last executing test programs: 1m33.637029377s ago: executing program 2 (id=1079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x46fd, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x3, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000001121c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x168}], 0x3}, 0x4) 1m33.300721148s ago: executing program 2 (id=1082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0)='#', 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) 1m33.178146025s ago: executing program 2 (id=1085): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r4 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/134, 0x86}], 0x1, 0x7fffffff, 0x1) unshare(0xc020680) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) socket(0x10, 0x3, 0x0) 1m32.944743846s ago: executing program 2 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b80080003000000"], 0x2c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e6430"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}, {&(0x7f0000000280)="c6e5bf4e5ba26d3e5c9bb5360f92e67a44ba6b62e2274d6487af77d783d4c6693cee943690f5864e779d1beb21efed6e6d476f87"}, {&(0x7f0000000040)="dcbe422f5d028b81e662578f53c6471fd1c854f19dfa4247ae100a162723a5a403ccb3dd5913918efd77b8c43fbc4981d9bafc3b48e16322a5389908ee89a3c08fa633f1ae892c748b831b5b007a53f960f174194ce4812b382d45c202230aa6be00be2fbb427a3a"}, {&(0x7f00000000c0)="d1bc1a7600e5a60a93d380d591a3ee81db3154323e5c991f724a3fb2ef7fce391b98a4c3dee9b879f3c7f9c8ea68e307bd072d45d3b6d21ac4b6a820d8b9d3f6ab9c2a99257afdff89172e4c0118cd53e3620717e20c3f3a2f7d36a39493b166bcb349e584a2d14678b014398a181abcd2e3aef487a0667aabc0f4927dc0f23f897606e702a0ee605e8a0c3336b2936f03dbef8244cd3f87de18e4374edf5610cd7e53baa579063b65fdcc608037b6459e05632743841ec2ba0f81aaa631d64e2a33955d814e"}, {&(0x7f00000001c0)="93890dce91f8091f06ba66f5ad81571882d65b82d7ab4616336da4ecaf1965633209d1f7a7d363f8dadd4d6a3926d74bfec60d9d08bf196fe146"}], 0x1) sendmsg$netlink(r4, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r8, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x440c4}, 0x51) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty, 0xffffffff}}, 0x0, 0x0, 0x3, 0x2, 0x8a, 0x5}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0xf, 0xb}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) shutdown(r6, 0x2) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="60000000000104fdffffff030000000000000000", @ANYRES32=0x0, @ANYBLOB="00080000bcb5f31a2c001280110001006272696467655f736c617665000000001400058008002500010000000500090001000000140003006272696467655f736c6176655f300000"], 0x60}}, 0x4c0d4) 1m31.784893468s ago: executing program 2 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x81) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1e000041}, 0x40100) r3 = accept$netrom(r1, 0x0, &(0x7f0000000240)) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/200, 0xc8}], 0x5, 0x1ff, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)={r1}) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000680), 0x4) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f00000006c0)={{r4}, "9bc872c8d8c92f218cef8deb7582a1330633e5f888bc72db0267f6d1a6151d4d10840bba6bc2c40f7ddc633424e37e282ea5e115b0515ddb82265f9e8a6e90e873e2a59e554d05b1c147c4f80a1e653e47397d0b7c3c9c96a51ef30815a5eb012e9a6d2e29e8c85ab66e08198fc9f825f7ecb6c3eef9ceca8a93935bd8f1fd03c074fec854d48e13bf9a1edaafbd32ed3c139291333cba37d3a26cba2030a919333cb8a241cf3576ea329cfa67f2ad2229a8f56b56e423f1a22f2a60aeec78135219558e4d76c64ebd965e9fa2dc4d30a475bb38a90b576234071e7050d17b6ebc5b361689d8eca01f6b131a7eb19c5526a56ef735cc0bfecca9fa77dd1224a7c74379fbd09691d7d0ccd8c2bf6ae6a92c2df0ff18145ef207afb9c1873d8663f567856bd199a9db3e77fb20d5bddc9de79d9ac0499ef62d95fbf0f7427e9b7b7c810a8cac65a160f28df167f680a6a6ba911349190881eb056f7e280042fead94b92e6ce0015934dc4d2c0a764332bf563863678ac444ed11c0e4bd50125f73ba2fa1484a9a38a8cc8aabdb75d18a34987958ef0013c8313dd3c2265b7a53ce631da4f07eb9b58b876cbe0cfa1df11472294ed92cfcfe3eaae243210db7a1e8e6ff90caabc88f85c994a794c5b730d99f7bd2f4cdd048acb8ea8292dacb9367ae20ee7b524c89dff3536739d089a76de954c4bf6b86f1d2974ccba5f5117ae28123aae6d5608f474a157f92402bc9a341165b3f46d61d7fa8f5da7b91c4933efb74820e506db603816bf91636dc06caf639e7160f02af052e0a5bb34e632f6537c8da0e13f81825cb18fd916eb50e49f9ed29110c6f44d1c0e6425d927cef426e2d5aec1248290edb935bf4aba17605e079b1b62853dd5b9bd21fd2209391434361f3ce2a4ed4c2c974f408a1cf3b8e199c45529aa875bbcf2b29364905bafd163d17ae3d06c48a7901cccd45c1b89b07e129202d1b4f5aa97b75d4b2e51e1fafdf5878c1f457b4adb3fbd2eb05dd99d49dc27ec379921a195def8085c2baf14d9e4427c95ce40747d6c431500db9d07b40b221b70c835c81600d886979a3dba9a2f7058fa0fcdc0434473298a334a48b778e01cbf852327674752d7fb93e1bbc97a4a9b50c25da1606947d57def537b3b7ad2c1aa7cfea0a9fdb49e8b14ac2252d5071eefca2cf714225da65eab8550aa5c00fda1ff6e5cfc58fdaa3925dd58d73e9faa79e46159d99a901c878261b6f5e2c7200713b31bd9454e33231056b6c66e58250d22e1bd397f2f590fd3078e0de223c6d207c69beb96c37863d4ab7102328f2b73b096848c1921fb7f0ac758f298731b6bff2cafaf72acc10446e4c54364d0a21864f2ca8d586ec17e4a474581246e23c06e2687491714ce54b7997c975e60d18fb215ea4c538645110f7536aa68e443a928d21db0afd1faba4db1dee1f3130db6c980bc9406d07a55a8e1604f87b23018ddfa7be485654e9398b1ba31b4139c95b7d1cc61d083be4af92de978e8b7279feb8ddc598996f48eb46a358a232ff78a386c23d72d8abd2901f3417eaedbbf7e0ce3a1b3ce71aece0cd3a78b48c95706a6640fa4e58d0056c369eece9b22fd0c51def0a77153ac65cb62190f26d7ddfb674bc9cb6ab8bbf38fbfca5537cf58500d85d262f4b4159bf626841baec353586454782bb4adaec948644a539353561fb0cc94e8a1e259ca6321aa2e9159a79e0cdcd5e55ecd56d86494fc606ed765dffe2ebfec7a8a780a827e8d64be1703111c8abdd6999121b20d993330fc780b68db6f18acefb826a0c0e0d908254cc4bff1c0623a7d742e1633fe3fe18405e4b2bc741873f141fedc47a3ef55c703d1858418c5ab91a415ac6d25fb8669a05b25c759779b69d8efe9fa0df7ddbb655cf5d0600b389cae97c02bcc2e40ac4ea0cfcff08224afa4225766bc9d60fef7c5bf4bcd36e636e80bd208559b107b5578dc29cddb5707bd78a4487f2359192683cf6a033f59ff46c19bb946ad93e1f8724afa17f5c77ff933c09fb212af5c56bf128d0499f4b09b02c12156c0d01cac6542b6b150d1296ed6d4a6a13b78f34ddd3a710aa63f78ce79dc2c1a279cf5c160bb4118a62b2381f0773f2b5b5ab893e488c1ab682f1bd38a4b12108c6f8884e91ad7a866549a11f4f66d8eab75b017ebbbff6ffb21deeb27316829e3718b30b8b3dca16fe4d74e8874fb0941a4c2262e59a576f170d2b2c039239d2513c3fad43fac0b61ecc06008dd35e9bd59e74b301d4bb1a5cb21bef9ff6f20b850b20f0e75c7fe20ab0a9768e581faae2153aa057a507c9498f52a09db38c6fc15232f0093b9b7a1bc4b758b9493b2875f3417fb20bde63fbbeac60861c221f81c1040b67f5d365cc8f0e3d575f5fec0d0b3e972aab72dff13423d2235b3d130b17b0bc4bc062ec858766f591fa4c8e2199973b30bb6c656365e39b5aa3e856fc6abe05a3f0971b227832524354e45295e64d3ccd7f71ad410e3df7570370980932a00e3f20e941e6cd3216f8061962c3b22ebdd4d7f5fd42b0248eb4d6aa7e24ec90627ac8884489d1428a59a53125874db22ceb590b286ceb23e26fd09e779b08c28061c8855636c0b4abd42b7a101d32ad70bf0ca59e1fb7df2221676691aa9c1e2a41b8c645e8573585fcad04838ddad86bf00363a28ae2f38adacd3c1ec2227486cb1ee68e085eaf3f6517f282cc328f4b494bc8f6343606111f8ca9f48e0ff8f4db28a25819984cabff26fc9ffa3717d3696ef586ef97798b3f142244f7d2f64a932ab3952aec7748488e241422fa930cb00794d14ff40724161653fe96d7f025fecd9822d6df3d6ddfe2961ee88fd2fbfb43248cba17e54b0ed8bfbd90b46e71eb6effcd2440a17a0153249a8dce9d92360f69898df07e5f280e7326648e7983e940ec030fd89d92d81eea620d58ca640a8b73ec3c15b8df4d1a48aaf4e463bde1fce46ddba40a2b556186542224460a0c7c7e0847f4f9595cf6344108a5813e1d39930ae8c0d72f88f9511eedac1bdae937b77862d60aa89c7f4b3b9b40e564a9bb1a61f0fecb7ada8b62566ae5845a21228dfe9c338ab2d19ee943bf0be0d2450a01e6c23a3793e57d287e9203c3f9c99742fe0b3488eba1f23282ab1b28fe2fe8500037990d07e45fbe045a31724def9bf4fd257c8c14fcd5fee66654eb9d484c82b095064cc16d523ec8f1d756a330dd3093e0823fc38a020117e0ec9a3af0cea9f01cc9553cab6dc4ccc9ce4b991c5d4df1024713c5d63e6630b13e8be95398fbef11f3e60f59749d94bffbcaa93e56a54f68f273f836c075e7cccc5d6e54a1a696646e68fc34316ddd914220303d52a9257b199c622ec5fa9087c332852bf6bd64d57a0af2607558f7f3376356161337d5ba0d4e8c053377750b7e0e96a2727b414aa461634ecda4d3884e6dd1bdb4e4864c14e03a4b7902fd5e2d65e522a779c4be51df5fde4cae06766c7b9fdfeba8209ea25c58fb4c0fd31bb12d04b18fdc2b5640ba8599a575bf5c84861802928bdae22a24e8d5207e8127ceb83d6bd62afc5bd4bcf12bee57ca19f5a035e81042b6e69c186b4d1746cdd8e9cc32cbd3364a2c2c2e3fea86a2fb4ef7bf04a8e655988795559551cdb2bb9fbf19dfc4d0f277dd79905c54fb52892a454b3cf1e7694ae31817fc26ac72336bb020c877d7787c2fa55f53daccdf5d769fc759b1782e61ad49ba76d4f3effe91ffb30b9f3c20ce661d949db5535f875e2556699595804a5453d93200d39cbc866dba4c96021646ae589f27abf09584cdd5e21921155eb8570284ae7e967899b7ec0b4ecda221bf2b5640359cd2ce2421a5387261a1afc0b8b7aa3b55128db7acf7ab99d972f690e176d1e5514c6afd7f378b163b69083f0161e85704e5e111ff42e830d41cf47cd8ada5fe733776e867ab29d960f9d5c630e5878e90143116d6f9c8e53feaf605f11e30fee87695d9d09be395c90dd2417eb518cf311c094e1676f5efecf8e68c31959c39f40fd10ced110c097ab8cd17f46a8d8c3152e1b9de16e293887397ff5130da854e6575630ac25351a6a76b58fe6e69e956dbe4bf4a11d9b8275a694b2b038665e499c0b8ccdc98d069ec2e221679e26adc1c8310c6ea0ea9019184913e3a6332a69d675bb75116f9a23c527f382251d6e820d761512b4337bbc8abc327bfffb8dfec7309dbd81d49a177c89dd9c7b96efb966255e8542b63681f06843ac2aa0ab1ad0a81ee0f4dc2ad1048b19d3002d618c9c1757b8ecd2d89b7aa52e463c53625a8b86a5f6c13a6e4b8a34191b8e8f0787535d515cd914b80d9be9417104565da3f1ba7835298a8d0e80b94a74d762b4af849b08bfe9f9424a6382981393bb275a7db66d29d8ff78278d3c9b7557d72597291f8dba64e78e0a4b528ebb05cb97a891dfbaf7e4bcba3cb2a7e9c6a9b279c95324e4dd6f41f24dcf198852cae5470f8d733b60915829e7cf3f1e08098d83296555f77e6bc5ca05b640c9ba7d537652ea5ae561226ff916bdc68aa563789df19d1d30cd8198ed11ab8812598752ba3c77e4e001884f5b0ea2a590de136d4accfea04098ee3bc86c1462fbb6d646ec15b1ec07b3fbdc0f8e86a5bd814f5aade4d6a91eea85be4c4c356f60a3d58adc7ad4e8f4b5ea7ef43e76f0155681144cd9d4270566bbbe1480677ce98d1ee84c3469a577a4d3ff3ed309a764cc24c9a7868f6c79f2fec721bc779ec0a7833c878b5f5c8e81614dbfd2de63a8a6a91409756b9dba8bacd631477f5ab775c54f0aad05bf8a40480af72b56be60e733eedceaca0f4f477638ab59ad01b9dcd69849e326f03e9306cbe2cf71d704d9efce0707a46edaaacf9027a850925867db98de704a2437084ef37156d7359772933078a47e883c438a5af73296b2e9884db86ee547ddc955f29c0353c73b6f08e81cc068786c85fdad0ac501935555c94471a6e6c87b7e1a15e4da8b4e45da89ed7408b446ce5ab89e9bf527d7aa8953b469c4845a922e205a2fe2017428f195b1440ce9e0f9fbb8f9663b8eeab96c05421f13040a71d4873b45d5911a451955140ea1b259c82aba5b1a812f3b4d539f6cdfd4883eae5d7ecf199826378171d0d4f4b91392b7157b6449d92a77fca9d50a1b6e950c01948bc60b21cb7b886645f4dcd66dfa671c535500188304983f653d8192cea5324468d203473c02f786913f8b37ce7e3fa0189c5916565209faa895071874ce0188b39a37c7b4e4ec07b04ef130079fd7deabffdcfdcca965f09d3e3ad90a84397010f04497a9da8089834ac781c21a2cab38a7e4e9c27d4f8e39ee2f2c4ddbb3dd2745c6f29440a15d5f56c7ab1c3ccff9d9dfeffa90dc080047ed53d6f30f3c2f7d1897a2b2ee624ffcdc526b51919b5fafc947319d89867278f86b7074cec0fb83f85464de248b978f628cdc01a45b0ac2c303a1fa0405fbefac001453ae617c26966aa917d4e8de92ea0ab4bb314d98d33d1b65cd95a825575ba16f9e0c976d0fea5878502a9d433af946e542bc11784039ea9b89385505753e41013003620bf05293d3123a7954542ee518223b2f25333ff3bfbecad3af19cdc706971b0cb101664c3be4ba0ab093bc9e8c8412788d3599db8f370fac51cd0f599e45c71a1826a6e6f8447b0a4d248c1b15a319c370f659ab9e34bb845d502b84aaa8b258cfb1f49ab45ba972297e07f536d0bcb65e9cb77d7f4326991938f82547e53073c838cd5146c1c6637a938855f8558b4b7fa9d81fca4965c7f"}) (async, rerun: 32) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000016c0)=@sack_info={0x0, 0xdc5}, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x110, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "ae3c30e6f8e08b133f36d46d0889df44cc829e7303cb4740e76eaa94e3078155b4f76b3d163efcabf2b238895a7045330bb970abf65f256a9d5b798bcd37d7d26bf79fcecaa6f8ab62ed9bad55e3c52f990e7a13c32259cdb635318d852716c0b0ae11665942abe751069f4d24579f8d48f22542f2e59683a382cd7bd1f1fc805cb1de037c700b8ce61608c8efb6c7ffe7fb9a4c9ef5b3545370d61dfda839947259f184857328d99b1f6bfacce7c046f8151a6a980d9aba39c25b06466ec4510a23e6"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r5) (async) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001940)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, @phonet={0x23, 0x9, 0x2, 0x85}, 0x2, 0x0, 0x0, 0x0, 0xd3d, &(0x7f0000001900)='caif0\x00', 0x0, 0x7, 0x9}) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040004) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000005740)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005700)={&(0x7f0000001b00)={0x3bc8, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0x6, 0x7]}]}, @NL80211_ATTR_CSA_IES={0x808, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x42b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @initial, {0x7}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x3, @random=0x262, 0x4, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0xc}, {0x2, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x48}]}, @void, @val={0x4, 0x6, {0xe, 0x8, 0x3, 0x10}}, @val={0x6, 0x2, 0x1402}, @void, @val={0x25, 0x3, {0x0, 0xa9, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x0, 0x0, {0xfc, 0x79, 0x0, 0x3d, 0x0, 0x0, 0x1, 0x3}, 0x400, 0x3, 0x7}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x2e, "f30b354463ee20df5009d37b1108994c8c0ffb291aa670119316c7cb527b0514cb685918ba2a8fd59a6a396c2ed0"}, {0xdd, 0x5d, "e3b560af0106bd9bc618c41356a5df8dc1ee35bdef1b39e88b567392ddd626ff807244cd2924de9f192bf7bef7f5361be1b307bc9ab19431e80ca303fe5735974c87f25dbf3dee01c82c6d03be5add9e28b705024481acfe088144ace2"}, {0xdd, 0xab, "f4044346be39b4f634657cd713d31e86f701cb278e459e8b994b6b5c2bbe332080cd49b1e616603c3de72c0430d149c6d4bef6942c463e3c89368d63384a1e1ecbc77e1c513cb0a93b3943d3220b76bff8614cdf24f2031b26662615a8fd30aecb53701499aa6a75951e1fb77d791fbf04dda993bbce85e767a60efe73f6211a02c44ba6a6b91c79b58013c8f936d43abf69fe5a0b1424f6bbe0b10fe154051a0e390d1173eb8386d8bd11"}, {0xdd, 0x6b, "8cce2943024b9d04c86efcd24a3b778e7751761e96e6d8ed1ae97deedb0977971177ac60a59e7b921552845d76d620340710319133c69dc17882d4b1d56870d21a2c225970c056cf5757861c980181f9f96af4f2fa2b06709a81d8a0a277bd808e2142a56522d93037a033"}, {0xdd, 0x74, "fe03f647a3ca54e6ff0f3281d2a3546a50c0b3dac36a81d49ac00253af2c933df43ee0b9eedc6199cc4771fb333f1de6e266c3710562d92b934761790ccce90609c1069279d24fe967ea20b98c5a44308a933fde519bdff1375a64e2a7e73c8d82cf7dc46dd033f821bb128011abd5486805a560"}, {0xdd, 0xc0, "34fbe50474c3f9fbd086ebf0f53efa8df142c481bfd67df63a482381598f2728beb36640e99106936e9135a6604c859e1b1c4c4d8134774915c075828386bb818507b83d24bdf800e4a3c3232072d67b4c0e8c262b1a50b0f2dc35ff706a4a4b5e56735ce2bc40dfa6bbe109fde2830971c7136b1d6f4a30eea66186ba582aafe9463f5925d84b327f4ee37f0f9386738f47b7d051cb2b32e085351fd8faaa86ee9793411b8d76a752c285570061b5c7401289c2ca801c305198d1dd0971f3df"}, {0xdd, 0xd8, "45797c78eb008e139db87549a99864483d96de88a3fcd92848fe9345fade2e0675ba04f8b670eebeb3bfab9a4dc5089896a1cad3ec6c5ecc96528264645f3f60f89bb79e0e0d928623712738fa4a70ac8f40ad07cd1ddbfdabe9578bdab1e345e0a826fc929e3779d24dac003bc2681ddbd607b0be11e8b1f5aa3ef5195aeaa134b4284276bc0ce1908447d262273e2331f3a5d0c1f91b77fde38a713186613382e20bcc5f9146e14f0daa775cbf49dafa349fcd06fd7548af3240e4cea7768f8168f0b986a77d1eb2fdd8ef1088d66129d613b455aa175f"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x284, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x60, 0x3, "0a54ae420153148d45506a2e7123b0101515cc63de1725dcb27959d1761d1069e048e7181db14a913cd2fb6b1fe516b5fa1d191ff0a8801d35df5edb6b82c99ce8710ac719a2ffcf6febc8e72bfaed6187475e58620730a29877292d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8a, 0x3, "842ee4fd31a6b05c2bdad585f17456f829d401648e91d2259b0c960dd6dee28f24bca674429b04fe6c026a2d1d32765823e98cf1731ccc0082be443d41e06675627b72ee3b15fc224560fd8bdec2b2424a6340075d0c4297f5eda0a048e50c6d3cde1762734be2f3585f0106a8b4c83bdf35d3350f258ac38b3b333b98331ca9fcb8dfffeaf4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd3, 0x3, "471cffa239b85a7418401485e7cf1399f86d3a80cd02eb86327b488724a45e35de8814fdaf9bb58dc7960cf3d156ac099af82ed995fc63433e307c874f931707c412d14c94fcab5466256fdad3694c9f3e8cff2dc966d16ab33999edb49c3da89ed81ea86a954ed6c38d2f7d15be05ab248d87a2f92df16d817149d56c61feaea8b28848f7780e8a18a9eb2ad9a4c5d51405110f6d727d9ac8d6cf680424b093e7fe27e12269b784a24810bf0264b8db1cdce63603be3652fa0bb26eca56aab09c0d76b8f8c7e0d12d9c0d97dae46e"}, @NL80211_FTM_RESP_ATTR_LCI={0x6e, 0x2, "835e8b77099c8245fcbabd7c4590f5c4c7b8c845b82b8a1955f2a03e218715e8df70959e2d0060cb3cfa44244928c7e7f1d239ea8c287839f856f6db29ad83e90c1a81b23b71082bb7910db4706b1e0a3f3371e766fd2a92f003f07cbfd722a827f775d7a19141929f5c"}, @NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "7acb0ab9ceb2e478091abf85e2c5cf25840d332bc74f46ee87bf"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x21, 0x2, "6f1299077286d4a3444a789c1dd0013f01fccba40e7deb5191bc847fb0"}]}, @NL80211_ATTR_BEACON_TAIL={0x13f, 0xf, [@supported_rates={0x1, 0x6, [{0x0, 0x1}, {0x11}, {0x1, 0x1}, {0x12, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}, @chsw_timing={0x68, 0x4, {0x400, 0x6}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @preq={0x82, 0x7d, {{0x1, 0x1, 0x1}, 0x8, 0x0, 0x81, @device_a, 0x2, @void, 0xa, 0xdc6e, 0x9, [{{}, @device_a, 0x6}, {{0x1}, @broadcast, 0x7f}, {{0x1}, @device_a, 0x400}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0xb}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_b}, {{}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x33, 0x9d, 0x1}}, @mic={0x8c, 0x18, {0xb84, "68ddbb6408d2", @long="659184cb827506b0c2ecb1335c3e6ff1"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x40}}, @tim={0x5, 0x78, {0x5, 0x21, 0xf, "59770bff3e06637396ec32644226f51a601ba9b48a89086e0ba200aa60e54878eea610d528cf0f28f461fa6f2339ff2a5896eba83cf0f3d1f4023dfd719ad55a14f7a1011abe60f54fc969c8b0f1deecaa3f931126889aab076422e4c5695797fe33874d70e281fd06e30040a17deaf0697c403107"}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x0, 0xb8fe, 0x0, 0x2, 0x2, 0x0, 0x7e21]}]}, @NL80211_ATTR_CSA_IES={0x3350, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x5, 0xa, 0x81, 0xc, 0xf]}, @beacon_params=[@NL80211_ATTR_IE={0x33, 0x2a, [@mesh_id={0x72, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x3, @device_a, 0x7, @value, 0x4, 0x2, @broadcast, 0x9}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3a, 0x80, [@mic={0x8c, 0x18, {0xa5b, "68abc267621e", @long="3189fd92a6cd76fa814af294ce52e451"}}, @chsw_timing={0x68, 0x4, {0x5, 0x9}}, @chsw_timing={0x68, 0x4, {0x8000, 0x1}}, @mesh_chsw={0x76, 0x6, {0x10, 0x10, 0x5, 0x4}}, @cf={0x4, 0x6, {0xbd, 0x1, 0x2, 0x454b}}]}, @NL80211_ATTR_IE={0xd0, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xf7, 0x8, 0x0, 0x100}}, @peer_mgmt={0x75, 0x6, {0x0, 0xfc00, @val=0x3, @void, @void}}, @prep={0x83, 0x1f, {{}, 0x89, 0x5, @device_b, 0x4, @void, 0xfffff800, 0x26b, @device_b}}, @mic={0x8c, 0x18, {0xcdd, "9e4c46e2c4aa", @long="50900015680a1ffdf4f009f4757327bd"}}, @peer_mgmt={0x75, 0x14, {0x0, 0x401, @void, @void, @val="3ad17e2756ce79c2d8c4408c20349b27"}}, @tim={0x5, 0x61, {0x33, 0x12, 0x2, "eb02f4ccfc354ea99db9174aafedcc1c9e864ca9e8c2337d68a08eef3d07f4850fbc461b3d125d4e3e72220810ca2cee2a860119fa68212dc28e3babbabf48382bf99e1a93c52baaeb7b6d8b8e13aaf513bc4eb78c1180ffc57515623e13"}}]}, @NL80211_ATTR_IE={0x17, 0x2a, [@challenge={0x10, 0x1, 0x28}, @cf={0x4, 0x6, {0xbb, 0xd2, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xaf, 0x80, [@ht={0x2d, 0x1a, {0x8, 0x1, 0x4, 0x0, {0x5, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x8}}, @mic={0x8c, 0x10, {0x6ff, "b32975edabe4", @short="cebd5fec0aea616d"}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0xfffffffa, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xc9, 0x3c, 0xb}}, @preq={0x82, 0x46, {{0x1}, 0x9, 0x7, 0x0, @device_b, 0x1, @void, 0x3, 0x0, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0xc}, {{}, @broadcast}, {{0x0, 0x0, 0x1}, @device_b}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}]}}, @mesh_chsw={0x76, 0x6, {0x1, 0xf, 0xf, 0x8}}, @challenge={0x10, 0x1, 0x99}, @cf={0x4, 0x6, {0x8, 0x6, 0x40}}]}, @NL80211_ATTR_FTM_RESPONDER={0x10d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb2, 0x3, "ca3da873898f1ff1406e1647f0eea664bee6df72e2cbaf38a8e4c058735ae00333db63a17cffd9c67d1486b51f6543ea529f983c3b0ec1491bd32a95da5948f6fd89ad4bce792a45dcfd71dff508803f300c209326fcae6fee77c3025c7e74616876999bf33233d9c31c1d34a083d9c83142a71613652471892e53adab77c217cfd6ed9c498e6880c57318cca89f1d9200a656e2e9e569bb0a521dd25f71891d6b9af231ea140d3dfba773143825"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x179, 0x80, [@preq={0x82, 0x3b, {{0x0, 0x1, 0x1}, 0x2, 0x86, 0x8001, @device_a, 0x8, @void, 0x8, 0x3, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0xb}, {{}, @broadcast, 0xed}, {{}, @broadcast, 0x3}]}}, @preq={0x82, 0x30, {{0x1, 0x1, 0x1}, 0xd, 0x1, 0x7, @device_a, 0x5, @void, 0x5ef, 0x1, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{}, @device_a, 0x200}]}}, @ssid={0x0, 0x19, @random="fa0a829f76ed62e3790dfcb4bc11612b554c71ef1328f96ad0"}, @cf={0x4, 0x6, {0x1, 0x4, 0x5, 0xf3a7}}, @tim={0x5, 0xde, {0x7, 0x40, 0xdf, "10dadc8ca0d3a2e2cc4cc3f6318af994f18ea70887796d010b31eaffc55791124732cf9bc498e4bf91e0a2ac79a6626b56f3ac20a917fbc7c63891a9172baadbfb60a58132e5bb89e4f1a49a1e7b108f8e902250b41a6d70ef8b4a8d0c11e23a94ab8e2e7e5d762a75ad94e2c50188beb13e8686ff4bc582051bb3375ae7fe0127e7240d04c3914a2134a3b76a37a5e89120fe4181f6a93ae2c098b6217a9c0bd4525d25ecc53f29115a71b78d13be20e73f573fc1d0813430fe5acc1854c694b2ea401f3af5613eccd1764ad38e7822e0c1a4bd48811f35d75bf4"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x42, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x1, 0x9, @broadcast, 0x3, 0x3, 0x7ff}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xc, 0x7, @device_b, 0x7, @value, 0x4, 0x8, @broadcast, 0x800}}]}, @NL80211_ATTR_BEACON_HEAD={0x205, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xf}, @broadcast, @device_b, @initial, {0x5, 0xffb}}, 0x1, @default, 0x8593, @void, @val={0x1, 0x6, [{0x11}, {0x6c}, {0x6}, {0x1b, 0x1}, {0x12}, {0x48}]}, @void, @void, @void, @val={0x5, 0x37, {0x3, 0x11, 0x1, "09bc566619f9ba746123352fdb311f425d336e357cbbb1cb6fa8dc8ad31400c0ea53087e4742fdfa64b4e5dbf036b1b9cb6f775d"}}, @val={0x25, 0x3, {0x1, 0x78}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x10, 0xb6, 0x9}}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0xfe6, 0x6d}}, @void, @void, @val={0x76, 0x6, {0xcb, 0x7, 0x39}}, [{0xdd, 0xa8, "e1a6a05ca4dee2e9a00fb6d0790d5664718f48bcfafd812c5da9ff198dbce3921fcbd0c341e6472e5d3ceb64c2d8e0c1a2e5b25d148a3301e11a17c71ea60d799449628c6f9d01a1778e32c901940f785f22921da90d0a61ffb6247ec91bd0761d45758a9938b7d0efa3ca6bbe7f772ca7668a73deb73844ab6e44fbb478a50c50b6cd0dd7cc436bdd0ee2e510df8e9dc7287672f1fc5b1babbbfff7193398fe59aff0816be9cae6"}, {0xdd, 0xbe, "5feb001dd03515423f3114dae4ada26cbc37999d665f1e50413c3700f1c5d544ec033d023df2423395cb56b8e367091953182b668296ae638c69096d5b615ccdb226b6bc9b0466b5f2df443080ab04df9c3f046ddf0dcc85a2eecb98f039f97af089c7bb439cbb3363d92df835fdc837f72593d8c5e61fe2ce7c0ef4736d77077b1e592e2fba6debb0a147ed205c61c1cf5def75a74eb696ac5ff1000c46632b9ee566c901da6b68412493ba0c3c94d0e537680476d9f70f8cdb4521922c"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x2, 0x4, 0xfff9, 0x0, 0x7]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x8a9, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xd12]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x6, 0x0, 0x9, 0x8]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xe4, 0x7f, [@preq={0x82, 0x6d, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x6, 0x9, @broadcast, 0x3, @value=@broadcast, 0x2, 0x9, 0x7, [{{0x0, 0x0, 0x1}, @device_a, 0xfa4}, {{0x1}, @broadcast, 0xffffffff}, {}, {{0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x7}]}}, @perr={0x84, 0x2, {0x3}}, @measure_req={0x26, 0x62, {0x7, 0x5, 0x6, "5e247ede3677b47d3cfb2d7fdbfedc3fe92401e11b2a636e6eaca77bcf7499dfda61ee486d7507ef2a3b554e02ef8fe7b5be78badca1a01f146efd18e3155130846497a64a646e873f042f41f914a128eb4c5afa5ced7d9ec8b7e6d739e56a"}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x6}}]}, @NL80211_ATTR_BEACON_TAIL={0x10, 0xf, [@peer_mgmt={0x75, 0x6, {0x0, 0x5, @val=0x5, @void, @void}}, @ibss={0x6, 0x2, 0x8}]}, @NL80211_ATTR_FTM_RESPONDER={0xec, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe5, 0x2, "fcc5c9cc69b43cc3e4597c471ac9c077ec6b5edc75ab1f1efecd878db67a3a4a61b0aadce4397e28545bca6f79f23c7bbd51a7657cbaf22d335e3a1d73305ae26de89df42d2c0159ca2584bbcd7cca8d1de909527433868a2923b16122a6d60ce0b0a1a9d96ecbc72b23f5015e791f039a6527808c895b40ba43db6704ce991458bf4a3a710378d9e67f82d7758b8551f1195c6f586008300777c2846fd53beaaee2f0b8506c2e625f55edb1f4125cf84d99008db6c3c922a1a65fc8be668adfd444d1de12e7411353606663ac108fa8dac66f1d2973f423723ed099f7f458df42"}]}, @NL80211_ATTR_FTM_RESPONDER={0x10d4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x38, 0x2, "83aec54b6a54557c187db3460332dbcca612b1eae133a2b90d20beff3897fea9b54a6cf1be202fc8a4421a9d75ca4876769407a4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf, 0x3, "c39dc61badea5fb8ddb5e5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x71, 0x3, "fdc7481a7de14927c712dc48179b42bc58dfe749c3d6dd473f23d4c02c9afe9037d867fdce483ff463db9ff5a534d24879eedb65cd735c1e019704494a5ea08bc68700a200940c1020513ee876e67d3e0ab764b6c4402c67d5e6034e0cb39e2b1eece6d0482c3e9e3e12b2d52e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@cf={0x4, 0x6, {0x4, 0xc9, 0x3, 0xc}}]}, @NL80211_ATTR_IE={0xf2, 0x2a, [@tim={0x5, 0xec, {0x7, 0xfa, 0xd, "9b3d4a92dea6c141af71725a25b03d9d290e99b36a7dd2780698a55d7bb140d181d306f4daa0b2999df6f16171b416c3f7c38839cc6cc21c498a7b5e8bec7bb962a966ae9622b5e7f4d6c92bcd64a84a8b72dcf2de5f9003e90b49058d4630f6ae137febe06b1f357e927ffbb80f18d5d1d5c60de4288844800e7ccbca1498adbca4653d875108b1adf76a4ea55d98342565fa316bb6375262e58548337b765cc47398fdbadcc903e16ebed5aa7140672d45797cbcdf06d3982d3dd8db8a37f10525be2e0e511788834e88989928a9b22a3dcb440129b218d67e4fb39060a289b165c859040f0c4e1b"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe, 0x7f, [@ibss={0x6, 0x2, 0xd}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @challenge={0x10, 0x1, 0xa9}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x3bc8}, 0x1, 0x0, 0x0, 0x4006085}, 0x20000800) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000057c0), r4) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000059c0)={&(0x7f0000005780), 0xc, &(0x7f0000005980)={&(0x7f0000005800)={0x15c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000005a80)={'ip6gre0\x00', &(0x7f0000005a00)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x9, 0xc, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x10, 0x8, 0x8}}) (rerun: 32) r7 = accept$inet(r4, &(0x7f0000005ac0)={0x2, 0x0, @broadcast}, &(0x7f0000005b00)=0x10) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000005b80)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005b40)='ip_vti0\x00', 0x400, 0xa30, 0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000005c40), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000005d00)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x3c, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050050) (async) connect$caif(r4, &(0x7f0000005d40)=@util={0x25, "b6884a60386e728dcb5bbf607f56787c"}, 0x18) (async) r10 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000005d80)=0x3, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000005dc0)=[@timestamp, @timestamp], 0x2) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000005e00)={{{@in=@initdev, @in=@dev}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@multicast2}}, &(0x7f0000005f00)=0xe8) (rerun: 64) 1m30.133366226s ago: executing program 2 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000140)={r6, r7, 0x6, 0x0, 0x0, 0xfd, 0x5, 0x6, 0x7, 0x7, 0x0, 0x1ff, 'syz1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r9, &(0x7f0000000380)='k', 0x1, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m29.546836106s ago: executing program 32 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000140)={r6, r7, 0x6, 0x0, 0x0, 0xfd, 0x5, 0x6, 0x7, 0x7, 0x0, 0x1ff, 'syz1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r9, &(0x7f0000000380)='k', 0x1, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5.869085231s ago: executing program 3 (id=1804): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x648101, 0x0) unshare(0x400) unshare(0x2040a00) (async) pwritev(r1, 0x0, 0x0, 0x8, 0x1) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x184, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64=0xd}, @generic="955d0a1ffbad02f7a5952bd37e1eedb9ee3993ff3938adb6737c778a96d7a74496e2d0f798a5f4b66128566dfe72d4679e27fc2d7f86b4ca81ccc0e63e"]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xa9, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x6d, 0x0, 0x1, [@nested={0x108, 0xd1, 0x0, 0x1, [@nested={0x104, 0x112, 0x0, 0x1, [@nested={0xfd, 0xcd, 0x0, 0x1, [@generic="42110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba4ddfe78e78b635fdfc513245c2cf7b69f9218d14bb4039e9e3c4cd1c649f4cdea528557d814da783fd6a399fb44d9ceae7ab2e046a74094f015f2aad655abdd7d7bd884d9eacfdffb8d690d970427074e38ab80e3fd67c77f2ec7fb214f91cdf12924a9bc02b01c5e2618391a7ef7c9a44cdce8b538dc7", @nested={0x4, 0x28}]}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) (rerun: 32) 5.499088453s ago: executing program 3 (id=1807): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, 0x0, 0x0, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) getsockname$qrtr(0xffffffffffffffff, 0x0, &(0x7f0000000580)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) accept$alg(r4, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000240)={0xfc0, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)=0x7) close(r5) 5.066905034s ago: executing program 3 (id=1811): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x9e, &(0x7f0000000180)=""/158, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000383a01fe8000000000000000000000000000aaff02000000000000000000000000000104009078f6cd5302002cff00000000000000000000000000000001fe8000000000000000000000000000aa2c00000500000000000000000078a82236c9c85c074c81bc2548a9a2cc3c3feabab07cd414c7973797e70542bd2f8c0a65ba83a9f26ca1e25f88bb7f5a910ff8da23fe6d4cf3056728c40dbf26cf874e4b987d0d4b8b1411cd56edeff6b1f9a3d0be0aca00e79c373b0c74d811fbdb4b8e8cf51a76873e54bf688731"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000300)={0xf, 0x6, 0x1ff, 0x5}, 0x8) r3 = socket(0x2, 0x80805, 0x0) ioctl(r2, 0x10, &(0x7f0000000840)="8b56caacada4b8a0793e869ed79d864214aa3979b720375c53d95fc6cbcfb1a8dba9523fd58a70e8fe0ee6bd6811096a98e3353227ab93ce4938a851af55ee348c017fe743899a5c364b6590e3360a49b39879c94684f4b75e925e3700bd36e635cf247e446fa3f404717b940ff8c8aa2462174a9dbf68f46963aa77547a681d4de1b2d848aa91424e6e9bce92878209a9bb47b0fe96c77705390fb6d811fd2a48f506a429e9b7dbf74e6c46996e1e502388d9386898ca5a6d7636f2") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e22, 0x6, @empty, 0xac}}, 0x0, 0x1000}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x96d, 0x18}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xf, 0x877, 0x8}, 0x10, 0x6ea3, r0, 0x1, &(0x7f0000000700)=[r7, r8, 0x1, r9, r11], &(0x7f0000000740)=[{0x4, 0x3, 0x7, 0x1}], 0x10, 0x6}, 0x94) 4.921869564s ago: executing program 3 (id=1814): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\t\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)="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", &(0x7f0000000380), 0xfbf, r1, 0x0, 0xa0028000}, 0xffffffffffffffd1) socket$inet6(0xa, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd2b, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r13 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$sock_int(r13, 0x1, 0x2e, &(0x7f0000000080)=0x5e, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f00000002c0), &(0x7f00000004c0)=0xe) poll(&(0x7f0000000040)=[{r2, 0x9149287e7b7f7149}, {r13, 0x28}], 0x2, 0x69be) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="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", 0x10d}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r13, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) accept$netrom(r13, &(0x7f0000000500)={{0x3, @null}, [@remote, @null, @bcast, @bcast, @netrom, @bcast, @null, @netrom]}, &(0x7f0000000580)=0x48) 3.123684701s ago: executing program 3 (id=1822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb28bd7000fddbdf25670000000c009900c60000002a0000000800c40002000000080043"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='j\xd6\x80Y211\x00'}]}, 0x20}}, 0x0) pipe(&(0x7f0000000180)) r3 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x45}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc7053b1e0cabc72f) 3.071400955s ago: executing program 0 (id=1823): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xf}, {0x8, 0x2}, {0x9, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008884) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000040)="3b000000010002", 0x7) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00f0ff", @ANYRES16=r5, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) (async, rerun: 64) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x48}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c801}, 0x20004090) (rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x2c, r7, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r13, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) (async) write$cgroup_int(r13, &(0x7f0000000180)=0x401, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r16 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r16, @ANYRES32=r15], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) (async, rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x4070b43a45f5125f}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044080}, 0xc044) (rerun: 64) 2.730757644s ago: executing program 3 (id=1827): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x6}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) unshare(0x6a040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES64=r3, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x0, 0x5d2b, 0x28, @empty, @mcast2, 0x0, 0x7, 0x9, 0x3}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040)=0x4, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x20000180}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xbdc2c33}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffffb}]}, 0x4c}}, 0x0) 2.729873947s ago: executing program 0 (id=1828): socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r8}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00G\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071194700000000008510000002000000850000000500000095000000000000009500a504000000006c0ec1084c0d7eb3105f3248024beab8ff4642b3ef414c3725c43e7da9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000210001803a000008004000000a00004000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) socket$unix(0x1, 0x7, 0x0) 2.707964854s ago: executing program 4 (id=1829): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 2.535929567s ago: executing program 4 (id=1831): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x71, 0x10, 0x5, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x40, 0x1, 0x3, 0x9}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x44, 0x66, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xa}, {0x6, 0x6}, {0xffff, 0xb}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040084}, 0x4000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.496162468s ago: executing program 1 (id=1832): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000980)={0x1, 0xda8}, 0x8) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x0, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x7b, 0x0, 0x4, 0x50, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x10, 0x10000, 0x8}}) 2.453106725s ago: executing program 0 (id=1833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb71d) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) 2.347477135s ago: executing program 4 (id=1834): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001340), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$netrom(r0, &(0x7f0000000380)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000000000000900000d0000000000000000050000000b00000004000000090000000200000008000000020000000f000000010000000d0000000400000001000000000000000b00000003000000060000000100002e5f0000000000000000"], &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0x0, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x18, 0x550, 0x2, 0x3, 0x1, 0x1, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, [@exit, @call={0x85, 0x0, 0x0, 0x6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r5, r2], &(0x7f00000011c0)=[{0x3, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x1}, 0x94) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYRES64=r2], 0x78}}], 0x2, 0x4040055) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 2.297439692s ago: executing program 0 (id=1835): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x1, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xa4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000240)='GPL\x00'}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xa) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000280)={0x80000004}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) sendmsg$key(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) splice(r0, 0x0, r7, 0x0, 0xb11, 0x9) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r12, 0x65, 0x6, 0x0, 0x0) 2.244723975s ago: executing program 1 (id=1836): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000004c0)={r4}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c791", 0x19}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r8}) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r9 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r9, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.936711738s ago: executing program 0 (id=1838): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) 1.839922253s ago: executing program 1 (id=1839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x2, 0xc040) (async) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x2, 0xc040) socket$kcm(0x1e, 0x1, 0x0) (async) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6783bc330059b2b782a15c87d51216876b5358a472cb6a71759db27d3beb72", 0x1f}], 0x1, &(0x7f0000000680)=ANY=[], 0x150}, 0x40040) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) (async) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRESHEX, @ANYBLOB="2000040000000000200012800b0001006270696467650000100002800a0014000180c20000020000"], 0x40}}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRESHEX, @ANYBLOB="2000040000000000200012800b0001006270696467650000100002800a0014000180c20000020000"], 0x40}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.663696811s ago: executing program 0 (id=1840): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/mnt\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000007000000000040007f000000181100002b848dd15a3557f67c72a5a31ad2646fe803610000730000000f122fd63db79e37e22eeb0254d8", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000050000000000000005000000184800000000000000000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000ec0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x10001, 0x7ff}, 0x10, 0x26786, r2, 0x2, &(0x7f0000000380)=[r3, r3, r3, r1], &(0x7f0000000480)=[{0x0, 0x1, 0xa, 0x7}, {0x1, 0x1, 0x6, 0x9}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc8701, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x9e) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000000)) unshare(0x40040000) r7 = socket$kcm(0xa, 0x922000000006, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1.603507005s ago: executing program 1 (id=1841): r0 = socket(0x10, 0x400000000080803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x4, 0x0, 0x5, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0xfffffffe, 0x10f}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r3, 0x801, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x4004800) socket(0x10, 0x400000000080803, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x4, 0x0, 0x5, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0xfffffffe, 0x10f}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r3, 0x801, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x4004800) (async) 1.25596958s ago: executing program 1 (id=1842): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10) accept4$phonet_pipe(r3, 0x0, &(0x7f00000000c0), 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r5, @ANYBLOB="01002bbd70000000cceac81e89aae136a5c7ad50ca6eb80000140000000400018005"], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a0000001400018008000100", @ANYRES64=r6], 0x44}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 1.187529015s ago: executing program 4 (id=1843): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000001f00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x29, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x58, &(0x7f00000006c0)}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 1.136776335s ago: executing program 5 (id=1844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000004"], 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000180)={0x0, 0x2, 0x362, 0x1}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4cd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xb57a56c3dc1aa582}, 0x8015) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x800000, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x88}]}, 0x34}}, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x58, r6, 0x421, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x339}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x58}}, 0x8001) preadv(r5, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/100, 0x64}], 0x1, 0x80000000, 0x8) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="27ec8cabefbb422df977547b7524851d41b23d3b66763f68ae5543a73b16", 0x1e}], 0x1}, 0x41) (rerun: 64) 982.078154ms ago: executing program 1 (id=1845): r0 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r1 = epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="00c35a3600c1000000d7460000000000000000000000009292000000", 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x0, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x1, 0xc8, 0x8, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x8, 0x2, [0xffff, 0x7]}, &(0x7f0000000480)=0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16=r9, @ANYBLOB="000029bd7000fcdbdf257a0000000600fb00feff00000a00f9003a55195b2f8700000700f9005f60"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) close(0x4) 919.659356ms ago: executing program 5 (id=1846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x80, r10, 0x120, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x2040004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020200004000000000000000000d00850b00007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r13, r14}, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r14, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 709.030787ms ago: executing program 5 (id=1847): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x301, 0xe4340000}, 0x14}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x54, 0x1e, 0x1, 0x70bd26, 0x5dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "359c8981b238e76fdbacc2a24c098600"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a86aa2ba3d5b61023bf6361a435c368c"}]}]}]}, 0x54}}, 0x20000800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='dax_writeback_one\x00', r2, 0x0, 0x3}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r7, 0x12}, 0x10) listen(r4, 0xfffffffd) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff868541", 0xf6}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x19, &(0x7f00000000c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}, 0x10183) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6000000, 0x40010, r0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$nfc_llcp(r10, &(0x7f0000000580)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x67, 0x6, "a17476548845eb961b85bad4a1f222bd78bdbf1df6ad16c36900f27e32b683fa532be00797f1b8fc7064888894b796c9b66e5fd1c015f3736401404f9d014c", 0x3f}, 0x60) 434.34507ms ago: executing program 5 (id=1848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xb7}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x28, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0xfffffe4f}], 0x1}}], 0x2, 0x931766f6119eed40) 155.652792ms ago: executing program 5 (id=1849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000000d0603000000000000000000016b85d808af000009050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r3, &(0x7f0000013b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/25, 0x19}, 0x8}], 0x1, 0x113c2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0xa20141, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r4, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRES16=r5], 0x20) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000001c0)={'macvtap0\x00', 0x4c6}) (async) r8 = accept4$x25(r6, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80800) ioctl$SIOCX25SCAUSEDIAG(r8, 0x89ec, &(0x7f0000000380)={0x6, 0x5}) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x36}, 0x14}, @in6={0xa, 0x4e22, 0x4ad6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1000}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000080)={r10, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000)={r10}, &(0x7f00000000c0)=0x8) 149.714763ms ago: executing program 4 (id=1850): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x6, 0xf989, "fc2e"}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 70.535178ms ago: executing program 5 (id=1851): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvfrom(r1, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0) setsockopt(r1, 0x101, 0x1, &(0x7f0000000000), 0x0) 0s ago: executing program 4 (id=1852): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003", @ANYRESOCT=r2, @ANYRESOCT=r1], 0xe4}, 0x1, 0x0, 0x0, 0x20004040}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0xfffffffffffffd56) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, 0x0, 0x10162) r4 = socket(0x23, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100000000000000ff03000061127800000000009508000700000000da222305eaf3d325cff5b1233fa1454aa2b05471a4b681c1b4bae01bbe93d31ea21f87e45999371c9c53795ee93965b9cf38cd1508e2a5a2a636f8e7a416fc7be7bc011a3fee5be40c0fd206533de4d53da355f9976bc29bb6526d1a84e51af1cca2e85cf757c805f7587f10dcf8adc56f676e5850500cb2efe47bd8d9e49cbfa50207d3fbea79cc2a15cf36306a39c180185cd7adb5890cee6ea96265fd3bf385756657b235d9658b70d5c682aebc3a77ca180150fe1277b41c29a986323153a06b4ee53ed2925da943e13620db4f66336844621ac0"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40084) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) bind$rose(r4, &(0x7f0000000800)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) kernel console output (not intermixed with test programs): 0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.996447][ T3529] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.035772][ T3529] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.143788][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.302849][ T6309] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.322968][ T24] IPVS: starting estimator thread 0... [ 104.375071][ T6309] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 104.420777][ T6313] IPVS: using max 25 ests per chain, 60000 per kthread [ 104.435934][ T6318] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.483681][ T6309] : entered promiscuous mode [ 104.701370][ T6331] warning: `syz.1.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.725281][ T6329] syzkaller0: entered promiscuous mode [ 104.744992][ T6329] syzkaller0: entered allmulticast mode [ 105.429271][ T6364] geneve2: entered promiscuous mode [ 105.454265][ T6364] __nla_validate_parse: 11 callbacks suppressed [ 105.454286][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 105.522809][ T6367] pim6reg: entered allmulticast mode [ 105.558284][ T6365] pim6reg: left allmulticast mode [ 106.204752][ T6387] raw_sendmsg: syz.2.114 forgot to set AF_INET. Fix it! [ 106.833605][ T6412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.122'. [ 106.979378][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 107.013332][ T6417] Unsupported xt match [ 107.013354][ T6417] unable to load match [ 107.214720][ T153] wlan1: Trigger new scan to find an IBSS to join [ 107.243772][ T6425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.128'. [ 107.522186][ T6441] netlink: 'syz.4.132': attribute type 10 has an invalid length. [ 107.572618][ T6441] netlink: 228 bytes leftover after parsing attributes in process `syz.4.132'. [ 108.329771][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 108.381827][ T6445] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.394555][ T6477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.406842][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 109.107985][ T6501] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.144043][ T6511] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 109.157416][ T6503] syzkaller0: entered promiscuous mode [ 109.163177][ T6503] syzkaller0: entered allmulticast mode [ 109.257233][ T6501] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.422084][ T6501] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.463490][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 109.502050][ T6501] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.567924][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 109.618710][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.153'. [ 109.744062][ T3529] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.909113][ T3529] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.035092][ T3852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.086047][ T3852] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.171445][ T36] wlan1: Trigger new scan to find an IBSS to join [ 110.477024][ T6558] syzkaller0: entered promiscuous mode [ 110.492222][ T6558] syzkaller0: entered allmulticast mode [ 110.604465][ T6566] __nla_validate_parse: 1 callbacks suppressed [ 110.604495][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 110.627983][ T6566] veth0_to_bond: entered allmulticast mode [ 110.655742][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 110.740787][ T153] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 110.841212][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 111.244817][ T6590] geneve3: entered promiscuous mode [ 111.308313][ T6602] netlink: 'syz.1.171': attribute type 23 has an invalid length. [ 111.844301][ T6621] syzkaller0: entered promiscuous mode [ 111.863842][ T6621] syzkaller0: entered allmulticast mode [ 111.902091][ T6576] infiniband !yz!: set active [ 111.925658][ T6576] infiniband !yz!: added team_slave_0 [ 112.044327][ T6576] RDS/IB: !yz!: added [ 112.049511][ T6576] smc: adding ib device !yz! with port count 1 [ 112.056948][ T6576] smc: ib device !yz! port 1 has no pnetid [ 112.141607][ T6640] syzkaller0: entered promiscuous mode [ 112.157642][ T6640] syzkaller0: entered allmulticast mode [ 112.330578][ T946] IPVS: starting estimator thread 0... [ 112.420606][ T6646] IPVS: using max 27 ests per chain, 64800 per kthread [ 112.596446][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 112.770298][ T6662] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 112.984931][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 113.043545][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 113.130906][ T68] wlan1: Creating new IBSS network, BSSID ee:4a:50:d2:a8:fa [ 113.351873][ T6681] netlink: 'syz.0.187': attribute type 8 has an invalid length. [ 113.556832][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 113.571801][ T6688] syzkaller0: entered promiscuous mode [ 113.577336][ T6688] syzkaller0: entered allmulticast mode [ 113.736386][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 113.906892][ T6702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.195'. [ 114.486821][ T6727] tun0: tun_chr_ioctl cmd 1074025672 [ 114.492314][ T6727] tun0: ignored: set checksum disabled [ 114.783054][ T6737] syzkaller0: entered promiscuous mode [ 114.788607][ T6737] syzkaller0: entered allmulticast mode [ 115.800103][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 116.307452][ T6795] syzkaller0: entered promiscuous mode [ 116.320671][ T6795] syzkaller0: entered allmulticast mode [ 116.328161][ T6786] tap0: tun_chr_ioctl cmd 1074025692 [ 116.752620][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'. [ 116.769259][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 117.097780][ T6839] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 117.110338][ T6836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.210940][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.243270][ T6836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.275139][ T6849] bond1: (slave syz_tun): making interface the new active one [ 117.286136][ T6849] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 117.314267][ T6843] syzkaller0: entered promiscuous mode [ 117.320680][ T6843] syzkaller0: entered allmulticast mode [ 117.413719][ T6836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.572584][ T6836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.655288][ T6857] netlink: 'syz.3.234': attribute type 21 has an invalid length. [ 117.663566][ T6857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.234'. [ 117.772763][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 117.796948][ T6869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.868609][ T80] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.009587][ T1148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.086485][ T6884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.239'. [ 118.124567][ T1148] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.194878][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.292217][ T6897] xt_hashlimit: size too large, truncated to 1048576 [ 118.364439][ T6901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.241'. [ 118.400161][ T6900] bond1: invalid ARP target 0.0.0.0 specified for addition [ 118.407833][ T6900] bond1: option arp_ip_target: invalid value (0) [ 118.443232][ T6900] bond1 (unregistering): Released all slaves [ 118.979970][ T6913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 119.126017][ T6922] syzkaller0: entered promiscuous mode [ 119.140587][ T6922] syzkaller0: entered allmulticast mode [ 119.183345][ T6926] netlink: 'syz.2.248': attribute type 5 has an invalid length. [ 119.470148][ T6935] openvswitch: netlink: Message has 4 unknown bytes. [ 119.505907][ T6934] bridge3: entered promiscuous mode [ 119.508121][ T6935] netlink: 'syz.4.250': attribute type 6 has an invalid length. [ 119.539765][ T6934] bridge3: entered allmulticast mode [ 119.540055][ T6935] netlink: 176 bytes leftover after parsing attributes in process `syz.4.250'. [ 119.566874][ T6934] team0: Port device bridge3 added [ 120.675242][ T6979] syzkaller0: entered promiscuous mode [ 120.690370][ T6979] syzkaller0: entered allmulticast mode [ 120.900678][ T6983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.126227][ T6996] team_slave_0: entered promiscuous mode [ 121.132066][ T6996] team_slave_1: entered promiscuous mode [ 121.152159][ T6996] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.210698][ T7007] xt_ecn: cannot match TCP bits for non-tcp packets [ 121.397458][ T7013] netlink: 284 bytes leftover after parsing attributes in process `syz.0.270'. [ 121.441308][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 121.644578][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.961883][ T7036] syzkaller0: entered promiscuous mode [ 121.981775][ T7036] syzkaller0: entered allmulticast mode [ 122.020290][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 122.082273][ T7042] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 122.165120][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 122.184889][ T7039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.194234][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 122.294436][ T7052] netlink: 68 bytes leftover after parsing attributes in process `syz.4.280'. [ 122.312015][ T7039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.319775][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 122.404132][ T7039] 8021q: adding VLAN 0 to HW filter on device bond5 [ 122.444406][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 122.558795][ T7039] 8021q: adding VLAN 0 to HW filter on device bond6 [ 122.583795][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 122.697368][ T7039] 8021q: adding VLAN 0 to HW filter on device bond7 [ 122.705456][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 122.807744][ T7039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 122.875047][ T7070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.134278][ T1225] hid-generic 0005:0B57:0401.0001: item fetching failed at offset 0/1 [ 123.181238][ T1225] hid-generic 0005:0B57:0401.0001: probe with driver hid-generic failed with error -22 [ 123.287430][ T7083] netlink: 'syz.4.290': attribute type 1 has an invalid length. [ 123.345954][ T7083] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.359795][ T7083] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 123.373758][ T7083] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 123.445758][ T7090] syzkaller0: entered promiscuous mode [ 123.460548][ T7090] syzkaller0: entered allmulticast mode [ 123.596073][ T7095] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 123.832265][ T7105] netlink: 'syz.3.292': attribute type 3 has an invalid length. [ 123.839985][ T7105] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 123.890867][ T7103] : renamed from bond0 (while UP) [ 124.022225][ T7107] trusted_key: syz.1.296 sent an empty control message without MSG_MORE. [ 124.121139][ T7109] xt_l2tp: invalid flags combination: 0 [ 124.267526][ T7120] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 124.459695][ T7128] syzkaller0: entered promiscuous mode [ 124.476087][ T7128] syzkaller0: entered allmulticast mode [ 125.227422][ T7165] syzkaller0: entered promiscuous mode [ 125.233082][ T7165] syzkaller0: entered allmulticast mode [ 126.286618][ T7199] bridge_slave_0: left allmulticast mode [ 126.375234][ T7199] bridge_slave_0: left promiscuous mode [ 126.405499][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.429805][ T7199] bridge_slave_1: left allmulticast mode [ 126.451610][ T7199] bridge_slave_1: left promiscuous mode [ 126.465217][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.512800][ T7199] bond0: (slave bond_slave_0): Releasing backup interface [ 126.547612][ T7199] bond0: (slave bond_slave_1): Releasing backup interface [ 126.582870][ T7199] team0: Port device team_slave_0 removed [ 126.602430][ T7199] team0: Port device team_slave_1 removed [ 126.614325][ T7199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.630951][ T7191] __nla_validate_parse: 14 callbacks suppressed [ 126.630972][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 127.041805][ T7243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 127.325886][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 128.074401][ T7278] tipc: Started in network mode [ 128.100127][ T7278] tipc: Node identity ac14142f, cluster identity 4711 [ 128.124815][ T7278] tipc: New replicast peer: 0.0.0.0 [ 128.156599][ T7278] tipc: Enabled bearer , priority 10 [ 128.375365][ T7285] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 128.558231][ T7285] netlink: 'syz.1.334': attribute type 33 has an invalid length. [ 128.567733][ T7285] netlink: 152 bytes leftover after parsing attributes in process `syz.1.334'. [ 128.647499][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.655662][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.696847][ T7283] team_slave_0: left promiscuous mode [ 128.703872][ T7283] team_slave_1: left promiscuous mode [ 128.809949][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.824105][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.913310][ T7283] bridge3: left promiscuous mode [ 128.918307][ T7283] bridge3: left allmulticast mode [ 128.930200][ T7288] batadv_slave_0: entered promiscuous mode [ 128.958538][ T7290] bond1: (slave gretap1): making interface the new active one [ 128.970275][ T7290] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 128.995066][ T7293] vlan2: entered allmulticast mode [ 129.000258][ T7293] bond1: entered allmulticast mode [ 129.005857][ T7293] gretap1: entered allmulticast mode [ 129.013389][ T7293] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.059848][ T7285] `: renamed from team0 (while UP) [ 129.088372][ T3533] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.097304][ T3533] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.107342][ T3533] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.128802][ T3533] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.139277][ T911] tipc: Node number set to 2886997039 [ 129.163700][ T7287] batadv_slave_0: left promiscuous mode [ 129.298686][ T7312] netlink: 720 bytes leftover after parsing attributes in process `syz.0.339'. [ 129.447155][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 129.484312][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.506572][ T7324] netlink: 312 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.529989][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.577568][ T7334] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 129.588304][ T7334] netlink: 224 bytes leftover after parsing attributes in process `syz.1.344'. [ 130.057703][ T7344] tipc: Enabling of bearer rejected, failed to enable media [ 130.289447][ T7351] netlink: 'syz.2.349': attribute type 10 has an invalid length. [ 130.310279][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.323119][ T7351] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.505819][ T7358] netlink: 'syz.3.351': attribute type 13 has an invalid length. [ 130.529710][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.350'. [ 130.799546][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.807447][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.834219][ T7358] team_slave_0: left promiscuous mode [ 130.840156][ T7358] team_slave_1: left promiscuous mode [ 130.903653][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.923011][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.089454][ T7359] netlink: 'syz.3.351': attribute type 12 has an invalid length. [ 131.121169][ T7368] tipc: Failed to obtain node identity [ 131.126714][ T7368] tipc: Enabling of bearer rejected, failed to enable media [ 131.201848][ T3533] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.224308][ T3533] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.282575][ T3533] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.330356][ T7382] : entered promiscuous mode [ 131.339405][ T3533] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.374137][ T7382] netlink: 'syz.3.356': attribute type 21 has an invalid length. [ 131.467018][ T7388] netlink: 'syz.4.358': attribute type 6 has an invalid length. [ 131.507329][ T7388] wireguard0: entered promiscuous mode [ 131.514603][ T7388] wireguard0: entered allmulticast mode [ 131.546311][ T7388] team0: Device wireguard0 is of different type [ 131.633251][ T7392] Dead loop on virtual device ip6_vti0, fix it urgently! [ 131.641478][ T7392] Dead loop on virtual device ip6_vti0, fix it urgently! [ 131.649101][ T7392] Dead loop on virtual device ip6_vti0, fix it urgently! [ 131.657720][ T7392] Dead loop on virtual device ip6_vti0, fix it urgently! [ 131.665484][ T7392] Dead loop on virtual device ip6_vti0, fix it urgently! [ 131.673821][ T7392] Dead loop on virtual device ip6_vti0, fix it urgently! [ 132.221432][ T7410] __nla_validate_parse: 8 callbacks suppressed [ 132.221453][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'. [ 132.261594][ T7410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.458786][ T7422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.468360][ T7421] netlink: 'syz.1.366': attribute type 61 has an invalid length. [ 132.586577][ T7426] netlink: 'syz.3.369': attribute type 6 has an invalid length. [ 132.792895][ T7434] tipc: Enabled bearer , priority 0 [ 132.802927][ T7431] syzkaller0: entered promiscuous mode [ 132.830666][ T7431] syzkaller0: entered allmulticast mode [ 133.051151][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 133.134182][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159387][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.168171][ T7432] tipc: Resetting bearer [ 133.185716][ T7432] tipc: Disabling bearer [ 133.269563][ T7442] bond2: option coupled_control: invalid value (36) [ 133.283876][ T7442] bond2 (unregistering): Released all slaves [ 133.987291][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 134.455665][ T7478] tipc: Started in network mode [ 134.466568][ T7478] tipc: Node identity 4246, cluster identity 4711 [ 134.482399][ T7478] tipc: Node number set to 16966 [ 134.495585][ T7478] tipc: Cannot configure node identity twice [ 134.676551][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 135.396833][ T7540] netlink: 21 bytes leftover after parsing attributes in process `syz.2.392'. [ 135.425050][ T7531] syzkaller1: entered promiscuous mode [ 135.446861][ T7531] syzkaller1: entered allmulticast mode [ 135.455445][ T7540] Cannot find del_set index 4 as target [ 135.471937][ T7540] netlink: 21 bytes leftover after parsing attributes in process `syz.2.392'. [ 135.578099][ T7543] syzkaller0: entered promiscuous mode [ 135.596737][ T7543] syzkaller0: entered allmulticast mode [ 135.610002][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 135.624947][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 135.655933][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 135.699499][ T7543] validate_nla: 2 callbacks suppressed [ 135.699520][ T7543] netlink: 'syz.0.394': attribute type 19 has an invalid length. [ 135.767802][ T7543] netlink: 'syz.0.394': attribute type 20 has an invalid length. [ 135.824931][ T7558] vcan0: mtu less than device minimum [ 135.890742][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 136.135734][ T7582] netlink: 'syz.2.402': attribute type 5 has an invalid length. [ 137.084601][ T7621] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 137.147262][ T7621] batman_adv: batadv0: Adding interface: gretap1 [ 137.164711][ T7621] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.195017][ T7621] batman_adv: batadv0: Interface activated: gretap1 [ 137.457183][ T7636] syzkaller1: entered promiscuous mode [ 137.463886][ T7636] syzkaller1: entered allmulticast mode [ 137.868650][ T7649] syzkaller0: entered promiscuous mode [ 137.875152][ T7649] syzkaller0: entered allmulticast mode [ 138.102309][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 138.197102][ T7653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.236305][ T7659] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 138.640576][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 138.905667][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 139.489365][ T7694] syzkaller1: entered promiscuous mode [ 139.495019][ T7694] syzkaller1: entered allmulticast mode [ 140.706843][ T7731] Bluetooth: MGMT ver 1.23 [ 140.853223][ T5830] IPVS: starting estimator thread 0... [ 140.940593][ T7734] IPVS: using max 26 ests per chain, 62400 per kthread [ 141.148148][ T3960] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 141.205267][ T7753] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 142.260232][ T153] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.301400][ T153] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.337109][ T153] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.345253][ T7764] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.441'. [ 142.362324][ T153] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.459732][ T7764] block nbd0: server does not support multiple connections per device. [ 142.487234][ T7764] block nbd0: shutting down sockets [ 142.521299][ T7768] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 142.650672][ T7768] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 142.658493][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 143.045036][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 143.209132][ T7791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.408596][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.448'. [ 144.523804][ T7810] netlink: 'syz.1.451': attribute type 3 has an invalid length. [ 144.541111][ T7818] syz_tun: entered allmulticast mode [ 144.617528][ T7820] syz_tun: left allmulticast mode [ 144.848741][ T7841] pim6reg: entered allmulticast mode [ 144.871556][ T7844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.458'. [ 144.937758][ T7844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.458'. [ 145.017510][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 145.085499][ T7834] pim6reg: left allmulticast mode [ 145.085529][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 145.130837][ T68] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.142725][ T68] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.160062][ T68] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.196717][ T68] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.220352][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 145.240849][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 145.309357][ T7861] Cannot find del_set index 3 as target [ 145.344830][ T7864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 145.369303][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 145.388409][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 146.486094][ T7905] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.575707][ T7919] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 146.591827][ T7919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.657549][ T7905] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.671258][ T7926] netlink: 'syz.4.480': attribute type 32 has an invalid length. [ 146.749311][ T7926] bond3: option coupled_control: invalid value (12) [ 146.840693][ T7926] bond3 (unregistering): Released all slaves [ 146.932161][ T7905] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.163810][ T7939] syzkaller0: entered promiscuous mode [ 147.169586][ T7939] syzkaller0: entered allmulticast mode [ 147.204269][ T7905] bond0: (slave netdevsim0): Releasing backup interface [ 147.229426][ T7905] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.319059][ T7953] bridge1: entered allmulticast mode [ 147.357927][ T7956] bridge2: entered allmulticast mode [ 148.871702][ T7969] __nla_validate_parse: 6 callbacks suppressed [ 148.871725][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 148.945588][ T5999] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.956226][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 149.065238][ T80] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.079953][ T7975] macvlan3: entered allmulticast mode [ 149.085970][ T7975] syz_tun: entered allmulticast mode [ 149.102025][ T7975] team0: Port device macvlan3 added [ 149.136459][ T80] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.182138][ T80] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.366074][ T7989] syzkaller0: entered promiscuous mode [ 149.371855][ T7989] syzkaller0: entered allmulticast mode [ 149.379275][ T7982] syz.0.493 (7982) used greatest stack depth: 17568 bytes left [ 149.391558][ T7996] netlink: 27 bytes leftover after parsing attributes in process `syz.3.499'. [ 149.592310][ T8009] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 150.341632][ T8025] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 150.938380][ T8010] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 150.947122][ T8010] netlink: 224 bytes leftover after parsing attributes in process `syz.3.502'. [ 150.956735][ T8010] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 151.314637][ T8050] bridge1: entered promiscuous mode [ 151.948192][ T8063] netlink: 104 bytes leftover after parsing attributes in process `syz.4.517'. [ 152.102364][ T8063] syzkaller0: entered promiscuous mode [ 152.133430][ T8063] syzkaller0: entered allmulticast mode [ 152.590813][ T8086] netlink: zone id is out of range [ 152.607537][ T8086] netlink: zone id is out of range [ 152.620836][ T8086] netlink: get zone limit has 8 unknown bytes [ 153.998346][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 154.537057][ T8109] tipc: Enabling of bearer rejected, failed to enable media [ 154.634792][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 154.778608][ T8134] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 154.800778][ T8134] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.855265][ T8134] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.532'. [ 154.873026][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 154.908306][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 155.246519][ T8159] batadv_slave_1: entered promiscuous mode [ 155.438939][ T8158] batadv_slave_1: left promiscuous mode [ 155.492990][ T8163] bond_slave_0: entered promiscuous mode [ 155.498959][ T8163] bond_slave_1: entered promiscuous mode [ 155.504818][ T8163] team_slave_0: entered promiscuous mode [ 155.510710][ T8163] team_slave_1: entered promiscuous mode [ 155.521197][ T8163] macvlan2: entered promiscuous mode [ 155.533897][ T8163] bond0: entered promiscuous mode [ 155.551844][ T8163] team0: entered promiscuous mode [ 155.564739][ T8163] macvlan2: entered allmulticast mode [ 155.570207][ T8163] bond0: entered allmulticast mode [ 155.581385][ T8141] netlink: 'syz.0.535': attribute type 9 has an invalid length. [ 155.591804][ T8163] bond_slave_0: entered allmulticast mode [ 155.598164][ T8163] bond_slave_1: entered allmulticast mode [ 155.604687][ T8163] team0: entered allmulticast mode [ 155.609806][ T8141] netlink: 'syz.0.535': attribute type 11 has an invalid length. [ 155.609845][ T8141] netlink: 'syz.0.535': attribute type 12 has an invalid length. [ 155.609862][ T8141] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.535'. [ 155.619388][ T8163] team_slave_0: entered allmulticast mode [ 155.642711][ T8163] team_slave_1: entered allmulticast mode [ 155.650593][ T8163] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.660068][ T8163] bond0: left allmulticast mode [ 155.665174][ T8163] bond_slave_0: left allmulticast mode [ 155.671440][ T8163] bond_slave_1: left allmulticast mode [ 155.677037][ T8163] team0: left allmulticast mode [ 155.683189][ T8163] team_slave_0: left allmulticast mode [ 155.689256][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 155.692842][ T8163] team_slave_1: left allmulticast mode [ 155.705320][ T8163] bond0: left promiscuous mode [ 155.734869][ T8163] team0: left promiscuous mode [ 155.745545][ T8163] bond_slave_0: left promiscuous mode [ 155.751089][ T8163] bond_slave_1: left promiscuous mode [ 155.756726][ T8163] team_slave_0: left promiscuous mode [ 155.763129][ T8163] team_slave_1: left promiscuous mode [ 156.026250][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 156.124617][ T8179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.321449][ T8190] bond2 (unregistering): Released all slaves [ 156.807349][ T8213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.555'. [ 156.863570][ T8217] ipt_REJECT: TCP_RESET invalid for non-tcp [ 156.868433][ T8220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.555'. [ 156.924802][ T8217] macsec1: entered promiscuous mode [ 156.930513][ T8217] macsec1: entered allmulticast mode [ 157.331199][ T8242] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 157.374096][ T8242] team0: Failed to send options change via netlink (err -105) [ 157.389858][ T8242] team0: Port device dummy0 added [ 157.397137][ T8246] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 157.412211][ T8246] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 157.435313][ T8247] netlink: 'syz.1.566': attribute type 3 has an invalid length. [ 157.449995][ T8247] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 157.464178][ T8246] team0: Failed to send options change via netlink (err -105) [ 157.473980][ T8246] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 157.498353][ T8246] team0: Port device dummy0 removed [ 157.511306][ T8246] : (slave dummy0): Enslaving as an active interface with an up link [ 159.006172][ T8313] __nla_validate_parse: 7 callbacks suppressed [ 159.006193][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.586'. [ 159.062659][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.586'. [ 159.106347][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 159.147543][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 159.241748][ T8326] netlink: 420 bytes leftover after parsing attributes in process `syz.1.590'. [ 159.773161][ T8337] netlink: 'syz.0.593': attribute type 2 has an invalid length. [ 159.786707][ T8354] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 159.804695][ T8354] netlink: 228 bytes leftover after parsing attributes in process `syz.1.597'. [ 159.826168][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 159.876684][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 159.937998][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.600'. [ 160.049302][ T8370] x_tables: duplicate underflow at hook 2 [ 160.634302][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 160.678791][ T8407] syzkaller0: entered promiscuous mode [ 160.684948][ T8407] syzkaller0: entered allmulticast mode [ 161.091503][ T8424] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 161.177680][ T8424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.252782][ T8427] bond2: (slave ip6gretap1): making interface the new active one [ 161.269009][ T8427] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 161.280181][ T8428] netlink: 'syz.3.613': attribute type 12 has an invalid length. [ 161.353363][ T8428] netlink: 'syz.3.613': attribute type 4 has an invalid length. [ 162.253345][ T80] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 162.442910][ T8442] Bluetooth: MGMT ver 1.23 [ 162.543662][ T8451] x_tables: unsorted underflow at hook 2 [ 162.648413][ T8457] bridge0: entered promiscuous mode [ 162.679775][ T8457] macsec2: entered promiscuous mode [ 162.700748][ T8457] bridge0: port 3(macsec2) entered blocking state [ 162.712304][ T8457] bridge0: port 3(macsec2) entered disabled state [ 162.719634][ T8457] macsec2: entered allmulticast mode [ 162.738809][ T8457] bridge0: entered allmulticast mode [ 162.744918][ T8460] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 162.769174][ T8457] macsec2: left allmulticast mode [ 162.774435][ T8457] bridge0: left allmulticast mode [ 162.779122][ T8466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.803107][ T8457] bridge0: left promiscuous mode [ 162.830593][ T8469] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:20000 [ 163.092276][ T8480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.133045][ T8482] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.201675][ T8493] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 163.222328][ T8493] NCSI netlink: No device for ifindex 0 [ 163.677640][ T8522] bridge1: left promiscuous mode [ 164.073586][ T8556] __nla_validate_parse: 49 callbacks suppressed [ 164.073608][ T8556] netlink: 180 bytes leftover after parsing attributes in process `syz.4.646'. [ 164.112438][ T8559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.647'. [ 164.253811][ T8566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 164.468287][ T8573] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 164.600791][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 164.753113][ T8588] netlink: 240 bytes leftover after parsing attributes in process `syz.1.653'. [ 164.818476][ T8593] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.657'. [ 164.901786][ T8598] netlink: 'syz.3.659': attribute type 6 has an invalid length. [ 164.910911][ T8598] netlink: 'syz.3.659': attribute type 6 has an invalid length. [ 165.545620][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 165.745428][ T8622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.664'. [ 165.851402][ T8611] infiniband syû: set down [ 165.856352][ T8611] infiniband syû: added bond_slave_0 [ 165.921605][ T8611] RDS/IB: syû: added [ 165.938997][ T8611] smc: adding ib device syû with port count 1 [ 165.947552][ T8611] smc: ib device syû port 1 has no pnetid [ 166.413171][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 166.450648][ T8643] netlink: 'syz.0.672': attribute type 30 has an invalid length. [ 166.530095][ T3533] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.545387][ T3533] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.574502][ T3533] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.624471][ T3533] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.628149][ T8651] netlink: 'syz.1.674': attribute type 6 has an invalid length. [ 166.643135][ T8655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.675'. [ 167.407305][ T8678] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 167.487402][ T8678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.666225][ T8678] bond3 (unregistering): Released all slaves [ 169.313755][ T8728] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 169.382664][ T8728] 8021q: adding VLAN 0 to HW filter on device bond9 [ 169.430166][ T8729] veth3: entered promiscuous mode [ 169.448933][ T8729] bond9: (slave veth3): Enslaving as an active interface with an up link [ 169.495047][ T8737] netlink: 'syz.4.698': attribute type 11 has an invalid length. [ 169.532181][ T8737] netlink: 'syz.4.698': attribute type 11 has an invalid length. [ 169.562275][ T8737] __nla_validate_parse: 4 callbacks suppressed [ 169.562295][ T8737] netlink: 224 bytes leftover after parsing attributes in process `syz.4.698'. [ 169.817572][ T8749] syzkaller0: entered promiscuous mode [ 169.850853][ T8749] syzkaller0: entered allmulticast mode [ 172.054251][ T8770] tipc: Started in network mode [ 172.059531][ T8770] tipc: Node identity 9ac874c8b9b8, cluster identity 4711 [ 172.069907][ T8770] tipc: Enabled bearer , priority 0 [ 172.078942][ T8770] syzkaller0: entered promiscuous mode [ 172.090905][ T8770] syzkaller0: entered allmulticast mode [ 172.753988][ T8768] tipc: Resetting bearer [ 172.777878][ T8768] tipc: Disabling bearer [ 173.199864][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 174.013654][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 174.400820][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 174.722427][ T8828] IPv6: Can't replace route, no match found [ 174.887038][ T8830] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:0 [ 175.212898][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 175.721659][ T8861] syzkaller0: entered promiscuous mode [ 175.746528][ T8861] syzkaller0: entered allmulticast mode [ 176.198139][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 176.623414][ T8897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.789003][ T8894] netlink: 68 bytes leftover after parsing attributes in process `syz.1.737'. [ 176.853372][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 176.863077][ T8894] hsr_slave_0: left promiscuous mode [ 177.681221][ T8921] syzkaller0: entered promiscuous mode [ 177.686759][ T8921] syzkaller0: entered allmulticast mode [ 178.812490][ T8940] æÿîÿ: entered promiscuous mode [ 179.189727][ T8940] lo speed is unknown, defaulting to 1000 [ 179.329712][ T8940] lo speed is unknown, defaulting to 1000 [ 179.468366][ T8940] lo speed is unknown, defaulting to 1000 [ 180.091775][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 180.366246][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 180.377325][ T8962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.565483][ T8966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.752'. [ 180.573654][ T8940] infiniband syz0: set down [ 180.573733][ T5830] lo speed is unknown, defaulting to 1000 [ 180.600588][ T8940] infiniband syz0: added lo [ 180.608013][ T8940] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 180.615057][ T8940] infiniband syz0: Couldn't open port 1 [ 180.784432][ T8940] RDS/IB: syz0: added [ 180.811135][ T8940] smc: adding ib device syz0 with port count 1 [ 180.853535][ T8940] smc: ib device syz0 port 1 has no pnetid [ 180.889533][ T911] lo speed is unknown, defaulting to 1000 [ 180.907523][ T8940] lo speed is unknown, defaulting to 1000 [ 181.014757][ T8982] netlink: zone id is out of range [ 181.019939][ T8982] netlink: zone id is out of range [ 181.055947][ T8982] netlink: zone id is out of range [ 181.056269][ T8985] team0: Device is already in use. [ 181.071175][ T8982] netlink: zone id is out of range [ 181.076433][ T8982] netlink: zone id is out of range [ 181.091168][ T8982] netlink: zone id is out of range [ 181.111727][ T8982] netlink: zone id is out of range [ 181.116937][ T8982] netlink: zone id is out of range [ 181.123888][ T8982] netlink: zone id is out of range [ 181.146603][ T8982] netlink: zone id is out of range [ 181.362173][ T8989] x_tables: duplicate underflow at hook 2 [ 181.454442][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 181.513765][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 181.586237][ T8991] bond0: (slave team0): Releasing backup interface [ 181.598817][ T8991] team0 (unregistering): Failed to send options change via netlink (err -105) [ 181.608475][ T8991] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 181.611548][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 181.619871][ T8991] team0 (unregistering): Port device team_slave_0 removed [ 181.639319][ T8991] team0 (unregistering): Failed to send options change via netlink (err -105) [ 181.649603][ T8991] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 181.661054][ T8991] team0 (unregistering): Port device team_slave_1 removed [ 181.672313][ T8998] xt_hashlimit: size too large, truncated to 1048576 [ 181.698781][ T8940] lo speed is unknown, defaulting to 1000 [ 181.733540][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 181.902855][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 181.932046][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 182.210663][ T8940] lo speed is unknown, defaulting to 1000 [ 182.257285][ T80] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.266271][ T80] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.280665][ T911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.510088][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 182.526894][ T9017] netlink: 'syz.3.766': attribute type 2 has an invalid length. [ 182.649445][ T8940] lo speed is unknown, defaulting to 1000 [ 182.694219][ T9021] tipc: Started in network mode [ 182.709405][ T9021] tipc: Node identity ac14140f, cluster identity 4711 [ 182.729898][ T9021] tipc: New replicast peer: 255.255.255.255 [ 182.740792][ T9021] tipc: Enabled bearer , priority 10 [ 182.761286][ T9021] netlink: 'syz.3.767': attribute type 11 has an invalid length. [ 182.769076][ T9021] netlink: 'syz.3.767': attribute type 11 has an invalid length. [ 182.797435][ T9021] netlink: 224 bytes leftover after parsing attributes in process `syz.3.767'. [ 182.810879][ T911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.908352][ T9021] bridge6: entered promiscuous mode [ 182.913912][ T9021] bridge6: entered allmulticast mode [ 182.970938][ T911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.138521][ T8973] lo speed is unknown, defaulting to 1000 [ 183.687473][ T8940] lo speed is unknown, defaulting to 1000 [ 183.920898][ T9] tipc: Node number set to 2886997007 [ 184.466207][ T9052] syzkaller1: entered promiscuous mode [ 184.484561][ T9052] syzkaller1: entered allmulticast mode [ 185.153179][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.173193][ T9067] 8021q: adding VLAN 0 to HW filter on device ` [ 185.205870][ T911] lo speed is unknown, defaulting to 1000 [ 185.216812][ T911] syz0: Port: 1 Link ACTIVE [ 185.483025][ T5955] lo speed is unknown, defaulting to 1000 [ 185.620042][ T9078] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 185.949417][ T9092] __nla_validate_parse: 1 callbacks suppressed [ 185.949439][ T9092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.785'. [ 185.975503][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 186.010690][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 186.099424][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 186.413738][ T9110] syzkaller0: entered promiscuous mode [ 186.427602][ T9110] syzkaller0: entered allmulticast mode [ 186.485237][ T9110] net_ratelimit: 45 callbacks suppressed [ 186.485257][ T9110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.499379][ T9110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.599000][ T9118] openvswitch: netlink: IP tunnel dst address not specified [ 187.179829][ T9137] syzkaller1: entered promiscuous mode [ 187.210732][ T9137] syzkaller1: entered allmulticast mode [ 187.261832][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.798'. [ 187.279830][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.797'. [ 187.303813][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.797'. [ 187.353488][ T9142] netlink: 9 bytes leftover after parsing attributes in process `syz.1.799'. [ 187.391432][ T9142] netlink: 9 bytes leftover after parsing attributes in process `syz.1.799'. [ 188.206816][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 188.614058][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.808'. [ 189.003388][ T9157] lo speed is unknown, defaulting to 1000 [ 189.314552][ T9198] team0 (unregistering): Port device team_slave_0 removed [ 189.332340][ T9198] team0 (unregistering): Port device team_slave_1 removed [ 190.907397][ T9241] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 191.034835][ T9251] syzkaller0: entered promiscuous mode [ 191.066333][ T9251] syzkaller0: entered allmulticast mode [ 191.077136][ T9251] bridge_slave_0: left allmulticast mode [ 191.090627][ T9251] bridge_slave_0: left promiscuous mode [ 191.107318][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.144000][ T9251] bridge_slave_1: left allmulticast mode [ 191.161595][ T9251] bridge_slave_1: left promiscuous mode [ 191.167469][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.169881][ T9264] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 191.202582][ T9251] bond0: (slave bond_slave_0): Releasing backup interface [ 191.225072][ T9251] bond0: (slave bond_slave_1): Releasing backup interface [ 191.241022][ T9268] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 191.254549][ T9251] team0: Port device team_slave_0 removed [ 191.263665][ T9251] team0: Port device team_slave_1 removed [ 191.267813][ T9262] __nla_validate_parse: 3 callbacks suppressed [ 191.267831][ T9262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.827'. [ 191.285556][ T9251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.294288][ T9251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.368927][ T9251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.476711][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 191.958100][ T9317] lo speed is unknown, defaulting to 1000 [ 191.964472][ T9317] lo speed is unknown, defaulting to 1000 [ 191.972651][ T9317] lo speed is unknown, defaulting to 1000 [ 191.983830][ T9317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.032638][ T9317] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.088526][ T9317] lo speed is unknown, defaulting to 1000 [ 192.096535][ T9322] syzkaller0: entered promiscuous mode [ 192.103591][ T9322] syzkaller0: entered allmulticast mode [ 192.111434][ T9317] lo speed is unknown, defaulting to 1000 [ 192.125628][ T9317] lo speed is unknown, defaulting to 1000 [ 192.148388][ T9317] lo speed is unknown, defaulting to 1000 [ 192.155817][ T9317] lo speed is unknown, defaulting to 1000 [ 192.166010][ T9318] smc: removing ib device !yz! [ 192.366306][ T9326] netlink: 'syz.1.842': attribute type 10 has an invalid length. [ 192.725859][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 193.224495][ T9349] dummy0: mtu less than device minimum [ 193.367988][ T9366] syzkaller0: entered promiscuous mode [ 193.374063][ T9366] syzkaller0: entered allmulticast mode [ 193.770970][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.854'. [ 193.930624][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.444404][ T9401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.858'. [ 194.697614][ T9370] lo speed is unknown, defaulting to 1000 [ 194.835922][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 195.204870][ T9370] lo speed is unknown, defaulting to 1000 [ 195.214273][ T9415] syzkaller0: entered promiscuous mode [ 195.219801][ T9415] syzkaller0: entered allmulticast mode [ 195.513798][ T9425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.865'. [ 195.527278][ T9423] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 195.536317][ T9419] pim6reg1: entered promiscuous mode [ 195.544909][ T9419] pim6reg1: entered allmulticast mode [ 195.561768][ T9423] veth0_vlan: left promiscuous mode [ 195.571092][ T9423] veth0_vlan: entered promiscuous mode [ 195.579800][ T9423] team0: Device veth0_vlan failed to register rx_handler [ 195.587509][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 195.715304][ T9417] delete_channel: no stack [ 196.108258][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 196.130781][ T9431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.194488][ T9431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.837668][ T9451] netlink: 'syz.3.875': attribute type 2 has an invalid length. [ 196.845935][ T9451] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 196.856464][ T9451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.875'. [ 196.917791][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 197.028448][ T9455] syzkaller0: entered promiscuous mode [ 197.035928][ T9455] syzkaller0: entered allmulticast mode [ 197.853025][ T9466] lo speed is unknown, defaulting to 1000 [ 198.222115][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 198.298664][ T9466] lo speed is unknown, defaulting to 1000 [ 198.457211][ T9505] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 198.465152][ T9505] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 198.575943][ T9509] netlink: 'syz.3.893': attribute type 8 has an invalid length. [ 198.584021][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 198.694591][ T9509] bond0: entered promiscuous mode [ 198.701924][ T9509] gretap0: entered promiscuous mode [ 198.709537][ T9509] bond0: left promiscuous mode [ 198.717896][ T9509] gretap0: left promiscuous mode [ 198.753717][ T9499] lo speed is unknown, defaulting to 1000 [ 198.916833][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 199.165047][ T9534] netlink: 'syz.0.899': attribute type 21 has an invalid length. [ 199.180776][ T9534] netlink: 'syz.0.899': attribute type 22 has an invalid length. [ 199.200902][ T9534] netlink: 'syz.0.899': attribute type 23 has an invalid length. [ 199.215175][ T9534] netlink: 'syz.0.899': attribute type 25 has an invalid length. [ 199.247460][ T9534] netlink: 96 bytes leftover after parsing attributes in process `syz.0.899'. [ 199.390085][ T9546] netlink: 'syz.4.903': attribute type 2 has an invalid length. [ 199.390827][ T9548] netlink: 'syz.4.903': attribute type 2 has an invalid length. [ 199.408118][ T9499] lo speed is unknown, defaulting to 1000 [ 199.493029][ T9548] : entered promiscuous mode [ 199.656459][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 199.727459][ T9563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.905'. [ 199.807388][ T9562] syzkaller0: entered promiscuous mode [ 199.815482][ T9562] syzkaller0: entered allmulticast mode [ 200.317583][ T9543] lo speed is unknown, defaulting to 1000 [ 200.419375][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 200.516562][ T9586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.910'. [ 200.890036][ T9543] lo speed is unknown, defaulting to 1000 [ 201.346393][ T9611] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 201.350013][ T9609] syzkaller0: entered promiscuous mode [ 201.359798][ T9609] syzkaller0: entered allmulticast mode [ 201.372961][ T9579] lo speed is unknown, defaulting to 1000 [ 201.473083][ T9611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 201.659877][ T9617] bond10 (unregistering): Released all slaves [ 201.692741][ T9579] lo speed is unknown, defaulting to 1000 [ 201.890571][ T9624] __nla_validate_parse: 6 callbacks suppressed [ 201.890592][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 202.033057][ T9632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.925'. [ 202.042758][ T9632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'. [ 202.052574][ T9632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.925'. [ 202.062234][ T9632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.925'. [ 202.552723][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.932'. [ 202.627229][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'. [ 202.681241][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 202.697913][ T9669] netlink: 80 bytes leftover after parsing attributes in process `syz.1.936'. [ 202.710974][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.935'. [ 202.827214][ T9672] syzkaller0: entered promiscuous mode [ 202.859284][ T9672] syzkaller0: entered allmulticast mode [ 203.219405][ T9695] wireguard0: entered promiscuous mode [ 203.246312][ T9695] wireguard0: entered allmulticast mode [ 203.617440][ T9713] netlink: 'syz.1.948': attribute type 3 has an invalid length. [ 203.638722][ T9713] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 203.814014][ T9724] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 203.996786][ T9727] syzkaller0: entered promiscuous mode [ 204.014015][ T9727] syzkaller0: entered allmulticast mode [ 204.106641][ T9735] netlink: 'syz.4.955': attribute type 6 has an invalid length. [ 204.285423][ T9735] wireguard0: entered promiscuous mode [ 204.291335][ T9735] wireguard0: entered allmulticast mode [ 204.319276][ T9735] team0: Device wireguard0 is of different type [ 204.502333][ T9751] bridge_slave_1: left allmulticast mode [ 204.514651][ T9751] bridge_slave_1: left promiscuous mode [ 204.522970][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.670108][ T9751] bridge_slave_0: left allmulticast mode [ 204.676707][ T9751] bridge_slave_0: left promiscuous mode [ 204.683688][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.805058][ T9731] lo speed is unknown, defaulting to 1000 [ 205.279201][ T9764] sctp: [Deprecated]: syz.4.962 (pid 9764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.279201][ T9764] Use struct sctp_sack_info instead [ 205.430571][ T9731] lo speed is unknown, defaulting to 1000 [ 205.751626][ T9737] lo speed is unknown, defaulting to 1000 [ 205.831201][ T9778] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 205.916693][ T9778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.957960][ T9782] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 206.040212][ T9787] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 206.116195][ T9786] syzkaller0: entered promiscuous mode [ 206.131689][ T9786] syzkaller0: entered allmulticast mode [ 206.470698][ T9741] lo speed is unknown, defaulting to 1000 [ 206.606088][ T9805] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 206.900532][ T9737] lo speed is unknown, defaulting to 1000 [ 206.946233][ T9741] lo speed is unknown, defaulting to 1000 [ 207.281084][ T9815] lo speed is unknown, defaulting to 1000 [ 208.282807][ T9815] lo speed is unknown, defaulting to 1000 [ 209.247945][ T9905] __nla_validate_parse: 15 callbacks suppressed [ 209.247964][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 209.280140][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 209.369008][ T9908] syzkaller0: entered promiscuous mode [ 209.385492][ T9908] syzkaller0: entered allmulticast mode [ 209.933425][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.195433][ T9932] SET target dimension over the limit! [ 210.444266][ T9942] netlink: 'syz.0.1001': attribute type 2 has an invalid length. [ 210.501962][ T9945] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 210.505121][ T9942] 9: entered promiscuous mode [ 210.560479][ T9945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1002'. [ 210.650909][ T9945] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 210.912526][ T9963] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 210.920441][ T9963] netlink: 'syz.3.1006': attribute type 7 has an invalid length. [ 210.928236][ T9963] netlink: 'syz.3.1006': attribute type 8 has an invalid length. [ 210.950913][ T9963] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1006'. [ 211.060264][ T9973] syzkaller0: entered promiscuous mode [ 211.066935][ T9973] syzkaller0: entered allmulticast mode [ 211.548069][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 211.687219][ T9] IPVS: starting estimator thread 0... [ 211.697118][T10017] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 211.787273][T10019] IPVS: using max 34 ests per chain, 81600 per kthread [ 212.014766][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 212.021229][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 212.024095][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 212.721014][T10030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1024'. [ 212.793198][T10034] syzkaller0: entered promiscuous mode [ 212.798737][T10034] syzkaller0: entered allmulticast mode [ 212.994591][T10043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1028'. [ 213.217984][T10058] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 0, id = 0 [ 213.781851][T10049] lo speed is unknown, defaulting to 1000 [ 214.084805][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 214.328061][T10049] lo speed is unknown, defaulting to 1000 [ 214.557719][T10065] lo speed is unknown, defaulting to 1000 [ 214.777474][T10094] syzkaller0: entered promiscuous mode [ 214.843105][T10094] syzkaller0: entered allmulticast mode [ 215.073025][T10079] lo speed is unknown, defaulting to 1000 [ 215.086992][T10065] lo speed is unknown, defaulting to 1000 [ 215.091351][T10101] veth1_to_bond: entered allmulticast mode [ 215.100544][T10101] veth1_to_bond: entered promiscuous mode [ 215.107007][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 215.294832][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 215.325303][T10099] veth1_to_bond: left promiscuous mode [ 215.361305][T10099] veth1_to_bond: left allmulticast mode [ 215.368354][T10108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 215.646397][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 215.651606][T10079] lo speed is unknown, defaulting to 1000 [ 215.811711][T10124] netlink: 'syz.1.1049': attribute type 10 has an invalid length. [ 215.937251][T10124] veth0_macvtap: left promiscuous mode [ 215.951726][T10124] `: Device veth0_macvtap failed to register rx_handler [ 216.165650][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1052'. [ 216.704354][T10143] syzkaller0: entered promiscuous mode [ 216.709898][T10143] syzkaller0: entered allmulticast mode [ 216.873265][T10134] lo speed is unknown, defaulting to 1000 [ 217.106714][T10150] sock: sock_set_timeout: `syz.3.1057' (pid 10150) tries to set negative timeout [ 217.172707][T10151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.218760][T10150] @0Ù: renamed from dummy0 (while UP) [ 217.248469][T10155] IPVS: set_ctl: invalid protocol: 7 172.30.1.2:20000 [ 217.401651][T10134] lo speed is unknown, defaulting to 1000 [ 218.173548][T10179] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 218.210963][T10179] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1065'. [ 218.325064][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1067'. [ 218.357927][T10183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1067'. [ 218.392633][T10183] tipc: Invalid UDP bearer configuration [ 218.392704][T10183] tipc: Enabling of bearer rejected, failed to enable media [ 218.539836][T10188] netlink: 'syz.0.1069': attribute type 2 has an invalid length. [ 218.570458][T10188] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 218.578331][T10188] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1069'. [ 218.875211][T10163] lo speed is unknown, defaulting to 1000 [ 219.024640][T10210] sctp: [Deprecated]: syz.2.1068 (pid 10210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.024640][T10210] Use struct sctp_sack_info instead [ 219.222137][T10218] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 219.353015][T10218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.408485][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 219.443796][T10223] bond4: (slave geneve2): making interface the new active one [ 219.484389][T10223] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 219.510556][ T5999] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.521757][ T5999] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.552565][T10163] lo speed is unknown, defaulting to 1000 [ 219.552585][ T5999] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.568955][ T5999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.647958][T10235] syzkaller0: entered promiscuous mode [ 219.653874][T10235] syzkaller0: entered allmulticast mode [ 220.564347][T10273] netlink: 'syz.2.1088': attribute type 13 has an invalid length. [ 220.616644][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 220.655496][T10280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 220.802628][T10273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.871892][T10273] batman_adv: batadv0: Interface deactivated: gretap1 [ 220.914394][ T3852] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.973275][ T3852] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.000786][ T3852] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.015947][ T3852] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.045485][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 221.055056][T10297] tipc: Disabling bearer [ 221.142490][T10303] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1096'. [ 221.173943][T10303] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1096'. [ 221.272914][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 221.677863][T10333] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 221.919077][T10329] lo speed is unknown, defaulting to 1000 [ 221.984092][T10332] netlink: 'syz.4.1101': attribute type 30 has an invalid length. [ 222.047269][T10332] bond5: option arp_missed_max: invalid value (0) [ 222.054021][T10332] bond5: option arp_missed_max: allowed values 1 - 255 [ 222.067545][T10332] bond5 (unregistering): Released all slaves [ 222.288635][T10339] netlink: 'syz.1.1106': attribute type 3 has an invalid length. [ 222.441900][T10329] lo speed is unknown, defaulting to 1000 [ 222.551205][T10345] siw: device registration error -23 [ 222.596271][T10349] tipc: Enabled bearer , priority 0 [ 222.709767][T10349] tipc: Resetting bearer [ 222.723357][T10354] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 222.746538][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 222.756917][T10356] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.776232][T10356] syzkaller0: entered promiscuous mode [ 222.782166][T10356] syzkaller0: entered allmulticast mode [ 222.798739][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 222.852324][T10356] macsec1: entered promiscuous mode [ 223.155242][T10368] netlink: 'syz.1.1116': attribute type 21 has an invalid length. [ 223.164427][T10373] netlink: 'syz.1.1116': attribute type 21 has an invalid length. [ 223.172550][T10373] netlink: 'syz.1.1116': attribute type 6 has an invalid length. [ 223.180296][T10373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1116'. [ 223.254267][T10368] netlink: 'syz.1.1116': attribute type 6 has an invalid length. [ 223.283746][T10368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1116'. [ 223.792443][T10387] netlink: 'syz.1.1121': attribute type 9 has an invalid length. [ 223.837123][T10387] netlink: 'syz.1.1121': attribute type 11 has an invalid length. [ 223.849660][T10387] netlink: 'syz.1.1121': attribute type 12 has an invalid length. [ 223.885875][T10380] lo speed is unknown, defaulting to 1000 [ 223.922276][ T946] tipc: Node number set to 594572488 [ 224.025782][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.039506][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.048435][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.063021][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.081890][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.459171][T10408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 224.566587][T10380] lo speed is unknown, defaulting to 1000 [ 224.767891][T10395] lo speed is unknown, defaulting to 1000 [ 224.866304][T10427] bridge_slave_1: left allmulticast mode [ 224.887240][T10427] bridge_slave_1: left promiscuous mode [ 224.909208][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.014277][T10427] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 225.058990][T10435] Cannot find del_set index 2 as target [ 225.190339][T10395] lo speed is unknown, defaulting to 1000 [ 225.330266][T10446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.972759][T10395] chnl_net:caif_netlink_parms(): no params data found [ 226.170624][ T52] Bluetooth: hci3: command tx timeout [ 226.495471][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.503162][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.510693][T10395] bridge_slave_0: entered allmulticast mode [ 226.519030][T10395] bridge_slave_0: entered promiscuous mode [ 226.528897][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.546801][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.561556][T10395] bridge_slave_1: entered allmulticast mode [ 226.584829][T10395] bridge_slave_1: entered promiscuous mode [ 226.671876][T10395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.696123][T10395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.759446][T10395] team0: Port device team_slave_0 added [ 226.803640][T10395] team0: Port device team_slave_1 added [ 226.872800][T10395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.879994][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.948513][T10395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.975152][T10395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.982309][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.034756][T10395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.145891][T10515] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 227.231962][T10395] hsr_slave_0: entered promiscuous mode [ 227.249496][T10395] hsr_slave_1: entered promiscuous mode [ 227.257310][T10395] debugfs: 'hsr0' already exists in 'hsr' [ 227.264187][T10395] Cannot create hsr debugfs directory [ 227.803657][T10544] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 227.811411][T10395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.829057][T10395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.833168][T10544] netlink: 'syz.0.1156': attribute type 11 has an invalid length. [ 227.859989][T10544] __nla_validate_parse: 5 callbacks suppressed [ 227.860009][T10544] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1156'. [ 227.877607][T10544] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 227.894974][T10395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.934837][T10395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.116681][T10565] netlink: 'syz.1.1163': attribute type 64 has an invalid length. [ 228.152766][T10565] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1163'. [ 228.167897][T10562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1162'. [ 228.251076][ T52] Bluetooth: hci3: command tx timeout [ 228.258096][T10562] ip6tnl2: entered allmulticast mode [ 228.284074][T10572] netem: change failed [ 228.333945][T10578] netlink: 480 bytes leftover after parsing attributes in process `syz.1.1166'. [ 228.345350][T10578] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1166'. [ 228.374842][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.417578][T10580] nbd: must specify at least one socket [ 228.442541][T10395] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.468965][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.476281][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.522300][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.529537][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.844593][T10567] lo speed is unknown, defaulting to 1000 [ 229.257437][T10395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.344105][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 229.394170][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 229.476203][T10567] lo speed is unknown, defaulting to 1000 [ 229.944337][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1175'. [ 229.947525][T10624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1176'. [ 230.137567][T10395] veth0_vlan: entered promiscuous mode [ 230.198893][T10395] veth1_vlan: entered promiscuous mode [ 230.339656][ T52] Bluetooth: hci3: command tx timeout [ 230.401858][T10395] veth0_macvtap: entered promiscuous mode [ 230.444394][T10395] veth1_macvtap: entered promiscuous mode [ 230.473804][T10645] lo: entered promiscuous mode [ 230.479345][T10645] tunl0: entered promiscuous mode [ 230.492077][T10645] gre0: entered promiscuous mode [ 230.498441][T10645] gretap0: entered promiscuous mode [ 230.513249][T10645] erspan0: entered promiscuous mode [ 230.519027][T10645] ip_vti0: entered promiscuous mode [ 230.526275][T10645] ip6_vti0: entered promiscuous mode [ 230.534442][T10645] sit0: entered promiscuous mode [ 230.540197][T10645] ip6tnl0: entered promiscuous mode [ 230.544664][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 230.548057][T10645] ip6gre0: entered promiscuous mode [ 230.561165][T10645] syz_tun: entered promiscuous mode [ 230.567065][T10645] ip6gretap0: entered promiscuous mode [ 230.573774][T10645] bridge0: entered promiscuous mode [ 230.580126][T10645] vcan0: entered promiscuous mode [ 230.586318][T10645] bond0: entered promiscuous mode [ 230.592584][T10645] `: entered promiscuous mode [ 230.597986][T10645] dummy0: entered promiscuous mode [ 230.604017][T10645] nlmon0: entered promiscuous mode [ 230.610023][T10645] caif0: entered promiscuous mode [ 230.630953][T10645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.679436][T10649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.689670][T10395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.731412][T10649] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 230.752433][T10395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.784432][ T3960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.794184][ T3960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.823177][ T3960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.833092][ T3960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.966727][ T6212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.985458][ T6212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.047090][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.080447][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.239503][T10673] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 231.567275][T10690] netlink: 'syz.1.1194': attribute type 7 has an invalid length. [ 231.763843][T10700] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 232.287312][T10692] lo speed is unknown, defaulting to 1000 [ 232.411351][ T52] Bluetooth: hci3: command tx timeout [ 232.929848][T10746] __nla_validate_parse: 9 callbacks suppressed [ 232.929869][T10746] netlink: 16412 bytes leftover after parsing attributes in process `syz.0.1206'. [ 233.262965][T10693] lo speed is unknown, defaulting to 1000 [ 233.280262][T10692] lo speed is unknown, defaulting to 1000 [ 233.285396][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 233.952800][T10693] lo speed is unknown, defaulting to 1000 [ 234.161018][T10785] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 234.170717][T10785] team0: Port device batadv1 added [ 234.238555][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 234.445774][T10805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.624698][T10810] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 234.893474][T10809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.948778][T10810] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 234.956966][T10819] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1229'. [ 235.088528][T10795] lo speed is unknown, defaulting to 1000 [ 235.323940][T10831] netlink: 'syz.4.1233': attribute type 5 has an invalid length. [ 235.342724][T10833] netlink: 'syz.4.1233': attribute type 5 has an invalid length. [ 235.565106][T10795] lo speed is unknown, defaulting to 1000 [ 235.900594][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1240'. [ 235.909765][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1240'. [ 236.072770][T10834] lo speed is unknown, defaulting to 1000 [ 236.329821][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1242'. [ 236.423987][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 236.736836][T10834] lo speed is unknown, defaulting to 1000 [ 236.872077][T10852] lo speed is unknown, defaulting to 1000 [ 236.926262][T10881] netpci0: tun_chr_ioctl cmd 1074025677 [ 236.932632][T10881] netpci0: linktype set to 6 [ 237.686109][T10852] lo speed is unknown, defaulting to 1000 [ 237.882103][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1254'. [ 237.900548][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1254'. [ 237.956702][T10913] batman_adv: batadv0: Adding interface: vlan2 [ 237.971583][T10913] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.113054][T10913] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 238.125662][T10902] lo speed is unknown, defaulting to 1000 [ 238.134559][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.157022][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.243230][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.319585][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.342530][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.358429][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.452239][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.485428][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.505001][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.552346][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 238.573819][T10913] syz_tun: entered promiscuous mode [ 238.600327][T10913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.611920][T10913] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.680573][T10913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.702229][ T5937] lo speed is unknown, defaulting to 1000 [ 238.708172][ T5937] syz2: Port: 1 Link ACTIVE [ 238.870965][T10902] lo speed is unknown, defaulting to 1000 [ 238.912505][T10927] netlink: 'syz.0.1258': attribute type 13 has an invalid length. [ 239.228657][ T3533] wlan1: Trigger new scan to find an IBSS to join [ 239.964526][T10939] pim6reg1: entered promiscuous mode [ 239.969899][T10939] pim6reg1: entered allmulticast mode [ 240.011150][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.402778][T10934] lo speed is unknown, defaulting to 1000 [ 240.587917][T10956] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 240.772121][T10934] lo speed is unknown, defaulting to 1000 [ 240.773269][T10927] lo speed is unknown, defaulting to 1000 [ 240.949616][T10927] lo speed is unknown, defaulting to 1000 [ 242.171334][ T3533] wlan1: Trigger new scan to find an IBSS to join [ 242.617048][T10960] lo speed is unknown, defaulting to 1000 [ 243.072656][ T80] wlan1: Creating new IBSS network, BSSID 86:78:4e:6b:ef:c3 [ 243.177427][T10997] __nla_validate_parse: 11 callbacks suppressed [ 243.177446][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 243.193215][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 243.202459][T10997] netlink: 'syz.0.1275': attribute type 6 has an invalid length. [ 243.989966][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 244.688819][T11023] netlink: 'syz.5.1279': attribute type 13 has an invalid length. [ 244.896383][T10960] lo speed is unknown, defaulting to 1000 [ 244.902840][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 244.913001][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 244.932118][T10997] netlink: 'syz.0.1275': attribute type 6 has an invalid length. [ 245.013836][T11030] openvswitch: netlink: Missing key (keys=40, expected=80) [ 245.047711][T11029] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 245.571874][ T5999] syzkaller0: tun_net_xmit 76 [ 245.582451][ T5999] syzkaller0: tun_net_xmit 48 [ 245.600729][ T5937] syzkaller0: tun_net_xmit 76 [ 245.643866][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1286'. [ 245.653690][T11059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1286'. [ 245.671400][ T5937] syzkaller0: tun_net_xmit 76 [ 245.698301][T11017] lo speed is unknown, defaulting to 1000 [ 245.720721][ T1225] syzkaller0: tun_net_xmit 76 [ 247.319656][T11017] lo speed is unknown, defaulting to 1000 [ 247.522497][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 247.562332][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'. [ 247.642280][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 248.076260][T11075] lo speed is unknown, defaulting to 1000 [ 248.212186][T11099] xt_hashlimit: size too large, truncated to 1048576 [ 248.280993][T11102] netlink: 'syz.4.1297': attribute type 2 has an invalid length. [ 248.304239][T11100] –: renamed from veth1_to_team [ 248.621645][T11075] lo speed is unknown, defaulting to 1000 [ 249.068426][T11130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.192462][T11103] lo speed is unknown, defaulting to 1000 [ 250.013471][T11156] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.057638][T11156] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.079279][T11159] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 250.157293][T11103] lo speed is unknown, defaulting to 1000 [ 250.432995][T11156] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.475732][T11156] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.627952][T11156] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.651828][T11156] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.695464][T11172] __nla_validate_parse: 3 callbacks suppressed [ 250.695484][T11172] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1314'. [ 250.772575][T11156] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.811353][T11156] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.850124][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 250.947986][T11178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1316'. [ 250.978981][T11178] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1316'. [ 251.015705][T11175] ip6gre1: entered promiscuous mode [ 251.181345][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.224710][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.244086][T11187] netlink: 'syz.5.1318': attribute type 39 has an invalid length. [ 251.484109][ T7240] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.493678][ T7240] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.554679][ T7240] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.588771][ T7240] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.671089][ T7249] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.696388][ T7249] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.856363][T11178] lo speed is unknown, defaulting to 1000 [ 252.202223][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 252.221475][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 252.292148][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 252.302106][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 252.322676][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 252.447179][T11178] lo speed is unknown, defaulting to 1000 [ 252.454121][T11188] lo speed is unknown, defaulting to 1000 [ 252.973755][T11240] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 253.135338][T11188] lo speed is unknown, defaulting to 1000 [ 253.152435][T11230] lo speed is unknown, defaulting to 1000 [ 253.498026][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 253.673253][T11249] veth0_to_bond: left allmulticast mode [ 253.695315][T11249] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 253.712887][T11249] erspan1: left allmulticast mode [ 253.725616][T11249] bridge1: left allmulticast mode [ 253.746251][T11249] bridge2: left allmulticast mode [ 253.780568][T11249] bridge6: left promiscuous mode [ 253.785618][T11249] bridge6: left allmulticast mode [ 253.814676][T11249] ip6gre1: left promiscuous mode [ 253.836378][T11230] lo speed is unknown, defaulting to 1000 [ 254.484966][T11268] Cannot find del_set index 1 as target [ 255.325511][T11294] netlink: 'syz.5.1343': attribute type 1 has an invalid length. [ 255.740297][T11308] __nla_validate_parse: 3 callbacks suppressed [ 255.740318][T11308] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1347'. [ 255.861153][T11309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1347'. [ 256.030951][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1348'. [ 256.203746][T11320] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 256.578595][T11335] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1354'. [ 256.830029][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 257.791445][T11343] lo speed is unknown, defaulting to 1000 [ 258.301906][T11343] lo speed is unknown, defaulting to 1000 [ 258.496197][T11382] xt_TCPMSS: Only works on TCP SYN packets [ 258.603563][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1369'. [ 258.674735][T11390] netlink: 'syz.5.1369': attribute type 1 has an invalid length. [ 258.701137][T11390] netlink: 'syz.5.1369': attribute type 3 has an invalid length. [ 258.736717][T11390] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1369'. [ 258.851501][T11402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1372'. [ 258.916820][T11402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1372'. [ 258.950267][T11404] xt_connbytes: Forcing CT accounting to be enabled [ 259.050564][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 259.162498][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 259.357547][T11421] netlink: 'syz.5.1377': attribute type 13 has an invalid length. [ 259.367244][T11421] netlink: 'syz.5.1377': attribute type 17 has an invalid length. [ 259.651835][T11421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.713582][T11429] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.213558][T11455] syzkaller0: entered promiscuous mode [ 260.219103][T11455] syzkaller0: entered allmulticast mode [ 260.292196][T11455] netem: change failed [ 260.304777][T11455] tipc: Started in network mode [ 260.309704][T11455] tipc: Node identity 12a6c2e73c17, cluster identity 4711 [ 260.346860][T11455] tipc: Enabled bearer , priority 0 [ 260.375457][T11455] tipc: Resetting bearer [ 260.392789][T11454] tipc: Resetting bearer [ 260.414619][T11454] tipc: Disabling bearer [ 260.561276][T11467] sit1: entered promiscuous mode [ 260.652055][T11442] lo speed is unknown, defaulting to 1000 [ 261.052872][T11492] sctp: [Deprecated]: syz.0.1396 (pid 11492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.052872][T11492] Use struct sctp_sack_info instead [ 261.137165][T11492] netlink: 'syz.0.1396': attribute type 23 has an invalid length. [ 261.254420][T11501] dvmrp0: entered allmulticast mode [ 261.270494][T11442] lo speed is unknown, defaulting to 1000 [ 261.516182][T11507] netlink: 'syz.4.1400': attribute type 21 has an invalid length. [ 261.532818][T11507] netlink: 'syz.4.1400': attribute type 22 has an invalid length. [ 261.546875][T11507] netlink: 'syz.4.1400': attribute type 23 has an invalid length. [ 261.557444][T11507] __nla_validate_parse: 4 callbacks suppressed [ 261.557463][T11507] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1400'. [ 261.650785][ T1225] IPVS: starting estimator thread 0... [ 261.750797][T11512] IPVS: using max 28 ests per chain, 67200 per kthread [ 261.957002][T11525] x_tables: duplicate underflow at hook 1 [ 261.982034][T11525] 8021q: VLANs not supported on wg0 [ 262.130159][T11527] netlink: 'syz.0.1406': attribute type 6 has an invalid length. [ 262.240251][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1407'. [ 262.311048][T11534] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1407'. [ 262.481630][T11532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.505599][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1407'. [ 262.716202][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1410'. [ 262.749721][T11548] syzkaller0: entered promiscuous mode [ 262.767093][T11548] syzkaller0: entered allmulticast mode [ 262.913927][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 262.939561][T11553] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1411'. [ 263.234671][T11541] lo speed is unknown, defaulting to 1000 [ 263.713830][T11541] lo speed is unknown, defaulting to 1000 [ 263.715479][T11550] lo speed is unknown, defaulting to 1000 [ 263.822910][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1416'. [ 263.995275][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 264.164621][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1417'. [ 264.405043][T11576] lo speed is unknown, defaulting to 1000 [ 264.545239][T11576] lo speed is unknown, defaulting to 1000 [ 264.545258][T11536] lo speed is unknown, defaulting to 1000 [ 264.570073][T11550] lo speed is unknown, defaulting to 1000 [ 264.968521][T11536] lo speed is unknown, defaulting to 1000 [ 265.954599][T11600] syzkaller0: entered promiscuous mode [ 265.960157][T11600] syzkaller0: entered allmulticast mode [ 267.876981][T11672] can: request_module (can-proto-0) failed. [ 267.878635][T11676] __nla_validate_parse: 1 callbacks suppressed [ 267.878652][T11676] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1442'. [ 267.908454][ T80] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 268.449076][T11704] netlink: 'syz.1.1448': attribute type 1 has an invalid length. [ 268.529444][T11707] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1450'. [ 268.538895][T11707] openvswitch: netlink: Flow key attr not present in new flow. [ 268.630137][T11702] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1448'. [ 268.818248][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1452'. [ 269.076482][T11697] lo speed is unknown, defaulting to 1000 [ 269.169867][T11738] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 269.321533][T11738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1460'. [ 269.335673][T11741] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 269.374405][T11741] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 269.449070][T11738] 8021q: adding VLAN 0 to HW filter on device bond10 [ 269.487241][T11745] macvlan2: entered promiscuous mode [ 269.494527][T11745] macvlan2: entered allmulticast mode [ 269.501521][T11745] bond10: entered promiscuous mode [ 269.507698][T11745] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.522653][T11745] bond10: left promiscuous mode [ 269.567190][T11697] lo speed is unknown, defaulting to 1000 [ 269.858568][T11752] sctp: [Deprecated]: syz.1.1462 (pid 11752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.858568][T11752] Use struct sctp_sack_info instead [ 270.152783][T11769] syzkaller1: entered promiscuous mode [ 270.153002][T11770] netlink: 'syz.0.1467': attribute type 10 has an invalid length. [ 270.191703][T11769] syzkaller1: entered allmulticast mode [ 270.212526][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1467'. [ 270.258878][T11770] team0: Device veth0_macvtap failed to register rx_handler [ 270.400891][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 270.453931][T11790] netlink: 'syz.1.1469': attribute type 29 has an invalid length. [ 270.459348][ T3852] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 270.480741][T11790] netlink: 'syz.1.1469': attribute type 29 has an invalid length. [ 270.489992][T11790] netlink: 'syz.1.1469': attribute type 29 has an invalid length. [ 270.525789][T11777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.022283][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 271.062125][T11811] netlink: 'syz.5.1475': attribute type 21 has an invalid length. [ 271.118932][T11811] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1475'. [ 271.148510][T11811] netlink: 'syz.5.1475': attribute type 1 has an invalid length. [ 271.209484][T11811] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1475'. [ 271.235611][T11811] netlink: 'syz.5.1475': attribute type 21 has an invalid length. [ 271.496083][T11833] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 271.546076][T11829] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 271.743483][T11842] sit0: entered promiscuous mode [ 272.664154][ T30] audit: type=1804 audit(1768813501.774:2): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1500" name="/newroot/41/cgroup.controllers" dev="tmpfs" ino=225 res=1 errno=0 [ 272.706111][ T30] audit: type=1800 audit(1768813501.774:3): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1500" name="cgroup.controllers" dev="tmpfs" ino=225 res=0 errno=0 [ 272.771282][T11900] IPVS: length: 24 != 2808 [ 272.790166][ T30] audit: type=1800 audit(1768813501.774:4): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1500" name="cgroup.controllers" dev="tmpfs" ino=225 res=0 errno=0 [ 273.236994][T11925] __nla_validate_parse: 5 callbacks suppressed [ 273.237015][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1510'. [ 273.347412][T11925] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1510'. [ 273.375336][T11925] tipc: Enabled bearer , priority 0 [ 273.449681][T11932] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1512'. [ 273.476775][T11925] syzkaller0: entered promiscuous mode [ 273.504165][T11925] syzkaller0: entered allmulticast mode [ 273.513638][T11925] tipc: Resetting bearer [ 273.619732][ T3852] tipc: Resetting bearer [ 273.632620][T11924] tipc: Resetting bearer [ 273.709047][T11939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1515'. [ 273.723925][T11939] netlink: 428 bytes leftover after parsing attributes in process `syz.5.1515'. [ 273.776333][T11940] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 274.376279][T11958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1519'. [ 275.423445][T11924] tipc: Disabling bearer [ 275.435353][T11939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1515'. [ 275.450274][T11956] tipc: Enabling of bearer rejected, failed to enable media [ 275.700580][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1523'. [ 275.861518][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 275.946675][ T3852] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.970914][ T3852] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.004477][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1530'. [ 276.020627][ T3852] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.029541][ T3852] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.119847][T11944] lo speed is unknown, defaulting to 1000 [ 276.387379][T12014] ipip0: entered promiscuous mode [ 276.393684][T12014] ipip0: entered allmulticast mode [ 276.579509][T11944] lo speed is unknown, defaulting to 1000 [ 277.364761][T12046] delete_channel: no stack [ 277.664561][T12055] validate_nla: 4 callbacks suppressed [ 277.664576][T12057] netlink: 'syz.5.1543': attribute type 1 has an invalid length. [ 277.664584][T12055] netlink: 'syz.5.1543': attribute type 3 has an invalid length. [ 277.787269][T12066] netlink: 'syz.1.1545': attribute type 8 has an invalid length. [ 278.173474][T12082] bridge0: port 1(erspan0) entered blocking state [ 278.181023][T12082] bridge0: port 1(erspan0) entered disabled state [ 278.188029][T12082] erspan0: entered allmulticast mode [ 278.222317][T12082] bridge0: port 1(erspan0) entered blocking state [ 278.229191][T12082] bridge0: port 1(erspan0) entered listening state [ 278.239694][T12083] erspan0: left allmulticast mode [ 278.246458][T12083] bridge0: port 1(erspan0) entered disabled state [ 278.557116][T12107] netlink: 'syz.4.1555': attribute type 10 has an invalid length. [ 278.696137][T12107] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 278.835762][T12122] __nla_validate_parse: 7 callbacks suppressed [ 278.835783][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 279.088050][T12141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.225311][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 279.242959][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 279.271120][T12150] sctp: [Deprecated]: syz.0.1567 (pid 12150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.271120][T12150] Use struct sctp_sack_info instead [ 279.272116][T12121] lo speed is unknown, defaulting to 1000 [ 279.628180][T12121] lo speed is unknown, defaulting to 1000 [ 279.756270][T12164] netlink: 'syz.4.1570': attribute type 6 has an invalid length. [ 280.303317][T12165] lo speed is unknown, defaulting to 1000 [ 280.362084][T12181] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 280.386596][T12181] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 280.494991][T12184] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 280.522987][T12184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.849879][T12165] lo speed is unknown, defaulting to 1000 [ 281.079221][T12198] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.1580'. [ 281.167119][T12194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.219260][T12194] bond0: (slave rose0): Enslaving as an active interface with an up link [ 281.343136][T12201] dvmrp0: left allmulticast mode [ 281.387474][T12209] 8021q: VLANs not supported on ip6tnl0 [ 281.428318][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1582'. [ 281.876510][T12209] lo speed is unknown, defaulting to 1000 [ 282.352665][T12209] lo speed is unknown, defaulting to 1000 [ 282.530764][T12239] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 282.614114][T12243] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1591'. [ 282.642194][T12239] bond5: entered promiscuous mode [ 282.647807][T12239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.651958][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'. [ 282.671380][T12247] bond5: entered allmulticast mode [ 282.918652][T12239] bond5: (slave bridge5): making interface the new active one [ 282.930693][T12239] bridge5: entered promiscuous mode [ 282.938499][T12239] bridge5: entered allmulticast mode [ 282.961189][T12239] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 282.970636][T12224] lo speed is unknown, defaulting to 1000 [ 283.149061][T12258] tipc: Trying to set illegal importance in message [ 283.316731][T12224] lo speed is unknown, defaulting to 1000 [ 283.440204][T12262] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1598'. [ 283.486843][T12262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1598'. [ 284.286612][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'. [ 284.685591][T12285] veth4: entered allmulticast mode [ 284.829487][T12292] netlink: 'syz.4.1609': attribute type 1 has an invalid length. [ 284.916248][T12292] bond6: entered promiscuous mode [ 284.921995][T12292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.929517][T12301] netlink: 1100 bytes leftover after parsing attributes in process `syz.5.1611'. [ 284.975557][T12274] lo speed is unknown, defaulting to 1000 [ 285.151693][T12306] block nbd0: shutting down sockets [ 285.306322][T12274] lo speed is unknown, defaulting to 1000 [ 285.800000][T12322] netlink: 'syz.0.1617': attribute type 2 has an invalid length. [ 286.243449][T12330] tc_dump_action: action bad kind [ 286.540626][T12345] netlink: 'syz.5.1625': attribute type 6 has an invalid length. [ 286.548548][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1625'. [ 286.558169][T12345] netlink: 'syz.5.1625': attribute type 6 has an invalid length. [ 286.814779][T12355] team_slave_1: Caught tx_queue_len zero misconfig [ 287.179463][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1629'. [ 287.271677][T12363] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 287.279469][T12363] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1630'. [ 287.577499][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1631'. [ 287.804202][T12358] lo speed is unknown, defaulting to 1000 [ 287.917273][T12382] Bluetooth: MGMT ver 1.23 [ 288.009182][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1633'. [ 288.594612][T12358] lo speed is unknown, defaulting to 1000 [ 288.724659][T12386] lo speed is unknown, defaulting to 1000 [ 289.085149][T12410] sock: sock_timestamping_bind_phc: sock not bind to device [ 289.101128][T12386] lo speed is unknown, defaulting to 1000 [ 289.256469][T12412] netlink: 'syz.1.1640': attribute type 11 has an invalid length. [ 289.619174][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1642'. [ 289.831251][T12426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1644'. [ 290.116903][T12434] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1647'. [ 290.157888][T12434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1647'. [ 290.190634][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1647'. [ 290.468459][T12445] tipc: Enabled bearer , priority 0 [ 290.476442][T12445] syzkaller0: entered promiscuous mode [ 290.482242][T12445] syzkaller0: entered allmulticast mode [ 290.581222][T12445] tipc: Resetting bearer [ 290.604990][T12444] tipc: Resetting bearer [ 290.641936][T12444] tipc: Disabling bearer [ 290.665861][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 290.907671][T12446] lo speed is unknown, defaulting to 1000 [ 291.121741][T12466] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 291.409983][T12446] lo speed is unknown, defaulting to 1000 [ 291.410488][T12451] lo speed is unknown, defaulting to 1000 [ 291.737504][T12480] syzkaller0: entered promiscuous mode [ 291.743439][T12480] syzkaller0: entered allmulticast mode [ 291.942437][T12451] lo speed is unknown, defaulting to 1000 [ 291.959525][T12464] lo speed is unknown, defaulting to 1000 [ 292.331415][T12492] syzkaller0: entered promiscuous mode [ 292.336960][T12492] syzkaller0: entered allmulticast mode [ 292.371666][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'. [ 292.384986][T12495] Bluetooth: MGMT ver 1.23 [ 292.467661][T12464] lo speed is unknown, defaulting to 1000 [ 292.966979][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1665'. [ 293.945569][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 294.442154][T12539] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.453437][T12539] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.561512][T12539] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.590584][T12539] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.717190][T12539] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.740496][T12539] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.829864][T12539] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.842560][T12539] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.907688][T12553] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 295.033093][T12559] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 295.110700][T12559] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 295.140016][T12559] bond6: (slave xfrm1): making interface the new active one [ 295.161724][T12559] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 295.256937][ T5999] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.290061][ T5999] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.345942][T12566] netlink: 'syz.3.1682': attribute type 16 has an invalid length. [ 295.374475][T12566] netlink: 'syz.3.1682': attribute type 17 has an invalid length. [ 295.387181][ T7240] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.397089][ T7240] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.480566][T12566] 8021q: adding VLAN 0 to HW filter on device  [ 295.504255][T12566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.566544][ T7240] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.581882][ T7240] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.602179][ T7240] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.641107][ T7240] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.661727][T12575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1685'. [ 295.697006][T12575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1685'. [ 295.785003][T12586] netlink: 'syz.3.1690': attribute type 3 has an invalid length. [ 296.001217][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1694'. [ 296.218825][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 296.346785][T12627] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1698'. [ 296.415307][T12627] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1698'. [ 296.488591][T12637] bond11: option lacp_rate: invalid value (255) [ 296.497689][T12637] bond11 (unregistering): Released all slaves [ 296.563079][T12641] IPv6: addrconf: prefix option has invalid lifetime [ 296.612061][T12641] bond4: option xmit_hash_policy: invalid value (10) [ 296.639750][T12641] bond4 (unregistering): Released all slaves [ 296.712558][T12646] netlink: 'syz.1.1703': attribute type 7 has an invalid length. [ 296.721777][T12644] syzkaller1: entered promiscuous mode [ 296.727796][T12644] syzkaller1: entered allmulticast mode [ 297.205035][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 297.218109][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 297.259247][T12672] ipt_REJECT: ECHOREPLY no longer supported. [ 297.264364][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1709'. [ 297.296393][T12677] netlink: 'syz.5.1709': attribute type 5 has an invalid length. [ 297.313287][T12677] netlink: 'syz.5.1709': attribute type 8 has an invalid length. [ 297.334626][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1709'. [ 297.368028][T12677] geneve2: entered promiscuous mode [ 297.373756][T12677] geneve2: entered allmulticast mode [ 297.381264][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 297.410827][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 297.439728][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 297.473013][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 297.650178][T12692] netlink: 'syz.5.1712': attribute type 4 has an invalid length. [ 297.661847][T12667] lo speed is unknown, defaulting to 1000 [ 297.811080][T12692] pim6reg1: entered allmulticast mode [ 298.220150][T12667] lo speed is unknown, defaulting to 1000 [ 298.263371][T12671] lo speed is unknown, defaulting to 1000 [ 298.594129][T12722] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.630073][T12722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.698791][T12671] lo speed is unknown, defaulting to 1000 [ 298.767804][T12722] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.814299][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.820804][T12722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.853107][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.891874][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.924503][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.951854][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.971942][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 299.021831][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 299.043054][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 299.088483][T12722] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.099766][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 299.111492][T12726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 299.143004][T12722] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.188436][T12729] netlink: 'syz.5.1720': attribute type 1 has an invalid length. [ 299.306127][T12736] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 299.342271][T12729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.382458][T12730] macvlan0: entered promiscuous mode [ 299.387844][T12730] macvlan0: entered allmulticast mode [ 299.414762][T12722] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.441720][T12722] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.477108][T12736] bond1: (slave ip6gretap1): making interface the new active one [ 299.486920][T12736] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 299.732734][ T3852] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.750902][ T3852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.800075][ T3852] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.814040][ T3852] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.851247][ T3852] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.872764][ T3852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.052629][ T153] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.065611][ T153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.302490][T12761] netlink: 'syz.0.1728': attribute type 11 has an invalid length. [ 300.481854][T12767] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 300.579848][T12746] lo speed is unknown, defaulting to 1000 [ 300.755382][T12783] netlink: 'syz.3.1734': attribute type 66 has an invalid length. [ 300.765793][T12782] netlink: 'syz.3.1734': attribute type 66 has an invalid length. [ 300.828446][T12785] __nla_validate_parse: 3 callbacks suppressed [ 300.828470][T12785] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1735'. [ 300.915318][T12746] lo speed is unknown, defaulting to 1000 [ 300.927525][T12761] rdma_rxe: rxe_newlink: failed to add lo [ 301.084055][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1738'. [ 301.103745][T12791] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1738'. [ 301.620475][T12805] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 301.629934][T12804] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 301.640505][T12805] dummy0: left promiscuous mode [ 301.673152][T12805] dummy0: entered promiscuous mode [ 301.955475][T12815] geneve2: entered promiscuous mode [ 301.956597][T12817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1747'. [ 301.963450][T12815] geneve2: entered allmulticast mode [ 301.981703][T12818] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1747'. [ 302.088301][T12825] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1749'. [ 302.090706][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.143033][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 302.152326][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 302.291894][T12834] syzkaller0: entered promiscuous mode [ 302.300697][T12834] syzkaller0: entered allmulticast mode [ 302.574974][T12846] syzkaller1: entered promiscuous mode [ 302.584239][T12846] syzkaller1: entered allmulticast mode [ 302.999193][T12829] lo speed is unknown, defaulting to 1000 [ 303.075744][T12874] vxcan3: entered promiscuous mode [ 303.199856][T12873] vxcan3: entered promiscuous mode [ 303.325258][T12882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.362031][T12829] lo speed is unknown, defaulting to 1000 [ 303.364519][T12885] netlink: 'syz.5.1763': attribute type 10 has an invalid length. [ 303.677786][T12894] Cannot find set identified by id 0 to match [ 303.775606][T12894] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1767'. [ 304.919598][T12934] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1777'. [ 305.036498][T12939] netlink: 'syz.3.1779': attribute type 11 has an invalid length. [ 305.447109][T12962] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 305.843765][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'. [ 305.922133][T12971] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1789'. [ 306.128401][T12982] x_tables: duplicate underflow at hook 2 [ 306.145156][T12984] x_tables: duplicate underflow at hook 2 [ 307.003285][T13007] syzkaller0: entered promiscuous mode [ 307.008941][T13007] syzkaller0: entered allmulticast mode [ 307.131527][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 307.273835][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 307.441880][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 307.460637][T13027] geneve1: entered promiscuous mode [ 307.529633][T13027] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 307.556050][T13027] bond7 (unregistering): Released all slaves [ 307.627816][T13033] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 307.672817][T13033] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/file1 [ 308.097826][T13048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1809'. [ 308.261565][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 308.337936][T13052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.416953][T13056] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.417337][T13058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1815'. [ 308.448385][T13056] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 308.482096][T13056] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 308.557819][T13052] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 308.618945][T13052] bond7: (slave wlan0): Enslaving as an active interface with an up link [ 308.709239][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1815'. [ 308.793476][T13082] : entered promiscuous mode [ 309.198697][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.206546][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.515623][T13077] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 309.576242][T13077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.615988][T13077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.011590][ T153] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.033601][ T153] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 310.080717][ T153] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.112339][ T153] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 310.129977][ T153] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.173647][ T153] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 310.193818][ T153] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.215730][ T153] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 310.266207][T13111] gretap1: entered promiscuous mode [ 310.321156][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1825'. [ 310.849975][T13150] netlink: 'syz.1.1832': attribute type 4 has an invalid length. [ 311.130954][T13160] block nbd0: server does not support multiple connections per device. [ 311.139758][T13160] block nbd0: shutting down sockets [ 311.479919][T13139] lo speed is unknown, defaulting to 1000 [ 311.712009][T13181] bridge0: port 1(erspan0) entered blocking state [ 311.726395][T13181] bridge0: port 1(erspan0) entered disabled state [ 311.750856][T13181] erspan0: entered allmulticast mode [ 311.764508][T13181] bridge0: port 1(erspan0) entered blocking state [ 311.771259][T13181] bridge0: port 1(erspan0) entered listening state [ 312.105953][T13194] __nla_validate_parse: 4 callbacks suppressed [ 312.105974][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 312.139377][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 312.290127][T13139] lo speed is unknown, defaulting to 1000 [ 312.328193][T13208] sit0: left promiscuous mode [ 312.355962][T13209] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20000 [ 312.368829][T13208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.617287][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1847'. [ 312.741562][T13188] lo speed is unknown, defaulting to 1000 [ 313.030236][T13188] lo speed is unknown, defaulting to 1000 [ 313.081426][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1849'. [ 313.107206][T13225] ÿÿÿÿÿÿ: renamed from vlan1 [ 313.303116][ C1] ================================================================== [ 313.311252][ C1] BUG: KASAN: slab-use-after-free in macvlan_forward_source+0x5d8/0x700 [ 313.319623][ C1] Read of size 2 at addr ffff88805711cdfc by task kworker/u8:6/153 [ 313.327620][ C1] [ 313.329978][ C1] CPU: 1 UID: 0 PID: 153 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 313.330005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.330018][ C1] Workqueue: events_unbound macvlan_process_broadcast [ 313.330051][ C1] Call Trace: [ 313.330060][ C1] [ 313.330067][ C1] dump_stack_lvl+0xe8/0x150 [ 313.330095][ C1] print_report+0xca/0x240 [ 313.330113][ C1] ? macvlan_forward_source+0x5d8/0x700 [ 313.330138][ C1] kasan_report+0x118/0x150 [ 313.330162][ C1] ? macvlan_forward_source+0x5d8/0x700 [ 313.330193][ C1] macvlan_forward_source+0x5d8/0x700 [ 313.330221][ C1] macvlan_handle_frame+0x2e2/0x12e0 [ 313.330251][ C1] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 313.330276][ C1] __netif_receive_skb_core+0x95f/0x2f90 [ 313.330298][ C1] ? __kernel_text_address+0xd/0x40 [ 313.330324][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.330357][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 313.330379][ C1] ? stack_depot_save_flags+0x33/0x810 [ 313.330404][ C1] ? process_backlog+0x247/0x1340 [ 313.330423][ C1] ? lock_acquire+0x107/0x340 [ 313.330440][ C1] ? process_backlog+0x247/0x1340 [ 313.330460][ C1] __netif_receive_skb+0x72/0x380 [ 313.330481][ C1] ? process_backlog+0x247/0x1340 [ 313.330510][ C1] process_backlog+0x54f/0x1340 [ 313.330539][ C1] __napi_poll+0xae/0x320 [ 313.330557][ C1] ? skb_defer_free_flush+0x233/0x260 [ 313.330579][ C1] net_rx_action+0x64a/0xe00 [ 313.330608][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 313.330628][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 313.330655][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 313.330683][ C1] handle_softirqs+0x22b/0x7c0 [ 313.330705][ C1] ? do_softirq+0x76/0xd0 [ 313.330727][ C1] ? netif_rx+0x79/0x90 [ 313.330750][ C1] do_softirq+0x76/0xd0 [ 313.330769][ C1] [ 313.330777][ C1] [ 313.330784][ C1] __local_bh_enable_ip+0xf8/0x130 [ 313.330805][ C1] netif_rx+0x83/0x90 [ 313.330830][ C1] macvlan_broadcast+0x373/0x630 [ 313.330862][ C1] ? macvlan_process_broadcast+0x2f6/0x660 [ 313.330891][ C1] macvlan_process_broadcast+0x457/0x660 [ 313.330919][ C1] ? lock_acquire+0x107/0x340 [ 313.330940][ C1] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 313.330976][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 313.330995][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 313.331015][ C1] process_scheduled_works+0xad1/0x1770 [ 313.331048][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.331067][ C1] ? do_raw_spin_lock+0x121/0x290 [ 313.331100][ C1] worker_thread+0x8a0/0xda0 [ 313.331127][ C1] ? __kthread_parkme+0x7b/0x200 [ 313.331153][ C1] kthread+0x711/0x8a0 [ 313.331179][ C1] ? __pfx_worker_thread+0x10/0x10 [ 313.331198][ C1] ? __pfx_kthread+0x10/0x10 [ 313.331224][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.331244][ C1] ? __pfx_kthread+0x10/0x10 [ 313.331267][ C1] ret_from_fork+0x510/0xa50 [ 313.331288][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 313.331306][ C1] ? __switch_to+0xc9e/0x1480 [ 313.331332][ C1] ? __pfx_kthread+0x10/0x10 [ 313.331356][ C1] ret_from_fork_asm+0x1a/0x30 [ 313.331389][ C1] [ 313.331397][ C1] [ 313.643918][ C1] Allocated by task 13139: [ 313.648327][ C1] kasan_save_track+0x3e/0x80 [ 313.653005][ C1] __kasan_kmalloc+0x93/0xb0 [ 313.657599][ C1] __kmalloc_cache_noprof+0x3e2/0x700 [ 313.662970][ C1] ipv6_add_dev+0x6aa/0x13a0 [ 313.667586][ C1] addrconf_notify+0x771/0x1050 [ 313.672447][ C1] notifier_call_chain+0x19d/0x3a0 [ 313.677562][ C1] register_netdevice+0x15c6/0x1a70 [ 313.682767][ C1] register_netdev+0x40/0x60 [ 313.687362][ C1] sit_init_net+0x228/0x5c0 [ 313.691867][ C1] ops_init+0x35c/0x5c0 [ 313.696021][ C1] setup_net+0x110/0x330 [ 313.700291][ C1] copy_net_ns+0x3e3/0x570 [ 313.704739][ C1] create_new_namespaces+0x3e7/0x6a0 [ 313.710049][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 313.715774][ C1] ksys_unshare+0x4c8/0x8c0 [ 313.720282][ C1] __x64_sys_unshare+0x38/0x50 [ 313.725058][ C1] do_syscall_64+0xec/0xf80 [ 313.729563][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.735480][ C1] [ 313.737811][ C1] Freed by task 13215: [ 313.741876][ C1] kasan_save_track+0x3e/0x80 [ 313.746553][ C1] kasan_save_free_info+0x46/0x50 [ 313.751581][ C1] __kasan_slab_free+0x5c/0x80 [ 313.756346][ C1] kfree+0x1c0/0x660 [ 313.760244][ C1] in6_dev_finish_destroy_rcu+0x3b/0xa0 [ 313.765879][ C1] rcu_core+0xc8e/0x1720 [ 313.770124][ C1] handle_softirqs+0x22b/0x7c0 [ 313.774886][ C1] __irq_exit_rcu+0x60/0x150 [ 313.779479][ C1] irq_exit_rcu+0x9/0x30 [ 313.783733][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 313.789369][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.795437][ C1] [ 313.797764][ C1] The buggy address belongs to the object at ffff88805711c000 [ 313.797764][ C1] which belongs to the cache kmalloc-cg-4k of size 4096 [ 313.812076][ C1] The buggy address is located 3580 bytes inside of [ 313.812076][ C1] freed 4096-byte region [ffff88805711c000, ffff88805711d000) [ 313.826052][ C1] [ 313.828378][ C1] The buggy address belongs to the physical page: [ 313.834818][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57118 [ 313.843665][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 313.852161][ C1] memcg:ffff888030ce9101 [ 313.856397][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 313.864377][ C1] page_type: f5(slab) [ 313.868358][ C1] raw: 00fff00000000040 ffff88813ffb0500 0000000000000000 dead000000000001 [ 313.876968][ C1] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888030ce9101 [ 313.885553][ C1] head: 00fff00000000040 ffff88813ffb0500 0000000000000000 dead000000000001 [ 313.894226][ C1] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888030ce9101 [ 313.902900][ C1] head: 00fff00000000003 ffffea00015c4601 00000000ffffffff 00000000ffffffff [ 313.911572][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 313.920238][ C1] page dumped because: kasan: bad access detected [ 313.926644][ C1] page_owner tracks the page as allocated [ 313.932356][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5827, tgid 5827 (syz-executor), ts 89396198142, free_ts 27691354962 [ 313.953717][ C1] post_alloc_hook+0x234/0x290 [ 313.958483][ C1] get_page_from_freelist+0x24e0/0x2580 [ 313.964039][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 313.969847][ C1] alloc_pages_mpol+0x232/0x4a0 [ 313.974701][ C1] allocate_slab+0x86/0x3b0 [ 313.979209][ C1] ___slab_alloc+0xe53/0x1820 [ 313.983890][ C1] __slab_alloc+0x65/0x100 [ 313.988307][ C1] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 313.994809][ C1] kmemdup_noprof+0x2b/0x70 [ 313.999316][ C1] __addrconf_sysctl_register+0x9e/0x4c0 [ 314.004966][ C1] addrconf_sysctl_register+0x168/0x1c0 [ 314.010520][ C1] ipv6_add_dev+0xd26/0x13a0 [ 314.015112][ C1] addrconf_notify+0x771/0x1050 [ 314.019965][ C1] notifier_call_chain+0x19d/0x3a0 [ 314.025079][ C1] register_netdevice+0x15c6/0x1a70 [ 314.030280][ C1] nsim_create+0xb3f/0x1050 [ 314.034786][ C1] page last free pid 1 tgid 1 stack trace: [ 314.040594][ C1] __free_frozen_pages+0xbc8/0xd30 [ 314.045729][ C1] free_contig_range+0x1bd/0x490 [ 314.050669][ C1] destroy_args+0x69/0x660 [ 314.055089][ C1] debug_vm_pgtable+0x38f/0x3a0 [ 314.059939][ C1] do_one_initcall+0x1f1/0x800 [ 314.064704][ C1] do_initcall_level+0x104/0x190 [ 314.069708][ C1] do_initcalls+0x59/0xa0 [ 314.074090][ C1] kernel_init_freeable+0x2a7/0x3d0 [ 314.079289][ C1] kernel_init+0x1d/0x1d0 [ 314.083621][ C1] ret_from_fork+0x510/0xa50 [ 314.088207][ C1] ret_from_fork_asm+0x1a/0x30 [ 314.092973][ C1] [ 314.095294][ C1] Memory state around the buggy address: [ 314.100919][ C1] ffff88805711cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.108982][ C1] ffff88805711cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.117038][ C1] >ffff88805711cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.125093][ C1] ^ [ 314.133069][ C1] ffff88805711ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.141139][ C1] ffff88805711ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.149199][ C1] ================================================================== [ 314.157332][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.164556][ C1] CPU: 1 UID: 0 PID: 153 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 314.173982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.184081][ C1] Workqueue: events_unbound macvlan_process_broadcast [ 314.190885][ C1] Call Trace: [ 314.194170][ C1] [ 314.197011][ C1] vpanic+0x1e0/0x670 [ 314.201016][ C1] panic+0xb9/0xc0 [ 314.204792][ C1] ? __pfx_panic+0x10/0x10 [ 314.209237][ C1] ? macvlan_forward_source+0x5d8/0x700 [ 314.214815][ C1] ? macvlan_forward_source+0x5d8/0x700 [ 314.220377][ C1] check_panic_on_warn+0x89/0xb0 [ 314.225316][ C1] ? macvlan_forward_source+0x5d8/0x700 [ 314.230862][ C1] end_report+0x6f/0x140 [ 314.235114][ C1] kasan_report+0x129/0x150 [ 314.239635][ C1] ? macvlan_forward_source+0x5d8/0x700 [ 314.245180][ C1] macvlan_forward_source+0x5d8/0x700 [ 314.250571][ C1] macvlan_handle_frame+0x2e2/0x12e0 [ 314.255857][ C1] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 314.261575][ C1] __netif_receive_skb_core+0x95f/0x2f90 [ 314.267225][ C1] ? __kernel_text_address+0xd/0x40 [ 314.272470][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 314.278724][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 314.284814][ C1] ? stack_depot_save_flags+0x33/0x810 [ 314.290294][ C1] ? process_backlog+0x247/0x1340 [ 314.295338][ C1] ? lock_acquire+0x107/0x340 [ 314.300024][ C1] ? process_backlog+0x247/0x1340 [ 314.305051][ C1] __netif_receive_skb+0x72/0x380 [ 314.310095][ C1] ? process_backlog+0x247/0x1340 [ 314.315152][ C1] process_backlog+0x54f/0x1340 [ 314.320027][ C1] __napi_poll+0xae/0x320 [ 314.324367][ C1] ? skb_defer_free_flush+0x233/0x260 [ 314.329782][ C1] net_rx_action+0x64a/0xe00 [ 314.334394][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 314.339516][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 314.344722][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 314.350030][ C1] handle_softirqs+0x22b/0x7c0 [ 314.354801][ C1] ? do_softirq+0x76/0xd0 [ 314.359135][ C1] ? netif_rx+0x79/0x90 [ 314.363306][ C1] do_softirq+0x76/0xd0 [ 314.367466][ C1] [ 314.370403][ C1] [ 314.373336][ C1] __local_bh_enable_ip+0xf8/0x130 [ 314.378450][ C1] netif_rx+0x83/0x90 [ 314.382439][ C1] macvlan_broadcast+0x373/0x630 [ 314.387393][ C1] ? macvlan_process_broadcast+0x2f6/0x660 [ 314.393228][ C1] macvlan_process_broadcast+0x457/0x660 [ 314.398874][ C1] ? lock_acquire+0x107/0x340 [ 314.403552][ C1] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 314.409720][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 314.415538][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 314.421263][ C1] process_scheduled_works+0xad1/0x1770 [ 314.426910][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.432913][ C1] ? do_raw_spin_lock+0x121/0x290 [ 314.437957][ C1] worker_thread+0x8a0/0xda0 [ 314.442551][ C1] ? __kthread_parkme+0x7b/0x200 [ 314.447503][ C1] kthread+0x711/0x8a0 [ 314.451581][ C1] ? __pfx_worker_thread+0x10/0x10 [ 314.456724][ C1] ? __pfx_kthread+0x10/0x10 [ 314.461320][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.466537][ C1] ? __pfx_kthread+0x10/0x10 [ 314.471158][ C1] ret_from_fork+0x510/0xa50 [ 314.475773][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 314.480892][ C1] ? __switch_to+0xc9e/0x1480 [ 314.485581][ C1] ? __pfx_kthread+0x10/0x10 [ 314.490174][ C1] ret_from_fork_asm+0x1a/0x30 [ 314.494958][ C1] [ 314.498517][ C1] Kernel Offset: disabled [ 314.502839][ C1] Rebooting in 86400 seconds..