last executing test programs: 3.69425329s ago: executing program 1 (id=2015): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x140b, 0x400, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x20040081) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3c010000100013040000000000000000fe88000000000000000000000000000102000000000000000000000000000000fffd00004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0000000000000000000000000000010000000000000000070000000000000000000000000000000400000000000000000000000000002004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000800000000000000f8000000000000000000000000000000010000000200000100000000000000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}}, 0x844) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x1, 0xb, 0x38, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x44, 0x4, "dcb2"}, @ssrr={0x89, 0x7, 0x8b, [@broadcast]}, @timestamp={0x44, 0x4, 0x3e, 0x0, 0x5}]}}, @timestamp={0xd, 0x0, 0x0, 0x1, 0x5, 0x7b2, 0x0, 0x8a8}}}}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="0215052500"/16], 0x10}}, 0x4c040) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x1, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.307200517s ago: executing program 1 (id=2020): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x3) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090308000000ffdbdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1", 0x2}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 3.049799094s ago: executing program 4 (id=2022): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x14, 0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060300000034e4000000000a000004050001000600000005000400000000000900020073797a3100000000050005000a"], 0x60}}, 0x2) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000f02c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000f04c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000f06c0)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7, "5cdf2d2d778413"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{r10, 0x5, 0x8, 0x5, 0x4, 0xb7, 0x5, 0x10000, 0x5, 0x8, 0x9, 0xe9a7, 0x9, 0x8000000000000001, 0x2}, 0x10, [0x0, 0x0]}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900010000000c000100020000000000000008000500", @ANYRES32=r4, @ANYBLOB="ea875aa365e892d7fcc7fd56ae4745fceb62b6b015d99eff3bcebf1163127def907653ca394a6a"], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000050) 2.945640418s ago: executing program 2 (id=2024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) (async) listen(r1, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) accept(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') (async) unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x3) bind$pptp(0xffffffffffffffff, 0x0, 0x0) (async) connect$pptp(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1", 0x2}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) (async) r5 = socket$netlink(0x10, 0x3, 0xe) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) (rerun: 64) 2.190608084s ago: executing program 1 (id=2029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvfrom(r1, &(0x7f0000000200)=""/117, 0x75, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x1, 0x10}, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000440)=0x7ff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x3, 0x9, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080001"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000680)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2c}, 0x94) 2.090610469s ago: executing program 4 (id=2031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0xf, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 1.898184162s ago: executing program 0 (id=2034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x800, &(0x7f00000000c0)={@align=0xdd, {0xfffc, 0xab8, 0x5, 0x6}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x4, 0x2, {{0x1d, 0x4, 0x1, 0x4, 0x74, 0x65, 0x0, 0xc, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xa6, 0x3, 0x1, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010102, 0x200}, {@empty, 0x6}, {@multicast1, 0x9}]}, @generic={0x83, 0x12, "970a0db56d0fed7977e8132b1a778a1e"}, @cipso={0x86, 0x18, 0x2, [{0x7, 0x12, "7f0122a5fa0c1adb4eb9b5b26a5512bd"}]}, @noop, @cipso={0x86, 0x10, 0xfffffffffffffffd, [{0x1, 0xa, "b5c43780e52004c6"}]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffff16}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0xc, r3, 0x8, &(0x7f0000000500)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x7, 0x7}, 0x10, r4, r5, 0x1, 0x0, &(0x7f00000008c0)=[{0x1, 0x2, 0x0, 0x5}], 0x10, 0x5}, 0x94) 1.706397978s ago: executing program 2 (id=2035): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x7, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3ff8cfa611672e3ef7a6e13531e55841cc911bab1cf1608811a9f36077223dfbd973dbc1947c36e7e9991a13aacbc8ee7bbaef39040f7373d24742c09ca567af3d9979e7d875a94be5629482c4438b4839793b7810698db1b0d128d0a420ca2616f4c1c0b53e9ec5c21a3c677279612e0655723738cc77cc091aafca2a1ce5e129c9e5a7dccd86b183e19ee5e9a79d8f3d1dbcecacd6ce7663f172cec18af92d", 0xa0}], 0x1) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x20, &(0x7f0000000640)={&(0x7f0000000500)=""/30, 0x1e, 0x0, &(0x7f0000000540)=""/248, 0xf8}}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000007c0)={r2, &(0x7f00000006c0)=':.^\x00', 0x4080, &(0x7f0000000700)={@_ha_fsid={[0x844, 0x81]}, {0x2, 0xd, 0x7, 0x9}}, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0xf9}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xd, 0xe5e, 0x1, 0x1, 0x8, r2, 0xfffffffe, '\x00', 0x0, r2, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x3b, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xed5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x73d390c, 0x24, &(0x7f0000000440)=""/36, 0x1e00, 0x10, '\x00', 0x0, @cgroup_device, r2, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0xf3b2, 0x4}, 0x10, r3, r2, 0x3, &(0x7f0000000880)=[r4, r2, r2, r5, r2, r2, r2, r2], &(0x7f00000008c0)=[{0x1, 0x3, 0x1, 0x3}, {0x2, 0x4, 0x9, 0x6}, {0x1, 0x4, 0xc, 0x1}], 0x10, 0x1}, 0x94) sendmsg$inet(r4, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="7f69ad026417db2fdc1b0d4b0e7ea83e0712142607dc1fffae84ad980e4e288fb4f4eca5b76f744a9bed1114fac32e4788c4f1983d990613400afa00363d47bb968b143481359cf52b5af3fa13630d7c702459a26326cc1cfec9ba0a7000fca6561aa69733c83b8112fcd6eeb76ae4a41ad8a646d60e9d3b4bdab8772423dea6cd146a1ff2f25852eea5c2c97bbcb30c98697ca9ba5a34180a77862ddc798a7c67ccb7b4381843ac200d77b7c4e30e5a76a9330fc5d7f0ab29ab7fcf30026ab99717b16e6c1be1a001f2a7ae6d88e9f481c43ffa719ae578ee093c01a8927e2a85eb890ce756003c5d", 0xe9}, {&(0x7f0000000b00)="9ae6f038b17b51cb9a1d5609f2aed58eea1950fd0dd72a908792d76f33b0476b1d3aab94d4cd2720ce0b0cb750624d2b4cd02f755d040bff17c387eec443d3c30f0747022fca46b7c6a34f8dc0194e5cfe93950b325b3e0494708d415e78bd2884b62ffeb8c6c75b6b8f4791ed82a7b2ed13cc5bce7cefcd50ea7221c34065d0fa333d2388e1224ae1617e47685d11f140306cf712d1785a6241b118f82d53091209ebf4571023d0fa5c23852c1691532e3a4df3169f7233", 0xb8}], 0x2, &(0x7f0000000c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa0}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xc3, 0x3, 0x2, [{@multicast1, 0x7fff}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1000}, {@private=0xa010100, 0x8001}]}, @ssrr={0x89, 0xb, 0x8f, [@multicast1, @loopback]}, @rr={0x7, 0x17, 0x72, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, @broadcast]}, @generic={0x89, 0xb, "101cd1c5d8f413d43f"}, @rr={0x7, 0xb, 0xb3, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0xea, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x48, 0x0}, @rand_addr=0x64010102]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x135a}}], 0xb8}, 0x20008804) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000e00)={&(0x7f0000000d00)=""/245, 0xf5}) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000e40), 0x4) read(r6, &(0x7f0000000e80)=""/5, 0x5) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000011c0)={&(0x7f0000000ec0)="b63cb7bd187042d65915c2cf7e5cfb999f36539d8725e459cc7d0c79687798a261421d0f204a1978c63a5ef3a74fd96576fb8e5feee0d5b43ed5faa37c861dd39876d8960da015d33ce27bcbdd5008211cd7e565cffcf494dd14bf9b033d7ee1d8119395b86424250e973522c875633eb47b8957b32871442965abfe65086ce1aee799f7d55ccc3672da8bc349cb4b03ed880c9403b4718174fef0a8521dbd2cf904c3c22f", &(0x7f0000000f80)=""/193, &(0x7f0000001080)="27452b031b42debeafe95e9419e072c31abd0c4e47e77bad747c8e8797367ffd0f86fb261b86600baed879e1baba305eae647a34e87b6525f2bd5f2c4c7d08e36c3284d571a04b7aaa51fa09fe2682aab36ae01ab34077587d4847c8af344c283fd186d2ffb883978539073e92c1cc378510e42cf6ccdd5adc7ea970c6ba4bc474d67a69d8d3ce3a2fe198a57bba", &(0x7f0000001140)="21fb59ec6e61efe67011b0cf11625b26ba0dda4b0ee56aee3580d35e780d971ebc06f042ce644464b2f5ff361f44806045ee35dd5ace5937685b1bc148b765cc840ac880274654ff0d7574efecde3b7052bce42fadac", 0x4, r5, 0x4}, 0x38) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001340)=r2, 0x4) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000001380)={0xffff0001, 0xe, 0x2, 0x9}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000013c0)={0x1f, 0x3}, 0x6) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000001480)={&(0x7f0000001400)=[{0x3, 0x3, 0x2}, {0x2, 0x80000001}, {0x10000, 0x0, 0x2}, {0x63b28834}, {0x9, 0xc}], 0x5, 0x10, 0x3100, 0x5}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f00000014c0)={0x0, 0xe8, "ac80157ffa1e92918f735b2e5d2405967dcfda4a2c4412e134855560261279d95636cf0758a4e444b80a287beb85f30bdd5fae7e266f23854d364f481801a6340860dae465e47ff043f0f1470d42fc281615284c7de4dc75657954a34f6ba8aabaf303f6d061bbc263a0b8307e4997b8186259525729d2d3b13e828dd17d510133ffd2977ec3ba2669c3f514f13c4a751c8fc3d5576403c5189fb02bb71c64eb028fa383c019cb6a13204bdd8a9d0b18f9abc0edf9a7af6c6ed3ff8175fb5d091778a0946242b565655aa7bf1127fd8e5b4efecd08754adea06b9c165490b33b16200d3dc5d1bb9e"}, &(0x7f00000015c0)=0xf0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000001600)={r10, 0x3}, 0x8) ioctl$NILFS_IOCTL_GET_CPSTAT(r6, 0x80186e83, &(0x7f0000001640)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001780)={'syztnl0\x00', &(0x7f0000001700)={'gre0\x00', 0x0, 0x7800, 0x1, 0x3, 0x8, {{0xc, 0x4, 0x2, 0x17, 0x30, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xb6, 0x1, 0x1, [{@private=0xa010101, 0x1}, {@empty, 0xfffffff7}, {@local, 0x80}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001a00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xbc, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.682913834s ago: executing program 4 (id=2036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0x7, 0x8) accept4(r2, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80, 0x800) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.586769936s ago: executing program 3 (id=2037): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x2020}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r3}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 1.530527479s ago: executing program 0 (id=2038): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000480)=@ccm_128={{0x303}, "ff00", "0000205c696c05000000d76c2e00", '@ \r\x00', "b08068ebce17ab00"}, 0x28) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000001040)={@remote, @private=0xa010100, r6}, 0xc) socket$kcm(0xa, 0x2, 0x3a) (async) close(0x4) sendto$llc(0xffffffffffffffff, &(0x7f0000000300)="cda07dd2e4b50da993b805bcff959b8d765c31ba9bbb931be7361f6ef92e042b7f43bd79149da1d9fa22b40870b3fb26a1f807987f6d6e5ef388e4629051dbcbd667b6c6a1ba22189821bbef6d80cfdec54fda5b33615a091e126c0dfaf0a8a9c47df252b1b3246c4bd3928344a1327c23806eae01dd48701eaa479311c7a5655590da", 0x83, 0x800, &(0x7f00000003c0)={0x1a, 0x3, 0x52, 0x7, 0x9, 0xff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) (async) readv(r1, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/17, 0x11}], 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (rerun: 32) socket$packet(0x11, 0x3, 0x300) (async) socket(0x29, 0x80000, 0x4) 1.529928192s ago: executing program 2 (id=2039): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.325745705s ago: executing program 3 (id=2040): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x30000004}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x20, 0x1e, 0x1, 0x70bd2b, 0x0, {0x17}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x0, 0x1b0, 0x2e8, 0x1b0, 0x3d8, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x4}, {0xffff, 0x2}, {0xffffffffffffffff, 0x0, 0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x9, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@private2, 0x27, 0x28, 0x1}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'nr0\x00', 'syzkaller0\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x4, 0xd}}}, {{@ipv6={@mcast2, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'geneve1\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@srh1={{0x90}, {0x21, 0x2, 0xe, 0x4, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0x0, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 0x1481, 0x201}}]}, @HL={0x28, 'HL\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 1.243610519s ago: executing program 0 (id=2041): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$isdn(0x22, 0x3, 0x26) openat$nci(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000048c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000025c0)={'macsec0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x800) close(0x3) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001100)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x6, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x4, 0x9, 0x6, 0x4}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x800000000000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r6, &(0x7f0000002640)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002680)=0x1c) sendmsg$nl_route_sched_retired(r1, &(0x7f0000002580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f00000001c0)=@newtfilter={0x2370, 0x2c, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {0xc}, {0xd, 0x9}}, [@f_rsvp6={{0xa}, {0x2340, 0x2, [@TCA_RSVP_ACT={0x163c, 0x6, [@m_sample={0x10a0, 0x1c, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xffffff81}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x3, 0x8, 0x1, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x67, 0xfffffff8, 0x0, 0x4, 0x77aa}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}, @m_bpf={0x6c, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x39, 0x6, "bc93064375e6883af804c72ba67de98dfee145ca54e5b8da80456a18c7e08818944e7b7a8b5c124bb752559987cbc7d6f10933b8b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xf4, 0x12, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x20000000, 0x80, 0x10001}}, @TCA_DEF_DATA={0x7, 0x3, ',,\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x80, 0x10000000, 0x8, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x51f70eb2, 0xfffffff9, 0x4, 0x7fff, 0xa7c1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff0, 0x91e, 0x6, 0x1, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x187e, 0x9, 0x0, 0x2e9, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x10000000, 0x8, 0x7ff}}]}, {0x25, 0x6, "e5655ab235b983ff83ef2f6c22a46091b4c9d8320cd0229cce23f46a6ed818a914"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x114, 0x1, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x343076e3, 0x4, 0x6, 0x0, 0x4}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x8, 0x4, 0x5, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0x30be701b, 0xe2}, 0xccaa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xda, 0x3, 0xa, 0x6}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x5, 0xffffffffffffffff, 0x6, 0xfff}, 0x9}}]}, {0x58, 0x6, "7675bf54786ab0accd97f66a4ffbdcdc24d99bd87a40e4188f991675897cf6c49b3c7de92a3aadcad5a623e28f2b5841073fedefe25e7926018fb7de1ed9b7c294edf6d4f5fb096c99896aac89d751a6c9a21e4c"}, {0xc, 0x7, {0x1, 0x572cf55a460206b2}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x124, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x9f, 0x20000000, 0x3}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}, {0x95, 0x6, "f95bcb24353325d6807e2e844bf16a891923d556c253040087385f1804d27bf239a8b4d6d8429c585d0c9b26497341cfcff889ffe5f4085f2249bbee77a308b3f4052cfa7b3672aec6088b72d40567a2856abbfed7e8609b9aaeb0bf6daa545542416f408fef1086ba34fe1df572b7c19079d73b7edc736ee93c0d2594484ed7c44a6378aeeb8ca712e264a8627a8a1604"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x110, 0x5, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1000, 0x8, 0x0, 0x3}, 0xc728}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeb, 0xd, 0x8, 0x6, 0x5}, 0xab5d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffe82, 0x9, 0x2, 0x82ab, 0x5}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5ad0765d, 0x10000000, 0x8, 0xffff7fff}, 0x545}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x101, 0x7, 0xfffffff9, 0xf}, 0x126e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x6, 0x1}, 0x8}}]}, {0x38, 0x6, "de20f17c082c44535aac9ded84e819ed29eab271f677881d472c653eca5442220523cb02c6ff72a4cc2e65414ad74d4c247e883e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xf0, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfffffff8, 0x4, 0x1000, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1c41, 0x9, 0x7, 0x6, 0xd10b}, 0x7f5a}}]}, {0x86, 0x6, "848024631168160a1740eb71a2377e33e0c3222bab84bb4033797ee6bd0564794d2fee731d642e07f7da675914f68e01c1e9f69d22628bed5f5825d30b5590de1a7ca65412607b03ee613593eb1edbf29c9f8315e330901194b7d2f0dcf7d9dda4c6f303191a4742d92a5b5c697aa2827d32bd1c6422d7f58be4bcfa40a2a87534e8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}]}, @TCA_RSVP_POLICE={0x860, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x5, 0x0, 0x100, {0x2, 0x1, 0x3, 0x7, 0x4, 0x101}, {0x41, 0x1, 0x7f, 0x21, 0x4, 0x5}, 0x5, 0x6, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x7, 0x9, 0x7fffffff, 0xfffffffa, 0x9, 0xffffffff, 0x1, 0x62, 0x4, 0x80, 0xfffffff8, 0x8000, 0x1, 0x6, 0x3, 0xb, 0x7, 0x17fd, 0x81c, 0x6, 0xe3ce, 0x2, 0xd800000, 0x2, 0x0, 0xffff560c, 0x5, 0x1, 0x6, 0x8, 0x1, 0x40, 0x9, 0x3045, 0x1, 0x6, 0xffff8001, 0x4, 0x10000, 0x3, 0x5, 0x8, 0x67, 0x8, 0x17, 0x7, 0x8, 0x7, 0x8697, 0x5, 0x101, 0x1, 0x7fffffff, 0x3, 0xffffffd3, 0x6, 0x1, 0x8, 0x3, 0x9, 0xff, 0x7, 0xc83, 0x1, 0xc52, 0xa, 0x5, 0x3, 0xb00, 0x0, 0xb0, 0x5, 0x2, 0x5, 0x100, 0x7, 0x1, 0x4, 0x7, 0x9, 0x7, 0x5, 0xffffff88, 0x2, 0x8, 0x1cd, 0x619, 0x3, 0x9, 0xe, 0x1, 0x8, 0x9, 0xfff, 0xc, 0x5, 0x5c, 0x8001, 0x5, 0x40000, 0x9, 0x1000, 0x1, 0xfff, 0x6c, 0xd6, 0x81, 0x7, 0x10, 0x0, 0x8000, 0xd4, 0x8, 0x200, 0x7fffffff, 0x10, 0xcc69, 0x42b, 0x57a, 0x7, 0xd, 0x4, 0x6, 0x3, 0x5bb9, 0xef, 0x5, 0x9, 0x1, 0x0, 0x8, 0x7, 0x122, 0x6, 0x307, 0x2, 0x16cb, 0x6, 0x4, 0xd91f, 0x855, 0x7, 0x531ee342, 0x8, 0x57, 0x9, 0x8, 0x9, 0x5, 0x8, 0x7fff, 0xfff, 0x87, 0x4, 0x4, 0x5, 0x0, 0xff, 0x2, 0x4, 0x3ff, 0x4, 0x4, 0xa00, 0x5, 0xff, 0x3, 0x401, 0x9, 0x7705, 0x80000000, 0x2, 0x401, 0x7, 0x100, 0x8, 0x6, 0x2, 0x5, 0x100, 0xa46d5179, 0x12, 0xdb4c, 0x7, 0x1, 0x6, 0x2, 0x1, 0x1, 0x7, 0xfffffff9, 0xfffffff8, 0x3ff, 0x1, 0x4, 0x10000, 0x2, 0x8, 0xfffffff7, 0x9, 0x1ff, 0x7b, 0xa, 0x1, 0x3, 0x6, 0x0, 0x100, 0x9, 0x0, 0x3, 0x0, 0x8, 0x2, 0x483f, 0x3db37b83, 0x10001, 0xb, 0x8001, 0x4, 0x0, 0x7, 0x2, 0x9, 0x4, 0xd, 0xfffffc74, 0x2, 0x22, 0x5, 0x40, 0x8001, 0x4, 0x0, 0x80000001, 0x80000001, 0x75, 0x1, 0xffffac49, 0x5, 0x5, 0x8000, 0x1, 0x1, 0x2, 0xf, 0x401, 0x3, 0x2, 0x4, 0xe, 0xe5, 0x263, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x8, 0x2, 0x4, 0x7, 0x7, 0xf, 0x7c, 0x4, 0x5, 0x6, 0x92, 0x9, 0x0, 0x8, 0x1ff, 0x3, 0x4, 0xbe, 0xe, 0x6, 0xfffffffb, 0x8000, 0x10, 0x6, 0x8, 0x2f5a, 0x0, 0x10, 0x7, 0x3, 0x7, 0x0, 0x5, 0x7, 0x6, 0x4, 0xbbcd, 0x1, 0xcf6, 0x7a, 0x0, 0x7, 0x1, 0x1, 0xb66, 0x2, 0x7e, 0x0, 0x27, 0xc, 0x1000, 0x400, 0x1, 0x5, 0x3, 0x3, 0xfff, 0x7, 0x80, 0x0, 0x8001, 0x3ff, 0x10001, 0x5c0, 0x8, 0x101, 0x100, 0x10000, 0x8, 0x5, 0x205, 0x4, 0x180, 0x9, 0x8, 0x5, 0x1, 0x7, 0x17, 0x5, 0xc, 0x5, 0x6, 0x6, 0xff, 0x2, 0x1, 0x9, 0x3, 0xbab, 0x6, 0x9, 0x6, 0x5, 0x10000, 0x7, 0x9, 0x1, 0x4, 0x4, 0x5, 0x3, 0x4, 0x8, 0x6, 0x6, 0x1, 0x7, 0x1, 0x20000, 0xb, 0xa, 0x7f, 0x7, 0x6, 0x200, 0x3ff, 0x4, 0x9, 0x5, 0x5, 0x9, 0xce0, 0x53, 0x10001, 0x2, 0xc, 0x3, 0x10, 0x1, 0x0, 0x1, 0x908, 0x6, 0x6, 0x4, 0x793d2282, 0x8000, 0x80000001, 0x5, 0x7, 0x36, 0x7, 0x1ff, 0xd2, 0x3, 0x6, 0x0, 0x1, 0x401, 0xd, 0x0, 0x100, 0x80000001, 0x4, 0x0, 0xb308, 0x5, 0xb8, 0xbbfc, 0x4f791917, 0x8, 0x81, 0x7, 0x60, 0xffffffff, 0xffff, 0x5, 0x10001, 0x3, 0x2, 0x81, 0x80000001, 0x800, 0xfffffffc, 0x10001, 0xfffffff9, 0x10001, 0x8, 0x5, 0x7a, 0x0, 0x67879d91, 0x8, 0xa4, 0x7, 0x1, 0xd1d9, 0x10001, 0x4, 0x400, 0x0, 0x7, 0x1ff, 0x4, 0xffffffff, 0x3, 0xef9, 0x4, 0x3, 0x2c38, 0x7, 0x1, 0x38f, 0x1, 0x5, 0x80, 0x6, 0x101, 0x400, 0x0, 0x5, 0x7, 0x7, 0x101, 0x6, 0xab4, 0x7, 0x9816, 0x85f, 0x7e0, 0x3, 0x1, 0x0, 0x8000, 0x4, 0x0, 0x10001, 0xfa5, 0x9, 0xd, 0x6, 0x2, 0xcb0, 0x3, 0x8, 0x2, 0x240, 0x0, 0x34, 0x0, 0xffff, 0x80000001, 0x4, 0x401, 0x8, 0x84, 0x7, 0x7, 0x6, 0x7fffffff, 0x5, 0xa0, 0x5]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1000, 0x2, 0x1f}, {0x9, 0x312b, 0x80000000}, 0x1d, 0x0, 0x1}}, @TCA_RSVP_POLICE={0x64, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x416b}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x8, 0x8, 0x5, {0x6, 0x0, 0x7, 0x3, 0x8001}, {0x7, 0x1, 0xfffd, 0x100, 0xf2, 0xfff}, 0x6d58, 0x5, 0x91}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xffff0000, 0x7, 0xffffffff, 0x3, 0xfffffff7, 0x0, 0xfffffffc, 0x9, 0x7, 0x7ff, 0x3de, 0xb, 0x9, 0x1, 0x8, 0xe, 0x4, 0x9, 0x9, 0x5, 0x9b, 0xfffffffa, 0xb, 0x0, 0x0, 0x2, 0x5, 0x7, 0xc5, 0x8, 0xa, 0x2, 0x50a, 0x2, 0x5939, 0x3, 0xb37, 0x1, 0x6, 0x7, 0x9, 0x4, 0x1, 0x7, 0xf45e, 0x9, 0x2, 0xeb2, 0x6, 0x11, 0x100, 0x10001, 0x2, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x7, 0x0, 0x7, 0x10, 0x8, 0x9, 0x10001, 0x4, 0xb, 0x1, 0x15, 0x2, 0x1ff, 0x9, 0x2, 0xc20, 0x6b, 0x3, 0x8000, 0x1, 0x6, 0x7, 0x3, 0x0, 0x80000001, 0x3, 0x1ff, 0x5, 0x1, 0x3, 0x1, 0x8001, 0x6, 0x4, 0x7, 0xfffff86b, 0xf, 0x8, 0xffffffff, 0x8, 0x8, 0x0, 0x7ff, 0x3, 0x4, 0x1ff, 0xfffffffd, 0x4, 0x1ff, 0x7, 0x3, 0x7, 0xfffffffd, 0xff, 0xd, 0x9, 0x6488, 0x8000, 0xbc, 0xd2, 0x0, 0x5, 0x8, 0x7f, 0x5, 0x8, 0x1ff, 0x8, 0x0, 0x1, 0xa, 0x8001, 0x6, 0xffffffff, 0x100, 0xf5f4, 0x5, 0x1, 0x8000, 0x5318, 0x10000, 0x80, 0xb7b7, 0xcbe, 0x1, 0x8, 0x7, 0x8, 0x1, 0xc600, 0x8, 0x8, 0x8000, 0xffff, 0x7, 0x7, 0x5, 0x7ff, 0x2, 0x4, 0x1, 0x7, 0x9, 0x4, 0x80000000, 0x0, 0x4, 0xe4, 0xecb, 0x0, 0x9, 0x6, 0x90d2, 0x8, 0x7fffffff, 0x6, 0x4, 0x3, 0x6, 0x9, 0x7282, 0x1, 0x7, 0x4, 0x1, 0x80000000, 0x10, 0x800, 0x4, 0xb, 0xfffffffb, 0x3, 0x3ff, 0x2, 0x2, 0x7fffffff, 0xfff, 0xc, 0x5, 0x8, 0x1, 0x8, 0x7ff, 0x7ff, 0x1, 0xff, 0x5, 0x8, 0x4, 0x5, 0x10001, 0x8, 0x6d0d, 0x3, 0xd3c9, 0xfffffae7, 0x0, 0x80000001, 0x60c, 0x6, 0x1ff, 0x4, 0xad, 0x0, 0x8, 0x8f, 0x7, 0x7, 0x8, 0x5, 0x0, 0x5, 0x9, 0x15, 0x3, 0x3, 0xffffffff, 0xffff, 0xf6d3, 0x5, 0x4, 0x1ff, 0xf6a, 0x0, 0x2, 0xfffffeff, 0x7c8ab92e, 0x8001, 0xffffffff, 0x51d5, 0x7, 0x2, 0x9, 0x8, 0x7, 0xf, 0x4]}]}, @TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0x2370}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001487edfd232e7556", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.186551059s ago: executing program 2 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendto$packet(r2, &(0x7f0000000140)="f179f5", 0x3, 0x4000000, 0x0, 0x0) 1.081822433s ago: executing program 3 (id=2043): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x3, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000240)="94", 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r8, 0x0, r11, 0x0, 0x8, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000070603000000000000000000010000090800064000000002080006400000000808000640000000100500010007000000080009"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4000000) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r4, r6, 0x2, 0x100000000000003) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r13, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.054046551s ago: executing program 4 (id=2044): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x200, 0x70bd26, 0x6, {{}, {}, {0x18, 0x17, {0x1e, 0x1, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40008000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r6, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="38f5e3f8c8e1229b09b5ebe076c167d439ddd9aded0b81478ed5503dad5da188da05d730bcb60afde971cc163684196e81ab9b7bec6052fa1b5e4e001b4863a6c1148d2108a1f968b50db2b39c403429dbdf49b5fb1f2c7eaf1e3dab6ce9fe8b5a4bb8eba7744506edf0cb26515cb6f9c14453cdea39df92e4cc9763391b953d00ac599058bfd406a109bfd2969d56c03c55e166f7d98e6555e1dabf1f6b5c444729e3d9780667bfb84a6164a039", @ANYRES8=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYBLOB="ea80dad726ec48e7b298407d49de6188d17abc9629808d8515b6616350c25a1ef79216e92585bff9134c484ed3a8c9e0755cbeb9a5ffd7486762e56580d5ec6fce758759df5a306ae196786bbb6b74a012189fd6a5971f6e13d696018f2000f59e0792ceda08ee7f475051da3c35f91ea3372e72b162f5cc28e138b0c66ed2db6a21a92de032f5b26b1b0bf1160fd8deb75a71f24e542e7f6d5bfb0b256ea2b7f4f406089544eb0c21219dec23ed7eeb82b80b374dabb95ccd7ea60bfaf39e15c87c537e5ec5d8d1a48af9228ea0531507d0ec6bf8b3ee4146924d88bce0fe2186fc", @ANYRESOCT=r7], 0x38}}, 0x24040884) 890.424156ms ago: executing program 0 (id=2045): pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xc) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000c"], 0x3c}, 0x1, 0x0, 0x0, 0x4406}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3a, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 840.870578ms ago: executing program 4 (id=2046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x2, @empty}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000800)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@getpolicy={0xdc, 0x15, 0x4, 0x70bd29, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@empty, 0x4e20, 0x7, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x2f, 0x0, r5}, 0x6e6bbd, 0x1}, [@address_filter={0x28, 0x1a, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x2, 0x7, 0x9}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_val={0x10, 0xa, {0x70bd2e, 0x70bd2c, 0x1}}, @address_filter={0x28, 0x1a, {@in6=@private2, @in6=@remote, 0x2, 0xd9, 0x5d}}, @lifetime_val={0x24, 0x9, {0x1000, 0xfffffffffffffe01, 0xfffffffffffffffa, 0x1}}]}, 0xdc}}, 0x8000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@getpolicy={0xdc, 0x15, 0x4, 0x70bd29, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@empty, 0x4e20, 0x7, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x2f, 0x0, r5}, 0x6e6bbd, 0x1}, [@address_filter={0x28, 0x1a, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x2, 0x7, 0x9}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_val={0x10, 0xa, {0x70bd2e, 0x70bd2c, 0x1}}, @address_filter={0x28, 0x1a, {@in6=@private2, @in6=@remote, 0x2, 0xd9, 0x5d}}, @lifetime_val={0x24, 0x9, {0x1000, 0xfffffffffffffe01, 0xfffffffffffffffa, 0x1}}]}, 0xdc}}, 0x8000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa0000000000005ec9fecc0250e7b09968adee6705794e"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 829.968203ms ago: executing program 1 (id=2047): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x13c, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x0, 0xec9f, 0x0, 0x200}, {@in=@multicast1, 0x0, 0x3c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x8, 0x4007ff, 0x3, 0x400}, {}, 0x70bd26, 0x3507, 0xa, 0x4, 0x0, 0x81}, [@algo_auth_trunc={0x4c, 0x14, {{'sha384-arm64\x00'}, 0x0, 0xc0}}]}, 0x13c}}, 0x4050) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x202, 0x81, 0x80000001, 0x0}, &(0x7f00000001c0)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000050000007301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0f00045518f6e8754bb51ef8"], 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x24000090) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r8) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r8) (async) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/4091, 0xffb}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000001800)=""/100, 0x64}, {&(0x7f00000005c0)=""/132, 0x84}], 0x4}, 0x2) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 762.554821ms ago: executing program 2 (id=2048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xc302, 0x80, 0x0, 0x2f, 0x1, 0x6, 0xffff8000, 0xffffff15, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0x13b}, &(0x7f0000000140)=0x8) 762.105375ms ago: executing program 3 (id=2049): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}]}]}, 0x30}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x4}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f0000000240)='$\xb8\x00', 0x42002, &(0x7f0000000280)={@align, {0x8, 0x4, 0x9, 0x7}}, 0x70, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80800) (async) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='4', 0x1}], 0x1}, 0x8084) (async) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='4', 0x1}], 0x1}, 0x8084) accept(r6, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000800)=ANY=[], 0x141) (async) write$tun(r7, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r8, 0x952de000) 753.139023ms ago: executing program 0 (id=2050): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000002000010027bd7000000000000a0000400000000000000000050016002c"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) recvfrom(r0, &(0x7f0000000000)=""/4, 0x4, 0x40, &(0x7f0000000080)=@caif=@util={0x25, "28d654f8ef26d70a0c5c1ad3612ab1b3"}, 0x80) 531.428042ms ago: executing program 0 (id=2051): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000640)={0xa63, 0xd, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="20020000130001002bbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="242400002019000008002e00feffffff08001c"], 0x220}, 0x1, 0x0, 0x0, 0xc0000d5}, 0x20048840) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(r6, 0x29, 0x42, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 530.379304ms ago: executing program 3 (id=2052): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x2, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x800, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10001}, 0x44) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000700)={r0, &(0x7f0000000600)='#-\'\x00', 0x8002, &(0x7f0000000640)={@align=0x3, {0x400, 0x9, 0x6, 0x2}}, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0xc}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0xc, [@union={0x10, 0x6, 0x0, 0x5, 0x1, 0x5, [{0xc, 0x1, 0x8}, {0x3, 0x3, 0xf}, {0x4, 0x4, 0x800}, {0xd, 0x0, 0x7}, {0x4, 0x5, 0x6}, {0x9, 0x2, 0x7}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x4}, @struct={0x4, 0x3, 0x0, 0x4, 0x1, 0x8, [{0x8, 0x5, 0xa3f}, {0x5, 0x3, 0xfffffff3}, {0x3, 0x1, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x8}}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x53, 0xf}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x200}}, @enum64={0xd, 0x8, 0x0, 0x13, 0x0, 0x4, [{0x3, 0x5, 0x6}, {0x1, 0x13ef, 0x7}, {0x10, 0x2, 0x4}, {0x3, 0x3, 0x1000}, {0x9, 0x5, 0x2}, {0x2, 0x100, 0x2}, {0xa, 0x3, 0x3}, {0xb, 0x80000001, 0x400}]}, @float={0xc, 0x0, 0x0, 0x10, 0x30}]}, {0x0, [0x30, 0x2e, 0x30, 0x61, 0x2e, 0x61, 0x61, 0x61, 0x30, 0x0]}}, &(0x7f0000000440)=""/132, 0x170, 0x84, 0x1, 0x5, 0x10000}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ee1}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 521.918622ms ago: executing program 4 (id=2053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRES16=r4], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r9, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r10, 0x1, 0x85, 0x6, @broadcast}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000800)={0xa0000006}) close(0x3) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 463.663901ms ago: executing program 1 (id=2054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a400, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$unix(0x1, 0x2, 0x0) r1 = socket(0xf, 0x5, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x10, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100)) setsockopt$inet_int(r1, 0x0, 0x27, &(0x7f0000000200)=0x5, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000240), 0x4) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x40, 0x2, 0x80, 0x2ca}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8948, &(0x7f0000000380)={'macsec0\x00', @ifru_settings={0x1, 0x80, @te1=&(0x7f0000000340)={0xa397, 0xa2, 0x100, 0x1}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) r4 = getpid() r5 = getuid() r6 = getgid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={r4, r5, r6}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400808}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6fd}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x76, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_b, @from_mac=@broadcast, {0x8, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x80, 0x4d, @random=0x8001, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x3, 0x0, {0x6, 0x1f93, 0x0, 0xb7, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x8, 0x6a}}, [{0xdd, 0x1c, "93c3695e2efe5e6e7c50954a092b43be13e2db9d5b6f7a29ab13ba61"}, {0xdd, 0x14, "3d6d1dfd28a82ee9a341fa6da883a71c0d1e8934"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24040040}, 0x48800) socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r9, 0x510, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048884}, 0x4000800) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2, 0x8, 0x3, 0x8, 0xe, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x40, 0x2c, 0x2, 0x80000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd27, 0x3501}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd28, 0x3507}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @broadcast}}]}, 0x70}}, 0x20000001) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$llc(r10, &(0x7f00000008c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000900)=0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a40)={0x0, 0x5}, &(0x7f0000000a80)=0x8) 286.389194ms ago: executing program 3 (id=2055): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030040000000000000000000094000100fffffdff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000004000000000000050000000000000030612e20"], 0x0, 0x2c, 0x0, 0x1, 0x8}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030040000000000000000000094000100fffffdff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000004000000000000050000000000000030612e20"], 0x0, 0x2c, 0x0, 0x1, 0x8}, 0x28) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) (async) 221.57315ms ago: executing program 1 (id=2056): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x4, &(0x7f0000000880)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x8, 0x6, 0x18, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="00eaff0000000000000000000004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='c 75:', @ANYRESOCT], 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 0s ago: executing program 2 (id=2057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f00000000c0)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596f8"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) kernel console output (not intermixed with test programs): 9] erspan0: entered allmulticast mode [ 105.623272][ T6469] erspan0: entered promiscuous mode [ 105.631811][ T6469] bridge0: port 3(erspan0) entered blocking state [ 105.638752][ T6469] bridge0: port 3(erspan0) entered forwarding state [ 105.662298][ T6470] syzkaller0: entered promiscuous mode [ 105.668822][ T6470] syzkaller0: entered allmulticast mode [ 105.713464][ T6471] erspan0: left allmulticast mode [ 105.718586][ T6471] erspan0: left promiscuous mode [ 105.750555][ T6469] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 105.783531][ T6471] bridge0: port 3(erspan0) entered disabled state [ 105.874654][ T6469] __nla_validate_parse: 12 callbacks suppressed [ 105.874677][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 105.919218][ T6462] tipc: Resetting bearer [ 105.953698][ T6462] tipc: Disabling bearer [ 105.980354][ T6484] xfrm0: entered promiscuous mode [ 105.985636][ T6484] xfrm0: entered allmulticast mode [ 106.111597][ T6490] Bluetooth: MGMT ver 1.23 [ 106.469166][ T6508] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 106.497402][ T6513] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 106.625065][ T6520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.140'. [ 106.788552][ T6525] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 107.267772][ T6563] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 107.280095][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 107.418010][ T6563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.456727][ T6566] bond1: (slave gretap1): making interface the new active one [ 107.467530][ T6566] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 107.569565][ T6570] netlink: 68 bytes leftover after parsing attributes in process `syz.4.152'. [ 107.670493][ T6573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.153'. [ 107.758763][ T6577] netlink: zone id is out of range [ 107.774823][ T6578] netlink: zone id is out of range [ 107.780343][ T6578] netlink: del zone limit has 8 unknown bytes [ 107.787432][ T6577] netlink: del zone limit has 8 unknown bytes [ 107.963912][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 107.983368][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 108.099736][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.492019][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.502743][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.628351][ T6612] netlink: 228 bytes leftover after parsing attributes in process `syz.0.166'. [ 111.936090][ T6630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.186922][ T6685] __nla_validate_parse: 3 callbacks suppressed [ 112.186944][ T6685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.183'. [ 112.222964][ T6688] netlink: 88 bytes leftover after parsing attributes in process `syz.0.184'. [ 112.243339][ T6687] netlink: 88 bytes leftover after parsing attributes in process `syz.0.184'. [ 112.464493][ T6694] IPv6: sit1: Disabled Multicast RS [ 112.759390][ T6712] batadv_slave_1: entered promiscuous mode [ 112.809636][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 112.873317][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.909800][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 112.926691][ T6702] batadv_slave_1 (unregistering): left promiscuous mode [ 112.956043][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.222909][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 113.422879][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 113.432048][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 113.441250][ T6733] netlink: 'syz.1.198': attribute type 13 has an invalid length. [ 113.451133][ T6731] syzkaller0: entered promiscuous mode [ 113.468389][ T6731] syzkaller0: entered allmulticast mode [ 113.507091][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 113.520649][ T6731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 113.558892][ T6739] hsr_slave_0: left promiscuous mode [ 113.602136][ T6739] hsr_slave_1: left promiscuous mode [ 114.713511][ T6779] netlink: 'syz.3.210': attribute type 30 has an invalid length. [ 114.816230][ T6779] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 114.932606][ T6791] tipc: Started in network mode [ 114.973091][ T6791] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 115.024205][ T6791] tipc: Enabling of bearer rejected, failed to enable media [ 115.074754][ T6791] openvswitch: netlink: IP tunnel dst address not specified [ 115.112472][ T6799] syzkaller0: entered promiscuous mode [ 115.133538][ T6799] syzkaller0: entered allmulticast mode [ 116.204190][ T6832] netlink: 'syz.0.226': attribute type 2 has an invalid length. [ 116.212079][ T6832] netlink: 'syz.0.226': attribute type 11 has an invalid length. [ 116.352601][ T6841] macsec1: entered promiscuous mode [ 116.378428][ T6841] macsec1: entered allmulticast mode [ 117.562894][ T6871] __nla_validate_parse: 12 callbacks suppressed [ 117.562919][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 117.694576][ T6877] netlink: 96 bytes leftover after parsing attributes in process `syz.1.235'. [ 117.948709][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880318ea800: rx timeout, send abort [ 118.377747][ T6921] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.243'. [ 118.399724][ T6923] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:19998 [ 118.451490][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880318e9400: rx timeout, send abort [ 118.460117][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880318ea800: abort rx timeout. Force session deactivation [ 118.503896][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.244'. [ 118.626935][ T6932] netlink: 'syz.1.247': attribute type 3 has an invalid length. [ 118.706457][ T6926] Cannot find del_set index 1 as target [ 118.959864][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880318e9400: abort rx timeout. Force session deactivation [ 119.110216][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 119.416985][ T6982] netlink: 27 bytes leftover after parsing attributes in process `syz.1.257'. [ 119.659034][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 119.935012][ T5893] IPVS: starting estimator thread 0... [ 119.962097][ T7008] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 119.972854][ T7008] netlink: 'syz.2.262': attribute type 2 has an invalid length. [ 120.033190][ T7006] IPVS: using max 24 ests per chain, 57600 per kthread [ 120.383185][ T7003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.745422][ T7019] Cannot find set identified by id 0 to match [ 121.009076][ T7029] bond2: option fail_over_mac: invalid value (127) [ 121.038046][ T7029] bond2 (unregistering): Released all slaves [ 121.191191][ T7034] syz_tun: entered promiscuous mode [ 121.246612][ T7034] syz_tun: left promiscuous mode [ 121.420550][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 121.445857][ T7048] bond2: Unable to set down delay as MII monitoring is disabled [ 121.481905][ T7048] bond2 (unregistering): Released all slaves [ 121.508804][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 121.956997][ T7069] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 121.984522][ T7069] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 122.022598][ T5941] IPVS: starting estimator thread 0... [ 122.036353][ T7069] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 122.134859][ T7075] IPVS: using max 28 ests per chain, 67200 per kthread [ 122.658007][ T7093] netlink: 56 bytes leftover after parsing attributes in process `syz.1.278'. [ 122.705005][ T7093] netlink: 'syz.1.278': attribute type 13 has an invalid length. [ 122.878104][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 122.956418][ T7116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.409744][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 123.543089][ T7147] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001 [ 123.573853][ T7142] bond_slave_0: entered promiscuous mode [ 123.579840][ T7142] bond_slave_1: entered promiscuous mode [ 123.589583][ T5893] IPVS: starting estimator thread 0... [ 123.624717][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 123.647692][ T7150] sctp: [Deprecated]: syz.1.300 (pid 7150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.647692][ T7150] Use struct sctp_sack_info instead [ 123.704864][ T7148] IPVS: using max 24 ests per chain, 57600 per kthread [ 124.137192][ T7174] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 124.154027][ T7174] netlink: 224 bytes leftover after parsing attributes in process `syz.1.308'. [ 124.313995][ T7181] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 124.329472][ T7181] netlink: 224 bytes leftover after parsing attributes in process `syz.1.308'. [ 124.456098][ T7187] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 124.779661][ T7216] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 124.787783][ T7216] netlink: 2 bytes leftover after parsing attributes in process `syz.3.321'. [ 124.797988][ T7216] hsr0: entered promiscuous mode [ 124.804322][ T7216] bridge0: port 3(hsr0) entered blocking state [ 124.810964][ T7216] bridge0: port 3(hsr0) entered disabled state [ 124.819963][ T7216] hsr0: entered allmulticast mode [ 124.825595][ T7216] hsr_slave_0: entered allmulticast mode [ 124.831290][ T7216] hsr_slave_1: entered allmulticast mode [ 124.840579][ T7216] bridge0: port 3(hsr0) entered blocking state [ 124.846959][ T7216] bridge0: port 3(hsr0) entered forwarding state [ 125.129622][ T7232] netlink: 'syz.2.326': attribute type 8 has an invalid length. [ 125.245669][ T7238] geneve3: entered promiscuous mode [ 125.418231][ T7245] dvmrp1: entered allmulticast mode [ 125.425850][ T7247] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 125.464622][ T7245] dvmrp1: left allmulticast mode [ 125.483232][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 125.983288][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 126.366925][ T7291] netlink: 'syz.1.345': attribute type 14 has an invalid length. [ 126.383084][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 126.413546][ T7291] netlink: 'syz.1.345': attribute type 14 has an invalid length. [ 126.460644][ T7281] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.786694][ T7302] syzkaller0: entered promiscuous mode [ 126.792446][ T7302] syzkaller0: entered allmulticast mode [ 128.437330][ T7333] __nla_validate_parse: 2 callbacks suppressed [ 128.437353][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 128.545439][ T7342] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.706811][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 128.707439][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 128.734554][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 128.849679][ T7346] bond3: entered promiscuous mode [ 128.865741][ T7346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.923940][ T7355] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 128.932921][ T7355] ip6tnl0: Caught tx_queue_len zero misconfig [ 129.560777][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 129.677534][ T7387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.808647][ T7395] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 129.924869][ T7395] bond2 (unregistering): Released all slaves [ 130.012699][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 130.894255][ T7441] netlink: 'syz.2.384': attribute type 4 has an invalid length. [ 130.959828][ T7444] nftables ruleset with unbound chain [ 130.967531][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 130.984872][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 131.063385][ T7446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.529741][ T7465] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 131.543997][ T7465] bond5: entered promiscuous mode [ 131.550182][ T7465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.633259][ T7471] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 131.768163][ T7471] bond3: entered promiscuous mode [ 131.785558][ T7471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.944356][ T7478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.951807][ T7478] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 131.969855][ T7478] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 132.002452][ T7478] bond3: (slave ip6gre1): making interface the new active one [ 132.011310][ T7478] ip6gre1: entered promiscuous mode [ 132.026993][ T7478] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 132.194741][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 132.619185][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 132.646143][ T7518] netlink: 'syz.0.408': attribute type 7 has an invalid length. [ 132.706490][ T7522] netlink: 'syz.4.410': attribute type 3 has an invalid length. [ 132.740020][ T7523] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 132.746465][ T7525] netlink: 'syz.3.409': attribute type 9 has an invalid length. [ 132.904205][ T7534] netlink: 'syz.2.411': attribute type 6 has an invalid length. [ 133.160693][ T7546] syzkaller0: entered promiscuous mode [ 133.184427][ T7546] syzkaller0: entered allmulticast mode [ 133.223492][ T7546] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 133.336445][ T7546] bond2: entered promiscuous mode [ 133.342090][ T7546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.393412][ T7553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.422296][ T7553] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 133.440243][ T7553] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 133.452457][ T7560] __nla_validate_parse: 38 callbacks suppressed [ 133.452475][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.488028][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.508769][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.522205][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.531709][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.540761][ T7553] bond2: (slave wireguard0): making interface the new active one [ 133.540818][ T7553] wireguard0: entered promiscuous mode [ 133.555428][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.565106][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.573960][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 133.580961][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.584554][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 133.602601][ T7553] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 133.779843][ T7566] syzkaller0: entered promiscuous mode [ 133.786666][ T7566] syzkaller0: entered allmulticast mode [ 134.211443][ T7597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.375515][ T7606] batadv_slave_0: Caught tx_queue_len zero misconfig [ 134.383287][ T7602] netlink: 'syz.4.431': attribute type 1 has an invalid length. [ 134.398752][ T7602] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.782334][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.800799][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.822705][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.845334][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.012232][ T7634] syzkaller0: entered promiscuous mode [ 135.018045][ T7634] syzkaller0: entered allmulticast mode [ 135.114628][ T30] audit: type=1800 audit(1775954311.534:3): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.432" name="memory.events" dev="tmpfs" ino=468 res=0 errno=0 [ 135.209714][ T7644] bond6: option packets_per_slave: invalid value (1048582) [ 135.219341][ T7644] bond6: option packets_per_slave: allowed values 0 - 65535 [ 135.232795][ T7644] bond6 (unregistering): Released all slaves [ 135.435834][ T7655] syzkaller0: entered promiscuous mode [ 135.441428][ T7655] syzkaller0: entered allmulticast mode [ 135.518142][ T7664] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 136.898677][ T7686] Bluetooth: MGMT ver 1.23 [ 137.765226][ T7675] veth1_macvtap: left promiscuous mode [ 139.132153][ T7701] __nla_validate_parse: 27 callbacks suppressed [ 139.132186][ T7701] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.455'. [ 139.385260][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 139.720468][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.728428][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.847129][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.870464][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.213582][ T7726] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 140.221033][ T7726] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 140.249745][ T7726] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 140.340762][ T1014] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.363525][ T1014] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.414219][ T1014] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.446820][ T1014] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.479434][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 140.490993][ T7762] netlink: 312 bytes leftover after parsing attributes in process `syz.2.468'. [ 140.677396][ T7771] validate_nla: 1 callbacks suppressed [ 140.677416][ T7771] netlink: 'syz.3.469': attribute type 41 has an invalid length. [ 141.027377][ T7789] netlink: 268 bytes leftover after parsing attributes in process `syz.4.474'. [ 141.036548][ T7789] netlink: 136 bytes leftover after parsing attributes in process `syz.4.474'. [ 141.060108][ T7789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 141.167920][ T7795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.317315][ T7794] syz.1.475 (7794) used greatest stack depth: 17472 bytes left [ 141.378179][ T7803] netlink: 'syz.4.478': attribute type 2 has an invalid length. [ 141.430212][ T7803] hmac(sha224): entered promiscuous mode [ 141.525436][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.480'. [ 141.537163][ T7809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.480'. [ 142.267615][ T7830] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 142.277874][ T7830] netlink: 228 bytes leftover after parsing attributes in process `syz.4.486'. [ 142.698666][ T7847] sctp: [Deprecated]: syz.4.489 (pid 7847) Use of int in max_burst socket option. [ 142.698666][ T7847] Use struct sctp_assoc_value instead [ 142.811048][ T7850] pimreg: entered allmulticast mode [ 142.971131][ T7860] sctp: [Deprecated]: syz.1.494 (pid 7860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.971131][ T7860] Use struct sctp_sack_info instead [ 143.085207][ T7864] Cannot find add_set index 1 as target [ 143.148922][ T7868] syzkaller0: entered promiscuous mode [ 143.154988][ T7868] syzkaller0: entered allmulticast mode [ 143.698911][ T7894] wg1 speed is unknown, defaulting to 1000 [ 143.717093][ T7894] wg1 speed is unknown, defaulting to 1000 [ 143.755781][ T7888] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 143.775908][ T7895] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 143.802406][ T7894] wg1 speed is unknown, defaulting to 1000 [ 143.827172][ T7894] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.847037][ T7901] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 143.864472][ T7894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 143.957850][ T7901] bond2: entered promiscuous mode [ 143.963690][ T7901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.972352][ T7894] wg1 speed is unknown, defaulting to 1000 [ 144.014704][ T7903] bond2: entered allmulticast mode [ 144.025023][ T7894] wg1 speed is unknown, defaulting to 1000 [ 144.031378][ T7907] netlink: 'syz.2.508': attribute type 13 has an invalid length. [ 144.052280][ T7907] netlink: 'syz.2.508': attribute type 17 has an invalid length. [ 144.061447][ T7901] bond2: (slave bridge1): making interface the new active one [ 144.070609][ T7901] bridge1: entered promiscuous mode [ 144.076579][ T7901] bridge1: entered allmulticast mode [ 144.087881][ T7901] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 144.111097][ T7894] wg1 speed is unknown, defaulting to 1000 [ 144.268795][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.282599][ T7907] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.296393][ T7907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.315650][ T7903] netlink: 'syz.4.507': attribute type 12 has an invalid length. [ 144.332614][ T7903] __nla_validate_parse: 9 callbacks suppressed [ 144.332634][ T7903] netlink: 132 bytes leftover after parsing attributes in process `syz.4.507'. [ 144.359560][ T7894] wg1 speed is unknown, defaulting to 1000 [ 144.396431][ T7894] wg1 speed is unknown, defaulting to 1000 [ 144.505905][ T7923] netlink: 'syz.1.513': attribute type 2 has an invalid length. [ 144.542337][ T7923] !©9: entered promiscuous mode [ 144.569407][ T7923] netlink: 68 bytes leftover after parsing attributes in process `syz.1.513'. [ 144.631219][ T7926] netlink: 68 bytes leftover after parsing attributes in process `syz.1.513'. [ 144.655959][ T7931] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 144.666998][ T7931] netlink: 'syz.4.515': attribute type 2 has an invalid length. [ 144.722339][ T7931] netlink: 48 bytes leftover after parsing attributes in process `syz.4.515'. [ 144.809209][ T5922] IPVS: starting estimator thread 0... [ 144.895677][ T7940] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 144.916082][ T7939] IPVS: using max 28 ests per chain, 67200 per kthread [ 145.047754][ T7954] netlink: 224 bytes leftover after parsing attributes in process `syz.2.521'. [ 145.451424][ T7980] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1) [ 145.488468][ T7980] bond3 (unregistering): Released all slaves [ 145.499070][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 145.527461][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 145.590355][ T7990] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 145.612761][ T7990] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 145.631931][ T7983] bridge_slave_1: left allmulticast mode [ 145.651364][ T7983] bridge_slave_1: left promiscuous mode [ 145.662828][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.722140][ T7983] bridge_slave_0: left allmulticast mode [ 145.738337][ T7983] bridge_slave_0: left promiscuous mode [ 145.748761][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.845030][ T7992] erspan0: entered promiscuous mode [ 145.850754][ T7992] macsec2: entered promiscuous mode [ 145.868067][ T7992] erspan0: left promiscuous mode [ 146.637122][ T8032] validate_nla: 4 callbacks suppressed [ 146.637144][ T8032] netlink: 'syz.2.533': attribute type 6 has an invalid length. [ 146.693023][ T8032] netlink: 128 bytes leftover after parsing attributes in process `syz.2.533'. [ 147.203062][ T8060] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 147.388751][ T8060] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.688803][ T8076] Cannot find del_set index 0 as target [ 147.896801][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.546'. [ 147.907283][ T8081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.546'. [ 148.211920][ T8101] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 148.290981][ T8101] veth0_vlan: left promiscuous mode [ 148.302315][ T8101] veth0_vlan: entered promiscuous mode [ 148.354895][ T8101] team0: Device veth0_vlan failed to register rx_handler [ 148.402328][ T8102] nbd: nbd64 already in use [ 148.463450][ T8090] netlink: get zone limit has 4 unknown bytes [ 148.508409][ T8115] team0: entered promiscuous mode [ 148.543129][ T8115] team_slave_0: entered promiscuous mode [ 148.550344][ T8115] team_slave_1: entered promiscuous mode [ 148.574368][ T8115] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 148.662777][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.779050][ T8128] FAULT_INJECTION: forcing a failure. [ 148.779050][ T8128] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.856123][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.2.556 Not tainted syzkaller #0 PREEMPT(full) [ 148.856152][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.856174][ T8128] Call Trace: [ 148.856182][ T8128] [ 148.856192][ T8128] dump_stack_lvl+0xe8/0x150 [ 148.856236][ T8128] should_fail_ex+0x412/0x560 [ 148.856277][ T8128] _copy_from_user+0x2d/0xb0 [ 148.856306][ T8128] __sys_bpf+0x229/0x950 [ 148.856330][ T8128] ? __pfx___sys_bpf+0x10/0x10 [ 148.856366][ T8128] ? ksys_write+0x242/0x270 [ 148.856393][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 148.856426][ T8128] __x64_sys_bpf+0x7c/0x90 [ 148.856458][ T8128] do_syscall_64+0x14d/0xf80 [ 148.856480][ T8128] ? trace_irq_disable+0x3b/0x150 [ 148.856498][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.856520][ T8128] ? clear_bhb_loop+0x40/0x90 [ 148.856547][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.856569][ T8128] RIP: 0033:0x7f4223d9c819 [ 148.856593][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.856611][ T8128] RSP: 002b:00007f4224c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.856648][ T8128] RAX: ffffffffffffffda RBX: 00007f4224015fa0 RCX: 00007f4223d9c819 [ 148.856663][ T8128] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 148.856676][ T8128] RBP: 00007f4224c21090 R08: 0000000000000000 R09: 0000000000000000 [ 148.856689][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.856701][ T8128] R13: 00007f4224016038 R14: 00007f4224015fa0 R15: 00007fffea4ffe38 [ 148.856734][ T8128] [ 148.867590][ T5991] udevd[5991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 149.131504][ T8137] delete_channel: no stack [ 149.336085][ T8147] vlan3: entered allmulticast mode [ 149.341280][ T8147] bridge1: entered allmulticast mode [ 149.420271][ T8148] dvmrp0: entered allmulticast mode [ 149.610095][ T8137] bridge1: port 1(bond2) entered blocking state [ 149.658511][ T8137] bridge1: port 1(bond2) entered disabled state [ 149.682363][ T8137] bond2: entered allmulticast mode [ 149.714634][ T8137] bond2: entered promiscuous mode [ 149.866892][ T8168] gre0 speed is unknown, defaulting to 1000 [ 149.896573][ T8168] gre0 speed is unknown, defaulting to 1000 [ 149.960615][ T8168] gre0 speed is unknown, defaulting to 1000 [ 149.992604][ T8170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.427909][ T8168] infiniband syz1: set active [ 150.453286][ T8168] infiniband syz1: added gre0 [ 150.561286][ T5938] gre0 speed is unknown, defaulting to 1000 [ 150.569459][ T5938] syz1: Port: 1 Link ACTIVE [ 150.645674][ T8168] RDS/IB: syz1: added [ 150.651210][ T8168] smc: adding ib device syz1 with port count 1 [ 150.754408][ T8168] smc: ib device syz1 port 1 has no pnetid [ 150.762416][ T5922] gre0 speed is unknown, defaulting to 1000 [ 150.828157][ T8168] gre0 speed is unknown, defaulting to 1000 [ 151.299176][ T8231] __nla_validate_parse: 5 callbacks suppressed [ 151.299198][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 151.316352][ T8234] xt_connbytes: Forcing CT accounting to be enabled [ 151.345668][ T8234] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 151.500088][ T8241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 152.053799][ T8168] gre0 speed is unknown, defaulting to 1000 [ 152.101567][ T8273] wg1 speed is unknown, defaulting to 1000 [ 152.162424][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 152.190454][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 152.533819][ T8291] wg1 speed is unknown, defaulting to 1000 [ 152.568859][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 152.728426][ T8168] gre0 speed is unknown, defaulting to 1000 [ 153.006464][ T8273] gre0 speed is unknown, defaulting to 1000 [ 153.256916][ T8291] gre0 speed is unknown, defaulting to 1000 [ 153.711418][ T8168] gre0 speed is unknown, defaulting to 1000 [ 154.034137][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 154.375915][ T8168] gre0 speed is unknown, defaulting to 1000 [ 154.471970][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 154.589327][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 155.116419][ T8355] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 155.193211][ T8361] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 155.203384][ T8355] team0: Port device dummy0 added [ 155.282034][ T8361] team0: Port device dummy0 removed [ 155.301224][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 155.406760][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 155.514943][ T8361] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.761675][ T8367] bond4: entered promiscuous mode [ 155.773554][ T8367] bond4: entered allmulticast mode [ 156.673822][ T8398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.857820][ T8404] __nla_validate_parse: 2 callbacks suppressed [ 156.857840][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 157.011261][ T8408] rdma_rxe: rxe_newlink: failed to add lo [ 157.085003][ T8410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.092632][ T8410] IPv6: NLM_F_CREATE should be set when creating new route [ 157.114814][ T8414] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 157.139311][ T8416] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 794632, id = 0 [ 157.145580][ T8414] netlink: 248 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.363790][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 157.707254][ T8434] syzkaller0: entered promiscuous mode [ 157.712810][ T8434] syzkaller0: entered allmulticast mode [ 157.859830][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 158.137302][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 158.157134][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 158.369213][ T8475] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 158.377913][ T8475] netlink: 96 bytes leftover after parsing attributes in process `syz.1.641'. [ 158.387408][ T8475] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 158.395314][ T8475] netlink: 'syz.1.641': attribute type 8 has an invalid length. [ 158.403277][ T8475] netlink: 606 bytes leftover after parsing attributes in process `syz.1.641'. [ 159.395481][ T8475] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 159.441194][ T8480] batman_adv: batadv0: Adding interface: gretap2 [ 159.459983][ T8480] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.490280][ T8480] batman_adv: batadv0: Interface activated: gretap2 [ 159.553517][ T8488] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 159.606125][ T8488] l24): entered promiscuous mode [ 159.662379][ T8496] netlink: 180 bytes leftover after parsing attributes in process `syz.0.646'. [ 159.686915][ T8497] netlink: 180 bytes leftover after parsing attributes in process `syz.0.646'. [ 159.786768][ T8503] tipc: Enabled bearer , priority 0 [ 159.825524][ T8505] syzkaller0: entered promiscuous mode [ 159.831239][ T8505] syzkaller0: entered allmulticast mode [ 159.903035][ T8507] FAULT_INJECTION: forcing a failure. [ 159.903035][ T8507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.919752][ T8513] vlan3: entered allmulticast mode [ 159.926591][ T8513] macvtap0: entered allmulticast mode [ 159.932161][ T8513] veth0_macvtap: entered allmulticast mode [ 159.942563][ T8507] CPU: 0 UID: 0 PID: 8507 Comm: syz.2.649 Not tainted syzkaller #0 PREEMPT(full) [ 159.942590][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.942602][ T8507] Call Trace: [ 159.942610][ T8507] [ 159.942619][ T8507] dump_stack_lvl+0xe8/0x150 [ 159.942655][ T8507] should_fail_ex+0x412/0x560 [ 159.942695][ T8507] _copy_to_user+0x31/0xb0 [ 159.942724][ T8507] simple_read_from_buffer+0xe1/0x170 [ 159.942768][ T8507] proc_fail_nth_read+0x1bb/0x230 [ 159.942803][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.942839][ T8507] ? rw_verify_area+0x2a6/0x4d0 [ 159.942861][ T8507] ? __fget_files+0x2a/0x420 [ 159.942880][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.942916][ T8507] vfs_read+0x20c/0xa70 [ 159.942942][ T8507] ? fdget_pos+0x246/0x320 [ 159.942967][ T8507] ? __pfx___mutex_lock+0x10/0x10 [ 159.942990][ T8507] ? __pfx_vfs_read+0x10/0x10 [ 159.943015][ T8507] ? __fget_files+0x2a/0x420 [ 159.943038][ T8507] ? __fget_files+0x3a0/0x420 [ 159.943057][ T8507] ? __fget_files+0x2a/0x420 [ 159.943085][ T8507] ksys_read+0x150/0x270 [ 159.943112][ T8507] ? __pfx_ksys_read+0x10/0x10 [ 159.943154][ T8507] do_syscall_64+0x14d/0xf80 [ 159.943174][ T8507] ? trace_irq_disable+0x3b/0x150 [ 159.943192][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.943214][ T8507] ? clear_bhb_loop+0x40/0x90 [ 159.943241][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.943262][ T8507] RIP: 0033:0x7f4223d5d04e [ 159.943282][ T8507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.943299][ T8507] RSP: 002b:00007f4224c20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.943321][ T8507] RAX: ffffffffffffffda RBX: 00007f4224c216c0 RCX: 00007f4223d5d04e [ 159.943336][ T8507] RDX: 000000000000000f RSI: 00007f4224c210a0 RDI: 0000000000000004 [ 159.943349][ T8507] RBP: 00007f4224c21090 R08: 0000000000000000 R09: 0000000000000000 [ 159.943362][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.943374][ T8507] R13: 00007f4224016038 R14: 00007f4224015fa0 R15: 00007fffea4ffe38 [ 159.943408][ T8507] [ 160.252613][ T8505] tipc: Resetting bearer [ 160.301269][ T8505] tipc: Disabling bearer [ 160.416738][ T8531] veth0: entered promiscuous mode [ 160.438074][ T8530] veth0: left promiscuous mode [ 160.830849][ T8557] openvswitch: netlink: Flow key attr not present in new flow. [ 160.865684][ T8548] team_slave_0 (unregistering): left promiscuous mode [ 160.874550][ T8548] team0: Port device team_slave_0 removed [ 160.929382][ T8540] batman_adv: batadv0: Adding interface: ipvlan2 [ 160.943069][ T5146] block nbd0: Receive control failed (result -32) [ 160.968285][ T8540] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.994522][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.006713][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.030119][ T8540] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 161.067076][ T8560] xt_ecn: cannot match TCP bits for non-tcp packets [ 161.104198][ T8549] wg1 speed is unknown, defaulting to 1000 [ 161.115590][ T8549] gre0 speed is unknown, defaulting to 1000 [ 161.159030][ T8564] xt_TCPMSS: Only works on TCP SYN packets [ 161.386671][ T8583] rdma_op ffff88803637b1f0 conn xmit_rdma 0000000000000000 [ 161.606644][ T8592] netlink: 'syz.0.668': attribute type 3 has an invalid length. [ 161.708712][ T8588] vlan4: entered allmulticast mode [ 161.729252][ T8588] bridge4: entered allmulticast mode [ 162.017593][ T8617] __nla_validate_parse: 26 callbacks suppressed [ 162.017611][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 162.155792][ T8627] openvswitch: netlink: Actions may not be safe on all matching packets [ 162.281670][ T8627] bond3: Unable to set down delay as MII monitoring is disabled [ 162.328433][ T8627] bond3 (unregistering): Released all slaves [ 162.528589][ T8640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.678'. [ 162.766771][ T8645] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 162.823813][ T8645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.158077][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.684'. [ 163.703484][ T8679] lo: Caught tx_queue_len zero misconfig [ 164.119928][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 164.450017][ T8693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.690'. [ 164.679373][ T8715] netlink: 1 bytes leftover after parsing attributes in process `syz.1.693'. [ 164.731927][ T8718] syzkaller1: entered promiscuous mode [ 164.739588][ T8718] syzkaller1: entered allmulticast mode [ 164.752695][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 165.154648][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 165.176834][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.700'. [ 165.182091][ T8729] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 165.227496][ T8736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.700'. [ 165.261359][ T8738] xt_policy: neither incoming nor outgoing policy selected [ 165.272723][ T8729] bond4: entered promiscuous mode [ 165.281922][ T8729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.303539][ T8738] bond4: entered allmulticast mode [ 165.519226][ T8744] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 165.574447][ T8746] netlink: 'syz.2.703': attribute type 39 has an invalid length. [ 165.885426][ T8759] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 165.892702][ T8759] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.248137][ T8772] tipc: Started in network mode [ 166.254891][ T8772] tipc: Node identity d6df61829f72, cluster identity 4711 [ 166.265435][ T8772] tipc: Enabled bearer , priority 0 [ 166.398224][ T8772] syzkaller0: entered promiscuous mode [ 166.403965][ T8772] syzkaller0: entered allmulticast mode [ 166.411825][ T8772] tipc: Resetting bearer [ 166.431577][ T8770] tipc: Resetting bearer [ 168.436891][ T8770] tipc: Disabling bearer [ 168.459045][ T7749] tipc: Node number set to 1236099458 [ 168.697531][ T8822] __nla_validate_parse: 6 callbacks suppressed [ 168.697554][ T8822] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.723'. [ 168.768509][ T8812] wg1 speed is unknown, defaulting to 1000 [ 168.816147][ T8812] gre0 speed is unknown, defaulting to 1000 [ 168.827513][ T8826] openvswitch: netlink: Flow key attr not present in new flow. [ 168.936557][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 169.468663][ T8857] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.732'. [ 169.492226][ T8857] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.732'. [ 169.511302][ T8857] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 169.568276][ T8861] lo speed is unknown, defaulting to 1000 [ 169.585826][ T8861] lo speed is unknown, defaulting to 1000 [ 169.647073][ T8861] lo speed is unknown, defaulting to 1000 [ 169.702096][ T8861] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 169.831586][ T8861] lo speed is unknown, defaulting to 1000 [ 169.840846][ T8861] lo speed is unknown, defaulting to 1000 [ 169.849499][ T8861] lo speed is unknown, defaulting to 1000 [ 169.857915][ T8861] lo speed is unknown, defaulting to 1000 [ 169.870139][ T8861] lo speed is unknown, defaulting to 1000 [ 169.878687][ T8861] lo speed is unknown, defaulting to 1000 [ 170.202066][ T8888] netlink: 100 bytes leftover after parsing attributes in process `syz.4.742'. [ 170.228791][ T8888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.472292][ T8897] sctp: [Deprecated]: syz.2.743 (pid 8897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.472292][ T8897] Use struct sctp_sack_info instead [ 170.521416][ T8897] netlink: 'syz.2.743': attribute type 8 has an invalid length. [ 170.863590][ T8905] : renamed from bond_slave_0 (while UP) [ 170.941902][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 171.004445][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 171.245196][ T8924] tipc: Cannot configure node identity twice [ 171.311442][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 171.624132][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 171.636026][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 171.878346][ T8953] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 172.431310][ T8957] syzkaller1: entered promiscuous mode [ 172.437347][ T8957] syzkaller1: entered allmulticast mode [ 172.761523][ T8988] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 172.799429][ T8988] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 172.811015][ T8988] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 172.853579][ T8990] bond3: (slave gretap1): making interface the new active one [ 172.866026][ T8990] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 173.425231][ T9001] openvswitch: netlink: Message has 16 unknown bytes. [ 173.649336][ T8999] geneve0: entered promiscuous mode [ 173.660649][ T8999] geneve0: entered allmulticast mode [ 173.998614][ T9023] __nla_validate_parse: 9 callbacks suppressed [ 173.998635][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 174.014555][ T9021] gre0 speed is unknown, defaulting to 1000 [ 174.154800][ T9030] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.783'. [ 174.176219][ T9030] openvswitch: netlink: Message has 16 unknown bytes. [ 174.346891][ T9021] lo speed is unknown, defaulting to 1000 [ 174.387470][ T9037] netlink: 'syz.1.786': attribute type 33 has an invalid length. [ 174.413300][ T9037] netlink: 152 bytes leftover after parsing attributes in process `syz.1.786'. [ 174.518942][ T9037] bond5: option primary_reselect: invalid value (4) [ 174.586796][ T9037] bond5 (unregistering): Released all slaves [ 174.966423][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.791'. [ 175.053905][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 175.528265][ T9079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.798'. [ 175.593972][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 175.930593][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 176.631407][ T9112] syzkaller0: entered promiscuous mode [ 176.657563][ T9112] syzkaller0: entered allmulticast mode [ 177.012046][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'. [ 178.389675][ T9160] gre0 speed is unknown, defaulting to 1000 [ 178.510203][ T9161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 178.530433][ T9168] netlink: 'syz.4.818': attribute type 6 has an invalid length. [ 178.593877][ T9173] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 178.710027][ T9178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.743410][ T9180] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 178.809647][ T9182] syz_tun: entered allmulticast mode [ 179.089686][ T9195] __nla_validate_parse: 2 callbacks suppressed [ 179.089709][ T9195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.825'. [ 179.316890][ T9160] lo speed is unknown, defaulting to 1000 [ 179.439707][ T9206] gre0 speed is unknown, defaulting to 1000 [ 179.781034][ T5991] udevd[5991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.662390][ T9181] syz_tun: left allmulticast mode [ 180.698265][ T9206] lo speed is unknown, defaulting to 1000 [ 180.804339][ T9217] netlink: 'syz.0.830': attribute type 13 has an invalid length. [ 180.960801][ T9222] ipt_REJECT: TCP_RESET invalid for non-tcp [ 181.056213][ T9224] netlink: 'syz.1.833': attribute type 10 has an invalid length. [ 181.099001][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.106881][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.119087][ T9225] netlink: 'syz.1.833': attribute type 10 has an invalid length. [ 181.131815][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 181.187303][ T9217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.206747][ T9217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.353791][ T9217] batman_adv: batadv0: Interface deactivated: gretap2 [ 181.386306][ T9219] geneve2: entered promiscuous mode [ 181.414084][ T9224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.448108][ T9224] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 181.460869][ T9225] batadv0: entered promiscuous mode [ 181.466843][ T9225] batadv0: entered allmulticast mode [ 181.476057][ T9225] bond0: (slave batadv0): Releasing backup interface [ 181.494600][ T9225] bridge0: port 3(batadv0) entered blocking state [ 181.501204][ T9225] bridge0: port 3(batadv0) entered disabled state [ 181.511805][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.552915][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.587897][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.611334][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.713688][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 181.723371][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 201.676870][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 201.873557][ T9259] netlink: 260 bytes leftover after parsing attributes in process `syz.0.842'. [ 201.921616][ T30] audit: type=1800 audit(1775954378.334:4): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.843" name="blkio.bfq.time_recursive" dev="tmpfs" ino=903 res=0 errno=0 [ 201.947819][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 201.966373][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 201.974659][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 201.987020][ T9270] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.841'. [ 202.258428][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 202.475114][ T9286] bond5 (unregistering): Released all slaves [ 202.568929][ T9292] bridge0: port 4(vlan4) entered blocking state [ 202.583673][ T9292] bridge0: port 4(vlan4) entered disabled state [ 202.606450][ T9292] vlan4: entered allmulticast mode [ 202.633709][ T9292] geneve0: entered allmulticast mode [ 202.641616][ T9292] vlan4: entered promiscuous mode [ 202.646925][ T9292] geneve0: entered promiscuous mode [ 202.675031][ T9286] gretap1: entered promiscuous mode [ 203.085159][ T9296] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 203.160732][ T9296] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.207941][ T9321] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 203.324773][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.859'. [ 203.368619][ T9307] bond7: (slave veth9): Enslaving as an active interface with a down link [ 203.420082][ T9328] bond5: (slave geneve3): making interface the new active one [ 203.450747][ T9328] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 203.488063][ T9321] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.721444][ T319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.731009][ T319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.742056][ T9334] netlink: 292 bytes leftover after parsing attributes in process `syz.3.861'. [ 203.801884][ T5828] gre0 speed is unknown, defaulting to 1000 [ 203.842626][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 203.911772][ T319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.941227][ T9351] xt_hashlimit: overflow, try lower: 0/0 [ 203.943243][ T319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 203.990856][ T9352] xt_hashlimit: overflow, try lower: 0/0 [ 204.128673][ T9365] gre0: entered promiscuous mode [ 204.136473][ T9365] gre0: entered allmulticast mode [ 204.194925][ T9368] syzkaller0: entered promiscuous mode [ 204.203398][ T9368] syzkaller0: entered allmulticast mode [ 204.882635][ T9397] syzkaller0: entered promiscuous mode [ 204.888892][ T9397] syzkaller0: entered allmulticast mode [ 205.050918][ T9412] tipc: Enabled bearer , priority 0 [ 205.126231][ T30] audit: type=1107 audit(1775954381.534:5): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 205.139505][ T9412] syzkaller0: entered promiscuous mode [ 205.149719][ T9412] syzkaller0: entered allmulticast mode [ 205.254424][ T9426] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 205.256660][ T9412] bond0: entered promiscuous mode [ 205.268235][ T9412] bond_slave_0: entered promiscuous mode [ 205.274818][ T9412] bond_slave_1: entered promiscuous mode [ 205.285393][ T9427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.306005][ T9426] NCSI netlink: No device for ifindex 0 [ 205.314452][ T9412] bond0: left promiscuous mode [ 205.319284][ T9412] bond_slave_0: left promiscuous mode [ 205.371619][ T9412] bond_slave_1: left promiscuous mode [ 205.452382][ T9410] tipc: Resetting bearer [ 205.487900][ T9410] tipc: Disabling bearer [ 205.764822][ T9445] netlink: 'syz.3.890': attribute type 39 has an invalid length. [ 205.920799][ T9445] veth0_macvtap: left allmulticast mode [ 205.936845][ T9445] veth0_macvtap: left promiscuous mode [ 206.676419][ T9489] syzkaller1: entered promiscuous mode [ 206.714125][ T9489] syzkaller1: entered allmulticast mode [ 207.267032][ T9512] gre0 speed is unknown, defaulting to 1000 [ 207.287278][ T9515] __nla_validate_parse: 11 callbacks suppressed [ 207.287296][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.909'. [ 207.335082][ T9515] ipvlan1: entered promiscuous mode [ 207.346275][ T9515] ipvlan1: left promiscuous mode [ 207.648167][ T9512] lo speed is unknown, defaulting to 1000 [ 207.728803][ T9529] netlink: 27 bytes leftover after parsing attributes in process `syz.3.914'. [ 207.761659][ T9530] netlink: 27 bytes leftover after parsing attributes in process `syz.3.914'. [ 207.814430][ T9533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.857713][ T9529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.981864][ T9536] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.288545][ T9544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'. [ 208.313835][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 208.670775][ T9552] syzkaller0: entered promiscuous mode [ 208.677119][ T9552] syzkaller0: entered allmulticast mode [ 208.683085][ T9550] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 208.762803][ T9556] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 208.780137][ T9554] syzkaller0: entered promiscuous mode [ 208.787474][ T9554] syzkaller0: entered allmulticast mode [ 209.122135][ T9572] netlink: 160 bytes leftover after parsing attributes in process `syz.4.927'. [ 209.246021][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 209.450741][ T9586] netlink: 'syz.4.930': attribute type 10 has an invalid length. [ 209.464036][ T9586] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.486054][ T9586] bond0: (slave team0): Enslaving as an active interface with an up link [ 209.716458][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 209.731777][ T9603] sctp: [Deprecated]: syz.4.935 (pid 9603) Use of int in max_burst socket option. [ 209.731777][ T9603] Use struct sctp_assoc_value instead [ 210.609839][ T9638] gre0 speed is unknown, defaulting to 1000 [ 211.025331][ T9638] lo speed is unknown, defaulting to 1000 [ 211.044524][ T9654] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.949'. [ 212.032754][ T9697] netlink: 14 bytes leftover after parsing attributes in process `syz.0.962'. [ 212.316406][ T9716] netlink: 56 bytes leftover after parsing attributes in process `syz.0.966'. [ 212.425630][ T9719] netlink: 'syz.3.967': attribute type 11 has an invalid length. [ 212.439097][ T9722] pimreg: left allmulticast mode [ 212.531224][ T9727] hmó3)óÿ: entered promiscuous mode [ 212.538367][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 212.551879][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'. [ 212.605699][ T9729] netlink: 'syz.0.968': attribute type 20 has an invalid length. [ 212.927993][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 212.958423][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 213.129922][ T9752] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.978'. [ 213.233946][ T9755] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 213.632005][ T9772] xt_hashlimit: overflow, rate too high: 0 [ 213.921292][ T9782] gre0 speed is unknown, defaulting to 1000 [ 214.119687][ T9794] netlink: 'syz.0.987': attribute type 21 has an invalid length. [ 214.133592][ T9794] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.141755][ T9794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.149165][ T9794] IPv6: NLM_F_CREATE should be set when creating new route [ 214.156581][ T9794] IPv6: NLM_F_CREATE should be set when creating new route [ 214.163870][ T9794] IPv6: NLM_F_CREATE should be set when creating new route [ 214.307938][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 214.343460][ T9799] tipc: Enabled bearer , priority 0 [ 214.484536][ T9806] netlink: 'syz.2.991': attribute type 2 has an invalid length. [ 214.492888][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.991'. [ 214.662798][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 214.703306][ T9821] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.996'. [ 214.779730][ T9782] lo speed is unknown, defaulting to 1000 [ 215.508025][ T7749] tipc: Node number set to 2896195022 [ 215.740257][ T9848] openvswitch: netlink: Missing key (keys=40, expected=80) [ 215.758655][ T9848] netlink: 'syz.3.1003': attribute type 4 has an invalid length. [ 216.250029][ T9862] syzkaller0: entered promiscuous mode [ 216.273047][ T9862] syzkaller0: entered allmulticast mode [ 216.588480][ T9877] syzkaller0: entered promiscuous mode [ 216.602754][ T9877] syzkaller0: entered allmulticast mode [ 217.324931][ T9910] __nla_validate_parse: 9 callbacks suppressed [ 217.324956][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 217.600128][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 219.117808][ T9931] netlink: 'syz.2.1027': attribute type 30 has an invalid length. [ 219.124688][ T9927] x_tables: duplicate underflow at hook 1 [ 219.162187][ T9930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.249809][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1030'. [ 219.312701][ T9941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1030'. [ 219.531617][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 219.647608][ T9970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1036'. [ 219.716952][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 220.394403][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 220.502816][ T9986] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 220.760879][ T9996] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 220.909048][ T9996] bond6: entered promiscuous mode [ 220.941472][ T9996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.950344][T10004] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1045'. [ 221.025033][T10002] RDS: rds_bind could not find a transport for 0:41b9:f72:5ca6:96dd:29a9:4100:9, load rds_tcp or rds_rdma? [ 221.266873][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 221.699110][T10043] gre0 speed is unknown, defaulting to 1000 [ 222.040613][T10067] batadv_slave_1: entered promiscuous mode [ 222.061003][T10043] lo speed is unknown, defaulting to 1000 [ 222.068873][T10067] batadv_slave_1 (unregistering): left promiscuous mode [ 222.083185][T10067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.722476][T10088] __nla_validate_parse: 5 callbacks suppressed [ 222.722496][T10088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1067'. [ 223.284827][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 223.481317][T10111] team0: No ports can be present during mode change [ 223.657354][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 249.417240][T10180] syzkaller0: entered promiscuous mode [ 249.422821][T10180] syzkaller0: entered allmulticast mode [ 249.431536][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 249.443903][T10180] 0: reclassify loop, rule prio 0, protocol 800 [ 249.561054][T10188] sctp: [Deprecated]: syz.3.1096 (pid 10188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.561054][T10188] Use struct sctp_sack_info instead [ 249.622415][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 249.637113][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 250.171141][T10211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.178673][T10211] IPv6: NLM_F_CREATE should be set when creating new route [ 250.215081][T10211] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 250.367584][T10211] veth0_vlan: left promiscuous mode [ 250.375155][T10211] veth0_vlan: entered promiscuous mode [ 250.418069][T10211] team0: Device veth0_vlan failed to register rx_handler [ 250.580838][T10219] gre0 speed is unknown, defaulting to 1000 [ 250.692710][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1106'. [ 250.702467][T10226] 8021q: VLANs not supported on wg0 [ 250.810278][T10231] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 250.829889][T10231] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1108'. [ 251.117732][T10249] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 251.198294][T10249] bond3: entered promiscuous mode [ 251.236466][T10249] bond3: entered allmulticast mode [ 251.242155][T10249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.256580][T10219] lo speed is unknown, defaulting to 1000 [ 251.282656][T10251] erspan2: entered allmulticast mode [ 251.294945][T10251] bond3: (slave erspan2): making interface the new active one [ 251.302681][T10251] erspan2: entered promiscuous mode [ 251.310991][T10251] bond3: (slave erspan2): Enslaving as an active interface with an up link [ 251.320717][T10253] netlink: 'syz.2.1114': attribute type 12 has an invalid length. [ 251.413608][T10266] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 251.717025][T10285] tipc: Enabling of bearer rejected, failed to enable media [ 252.099355][T10305] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1123'. [ 252.366790][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.403847][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.540721][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 252.625406][T10333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.755285][T10338] veth5: entered promiscuous mode [ 253.247444][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 253.257320][T10371] netlink: 'syz.4.1143': attribute type 39 has an invalid length. [ 253.278920][T10371] veth0_macvtap: left promiscuous mode [ 253.397932][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 253.700943][T10398] IPVS: length: 149 != 8 [ 253.804617][T10402] wg2: Caught tx_queue_len zero misconfig [ 253.874513][T10406] netlink: 'syz.2.1155': attribute type 2 has an invalid length. [ 253.899553][T10406] !©9: entered promiscuous mode [ 253.909310][T10404] syzkaller0: entered promiscuous mode [ 253.915816][T10404] syzkaller0: entered allmulticast mode [ 253.936046][T10406] netlink: 'syz.2.1155': attribute type 2 has an invalid length. [ 254.006949][T10406] !©9: left promiscuous mode [ 254.137932][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 254.293595][T10419] gre0 speed is unknown, defaulting to 1000 [ 254.521104][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 254.597688][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1168'. [ 254.614628][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 254.643338][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1168'. [ 254.652509][T10437] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1167'. [ 255.007600][T10419] lo speed is unknown, defaulting to 1000 [ 255.044386][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 255.315485][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 255.527791][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1175'. [ 255.580840][T10469] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 255.599247][T10483] netlink: 'syz.0.1178': attribute type 4 has an invalid length. [ 255.629980][ T1014] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.649317][ T1014] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.669670][ T1014] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.695695][T10463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.754745][ T1014] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.151174][T10507] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1185'. [ 256.319364][T10517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1189'. [ 256.445976][T10519] openvswitch: netlink: Flow actions attr not present in new flow. [ 256.747870][T10546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.385385][T10522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.598792][T10562] __nla_validate_parse: 6 callbacks suppressed [ 259.598811][T10562] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1203'. [ 259.617216][T10562] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1203'. [ 259.659180][T10564] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 259.667616][T10568] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 259.671569][T10557] gre0 speed is unknown, defaulting to 1000 [ 259.696014][T10558] pim6reg1: entered promiscuous mode [ 259.715349][T10558] pim6reg1: entered allmulticast mode [ 259.724273][T10566] gretap0: entered promiscuous mode [ 259.960373][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 260.001380][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 260.090769][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 260.214029][T10557] lo speed is unknown, defaulting to 1000 [ 260.268975][ T30] audit: type=1107 audit(1775954436.684:6): pid=10591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='é?`ùø¢`kZPvkÝÆùEàé×4|ö¥Cû1Éê1©[¥Ð¸ã½óÁ àiÖýbÒWŒ‹‰/fE‹rð页üq„¶óõIo:ŽŠ¶—ÑV' [ 260.271032][T10593] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 260.320807][T10593] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1212'. [ 260.356032][T10593] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1212'. [ 260.369351][T10593] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 260.384342][T10593] netlink: 'syz.1.1212': attribute type 8 has an invalid length. [ 260.399219][T10593] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1212'. [ 260.415014][T10601] x_tables: duplicate underflow at hook 3 [ 260.549861][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 260.572147][T10610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1215'. [ 260.812673][T10616] bond8: entered promiscuous mode [ 260.818393][T10616] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.011329][T10629] netlink: 'syz.2.1223': attribute type 12 has an invalid length. [ 261.095040][T10633] team_slave_1: Caught tx_queue_len zero misconfig [ 261.305010][T10644] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 261.366444][T10644] bond9: entered promiscuous mode [ 261.372433][T10644] 8021q: adding VLAN 0 to HW filter on device bond9 [ 261.511394][T10656] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 261.633141][T10656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.670027][T10663] geneve4: entered promiscuous mode [ 262.623310][T10695] veth0: entered promiscuous mode [ 262.634577][T10694] veth0: left promiscuous mode [ 263.185297][T10721] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 263.202329][T10730] openvswitch: netlink: IPv4 tun info is not correct [ 263.221645][T10721] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 263.391376][T10726] team1: entered promiscuous mode [ 263.412158][T10726] team1: entered allmulticast mode [ 263.435061][T10726] 8021q: adding VLAN 0 to HW filter on device team1 [ 263.454675][T10731] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 263.556754][T10731] team2: entered promiscuous mode [ 263.561876][T10731] team2: entered allmulticast mode [ 263.595490][T10731] 8021q: adding VLAN 0 to HW filter on device team2 [ 263.624541][T10736] @ÿ: renamed from veth0_vlan [ 263.738658][T10727] syzkaller0: entered promiscuous mode [ 263.749768][T10727] syzkaller0: entered allmulticast mode [ 265.463876][T10752] syzkaller1: entered allmulticast mode [ 265.607572][T10788] __nla_validate_parse: 82 callbacks suppressed [ 265.607596][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 265.629296][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 265.639247][T10788] netlink: 'syz.4.1266': attribute type 12 has an invalid length. [ 265.647590][T10788] netlink: 'syz.4.1266': attribute type 13 has an invalid length. [ 265.770637][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 265.974398][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 265.995864][T10807] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.006026][T10807] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 51502 - 0 [ 266.092520][T10807] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.104265][T10807] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 51502 - 0 [ 266.368447][T10807] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.381941][T10807] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 51502 - 0 [ 266.480704][T10807] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.501075][T10807] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 51502 - 0 [ 266.540472][T10825] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1280'. [ 266.596227][T10825] xt_TCPMSS: Only works on TCP SYN packets [ 266.712467][ T1014] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 51502 - 0 [ 266.738883][ T1014] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.749148][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 266.781374][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 51502 - 0 [ 266.795868][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.837913][ T996] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 51502 - 0 [ 266.846518][ T996] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 266.888065][T10807] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51502 - 0 [ 266.902305][T10807] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.971935][T10807] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51502 - 0 [ 266.987290][T10807] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 267.188134][T10807] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51502 - 0 [ 267.209344][T10807] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 267.303668][T10849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1283'. [ 267.359153][T10856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 267.452625][T10849] ip6gre2: entered promiscuous mode [ 267.464091][T10849] ip6gre2: entered allmulticast mode [ 267.844969][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 267.860136][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 268.402011][T10902] tipc: Enabled bearer , priority 0 [ 268.409795][T10902] syzkaller0: entered promiscuous mode [ 268.417309][T10902] syzkaller0: entered allmulticast mode [ 268.468525][T10902] tipc: Resetting bearer [ 268.486495][T10901] tipc: Resetting bearer [ 268.506886][T10901] tipc: Disabling bearer [ 268.543801][T10910] netlink: 'syz.0.1297': attribute type 3 has an invalid length. [ 268.601871][T10912] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 268.615482][T10913] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 268.832021][T10923] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1303'. [ 268.867828][T10923] gre0 speed is unknown, defaulting to 1000 [ 268.948273][T10929] bond0: Unable to set up delay as MII monitoring is disabled [ 269.231568][T10923] lo speed is unknown, defaulting to 1000 [ 269.341895][T10943] x_tables: unsorted entry at hook 2 [ 269.569226][T10957] syzkaller1: entered promiscuous mode [ 269.577079][T10957] syzkaller1: entered allmulticast mode [ 269.764766][T10965] syzkaller0: entered promiscuous mode [ 269.771334][T10965] syzkaller0: entered allmulticast mode [ 269.816423][T10962] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 270.088865][T10979] gre0 speed is unknown, defaulting to 1000 [ 270.154834][T10985] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 270.299001][T10985] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 270.325114][T10985] IPVS: set_ctl: invalid protocol: 12 172.20.20.18:20004 [ 270.371167][T10979] lo speed is unknown, defaulting to 1000 [ 271.046607][T11019] __nla_validate_parse: 4 callbacks suppressed [ 271.046628][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 271.114353][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 271.145087][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 271.167001][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1333'. [ 271.177360][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1333'. [ 271.390597][T11037] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 271.615370][T11051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1339'. [ 271.831833][T11058] tipc: Enabling of bearer rejected, failed to enable media [ 271.915646][T11027] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.219262][ T1169] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 272.279005][ T1169] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 272.309496][ T1169] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 272.340197][ T1169] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 272.643079][T11113] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1353'. [ 272.676956][T11113] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 273.117989][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 273.150678][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 273.245952][T11139] lo: entered allmulticast mode [ 273.680322][T11162] gre0 speed is unknown, defaulting to 1000 [ 273.850538][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'. [ 274.370239][T11162] lo speed is unknown, defaulting to 1000 [ 274.627019][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.681694][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.965790][T11226] netlink: 'syz.3.1384': attribute type 4 has an invalid length. [ 274.982019][T11229] netlink: 'syz.3.1384': attribute type 4 has an invalid length. [ 275.391422][T11255] syzkaller0: entered promiscuous mode [ 275.400572][T11255] syzkaller0: entered allmulticast mode [ 275.712551][T11259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 275.879764][T11275] tipc: Enabling of bearer rejected, failed to enable media [ 275.908553][T11269] syzkaller0: entered promiscuous mode [ 275.927833][T11269] syzkaller0: entered allmulticast mode [ 276.034675][T11276] gre0 speed is unknown, defaulting to 1000 [ 276.270307][T11286] __nla_validate_parse: 10 callbacks suppressed [ 276.270328][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 276.329086][T11276] lo speed is unknown, defaulting to 1000 [ 276.647051][T11300] netlink: 'syz.2.1402': attribute type 1 has an invalid length. [ 277.022261][T11302] bond9: (slave geneve4): making interface the new active one [ 277.066244][T11302] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 277.080557][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.103824][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.140774][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.157336][ T149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.237808][T11321] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 277.255010][T11322] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 277.290469][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 277.300527][T11322] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.312110][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 277.348618][T11322] bond10: (slave veth7): Enslaving as an active interface with a down link [ 277.387228][T11321] bond6: entered promiscuous mode [ 277.392728][T11321] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.421536][T11326] bond6: (slave bridge6): making interface the new active one [ 277.429879][T11326] bridge6: entered promiscuous mode [ 277.445485][T11326] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 277.525408][T11328] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 277.532618][T11328] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 277.678344][T11337] netlink: 'syz.0.1410': attribute type 3 has an invalid length. [ 279.631054][T11303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.765191][T11354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.846788][T11358] tipc: Started in network mode [ 279.851875][T11358] tipc: Node identity 7ee4a2d79496, cluster identity 4711 [ 279.872558][T11358] tipc: Enabled bearer , priority 0 [ 279.890628][T11361] netlink: 'syz.4.1416': attribute type 4 has an invalid length. [ 279.940884][T11364] syzkaller0: entered promiscuous mode [ 279.952055][T11361] netlink: 'syz.4.1416': attribute type 4 has an invalid length. [ 279.973043][T11364] syzkaller0: entered allmulticast mode [ 280.190207][T11377] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1418'. [ 280.340539][T11358] tipc: Resetting bearer [ 280.381522][T11368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 280.420312][T11377] bond0: (slave dummy0): Releasing backup interface [ 280.460896][ T1014] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.470680][ T1014] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.490168][T11356] tipc: Resetting bearer [ 280.511800][T11356] tipc: Disabling bearer [ 280.556858][ T1014] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.579977][ T1014] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.620648][ T1014] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.643699][ T1014] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.681922][T11368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 280.721883][ T1014] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.742073][ T1014] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.796739][T11368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 280.892867][T11391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1422'. [ 280.912641][T11391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1422'. [ 280.924544][T11391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1422'. [ 280.948310][T11391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1422'. [ 280.968993][T11391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1422'. [ 280.988530][T11391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1422'. [ 281.041518][T11368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 281.130078][T11397] gre0 speed is unknown, defaulting to 1000 [ 281.268846][ T1169] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.335194][ T1014] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.357401][ T1014] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.416990][ T1014] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.514778][T11397] lo speed is unknown, defaulting to 1000 [ 281.771544][T11414] __nla_validate_parse: 24 callbacks suppressed [ 281.771566][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1427'. [ 281.858223][T11420] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 282.245662][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 282.561310][T11447] netlink: 'syz.0.1437': attribute type 18 has an invalid length. [ 282.587184][T11447] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1437'. [ 283.067734][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 283.076992][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 283.124449][T11472] gre0 speed is unknown, defaulting to 1000 [ 283.197528][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1446'. [ 283.612704][T11496] syzkaller0: entered promiscuous mode [ 283.620679][T11496] syzkaller0: entered allmulticast mode [ 283.857193][T11502] syzkaller0: entered promiscuous mode [ 283.869534][T11502] syzkaller0: entered allmulticast mode [ 284.001561][T11505] netlink: 'syz.1.1454': attribute type 2 has an invalid length. [ 284.129473][T11505] : entered promiscuous mode [ 284.146981][T11472] lo speed is unknown, defaulting to 1000 [ 284.217454][T11507] gre0 speed is unknown, defaulting to 1000 [ 284.705476][T11527] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1458'. [ 285.040186][T11533] gre0 speed is unknown, defaulting to 1000 [ 285.298206][T11507] lo speed is unknown, defaulting to 1000 [ 285.343978][T11533] lo speed is unknown, defaulting to 1000 [ 285.635243][T11544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'. [ 285.724935][T11543] delete_channel: no stack [ 286.063748][T11561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1467'. [ 286.369108][T11573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1470'. [ 286.428116][T11576] bridge7: entered promiscuous mode [ 286.434021][T11576] bridge7: entered allmulticast mode [ 286.446076][T11576] team0: Port device bridge7 added [ 286.477020][T11579] FAULT_INJECTION: forcing a failure. [ 286.477020][T11579] name failslab, interval 1, probability 0, space 0, times 1 [ 286.490287][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.0.1473 Not tainted syzkaller #0 PREEMPT(full) [ 286.490316][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 286.490330][T11579] Call Trace: [ 286.490338][T11579] [ 286.490348][T11579] dump_stack_lvl+0xe8/0x150 [ 286.490388][T11579] should_fail_ex+0x412/0x560 [ 286.490430][T11579] should_failslab+0xa8/0x100 [ 286.490462][T11579] __kmalloc_noprof+0xe8/0x760 [ 286.490489][T11579] ? tomoyo_encode+0x28b/0x550 [ 286.490519][T11579] tomoyo_encode+0x28b/0x550 [ 286.490549][T11579] tomoyo_realpath_from_path+0x58d/0x5d0 [ 286.490585][T11579] ? tomoyo_path_number_perm+0x219/0x630 [ 286.490618][T11579] tomoyo_path_number_perm+0x246/0x630 [ 286.490655][T11579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.490690][T11579] ? __lock_acquire+0x6b5/0x2cf0 [ 286.490732][T11579] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 286.490780][T11579] ? __fget_files+0x2a/0x420 [ 286.490805][T11579] ? __fget_files+0x2a/0x420 [ 286.490824][T11579] ? __fget_files+0x3a0/0x420 [ 286.490844][T11579] ? __fget_files+0x2a/0x420 [ 286.490871][T11579] security_file_ioctl+0xc3/0x2a0 [ 286.490905][T11579] __se_sys_ioctl+0x47/0x170 [ 286.490936][T11579] do_syscall_64+0x14d/0xf80 [ 286.490957][T11579] ? trace_irq_disable+0x3b/0x150 [ 286.490978][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.491000][T11579] ? clear_bhb_loop+0x40/0x90 [ 286.491025][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.491046][T11579] RIP: 0033:0x7f938a79c819 [ 286.491066][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.491084][T11579] RSP: 002b:00007f938b621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.491106][T11579] RAX: ffffffffffffffda RBX: 00007f938aa15fa0 RCX: 00007f938a79c819 [ 286.491122][T11579] RDX: 00002000000013c0 RSI: 0000000000008941 RDI: 0000000000000003 [ 286.491136][T11579] RBP: 00007f938b621090 R08: 0000000000000000 R09: 0000000000000000 [ 286.491149][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.491162][T11579] R13: 00007f938aa16038 R14: 00007f938aa15fa0 R15: 00007ffdcee50988 [ 286.491198][T11579] [ 286.492346][T11579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.821237][T11586] ip6gre3: entered promiscuous mode [ 286.939034][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'. [ 287.061261][T11596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 287.095549][T11596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 287.128295][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 287.160788][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 287.170973][T11595] IPVS: Scheduler module ip_vs_ not found [ 287.239547][T11601] 8021q: VLANs not supported on ip6gre0 [ 287.302550][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 287.581864][T11615] netlink: 'syz.4.1482': attribute type 21 has an invalid length. [ 287.738124][T11623] FAULT_INJECTION: forcing a failure. [ 287.738124][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.755103][T11623] CPU: 0 UID: 0 PID: 11623 Comm: syz.4.1485 Not tainted syzkaller #0 PREEMPT(full) [ 287.755144][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 287.755158][T11623] Call Trace: [ 287.755168][T11623] [ 287.755177][T11623] dump_stack_lvl+0xe8/0x150 [ 287.755215][T11623] should_fail_ex+0x412/0x560 [ 287.755256][T11623] _copy_from_user+0x2d/0xb0 [ 287.755285][T11623] br_ioctl_stub+0x3df/0xd60 [ 287.755323][T11623] ? do_vfs_ioctl+0x1166/0x1530 [ 287.755351][T11623] ? __pfx_br_ioctl_stub+0x10/0x10 [ 287.755383][T11623] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.755414][T11623] ? sock_ioctl+0x4fa/0x7f0 [ 287.755445][T11623] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 287.755486][T11623] ? __pfx_br_ioctl_stub+0x10/0x10 [ 287.755516][T11623] sock_ioctl+0x523/0x7f0 [ 287.755543][T11623] ? __pfx_sock_ioctl+0x10/0x10 [ 287.755566][T11623] ? __fget_files+0x2a/0x420 [ 287.755586][T11623] ? __fget_files+0x3a0/0x420 [ 287.755605][T11623] ? __fget_files+0x2a/0x420 [ 287.755629][T11623] ? bpf_lsm_file_ioctl+0x9/0x20 [ 287.755660][T11623] ? __pfx_sock_ioctl+0x10/0x10 [ 287.755683][T11623] __se_sys_ioctl+0xfc/0x170 [ 287.755713][T11623] do_syscall_64+0x14d/0xf80 [ 287.755734][T11623] ? trace_irq_disable+0x3b/0x150 [ 287.755752][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.755775][T11623] ? clear_bhb_loop+0x40/0x90 [ 287.755802][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.755824][T11623] RIP: 0033:0x7f5e7c99c819 [ 287.755844][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.755863][T11623] RSP: 002b:00007f5e7d89e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.755886][T11623] RAX: ffffffffffffffda RBX: 00007f5e7cc15fa0 RCX: 00007f5e7c99c819 [ 287.755902][T11623] RDX: 00002000000013c0 RSI: 0000000000008941 RDI: 0000000000000003 [ 287.755916][T11623] RBP: 00007f5e7d89e090 R08: 0000000000000000 R09: 0000000000000000 [ 287.755929][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.755942][T11623] R13: 00007f5e7cc16038 R14: 00007f5e7cc15fa0 R15: 00007ffffd5b3a78 [ 287.755978][T11623] [ 288.045771][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1487'. [ 288.225186][T11643] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.1488'. [ 288.654963][T11661] syzkaller1: entered promiscuous mode [ 288.666662][T11661] syzkaller1: entered allmulticast mode [ 288.738581][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 288.766716][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1496'. [ 288.791390][T11671] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 288.826991][T11667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.954535][T11670] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 288.983367][T11667] tipc: Resetting bearer [ 289.165125][T11687] x_tables: duplicate underflow at hook 1 [ 289.272640][T11696] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 289.281872][T11694] netlink: 'syz.4.1503': attribute type 6 has an invalid length. [ 289.303459][T11695] netlink: 'syz.4.1503': attribute type 11 has an invalid length. [ 289.394270][T11701] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 289.612686][T11704] delete_channel: no stack [ 289.817134][T11719] xt_CT: No such helper "syz1" [ 289.917486][T11733] tipc: Failed to remove unknown binding: 66,0,0/2896195022:1234878639/1234878640 [ 290.204451][T11741] veth3: entered allmulticast mode [ 290.220563][T11741] bond7: (slave veth3): Enslaving as an active interface with an up link [ 290.438080][T11751] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.598921][T11754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.607511][T11754] team0: left promiscuous mode [ 290.612349][T11754] team_slave_1: left promiscuous mode [ 290.645451][T11754] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.684148][T11754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.723029][T11751] macsec2: entered allmulticast mode [ 290.736845][T11751] bond8: entered allmulticast mode [ 290.753830][T11751] bond8: left allmulticast mode [ 290.881938][T11759] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 291.119467][T11782] netlink: 'syz.3.1532': attribute type 21 has an invalid length. [ 291.143710][T11785] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 291.246518][T11793] netlink: 'syz.2.1530': attribute type 2 has an invalid length. [ 291.400395][T11803] žÿ: renamed from team_slave_1 (while UP) [ 291.545598][T11813] netlink: 'syz.3.1538': attribute type 39 has an invalid length. [ 291.974587][T11838] __nla_validate_parse: 22 callbacks suppressed [ 291.974619][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 292.019214][T11842] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 292.193429][T11852] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1549'. [ 292.227832][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1548'. [ 292.246379][T11855] erspan2: entered allmulticast mode [ 292.284629][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1551'. [ 292.413827][T11867] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 292.536248][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1554'. [ 292.576553][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 292.590573][T11877] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 292.614987][T11877] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1556'. [ 292.700509][T11882] sit0: entered promiscuous mode [ 292.728065][T11882] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 292.771694][T11882] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1558'. [ 293.226671][T11914] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1569'. [ 293.238309][T11914] netlink: 'syz.3.1569': attribute type 9 has an invalid length. [ 293.250131][T11914] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1569'. [ 293.391744][T11925] IPv6: NLM_F_REPLACE set, but no existing node found! [ 293.408136][T11925] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 293.474102][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.485345][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.496457][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.514303][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.543414][T11935] netlink: 'syz.3.1573': attribute type 5 has an invalid length. [ 293.671947][T11941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.756107][T11944] netlink: 'syz.0.1575': attribute type 2 has an invalid length. [ 293.780070][T11944] : entered promiscuous mode [ 293.846191][T11952] syzkaller0: entered promiscuous mode [ 293.851849][T11952] syzkaller0: entered allmulticast mode [ 293.889235][T11952] tipc: Enabled bearer , priority 0 [ 293.896743][T11953] tipc: Enabling of bearer rejected, already enabled [ 294.245738][T11951] tipc: Resetting bearer [ 294.278616][T11951] tipc: Disabling bearer [ 294.366805][T11975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.684373][T11987] xt_HMARK: spi-set and port-set can't be combined [ 295.146743][T12020] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 295.315556][T12020] bond8: option lacp_rate: invalid value (128) [ 295.348711][T12020] bond8 (unregistering): Released all slaves [ 296.524315][T12087] 8021q: adding VLAN 0 to HW filter on device bond11 [ 296.590486][T12090] syz_tun: entered promiscuous mode [ 296.603066][T12090] syz_tun: entered allmulticast mode [ 296.966757][T12110] gre0 speed is unknown, defaulting to 1000 [ 297.207689][T12123] __nla_validate_parse: 16 callbacks suppressed [ 297.207713][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1629'. [ 297.259821][T12130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1629'. [ 297.367100][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 297.397083][ T30] audit: type=1800 audit(1775954473.814:7): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1628" name="memory.events" dev="tmpfs" ino=1665 res=0 errno=0 [ 297.420823][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 297.616375][T12140] nbd: must specify an index to disconnect [ 297.623962][T12110] lo speed is unknown, defaulting to 1000 [ 298.148537][T12162] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1639'. [ 298.161768][T12162] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1639'. [ 298.269481][T12171] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 298.682011][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 298.724115][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 298.947883][T12223] gre0 speed is unknown, defaulting to 1000 [ 298.961647][T12220] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 299.001606][T12220] erspan2: entered allmulticast mode [ 299.223180][T12235] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 299.362049][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 299.472374][T12223] lo speed is unknown, defaulting to 1000 [ 299.521052][T12249] gre0 speed is unknown, defaulting to 1000 [ 299.631509][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 299.920058][ T5922] IPVS: starting estimator thread 0... [ 299.949891][T12261] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 300.033290][T12274] IPVS: using max 37 ests per chain, 88800 per kthread [ 300.369849][T12265] gre0 speed is unknown, defaulting to 1000 [ 300.381850][T12249] lo speed is unknown, defaulting to 1000 [ 301.023826][T12265] lo speed is unknown, defaulting to 1000 [ 301.269872][T12303] bond7: entered promiscuous mode [ 301.298998][T12303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.672050][T12311] geneve6: entered promiscuous mode [ 301.831146][T12322] x_tables: duplicate underflow at hook 2 [ 302.929785][T12361] netlink: 'syz.1.1691': attribute type 1 has an invalid length. [ 302.939285][T12361] __nla_validate_parse: 7 callbacks suppressed [ 302.939304][T12361] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1691'. [ 302.956666][T12361] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1691'. [ 302.965861][T12361] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.054624][T12361] ip6t_srh: unknown srh match flags 4000 [ 303.061424][T12365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1692'. [ 303.170178][T12355] Can't find ip_set type ha [ 303.291148][T12374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.296686][T12372] ip6gretap0: entered promiscuous mode [ 303.689237][T12390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1699'. [ 303.821794][T12401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1701'. [ 303.937521][T12408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.128777][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 304.182165][T12410] 8021q: adding VLAN 0 to HW filter on device bond12 [ 304.770113][T12314] Set syz1 is full, maxelem 65536 reached [ 307.275384][T12421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.307073][T12459] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 307.322980][T12459] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1714'. [ 307.332468][T12459] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 307.651432][ T30] audit: type=1107 audit(1775954484.064:8): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 307.689097][T12484] gre0 speed is unknown, defaulting to 1000 [ 307.701191][T12483] syzkaller0: entered promiscuous mode [ 307.709380][T12483] syzkaller0: entered allmulticast mode [ 307.722763][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'. [ 307.761810][T12483] bond0: entered promiscuous mode [ 307.775116][T12483] bond_slave_0: entered promiscuous mode [ 307.788888][T12483] bond_slave_1: entered promiscuous mode [ 307.811362][T12483] team0: entered promiscuous mode [ 307.830775][T12483] team_slave_0: entered promiscuous mode [ 307.850678][T12483] žÿ: entered promiscuous mode [ 307.887295][T12483] bond0: left promiscuous mode [ 307.892332][T12483] bond_slave_0: left promiscuous mode [ 307.898581][T12483] bond_slave_1: left promiscuous mode [ 307.918776][T12483] team0: left promiscuous mode [ 307.934834][T12483] team_slave_0: left promiscuous mode [ 307.950704][T12483] žÿ: left promiscuous mode [ 308.053842][T12484] lo speed is unknown, defaulting to 1000 [ 308.237128][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 308.390779][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1727'. [ 308.434398][T12512] sctp: [Deprecated]: syz.1.1728 (pid 12512) Use of int in maxseg socket option. [ 308.434398][T12512] Use struct sctp_assoc_value instead [ 308.453748][T12512] syz_tun: entered promiscuous mode [ 308.828098][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 308.905593][T12533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1735'. [ 308.936993][T12528] gre0 speed is unknown, defaulting to 1000 [ 308.953966][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 308.963880][T12533] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.219526][T12528] lo speed is unknown, defaulting to 1000 [ 309.363464][T12551] netlink: 'syz.0.1742': attribute type 5 has an invalid length. [ 309.985683][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 309.986764][T12583] netlink: 'syz.4.1751': attribute type 21 has an invalid length. [ 310.026002][T12583] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 310.102260][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 310.176080][T12587] gre0 speed is unknown, defaulting to 1000 [ 310.298011][T12591] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 310.525688][T12587] lo speed is unknown, defaulting to 1000 [ 310.561180][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 310.757072][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'. [ 310.879806][T12621] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 310.969085][T12629] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.175706][T12621] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 311.331135][T12621] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 311.476432][T12621] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 311.641177][T12660] netlink: 'syz.4.1769': attribute type 29 has an invalid length. [ 311.651741][T12660] netlink: 'syz.4.1769': attribute type 29 has an invalid length. [ 311.750951][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.840491][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.919177][ T1169] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.985968][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 312.028938][T12675] gre0 speed is unknown, defaulting to 1000 [ 312.288013][T12675] lo speed is unknown, defaulting to 1000 [ 312.506366][T12702] tc_dump_action: action bad kind [ 312.770022][T12704] bond9: option ad_select: invalid value (34) [ 312.787174][T12704] bond9 (unregistering): Released all slaves [ 312.820592][T12717] Bluetooth: MGMT ver 1.23 [ 313.034298][T12723] netlink: 'syz.1.1787': attribute type 6 has an invalid length. [ 313.137361][T12728] block nbd4: not configured, cannot reconfigure [ 313.287447][T12737] __nla_validate_parse: 18 callbacks suppressed [ 313.287468][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'. [ 313.323282][T12740] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 313.519169][T12742] gretap1: entered allmulticast mode [ 313.537370][T12742] bond13: (slave gretap1): making interface the new active one [ 313.566070][T12742] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 314.211569][T12765] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 314.458265][T12774] bond14: entered promiscuous mode [ 314.464803][T12774] 8021q: adding VLAN 0 to HW filter on device bond14 [ 314.472610][T12774] bridge0: port 5(bond14) entered blocking state [ 314.480764][T12774] bridge0: port 5(bond14) entered disabled state [ 314.490900][T12774] bond14: entered allmulticast mode [ 314.501831][T12774] bridge0: port 5(bond14) entered blocking state [ 314.508700][T12774] bridge0: port 5(bond14) entered forwarding state [ 314.547651][T12770] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 314.587809][ T1014] bridge0: port 5(bond14) entered disabled state [ 314.607343][T12780] gre0 speed is unknown, defaulting to 1000 [ 314.946660][T12791] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1808'. [ 314.974722][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 315.067754][T12793] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1809'. [ 315.080590][T12780] lo speed is unknown, defaulting to 1000 [ 315.255244][T12793] gre0 speed is unknown, defaulting to 1000 [ 315.440107][T12805] raw_sendmsg: syz.4.1811 forgot to set AF_INET. Fix it! [ 315.466567][T12807] team0: entered promiscuous mode [ 315.472429][T12807] team_slave_0: entered promiscuous mode [ 315.483354][T12807] team_slave_1: entered promiscuous mode [ 315.550269][T12807] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.581675][T12793] lo speed is unknown, defaulting to 1000 [ 315.849934][T12816] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1815'. [ 315.881555][T12816] netlink: 'syz.3.1815': attribute type 9 has an invalid length. [ 315.889885][T12816] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1815'. [ 315.899277][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 316.432523][T12844] xt_hashlimit: size too large, truncated to 1048576 [ 316.593912][T12847] netlink: 'syz.3.1823': attribute type 30 has an invalid length. [ 316.691715][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1823'. [ 316.717852][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.818126][T12845] bridge_slave_0 (unregistering): left allmulticast mode [ 316.858425][T12845] bridge_slave_0 (unregistering): left promiscuous mode [ 316.890726][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.934668][T12855] veth1_to_bridge: entered allmulticast mode [ 317.000405][T12847] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 317.054938][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 317.131195][T12847] bond9 (unregistering): Released all slaves [ 317.176601][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 317.189212][T12862] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 317.281107][T12850] veth1_to_bridge: left allmulticast mode [ 317.349455][T12875] tap0: tun_chr_ioctl cmd 1074025677 [ 317.355180][T12875] tap0: linktype set to 776 [ 317.551521][T12881] veth5: entered promiscuous mode [ 317.660883][T12892] netlink: 'syz.0.1835': attribute type 2 has an invalid length. [ 317.833726][T12906] netlink: 'syz.2.1840': attribute type 1 has an invalid length. [ 318.010787][T12915] bridge0: port 1(syz_tun) entered blocking state [ 318.035468][T12915] bridge0: port 1(syz_tun) entered disabled state [ 318.073159][T12915] syz_tun: entered allmulticast mode [ 318.080484][T12915] syz_tun: entered promiscuous mode [ 318.107353][T12915] bridge0: port 1(syz_tun) entered blocking state [ 318.114023][T12915] bridge0: port 1(syz_tun) entered listening state [ 318.962156][T12970] __nla_validate_parse: 4 callbacks suppressed [ 318.962178][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1857'. [ 319.236207][T12977] gre0 speed is unknown, defaulting to 1000 [ 319.386001][T12991] macsec2: entered promiscuous mode [ 319.410109][T12991] erspan0: entered promiscuous mode [ 319.457950][T12991] erspan0: left promiscuous mode [ 319.692194][T12977] lo speed is unknown, defaulting to 1000 [ 320.162275][T13022] netlink: 'syz.2.1868': attribute type 4 has an invalid length. [ 320.180992][T13022] bond0: entered promiscuous mode [ 320.192860][T13022] bond_slave_0: entered promiscuous mode [ 320.200460][T13022] bond_slave_1: entered promiscuous mode [ 320.220781][T13019] bond0: left promiscuous mode [ 320.227632][T13019] bond_slave_0: left promiscuous mode [ 320.237854][T13019] bond_slave_1: left promiscuous mode [ 320.254106][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 320.457496][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 320.503180][T13037] netlink: 'syz.2.1873': attribute type 2 has an invalid length. [ 320.514384][T13038] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1872'. [ 320.559586][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 320.597110][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 320.866944][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'. [ 321.012682][T13070] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 321.391208][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1883'. [ 321.855508][T13105] netlink: 'syz.0.1888': attribute type 8 has an invalid length. [ 321.873196][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 321.892396][T13105] bond0: entered promiscuous mode [ 321.897680][T13105] bond_slave_0: entered promiscuous mode [ 321.903621][T13105] bond_slave_1: entered promiscuous mode [ 321.911067][T13105] gretap0: entered promiscuous mode [ 321.918094][T13105] bond0: left promiscuous mode [ 321.923107][T13105] bond_slave_0: left promiscuous mode [ 321.928973][T13105] bond_slave_1: left promiscuous mode [ 321.936994][T13105] gretap0: left promiscuous mode [ 322.065280][T13107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1889'. [ 323.941613][T13070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.144611][T13124] syzkaller0: entered promiscuous mode [ 324.153195][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 324.162657][T13124] syzkaller0: entered allmulticast mode [ 324.470251][T13146] netlink: 'syz.3.1899': attribute type 4 has an invalid length. [ 324.522125][T13153] netlink: 'syz.3.1899': attribute type 4 has an invalid length. [ 324.525917][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 324.716329][T13163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1904'. [ 324.729081][T13163] netlink: 'syz.4.1904': attribute type 8 has an invalid length. [ 324.827303][T13160] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 324.853738][T13165] gre0 speed is unknown, defaulting to 1000 [ 325.098482][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 325.119310][T13174] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 325.134203][T13174] bridge5: entered allmulticast mode [ 325.300778][T13165] lo speed is unknown, defaulting to 1000 [ 325.636186][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1912'. [ 325.659228][T13205] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 325.875694][T13211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1917'. [ 326.073854][T13219] syzkaller1: entered promiscuous mode [ 326.079427][T13219] syzkaller1: entered allmulticast mode [ 326.242388][T13229] netlink: 'syz.3.1923': attribute type 4 has an invalid length. [ 326.320803][T13236] netlink: 'syz.3.1923': attribute type 4 has an invalid length. [ 326.391693][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1926'. [ 326.423251][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 326.423911][T13229] netlink: 'syz.3.1923': attribute type 4 has an invalid length. [ 326.719228][T13254] bond8 (unregistering): Released all slaves [ 326.748232][T13260] netlink: 1248 bytes leftover after parsing attributes in process `syz.2.1932'. [ 327.016419][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 327.167532][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.179842][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.192611][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.212843][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.346049][T13294] netlink: 'syz.3.1936': attribute type 10 has an invalid length. [ 327.397209][T13295] netlink: 'syz.3.1936': attribute type 10 has an invalid length. [ 327.477792][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.537242][T13294] batadv0: entered promiscuous mode [ 327.546404][T13299] nbd: must specify a size in bytes for the device [ 327.573178][T13294] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 327.608847][T13295] batadv0: entered allmulticast mode [ 327.619542][T13295] bond0: (slave batadv0): Releasing backup interface [ 327.651486][T13295] bridge0: port 4(batadv0) entered blocking state [ 327.658548][T13295] bridge0: port 4(batadv0) entered disabled state [ 328.144711][ T996] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 328.154275][ T996] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 328.222811][T13320] syzkaller1: entered promiscuous mode [ 328.242611][T13320] syzkaller1: entered allmulticast mode [ 328.319159][T13326] netlink: 'syz.1.1946': attribute type 16 has an invalid length. [ 328.360899][T13320] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 328.384399][T13326] netlink: 'syz.1.1946': attribute type 3 has an invalid length. [ 328.410040][T13320] bond8 (unregistering): Released all slaves [ 328.560961][T13337] delete_channel: no stack [ 328.596568][T13337] netlink: 'syz.1.1947': attribute type 1 has an invalid length. [ 328.615362][T13335] delete_channel: no stack [ 328.629860][T13340] netlink: 'syz.2.1948': attribute type 16 has an invalid length. [ 328.663074][T13340] netlink: 'syz.2.1948': attribute type 17 has an invalid length. [ 329.321615][T13381] gre0 speed is unknown, defaulting to 1000 [ 329.616276][T13402] batadv_slave_1: entered promiscuous mode [ 329.635192][T13403] __nla_validate_parse: 11 callbacks suppressed [ 329.635215][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 329.651713][T13402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.669332][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 329.682742][T13402] batadv_slave_1 (unregistering): left promiscuous mode [ 329.725294][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 329.742919][T13408] syzkaller0: entered promiscuous mode [ 329.750375][T13408] syzkaller0: entered allmulticast mode [ 329.775597][ T319] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.794198][ T319] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.866707][ T319] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.883721][ T319] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.096519][T13424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1974'. [ 330.174425][T13426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1975'. [ 330.344973][T13438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1977'. [ 330.397475][T13430] bond8: entered promiscuous mode [ 330.412656][T13430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.473409][T13381] lo speed is unknown, defaulting to 1000 [ 330.515447][T13437] 8021q: adding VLAN 0 to HW filter on device bond12 [ 330.523751][T13438] bond8: entered allmulticast mode [ 330.617955][T13439] bond12: (slave veth7): Enslaving as an active interface with a down link [ 330.638367][T13444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 330.694417][T13444] bond12: (slave batadv1): making interface the new active one [ 330.711403][T13444] batadv1: entered promiscuous mode [ 330.719032][T13444] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 330.772649][T13438] bond8: (slave bridge1): making interface the new active one [ 330.780487][T13438] bridge1: entered promiscuous mode [ 330.787487][T13438] bridge1: entered allmulticast mode [ 330.796788][T13438] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 331.093050][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 331.162465][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1987'. [ 331.255389][T13482] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 331.435460][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 331.469684][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 331.510437][T13487] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 331.531054][T13487] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 331.837620][T13495] validate_nla: 6 callbacks suppressed [ 331.837639][T13495] netlink: 'syz.3.1993': attribute type 29 has an invalid length. [ 331.860308][T13495] netlink: 'syz.3.1993': attribute type 29 has an invalid length. [ 332.882577][T13533] gre0 speed is unknown, defaulting to 1000 [ 332.961005][T13531] xt_CT: No such helper "syz1" [ 333.181778][T13543] bridge2: entered allmulticast mode [ 333.256023][T13533] lo speed is unknown, defaulting to 1000 [ 333.294600][ C0] bridge0: port 1(syz_tun) entered learning state [ 333.460820][T13550] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 333.741531][T13561] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 333.755231][T13561] bond9 (unregistering): Released all slaves [ 334.514817][T13569] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 335.109110][T13510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.642229][T13592] 8021q: VLANs not supported on ip6gre0 [ 335.687206][T13590] IPVS: Scheduler module ip_vs_ not found [ 335.698934][T13602] __nla_validate_parse: 6 callbacks suppressed [ 335.698954][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 335.850515][T13600] gre0 speed is unknown, defaulting to 1000 [ 335.991843][T13615] netlink: 'syz.3.2023': attribute type 1 has an invalid length. [ 336.052356][T13615] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.068531][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 336.118211][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 336.297496][T13600] lo speed is unknown, defaulting to 1000 [ 336.304568][T13622] gre0 speed is unknown, defaulting to 1000 [ 336.673622][T13622] lo speed is unknown, defaulting to 1000 [ 337.178798][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 337.226296][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 337.263143][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 337.531951][T13665] syzkaller1: entered promiscuous mode [ 337.543212][T13665] syzkaller1: entered allmulticast mode [ 337.579512][T13672] vti0: entered promiscuous mode [ 337.681260][T13677] netlink: 'syz.3.2040': attribute type 15 has an invalid length. [ 337.695180][T13677] SET target dimension over the limit! [ 337.805473][T13679] bond13: (slave bond_slave_1): Device is not our slave [ 337.830922][T13679] bond13: option active_slave: invalid value (bond_slave_1) [ 337.866047][T13679] bond13 (unregistering): Released all slaves [ 337.945563][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 338.186833][T13701] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 338.198666][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 338.207728][T13701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2046'. [ 338.243982][T13716] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2050'. [ 338.275006][T13705] veth0: entered promiscuous mode [ 338.380552][T13702] veth0: left promiscuous mode [ 338.639465][T13734] netlink: 'syz.0.2051': attribute type 30 has an invalid length. [ 338.762533][ T9] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 338.867614][T13734] bond9: option arp_missed_max: invalid value (0) [ 338.903742][T13734] bond9: option arp_missed_max: allowed values 1 - 255 [ 338.946254][T13734] bond9 (unregistering): Released all slaves [ 339.003791][T13735] dummy0: entered promiscuous mode [ 339.012288][T13735] bridge0: entered promiscuous mode [ 339.022961][T13735] hsr1: entered allmulticast mode [ 339.028128][T13735] dummy0: entered allmulticast mode [ 339.033765][T13735] bridge0: entered allmulticast mode [ 339.074082][ T9] [ 339.076469][ T9] ============================================ [ 339.082668][ T9] WARNING: possible recursive locking detected [ 339.088853][ T9] syzkaller #0 Not tainted [ 339.093283][ T9] -------------------------------------------- [ 339.099450][ T9] kworker/0:0/9 is trying to acquire lock: [ 339.105271][ T9] ffff88807eb50fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 339.114352][ T9] [ 339.114352][ T9] but task is already holding lock: [ 339.121729][ T9] ffff8880581dcfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 339.130803][ T9] [ 339.130803][ T9] other info that might help us debug this: [ 339.138881][ T9] Possible unsafe locking scenario: [ 339.138881][ T9] [ 339.146368][ T9] CPU0 [ 339.149680][ T9] ---- [ 339.152978][ T9] lock(&hsr->seqnr_lock); [ 339.157508][ T9] lock(&hsr->seqnr_lock); [ 339.162033][ T9] [ 339.162033][ T9] *** DEADLOCK *** [ 339.162033][ T9] [ 339.170203][ T9] May be due to missing lock nesting notation [ 339.170203][ T9] [ 339.178537][ T9] 13 locks held by kworker/0:0/9: [ 339.183763][ T9] #0: ffff888031430d48 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 339.194532][ T9] #1: ffffc900000e7c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 339.207787][ T9] #2: ffff88804e918538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 339.217069][ T9] #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 339.226325][ T9] #4: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 339.235412][ T9] #5: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3920 [ 339.245369][ T9] #6: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 339.254570][ T9] #7: ffff8880581dcfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 339.264171][ T9] #8: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 339.273700][ T9] #9: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3920 [ 339.283674][ T9] #10: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 339.293044][ T9] #11: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3920 [ 339.303188][ T9] #12: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 339.312449][ T9] [ 339.312449][ T9] stack backtrace: [ 339.318362][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 339.318383][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.318395][ T9] Workqueue: mld mld_ifc_work [ 339.318425][ T9] Call Trace: [ 339.318433][ T9] [ 339.318442][ T9] dump_stack_lvl+0xe8/0x150 [ 339.318468][ T9] print_deadlock_bug+0x279/0x290 [ 339.318496][ T9] __lock_acquire+0x253f/0x2cf0 [ 339.318525][ T9] ? skb_network_protocol+0x23d/0x400 [ 339.318554][ T9] ? netif_skb_features+0xdf0/0x1480 [ 339.318582][ T9] lock_acquire+0xf0/0x2e0 [ 339.318604][ T9] ? hsr_dev_xmit+0x237/0x360 [ 339.318627][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 339.318654][ T9] ? hsr_dev_xmit+0x237/0x360 [ 339.318676][ T9] _raw_spin_lock_bh+0x36/0x50 [ 339.318701][ T9] ? hsr_dev_xmit+0x237/0x360 [ 339.318721][ T9] hsr_dev_xmit+0x237/0x360 [ 339.318741][ T9] ? hsr_dev_xmit+0x2d/0x360 [ 339.318762][ T9] dev_hard_start_xmit+0x2d8/0x870 [ 339.318796][ T9] __dev_queue_xmit+0x14d9/0x3920 [ 339.318816][ T9] ? __dev_queue_xmit+0x2b6/0x3920 [ 339.318833][ T9] ? ebt_do_table+0x2665/0x2830 [ 339.318860][ T9] ? ebt_do_table+0x2665/0x2830 [ 339.318889][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 339.318923][ T9] ? br_nf_post_routing+0x219/0xfe0 [ 339.318953][ T9] br_dev_queue_push_xmit+0x370/0x4b0 [ 339.318977][ T9] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 339.319000][ T9] NF_HOOK+0x360/0x3f0 [ 339.319023][ T9] ? NF_HOOK+0xa2/0x3f0 [ 339.319044][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 339.319067][ T9] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 339.319095][ T9] br_forward_finish+0xd3/0x130 [ 339.319116][ T9] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 339.319138][ T9] ? __pfx_br_forward_finish+0x10/0x10 [ 339.319160][ T9] NF_HOOK+0x360/0x3f0 [ 339.319183][ T9] ? NF_HOOK+0xa2/0x3f0 [ 339.319204][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 339.319226][ T9] ? __pfx_br_forward_finish+0x10/0x10 [ 339.319249][ T9] ? br_flood+0x8ff/0xb80 [ 339.319271][ T9] ? br_handle_vlan+0x61/0x530 [ 339.319291][ T9] __br_forward+0x397/0x540 [ 339.319311][ T9] ? __pfx_br_forward_finish+0x10/0x10 [ 339.319335][ T9] ? br_dev_xmit+0x193/0x1990 [ 339.319350][ T9] br_dev_xmit+0x12bd/0x1990 [ 339.319366][ T9] ? br_dev_xmit+0x193/0x1990 [ 339.319384][ T9] ? __pfx_br_dev_xmit+0x10/0x10 [ 339.319404][ T9] ? unregister_netdevice_notifier+0x2b0/0x380 [ 339.319433][ T9] dev_hard_start_xmit+0x2d8/0x870 [ 339.319468][ T9] __dev_queue_xmit+0x14d9/0x3920 [ 339.319488][ T9] ? __dev_queue_xmit+0x2b6/0x3920 [ 339.319504][ T9] ? trace_kmem_cache_alloc+0x29/0xf0 [ 339.319524][ T9] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 339.319546][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 339.319561][ T9] ? __asan_memcpy+0x40/0x70 [ 339.319578][ T9] ? __pskb_copy_fclone+0x9c8/0xff0 [ 339.319595][ T9] ? __asan_memcpy+0x40/0x70 [ 339.319612][ T9] ? __pskb_copy_fclone+0x9c8/0xff0 [ 339.319633][ T9] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 339.319658][ T9] ? hsr_addr_subst_dest+0x30d/0xa90 [ 339.319686][ T9] hsr_forward_skb+0x167e/0x2a80 [ 339.319710][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 339.319739][ T9] ? hsr_forward_skb+0xbb/0x2a80 [ 339.319765][ T9] ? __pfx_hsr_forward_skb+0x10/0x10 [ 339.319788][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.319807][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.319825][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 339.319853][ T9] ? hsr_dev_xmit+0x237/0x360 [ 339.319875][ T9] hsr_dev_xmit+0x242/0x360 [ 339.319894][ T9] ? hsr_dev_xmit+0x2d/0x360 [ 339.319923][ T9] dev_hard_start_xmit+0x2d8/0x870 [ 339.319957][ T9] __dev_queue_xmit+0x14d9/0x3920 [ 339.319977][ T9] ? __dev_queue_xmit+0x2b6/0x3920 [ 339.319997][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 339.320022][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 339.320038][ T9] ? neigh_connected_output+0x1ea/0x460 [ 339.320061][ T9] ? eth_header+0x11b/0x200 [ 339.320087][ T9] ? __asan_memcpy+0x40/0x70 [ 339.320114][ T9] ? ip6_output+0x126/0x550 [ 339.320133][ T9] ip6_output+0x340/0x550 [ 339.320152][ T9] ? __pfx_ip6_output+0x10/0x10 [ 339.320171][ T9] NF_HOOK+0x177/0x4f0 [ 339.320191][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 339.320211][ T9] ? __pfx_dst_output+0x10/0x10 [ 339.320230][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.320246][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 339.320269][ T9] ? icmp6_dst_alloc+0x3a6/0x440 [ 339.320291][ T9] mld_sendpack+0x8b4/0xe40 [ 339.320310][ T9] ? look_up_lock_class+0x57/0x110 [ 339.320333][ T9] ? mld_sendpack+0x213/0xe40 [ 339.320352][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 339.320381][ T9] mld_ifc_work+0x835/0xe70 [ 339.320401][ T9] ? process_scheduled_works+0xa8d/0x18c0 [ 339.320425][ T9] process_scheduled_works+0xb6e/0x18c0 [ 339.320462][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.320487][ T9] ? assign_work+0x3d5/0x5e0 [ 339.320511][ T9] worker_thread+0xa53/0xfc0 [ 339.320547][ T9] kthread+0x388/0x470 [ 339.320564][ T9] ? __pfx_worker_thread+0x10/0x10 [ 339.320586][ T9] ? __pfx_kthread+0x10/0x10 [ 339.320603][ T9] ret_from_fork+0x51e/0xb90 [ 339.320627][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 339.320649][ T9] ? __switch_to+0xc7d/0x1450 [ 339.320671][ T9] ? __pfx_kthread+0x10/0x10 [ 339.320687][ T9] ret_from_fork_asm+0x1a/0x30 [ 339.320721][ T9] [ 342.293459][ T996] batadv1: left promiscuous mode [ 348.653015][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 348.659664][ C0] bridge0: topology change detected, propagating