_op+0x1a/0x20 [ 389.700660][T13534] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 389.707100][T13534] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 389.726738][T13534] RSP: 0018:ffffc90003eefc48 EFLAGS: 00010293 [ 389.732834][T13534] RAX: ffffffff8a93fdfc RBX: 0000000000000001 RCX: ffff8880550c1e00 [ 389.740822][T13534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 389.748815][T13534] RBP: 0000000000000000 R08: ffffffff8a93fade R09: 1ffffffff20bfb2e [ 389.756827][T13534] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff86de0c80 [ 389.764833][T13534] R13: dffffc0000000000 R14: ffff88807ef452f8 R15: 0000000000000000 [ 389.772840][T13534] ? __pfx_geneve_gro_receive+0x10/0x10 [ 389.778504][T13534] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 389.784255][T13534] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 389.790101][T13534] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 389.795934][T13534] udpv6_destroy_sock+0x212/0x270 [ 389.800992][T13534] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 389.806562][T13534] sk_common_release+0x71/0x2e0 [ 389.811442][T13534] inet_release+0x17d/0x200 [ 389.816065][T13534] sock_close+0xbc/0x240 [ 389.820337][T13534] ? __pfx_sock_close+0x10/0x10 [ 389.825213][T13534] __fput+0x3e9/0x9f0 [ 389.829223][T13534] task_work_run+0x251/0x310 [ 389.833846][T13534] ? _raw_spin_unlock+0x28/0x50 [ 389.838726][T13534] ? __pfx_task_work_run+0x10/0x10 [ 389.843962][T13534] ? syscall_exit_to_user_mode+0xa3/0x340 [ 389.849710][T13534] syscall_exit_to_user_mode+0x13f/0x340 [ 389.855399][T13534] do_syscall_64+0x100/0x230 [ 389.860024][T13534] ? clear_bhb_loop+0x45/0xa0 [ 389.864734][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.870650][T13534] RIP: 0033:0x7fdc27f8d169 [ 389.875097][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.894740][T13534] RSP: 002b:00007ffcd378f1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 389.903189][T13534] RAX: 0000000000000000 RBX: 000000000005ef1e RCX: 00007fdc27f8d169 [ 389.911185][T13534] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 389.919179][T13534] RBP: 00007fdc281a7ba0 R08: 0000000000000001 R09: 00000009d378f4bf [ 389.927172][T13534] R10: 00007fdc27e00000 R11: 0000000000000246 R12: 00007fdc281a5fac [ 389.935162][T13534] R13: 00007fdc281a5fa0 R14: ffffffffffffffff R15: 00007ffcd378f2e0 [ 389.943153][T13534] [ 389.946501][T13534] Kernel Offset: disabled [ 389.950829][T13534] Rebooting in 86400 seconds..