last executing test programs: 4.037300229s ago: executing program 3 (id=4104): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) unshare(0x28000600) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) unshare(0x14000180) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}}, 0x0) r6 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = accept(r7, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r9, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x21) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xb767}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x10}]}}}]}, 0x4c}}, 0x0) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x334, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x1df, 0x13f, 0x0, 0x1, [@nested={0xdb, 0x10a, 0x0, 0x1, [@nested={0x4, 0xea}, @typed={0x4, 0x129}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x12c, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xbc}, @typed={0x9, 0x89, 0x0, 0x0, @str='+\xe1{^\x00'}, @generic="43c326bbfdd25eb42c09ba16d4669f7a5a2be180ac1b99ad263b562e6e69b31b9f5f4d3813cbedc7169c52914d302a430bce8b88a654ee22e67c22b2150d4a78c3bbcf2bae768cf8734d1348eef2553684c5a334695030a35ff895c35a4626e71e1a1c666b3e89cbc92020112d9dfe1c7df8e9285732e2eddfe12cdc02decb4c473d4607bc4ad334b7c438a52fab02504c744df19c2356a080c17d"]}, @generic="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"]}, @nested={0x13f, 0x71, 0x0, 0x1, [@generic="4eab4932ef20eb66606264f7f6c8285b93a0eed11de8d471401547952bc842d92e66550b4f4f257268d4ccf57da7a343a494527c98cad2998cb40a0730073d8d8cb40d17bd50a46de77cb66567480b9c17cd30dc216e3ceca915c00868ccb0d2a5541f71a92042c9", @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@remote}, @nested={0x77, 0x38, 0x0, 0x1, [@nested={0x4, 0x2a}, @nested={0x4, 0xd8}, @generic="d778176cfc11f320bd6da0be38f53106d68f304eeb3a9929f34ecc622787a0c5063eeea1556850d080d71c496e6d2ad8a4b4061412e4b0aaf174e5d7fd17bbc0d7445cbf977f30c7634c4f4a4d5b5f64102b9106af8bb1433336f2e8e1713b96ae1bfe42c2cc5a9739bfaa"]}, @generic="e76ac31975a5a2085993b8aea6c5f15ad49dded6ced8089abfaf2d5b7e3283b04e5e8f64bad8d3741b9a80c7dcb0f3a094ca57e5ff30faf432807af17f61c0184bbc9e200bbde0"]}]}, 0x334}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0xebe, 0x7, @local, 0x7}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 3.643468933s ago: executing program 3 (id=4109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r2) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x405c000) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = socket(0x2b, 0x80801, 0x1) shutdown(r10, 0x7ffffffe) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4e, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 3.343414647s ago: executing program 2 (id=4113): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@null, @default, @netrom, @default, @rose, @remote, @null, @default]}, &(0x7f0000000080)=0x48) pwritev(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)="aea2310832b711", 0x7}, {&(0x7f0000000100)="9a0dda98fe5143973ab85a58fcdfbf2cb550d708f8f8f255d61aff2fb260d565bee4f2f005f3d2ee32cfc1e2de081183914ffb927533d6fbeab0feb0d7cbc7b59c8893fee489e7d777c9587a4e6ab414b511d231fde482183a06324d7e96d0ffe22a221f7e62c4defc8206fd445f9314e3f97782ee6efe6406e81dbdfc78b06e93e9d8dcfddc50d402682d77ae7567b218a1c866ef0b177b60a2cb83d3c9ebbaee1549519ad06096e1bb3d141665f9f02740c5eaae86a5b4e55049f8568ce8a1feee7e9127940e70fc", 0xc9}, {&(0x7f0000000200)="387dd39a5f575f80299eaba2b6e6e4841b08788aa7542f4072ac0458f012c0cb88bcfca385f467d095b2616145603b", 0x2f}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="ec33c46c47a7f57857347334f43d71ba3e759f24bfcbafb29047970bfbc27e2d76a843ce1bec319a5027f6bff883dd9e729747cc636c1ead357a52a2d3b87c4d3e960ddc896574413ba32c2da639e0a883a0a71f163e482f8635350a40d6e6f4e9b9b97d0595cccc585655b861451f8770515c7d95a3e54673e188568e5085130b8c8582be4163d83a519338adda2c8f61bb1110dc297b46099fd47196d1", 0x9e}], 0x5, 0x9, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r2, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) 3.155865782s ago: executing program 2 (id=4115): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x3ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x1000, 0x4) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 3.032410584s ago: executing program 3 (id=4116): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2ad3, 0x39, 0xc}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) unshare(0x6a040000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) socketpair(0x1e, 0x6, 0x80000004, &(0x7f0000000000)) 2.801887101s ago: executing program 0 (id=4119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 2.724791096s ago: executing program 2 (id=4120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r2}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xc8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f00000002c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) close(r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.618832108s ago: executing program 4 (id=4121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1]}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1]}, 0x90) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 2.547365491s ago: executing program 0 (id=4122): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x40}}, 0x20004084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 2.328935334s ago: executing program 4 (id=4124): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) (async) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) (async, rerun: 64) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x2, &(0x7f0000000880)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x6}], &(0x7f00000008c0)='GPL\x00', 0x59, 0x20, &(0x7f0000000900)=""/32, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x0, 0xd, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000980)=[{0x4, 0x5, 0x2, 0xc}, {0x4, 0x1, 0xb, 0x4}, {0x0, 0x3, 0xd, 0x1}]}, 0x94) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000c00)={[{0x2b, 'devices'}, {0x2b, 'hugetlb'}, {0x2d, 'net'}]}, 0x17) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000080000001811000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000300000051b6100010000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0xfffffffe, 0x90, &(0x7f0000000700)=""/144, 0x40f00, 0x4, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0xf, 0xefc, 0xfffffeff}, 0x10, 0x28bfe, r4, 0x0, &(0x7f0000000a80)=[r5]}, 0x94) (async, rerun: 64) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x2b, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000008000000000000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000080b702000014000000b703000000000000850000090100000000009500000000000000652418000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001865000002000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186b00000d00010000000000080000009500000000000000bf91000000000000b7020000020000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xc, 0x79, &(0x7f0000000200)=""/121, 0x41100, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x10, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0x34}, 0x94) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e003faff9c6f167e64d00000900400000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r10, 0x4}, 0x38) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000c4000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r13, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000001400)={'syztnl0\x00', r3, 0x1, 0x1, 0x533, 0x7, {{0x19, 0x4, 0x1, 0x2, 0x64, 0x65, 0x0, 0x4, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x5d, [@remote, @rand_addr=0x64010102, @local, @loopback]}, @ssrr={0x89, 0xb, 0x4e, [@multicast1, @empty]}, @cipso={0x86, 0x2e, 0x1, [{0x6, 0x10, "73603a8cccbc9602679d71821572"}, {0x1, 0x8, "5ba92e8bde22"}, {0x6, 0x10, "a2b6ca0f26c3c70acc0b620ff20e"}]}]}}}}}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xf, 0x11, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000d40)='GPL\x00', 0x4, 0x41, &(0x7f0000000d80)=""/65, 0x40f00, 0x64, '\x00', r14, @cgroup_device, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x4, 0x6, 0x800, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000e40)=[r1], &(0x7f0000000e80)=[{0x0, 0x3, 0x0, 0x1}, {0x2, 0x2, 0xd, 0x7}, {0x1, 0x1, 0xb, 0x4}, {0x2, 0x3, 0xf, 0x8}, {0x1, 0x1, 0xe, 0x7}, {0x2, 0x1, 0xe, 0x2}], 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r15, 0x0, 0xf5, 0x42, &(0x7f0000000fc0)="924c101d3cbde4e645b2cbbe5f368f936ae09df770d78c5b56284950a8877f931eac885ff01172698314dd7ac3233003aeb82b8d1ba36a32e2c15a936a257298e1714575b9cfcea17a62b2fb1b6640e3022de0819e7460b3c23e35954f17ba1075af2de7420edc5734921e228ab5c5cafa271918f6f35d6ddc5610a67a8856c7a3497351d7b1ccf2e5b81f4a545a486f11fc4233c5207404fc2194b2ed5f668d8fa4f6ff9739f39fb6be1100f41eb61f89b30b46a76f5ed3118b7c6e737862d1a92b46f2a164b9e8fbac6788826f0623fed79e5a80a7957db07a6e20a2397f932073ad44e9a76eff08bb876eb0c44b325d8676495f", &(0x7f00000010c0)=""/66, 0xa, 0x0, 0xec, 0x4e, &(0x7f0000001140)="14509d888d56d0065ac7df90d32e850eae41407086200e581a3a1a0cc4e31b85f422085af0a83793bb7a8d988a0abc75a643cae58ed5df3356b605afacfe3292106ca400723321d0de3a568fd11fceb559d58703d81f646d2fcb13e16ff5d0b0227666f8b146602459c315bc1578f4982c9294ece019e584592f79cd415a575366ca40c27d729a080ddd68f8139281fe638f5538d1c62a533528fcdcd47a1f047e934593e13769e789cd91f44ea2a470a5db12df024506c0f94e680ca1234180aefb2352ca1af498bcbb70c0c9e3c3897286bcc638408e64bedf5aae01caeeec33ef74ccacc82acaef98da0a", &(0x7f0000001240)="c95ef0ea8caef88fd6367b5cad9007b6be693b8bf91c813c5d9468887a13b93c63c82e076bddbd8d785c8678511c92cbb7e0720470c81a8ad010d8b3ad79a1c6700b4ad500b72b56624c753dc8f9", 0x7, 0x0, 0x80}, 0x50) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r9, r14, 0x25, 0x3, @void}, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xce) 2.10612121s ago: executing program 0 (id=4125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcbb2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x2, 0xe, 0x0, 0x2, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4920}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000340)='GPL\x00', 0x2, 0x14, &(0x7f0000000380)=""/20, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xc, 0x6, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000004c0)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000500)=[{0x4, 0x5, 0xf}, {0x4, 0x2, 0xc, 0x3}, {0x1, 0x4, 0x2}, {0x0, 0x1, 0xd, 0xc}, {0x3, 0x1, 0x1}, {0x0, 0x4, 0x10, 0x8}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000b80)=0xe8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r11}]}, 0x44}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r12 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r15 = gettid() r16 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r14, @ANYBLOB="089805000750050008001300", @ANYRES32=r15, @ANYBLOB="08002c00050000001400030076657468315f6d6163"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x3194, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x25f, 0xa5, 0x0, 0x1, [@nested={0x227, 0xf4, 0x0, 0x1, [@generic="8c6f64a82af26b262fcb165f9e4f7e727252b7f1cb26f09e988809169e279872235abd92842447b9ed39934304fe3e58f1e2a8797a495a1ddc1d4eb954c6372dcbc39142ba30d734412f1523165c175c03b50e55d896f18f1f0fa1211292011e2ca597dcc8a40aea67d8ba044997d4edf24178bdb2b9cc9d96ac399b856f2cfad4e0c2e336620fefbfbbd241b4bf927b195808e3f918b05b8e932adc0c16a0d974af36cb6cfa9a1fc590ec1970eeae1b9682b4081ae86e3330", @generic="da55cd7cb259df3d9e3068883b1cc2eb3e5e164e3d46839af7f886196081be5db3fe8d6dcd545d86d9813bd336d37dfe225654a8875d39d601a2059e2c4e4d448b35ede74fa7dc024c5ec0b0514608799785c4685bd9421908318cd3e270b57b025246e238a380c7e1f91e7074faf222cd848ab04081f2c540cdfa4eca28ac17bd5f31b362662acbcd0e568d78a4f470903e6ed436241746baf786346093134df9063e7fbe71db4198245fe4e478c34615ae9afc71fd2a0ce73eaaf199", @generic="9f05d11c9096813fe88448d91b38495db4454b021eefaba54017aea583f2d7d2dd98465ff97ff16eb2471fb8052aaa99a8336704a9581951b18084d088638d277fbe4efdbb89a6a2b7fa4541e6d8fc111bddd2349cefb0756f8148a671f75803d1d94383626aea2a8ded1010fb895b0c17ffc8804f3b6ac6d5cd945dd8b6ca58229050d4634db87ee2", @generic="872f5e92e749082819abd46ed5ad39163b166587d81a66a6348343f1", @nested={0x4, 0x116}, @nested={0x4, 0x118}]}, @typed={0x8, 0xa2, 0x0, 0x0, @str='GPL\x00'}, @generic="beb649da107a44be953a742ff7fa439bcd4239251eb5ff77f3b19d7878b1d27662a66888c3f86cee8f616e"]}, @typed={0x8, 0xac, 0x0, 0x0, @uid=r6}, @nested={0x1908, 0x8b, 0x0, 0x1, [@nested={0x315, 0x1a, 0x0, 0x1, [@nested={0x1b2, 0x118, 0x0, 0x1, [@nested={0xac, 0x122, 0x0, 0x1, [@generic, @typed={0xa1, 0x103, 0x0, 0x0, @binary="18d5b1c61611ee2c114d610a35d036ca10c2f6879caf2337d6161c14d8f423f714d9eb9bd987e491a11b4ba39d5cd1852a7fef669c5ecf4a9586ac52a2ffe18d624c669bfe770337ae6c84845610a5f435bdfeef51f330db758c66275b9c4a1057cadd09aa0b57f47c4cb74cbbed02b077a40a572e9a98970455ed2dc7a46188bd5c2e92b7f01742ea6c8e6c63d8dee85ec2a7042a2f4bf692037fab07"}, @nested={0x4, 0x104}]}, @typed={0x8, 0xbf, 0x0, 0x0, @fd=r4}, @generic="0531be2d84e5105bef9a889a1cd673d3c132a6bdfda86f5859e4a0d8a9b39bd20ec3b5fdc9a104392aaf7b4e5f699380ece020c88fbd3a7468d0094309a5befb176ebac958161699e796a0630d9a", @nested={0x4, 0xb7}, @generic="803e9473e93326fb", @nested={0x32, 0x34, 0x0, 0x1, [@typed={0x4, 0x3}, @generic="78b343bdc0f98277b5013438f3949285d2af87477706d81028973a445c536e3bcd9afc501336d92ef3e8"]}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @nested={0x5a, 0xda, 0x0, 0x1, [@generic="7dea3c6fd145fe25531c37f65e1257297c17462620a5dfe7dde4587d41169b07b034e96793298457e272f0730b4bb3198ec1efebe9ea", @typed={0xc, 0xbc, 0x0, 0x0, @u64=0xf}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0x1000}, @nested={0x4, 0xb3}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @typed={0x8, 0x62, 0x0, 0x0, @u32=0x72}, @typed={0x8, 0x154, 0x0, 0x0, @uid=r6}, @generic="a6c291d44d1b20a0ae041d5acc06dc91703cd7bf732fdda55db314377e27c8cc4af696c00413fe8724f4fa391617a60ac44edbccdaff2b62f54ec94ebe0e9a8abc829549d8b857444075bc7cec4ff895cd6870fdba0dcdac926c0373d10816baea63aa326f59f4e8e4a86d8b01d37e2973ca0ed6e2ab28fa2e5de81e9a180e96630fb8f9305cf117b5ec3a36b606a6a1304c0a978c32f46fdb6741457ac877815291296dec03b84f20c67826d4114726dfcbd617764c1f7207c9a381854648b31d67b1a0545a", @generic="d91ce659199d1a7933dae01cad1262c4175e621a81c343ab34ece7e04db71b5a", @generic="244eb1d48d0345081f30127b114c24779982876c1f47291f97b1f5b15df5ab47ec5c0f8c84fef120837e4a1738d931930f54e53b546f75e7bbfb727eca531c06d5a2133be30fa6c726da2b4b78fa8c1027450b9b54d957af96dfa303a2bdf5", @typed={0x8, 0x9c, 0x0, 0x0, @uid=r6}]}, @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}}, @nested={0x169, 0x52, 0x0, 0x1, [@typed={0xb, 0x71, 0x0, 0x0, @str='vxcan1\x00'}, @generic="bfd0f1cbde71a3b10b70fcd6528887655f6af3837a9a52272e7e627e3e3cd48a12e08b41efc454c379cbba01afcacc83f452606981d1ca57a38f52290731add237c4d7b19a718c3801fbaa7586d757422982926cf275abff3f9092ac3ac044b21af2f657427d1b62118ce48749276189fadf93f50c7c3702176d9d66e11d759a67633738eee95054bca4d1546eeec447e5f000aac7", @generic="76c7240e77fb7d987ac4c5db4398943ef688b134d3e41fec9cb4833677f9fce2721f1bb37f4e10caa01c84432cc05a47e37676b05faeaf3c11e54a6f23c74d44852a303c13e1afcc0ee733bbee189db60a9ebd1f9be4f7c0c89118cffd59ea7f02be3fcffc21611b105ce688dec06220415c20478d6968dc6e7728350c542d209d5a6992a4baf885206c389f15e69ec5f937951c68a1e706f96bd573259732e0c54d49e3747ad8a3659f7b5a97dfbae8", @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @nested={0x1c, 0x11f, 0x0, 0x1, [@nested={0x4, 0x147}, @typed={0x8, 0x154, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x68}, @typed={0x8, 0x45, 0x0, 0x0, @u32=0x1}]}, @nested={0x1b8, 0x68, 0x0, 0x1, [@typed={0xc, 0x72, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xec}, @nested={0x4, 0x158}, @generic="0f6b90825796870a5ab2864135a38bacb1f803aa8abfe7a2bd6447f7e6faa748cada24d67911b1ef00ea2a9cb6772b2b150d65f42d32073ceceb64f60d517348fe0e69b056b0dc36fd9d28947315bb4c88847d6965651f41443a636c84d9798a851c69c3b0355e8b88eef36a61086eaf8c84bb20aca977f45f94600a38b633ebdef4d42d384059c2def19c9982e670dc864650d256fc922a5e9a0acdcc6f0ef02483d53398f2cc60b080d8c72cc348d987be83311b06dac7738495e5000732574bc8c325e3f227f700f5d81adf77eb5ea5c528fd5d01586f1fbe", @nested={0x4, 0x10b}, @generic="d27c7fc635e21a5b88a54861e093998b0020f07529460594f3f2f9a486c0c03af73c9fad70a878e987670e1bd25b4de69e4b1a802c2c3de185dd229727736ad9355d43da591ac2fb492935a0192e36332cab84e499eda2dc74bc14303e1851ab0fb2b23a937ca48512f0187d659810f2ebb6c54b7eb3796b236975292df7381041944eec8798b959813ecadec091451367af558ba3658ff619ee24fc1a21a0296ce98e2ad6119c7d82afcdb358ad9162f4d73b5f7b1d06f8efe838d95068679e8432"]}, @nested={0x11b7, 0x45, 0x0, 0x1, [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@local}, @generic="b7da0b41a8ee0ed4a3f19ba414b24e9ff9474f8f0c597ff372a39112b0fd1f03b498c65493f1a653533399ab9d5f6b05a6bfa89c384d93986bdfd1745d51a27cbee3c8262723ff88f16295bb9d091ac322a8d675fb786932dfa2324e73959ad72e1bf7bd0ee37167c3a35c074ba3f43a6a21f97bb7564fc04bce11a264036c406cd34e172618d973a611d15ce4f0ce47b4530bac928e6d8c0f169447af0470f2c2792dec69d62a65726fcef43410d0b49c57397b4993cf62937e57b7dc90af922f3d0365ccb6ce7b9c5c0e1b5703570d8b8e62f6e09e1e0faae733067d8f8fab2f8a884b501ac7a58a76584d9df991aca202f0b716261c41743d5caee335891a36afb2c19b1ecd0c6b7e3481184f12fa2517e444f8dbd9edc9771fd4e56d752d9096e1d2767d350639c276e70e42277d9ebf6592c3a1e1cad62867319e69c01b857e86d46081271b56ef11ec7b3818150054c9c82e597b4a50b48879aec5001ab9fbc3b5ede6d60ef708a09050cb04ba958d6cb2408e2b3deb70c7bb2c5243b70ce6a1bfb19a70ab49f0167282f89cf7408dc4c4406c1d6d67980a76e2a5b0083ef1f3b91c3b0657147724b01a0a5256910e94ad1996130cea4f92651ba77ba9e9f99b13d46356caacbdb3f8d10bc6e2bfdbc1e7ffba59abef58713f5a6f55031c3d409c8a5d43a4219a00b06b169f8296e650d3c9039333c9f4eb827a9531a2ee3650dc3eaee075c3b3083a6e757a9c81e5043d6401aec42659a3309c39ef3c660fa60f1a0978576f7845d22d92ffd72168d1404d93832ef522fa503777aac602d0fb122480f9b564d4d63e3030b27b63e51136f3e067ea2f2b5de90a16c8cfef0c9571b63d2d1e3ceb599c2cfc64fa61098bd00f6dda48b1891a508d6fcfb9525ce100a3e6e27e71841c641b9758e977b482d90d4532dc8a1a6573c425755bdb09b4ece740f40fcffc54a880fc69d3b11567ee31856de6f947c59845b4e2817188cba2908afdd6b04657dd0810e1e6cae375536a2324a198bd5f18fb3e4b33b60df2e8ffd82dffbcc1b5562f28b60a5628e9d32af8ea53bbb6e2afb5db0962fcc3d2baaaf46905a297e820934a49cdf928b19a700d1173f41a6be4cb1e07a9da854bd1f4337c4a213475fa34f4477acac80587ae3918233ea37fc361bc3d2e62aab3215a14390ea54e6f9849c9234cc8f388123940c16ef2c082b973b94be82a16a6ad55c0ecd26864ad75381d10eee7d4518e4c902af6965bc03e0aa129f59042db014d4573140b28702993b5ed6d78b8efa5a285b1b9a6d9b5bbcedbb3de68fd89e25a356089cb9b06e1acdc3a75afa4d1e245628b45c45876026d811722ce75cb54d4089365ee99d816644a6e780fde3b0c31bcc8e847770284304cc8eecc6ba327eddbce6d92ae30e21098358cc07bd133551d469498c63898fbe030f5fc49e2060e314ffecae066fcba08319a709071eb50bd00545534fc04c80ef333c7953b86fdc6d8bd31a7133def9201c7859c6d4a8b4ede6ca39273d0698af764b80b658fe4f1de3abd3e53ebd9013fd415b27d7c25ee48020291d0e92d7a6b128319d0c6c119b68521fafbf12fed56cdce2f530bae0385122c0b9549ae285976fd8de46b97c4e79a6fdb2eedd109784b5d62832994d17369360678a8a03d7cf03e74cb14259b3b168e7d17e6eb805716c47a347cc2c11f90b4298511f775ac2a824515881f7381c7311df4a2fed27b782b5a45dac1ae5145ee08ea66863404c1d4f0dfdff3143b3a6c64dc1e1c89363fa34f45b06c20b85987f722f40785f311957467b9744a2c1691ec6eb99564b3e20b6337138b7c1748458f78acb19c89a3223c3302764e94b09bad110514aaf4be163de8a6aa2267707b91bf0f7b3bc5b8d478846c23b94d9a2e58e8a3f820944e8ca2de9087ce4499f0a0ee09c7e2633b98e76d28708ef4ea99ebb163347748653a34b340d4d28daa9f8ddfc610369730521a01473e2b4da647a206c93df5a3233f031593a5b0e8263dee9e8faa0f38daf51184de3dcee018b7a59fc271c48944e3c6860554e7092ed610368b9f3769822c6a27893caf9488f5629ebd2e076394fed3d362184a6a1723f15cff4328c70cbb075b931f35c35d6e5f317d1b73a17d79c4968165a5cee113221faaf9cf689e3d2c329fe5cda983f58ed8ced142fba3b56657ad1bff8ff16e07eedc3aac878257d7b70c1c1fe106e21da6ddf61f1498825e4965be3e36dc279d314251dd98c129b965d5817890f91fab74d0a7b1c78634a6acd98a694de66167f0e383291690976ea8edc1d7cd0e79579da811f87cd4cb09d3bee671e34a1e96ef797228ab10fa76bbb106ac8fbf51b3cacf5811fd1cccbf648d951d97f138bb726f5335595c2ea493f98483eaa56490da7891e9e44d8d738daacc85d0e3aa888fcc3dddd60d5eb38d471e0b6c2b29d1026579f60438b28076d58cc2c2c0948aab4de6877e6122e23f6b2700e4d9f351de2e08bc74246f3e30f064939ef963e608d2ba9764e0f144d8bb1da0bb5c5f2a080b2b51e62c1971a8f461055e5ead7a9fcf447d6c7ee9cbef77219dc6c00f63a9edaeb624b3dc9cb279bb6e64d00ecc832c11fae0e989613d3c79f978a34003bb4ecb871c3b106e6ad1f639d218f0429f7c559bc25dfb9b5f2023b67fdfd3d0208548370b21f3cf823469d91f129ef2034f449a9c9f11ff0c4a0c7a217ef7309b032367e6c14ee21c65d36d1d0a5011c2460b1ecad295512c8847e3b8c64a215e6a8fe883e6fe0d341bc8c91cdb465299a15af4257c35fb9bfe38c1706ace5bebc3448542114211f4621aacb60cb80998129c10265652b3c8b400da6809629a54e94289aabe653775e41b0f2621c892e1893d41976935f31c6ebe45ac559f02a87a9644dc47a7784a2da326cf916d95b6a84295d3139640fbe5a4f68d53c04b38cdd7a7116a51bd2e07c18bb4e9b26c62ed1676c3e0ba382fd2ae7ecbd230404a9fa0b3775aad1fe3a2e148db8cc560aeb51d33265968430e509f9fbdc8a6c91170be513e78c453497b1fb3a8ede6c2ac5b31cfba63f9abdb9f534bdf023045cffa6e58331ffd5a64ca884257491b2973ede0bc290f7bb3b89ede64663db6c4e169f7d2a5fe78412ab6f194ca192d3a05e294a6781b55a7faf6f295d89632e4faaa9ad6c9f18609b9816f1c0b8e00bdd55eecef963c87fdc3fa0ea96b08bf83d8f1239a2df315b7415ed298cba1c4d409a71f9ce6d962f830fa6706b58ab2a20a7272228e24ddc39de9f48f2956dd2ecfe6576d513afb34c069381052f9636ffb2f9e46ce85940d1688a866b621dd6c981f545609334d90285607a665a83b919a6ba98a9a321feb2894654d782fb9381305370493699e86db00439da53ab7ce6cda06046040cb11387055fdfe6a43469955ee2ad02844b3ca6a18e574b75190af5b12568397ffab25970db81ceeceb372e1f44f41bc813b97dec301e6974dd7773e75fdf83a7ee585aed7b07c577f55403704ba30a19ad8614e6d71749dea4ec04d1aa0c86cead8dc64cf12a7778836333f453676daf09253c5fc919a02bf9bc1f9c6d2b0e41fa36297682cb4bc1981c9e410ee6dc244423f88428a5f16c2233f9990a283e4e69714f9c484e1fcdd4b436467979fc42078c1d6aa64f9f7b2c9f2136b9a7e934cf096da15ef1c0b02fc82983fc59d20395cc21762107019bc3155dba9ff146e6ac37544652dc72e3b1c1ad8ac40f4d0263c59e7da12a3173262b3a949134c3ae1e9b37f27122e12d06d77ae6fda18f680c7f7dc66e350beb67c1471fc009522e572bb8cf5cdcf2623b37dc6d1d5373dcf2f7dd316d98b4c2f195212946ca9efdc64dd79269f8eacf8fc8c95729c57607d8d36244e9579222190c6ff894332f4f4e3548002155f5a5f96a9f21dd503c118c67830afaf14d7bc5730a29878567335545ddc0853dbb52c3289a2b5efe22c97d84140fbcf696b81fbebc1b6b5ece5046ff8311d0ca48c50c705d43f08bdd98ce18e068e9c1a14e1d8f6dd3b308825cdd9fa31f2b5f3fab58728de0302d605910feba58481f7dc8edbeea6336db9b3d87bba94af2eb134eec5d975788fd876679bbedd4a1bb87ad1458e8cfa3b65d194c3254d760368804501480a169b4e486fa252ec8f790c9282cc9c16f53d60ac04964f9f421c052e2b4e9b69c70633e3b20ec8c2325b760ab7bd1e26516c085629f8c4e2218e084485421e8a1728d64875b7642116ccda457a64d6939ad2dc2372b5fd8b214d00bd69bae5b429596c76a7be4e6c6676cdb0ea0ff2bc49a06c036c3d5e85e8cb9ee38b2e3825f1d934d7afcc3321deeeeb298da371fe9fad2961121c8719f17727e9c1c232f07be65786be65be65a291aa8edb111520740875a8b169455d183614a24a14183c14b10b78b8209ff7c28cb8b3967780eeb1b4e6f6a9f3a653d1393e105e58bffe94a030fdf51704fc1f0f4474582d5f6a17fb74bf0e7b9482612c1796c615aaf62499ff854a569ad0b270fb1b4a3815b4a4952f9a38067c67dbab840e8f0464dbdb925e9a08c6adb2b0b336c160812a4468db749ea628532ef0fa89b127d196cb67453d2e9282df9ef5c4a53aa738ec679d6463b83128368b3444deaab2f113466db2c95cea6991636e720bb6397d2ce2b4bf7b52e9624b443a359cf06367d6c39181de3c33e911745f7318cdfcde41cd919ac9103b8c4659c06c9ae4251a39e39af70ea7ee4840d5af6b9a487987c1bc34aedb4b6a12e5c07a01ec0a25850432f578c98d6f2999f50d2d0ed0fa7ab7b0b46a2541cd16fda74a9e42e4e51f1936de94e07eceeb34a1223ba4bf0c491976b48086346ced482109c49c953b5d029f72d5d500a09c82231f7c40f86fbdf3e627adbfcd5f45878c86a66ab0a2731718b67b9ac0a923ac01e9d38713ea7daa974994453615c35a5de161e724863af6a2d34152db3a65059d49a9755af7b55e9007cc17d1f1b8d056a15e45eb3cef430203ebadd25a8315c50540d761764e070884ce5ecdf33a09d47f74a03604d5e6f3e9e8a22e61b2257d9fb04054ae828e27309ad80735f7cc320267b89d101a6859f568e23ec8a0ae5c269ab11548fcadd3b6761a815cebd36222af2803035f3ceb15a0258209b87f4b3647b1d71917414dd3617c36cbcdaf81c0ab1099ff33a0a88ae942d50e0037db9636c7d088561db9e407f5f29a55052518492465813f3a955d0b0744992a52ebb3b35377a7507e76a7e87e8669e6fa9b59331e8a0d87f90798332678edfe3c4a193e5900272361c8cc9c7243b44f777e3a27e3e66ca97c3f3879923a4e19c0796c25d54052e6a40d9e48016057cfe866ca61403b6fa1ac822a065262288c8883c69c798f2351a3e8973285e6d9d7ebf1718a4e6666db2ae39be2686793a0ecb987b63501b82e194fce5d874956b4e1167828626725444ef56c6dc86b8a1496c2f6a8a15fd6fc8206bd58201367ff2be2a1054563065b421b8580d204ebee4e42d42e6561802f42f1ab91f30ee555fdba81d338153fefdbd2cfb29eaf1fdc410ef5d9790c784000314253fa7d62545af847301aeceac13ab7b0f3aee43adb2bb490b3929eed43fb6e43385772577febcdeda0be78fcab8373ef7175edb003db07c867041905c437ad72be74f38eeaa586e85c233e20415a3f5dad1b402ee8f19ab9dfe7f02f851f31bfbeaeff28973bca3e08bb119e548517e37348a2fdd9f207e20a5aaff86287d330e9d4b1a7af180f29314d1c023a6a5a6332f32f", @generic="d4c4f99d39e411737378e0197d2beefecd1b6fdabc3baed1ed902139c1af5c522abfed83591d84d555c2843fba235b6b38203b93de4e19ff86f16a2b7a967cc431227866bcb10e64c6eae44dc63ef4c2ceb675656a3666222cd94dc054c10ad39c6ac127e797cd170c6ca7b9d3a7ec0f4476ad778927e09af69a2591c31d10b08092f84663e89894f12eca740bcf0e3e4e63b8b695fe292e110f68ba612bd7ca21159e77d7903df956d56ba740ba60849cb3d801044da56dc197b59382f4c5c53bbdaf2cac953dfa3e47529fb596340e0ae4de44682f691a", @generic="0347297a82ef7e918063611ccb2dff61fab288f7744c3b01956836f16a1f065661c1afe3fa324d82327540640336f6d576a77f810312fca8df09e26050abed0a1b6797eb686bf3f0af2ca2dfbb70359181909197c21c8c0029f3fbc906ff5c14e66746acde31d599cbb72ff20197b977500551826e36bb71dfcd97dcf2ffa9524be1672bad4a84ec761d9950b5f18a61971708a2214bc5cd284c2ce6c3847a351244e83dae05ec180d4d85aae6574eba38f9c249f25185d75b4dbf2bb41a7101cf5ff91e51137d"]}, @nested={0xca, 0xcb, 0x0, 0x1, [@typed={0x14, 0x11, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xd9}, @nested={0x4, 0x7a}, @generic="31f637da91c2e89fbd767d32ac2ad85eb594395ac715486f8f3c0a7c0ee48fba9e754eabb564ff3cb4401b9a2d6e9fdddd7a4aefac556ae38e71c152b69aa460e31116a590701bbdf1e3980f8f0291106a9c0944ffd3b6a674af014d8128f69fe37e347f6a849fa526e7af2156829c37e830c58d175fbb076322b5cef29a4c65c9aca65a8a2956323059abc3de0b4f6ae0c2d077cf65f8c8ba5fa8b2cb6a3e4612c32346735acde13949"]}, @typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@remote}]}, @generic="68409a2f369270fd3fb572912792ba1d5690b1d8ebb383c7add99e7b009c364cc779aa7fced76de433bf82c23437f412636a4c55f500de31bd77ded1dba7bc4fe613c1a2a38d4af275711191098a9698f633f6d0433b3f5426dc8e3c53da0f638d232eb73d74fc2a676237d1ecb96a8c4b9187db74d89454b4dd36775ae1623c210fd7019899ef2136e27e854a680c37264e681be950137f8651e4bd3687a9b92ce94d239bf04aa02e39010771f40000cda153d9f756be7a5edbccd58ac9356962324763f3b2820630ff62322efd353a3bb84136932b0e9f179af8d955286100fab1621d32254405fb2439e38e1572abd1bd77b4dee93e10ab8dc2dd2bacc2bedb08c9d143d9400cd3067bb576dffb2f89b6174a44c8c566d58e737ffdff2fd08b26865c0ae2ea5d596fc13d38761969f8f25108356211c8ab4807f2527042702047f906f46b4f89e721761b851bc3577c54b29e801ed83a9fcadbf41f7b4be84e90d757b45551e4e496f84c2e36721ff290b53e22d97e402a3a19de459bbbb80d738826bef30c14be397ddc9e41908492a4ab0feac85e7d38959e86e86d1edb2ac09bcee496f76e0aafa816ed8f326c983739b8045ec0c16f9431cac1d09cb2cc37df9aecbb7905edb9a8ad0fd3ef7b3a636ecc6baca2b7a683753173aef390a1bfe819f90d60de159e140ea342bc6e5b1ea3001bf1ec5259b711426d7149c249b92b6cdc423f76bb3452beeb48e20e42ba814641052103c0004860dd6395088968fb8920eb1d166b5d5ec485b03bb57f8ee7aad1b0e4f1462a800d95ad8396c5d32d38cfa55776f93d7f65015984dd2a29825e2c3a21589522222a313b602b971784e931f11b17f0115b0387d999a1790069c30b381dfebe8312f8e865833a989d1083168fbeb1ffacfd4d163aad1e2259c97e279c24c98b9d0a58835a90769753474e9c34bbd4ee4a26a7107e05140e2091de0924ea1d4a98ecfbf0fdf2c090c6ef772c00882824a7651d832c5de7445412537381102ee32430028e7210118a126506655bcdd89a2409bf9980e61adf0adad26a0c8de730f95b4b954dfce858a9413ef166911a8b5abf83366d7216649d9323c29bbc9e52870adc8720b144418a1d74f9c30c51022332765e129dd0c1ca9f8eb52f8a34b06336b4ece6b03566e2ab1acf16b5df16800e0f23075854533c880c220db50303bc1aab12c31760e5f4fbc6386d47f55f10d7980a2c6be9e2af62c8b2f757f1a563915903b7aa24c8005c73a5f696776e7fc04b6f02ce7b2ce9a645e5275769fa079e4fbd58abce661c60bee976260ceb02b88f7346b10dca49f2c86c746f5a9eca3f46225b6754a4e57746345a09ceb442e51a32631ce55145051150aa41b2623d85abb93fe46a5bcc7ad1467f95ce676000ce431ef6a3b636214fcfc4d8066d38aaf22cb85b10da7ad9bf69617b9796d80f49dac8b994209161469db12701aebd258154d3203e4e43377fde3ca0aa58fa3419b0779ceba7af5689209b7bb3d57754a52452a33f90a9e4999c160da0d3c471daf7a9550c5309e2c70bbc680e9728c27b806ccaa10e7fa8644f62847037557b05f3f4d25a1a673b3ccc597008f5a771b5fc9f35f552dd3983b3cf0dc34e042717093e6c29b2b0aa2e238ae7dda1ef8d56f8f298934f5a2275eb3d9e51a6796c9fa84136d5f7e97b8df80acfbb2e0d2ce9cbd47249254e3324b9888c5f6cf9cec71fbbfde1540da8827e5259c751c63bce7fb59db48261c81ca10f5c415f5f8a9ce5665d06c4254aa26e6b49216c71b88429d4958ef7fd85bd848a99c75194e0bb7131cc69306b59e2e4537ec53083d40047cd884a5b10088e4725d94ba914dba8adb1bb64926197aa01ef6a83ce89fdc28bc08927fd0db5bce5ee7415d7de37ee260b6c824a6a7c4ea629fd3d992f0f0727f392adb69548d42d9dd6f46957abf8e9f2832e3ea1a26bff0b00d6f842320326a53813e438db3400d8aa732b271dcfc79a70f6c0f26beeb23e04bd2784b814fdba74d30b5eca7a44d96afe5db0feb15d5047ecd0d7674483a040a10ec1257f63c0a11cc9f2afb3fb40ff2ecb06a6361637bd54f98817e51b117a32c2fd52d27fcae0c6e1b0814e7814c9c7471211aad14d31ca9e28a7ae44f9785648feaf48f49034c42324e333189477352324012ccadbe260d8e9c5f232f3e5379291da0217d985714fa7b18e3ded223208159d076464b2d98f6121593988d83c892fbf94e7921b16300d32dd2a97bdd1e3ce5841e182643f5e1f5c8581bdf5e14e82d063a6811b46fd232ae5af21c19416a978eacfe188b33f17dbe585549f85b28ed8ffcc0931d171762181a79fb659d12c5be27bc390e0c33bc2fcd07b8b7feb80cd42216ad901a0a48b0805bfded781995fb0be53c7c7ddee25d636ade80226202b7e1e27f2556c793bb6a6081178f68ac71873361abc83052f7c0c6c48f4d63cbba2d64b2c1031320bcbb528d5c836ea155c10ebf393768cdea4d95ff26bb7d568099d6ae18024c09e92ece24a1fd0b59e57892b662cad9eb2dc3ee74fa642500ecd003d2408af0b0e7f7bbf5251316058fabe14bada7ff82a2fe097b574f944e41cbc0218343b587dc36895c9389c13cba4fb4598e03c7bafa14974b829439c52811677105b3de3dce0101a8546762e3d419573eb4bb157050e392ee7f117eaaac0b7582be3c348a5220b5fa049998d3785b0876dc43208212370112384e2ceefe6a304eb8eed79f8a7ea4491635e226ef34d8eed246b1df3313102fd780691a087a351017d5d25c253740da15159d1191471a15530f70fe43bc2a7df09ba298deebeab4afff55e392f54b7df731cf40c833d4742ec029d21bd09b9e5fc4defff121784bffff24106227e435e4f1cb586c659e456b1588b0422332c8359e0f63402182b472f1f5d51ad1c3d161bace9872504be911d90c6f02991f5f1154f8433d7c49fda9c8a0047a244aa5ffd860aeeb56aeeccb75de206c2bce1ec12364b5bc0353009bc0520afc835c0a9db4e45c91d5cf9d7e84403d60fd4f55217d85131541a1be43bf362e543fc5b61ef07b4f10f246932bb45e5a2deabe49c2a7859221f17cc9d9ed265e64cba2ee307533a10d169074449ad4afe7a65e026dfe62e86157569d4eb479603a252f39613227f7c70682c044094380b48a7139254e032d1e51da373c7a719918cdb7800b136160c09b14e8b0d3ab85a0aabe037caf4ea362eee1648e2918da6267de7916795ac9fbe66de4c9ced17173dd06645846f4734a5ed4b3ac32a9341ab2a44a57ae3a80fa73832e8cb344fd95e196532ec58688c5e7130cfc34f9c91a65166bd270064e143c3b833512969a52002361616d2ef138b1f4b6ff077fb74f3a40700bdc7d5a3e5eb9b5cb75ab7fdedb08567ec2b5d12ca5b800186f3528251ce26478378304bf069d5f663331d92c5dab1cf5a33ebd1ae113c9e6d13c3a80b74751c383d44fe1e65b0acda19820630c0725827a4a6bc26487962812c8a2a0e95eb279d0e23701c8861b486424da53cd139e4adfdcc3f33c99410c7893a5b16a8485d2ce218b7826c8b67a5d0c83d019dfefce37f25fdaf0d9cdd79863360454e3d4395ec62dd84bcdc3bb4ff84bfd7287a6098f93633430f675ba9c1b06a8b4a71b79f55895ca546437c32d20fce03530a4e60a37196cd538232de296e7e2e15f9d94fe064ebc9a5b31dd16171599b5f37630a170077f8c882b72592308c2363608632cb59b56d7076fdc77c7c1da7202860e0b3fbd7bb1133cb7c15ab651a2bc6a114d6b3821688ed9e924de47c1446bf3b9608ab080f8f447280637bbfd77039ae566422a13c9dddf4fb4f1a8564ec608753849905334e6f6cb2fac84a3cf06a4ea76c6dc3181f1f61a784029afe04e702ffee3f788b376d9ca8e92790a1973229ec62efdb639dfb5055ad2b1907fb4472d5860437cf4f0a293a0bb714f73081064f1e90f766b752e68bc385adc625751c29c4727853ed91c7824b022712cbbf8d821875a69c6f13a8f0e2cdf8129fddc598d1276e7a49b90b234c639ba97c54bb8476af7b481bdf906d9784782a0e4cc4cd391792dae0ee96ae5f0797d783f19ef8b7b6beddd7151fa43caa6d5c89a9e4f67afffea3b9aa39275bbe2848ecc5a24489c2a30feefafeffcbee0a7f7f5db3f97c6211f34757b0ee2ede8acd7a04e73cfbe9efcbc7c2969bea089bc20e864f814578aec0870cce6bf6c40d296bec1e4e28277ff1ceaa26c769f7b5fac258577a047e371e9920a654fa075469254b6b7b2f392fe2612dd0d0c67ced6b53678c5dd7349deda03b68631855368e7c177db01a84229c80fbe442bc12e7d56989a8aaf5dab63fdf1ad31215ee9442b14d122b4d348e01b4a21809d0f03ff84baf6d8b4e57a970317fdb322b3ee4a15bfc0aa8b089a9da05b05fdbec896539a878373ba9735f89e5f95816a0f7c9c76752e1b030179c4fb61ba396321edfc051e38a972febfacd4533bee155a736b8ce41483a7fd6a544e636dd0b362ac27b523a2546b61f8ff69220d9286e4a1d1f7858ac945e682bb6a66429125f887aea04de0ffe3c72e2b74e7fe728cc762bff2295b81bdafbe61e3785d44be8146c2d51cccdd149ffe3912499273c73ce11e0c1636c2d2d8695c00b37b2f339761b9b2961e274273849bf27d3ae344b85545da402bef18078703bca9437b87e9dba22ef036b014a1fb7710bedaddf0b074fd840b8301518b9f2d55f40c15815b0ed982ab44c006ac6c0c66e514a01316192d72b759bcf7b2abb466b81d5895d4545dfe5ced290ace859f8e52eeb6a93008095baaec855cba1d916dbcb841b9c4ebdef3d847ca623a86a89e07d9eee985931aa7fdf65a20dd68869e1ee24a1ae4dbad59594d91a61ee50eefef259296ed2d33ecf0dbe9cf63168abd5228e70ace7742b6c3c25e5abf1420ba53c13891af75ffddba3d6c7b5fa50b9cc6d2424d339d3b5a8078b321ad99e9fc970ac2f09105c58f3f4115693ed0fd28c2299f22a7d4e913e745de9903e7add18bc26e1d2c344969f109ddd5d16031181bd6f993de64862e4f48304692e39f84799002e7d8bc7260f0d519329ca10861b32b517d7c10211309732349350d88cf60695bc606a1912e4962f7c3a9aa921f43f21107e1fcce53eb8d3730419175c81d4e5edde94d3c1f7637fed14cf84daf4ca71a77d7ad6ea1e6358be3081e0b931afde9a0930916f3d4fafcadab2a91f2bf9876eded8527c5aec6bb4fab646bae9bd204fdf92ef16d2a03c89a30ac9569f5dce46b2d30b7cb70749680f56ba4da42d392e6776aedb7e4eed56fc4740f82648d245a8f9b7b1e1663a05b2afc895ec8b4e79cc09f2a1f6f1420b09c01e85d5a67ce359cc8caf93183bc77623e3a1f3654b083c489dc7e9eb08bb52bbf5214242cf85694cad4975af0fd9503fce529069e63b1069e66bf79d0f5eff4f4d707d1be4e942e9b918f3ddde9b930d5c3520436e28e6e9a2c3759dc55fbb2910e4c4a9f9cf337c054273c60a57b48359d0f4a3736d96d27d71e7fda953ec7454e2f1b98c638b99b7c2c46265ca0ccc4090c7a2a97daecc5316a24f787078225740faf207f44af6c9bb23895019909a79187076fab9d070af7df2f6bce6dfb5fcb13bbe467e942571d4e4a530e971fc03ae858ac861463269c52a7f5d1409e96d96182949d57d2566eb5ffaf411fe67d12176c5366b9fd9a43791460847db3b19aa84102dfcc786df8736cf0ba3f95aaf1c772fcfeb", @generic="5cbd51b431f9deceb8c4", @nested={0x1ea, 0xf4, 0x0, 0x1, [@typed={0x81, 0xcc, 0x0, 0x0, @binary="c84989ec4b76c5d4a0f99bbfb48eb975e31e8e7283d02a379eef17e12a4beef99f42ac0c04337288a3dfe858ba3699a5347ae037d286559d350629a1ea8acb927712a55311a4686db895db8d643cb054de3561666b011382266d9b7bf1e709ee52c0c7cf15f68f951d535cc37db9803eb0de84aed5830cc151af4d4690"}, @generic="5253068ab439bb6e57928779d89d56ee35c56ac000f6127e8520ac251268e66837649245b9f6d6f778f63246dc1c1d8829833e8d96eaa39e45f7c353050e94a33b0ec5cfc4a886fc1afe341544f156ff23fdfb02fe22f50267a4600d8fb69db2277259afaec2b04e7a457582bec1a9c16306bac488b32b73e6feb03c6d9e8cf258f265cefbed8eede2319a73e334792bef275128749d36e5270e2e5ac267851480b48ed9eb5523c4bd5d0ea4ba", @generic="80f3297ca029b87e7dc019b4018a74207394deea99900f6b0687eb6b8b78432aba7e4f9118d0b2898902d8ae07fa4bcafb1931c3ca4e4f6dbd745419ecc7694df1ab3f355a1e286a01e079bf953a7f79db978eb808429bc28d8d646b97f75d32219dad05341f93379beedbab67e930e390", @generic="cfe1b66170d00ba5a48bc3cb2dc2d1599dc73861d830f9221aee6392464310c3f674e38a6e3a164953ddf272b80d7f445f51df2434217a8bce440b66", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x3ff}]}, @generic="b59a983c6ef515c39fbde64b051e5e52f330cb9b798929c21a12a1529ea301695641c931369519486db6f6e0bf56c811f650d0f4f693f3faf45de1407a6d0365cf3c77a190b28f0b1940e724b448fc7cf814f4a00b320b68e858aaef7ba9330fdef3738c7cad2b2c89926fb51fd03518775c393e5c34dd7a8c660296674ab45cb657bdd92e59cf5541f45683", @nested={0x38a, 0xfc, 0x0, 0x1, [@typed={0x9c, 0xa0, 0x0, 0x0, @binary="f41c9fd54d2b94bfc9eb0f257c51104eb532cac1fa9ba84880221e67bc6399e4f5eb1a3a0b8b4989c5c55ce768d84166d689eb9245d792e2c6581f68484a0045bc2be4bca0d0a00b9c6cdd4d59d729f6246edd4d02f44b6c26214557ca86947b69505ab55eb9a7772569aaff760e34f40c3af82056fb2b1daa42e996348caa3b1b5adac763c9ac0d8ca7f9f65cbf9496eaf72fa930a6a1a5"}, @typed={0x8, 0x8b, 0x0, 0x0, @pid=r15}, @typed={0x5, 0x51, 0x0, 0x0, @str='\x00'}, @generic="b8ca5109af79bdb647b5ad22364ff7d0da0cd52fb4cc2d028eba8672ee5c17c2d176125efe4b2f771d2590b61f95f7e69907ec3a37d2f1aad81b535b7578e87bde462cf8a48ce1b65060890b68c50d890de92c186dfa5f87191583fafb25cba93bfcb32efb173cc8859eea90d8b253df3dd87de36fdce17206292cb61704cfaffa289636bcd33516d075b4d28a0117514f0896a036f11782ef23096b6b2e0e1f173e06959fda2846147df767e50870fbb951879d602b351a6ff5d20761bc801d532dd06d5cce0f0d752c1f622370b3a45856260e8489a3fb9ff9b7e7b748303d5c56aeec396212289f", @generic="60ca4cde6a2e5cb706e59d71d5b36226d1f53e4c23d35404d4b9f88615b6a2051c4203870edfec653783424d5cc0c3799021272fd7fa3d2ed8f67eeaae5839fdf5f9ac1208ab3d7431df21bf2b8c4bccca4a683e1af73b5ccd7e1e34c77360435037f5be13e7f1cd73a9198fdb94c174ce2b75d8bcbbca5efb3f7a49cdffbbfce7e362d7595dd5e4804bc56a2fe8d52900f94925aa30e7", @typed={0xc, 0x108, 0x0, 0x0, @u64=0xfffffffffffffff8}, @generic="9a30d54b24690f4b9f2f9682080702b21878490bcbc4223e4dd9f7f8274a3e79990d23e4e2594edd0ad1785256a6a64c659fffbfb1101dd2bf0d35d438a42c7c2850abc807657943e3aa5317d4e8723f4372d3123e999418a35479043609228f170299249811f2ae3fd06c7b75b971e26e3a61fb63476355bb7af46281e798275a4875d96da43fcbe41a79b41f35dfb105c16ee3deac31ee07efb8d9b556a31fae8eb9", @generic="8b95ddf01b8fb835d08b3ce2508931df1bbf7ea267c5f5c4e414a08c7c21ae8864f0a046315f614589b6f8c3c6fb50e592ea7e2b284208045371a959ffa6334d6bbbd430b0c2e28fc09ff5bff8dfe22d966a1efaa0ea53b5ce9df41c8e4e234302c321f6331bf3da3b540b603d5f580d9528b89a8f1d9c1d8afcad3e43f246c778503a6415bf7dc635ce514c600221bad7324ce6b2eb597fd35d64696faeb9d9a6538f93424ca5ad59ff06"]}]}, 0x3194}}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.105247149s ago: executing program 4 (id=4126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2c, 0xe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100003850000ffff00000300efe30000", @ANYRES32=0x0, @ANYBLOB="00020000000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x4000000) 1.891586633s ago: executing program 2 (id=4128): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) 1.835400639s ago: executing program 4 (id=4129): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x10}) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, 0x0, 0x0) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) 1.815639871s ago: executing program 1 (id=4130): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000013"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000cb9d2a026814c07b965b5201e079ced44eec5e843e2ee2f85e6b631707395fcabcf709a3e53781a709e3c8488e22ecda353f2c3643a5fc8c74de66a5b911", @ANYRES16=r5, @ANYBLOB="010000000000000000002c00000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) 1.756232591s ago: executing program 0 (id=4131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004d000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000002a00)=""/5, 0x5}], 0x4}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default, @null]}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100fffd0900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800054000000000080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408"], 0x100}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x7}, 0x4) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00fd10ffff0e0001006e657464657673696d0000000fade0a3f598d503a61134afe60002006e657664657673696d30000008000b00ff0f0000"], 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x64008893) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x4, 0x4, 0x80000001, 0x40008, r8, 0x80000000, '\x00', 0x0, r8, 0x1, 0x4, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r9, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) 1.48738381s ago: executing program 4 (id=4132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)=0x1000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)=0x1000) (async) 1.486979325s ago: executing program 1 (id=4133): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r2) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffad}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) socket$kcm(0x2, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r7, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x16842e9bd142d0d5}], 0x1, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000001a40)=""/4096, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000001}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.486515046s ago: executing program 2 (id=4134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='L\x00\x00\x00', 0x4}], 0x1}, 0x4008000) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r1, @ANYBLOB="00032abd7000fedbdf250c0000000c0099005a000000710000000900070000000000000000000800090005ac0f0008000a0011cbdb020a000600ffffffffffff0000080037000100000005000a004b000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$netlink(0x10, 0x3, 0x8000000004) socket(0x22, 0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x80, 0x80, 0xa2, 0xa, {{0x5, 0x4, 0x0, 0x15, 0x14, 0x64, 0x0, 0x10, 0x4, 0x0, @multicast2, @multicast1}}}}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0xdc7d) bind$bt_sco(r6, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r6, 0x2) accept4(r6, 0x0, 0x0, 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) writev(r5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x4004) 1.208615488s ago: executing program 2 (id=4135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24004081) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x400000008000f28, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x2d, 'devices'}, {0x2b, 'rdma'}, {0x2b, 'pids'}, {0x2d, 'perf_event'}, {0x2b, 'net_cls'}, {0x2d, 'cpuset'}, {0x2d, 'net'}]}, 0x37) 926.233213ms ago: executing program 0 (id=4136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r1, 0x0, 0x0, 0x22, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r7, 0x0, 0x3ffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f00000003c0), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xff08, 0x0) syz_emit_ethernet(0x12e, &(0x7f0000000700)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0xf8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x2d, 0x0, [], "21d23c33bd63aa4613df7166e89fdbb0104894eb5ee8e3c343599d5496bddfb5c3e90f07fa902268d5d722e1e6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "3ac91e123e5db57e35ae0b71b1aecefc6253cca5c21dde3727e459d978b663a2cf1ad149039372b7d7ea693648778ffa4af06f1ffb1b5b9815a6cdb23dc61b4eeb632469002b4e44809fdeba7ce9d8fe4a136a7b2f9fb5e56283b9b44232ca1a11f5cfba7a5fa0845295266ec8b3c20a41e8621af01131dad0511d24f17f7a25153924870096d4"}, {0x8, 0x88be, 0x1}}}}}}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getuid() getpid() sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001800ffff2cbd7000000000010a000000ff00000900090000e35671d68b2c1fa935953b4a9d0463a8d8b29705ca0ecbafa21aa1bdf70fcc9e19a0ae68acbb3a6f11c4e7fc46f7bc2845310c4f54f3fa2e2404fa2c03af45e9c620"], 0x1c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc02000000000000000000000000000143779d143ffdf4c6d30a59875ff3814da4a7503403ec195cf3b72f0afb390317e162797dac76a9589ff3db30881408b5bb357b0fd503ea8b02224bbdfa38922a6aa8784cd76d7525516fa44bdbde9e527ced2c0aedd7f4c3e859a7656daf2020c0bef2dc4e6fce85c085390d19"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 694.89435ms ago: executing program 4 (id=4137): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) readv(r0, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) 616.30898ms ago: executing program 1 (id=4138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x21, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @generic={0x4, 0x8, 0x1, 0x5}, @jmp={0x5, 0x1, 0x4, 0x6, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0xce, 0x7b, &(0x7f0000000200)=""/123, 0x41100, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x3, 0x1, 0xb, 0x1}, {0x0, 0x4}], 0x10, 0xffffffff}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x7}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x2, 0x40, @mcast1, @mcast2, 0x10, 0x80, 0x78, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xfffffff8, 0xc3, &(0x7f000000cf3d)=""/195, 0x40e00, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 397.471434ms ago: executing program 1 (id=4139): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'ip6erspan0\x00', {0x2, 0x4e21, @local}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x2000800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0xe403, r5, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 306.733252ms ago: executing program 3 (id=4140): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3ff}]}, 0x34}}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 291.269121ms ago: executing program 1 (id=4141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) 234.462173ms ago: executing program 3 (id=4142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x7, 0x0, &(0x7f0000000500)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001100010000000000000000000000000a14000000090a0104000000000000000000000000140000001000010000000000000000000084000abe5c7069b202a4cd9fcb9a65e9e7ab072be995262c1d89ab5f5e21ac7ec5b24b64ba515b3a5b5cfbb2f9d8977ec19a090c08f5b248acd1b7bbfb26119b0fd44e08ec0b6e84be63a88511fcab15d449"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 134.889798ms ago: executing program 1 (id=4143): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x201, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0xfdfd, 0xea, @local, 0x4}}}, 0x108) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@window, @sack_perm, @mss, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0x7}, @timestamp, @mss], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x12) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 19.566653ms ago: executing program 0 (id=4144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2cc, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "ca6e218d0d4a1aab5c0e54eea811ad6eb4b46593c403f4edd347245c229345093b216fb26f303a331b8a0e05b336deff0fe573976876b646e82697"}, @TIPC_NLA_NODE_ID={0x74, 0x3, "27eb382e81528eb2e61f27d1872758305c9b5d8063df05c346d304c4fe05c054bd55137b00ac4f1687dd4099b009433386e23755e6d584a223f685b8ef0bc1fa471ce7e041c19afb71d074c4b0473d1351048334142f2c247c7577418639d2b82074fd048b78c52f36184725e98db9a6"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "025365f1bde0201fda28f3b4ac9d5fd3daffe6f7fbbbff122a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa, 0x3, "0c670233b36e"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b3e62e45b00ea5e8f70ada7f3a9a7df680349948"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x420000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x502}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb42}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x97}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6493}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc0f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x32}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4e204cf}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4084}, 0x40) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x6b, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x100001}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) r8 = socket(0x2, 0x80805, 0x0) r9 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r10 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r10, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r11, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=4145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000001c0), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) kernel console output (not intermixed with test programs): 4294967272. macoff=96 [ 356.262221][T14817] IPVS: length: 24 != 36888 [ 356.725639][T14828] netlink: 'syz.3.2377': attribute type 1 has an invalid length. [ 356.910544][T14828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2377'. [ 357.158490][T14828] 8021q: adding VLAN 0 to HW filter on device bond12 [ 357.311764][T14842] lo: entered allmulticast mode [ 357.333028][T14842] lo: left allmulticast mode [ 357.647525][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2382'. [ 358.299089][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'. [ 358.356437][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'. [ 358.391209][T14871] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 358.412040][T14872] netlink: 'syz.2.2387': attribute type 23 has an invalid length. [ 358.435194][T14871] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 358.470934][T14871] tipc: Resetting bearer [ 359.062297][T14881] veth1_macvtap: left promiscuous mode [ 359.378567][T14898] netlink: 'syz.4.2394': attribute type 10 has an invalid length. [ 359.421130][T14898] team0: Device vxcan1 is of different type [ 359.519903][T14898] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 360.324004][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2402'. [ 360.739287][T14934] xt_hashlimit: size too large, truncated to 1048576 [ 361.691782][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'. [ 361.721345][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2409'. [ 361.825180][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2409'. [ 362.028343][T14964] netlink: 'syz.0.2409': attribute type 5 has an invalid length. [ 362.078807][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'. [ 362.425576][T14969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2413'. [ 363.255269][T14990] x_tables: duplicate underflow at hook 2 [ 363.675001][T14997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2422'. [ 364.015316][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 364.061171][T15011] chnl_net:caif_netlink_parms(): no params data found [ 364.983243][T15031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 365.390569][T15040] nbd: must specify at least one socket [ 365.438458][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 369.097231][T15096] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2449'. [ 369.275989][T15102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'. [ 369.444166][T15095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.493356][T15093] delete_channel: no stack [ 369.740845][T15113] netlink: 'syz.3.2452': attribute type 1 has an invalid length. [ 370.052393][T15113] bond13: entered promiscuous mode [ 370.058906][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 370.081032][T15113] 8021q: adding VLAN 0 to HW filter on device bond13 [ 370.269695][T15116] veth3: entered promiscuous mode [ 370.282905][T15116] veth3: entered allmulticast mode [ 370.387214][T15116] bond13: (slave veth3): Enslaving as a backup interface with a down link [ 370.618526][T15136] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 370.963593][T15148] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2461'. [ 371.231010][T15157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 371.309504][T15160] delete_channel: no stack [ 371.403692][T15149] netlink: set zone limit has 4 unknown bytes [ 371.943209][T15173] netlink: 'syz.4.2467': attribute type 2 has an invalid length. [ 372.611560][T15198] veth1_vlan (unregistering): left allmulticast mode [ 373.090245][T15210] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2476'. [ 373.113698][T15209] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2476'. [ 373.150454][T15213] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2477'. [ 373.677778][T15231] gretap0: left promiscuous mode [ 373.742184][T15233] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2483'. [ 373.752502][T15233] netlink: 'syz.1.2483': attribute type 2 has an invalid length. [ 373.839602][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 373.852241][T15238] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2484'. [ 374.318001][T15247] sctp: [Deprecated]: syz.2.2486 (pid 15247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.318001][T15247] Use struct sctp_sack_info instead [ 374.650278][T15256] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 374.919839][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 376.845813][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2507'. [ 377.201472][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2511'. [ 377.443372][T15339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2513'. [ 377.486950][T15338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2513'. [ 377.517955][T15339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2513'. [ 377.529700][T15330] hsr_slave_0: left promiscuous mode [ 377.550043][T15338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2513'. [ 377.562602][T15330] hsr_slave_1: left promiscuous mode [ 377.656921][T15343] bridge_slave_1: entered promiscuous mode [ 377.673292][T15343] 8021q: VLANs not supported on xfrm0 [ 377.701165][T15343] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 377.825957][T15345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2515'. [ 377.837922][T15347] netlink: 149016 bytes leftover after parsing attributes in process `syz.3.2516'. [ 377.851088][T15347] netlink: Unknown conntrack attr (type=14082, max=9) [ 377.859553][T15343] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 377.911899][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'. [ 378.899846][T15363] bridge7: entered promiscuous mode [ 378.905471][T15363] bridge7: entered allmulticast mode [ 378.998652][T15374] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.510896][T15385] netlink: 'syz.2.2528': attribute type 10 has an invalid length. [ 379.609789][T15388] ip6gre1: entered promiscuous mode [ 379.615797][T15388] ip6gre1: entered allmulticast mode [ 379.622843][ T755] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.633271][ T755] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.694811][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.905087][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.117279][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.574625][T15420] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 380.845322][T15429] pim6reg1: entered promiscuous mode [ 380.887576][T15429] pim6reg1: entered allmulticast mode [ 381.102097][T15432] vxcan1 speed is unknown, defaulting to 1000 [ 381.248259][T15442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.458010][T15452] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 381.491778][T15452] __nla_validate_parse: 3 callbacks suppressed [ 381.491795][T15452] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2546'. [ 381.806127][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 382.239848][T15465] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2549'. [ 382.943854][T15477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2553'. [ 383.048583][T15479] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2554'. [ 383.060291][T15479] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 383.804308][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.218379][T15521] netlink: 'syz.1.2565': attribute type 1 has an invalid length. [ 385.247059][T15521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2565'. [ 387.477509][T15585] vxcan1 speed is unknown, defaulting to 1000 [ 387.785744][T15586] vxcan1 speed is unknown, defaulting to 1000 [ 388.089494][T15593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.031440][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'. [ 389.061036][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'. [ 390.792945][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 391.030453][T15626] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2594'. [ 391.081855][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2594'. [ 391.112329][T15626] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2594'. [ 391.683581][T15626] syzkaller0: entered promiscuous mode [ 391.701508][T15626] syzkaller0: entered allmulticast mode [ 392.402390][T15633] syzkaller0: entered promiscuous mode [ 392.423223][T15633] syzkaller0: entered allmulticast mode [ 392.524658][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.081269][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'. [ 397.756667][T15667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.842083][T15669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2605'. [ 398.069070][T15681] geneve3: entered promiscuous mode [ 398.080945][T15681] geneve3: entered allmulticast mode [ 399.252403][T15686] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 399.325047][T15686] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2609'. [ 399.901180][T15712] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2616'. [ 400.266670][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 401.249124][T15738] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2624'. [ 402.622605][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2632'. [ 402.748665][T15772] netlink: 'syz.4.2634': attribute type 2 has an invalid length. [ 402.774692][T15772] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2634'. [ 403.281414][T15792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2638'. [ 403.496973][T15787] bond10: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.810278][T15787] bond10: (slave C): Enslaving as an active interface with an up link [ 403.829960][T15787] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 403.847726][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 403.862213][T15817] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 404.163162][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2647'. [ 404.207180][T15825] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 404.265293][T15825] netlink: 476 bytes leftover after parsing attributes in process `syz.2.2648'. [ 404.350346][T15825] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2648'. [ 405.576262][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 405.720978][T15844] netlink: 'syz.1.2653': attribute type 10 has an invalid length. [ 405.789278][T15849] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 405.856312][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'. [ 405.888148][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'. [ 406.180242][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2657'. [ 407.330104][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2668'. [ 408.650417][T15933] netlink: 'syz.3.2680': attribute type 8 has an invalid length. [ 408.752263][T15933] : entered promiscuous mode [ 408.862185][T15936] pim6reg: entered allmulticast mode [ 409.623231][T15965] tipc: Enabled bearer , priority 0 [ 409.633734][T15965] syzkaller0: entered promiscuous mode [ 409.641804][T15965] syzkaller0: entered allmulticast mode [ 409.660867][T15965] bridge0: port 1(vlan4) entered blocking state [ 409.668808][T15965] bridge0: port 1(vlan4) entered disabled state [ 409.679035][T15965] vlan4: entered allmulticast mode [ 409.686913][T15965] geneve0: entered allmulticast mode [ 409.695482][T15965] vlan4: entered promiscuous mode [ 409.700552][T15965] geneve0: entered promiscuous mode [ 409.721319][T15965] tipc: Resetting bearer [ 409.733557][T15968] ip6gre0: Master is either lo or non-ether device [ 409.742268][T15968] __nla_validate_parse: 2 callbacks suppressed [ 409.742283][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 409.760651][T15968] team0: left allmulticast mode [ 409.782177][T15968] team0: left promiscuous mode [ 409.799135][T15968] bridge0: port 1(team0) entered disabled state [ 410.444258][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.219476][T15999] netlink: 'syz.4.2701': attribute type 12 has an invalid length. [ 411.441609][T16002] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 411.730884][T15964] tipc: Resetting bearer [ 411.773094][T15964] tipc: Disabling bearer [ 412.139664][T16016] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2706'. [ 412.689365][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2711'. [ 412.888949][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2713'. [ 412.990997][T16043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2714'. [ 414.506886][T16068] syzkaller0: entered promiscuous mode [ 414.543339][T16068] syzkaller0: entered allmulticast mode [ 414.639492][T16071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2721'. [ 414.937675][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2724'. [ 414.965440][T16080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2724'. [ 414.972428][T16079] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2724'. [ 415.051100][T16080] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2724'. [ 415.107838][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'. [ 415.117546][T16079] veth5: entered promiscuous mode [ 415.196804][T16080] veth7: entered promiscuous mode [ 415.576855][T16099] xt_HMARK: proto mask must be zero with L3 mode [ 415.862890][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 416.706374][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 416.949195][T16144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2743'. [ 417.286613][T16160] vxcan1 speed is unknown, defaulting to 1000 [ 417.489234][T16160] bond8: option all_slaves_active: invalid value (222) [ 417.535453][T16170] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2752'. [ 417.558340][T16160] bond8 (unregistering): Released all slaves [ 417.757588][T16166] veth1_to_hsr: entered allmulticast mode [ 419.133755][T16195] syz.4.2757: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 419.170958][T16195] CPU: 0 UID: 0 PID: 16195 Comm: syz.4.2757 Not tainted syzkaller #0 PREEMPT(full) [ 419.171008][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 419.171042][T16195] Call Trace: [ 419.171050][T16195] [ 419.171058][T16195] dump_stack_lvl+0xe8/0x150 [ 419.171098][T16195] warn_alloc+0x249/0x340 [ 419.171125][T16195] ? stack_trace_save+0xa9/0x100 [ 419.171158][T16195] ? __pfx_warn_alloc+0x10/0x10 [ 419.171190][T16195] ? kasan_save_track+0x4f/0x80 [ 419.171212][T16195] ? kasan_save_track+0x3e/0x80 [ 419.171234][T16195] ? __kasan_kmalloc+0x93/0xb0 [ 419.171257][T16195] ? __kmalloc_cache_noprof+0x31c/0x660 [ 419.171278][T16195] ? xskq_create+0x56/0x170 [ 419.171303][T16195] ? xsk_setsockopt+0x54c/0x990 [ 419.171323][T16195] ? do_sock_setsockopt+0x17c/0x1b0 [ 419.171343][T16195] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 419.171362][T16195] ? do_syscall_64+0x15f/0xf80 [ 419.171392][T16195] __vmalloc_node_range_noprof+0x132/0x1750 [ 419.171451][T16195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 419.171483][T16195] ? __kasan_kmalloc+0x93/0xb0 [ 419.171514][T16195] vmalloc_user_noprof+0xad/0xe0 [ 419.171547][T16195] ? xskq_create+0xbf/0x170 [ 419.171572][T16195] xskq_create+0xbf/0x170 [ 419.171601][T16195] xsk_init_queue+0x8a/0xe0 [ 419.171628][T16195] xsk_setsockopt+0x54c/0x990 [ 419.171655][T16195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 419.171679][T16195] ? __pfx_aa_sk_perm+0x10/0x10 [ 419.171714][T16195] ? aa_sock_opt_perm+0xff/0x1a0 [ 419.171739][T16195] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 419.171763][T16195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 419.171788][T16195] do_sock_setsockopt+0x17c/0x1b0 [ 419.171814][T16195] __x64_sys_setsockopt+0x13d/0x1b0 [ 419.171839][T16195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.171861][T16195] do_syscall_64+0x15f/0xf80 [ 419.171887][T16195] ? trace_irq_disable+0x3b/0x140 [ 419.171914][T16195] ? clear_bhb_loop+0x40/0x90 [ 419.171939][T16195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.171959][T16195] RIP: 0033:0x7f6c7ef9cdd9 [ 419.171978][T16195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.171996][T16195] RSP: 002b:00007f6c7fea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 419.172017][T16195] RAX: ffffffffffffffda RBX: 00007f6c7f216090 RCX: 00007f6c7ef9cdd9 [ 419.172032][T16195] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 419.172044][T16195] RBP: 00007f6c7f032d69 R08: 0000000000000004 R09: 0000000000000000 [ 419.172057][T16195] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.172070][T16195] R13: 00007f6c7f216128 R14: 00007f6c7f216090 R15: 00007fffe22eef08 [ 419.172103][T16195] [ 419.172117][T16195] Mem-Info: [ 419.479721][T16195] active_anon:9019 inactive_anon:5 isolated_anon:0 [ 419.479721][T16195] active_file:2258 inactive_file:40358 isolated_file:0 [ 419.479721][T16195] unevictable:768 dirty:66 writeback:0 [ 419.479721][T16195] slab_reclaimable:10942 slab_unreclaimable:110534 [ 419.479721][T16195] mapped:32167 shmem:4217 pagetables:3824 [ 419.479721][T16195] sec_pagetables:0 bounce:0 [ 419.479721][T16195] kernel_misc_reclaimable:0 [ 419.479721][T16195] free:1301993 free_pcp:12439 free_cma:0 [ 419.529229][T16195] Node 0 active_anon:36076kB inactive_anon:20kB active_file:9032kB inactive_file:161228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128668kB dirty:264kB writeback:0kB shmem:15332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14056kB pagetables:15184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 419.570407][T16195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 419.612434][T16195] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.643700][T16195] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 419.649889][T16195] Node 0 DMA32 free:1240760kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36076kB inactive_anon:20kB active_file:9032kB inactive_file:161228kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:51096kB local_pcp:41920kB free_cma:0kB [ 419.687979][T16195] lowmem_reserve[]: 0 0 0 0 0 [ 419.692766][T16195] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.728578][T16195] lowmem_reserve[]: 0 0 0 0 0 [ 419.754192][T16195] Node 1 Normal free:3950412kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.816258][T16195] lowmem_reserve[]: 0 0 0 0 0 [ 419.828576][T16195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 419.849080][T16195] Node 0 DMA32: 1068*4kB (UME) 3615*8kB (UE) 1*16kB (M) 1840*32kB (UME) 1448*64kB (UME) 811*128kB (UME) 540*256kB (UME) 250*512kB (UME) 83*1024kB (UME) 71*2048kB (UME) 111*4096kB (UM) = 1239864kB [ 419.869000][T16195] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 419.881547][T16195] Node 1 Normal: 1*4kB (U) 9*8kB (UM) 10*16kB (UM) 5*32kB (UM) 11*64kB (UM) 4*128kB (UM) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3950412kB [ 419.901851][T16195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 419.914702][T16195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 419.925955][T16195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 419.946353][T16195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 419.966087][T16195] 46849 total pagecache pages [ 419.976512][T16195] 0 pages in swap cache [ 419.985261][T16195] Free swap = 124996kB [ 419.994948][T16195] Total swap = 124996kB [ 420.003285][T16195] 2097051 pages RAM [ 420.015295][T16195] 0 pages HighMem/MovableOnly [ 420.026775][T16195] 427573 pages reserved [ 420.031174][T16195] 0 pages cma reserved [ 421.076401][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 421.907368][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.920630][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.928892][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.938331][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.950236][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.013956][T16244] vxcan1 speed is unknown, defaulting to 1000 [ 423.600479][T16286] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 423.633072][T16244] chnl_net:caif_netlink_parms(): no params data found [ 423.809375][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 423.823599][T16281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'. [ 423.897975][T16285] bond8 (unregistering): Released all slaves [ 424.047646][ T5859] Bluetooth: hci5: command tx timeout [ 424.223237][T16244] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.232531][T16244] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.242222][T16244] bridge_slave_0: entered allmulticast mode [ 424.250488][T16244] bridge_slave_0: entered promiscuous mode [ 424.264565][T16244] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.278900][T16244] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.289266][T16302] netlink: 'syz.3.2780': attribute type 32 has an invalid length. [ 424.309150][T16244] bridge_slave_1: entered allmulticast mode [ 424.330094][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'. [ 424.343814][T16244] bridge_slave_1: entered promiscuous mode [ 424.509753][T16302] bond14: option coupled_control: invalid value (192) [ 424.565428][T16306] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2783'. [ 424.576358][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2783'. [ 424.590083][T16302] bond14 (unregistering): Released all slaves [ 424.639321][T16244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.663175][T16244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.677311][T16306] syzkaller0: entered promiscuous mode [ 424.683074][T16306] syzkaller0: entered allmulticast mode [ 424.798206][T16244] team0: Port device team_slave_0 added [ 424.808176][T16244] team0: Port device team_slave_1 added [ 424.853251][T16244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.860456][T16244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.887700][T16244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.909467][T16244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.917110][T16244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.000686][T16244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.068922][T16244] hsr_slave_0: entered promiscuous mode [ 425.077088][T16244] hsr_slave_1: entered promiscuous mode [ 425.083469][T16244] debugfs: 'hsr0' already exists in 'hsr' [ 425.090263][T16244] Cannot create hsr debugfs directory [ 425.409121][T16244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.420345][T16244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.432281][T16244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54146 - 0 [ 425.443188][T16244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 425.762277][T16317] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2786'. [ 425.773859][T16317] xt_l2tp: invalid flags combination: 8 [ 425.929833][T16321] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2788'. [ 425.983210][T16321] IPv6: sit2: Disabled Multicast RS [ 426.088669][T16323] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2789'. [ 426.125333][ T5859] Bluetooth: hci5: command tx timeout [ 426.471583][T16329] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 426.651001][T16329] netlink: 'syz.2.2791': attribute type 1 has an invalid length. [ 426.680734][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2791'. [ 426.739211][T16339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2794'. [ 427.057822][T16343] tipc: Resetting bearer [ 427.329868][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 428.179136][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 428.191083][T16387] netlink: 'syz.3.2807': attribute type 26 has an invalid length. [ 428.200300][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 428.210476][ T5859] Bluetooth: hci5: command tx timeout [ 428.244394][T16388] netlink: 'syz.3.2807': attribute type 16 has an invalid length. [ 428.252503][T16388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2807'. [ 428.676896][T16375] lo: left promiscuous mode [ 428.689599][T16387] netlink: 'syz.3.2807': attribute type 26 has an invalid length. [ 428.715749][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 428.821261][T16244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.857640][T16244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.893702][T16244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54146 - 0 [ 428.928430][T16244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 428.972365][T16370] vxcan1 speed is unknown, defaulting to 1000 [ 429.849799][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2810'. [ 430.284261][ T5859] Bluetooth: hci5: command tx timeout [ 430.779585][T16244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.812795][T16244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.845681][T16244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54146 - 0 [ 430.879164][T16244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 432.898073][T16440] netlink: 'syz.3.2820': attribute type 10 has an invalid length. [ 433.023645][T16440] team0 (unregistering): Port device team_slave_1 removed [ 433.074400][T16440] team0 (unregistering): Port device gretap1 removed [ 433.135196][T16444] syzkaller0: entered promiscuous mode [ 433.147754][T16444] syzkaller0: entered allmulticast mode [ 433.350566][T16244] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 433.382043][T16244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.409881][T16244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.437468][T16244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54146 - 0 [ 433.470891][T16244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 433.934476][T16462] bond8: option fail_over_mac: invalid value (16) [ 433.954015][T16462] bond8 (unregistering): Released all slaves [ 434.508442][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2827'. [ 435.354642][T16469] syzkaller0: entered promiscuous mode [ 435.369890][T16469] syzkaller0: entered allmulticast mode [ 435.863982][T16244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 436.009894][T16244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.019203][T16244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 436.037192][T16244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.072466][T16244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 436.105609][T16244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.122174][T16244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 436.147113][T16244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.310524][T16244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.341067][T16244] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.359723][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.366939][T12533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.389180][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.396362][T12533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.877263][T16244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.146297][T16502] xt_hashlimit: size too large, truncated to 1048576 [ 437.196800][T16244] veth0_vlan: entered promiscuous mode [ 437.253836][T16244] veth1_vlan: entered promiscuous mode [ 437.365271][T16244] veth0_macvtap: entered promiscuous mode [ 437.402842][T16244] veth1_macvtap: entered promiscuous mode [ 437.745537][T16244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.766677][T16510] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2839'. [ 437.776986][T16510] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2839'. [ 437.793987][T16510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2839'. [ 437.843763][T16244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.892433][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.919015][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.970062][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.062216][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.088188][T16517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2841'. [ 438.592323][T12529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.652862][T12529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.734322][T16526] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2844'. [ 438.771044][ T755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.802521][ T755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.006142][T16529] vxcan1 speed is unknown, defaulting to 1000 [ 440.089163][T16550] netlink: 'syz.2.2850': attribute type 2 has an invalid length. [ 440.241202][T16550] netlink: 'syz.2.2850': attribute type 10 has an invalid length. [ 440.310249][T16550] team0: Port device dummy0 added [ 440.402376][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'. [ 440.468375][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'. [ 440.543778][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 440.646774][T16560] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 440.872746][T16568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.949094][T16570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.618045][T16593] xt_hashlimit: size too large, truncated to 1048576 [ 441.925890][T16600] netlink: 'syz.1.2863': attribute type 2 has an invalid length. [ 441.933880][T16600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2863'. [ 442.266886][T16609] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2864'. [ 442.347974][T16609] 8021q: VLANs not supported on gre0 [ 442.708237][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 443.188484][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.205014][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.213863][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.223165][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.234657][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.540836][T16632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2869'. [ 443.891585][T16620] vxcan1 speed is unknown, defaulting to 1000 [ 444.047724][ T6103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.263136][T16646] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2871'. [ 444.288609][ T6103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.446234][T16657] IPv6: NLM_F_CREATE should be specified when creating new route [ 444.537405][T16662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2874'. [ 444.590226][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 444.615397][T16662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.669572][ T6103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.753459][T16668] team0: Device ip6tnl2 is of different type [ 444.831165][T16669] team0: Device ip6tnl2 is of different type [ 444.901719][ T6103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.208431][T16709] netlink: 'syz.1.2888': attribute type 28 has an invalid length. [ 445.222237][T16709] netlink: 'syz.1.2888': attribute type 3 has an invalid length. [ 445.223284][T16701] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 445.326715][ T5859] Bluetooth: hci2: command tx timeout [ 445.345680][T16709] tc_dump_action: action bad kind [ 445.366483][T12529] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.418415][T16717] openvswitch: netlink: IPv6 tunnel dst address is zero [ 445.504501][T16721] netlink: 'syz.4.2893': attribute type 1 has an invalid length. [ 445.511919][ T1178] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.548528][T16729] __nla_validate_parse: 4 callbacks suppressed [ 445.548545][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 445.635339][T16721] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 445.637835][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.768222][T16738] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2897'. [ 445.792978][T16738] netlink: 'syz.3.2897': attribute type 33 has an invalid length. [ 445.802041][T16736] netlink: 'syz.1.2896': attribute type 16 has an invalid length. [ 445.829863][T16736] netlink: 'syz.1.2896': attribute type 3 has an invalid length. [ 445.845616][T16736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2896'. [ 445.887758][ T6103] bridge_slave_0: left allmulticast mode [ 445.904617][ T6103] bridge_slave_0: left promiscuous mode [ 445.913084][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.284234][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.412466][ T6103] dvmrp1: left allmulticast mode [ 446.820800][ T6103] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 446.829018][ T6103] bridge5 (unregistering): left promiscuous mode [ 446.880079][ T6103] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 446.960808][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.971142][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.982446][ T6103] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 446.992033][ T6103] bond0 (unregistering): Released all slaves [ 447.005311][ T6103] bond1 (unregistering): (slave veth3): Releasing active interface [ 447.014565][ T6103] bond1 (unregistering): Released all slaves [ 447.028213][ T6103] bond2 (unregistering): Released all slaves [ 447.049595][ T6103] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 447.059576][ T6103] bond3 (unregistering): Released all slaves [ 447.078080][ T6103] bond4 (unregistering): Released all slaves [ 447.091316][ T6103] bond5 (unregistering): Released all slaves [ 447.104868][ T6103] bond6 (unregistering): Released all slaves [ 447.120716][T16620] chnl_net:caif_netlink_parms(): no params data found [ 447.143257][ T13] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.171246][T16738] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 447.192790][T16746] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 447.240063][T16746] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.249609][T16746] gretap1: entered promiscuous mode [ 447.255770][T16746] gretap1: entered allmulticast mode [ 447.367512][ T6103] tipc: Left network mode [ 447.405144][ T5859] Bluetooth: hci2: command tx timeout [ 447.529146][T16769] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2906'. [ 447.569749][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.589081][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.602353][T16620] bridge_slave_0: entered allmulticast mode [ 447.615354][T16620] bridge_slave_0: entered promiscuous mode [ 447.626658][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.633888][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.651588][T16620] bridge_slave_1: entered allmulticast mode [ 447.668748][T16620] bridge_slave_1: entered promiscuous mode [ 447.772693][T12533] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 447.847628][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.885716][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.102406][T16620] team0: Port device team_slave_0 added [ 448.148622][T16620] team0: Port device team_slave_1 added [ 448.243601][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2913'. [ 448.362147][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.402586][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.477601][T16803] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2915'. [ 448.488340][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.701533][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.723250][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.783751][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.029534][T16807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2916'. [ 449.103389][T16819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.411051][ T5510] 8021q: adding VLAN 0 to HW filter on device eth1 [ 449.478139][T16620] hsr_slave_0: entered promiscuous mode [ 449.485885][ T5859] Bluetooth: hci2: command tx timeout [ 449.506661][T16620] hsr_slave_1: entered promiscuous mode [ 449.538437][T16620] debugfs: 'hsr0' already exists in 'hsr' [ 449.570453][T16620] Cannot create hsr debugfs directory [ 450.032054][ T6103] hsr_slave_0: left promiscuous mode [ 450.047643][ T6103] hsr_slave_1: left promiscuous mode [ 450.062713][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.261550][T16886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2928'. [ 450.420432][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2932'. [ 450.581985][T16903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2934'. [ 450.646843][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 450.682525][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 450.772857][T16905] nbd4: detected capacity change from 0 to 63 [ 450.784955][T16906] block nbd4: NBD_DISCONNECT [ 450.796447][T16906] block nbd4: Disconnected due to user request. [ 450.809427][T16906] block nbd4: shutting down sockets [ 450.821568][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.827846][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.830754][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 450.839676][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 450.841244][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.864217][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 450.870890][ T6103] team0 (unregistering): Port device dummy0 removed [ 450.872018][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.887618][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 450.895607][T16357] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.917765][T16357] Buffer I/O error on dev nbd4, logical block 0, async page read [ 450.936315][T16357] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.954130][T16357] Buffer I/O error on dev nbd4, logical block 1, async page read [ 450.977098][T16357] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.987064][T16357] Buffer I/O error on dev nbd4, logical block 2, async page read [ 450.996098][T16357] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.006562][T16357] Buffer I/O error on dev nbd4, logical block 3, async page read [ 451.015525][T16357] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.029292][T16357] Buffer I/O error on dev nbd4, logical block 0, async page read [ 451.041630][T16357] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.066233][T16357] Buffer I/O error on dev nbd4, logical block 1, async page read [ 451.080598][T16357] ldm_validate_partition_table(): Disk read failed. [ 451.087571][T16890] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 451.103351][T16890] bond8: (slave lo): Enslaving as an active interface with an up link [ 451.115804][T16890] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 451.117320][T16357] Dev nbd4: unable to read RDB block 0 [ 451.140723][T16357] nbd4: unable to read partition table [ 451.156649][T16357] ldm_validate_partition_table(): Disk read failed. [ 451.165978][T16357] Dev nbd4: unable to read RDB block 0 [ 451.173806][T16357] nbd4: unable to read partition table [ 451.432704][T16915] xt_l2tp: v2 doesn't support IP mode [ 451.545273][T16929] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001 [ 451.576380][ T5859] Bluetooth: hci2: command tx timeout [ 451.703205][T16620] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.874985][ T6103] IPVS: stop unused estimator thread 0... [ 451.903553][T16620] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.081896][T16620] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.501478][T16620] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.508075][T16972] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2948'. [ 452.901690][T16992] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 452.932841][T16991] batadv_slave_0: Caught tx_queue_len zero misconfig [ 452.940173][T16990] SET target dimension over the limit! [ 453.228799][T16620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.267366][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.291140][T16620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.338014][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.357255][T16620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.381525][T17022] netlink: 'syz.3.2956': attribute type 21 has an invalid length. [ 453.396270][T17022] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2956'. [ 453.429304][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.468136][T17022] netlink: 'syz.3.2956': attribute type 4 has an invalid length. [ 453.483981][T17022] netlink: 'syz.3.2956': attribute type 5 has an invalid length. [ 453.507040][T17022] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2956'. [ 453.527932][T16620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.550979][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.941334][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.008561][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.063895][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.071098][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.122864][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.130036][T12529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.184913][T17067] mac80211_hwsim hwsim10 wlan1: Caught tx_queue_len zero misconfig [ 454.248538][T10074] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.299773][T10074] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.343611][T10074] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.418140][T12531] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.450934][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 454.898287][T17121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2974'. [ 454.956956][T17121] tls_set_device_offload_rx: netdev not found [ 455.140912][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.307869][T17137] bridge9: entered promiscuous mode [ 455.319752][T17137] bridge9: entered allmulticast mode [ 455.337009][T16620] veth0_vlan: entered promiscuous mode [ 455.371704][T17142] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 455.400639][T16620] veth1_vlan: entered promiscuous mode [ 455.510870][T17144] : entered promiscuous mode [ 455.550837][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 455.590644][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 455.615597][T17150] netlink: 'syz.3.2981': attribute type 3 has an invalid length. [ 455.653421][T17158] ip6tnl0: Caught tx_queue_len zero misconfig [ 455.654667][T17150] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 455.683765][T17158] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2983'. [ 455.692818][T17150] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2981'. [ 455.692844][T17150] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 455.692857][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2981'. [ 455.868873][T16620] veth0_macvtap: entered promiscuous mode [ 455.921686][T16620] veth1_macvtap: entered promiscuous mode [ 455.996822][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.061095][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.099979][T17179] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2988'. [ 456.138189][ T1178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.190160][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.202033][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 456.211216][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.211256][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.238325][T17187] openvswitch: netlink: Flow key attribute not present in set flow. [ 456.275988][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 456.297824][T17174] bond0: option arp_all_targets: invalid value (18446744073170647389) [ 456.497760][T12529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.531686][T12529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.649270][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.680354][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.740944][T17199] xt_hashlimit: size too large, truncated to 1048576 [ 456.794236][T17204] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2996'. [ 456.826944][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2995'. [ 456.953691][T17212] netlink: 'syz.2.2865': attribute type 11 has an invalid length. [ 456.972828][T17212] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2865'. [ 457.390787][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.403858][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.415090][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.425774][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.436734][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.611974][T17216] vxcan1 speed is unknown, defaulting to 1000 [ 457.811680][T17239] openvswitch: netlink: Unknown key attributes 2 [ 458.240063][T12529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.252377][T12529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 458.376662][T17263] gtp1: entered promiscuous mode [ 458.386424][T17263] gtp1: entered allmulticast mode [ 458.407085][T17274] tap0: tun_chr_ioctl cmd 1074025676 [ 458.425477][T17274] tap0: owner set to 0 [ 458.470825][T12529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.484441][T12529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 458.548639][T17270] netlink: 'syz.2.3012': attribute type 1 has an invalid length. [ 458.570647][T17270] netlink: 'syz.2.3012': attribute type 2 has an invalid length. [ 458.683873][T12529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.692682][T17289] netlink: 'syz.4.3016': attribute type 1 has an invalid length. [ 458.717651][T12529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 458.789617][T17289] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 459.063710][T17298] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 459.218519][ T1178] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.288262][T17216] chnl_net:caif_netlink_parms(): no params data found [ 459.330647][T12533] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.360663][T17320] netlink: 'syz.4.3024': attribute type 1 has an invalid length. [ 459.419124][ T755] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.429206][T17326] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 459.492167][T10074] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.501181][ T5859] Bluetooth: hci0: command tx timeout [ 459.733830][T12529] vlan4: left allmulticast mode [ 459.764325][T12529] geneve0: left allmulticast mode [ 459.776740][T12529] vlan4: left promiscuous mode [ 459.798074][T12529] geneve0: left promiscuous mode [ 459.819569][T17348] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004 [ 459.822581][T12529] bridge0: port 1(vlan4) entered disabled state [ 459.984848][T12529] dvmrp0: left allmulticast mode [ 460.070483][T17357] xt_hashlimit: size too large, truncated to 1048576 [ 460.358916][T17373] netlink: 'syz.0.3033': attribute type 1 has an invalid length. [ 460.480182][T12529] erspan0 (unregistering): left promiscuous mode [ 460.518187][T12529] gretap0 (unregistering): left promiscuous mode [ 461.038873][T12529] bond9 (unregistering): (slave bridge0): Releasing backup interface [ 461.047319][T12529] bridge0 (unregistering): left promiscuous mode [ 461.221403][T12529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.235063][T12529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.246258][T12529] bond0 (unregistering): Released all slaves [ 461.258968][T12529] bond1 (unregistering): Released all slaves [ 461.272834][T12529] bond2 (unregistering): Released all slaves [ 461.289106][T12529] bond3 (unregistering): Released all slaves [ 461.309619][T12529] bond4 (unregistering): Released all slaves [ 461.330119][T12529] bond5 (unregistering): Released all slaves [ 461.366701][T12529] bond6 (unregistering): (slave lo): Releasing backup interface [ 461.375663][T12529] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 461.388729][T12529] bond6 (unregistering): Released all slaves [ 461.405604][T12529] bond7 (unregistering): Released all slaves [ 461.419658][T12529] bond8 (unregistering): Released all slaves [ 461.437882][T12529] bond9 (unregistering): Released all slaves [ 461.454003][T12529] bond10 (unregistering): Released all slaves [ 461.470101][T12529] bond11 (unregistering): Released all slaves [ 461.490371][T12529] bond12 (unregistering): Released all slaves [ 461.505698][T12529] bond13 (unregistering): (slave veth3): Releasing backup interface [ 461.517302][T12529] bond13 (unregistering): Released all slaves [ 461.532884][T12529] bond14 (unregistering): Released all slaves [ 461.561832][T17373] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 461.564214][ T5859] Bluetooth: hci0: command tx timeout [ 461.589708][ T5510] 8021q: adding VLAN 0 to HW filter on device eth1 [ 461.597374][T17385] __nla_validate_parse: 5 callbacks suppressed [ 461.597389][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 461.675065][T17216] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.682986][T17216] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.691348][T17216] bridge_slave_0: entered allmulticast mode [ 461.700640][T17216] bridge_slave_0: entered promiscuous mode [ 461.710185][T17216] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.736674][T17216] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.762311][T17216] bridge_slave_1: entered allmulticast mode [ 461.788459][T17216] bridge_slave_1: entered promiscuous mode [ 461.857095][T17406] netlink: 'syz.0.3039': attribute type 83 has an invalid length. [ 461.879397][T12529] : left promiscuous mode [ 461.987119][T17216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.018728][T17216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.061224][T12529] : left promiscuous mode [ 462.181929][T17216] team0: Port device team_slave_0 added [ 462.190078][T12529] tipc: Disabling bearer [ 462.203065][T12529] tipc: Left network mode [ 462.211468][T17216] team0: Port device team_slave_1 added [ 462.409650][T17216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.432272][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.495394][T17216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.603861][T17216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.635088][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.689902][T17216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.774239][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 463.156738][T17485] netlink: 'syz.1.3056': attribute type 2 has an invalid length. [ 463.267176][T17488] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3058'. [ 463.343401][T17488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3058'. [ 463.357429][T17216] hsr_slave_0: entered promiscuous mode [ 463.364921][T17216] hsr_slave_1: entered promiscuous mode [ 463.371045][T17216] debugfs: 'hsr0' already exists in 'hsr' [ 463.385637][T17216] Cannot create hsr debugfs directory [ 463.469345][T17488] bond0: entered promiscuous mode [ 463.475898][T17488] bond_slave_0: entered promiscuous mode [ 463.481932][T17488] bond_slave_1: entered promiscuous mode [ 463.498225][T17488] gretap0: entered promiscuous mode [ 463.506263][T17488] hsr1: entered promiscuous mode [ 463.518156][ T5510] 8021q: adding VLAN 0 to HW filter on device eth2 [ 463.588103][T17504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3062'. [ 463.602860][T17502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3061'. [ 463.644958][ T5859] Bluetooth: hci0: command tx timeout [ 463.682265][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'. [ 463.943440][T17519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'. [ 464.019722][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 464.140748][T12529] hsr_slave_1: left promiscuous mode [ 464.183975][T12529] veth1_macvtap: left promiscuous mode [ 464.204159][T12529] veth0_macvtap: left promiscuous mode [ 464.212101][T12529] veth1_vlan: left promiscuous mode [ 464.371081][T17544] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3069'. [ 464.389138][T12529] pim6reg (unregistering): left allmulticast mode [ 464.709736][T12533] smc: removing ib device syz2 [ 464.797596][T12533] smbdirect: ib_dev[syz2] removed [ 464.832623][T17530] pim6reg: entered allmulticast mode [ 464.856958][T17535] pim6reg: left allmulticast mode [ 464.870237][T17535] bridge0: left allmulticast mode [ 464.929380][T17540] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 464.967801][ T5854] vxcan1 speed is unknown, defaulting to 1000 [ 464.969223][ T5510] 8021q: adding VLAN 0 to HW filter on device eth3 [ 464.989523][ T5854] syz2: Port: 1 Link DOWN [ 465.156180][T17216] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.630910][T17216] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.725723][ T5859] Bluetooth: hci0: command tx timeout [ 465.790100][T17578] vlan2: entered allmulticast mode [ 465.811019][T17578] veth0_to_bond: entered allmulticast mode [ 465.908776][T17577] vlan2: entered allmulticast mode [ 466.099351][T17216] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.235217][T17588] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 466.370310][T17216] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.057402][T17216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.111735][T17216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.139820][T17216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.208271][T17216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.214687][T17631] __nla_validate_parse: 2 callbacks suppressed [ 467.214704][T17631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3098'. [ 467.245934][T17216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.312744][T17216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.346486][T17216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.378495][T17216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.726889][T17216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.752047][T17659] sctp: [Deprecated]: syz.0.3106 (pid 17659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.752047][T17659] Use struct sctp_sack_info instead [ 467.821443][T17216] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.880965][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.888194][T10074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.961334][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.969275][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.051718][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3111'. [ 468.822279][T17216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.990546][T12529] IPVS: stop unused estimator thread 0... [ 468.994808][T17216] veth0_vlan: entered promiscuous mode [ 469.039809][T17216] veth1_vlan: entered promiscuous mode [ 469.048381][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3127'. [ 469.144185][T17216] veth0_macvtap: entered promiscuous mode [ 469.200106][T17216] veth1_macvtap: entered promiscuous mode [ 469.274909][T17216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.319784][T17216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.416867][T12529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.456160][T12529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.510135][T12529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.529574][T12529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.632464][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 469.817976][T12533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.860496][T12533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.970587][T12531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.010672][T12531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.055976][T17758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3140'. [ 470.777877][T17792] bond1 (unregistering): Released all slaves [ 470.952299][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.968889][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.977236][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.986832][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.998644][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.633175][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 471.653679][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b9f4800: rx timeout, send abort [ 471.831924][T17805] chnl_net:caif_netlink_parms(): no params data found [ 471.841003][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 472.153802][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880373b5c00: rx timeout, send abort [ 472.162134][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b9f4800: abort rx timeout. Force session deactivation [ 472.191139][T17805] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.226415][T17805] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.230093][T17873] IPv6: addrconf: prefix option has invalid lifetime [ 472.234517][T17805] bridge_slave_0: entered allmulticast mode [ 472.251793][T17805] bridge_slave_0: entered promiscuous mode [ 472.260270][T17805] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.267428][T17805] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.274947][T17805] bridge_slave_1: entered allmulticast mode [ 472.282704][T17805] bridge_slave_1: entered promiscuous mode [ 472.382056][T17805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.454742][T17805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.582602][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 472.583858][T17805] team0: Port device team_slave_0 added [ 472.610018][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 472.639693][T17805] team0: Port device team_slave_1 added [ 472.662071][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880373b5c00: abort rx timeout. Force session deactivation [ 472.778410][T17805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.800884][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.851650][T17805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.901419][T17805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.915882][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.961301][T17805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.988218][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 473.094009][T17805] hsr_slave_0: entered promiscuous mode [ 473.096229][ T5859] Bluetooth: hci3: command tx timeout [ 473.115501][T17805] hsr_slave_1: entered promiscuous mode [ 473.487527][T17805] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.723361][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3203'. [ 473.741766][T17805] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.743941][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3203'. [ 473.979863][T17805] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.010640][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 474.160282][T17805] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.734261][T17995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.759484][T17995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.778959][T17995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.801540][T17999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.819162][T17805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.834296][T17999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.852210][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.866854][T17994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.883004][T17805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.920065][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.952153][T17805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 474.985893][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.001930][T17805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.041659][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.167174][ T5859] Bluetooth: hci3: command tx timeout [ 475.257750][T17805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.290481][T17805] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.306735][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.313902][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.399320][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.406505][T12533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.444233][T18029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3231'. [ 475.488110][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3232'. [ 476.055335][T18055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3240'. [ 476.160963][T17805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.620344][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3253'. [ 476.633529][T18090] bond0: Unable to set down delay as MII monitoring is disabled [ 476.689613][T17805] veth0_vlan: entered promiscuous mode [ 476.732407][T17805] veth1_vlan: entered promiscuous mode [ 476.812778][T17805] veth0_macvtap: entered promiscuous mode [ 476.836420][T17805] veth1_macvtap: entered promiscuous mode [ 476.905934][T17805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.957622][T17805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.991267][T10074] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.025017][T10074] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.043988][T10074] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.068276][T10074] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.225941][T12529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.244925][ T5859] Bluetooth: hci3: command tx timeout [ 477.250939][T12529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.293346][T10074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.330124][T10074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.972812][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3282'. [ 478.078862][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.088523][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.101119][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.111487][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.123985][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.431847][T18171] netlink: 364 bytes leftover after parsing attributes in process `syz.2.3288'. [ 478.478003][T10074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.563432][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 478.624000][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 478.659386][T10074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.708594][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 478.841583][T10074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.950518][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 479.022820][T10074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.194572][T18154] chnl_net:caif_netlink_parms(): no params data found [ 479.223942][T18175] infiniband syz2: set active [ 479.239775][ T1178] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.244486][T18175] infiniband syz2: added vxcan1 [ 479.272555][T18175] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 479.276108][ T5955] vxcan1 speed is unknown, defaulting to 1000 [ 479.298771][T18175] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 479.316630][T18175] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 479.327664][ T5859] Bluetooth: hci3: command tx timeout [ 479.396007][T18175] RDS/IB: syz2: added [ 479.402242][T18175] smc: adding ib device syz2 with port count 1 [ 479.411984][T18175] smc: ib device syz2 port 1 has no pnetid [ 479.457152][T12531] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.524701][T17260] vxcan1 speed is unknown, defaulting to 1000 [ 479.542000][ T1178] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.573693][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 479.697322][T18154] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.721584][T18217] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3307'. [ 479.732018][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.732196][T18154] bridge_slave_0: entered allmulticast mode [ 479.736832][T18154] bridge_slave_0: entered promiscuous mode [ 479.786801][T12531] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.812898][T10074] bridge_slave_1: left allmulticast mode [ 479.824157][T10074] bridge_slave_1: left promiscuous mode [ 479.832970][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.848892][T10074] bridge_slave_0: left allmulticast mode [ 479.857841][T10074] bridge_slave_0: left promiscuous mode [ 479.867233][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.890215][T10074] bond2: left allmulticast mode [ 479.897380][T10074] bond2: left promiscuous mode [ 479.902460][T10074] bridge2: port 2(bond2) entered disabled state [ 479.914511][T10074] bond1: left allmulticast mode [ 479.921360][T10074] bond1: left promiscuous mode [ 479.926423][T10074] bridge2: port 1(bond1) entered disabled state [ 480.205304][ T5859] Bluetooth: hci1: command tx timeout [ 480.440694][T10074] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 480.449114][T10074] bridge6 (unregistering): left promiscuous mode [ 480.580688][T10074] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.589416][T10074] bond_slave_0: left allmulticast mode [ 480.597411][T10074] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.607515][T10074] bond_slave_1: left allmulticast mode [ 480.613190][T10074] .` (unregistering): Released all slaves [ 480.624911][T10074] bond1 (unregistering): Released all slaves [ 480.638873][T10074] bond2 (unregistering): Released all slaves [ 480.657096][T10074] bond3 (unregistering): Released all slaves [ 480.670685][T10074] bond4 (unregistering): Released all slaves [ 480.684980][T10074] bond5 (unregistering): Released all slaves [ 480.702159][T10074] bond6 (unregistering): Released all slaves [ 480.723278][T10074] bond7 (unregistering): Released all slaves [ 480.736725][T10074] bond0 (unregistering): Released all slaves [ 480.751215][T10074] bond8 (unregistering): (slave lo): Releasing backup interface [ 480.759436][T10074] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 480.773677][T10074] bond8 (unregistering): Released all slaves [ 480.789736][T18154] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.796997][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.805552][T18154] bridge_slave_1: entered allmulticast mode [ 480.813242][T18154] bridge_slave_1: entered promiscuous mode [ 480.863150][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 480.945173][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.983607][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.012303][T10074] : left promiscuous mode [ 481.155477][T10074] tipc: Disabling bearer [ 481.175675][T10074] tipc: Left network mode [ 481.256333][T18154] team0: Port device team_slave_0 added [ 481.314812][T18154] team0: Port device team_slave_1 added [ 481.447997][T18154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.456613][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.487486][T18154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.526217][T18154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.533339][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.579102][T18154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.651752][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 481.754485][T18154] hsr_slave_0: entered promiscuous mode [ 481.779748][T18154] hsr_slave_1: entered promiscuous mode [ 481.792628][T18154] debugfs: 'hsr0' already exists in 'hsr' [ 481.801209][T18154] Cannot create hsr debugfs directory [ 482.284456][ T5859] Bluetooth: hci1: command tx timeout [ 482.356102][T18276] delete_channel: no stack [ 482.360849][T18276] delete_channel: no stack [ 482.475057][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 482.530102][ T5510] 8021q: adding VLAN 0 to HW filter on device eth1 [ 482.670426][T18154] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.830090][T18154] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.002735][T18154] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.119233][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3337'. [ 483.254003][T18154] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.309682][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 483.339014][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 483.836303][T18154] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 483.870196][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.892296][T18154] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 483.921631][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.954329][T18154] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 483.987759][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.015074][T18154] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.035492][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.072932][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 484.212911][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'. [ 484.316676][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.368131][ T5859] Bluetooth: hci1: command tx timeout [ 484.378507][T18154] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.433116][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.440327][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.517258][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.524444][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.612806][T18367] netlink: 548 bytes leftover after parsing attributes in process `syz.0.3356'. [ 484.721669][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 485.185773][T18394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3364'. [ 485.187576][T18154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.374820][T18154] veth0_vlan: entered promiscuous mode [ 485.426975][T18154] veth1_vlan: entered promiscuous mode [ 485.534720][T18154] veth0_macvtap: entered promiscuous mode [ 485.572294][T18154] veth1_macvtap: entered promiscuous mode [ 485.588400][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3371'. [ 485.606619][T18175] vxcan1 speed is unknown, defaulting to 1000 [ 485.659802][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.716910][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.780659][T12531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.819345][T12531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.863352][T12531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.878441][T12531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.997771][T18425] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3376'. [ 486.196692][T12529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.218100][T12529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.317919][T12529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.338921][T12529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.446029][ T5859] Bluetooth: hci1: command tx timeout [ 487.081304][T18463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3389'. [ 487.132673][T10074] hsr_slave_0: left promiscuous mode [ 487.184292][T10074] hsr_slave_1: left promiscuous mode [ 487.620463][T10074] team0 (unregistering): Port device team_slave_1 removed [ 487.688287][T10074] team0 (unregistering): Port device team_slave_0 removed [ 488.071226][T18502] netlink: 'syz.3.3402': attribute type 1 has an invalid length. [ 488.095359][T18502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.102622][T18502] IPv6: NLM_F_CREATE should be set when creating new route [ 488.748876][T10074] IPVS: stop unused estimator thread 0... [ 488.881826][T18538] netlink: 'syz.1.3416': attribute type 64 has an invalid length. [ 488.933821][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.941496][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.968235][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3419'. [ 489.015332][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3419'. [ 489.279076][T18558] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3424'. [ 489.575740][T18568] syzkaller1: entered promiscuous mode [ 489.592236][T18568] syzkaller1: entered allmulticast mode [ 490.051334][T18597] netlink: 'syz.1.3440': attribute type 12 has an invalid length. [ 490.152517][T18601] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 490.295429][T18616] tipc: MTU too low for tipc bearer [ 490.321410][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 490.345970][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 490.578495][T18629] netlink: 'syz.2.3451': attribute type 21 has an invalid length. [ 490.596420][T18629] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3451'. [ 490.597987][T18628] netlink: 516 bytes leftover after parsing attributes in process `syz.1.3450'. [ 490.616076][T18629] netlink: 'syz.2.3451': attribute type 4 has an invalid length. [ 490.634087][T18629] netlink: 'syz.2.3451': attribute type 5 has an invalid length. [ 490.653530][T18629] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3451'. [ 490.666089][T18628] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 490.676567][T18628] xt_TCPMSS: Only works on TCP SYN packets [ 490.716191][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 490.782486][T18637] IPv6: NLM_F_CREATE should be specified when creating new route [ 490.800009][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'. [ 490.903962][T18642] netlink: 'syz.2.3457': attribute type 1 has an invalid length. [ 490.916638][T18642] netlink: 'syz.2.3457': attribute type 2 has an invalid length. [ 490.925749][T18642] netlink: 'syz.2.3457': attribute type 1 has an invalid length. [ 491.357119][T18653] syzkaller0: entered promiscuous mode [ 491.365997][T18653] syzkaller0: entered allmulticast mode [ 492.697616][T18709] bridge: RTM_NEWNEIGH with invalid ether address [ 493.685750][T18774] netlink: zone id is out of range [ 493.692194][T18774] netlink: zone id is out of range [ 493.699801][T18774] netlink: zone id is out of range [ 493.708706][T18774] netlink: zone id is out of range [ 493.717339][T18774] netlink: zone id is out of range [ 493.722541][T18774] netlink: zone id is out of range [ 493.736471][T18774] netlink: zone id is out of range [ 493.742109][T18774] netlink: zone id is out of range [ 493.747009][T18780] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 493.747768][T18774] netlink: zone id is out of range [ 493.776395][T18780] tipc: Started in network mode [ 493.777629][T18774] netlink: zone id is out of range [ 493.789975][T18780] tipc: Node identity 080211000001, cluster identity 4711 [ 493.822946][T18780] tipc: Enabled bearer , priority 0 [ 493.843045][T18774] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 493.852142][T18774] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 493.874846][T18774] tipc: Resetting bearer [ 494.178980][T18799] __nla_validate_parse: 18 callbacks suppressed [ 494.179000][T18799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3513'. [ 494.399198][T18769] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 494.430005][T18769] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 494.603885][T18836] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3523'. [ 494.854283][ T5854] tipc: Node number set to 134418688 [ 494.978644][T18846] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 495.001891][T18846] bond1 (unregistering): Released all slaves [ 495.104908][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 495.118300][T18865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'. [ 495.161567][T12533] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.174284][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 495.194485][T12533] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.211649][T18865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'. [ 495.355156][T12533] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.381812][T12533] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.576682][T18878] tipc: Failed to remove unknown binding: 66,1,1/0:289367380/289367382 [ 495.630053][T18878] tipc: Failed to remove unknown binding: 66,1,1/0:289367380/289367382 [ 495.823790][T18890] lo: entered promiscuous mode [ 495.867075][T18896] validate_nla: 1 callbacks suppressed [ 495.867094][T18896] netlink: 'syz.3.3539': attribute type 1 has an invalid length. [ 496.044691][T18904] xt_hashlimit: size too large, truncated to 1048576 [ 496.132775][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.277107][T18911] bridge_slave_0 (unregistering): left allmulticast mode [ 496.323525][T18911] bridge_slave_0 (unregistering): left promiscuous mode [ 496.350791][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.975010][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 497.742658][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 497.935881][T18992] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3567'. [ 498.269090][T18999] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 498.275179][T19001] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3570'. [ 498.327332][T19005] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 498.368527][T18999] bond1: entered promiscuous mode [ 498.390188][T18999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.503421][T18999] bond1: (slave bridge1): making interface the new active one [ 498.542455][T18999] bridge1: entered promiscuous mode [ 498.570946][T18999] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 498.614513][T19019] Bluetooth: MGMT ver 1.23 [ 498.849596][T19029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.861477][T19028] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 498.873609][T19028] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 498.917312][T19035] net_ratelimit: 4 callbacks suppressed [ 498.917329][T19035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.979757][T19029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.987089][T19029] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 498.994884][T19033] "syz.4.3579" (19033) uses obsolete ecb(arc4) skcipher [ 498.999141][T19029] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 499.039966][T19029] bond1: (slave xfrm1): making interface the new active one [ 499.050173][T19029] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 499.420031][T19050] __nla_validate_parse: 3 callbacks suppressed [ 499.420050][T19050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3585'. [ 499.553612][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3588'. [ 499.565499][T19063] bridge_slave_1: left allmulticast mode [ 499.571371][T19063] bridge_slave_1: left promiscuous mode [ 499.577683][T19063] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.655081][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3590'. [ 499.679113][T19069] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3588'. [ 499.716133][T19063] bridge_slave_0: left allmulticast mode [ 499.726865][T19063] bridge_slave_0: left promiscuous mode [ 499.745296][T19063] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.941327][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3593'. [ 500.130720][T19083] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 500.235934][T19089] xt_hashlimit: size too large, truncated to 1048576 [ 500.435604][T19103] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3600'. [ 500.820447][T19123] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3607'. [ 500.842568][T19123] 0: renamed from hsr_slave_1 (while UP) [ 500.866333][T19123] 0: entered allmulticast mode [ 500.880685][T19123] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 501.100075][T19144] FAULT_INJECTION: forcing a failure. [ 501.100075][T19144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 501.125940][T19144] CPU: 0 UID: 0 PID: 19144 Comm: syz.2.3613 Not tainted syzkaller #0 PREEMPT(full) [ 501.125964][T19144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.125978][T19144] Call Trace: [ 501.125985][T19144] [ 501.125993][T19144] dump_stack_lvl+0xe8/0x150 [ 501.126025][T19144] should_fail_ex+0x412/0x560 [ 501.126058][T19144] _copy_from_user+0x2d/0xb0 [ 501.126079][T19144] __copy_msghdr+0x3c5/0x5b0 [ 501.126103][T19144] ___sys_sendmsg+0x213/0x360 [ 501.126121][T19144] ? __lock_acquire+0x6b5/0x2cf0 [ 501.126152][T19144] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.126203][T19144] ? __fget_files+0x2a/0x420 [ 501.126220][T19144] ? __fget_files+0x3a0/0x420 [ 501.126245][T19144] __x64_sys_sendmsg+0x1bd/0x2a0 [ 501.126265][T19144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.126293][T19144] ? __pfx_ksys_write+0x10/0x10 [ 501.126322][T19144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.126340][T19144] do_syscall_64+0x15f/0xf80 [ 501.126363][T19144] ? trace_irq_disable+0x3b/0x140 [ 501.126386][T19144] ? clear_bhb_loop+0x40/0x90 [ 501.126408][T19144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.126423][T19144] RIP: 0033:0x7f1d2d59cdd9 [ 501.126441][T19144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.126455][T19144] RSP: 002b:00007f1d2e3c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.126474][T19144] RAX: ffffffffffffffda RBX: 00007f1d2d816090 RCX: 00007f1d2d59cdd9 [ 501.126487][T19144] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 501.126498][T19144] RBP: 00007f1d2e3c0090 R08: 0000000000000000 R09: 0000000000000000 [ 501.126508][T19144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.126519][T19144] R13: 00007f1d2d816128 R14: 00007f1d2d816090 R15: 00007ffe32876fc8 [ 501.126547][T19144] [ 501.369842][T19148] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3614'. [ 501.481467][T19151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3615'. [ 502.044506][T19079] Bluetooth: hci0: command 0x0c1a tx timeout [ 502.044546][ T5859] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 503.801260][T19123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.036951][T19181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3622'. [ 504.120946][T19181] syzkaller1: entered promiscuous mode [ 504.143978][T19181] syzkaller1: entered allmulticast mode [ 504.454959][T19212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3635'. [ 504.466209][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 504.475554][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'. [ 504.493731][T19210] Bluetooth: MGMT ver 1.23 [ 504.795632][T19223] vlan2: entered allmulticast mode [ 504.848674][T19229] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3639'. [ 504.872945][T19229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.932039][T19232] 8021q: VLANs not supported on syzkaller1 [ 505.178491][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3642'. [ 505.208738][T19240] bond2: entered promiscuous mode [ 505.216618][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3644'. [ 505.226632][T19240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3644'. [ 505.318987][T19246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3646'. [ 505.489231][T19258] delete_channel: no stack [ 505.559207][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 505.604385][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 506.054550][T19296] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 506.068424][T19296] bond1 (unregistering): Released all slaves [ 506.496953][T19318] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 506.526006][T19318] bond3 (unregistering): Released all slaves [ 506.687772][T19337] netlink: 'syz.0.3676': attribute type 3 has an invalid length. [ 506.919634][T19350] netlink: 'syz.2.3679': attribute type 4 has an invalid length. [ 506.931540][T19352] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 507.044902][T19361] netlink: 'syz.4.3683': attribute type 1 has an invalid length. [ 507.057637][T19362] openvswitch: netlink: Flow key attr not present in new flow. [ 507.064240][T19361] netlink: 'syz.4.3683': attribute type 2 has an invalid length. [ 507.200104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808aa4b800: rx timeout, send abort [ 507.700358][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808aa4bc00: rx timeout, send abort [ 507.709255][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808aa4b800: abort rx timeout. Force session deactivation [ 507.733547][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88808aa4bc00: connection exists (fe ff). last cmd: 20 [ 507.987507][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803da67000: rx timeout, send abort [ 508.500400][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803da67000: abort rx timeout. Force session deactivation [ 508.786704][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803da64400: rx timeout, send abort [ 509.293580][T19362] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 509.301018][T19362] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 509.399725][T19369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.426885][ T5955] IPVS: starting estimator thread 0... [ 509.527629][T19370] IPVS: using max 30 ests per chain, 72000 per kthread [ 509.580737][T19375] netlink: 'syz.2.3686': attribute type 62 has an invalid length. [ 509.696913][T19382] __nla_validate_parse: 10 callbacks suppressed [ 509.696932][T19382] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3688'. [ 509.839390][T19396] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3692'. [ 509.878306][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3692'. [ 509.897998][T19396] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3692'. [ 509.909133][T19396] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 509.919125][T19396] netlink: 'syz.2.3692': attribute type 2 has an invalid length. [ 509.928149][T19396] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3692'. [ 510.489135][T19414] vxcan1 speed is unknown, defaulting to 1000 [ 510.697641][T19433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3703'. [ 510.720983][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3703'. [ 511.014277][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3707'. [ 511.738304][T19477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3712'. [ 511.768725][T19482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3712'. [ 512.559010][T19510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.651539][T19519] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 512.903712][T19531] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 512.988949][T19533] netlink: 'syz.3.3726': attribute type 8 has an invalid length. [ 513.340055][T19553] block nbd1: Unsupported socket: should be TCP or UNIX. [ 513.605945][T19564] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 513.640776][T19564] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 513.681176][T19564] gretap1: entered promiscuous mode [ 513.703757][T19564] gretap1: entered allmulticast mode [ 513.972729][T19577] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 514.109043][T19577] bond1: entered promiscuous mode [ 514.133032][T19577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.174862][T19584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 514.311199][T19589] netlink: 'syz.4.3742': attribute type 1 has an invalid length. [ 514.334720][T19589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.737188][T19600] team0: Cannot enslave team device to itself [ 514.757370][T19605] lo: left promiscuous mode [ 514.762244][T19605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.027117][T19623] __nla_validate_parse: 7 callbacks suppressed [ 515.027134][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3753'. [ 515.171189][T19633] netlink: 'syz.0.3754': attribute type 1 has an invalid length. [ 515.189506][T19636] IPVS: set_ctl: invalid protocol: 43516 10.1.1.2:20002 [ 515.229383][T19633] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 515.240985][T19633] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 515.267938][T19633] bond2: (slave ip6gre1): making interface the new active one [ 515.277316][T19633] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 515.295406][T19638] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 515.303076][T19638] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 515.762556][T19657] netlink: 'syz.0.3762': attribute type 1 has an invalid length. [ 515.786570][T19657] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3762'. [ 515.824610][T19666] netlink: 'syz.2.3765': attribute type 1 has an invalid length. [ 516.612756][T19704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.648676][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3780'. [ 516.657985][T19708] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3779'. [ 517.080507][T19730] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3786'. [ 517.119198][T19731] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3786'. [ 517.260313][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3787'. [ 517.392660][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3789'. [ 517.534492][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 517.811411][T19758] netlink: 'syz.1.3794': attribute type 9 has an invalid length. [ 518.053359][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'. [ 518.293630][T19776] nbd: couldn't find a device at index 0 [ 518.325455][T19776] netlink: 'syz.1.3801': attribute type 11 has an invalid length. [ 518.475510][T19787] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 518.749695][T19804] netlink: 'syz.1.3811': attribute type 3 has an invalid length. [ 518.754548][T19805] netlink: 'syz.0.3810': attribute type 8 has an invalid length. [ 519.291954][T19824] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 519.319614][T19826] sctp: [Deprecated]: syz.3.3819 (pid 19826) Use of int in maxseg socket option. [ 519.319614][T19826] Use struct sctp_assoc_value instead [ 519.446761][T19837] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20002 [ 519.856408][T19849] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 520.170579][T19866] __nla_validate_parse: 10 callbacks suppressed [ 520.170598][T19866] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3823'. [ 520.376311][T19849] batadv0: entered promiscuous mode [ 520.382532][T19849] batadv0: entered allmulticast mode [ 520.391027][T19849] bridge0: port 3(batadv0) entered blocking state [ 520.398516][T19849] bridge0: port 3(batadv0) entered disabled state [ 520.419637][T19849] bridge0: port 3(batadv0) entered blocking state [ 520.426228][T19849] bridge0: port 3(batadv0) entered forwarding state [ 520.464501][ T755] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 520.475336][ T755] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 520.856482][T19885] netlink: 'syz.2.3832': attribute type 9 has an invalid length. [ 520.996478][ T6103] batman_adv: batadv0: IGMP Querier appeared [ 521.050431][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 521.173654][ T5958] IPVS: starting estimator thread 0... [ 521.316065][T19894] IPVS: using max 27 ests per chain, 64800 per kthread [ 521.360423][T19904] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3839'. [ 521.374490][T19904] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3839'. [ 521.395869][T19906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3840'. [ 521.708307][T19923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3846'. [ 521.806147][T19930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.191830][T19942] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 522.338496][T19942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3854'. [ 522.347949][T19946] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 522.361232][T19946] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 522.432661][T19945] tipc: Started in network mode [ 522.440397][T19945] tipc: Node identity ae008778183, cluster identity 4711 [ 522.464281][T19945] tipc: Enabled bearer , priority 0 [ 522.482912][T19950] syzkaller0: entered promiscuous mode [ 522.490878][T19950] syzkaller0: entered allmulticast mode [ 522.520404][T19952] bond2: (slave gretap2): making interface the new active one [ 522.543296][T19952] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 522.850346][T19964] syzkaller0: entered promiscuous mode [ 522.859051][T19964] syzkaller0: entered allmulticast mode [ 522.947495][T19967] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 523.095970][T19944] tipc: Resetting bearer [ 523.149815][T19944] tipc: Disabling bearer [ 523.374242][T19973] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.495269][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 523.758762][T19974] team0 (unregistering): Port device team_slave_0 removed [ 523.789983][T19974] team0 (unregistering): Port device team_slave_1 removed [ 523.927692][T19968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.967865][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3878'. [ 525.087174][T20026] vxcan1 speed is unknown, defaulting to 1000 [ 525.088418][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 525.094355][T20044] openvswitch: netlink: Flow actions attr not present in new flow. [ 525.109483][T20043] openvswitch: netlink: Flow actions attr not present in new flow. [ 525.173167][T20049] netlink: 'syz.2.3881': attribute type 4 has an invalid length. [ 525.188666][T20049] __nla_validate_parse: 1 callbacks suppressed [ 525.188680][T20049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3881'. [ 525.406934][T20056] netlink: 'syz.2.3883': attribute type 12 has an invalid length. [ 525.512032][T20060] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 525.541387][T20060] netlink: 'syz.2.3883': attribute type 2 has an invalid length. [ 525.573902][T20060] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 525.573941][T20062] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.3883'. [ 525.577586][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'. [ 525.610501][T20060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3883'. [ 525.668453][T20062] netlink: 'syz.2.3883': attribute type 5 has an invalid length. [ 525.696005][T20065] netlink: 'syz.1.3885': attribute type 1 has an invalid length. [ 525.717867][T20062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3883'. [ 525.808948][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3885'. [ 527.787636][T20065] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 528.221275][T20092] netlink: 'syz.4.3890': attribute type 3 has an invalid length. [ 528.452429][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3894'. [ 528.471100][T20104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3894'. [ 528.550900][T20106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3893'. [ 528.997693][T20120] netlink: 'syz.4.3899': attribute type 3 has an invalid length. [ 529.029823][T20120] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3899'. [ 529.379771][T20134] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 529.525339][T20138] syzkaller0: entered promiscuous mode [ 529.539122][T20138] syzkaller0: entered allmulticast mode [ 529.755438][T20148] netlink: zone id is out of range [ 529.770858][T20148] netlink: zone id is out of range [ 529.794537][T20148] netlink: zone id is out of range [ 529.830011][T20148] netlink: zone id is out of range [ 529.852406][T20148] netlink: zone id is out of range [ 529.871849][T20148] netlink: zone id is out of range [ 529.889565][T20148] netlink: zone id is out of range [ 529.898563][T20148] netlink: zone id is out of range [ 529.931690][T20148] netlink: zone id is out of range [ 529.967947][T20148] netlink: zone id is out of range [ 530.204883][T19079] Bluetooth: hci1: command 0x0405 tx timeout [ 530.290243][T20171] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 530.299857][T20171] __nla_validate_parse: 2 callbacks suppressed [ 530.299872][T20171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3917'. [ 530.553015][T20151] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 531.340693][T20204] gre1: entered promiscuous mode [ 531.366238][T20202] xt_hashlimit: size too large, truncated to 1048576 [ 531.736073][T20219] syzkaller0: entered promiscuous mode [ 531.774674][T20219] syzkaller0: entered allmulticast mode [ 532.228948][T20239] xt_l2tp: v2 tid > 0xffff: 1114244 [ 532.240992][T20241] netlink: 412 bytes leftover after parsing attributes in process `syz.4.3940'. [ 532.304900][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3941'. [ 532.424987][ T5958] IPVS: starting estimator thread 0... [ 532.492090][T20255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3942'. [ 532.544284][T20250] IPVS: using max 30 ests per chain, 72000 per kthread [ 533.178540][T20284] vxcan1 speed is unknown, defaulting to 1000 [ 533.259926][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3951'. [ 533.907782][T20303] vlan2: entered promiscuous mode [ 533.919700][T20303] vlan2: entered allmulticast mode [ 533.937341][T20303] hsr_slave_1: entered allmulticast mode [ 534.021909][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 544.374097][T19079] Bluetooth: hci5: command 0x0406 tx timeout [ 555.125662][T20329] tipc: Enabled bearer , priority 0 [ 555.196705][T20346] syzkaller0: entered promiscuous mode [ 555.247562][T20346] syzkaller0: entered allmulticast mode [ 555.447135][T20329] tipc: Resetting bearer [ 555.490244][T20327] tipc: Resetting bearer [ 555.570959][T20327] tipc: Disabling bearer [ 555.601230][T20362] netlink: 'syz.1.3979': attribute type 11 has an invalid length. [ 555.767847][T20367] net_ratelimit: 45 callbacks suppressed [ 555.767893][T20367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.929191][T20356] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.936870][T20356] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.306916][T20356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.357951][T20356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.994549][ T1178] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.996253][T20363] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 557.015730][ T1178] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.038630][ T1178] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.054803][T20363] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 557.081550][T20363] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 557.094891][ T1178] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.105409][ T1178] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.120042][ T1178] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.130632][ T1178] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.141316][ T1178] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.329379][T20387] xt_TCPMSS: Only works on TCP SYN packets [ 557.447763][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3986'. [ 557.615497][T20393] batadv0: entered promiscuous mode [ 557.637203][T20393] macsec1: entered promiscuous mode [ 557.656504][T20393] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 557.675061][T20398] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3990'. [ 557.734983][T20388] vxcan1 speed is unknown, defaulting to 1000 [ 557.960526][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3994'. [ 559.380752][T20476] netlink: 'syz.1.4008': attribute type 83 has an invalid length. [ 559.560003][T20486] tipc: Failed to remove unknown binding: 66,0,0/0:3059197935/3059197936 [ 559.590709][T20486] tipc: Failed to remove unknown binding: 66,0,0/0:3059197935/3059197936 [ 559.943113][T20503] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4017'. [ 560.221078][T20506] bond3: entered promiscuous mode [ 560.241561][T20506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 560.360586][T20514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4019'. [ 560.588550][T20521] gre1: entered promiscuous mode [ 560.623386][ T29] audit: type=1107 audit(1777243422.865:6): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g|xldhVr b]@>o<& edI+{ y)4߅w8ӫ'Ry9jLRkj:򊝀 [ 560.623386][ T29] Diz[6@NM-y!K3- ϝ&X@??͝~]7#3C|ٺK(zI,w olǓ' [ 560.684818][ T29] audit: type=1107 audit(1777243422.865:7): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g|xldhVr b]@>o<& edI+{ y)4߅w8ӫ'Ry9jLRkj:򊝀 [ 560.684818][ T29] Diz[6@H' [ 560.739552][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 560.777268][T20531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.006077][T20539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4027'. [ 561.025750][T20541] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.4029'. [ 561.149267][T20549] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 561.178371][T20549] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 561.462204][T20560] 8021q: VLANs not supported on ip6_vti0 [ 561.637925][T20570] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 561.687687][T20570] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 561.710834][T20570] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 562.016037][T20586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4041'. [ 562.122885][T20591] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4044'. [ 562.157379][T20593] netlink: 'syz.2.4045': attribute type 10 has an invalid length. [ 562.319638][T20591] 0 (unregistering): left promiscuous mode [ 562.373923][T20599] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 562.645590][T20611] netlink: 'syz.0.4050': attribute type 12 has an invalid length. [ 562.709659][T20611] __nla_validate_parse: 4 callbacks suppressed [ 562.709684][T20611] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4050'. [ 562.850782][T20619] veth1_to_bond: mtu less than device minimum [ 562.937308][T20625] tipc: Started in network mode [ 562.955833][T20625] tipc: Node identity f62d954f6ad1, cluster identity 4711 [ 562.989361][T20625] tipc: Enabled bearer , priority 0 [ 563.009638][T20628] syzkaller0: entered promiscuous mode [ 563.022727][T20628] syzkaller0: entered allmulticast mode [ 563.060526][T20625] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4054'. [ 563.063125][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4053'. [ 563.072258][T20632] netlink: 'syz.3.4055': attribute type 8 has an invalid length. [ 563.095155][T20625] tipc: Resetting bearer [ 563.109141][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 563.118678][T20624] tipc: Resetting bearer [ 563.153412][T20624] tipc: Disabling bearer [ 563.175080][T20632] bond0: entered promiscuous mode [ 563.180376][T20632] bond_slave_0: entered promiscuous mode [ 563.187037][T20632] bond_slave_1: entered promiscuous mode [ 563.197276][T20632] gretap0: entered promiscuous mode [ 563.203960][T20632] debugfs: 'hsr1' already exists in 'hsr' [ 563.217318][T20632] Cannot create hsr debugfs directory [ 563.229661][T20632] hsr1: entered promiscuous mode [ 563.283733][T20623] xt_hashlimit: size too large, truncated to 1048576 [ 563.349662][T20635] netlink: 'syz.0.4056': attribute type 1 has an invalid length. [ 563.446793][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4058'. [ 563.452655][T20635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.561837][T20639] macvlan2: entered promiscuous mode [ 563.607700][T20639] macvlan2: entered allmulticast mode [ 563.695184][T20644] vlan2: entered allmulticast mode [ 563.700425][T20644] bridge2: entered allmulticast mode [ 563.759919][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 563.846063][T20654] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 563.937307][T20662] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4062'. [ 564.230196][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 564.262577][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'. [ 564.295671][T20674] netlink: 'syz.4.4066': attribute type 1 has an invalid length. [ 564.305010][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4066'. [ 565.046170][T20673] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 566.040466][T20762] netlink: 'syz.3.4080': attribute type 12 has an invalid length. [ 566.058146][T20762] netlink: 'syz.3.4080': attribute type 11 has an invalid length. [ 567.567017][T20693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.025798][T12531] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.165921][T20810] netlink: 'syz.3.4090': attribute type 3 has an invalid length. [ 569.967018][T20828] Bluetooth: hci2: command 0x0406 tx timeout [ 570.829356][T20778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.168235][T20869] netlink: 'syz.1.4102': attribute type 83 has an invalid length. [ 571.192140][T20871] netlink: 'syz.3.4104': attribute type 1 has an invalid length. [ 571.213508][T20871] __nla_validate_parse: 14 callbacks suppressed [ 571.213523][T20871] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4104'. [ 571.268555][T20871] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4104'. [ 571.307211][T20871] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4104'. [ 571.488901][T20887] xt_hashlimit: size too large, truncated to 1048576 [ 571.511018][T20887] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 571.558489][T20887] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 571.569345][T20887] gretap1: entered promiscuous mode [ 571.586705][T20887] gretap1: entered allmulticast mode [ 571.601206][T20890] xt_hashlimit: size too large, truncated to 1048576 [ 571.636605][T20889] syzkaller0: entered promiscuous mode [ 571.660930][T20889] syzkaller0: entered allmulticast mode [ 571.996057][T20908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.079705][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4115'. [ 572.299267][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4116'. [ 572.319875][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'. [ 572.563571][T20915] vxcan1 speed is unknown, defaulting to 1000 [ 572.574659][T20927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.763275][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.791673][T20940] openvswitch: netlink: IP tunnel dst address not specified [ 573.104611][T20951] veth1_mac: renamed from veth0_vlan [ 573.338932][T20961] vlan1: entered allmulticast mode [ 573.353930][T20961] veth0_vlan: entered allmulticast mode [ 573.398265][T20966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4131'. [ 573.938996][T20977] IPv6: sit2: Disabled Multicast RS [ 573.971241][T20977] sit2: entered allmulticast mode [ 574.053093][T20981] IPv6: sit2: Disabled Multicast RS [ 574.071309][T20981] sit2: entered allmulticast mode [ 574.311185][T20992] ip6erspan0: entered allmulticast mode [ 574.779867][T21007] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4141'. [ 575.063949][T21017] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4144'. [ 575.086757][T21017] netlink: ct family unspecified [ 575.100558][T21017] bond0: entered allmulticast mode [ 575.106502][T21017] bond_slave_0: entered allmulticast mode [ 575.115850][T21017] bond_slave_1: entered allmulticast mode [ 575.138638][T21017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.202321][T21017] [ 575.204673][T21017] ====================================================== [ 575.211694][T21017] WARNING: possible circular locking dependency detected [ 575.218722][T21017] syzkaller #0 Not tainted [ 575.223135][T21017] ------------------------------------------------------ [ 575.230145][T21017] syz.0.4144/21017 is trying to acquire lock: [ 575.236208][T21017] ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 575.245706][T21017] [ 575.245706][T21017] but task is already holding lock: [ 575.253072][T21017] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 575.262649][T21017] [ 575.262649][T21017] which lock already depends on the new lock. [ 575.262649][T21017] [ 575.273039][T21017] [ 575.273039][T21017] the existing dependency chain (in reverse order) is: [ 575.282036][T21017] [ 575.282036][T21017] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 575.289935][T21017] _raw_spin_lock_bh+0x36/0x50 [ 575.295218][T21017] nr_rt_ioctl+0x40c/0xf90 [ 575.300139][T21017] sock_do_ioctl+0x101/0x320 [ 575.305241][T21017] sock_ioctl+0x5c6/0x7f0 [ 575.310083][T21017] __se_sys_ioctl+0xfc/0x170 [ 575.315190][T21017] do_syscall_64+0x15f/0xf80 [ 575.320299][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.326706][T21017] [ 575.326706][T21017] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 575.334691][T21017] _raw_spin_lock_bh+0x36/0x50 [ 575.339973][T21017] nr_rt_ioctl+0x215/0xf90 [ 575.344898][T21017] sock_do_ioctl+0x101/0x320 [ 575.350002][T21017] sock_ioctl+0x5c6/0x7f0 [ 575.354843][T21017] __se_sys_ioctl+0xfc/0x170 [ 575.359946][T21017] do_syscall_64+0x15f/0xf80 [ 575.365052][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.371455][T21017] [ 575.371455][T21017] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 575.379270][T21017] __lock_acquire+0x15a5/0x2cf0 [ 575.384652][T21017] lock_acquire+0x106/0x350 [ 575.389685][T21017] _raw_spin_lock_bh+0x36/0x50 [ 575.394965][T21017] nr_rt_device_down+0xbe/0x860 [ 575.400327][T21017] nr_device_event+0x137/0x150 [ 575.405607][T21017] notifier_call_chain+0x1ad/0x3d0 [ 575.411228][T21017] netif_close_many+0x2ae/0x420 [ 575.416593][T21017] netif_close+0x160/0x220 [ 575.421523][T21017] dev_close+0x10a/0x220 [ 575.426272][T21017] bpq_device_event+0x377/0x6a0 [ 575.431636][T21017] notifier_call_chain+0x1ad/0x3d0 [ 575.437254][T21017] __dev_notify_flags+0x16d/0x310 [ 575.442787][T21017] netif_change_flags+0xe8/0x1a0 [ 575.448230][T21017] dev_change_flags+0x130/0x270 [ 575.453586][T21017] dev_ioctl+0x7b4/0x1150 [ 575.458428][T21017] sock_do_ioctl+0x23e/0x320 [ 575.463536][T21017] sock_ioctl+0x5c6/0x7f0 [ 575.468378][T21017] __se_sys_ioctl+0xfc/0x170 [ 575.473479][T21017] do_syscall_64+0x15f/0xf80 [ 575.478585][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.484986][T21017] [ 575.484986][T21017] other info that might help us debug this: [ 575.484986][T21017] [ 575.495199][T21017] Chain exists of: [ 575.495199][T21017] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 575.495199][T21017] [ 575.509007][T21017] Possible unsafe locking scenario: [ 575.509007][T21017] [ 575.516446][T21017] CPU0 CPU1 [ 575.521793][T21017] ---- ---- [ 575.527140][T21017] lock(nr_neigh_list_lock); [ 575.531805][T21017] lock(&nr_node->node_lock); [ 575.539076][T21017] lock(nr_neigh_list_lock); [ 575.546257][T21017] lock(nr_node_list_lock); [ 575.550835][T21017] [ 575.550835][T21017] *** DEADLOCK *** [ 575.550835][T21017] [ 575.558960][T21017] 2 locks held by syz.0.4144/21017: [ 575.564140][T21017] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 575.572927][T21017] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 575.582918][T21017] [ 575.582918][T21017] stack backtrace: [ 575.588788][T21017] CPU: 1 UID: 0 PID: 21017 Comm: syz.0.4144 Not tainted syzkaller #0 PREEMPT(full) [ 575.588807][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.588818][T21017] Call Trace: [ 575.588824][T21017] [ 575.588831][T21017] dump_stack_lvl+0xe8/0x150 [ 575.588856][T21017] print_circular_bug+0x2e1/0x300 [ 575.588876][T21017] check_noncircular+0x12e/0x150 [ 575.588895][T21017] __lock_acquire+0x15a5/0x2cf0 [ 575.588921][T21017] ? irqentry_exit+0x218/0x730 [ 575.588943][T21017] ? lockdep_hardirqs_on+0x7a/0x110 [ 575.588963][T21017] ? irqentry_exit+0x218/0x730 [ 575.588983][T21017] ? trace_irq_disable+0x3b/0x140 [ 575.589006][T21017] ? nr_rt_device_down+0xbe/0x860 [ 575.589019][T21017] lock_acquire+0x106/0x350 [ 575.589041][T21017] ? nr_rt_device_down+0xbe/0x860 [ 575.589056][T21017] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.589075][T21017] ? lock_acquire+0x221/0x350 [ 575.589098][T21017] ? nr_rt_device_down+0xbe/0x860 [ 575.589112][T21017] _raw_spin_lock_bh+0x36/0x50 [ 575.589131][T21017] ? nr_rt_device_down+0xbe/0x860 [ 575.589144][T21017] nr_rt_device_down+0xbe/0x860 [ 575.589158][T21017] ? nr_device_event+0x12f/0x150 [ 575.589184][T21017] nr_device_event+0x137/0x150 [ 575.589207][T21017] notifier_call_chain+0x1ad/0x3d0 [ 575.589227][T21017] netif_close_many+0x2ae/0x420 [ 575.589249][T21017] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.589270][T21017] ? __pfx_netif_close_many+0x10/0x10 [ 575.589303][T21017] ? bond_netdev_event+0x231/0xfa0 [ 575.589325][T21017] ? __neigh_ifdown+0x7fd/0x8c0 [ 575.589347][T21017] netif_close+0x160/0x220 [ 575.589368][T21017] ? __pfx_netif_close+0x10/0x10 [ 575.589389][T21017] ? __asan_memset+0x22/0x50 [ 575.589405][T21017] ? macvtap_device_event+0xd1/0x400 [ 575.589423][T21017] dev_close+0x10a/0x220 [ 575.589443][T21017] bpq_device_event+0x377/0x6a0 [ 575.589463][T21017] notifier_call_chain+0x1ad/0x3d0 [ 575.589482][T21017] __dev_notify_flags+0x16d/0x310 [ 575.589499][T21017] ? __pfx___dev_notify_flags+0x10/0x10 [ 575.589513][T21017] ? __dev_change_flags+0x5a0/0x7e0 [ 575.589530][T21017] ? __pfx___dev_change_flags+0x10/0x10 [ 575.589546][T21017] ? dev_load+0x21/0x1f0 [ 575.589567][T21017] ? full_name_hash+0x92/0xe0 [ 575.589584][T21017] netif_change_flags+0xe8/0x1a0 [ 575.589601][T21017] dev_change_flags+0x130/0x270 [ 575.589617][T21017] dev_ioctl+0x7b4/0x1150 [ 575.589641][T21017] sock_do_ioctl+0x23e/0x320 [ 575.589663][T21017] ? __pfx_sock_do_ioctl+0x10/0x10 [ 575.589682][T21017] ? do_futex+0x395/0x420 [ 575.589703][T21017] sock_ioctl+0x5c6/0x7f0 [ 575.589722][T21017] ? __pfx_sock_ioctl+0x10/0x10 [ 575.589741][T21017] ? __fget_files+0x2a/0x420 [ 575.589756][T21017] ? __fget_files+0x3a0/0x420 [ 575.589771][T21017] ? __fget_files+0x2a/0x420 [ 575.589787][T21017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 575.589807][T21017] ? __pfx_sock_ioctl+0x10/0x10 [ 575.589826][T21017] __se_sys_ioctl+0xfc/0x170 [ 575.589845][T21017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.589861][T21017] do_syscall_64+0x15f/0xf80 [ 575.589884][T21017] ? clear_bhb_loop+0x40/0x90 [ 575.589901][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.589916][T21017] RIP: 0033:0x7f0b7159cdd9 [ 575.589931][T21017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.589945][T21017] RSP: 002b:00007f0b72455028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.589960][T21017] RAX: ffffffffffffffda RBX: 00007f0b71815fa0 RCX: 00007f0b7159cdd9 [ 575.589972][T21017] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 575.589983][T21017] RBP: 00007f0b71632d69 R08: 0000000000000000 R09: 0000000000000000 [ 575.589993][T21017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.590003][T21017] R13: 00007f0b71816038 R14: 00007f0b71815fa0 R15: 00007fff50972378 [ 575.590021][T21017] [ 576.002751][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'.