last executing test programs: 1m24.813772483s ago: executing program 1 (id=4634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x4, 0x1, 'i'}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$key(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="2dd30573e5bc93bf18eac5d626fe7e5d296305e952c68aa7a9ea93e9d601b1759e085a9eae80dfea837d9f64d134f976cb81efa538d41514091cea0814f8d3e4053a0c556e22d7a483b02044465543a221e3204dd13d0786277a9674dc681396e323760753b2a71f2ab58ffa61e17e4964e57bdd281eca7dc078ee8391a5e40d6fc1cf6c6637289bd8", 0x89}, {&(0x7f0000000340)="15bc5c63b9b607ebe9c7806acf2945938ad610d2d98e3c90466b4f05f218e55d7fab9c0bf34ac82f64147787333d5ae358773c1669bc2488fd8eea5d34ce79919f", 0x41}], 0x2, &(0x7f0000000400)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x37}}], 0x30}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) socket$nl_route(0x10, 0x3, 0x0) 1m22.088823907s ago: executing program 1 (id=4639): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc19", 0x4}], 0x1}}], 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) close(r2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000001c0)=0x9) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0x39, 0x10b7, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x58b9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r9, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)='\x00j', 0x2}], 0x1}, 0x0) 1m22.019106578s ago: executing program 0 (id=4641): syz_emit_ethernet(0x115c, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "6f8ac0", 0x1126, 0x21, 0x0, @mcast1, @mcast1, {[@hopopts={0x0, 0x218, '\x00', [@generic={0x6, 0x1000, "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"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x7a, 0x9, [0x1, 0x8000000000000000, 0x8]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x8, 0x3, [0x7f, 0x540, 0x83e6, 0x6, 0x2, 0x2, 0x2, 0xc8, 0x80000000]}}, @generic={0x6, 0x38, "e2df1b0e214968a7e1c349031bb49f588cecb820641a6c612fadd4d0b6201fb657ff41fc382a56c8186d6776fb1fda5aa8b57e2bf842a8c8"}, @jumbo={0xc2, 0x4, 0x87}]}], {{0xef, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x9, 0x1, "cecfb4", 0x0, "f422eb"}, "9648768fefc710f002ca18624320e18009ed773b60108a109584c09aa4678c346eda0f3c4915bd0ddbbb16e025425321791a46b0b7f162e20f4a53f18e6326508b4dc6890c0e"}}}}}}, 0x0) 1m21.784875957s ago: executing program 0 (id=4643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20004040) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m20.850090852s ago: executing program 3 (id=4648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24000014) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8, 0x1}, 0x10) (async) bind$xdp(r6, &(0x7f0000000280)={0x2c, 0x1a, 0x0, 0x28, r6}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000000009500"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0x140}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000ced8be3007e00d4193bf"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x6}, 0x28) (async) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) syz_emit_ethernet(0xe6, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) 1m20.658259475s ago: executing program 1 (id=4649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000004e0001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r11 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r13, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc118650f5a4ebdba}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040006) 1m20.596811875s ago: executing program 2 (id=4650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0xfffe, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000001500)=""/15, 0xf}], 0xffffff1f}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = accept(r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41) r9 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000003e80)={{{@in=@initdev, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000003f80)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, &(0x7f0000004000)=0xc) r11 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r12, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3000f7ff000000000100000700000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYRES32=r12, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32], 0x30, 0x4}}], 0x1, 0x0) sendmmsg$unix(r7, &(0x7f00000040c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000000240)="59931d68a95978ea7343ac40961d1fc2b3417be92468d52ed7fe9c183f412832380085cbf92a8111a048e44459b8ac45b7f9d46a69c1b862df61513a830465265c8fb0d18753c10757902ab95da07609c4b0b4cd038d914b9d28f9fc9af0dee92c77a881fc45c8098e2a5e40ebc3ffd53c455462a6d48002536efa11a1e4", 0x7e}, {&(0x7f0000001e80)="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", 0x1000}], 0x2, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x48008}}, {{&(0x7f0000002f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002fc0)="4cc1703b7ff571f1cad7eddd524b8fa68553bc7ff0e0e593ee6a4bd963815049ffc88e0e087b4e55bb95468712de48f87d49f8da50ce145607ca11b881167d5e8a513d82440b196102b5e9dfce94e90dcf3a850b91f3258c", 0x58}], 0x1, 0x0, 0x0, 0x48400}}, {{&(0x7f0000003080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003100)="7805d8154aa8675aef699cb866d2d85a092e3fc7aa4f188257b973fedf309743bccbebada2d5cd86322ffbe818446b4c93a1fada583fadab6cfba35acffad1e8c0e913970ee883", 0x47}, {&(0x7f0000003180)="eda03b28", 0x4}, {&(0x7f00000031c0)="8d97a1c1bd996ceeb3bef3e4ab6f743eaff97f6782a7b710051f64348da55a93b324bca7e7159bba49ee5419b484addc5d7f29bcaa7379b5e061f0910e2fae3ea252680bc6032ce5053ff3214e8b9bc2c4fdb90324db97d3", 0x58}, {&(0x7f0000003240)}, {&(0x7f0000003280)="2bb0a195d5e06dc82632c374b5136315ed499f436a27203d0cb6af5a4405b7d2f3b9515d7024861086dbdc89399c2b26fc0c9e059be1bf94e1ce18f211587ec3cb7e2b5851a02d5131d6f7f057df03d93fcd986bc8f30c4b446c4de81768f2fd5623ebe9ab95e056a15e415e85fad7d9eba7dac1cbaf6b2850587fbcd2d5", 0x7e}, {&(0x7f0000003300)="acfbe804f4a188658a817aea75675ea8707c039f7f94bdb36d929309f5afe11934283218db05a73f81d6e75e896ba06516d14e271dc4f95a816f98b257ec4ab936558ebc3c42a781f1c92d6229837721ae307c3053cecd2099064452abd545e481430243361d2c35cf8f5662bbd96276d448f21a80b8613120ba922404fa7e4729f7a67aabc6ec8680a8129ad57dc68cf593ba0f2c644e9f70be02d9538ac325e2a5ec1c40fd93b2b2cef9b290c7280e72aec34f", 0xb4}], 0x6, &(0x7f0000003440)=[@rights={{0x18, 0x1, 0x1, [r5, r7]}}], 0x18, 0x91}}, {{&(0x7f0000003480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003500)="4bae4ac935", 0x5}, {&(0x7f0000003540)="6c54345ce57d9a004d6e5f8307d6058f749e7f3055b699f86881ac076da51883f671d99e3d604a3cb510", 0x2a}, {&(0x7f0000003580)="fc0c82240f73f6591e0c3d7dc0436097a81e8f4e3061c5aa935598f87635475113f46e77e3ee2f0685210331920ac8d9b1ecb246a694d00bc2a80ad46f017a3a1b3c61144c7d", 0x46}], 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000045100000000000000001000000010000002c000000000000000100000001000500", @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x20000841}}, {{&(0x7f0000003a80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003b00)="2fc25bb19694e523eb170cc91a4508b7d25e", 0x12}, {&(0x7f0000003b40)="d807a389250a4d6c84542147639e869fd0cfc643ef4ca3dc016d25f7d31b70535a2cd627ad053c4187c64889692db4e8ccaf4556c32e97f22d00acb617d2f899c3211bbafe2bda738c52930778d174a6c07d9105631a2ca51385dfb350a3d46ec6b90135ca9f9c858abc4aa330c362990e2db1bef1d3bcb9e385a504c6f3e946d8e976796423364aafa3df9787776f4814863d1f89fd90b4a21164514eaaeb648616e34960a71c42502d77fbbf6a74cd649f92bddf1010f9ea40f046d176", 0xbe}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="b5585021bfdef07290d9"], 0x20, 0x10000000}}, {{&(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003d00)="a6e48d84ee402da3f680c44ff998f202274a7354c9d1298077d13b9f1e498d27d8b860b1595759fe14216501339f15a73e0934c1f458e2ea4b95769563917b1b2e92c13b58090e6ab59de2d97321e84377762d6c36bca6ec61f26ec963e5a3aa66d10da1098856d967c8b61546f59a4cd7b462b7acedfc83824996dd9321ec6e66151b22c72352e91946a4ec89327c", 0x8f}, {&(0x7f0000003dc0)="2ad9ec7eb9e81b86066c8a1d90fcc3e7a60d97ed3e1d4df819556450998b3b3d4e087fe858181da6d09ff28259f04c8efb473b82befc25dc13c58489a2b65888c262a7f38ff8f233215db21a3af474cb23e5735e66f1b9c3", 0x58}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000004000000100000002000000500200000080c6657ad8f587", @ANYRES32=r9, @ANYRES16, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32, @ANYRES32=r13, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r2, @ANYRESDEC=r5, @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40}}], 0x6, 0x0) socket(0x2a, 0x6, 0x839) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbcdb043c800000000000400", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m20.59633478s ago: executing program 0 (id=4651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x400005}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e44afc5538a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0xa, r2, 0x7ff}, 0xc) 1m20.594017619s ago: executing program 4 (id=4652): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0xc020) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0xa09, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 1m20.379273341s ago: executing program 4 (id=4653): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x38}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x24}, 0xc) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000002c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1m20.256612423s ago: executing program 0 (id=4654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x98}}, 0x4040080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r8, 0xc0109414, &(0x7f00000022c0)={0xafd, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0d030000000000000000130000000c0009"], 0x20}}, 0x0) 1m20.117064857s ago: executing program 4 (id=4655): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000006000000040000000600000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000004742cedaf5303942c3e162c0953b0a000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, 0x0, 0xff4c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xfb5, &(0x7f0000000740)={@random="05c3000800", @remote, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "04dff7", 0xf7f, 0x2f, 0xaf7bcc0069570986, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x6f}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x24, 0x1, [0xffff], "223218600c46acd6282655ae5cfcfdf24de967b2104e6992dee50bfaaa177bed8717b930"}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x3, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x3}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x1a, 0x2, 0x0, 0x0, 0x1, 0xff}, 0x2, {0x2, 0xb, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x3648}, {0x8, 0x15, 0x3}}, {{@pci, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x95f}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x3}, {0x1, 0x15, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c0003800be2902ef7846d9fc27366b8cfb61dd4955f91b992acce6cd641f7006efee13f04b0345a"], 0x38}}, 0x0) 1m20.115562906s ago: executing program 3 (id=4656): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r4, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400"], 0x30}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040), 0x4) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3402}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000051) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r6, 0x1, 0x9, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000400)=0x97, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x8, 0x1, 0x8000, 0x0, {{0x24, 0x4, 0x1, 0x7, 0x90, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x6, 0x11, "9dff1211c088a4bddf20c15e24c25c"}, {0x5, 0xd, "287201f678e815c45f8a6b"}, {0x5, 0xe, "6297caeef7267a6e35199c9d"}]}, @timestamp_prespec={0x44, 0x44, 0xbc, 0x3, 0x0, [{@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x3}, {@private=0xa010100, 0x7}, {@private=0xa010102}, {@private=0xa010100, 0x400}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@empty, 0xf}]}]}}}}}) 1m20.041599515s ago: executing program 1 (id=4657): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x10, @void}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x6, 0xa, 0x5, 0x6, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x4, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', r7, 0x40, 0x10, 0x10000, 0x7, {{0xc, 0x4, 0x1, 0x9, 0x30, 0x66, 0x0, 0x73, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x63, [@local, @multicast1, @loopback, @remote]}, @timestamp={0x44, 0x8, 0xe, 0x0, 0xc, [0x7fffffff]}]}}}}}) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 1m19.79044146s ago: executing program 2 (id=4658): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@ipv4_delrule={0x30, 0x21, 0x20, 0x70bd25, 0x25dfdbfc, {0x2, 0x14, 0x14, 0xd3, 0x3, 0x0, 0x0, 0x2, 0xd}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_FLOW={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x200}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x24000000) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.624632342s ago: executing program 2 (id=4659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x57, 0x0, &(0x7f00000006c0)) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1m19.578859385s ago: executing program 3 (id=4660): syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x48, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x3}, @mss={0x2, 0x4, 0xfe}, @sack={0x5, 0x12, [0x4800, 0x62, 0x5, 0x9]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x20000800) 1m19.513352871s ago: executing program 4 (id=4661): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000000c0)=""/153, &(0x7f0000000080)=0x99) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6b}}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)=0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000240)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0)=0x0) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r13, &(0x7f0000000540)=""/22, 0x16, 0x20, &(0x7f0000000640)={0xa, 0x4e21, 0x100, @mcast1, 0x5}, 0x1c) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) 1m19.44169314s ago: executing program 1 (id=4662): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@local, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1m19.385039183s ago: executing program 0 (id=4663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = socket(0x2a, 0x2, 0x0) sendto$x25(r1, 0x0, 0x0, 0xc000, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x200, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0x2}, {0xffe0, 0xe}, {0xa, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x200}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xc77f}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}, @TCA_STAB={0x17c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0xe0, 0x0, 0x9, 0x2, 0x7fff, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x6, 0x400, 0x4, 0x249, 0x8]}}, {{0x1c, 0x1, {0x5, 0x7, 0x5, 0x7fff, 0x0, 0x7f, 0x2, 0x2}}, {0x8, 0x2, [0x1ff, 0xfff]}}, {{0x1c, 0x1, {0x5, 0xc, 0x8001, 0x1, 0x2, 0x2, 0x9, 0x6}}, {0x10, 0x2, [0xd980, 0x200, 0x5, 0x9415, 0x7f, 0x5]}}, {{0x1c, 0x1, {0x3, 0x3, 0x7ff, 0x5d, 0x0, 0x3, 0x8, 0x5}}, {0xe, 0x2, [0x9, 0xe71d, 0x6, 0x4, 0xfff]}}, {{0x1c, 0x1, {0x7, 0x9, 0x6, 0x3, 0x1, 0x7ff, 0x2, 0x5}}, {0xe, 0x2, [0x8, 0x4, 0x0, 0x7, 0x9]}}, {{0x1c, 0x1, {0x0, 0x1, 0x7ff, 0x1, 0x1, 0xed6, 0x6, 0x4}}, {0xc, 0x2, [0x3, 0x7, 0x8, 0x5]}}, {{0x1c, 0x1, {0x5, 0x7, 0x800, 0x8000, 0x3, 0x9, 0x2, 0x3}}, {0xa, 0x2, [0x400, 0x3, 0x6]}}, {{0x1c, 0x1, {0x6a, 0x8, 0x7fff, 0x400, 0x2, 0x4, 0x80000000, 0x3}}, {0xa, 0x2, [0x81, 0x2, 0x9]}}, {{0x1c, 0x1, {0xff, 0x0, 0x1, 0x9, 0x0, 0x200000, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x9, 0x0, 0x0, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x200}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.344527661s ago: executing program 2 (id=4664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911175000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000004000611050000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x8}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="08e0211db1d69fa4593039c5ad01", 0xe}, {&(0x7f00000001c0)="2df1", 0x2}], 0x2, 0x0, 0x0, 0x804}], 0x1, 0x4048091) write(r4, &(0x7f0000000100)='65', 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1d32, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0xd, 0x78, &(0x7f0000000240)=""/120, 0x41100, 0x23, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x1000}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r7, r8], &(0x7f0000000400)=[{0x2, 0x4, 0x2, 0xa}, {0x1, 0x1, 0x3, 0x9}, {0x5, 0x4, 0xa, 0xc}, {0x0, 0x2, 0x6, 0x5}, {0x1, 0x2, 0xe}, {0x2, 0x5, 0xd, 0x8}, {0x3, 0x5, 0x10, 0x19}, {0x3, 0x5, 0x2, 0x3}, {0x5, 0x5, 0x8, 0x3}], 0x10, 0xe7}, 0x94) 1m19.287467755s ago: executing program 3 (id=4665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x0, 0x82011, r2, 0xead32000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0xffffffffffffff18, {0x2, 0x0, @local}}, 0x24) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0xfffffffffffffd19}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000380)={0x4, 0x0, 0x8, 0x9d}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x150bd2c, 0x4, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0x0, 0x9}, {0xffe0, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xbd}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4005) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000801000000000000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r12}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r12, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0x1}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1m19.161130159s ago: executing program 4 (id=4666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async, rerun: 64) r3 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000002580)={&(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000100)="5072c6bdda34ac37862756c7f8e4c2dfd7676cb562cf77780f3e8f9e435adc25aff72602601e22caf904922f3d67bb47ddd84c6a3898f682307c75014c57db59616e7ef0cd61dd6a2b3d03a95ab2efe63b51725e91bc77e4339d6e84484f40c496e6e01daa150393435f785882a991ffb0c529dcef7f47e4bf50f1da4b038fe6e24d27f46b86", 0x86}, {&(0x7f00000001c0)="fc90cbe9f9c1425c61568b55acb7d2fb6a96d5894d936f156a46df17cee51698b645e3e28986f9f82156dbdd8a787c1950c9c6720eb25f75c89e68b512da4f69c008e523ec8d02e0043280ba367bed08b7988b597e499dbd783813bd7c3eec936b2acaa6c8ba41e62ff48bae21d84112fe8a38c4c5203f9fafd2e66b38", 0x7d}, {&(0x7f0000000240)="33a9156dc035aa8848405759c1d5d1f6fbf881de", 0x14}, {&(0x7f0000000280)="d1033f10d03c88d873687e49dc90d68ddcee4b6e190f851b7712cbd7005dfbbbfc84c204d531b58697c8e470e52ef24ba3e064a1d3d0f23fb4b625ad9186ba4265312d3498183dd87f7588b92435261b96a25ab44df6a7e19c20db813e277843f9e8f213dace7f2a5e37f7a490fb4f3b1fcaddc825b66672964a8e9aac025ead84b59afc0bd706508be3a9655526611fa7f642cca2715a6f8fbcdd076e54938a3ee1e6e1837e0df9addad1faf24870a3a706ba42967b60cf9caf3595d0c60bcdd0c0a1e9b4f04d5bbe2cee66ad97a7d2f6a01f3edffb938bb4d7195a675a48d12ad7482e170a8c87fb558629a51a226b92cd38c471b6", 0xf6}, {&(0x7f00000013c0)="a263ca1e28dbc77bccc6c8be94ac50a047bf1e4665a719be87e187d10b32808670cc472fc11a4c5722e9cabc87d43280628ec826611e66d754874839150df74a77dd0de0c3b543be699e3fd57f0878670b7e1e92536591aad2e6900410904c170e13cb14015ad513bca5bad26fc1a0e52e5018e9f96f561c45522babd151b0a6d33943fb6c55b1a99ebbaa29032092b09af4e94c9be999fff6132cb983bc3aeef968f1b496ebf8058814ede1a5059ece071460b0ff53444f68bdd661ca63cd499fb41dfe812e52f0cffa25c821c8ddcc2c7b1f8f9209", 0xd6}, {&(0x7f00000014c0)="4cf7956cc248c5550178b34006bc3c3c80360dc5122c42fabafbe4ed5441f281b225b88f87a5d7c51cf838577a98333135edd64c066c49df8787b6ac2abccbad4d81fe3981b50839d3199c90026491f79b9e030ff8c6ecb13a730fea03017b4bae98ec95c8e6300b9a538e46a0bd16a93af280615f222bf48d4ace166e3d8bfec0f801ab51ff735f8c5c949d4a3794e9e3b7cd8ce803b59657f05ceb8f36c35e2bbec9588a39b2b1055076e5b46cdbde49285c6157e9798b441e72eeb7f8910e3f8e7b1c42d548d648856f06de4fcb2d2bac44f75c3baf76b38c27dab1819a603c61e48887a1bfaa89528829434c2d427b98a4e1f5c104414445194dbc4e1dce9720db2f935e285ac72722ee3f8d1dc92357cf9bbc4d2b6eba579e1560aeb37f0823a86734a1e81f01284f78789322d96235a4c689347fa9c00e40a8fa229eee73cc69361ca21c7f75584dc279fb7d6c9701714b943fe1f69f80b04462f905b0357a99979aac9d050ba2cd58bb2dd8c47ac5a3781cc43cb7353f6eb0b1338a4e6eaca983ea35c48fbfab72aadde90952c67f8caefcf246337ed2c13bb608be7671b4c3000c6e7481dd87b27637e659ad28e7469e8a0b9b417a2cb1944c8bc06226833d6a59a260569925e227327562304d150e8394aae0c7f5dbd9d5988821b2bd2fbcd443734ac342c78e82afc43e401a0fd1a5296ccf0fc3724bf8805f91806d2769f5919c953e853fb16efe65ecd879c123fcc144f91d4314c30b883f8431f5dddb8bd5ab4794606eed8a0d6636c76ceac9ad0503a9fd7fb228a3bcc8fbe0afc3000793d2d434c7be906ffbebf199143cee3114e8cf979f04eb572aa822c9642c6e34945a94e36f53c1b7009f3585e7423facc4dda75701f08f2299aeaf8aea32552a1ef48a59af6d97e848e565c03b45f8afef34154c1676579d67a89756d4c5b80d63042c1a4d1b63c3a048005a1575c3bbc6f920aef4ed72b578b3320746147d0f85bb163694087252526235fa55a7e59c8c8497eda1673b5064be7423284fc05f83080a6c238978230c2d7205698abba4d8f90aa2b49eb21eb9722269ffe4685bdedc1ed55f395700645b3edba8ca88c1de0b27da5df72e696790732b66f4dd66d10a1a41a3b21ba15a536cafdd39d437c68522fa2188489f0ca7c673295073504ec4ae324f07db6befe90a777954a5f5c998141879e00b4cbe19b989baf06c81903d4297bfc1f22be54771452133c82b81c0c94e3a0d682266b31f3ea88fa9744dacfda880516808b5bc8811c08ef9de5e9d9e4a67f016910ae7d4d88da47c14510bb38aa56438d198e4152e5845104d4d45fbcc9afe5fc6bca5f835d4ae0d5e6863fe2b50c2452ee35078accde98d9ad4c2724b7503b82485ddb0a4a7fe2bd0d251135698141218396e113ba2b5fdbc52c93c883fe4c52e2bcba3e3ba2c8ac8134c7ae7296715ea0412204b514582f3667a1d980111cea48c25bd655fe534e1643f62c0ff3f1f61dfc9c0c14174787210b2d10f1c7c87b3297c0629de990d18aa104964c1af0af8634ae8e083faf69cbd1dd371a49bff5ccb816a789ee34936925ed799582b4f0ab2abf1334added2ec6895a85ab82cc7a6a69786623fcbe9ed6c8542abd289876889d7b8b28713daf77f6a97d5aa9f425d0b19d38d5c0968cb133d26508f85f127dfc81e8157bd691fc21a3528e90bc6279bbad795ac679a5a8e2286a1f5cb55f65f22bdf78145bd13c0fbb001be0e5dfdc93db62de2213ab8e5e1b22b90deb010aea9eece99fad1a04e79d2acdf0b279c1d1c5e5005bc260c17ee489a3a2a865762c25b8587ee851c133fb6fd59c1d8d9d361a6660cf5507af7db0b2a073632106c21f130c4482c165fc2c03283a8f841f53ece91001d4fb7b1a1ff599949f94e19b816fb49a3ee611b5b3fe0374cdc36b86b4e7c5eb56d578dbf333abfc9c64b70a5c124226a52842b93834918695b69b26d757282743be39e1cbfe37c72427cdd618559ff7338523f8c375b206c7a41e4e10a4dc9cc28b732629f9843615e40fdb28168c7bb65f25c54b4c4614451e2b37853bd981fd66ce3eb9621480bba1aaeb00cead23f1fb6572316378887e1c138431d36f2288a87d39b73c5184e99b9b64a49bf1d80172492da98312cf9ef6e9dec32b9165b3ff26b771428f05c14a5dd7ff1d2a11a910a5bd4a7f870368650b6f62fa6765dc50b5c05f4c321aca00dd16e3e750ee6929c922c926b55998e9feb766c611371455127953c5183a53c9f2318f8f9e0ebe26c5b7a35eda5fc3cb60857f3b9c3f6251338c9cdc65185ed2d68bd2062c48debd4f9674f4457aa02889756fbcf777070967a47a3774b0e874805ce818cca09954710bf1e77abe7a4da3d300f7efad10de966d5d8424bcfe2aef062f949ed2387fa94797cd948492e1657954c7f9d6b148bdfc5fa377951ff7c91c6ad019c6afc3f029c364e5e1fa260a225224cb6bc1c8c4b99cee8b10fe07b98e105945acd1ff9f27b612e546a9ba4c399c7a5c8764b3a61b93b27b72e11bf26bc7d8a767f6b021ca0affd34b683b050b505ae4a4b651f2ce286adb3d63ce58364fda0ec336195f70c07b2d17f9a793b978c20a6499f888e5448233a15ba2d49ca34f66bf52183cafa320b6cab3159ab7168fea616e7fa4a941470182c53af7863dd7b9849024852efc717982a5fc09f0f232d582508d3a00481468a99ba7eaa9887c007a386d0594a7a372033408c86d46f919a19c146e90008a7c19535ce92543b5912d942293496b60f9f28069b1a4edf57ff4a8b15b9c7b43ca30e949ebc28b97ed9ffef402f630f02a0d4cbb1ea07492f75d85e9a5bb27fb2b0908c8fd2378f21cfef1e4c1872e4ef452b51c55c933ecf608384525c8203b48fa2ab895754f29f513e68979f167d9c7c0900c5278a7a05aa4cec5efda2c1f808eec122706dafe7dd69f1bc32331a0f25a597653890abffc966bb45217ad12ff16b2950c3855699a0cd7e32632685752d197458198c835b51abe79d0aef23325781511ec9ad541a19372143def29c94a6ae8d0aa5980a53d96d546e4e57a2e8c43838312ecd842213fab1ab00326fd6e00929a5e50709ab415cf4ae65959c0dec6cd273957fce507d8c762cc12eedae93fe4b3e16961e0f5f47ec7ae3026d07957c556f583aa193d5eb2f847cf91c0be6b5973bf5b7e830ef5a865987d2da4a11282cc1707b8413391b1f6f496a2a1b9a657ac9cfe1b679f2cdc87521e0c530bf37da422855dd1bf2f87e18cbd96b5c0dadb9031e93c49ffa75ca485d894df6fe7b85a29bc48c0660a68beeeb23f11007ab5f735792ba5693e9e63d55f12bcb1f161130563e3506bce960bdc09299358a9d0ffcea9b3b1f0febf7dfeb9e4e3c933ed89b048706f9cabcae043dbaec57e8eb41b1c3df4bae657e564e365590406ad384007f9338e6874b034b7a560a84686ea163d8aaee2a6ba3734fff486599ec9a3673602a0d659072e0cfa8a79108a91db68df50e7e64676586c0c0d59f05dae7adc391f401b64861804f5aaa29f531f54ce47e7b6809b8dececf88fe4f9695912431c48d87ffd4662aef94020a0a8d51a4a395e00d2e2d0a62086f4201ebb0d0341d2e0b3ac94334e70d0bd7f05468b5c2e490f7bddc668e0e37e080161e6a924c752bc802ae8fd9b5e9ab6c8beecbba2d6fa9d4f3f1debf30d7915ad6b1b0943b21bad6b47a35a235feb03ae070f670eb7dc3850d958a413bcd4fc44718d826166751ed2a9c5d788386e6693aba35a40400157e8cb146b71b9ba70fa2e546aa1db22f63b72908573a88815064c5f60248bc912b83024d428024c64b760bef91bf64f92f449ef7d9e5d66674bd82b350e24fffe3755f11881ffbaecbd9f889fa3c702b592887ab88b955c35d6a45a467f2435b9c57eb239ccfce970d92ee3d6a266bb1f29d7bf47a79cf01f8d52fafcf371948ce28c94cd9148075300fe6676fd54a1354308aaaa32723275cf0a5e9fc0e4aa33c0a8a113fafda0f78ef95c0be251b1f329b83b786028b20fc8bfcc3f1ce322d13f8f1f916334dcc85b69d16f87baddb3de82d1cfe2e7a31cb7671272b6dfb036140b7480e2757ef757bafa8c0c313d3a0a1008e085a07a6bb2054c69139250b267d151217c0e11024502935bb469fd49184fd57c295f6cf982fba80962d6554d9ca5b12fe948089bd1b83ec0732aefad6224febbe0050b75f70f098ef9e99f0344e547aefa9c174b4b150c19bfbe6c706ed401bcf9c5da68b23b2d3cbbbf05f76f78df5f1d6efbb53add519286861e69482df2626e83a24a1820b4cdede0f16901d092f77ca69077782b1b9d632a7335633c94c2d98bd380638b9041dedca4881c897e02163e808c652db9d97cfa03ea4e252eb917f0a74296e118b1da29396874c546286558b896083219df83392bfa503dd681405d74fd68043febb9c018de85c05277ef68dcc43a727515b388bf63e2a83fc2f1b333fefc9d4557ba5541b818d078e9c303a87bcd98ae7031654fd1dc50cfed8017c4dac132be3532af074c89363ac98aa2751a649d04ecbb7d83c0954000d48fd44cb7a2e11f4c7850624086bbc81277b50150e785926bf56e0772ac09bdd0e76803aaf7ee704c59c116543b823f7276b335d59606a6ce18ddb6406a00fe5308a6830102993d761e5098d7996d021b65bae759aad61ad0c43c72e6b2f14d3054e30edc4fa46129c16329ab8a555515c193789020ec2a3409e191361196420a9773745730bf7338feb1b4c869015ffbb60160817179b7bb189548623f330dedc4567745e8022f0d5017c60e87e50a67ca47b175fccf7a3c3f5bf65be6306a85ea22ddacce991235f95dbb800c83bb3ac091aac2f759a928a96c496b715449d9127612713a9ad7cb5353378f60fbe133215ce0204392a145ef1062e5cf5a051cb12ebe2d82760fbacb6cb398cc09c1e24a0dcca3719d6d2b7db58b6d508f9b4eb2f120b45533efa5fe45206f44fd2a39def86b48ad8a4a24b5560b2ea411ff69d2e2adb7d13f1009a56d2b53e51b2fe79c114155b94059b1a00dfdfbfb9828e3207030de68b46513b9643fb6cbfa9f48cd6b2e59f25bbe21e82dd3987f8c114eda9cfb2bcc4d28e6f40ed900aef0f660789228ae348152fabf1c1bfcf65b63cd7e584b79a22647a49b09ff4a33d22a899455cdf07104a09337c44d2a4a1ca8e3f39ec815008d105919e4e412e5653281c46aae43d988738e30fd480aa53b3dd32b68d441a3100a8351e2d5bd30b77caf32ca0d1ba454795b057f4e88cd367d2191955a4924837e5b0608efe8a622d2f5858df2f99ff78cc2438bd096400cccb2967e0cc841b7f42880bf6da33ec9785f515b6ced4c04a3200b4e16fdbf13eaab51a3d22d7b6bc07dd4bda39564deda8a0c47fd1255d62bcb86282dc093e6efbebce8c8e436d88dd101034d84b6c4aa9f9822c11764fb205a82c1d6ecbf88cb87b1d016254862a817e2ff820f1abfff870110729231731c40c3aa4f4301ac44ff06fc942b4772f8704b58f4b569f977c88865b1f650bcf60ce10df0b23b81037f6ca2311c95d32e61f6616fd77f9f326a776c2ee8012bc11a3baa1af5a92870caf438c1de024dc17140e4c6b10b0436f3d58ce946ba5bcb22189a4515f13ea44105aa10f61ed361ca73cb8dd66dd79e4869420a56189ec0beb6fd64d61811a7bc17633ac193b22d8520fe0cdc1afc468c4440400322eadf9d95ca2adef888a38bd664cca78724d0f77442dd76f8a1", 0x1000}, {&(0x7f00000024c0)="31c316c01db1af8e", 0x8}], 0x7}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) recvmmsg$unix(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x64, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '/^'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x96}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) pread64(r6, &(0x7f00000003c0)=""/4093, 0xffd, 0x202df) 1m18.940676943s ago: executing program 2 (id=4667): unshare(0x2040400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r4, r3, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000008203000000"], 0x0, 0x3e}, 0x28) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 1m18.896239054s ago: executing program 3 (id=4668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffffaf}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xef82db3aa4bbbbfa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m18.685159721s ago: executing program 0 (id=4669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1) recvmsg$can_raw(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000400)=""/89, 0x59}], 0x2}, 0x40010042) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c0000000101030000000000000000000a00000570000280060075337dbc82c24b5c0000e20000030000000000000000000000ffffac1e000114008183150400fe80000000000014349fdf0000000000000000bb0cb20280050001003c0000002c1a01801400ffff2001000000000000000000000000000114000400fc010000000000000000008844bec30000000072b00d0cd62a382c0293fad0fafc20bc0c57"], 0x8c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000c090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000300)='blkio.bfq.time\x00', 0x0, 0x0) unshare(0x600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0xa, 0x1, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010103, @loopback, {[@lsrr={0x83, 0xf, 0x70, [@broadcast, @loopback, @empty]}]}}}}}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0xfffffffffffffd4b, &(0x7f0000000040)={0x0, 0xfd4f}}, 0x20049014) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m18.678287506s ago: executing program 4 (id=4670): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m18.678047435s ago: executing program 2 (id=4671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000480)=""/71, 0x47}], 0x2) r2 = socket(0x2d, 0x2, 0x0) unshare(0x28000600) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0xf, 0x0, 0xc}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m18.375585474s ago: executing program 3 (id=4672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m5.074659563s ago: executing program 1 (id=4673): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="037d6b5b", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r3, @ANYBLOB="0c00060003000000030000000c0006000300000003000000"], 0x34}, 0x1, 0x3000000, 0x0, 0x40040}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r4) 0s ago: executing program 32 (id=4669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1) recvmsg$can_raw(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000400)=""/89, 0x59}], 0x2}, 0x40010042) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c0000000101030000000000000000000a00000570000280060075337dbc82c24b5c0000e20000030000000000000000000000ffffac1e000114008183150400fe80000000000014349fdf0000000000000000bb0cb20280050001003c0000002c1a01801400ffff2001000000000000000000000000000114000400fc010000000000000000008844bec30000000072b00d0cd62a382c0293fad0fafc20bc0c57"], 0x8c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000c090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000300)='blkio.bfq.time\x00', 0x0, 0x0) unshare(0x600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0xa, 0x1, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010103, @loopback, {[@lsrr={0x83, 0xf, 0x70, [@broadcast, @loopback, @empty]}]}}}}}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0xfffffffffffffd4b, &(0x7f0000000040)={0x0, 0xfd4f}}, 0x20049014) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) kernel console output (not intermixed with test programs): er): interface not active [ 341.422756][T17252] hsr_slave_0: entered promiscuous mode [ 341.439678][T17252] hsr_slave_1: entered promiscuous mode [ 341.451569][T17252] debugfs: 'hsr0' already exists in 'hsr' [ 341.466425][T17252] Cannot create hsr debugfs directory [ 341.495781][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.783616][T17252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.805891][T17252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.893558][T17252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.904063][ T5623] Bluetooth: hci2: command tx timeout [ 341.916091][T17252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.990100][T17327] syzkaller1: entered promiscuous mode [ 342.001624][T17327] syzkaller1: entered allmulticast mode [ 342.026801][T17252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.060003][T17252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.108687][T17370] x_tables: duplicate entry at hook 2 [ 342.133384][T17252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.158716][T17252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.211300][T17372] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.318575][T17383] syzkaller0: entered allmulticast mode [ 342.430893][T17252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.459979][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.463775][ T5623] Bluetooth: hci5: command tx timeout [ 342.478098][T17252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.519045][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.535875][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.556550][T17252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.596918][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.635149][T17252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.657589][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.809795][T17418] lo speed is unknown, defaulting to 1000 [ 342.953021][T17252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.008763][T17252] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.029759][ T979] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.036965][ T979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.138095][T17422] syzkaller0: entered promiscuous mode [ 343.148192][T17422] syzkaller0: entered allmulticast mode [ 343.162486][T16270] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.169698][T16270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.575876][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.629565][T17448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3080'. [ 343.645026][T17448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3080'. [ 343.672710][T17448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3080'. [ 343.915246][T17454] syzkaller1: entered promiscuous mode [ 343.930781][T17454] syzkaller1: entered allmulticast mode [ 343.976271][ T5623] Bluetooth: hci2: command tx timeout [ 344.042632][T17252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.078649][T17252] veth0_vlan: entered promiscuous mode [ 344.091347][T17252] veth1_vlan: entered promiscuous mode [ 344.125614][T17252] veth0_macvtap: entered promiscuous mode [ 344.142946][T17252] veth1_macvtap: entered promiscuous mode [ 344.155959][T17463] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3083'. [ 344.168237][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3083'. [ 344.185117][T17463] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 344.199954][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 344.209374][T10116] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 344.222335][T17252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.241323][T17252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.271050][ T979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.282481][T17465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3084'. [ 344.293997][ T979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.321647][ T979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.340136][ T979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.428108][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.444632][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.458210][T17468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3085'. [ 344.515610][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.519805][T17472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3087'. [ 344.534828][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.600386][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 344.615973][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.637628][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 344.826619][T17481] bridge10: port 1(erspan0) entered blocking state [ 344.833315][T17481] bridge10: port 1(erspan0) entered forwarding state [ 344.947559][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.956017][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.963361][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.972092][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.979553][T17481] ip6gretap0: left promiscuous mode [ 344.984586][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.071541][T17481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.116582][T17481] tipc: Resetting bearer [ 345.177287][T17481] veth1_to_batadv: left promiscuous mode [ 345.194091][T17481] veth1_vlan: left promiscuous mode [ 345.200913][T17481] veth0_vlan: left promiscuous mode [ 345.208406][T17481] veth0_vlan: entered promiscuous mode [ 345.217587][T17481] tipc: Resetting bearer [ 345.223640][T17481] veth1_vlan: entered promiscuous mode [ 345.244011][T17481] ip6gretap0: entered promiscuous mode [ 345.252381][T17481] 8021q: adding VLAN 0 to HW filter on device eth0 [ 345.260808][T17481] 8021q: adding VLAN 0 to HW filter on device eth1 [ 345.269530][T17481] 8021q: adding VLAN 0 to HW filter on device eth2 [ 345.278087][T17481] 8021q: adding VLAN 0 to HW filter on device eth3 [ 345.288588][T17481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.300444][T17481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.310057][T17481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.318612][T17481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.337418][T17481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.352399][T17481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.362228][T17481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 345.373129][T17481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.381991][T17481] veth1_to_batadv: entered promiscuous mode [ 345.390790][T17481] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.402034][T17481] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.416303][T17481] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.424448][T17481] 8021q: adding VLAN 0 to HW filter on device bond12 [ 345.436108][T17481] 8021q: adding VLAN 0 to HW filter on device bond13 [ 345.444014][T17481] 8021q: adding VLAN 0 to HW filter on device bond14 [ 345.453598][T17481] vlan2: left promiscuous mode [ 345.458738][T17481] bond15: left promiscuous mode [ 345.463666][T17481] batadv1: left promiscuous mode [ 345.470486][T17481] geneve2: left promiscuous mode [ 345.542530][ T5619] syz_tun (unregistering): left allmulticast mode [ 345.561018][T16268] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.579573][T16268] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.615129][T16268] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.632946][T16268] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.693619][T17507] syzkaller0: entered promiscuous mode [ 345.719772][T17507] syzkaller0: entered allmulticast mode [ 345.745155][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.745320][T17507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3094'. [ 345.775953][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.783721][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.832172][T17509] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 345.988226][T17524] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3099'. [ 346.025966][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.057288][ T5634] Bluetooth: hci2: command tx timeout [ 346.087110][T17493] lo speed is unknown, defaulting to 1000 [ 346.168336][T17547] netlink: 'syz.1.3104': attribute type 10 has an invalid length. [ 346.187579][T17547] geneve1: entered promiscuous mode [ 346.224675][T17547] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 346.415938][T10116] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.791912][T17493] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.799271][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.806936][T17493] bridge_slave_0: entered allmulticast mode [ 346.813810][T17493] bridge_slave_0: entered promiscuous mode [ 346.821833][T17493] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.829490][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.836923][T17493] bridge_slave_1: entered allmulticast mode [ 346.844349][T17493] bridge_slave_1: entered promiscuous mode [ 346.868274][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.880078][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.905018][T17493] team0: Port device team_slave_0 added [ 346.914389][T17493] team0: Port device team_slave_1 added [ 346.940250][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.948139][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.977763][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.991755][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.999328][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.026691][ T5634] Bluetooth: hci1: command tx timeout [ 347.032473][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.069387][T17493] hsr_slave_0: entered promiscuous mode [ 347.076263][T17493] hsr_slave_1: entered promiscuous mode [ 347.082474][T17493] debugfs: 'hsr0' already exists in 'hsr' [ 347.088991][T17493] Cannot create hsr debugfs directory [ 347.165552][T17493] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.176498][T17493] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.186720][T17493] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 347.240183][T17493] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.250689][T17493] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.261866][T17493] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 347.288449][T17493] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.298500][T17493] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.308883][T17493] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 347.359681][T17493] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.370253][T17493] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.380571][T17493] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 347.975909][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.135962][ T5634] Bluetooth: hci2: command tx timeout [ 349.095860][ T5634] Bluetooth: hci1: command tx timeout [ 349.383005][T17560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.396061][T17493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.431961][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.447956][T17493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.458821][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.467281][T17493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.476912][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.484748][T17493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 349.494218][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.548120][T17493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.563158][T17493] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.574245][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.581440][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.593681][T16268] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.600863][T16268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.844472][T17493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.876145][T17493] veth0_vlan: entered promiscuous mode [ 349.887734][T17493] veth1_vlan: entered promiscuous mode [ 349.896609][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.920460][T17493] veth0_macvtap: entered promiscuous mode [ 349.929553][T17493] veth1_macvtap: entered promiscuous mode [ 349.943551][T17493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.955616][T17493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.968330][ T3362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.977632][ T3362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.990241][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.999093][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.042355][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.054304][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.075072][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.083575][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.177533][ T5634] Bluetooth: hci1: command tx timeout [ 353.255910][ T5634] Bluetooth: hci1: command tx timeout [ 358.216199][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.374680][T17603] __nla_validate_parse: 2 callbacks suppressed [ 368.374700][T17603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3109'. [ 368.679867][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.688506][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.697916][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.706914][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.715355][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.130271][T17636] syzkaller0: entered promiscuous mode [ 369.145441][T17636] syzkaller0: entered allmulticast mode [ 369.294023][T17622] lo speed is unknown, defaulting to 1000 [ 369.336304][T17644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3120'. [ 369.449668][T17656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3124'. [ 369.540706][T17657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3124'. [ 369.604542][T17666] tipc: Started in network mode [ 369.613749][T17666] tipc: Node identity eae7652faf09, cluster identity 4711 [ 369.622824][T17666] tipc: Enabled bearer , priority 0 [ 369.641676][T17668] netlink: 'syz.4.3127': attribute type 2 has an invalid length. [ 369.679713][T17665] tipc: Disabling bearer [ 369.884310][T17686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3130'. [ 369.923359][T17686] netlink: 'syz.2.3130': attribute type 7 has an invalid length. [ 369.959009][T17686] netlink: 'syz.2.3130': attribute type 8 has an invalid length. [ 369.977472][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'. [ 369.990845][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 370.052183][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 370.061611][T17696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3133'. [ 370.072690][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3130'. [ 370.538607][T17728] tipc: Failed to remove unknown binding: 66,1,1/0:645946664/645946666 [ 370.553624][T17728] tipc: Failed to remove unknown binding: 66,1,1/0:645946664/645946666 [ 370.563099][T17728] tipc: Failed to remove unknown binding: 66,1,1/0:645946664/645946666 [ 370.639474][T17622] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.671022][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.681976][T17622] bridge_slave_0: entered allmulticast mode [ 370.689709][T17622] bridge_slave_0: entered promiscuous mode [ 370.704138][T17622] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.714393][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.738655][T17622] bridge_slave_1: entered allmulticast mode [ 370.746123][T17622] bridge_slave_1: entered promiscuous mode [ 370.753874][T17739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.776060][ T5623] Bluetooth: hci0: command tx timeout [ 370.795641][T17732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.872199][T17622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.920096][T17622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.974828][T17622] team0: Port device team_slave_0 added [ 370.987178][T17622] team0: Port device team_slave_1 added [ 371.004312][T17755] veth1_to_team: entered allmulticast mode [ 371.038631][T17755] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 371.048407][T17755] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 371.057102][T17755] netlink: 'syz.0.3145': attribute type 2 has an invalid length. [ 371.064973][T17755] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 371.108271][T17757] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 371.143238][T17757] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 371.196461][T17757] bond1: entered allmulticast mode [ 371.222435][T17622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.248529][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.285333][T17622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.297947][T17622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.305069][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.341546][T17622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.353212][T17766] netlink: 'syz.2.3143': attribute type 1 has an invalid length. [ 371.412182][T17622] hsr_slave_0: entered promiscuous mode [ 371.427906][T17622] hsr_slave_1: entered promiscuous mode [ 371.444832][T17622] debugfs: 'hsr0' already exists in 'hsr' [ 371.456844][T17622] Cannot create hsr debugfs directory [ 371.535391][T17622] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.545565][T17622] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.590760][T17622] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.601013][T17622] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.640940][T17622] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.651229][T17622] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.711035][T17622] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.721823][T17622] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.855901][ T5623] Bluetooth: hci0: command tx timeout [ 373.896062][T17748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.907876][T17622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.945134][T17622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.963368][T17622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.000020][T17622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.037466][T17622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.064822][T17622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.108196][T17622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.138527][T17622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.169043][T17795] __nla_validate_parse: 3 callbacks suppressed [ 374.169063][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3154'. [ 374.408923][T17821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3157'. [ 374.451248][T17816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3157'. [ 374.470921][T17622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.510312][T17622] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.548579][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.555789][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.570632][T17821] netlink: 'syz.0.3157': attribute type 1 has an invalid length. [ 374.598892][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.606168][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.620134][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3157'. [ 374.827206][T17841] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 374.854514][T17841] bond1 (unregistering): Released all slaves [ 374.858416][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.935881][ T5623] Bluetooth: hci0: command tx timeout [ 374.976266][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 375.001321][T17846] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3163'. [ 375.055280][T17853] netlink: 'syz.4.3165': attribute type 2 has an invalid length. [ 375.059181][T17846] geneve2: entered promiscuous mode [ 375.077147][T17846] geneve2: entered allmulticast mode [ 375.183406][T17855] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 375.358723][T17872] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 375.378223][ T30] audit: type=1804 audit(1782043953.335:6): pid=17875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3169" name="/newroot/11/memory.events" dev="tmpfs" ino=77 res=1 errno=0 [ 375.430388][ T30] audit: type=1800 audit(1782043953.335:7): pid=17875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3169" name="memory.events" dev="tmpfs" ino=77 res=0 errno=0 [ 375.453807][ T30] audit: type=1800 audit(1782043953.365:8): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3169" name="memory.events" dev="tmpfs" ino=77 res=0 errno=0 [ 375.475356][ T30] audit: type=1804 audit(1782043953.365:9): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3169" name="/newroot/11/memory.events" dev="tmpfs" ino=77 res=1 errno=0 [ 375.511516][T17872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.607034][T17880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.617422][T17880] bond2: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 375.653741][T17880] bond2: (slave ip6_vti0): Error -95 calling set_mac_address [ 375.705383][T17881] bond2: entered promiscuous mode [ 375.725664][T17881] bond2: entered allmulticast mode [ 375.752677][T17622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.854982][T17895] syzkaller0: entered promiscuous mode [ 375.863681][T17895] syzkaller0: entered allmulticast mode [ 375.908051][T17911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3178'. [ 375.978520][T17905] syzkaller0: entered promiscuous mode [ 375.985217][T17905] syzkaller0: entered allmulticast mode [ 376.072733][T17913] syzkaller0: entered promiscuous mode [ 376.086492][T17913] syzkaller0: entered allmulticast mode [ 376.115546][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.121993][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.124837][T17622] veth0_vlan: entered promiscuous mode [ 376.128395][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.140292][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.141838][T17919] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 376.146697][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.146713][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.146725][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.146736][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.146747][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.146758][T17913] tc action pedit 'at' offset 2047 out of bounds [ 376.192705][T17913] TC_ACT_REPEAT abuse ? [ 376.197390][T17622] veth1_vlan: entered promiscuous mode [ 376.310175][T17924] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3182'. [ 376.325613][T17919] bond1 (unregistering): Released all slaves [ 376.393656][T17622] veth0_macvtap: entered promiscuous mode [ 376.408892][T17622] veth1_macvtap: entered promiscuous mode [ 376.424768][T17622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.451069][T17622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.505505][T16269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.532244][T16269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.561277][T16269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.589506][T16269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.674352][T17944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3190'. [ 376.761636][T17946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3191'. [ 376.785603][T16268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.811335][T16268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.852506][ T979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.888379][ T979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.973789][T17964] syzkaller1: entered promiscuous mode [ 376.993461][T17964] syzkaller1: entered allmulticast mode [ 377.016338][ T5623] Bluetooth: hci0: command tx timeout [ 378.701260][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.567467][T18021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.576140][T18021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.588675][T18021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.601277][T18021] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.611462][T18021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.310000][T17981] lo speed is unknown, defaulting to 1000 [ 381.401719][T18066] netlink: 'syz.3.3212': attribute type 1 has an invalid length. [ 381.473600][T18073] __nla_validate_parse: 5 callbacks suppressed [ 381.473622][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3214'. [ 381.489654][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3214'. [ 381.499061][T18073] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3214'. [ 381.522614][T18068] gretap1: entered allmulticast mode [ 381.537136][T18068] bond1: (slave gretap1): making interface the new active one [ 381.546283][T18068] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 381.733867][T18092] netlink: 'syz.0.3217': attribute type 3 has an invalid length. [ 382.164408][T18111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3222'. [ 382.348162][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3224'. [ 382.435144][T18126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.501069][T18129] bond2: entered allmulticast mode [ 382.697636][T18021] Bluetooth: hci4: command tx timeout [ 382.732440][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 382.764999][T18151] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 382.805394][T18147] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 382.817255][T18147] bond1 (unregistering): Released all slaves [ 382.988722][T18151] openvswitch: netlink: Missing key (keys=40, expected=80) [ 383.075341][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 383.118339][T18151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.139372][T18162] vlan2: entered allmulticast mode [ 383.144572][T18162] macvtap0: entered allmulticast mode [ 383.150966][T18162] veth0_macvtap: entered allmulticast mode [ 383.163007][T17981] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.170828][T18172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3234'. [ 383.184355][T17981] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.204687][T17981] bridge_slave_0: entered allmulticast mode [ 383.223503][T17981] bridge_slave_0: entered promiscuous mode [ 383.247031][T17981] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.264413][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.280827][T17981] bridge_slave_1: entered allmulticast mode [ 383.294337][T17981] bridge_slave_1: entered promiscuous mode [ 383.349641][T17981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.388105][T17981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.400857][T18182] netlink: 'syz.1.3238': attribute type 2 has an invalid length. [ 383.417565][T18182] netlink: 'syz.1.3238': attribute type 11 has an invalid length. [ 383.426559][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 383.475936][T18183] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3236'. [ 383.513987][T17981] team0: Port device team_slave_0 added [ 383.534581][T17981] team0: Port device team_slave_1 added [ 383.599104][T17981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.620811][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.687267][T17981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.721090][T17981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.733173][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.797375][T17981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.873583][T18214] bond1: option fail_over_mac: invalid value (127) [ 383.881512][T18214] bond1 (unregistering): Released all slaves [ 383.911599][T18211] macsec1: entered promiscuous mode [ 383.939127][T17981] hsr_slave_0: entered promiscuous mode [ 383.958051][T17981] hsr_slave_1: entered promiscuous mode [ 383.975176][T17981] debugfs: 'hsr0' already exists in 'hsr' [ 383.982304][T17981] Cannot create hsr debugfs directory [ 384.192168][T18229] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 384.389774][T17981] team0: Port device netdevsim1 removed [ 384.422771][T18242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.584691][T17981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.621035][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.649890][T17981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.673606][T18256] nbd: couldn't find device at index 1 [ 384.690018][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.718509][T17981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.744091][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.769366][T17981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.788174][T18021] Bluetooth: hci4: command tx timeout [ 384.800454][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.951190][T17981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.961665][T18278] syzkaller0: entered promiscuous mode [ 384.969361][T18278] syzkaller0: entered allmulticast mode [ 385.014671][T17981] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.050714][T16269] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.057916][T16269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.074164][T16269] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.081382][T16269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.637031][T18316] netlink: 'syz.3.3275': attribute type 83 has an invalid length. [ 385.712153][T17981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.781055][T18321] tipc: Enabling of bearer rejected, failed to enable media [ 386.051317][T18339] sctp: [Deprecated]: syz.1.3281 (pid 18339) Use of int in max_burst socket option. [ 386.051317][T18339] Use struct sctp_assoc_value instead [ 386.111528][T18339] sctp: [Deprecated]: syz.1.3281 (pid 18339) Use of int in max_burst socket option. [ 386.111528][T18339] Use struct sctp_assoc_value instead [ 386.238785][T18353] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 386.269830][T17981] veth0_vlan: entered promiscuous mode [ 386.274019][T18353] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 386.311715][T18353] netlink: 'syz.1.3283': attribute type 8 has an invalid length. [ 386.324905][T17981] veth1_vlan: entered promiscuous mode [ 386.356940][T18353] netlink: 'syz.1.3283': attribute type 3 has an invalid length. [ 386.374183][T18351] netlink: 'syz.1.3283': attribute type 3 has an invalid length. [ 386.416685][T17981] veth0_macvtap: entered promiscuous mode [ 386.447975][T17981] veth1_macvtap: entered promiscuous mode [ 386.489991][T17981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.508971][T17981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.538894][T16270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.561395][T16270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.582803][T16270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.619357][T16270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.637488][T18365] syzkaller1: entered promiscuous mode [ 386.653242][T18365] syzkaller1: entered allmulticast mode [ 386.716560][T18367] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0 [ 386.742374][T18367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.855834][T18021] Bluetooth: hci4: command tx timeout [ 387.022222][T18372] __nla_validate_parse: 12 callbacks suppressed [ 387.022243][T18372] netlink: 824 bytes leftover after parsing attributes in process `syz.2.3290'. [ 387.083220][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 387.114122][T18372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3290'. [ 387.130810][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.158591][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.183958][T18379] netlink: 'syz.3.3293': attribute type 2 has an invalid length. [ 387.192676][T18379] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3293'. [ 387.203938][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 387.231830][T18378] syzkaller0: entered promiscuous mode [ 387.247925][T18378] syzkaller0: entered allmulticast mode [ 387.260984][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.281187][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.334820][T18382] vlan2: entered promiscuous mode [ 387.352952][T18382] bridge0: entered promiscuous mode [ 387.392785][T18382] netlink: 'syz.3.3295': attribute type 4 has an invalid length. [ 387.450236][T18395] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3198'. [ 387.485491][T18398] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 3, id = 0 [ 387.879250][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 388.122815][T18443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.250953][T18460] netlink: 'syz.1.3318': attribute type 3 has an invalid length. [ 388.304432][T18464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3320'. [ 388.384946][T18468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3322'. [ 388.390159][T16269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.396823][T18468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3322'. [ 388.406662][T16269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.663879][T18487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.862662][T18507] Bluetooth: MGMT ver 1.23 [ 388.885288][T18500] tc_dump_action: action bad kind [ 388.938161][T18021] Bluetooth: hci4: command tx timeout [ 388.959087][T16268] vlan5: left allmulticast mode [ 388.977290][T16268] geneve0: left allmulticast mode [ 388.982499][T16268] vlan5: left promiscuous mode [ 388.987451][T16268] geneve0: left promiscuous mode [ 388.992811][T16268] bridge0: port 4(vlan5) entered disabled state [ 389.013275][T16268] team0: left allmulticast mode [ 389.023460][T16268] team_slave_0: left allmulticast mode [ 389.030118][T16268] team_slave_1: left allmulticast mode [ 389.035908][T16268] bridge1: left allmulticast mode [ 389.041140][T16268] team0: left promiscuous mode [ 389.046089][T16268] team_slave_0: left promiscuous mode [ 389.051974][T16268] team_slave_1: left promiscuous mode [ 389.060362][T16268] bridge1: left promiscuous mode [ 389.072147][T16268] bridge0: port 3(team0) entered disabled state [ 389.113689][T16268] bridge_slave_1: left allmulticast mode [ 389.135964][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.156006][T16268] bridge_slave_0: left allmulticast mode [ 389.171464][T16268] bridge_slave_0: left promiscuous mode [ 389.190954][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.249330][T16268] dvmrp0: left allmulticast mode [ 389.278410][T16268] batman_adv: batadv0: Interface deactivated: gretap3 [ 389.608061][T16268] bond15 (unregistering): (slave ip6gretap1): Releasing active interface [ 389.690291][T16268] bond3 (unregistering): (slave gretap1): Releasing active interface [ 389.702850][T16268] bond4 (unregistering): (slave gretap2): Releasing active interface [ 389.715458][T16268] batman_adv: batadv0: Removing interface: gretap3 [ 389.726305][T16268] bond17 (unregistering): (slave gretap4): Releasing active interface [ 389.752215][T16268] bond11 (unregistering): (slave geneve3): Releasing active interface [ 389.767954][T16268] bond10 (unregistering): (slave geneve2): Releasing active interface [ 389.801127][T16268] team0: Port device bridge1 removed [ 389.813137][T16268] team0: Port device bridge3 removed [ 389.842417][T16268] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.852203][T16268] bond_slave_0: left promiscuous mode [ 389.859627][T16268] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.869684][T16268] bond_slave_1: left promiscuous mode [ 389.876889][T16268] .` (unregistering): Released all slaves [ 389.886421][T16268] bond1 (unregistering): Released all slaves [ 389.900481][T16268] bond2 (unregistering): Released all slaves [ 389.912753][T16268] bond3 (unregistering): Released all slaves [ 389.928465][T16268] bond4 (unregistering): Released all slaves [ 389.941192][T16268] bond5 (unregistering): Released all slaves [ 389.953043][T16268] bond6 (unregistering): Released all slaves [ 389.964575][T16268] bond7 (unregistering): Released all slaves [ 389.978143][T16268] bond8 (unregistering): Released all slaves [ 389.990410][T16268] bond9 (unregistering): Released all slaves [ 390.003457][T16268] bond0 (unregistering): Released all slaves [ 390.015239][T16268] bond10 (unregistering): Released all slaves [ 390.027944][T16268] bond11 (unregistering): Released all slaves [ 390.042236][T16268] bond12 (unregistering): (slave veth9): Releasing active interface [ 390.052763][T16268] bond12 (unregistering): Released all slaves [ 390.064721][T16268] bond13 (unregistering): Released all slaves [ 390.075379][T16268] bond14 (unregistering): Released all slaves [ 390.086674][T16268] bond15 (unregistering): Released all slaves [ 390.098361][T16268] bond16 (unregistering): (slave veth11): Releasing active interface [ 390.108909][T16268] bond16 (unregistering): Released all slaves [ 390.123811][T16268] bond17 (unregistering): Released all slaves [ 390.224998][T16268] tipc: Disabling bearer [ 390.231919][T16268] tipc: Left network mode [ 390.662617][T18582] unsupported nla_type 216 [ 390.936483][T16270] wlan1: Trigger new scan to find an IBSS to join [ 391.297794][T18610] netlink: 'syz.0.3357': attribute type 28 has an invalid length. [ 391.410147][T18609] syzkaller0: entered promiscuous mode [ 391.416216][T18609] syzkaller0: entered allmulticast mode [ 391.641084][T16268] hsr_slave_0: left promiscuous mode [ 391.648426][T16268] hsr_slave_1: left promiscuous mode [ 391.654525][T16268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.669025][T16268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.677047][T16268] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 391.683887][T16268] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 391.694472][T16268] batadv0: left promiscuous mode [ 391.700528][T16268] veth1_macvtap: left promiscuous mode [ 391.706724][T16268] veth0_macvtap: left promiscuous mode [ 391.712379][T16268] veth1_vlan: left promiscuous mode [ 391.717910][T16268] veth0_vlan: left promiscuous mode [ 391.872770][T16268] team0 (unregistering): Port device team_slave_1 removed [ 391.900221][T16268] team0 (unregistering): Port device team_slave_0 removed [ 391.920498][ T48] smc: removing ib device uyz0 [ 392.004714][ T5727] uyz0: Port: 1 Link DOWN [ 392.050543][ T48] smbdirect: ib_dev[uyz0] removed [ 392.094274][T18640] __nla_validate_parse: 6 callbacks suppressed [ 392.094296][T18640] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3365'. [ 392.200164][T18647] netlink: 'syz.1.3368': attribute type 4 has an invalid length. [ 392.754254][T18678] ipt_REJECT: TCP_RESET invalid for non-tcp [ 392.803410][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3380'. [ 393.164920][T18701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3384'. [ 393.195028][T18701] openvswitch: netlink: Flow key attr not present in new flow. [ 393.204768][T18701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3384'. [ 393.370305][T18718] netlink: 'syz.2.3390': attribute type 12 has an invalid length. [ 393.504853][T18727] netlink: 'syz.1.3394': attribute type 1 has an invalid length. [ 393.572406][T18728] x_tables: duplicate underflow at hook 2 [ 393.660814][T18727] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3394'. [ 393.818664][T18733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.978297][T18727] bond1: entered promiscuous mode [ 393.985343][ T1020] wlan1: Trigger new scan to find an IBSS to join [ 393.995896][T18727] bond1: entered allmulticast mode [ 394.029145][T18727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.309061][T18748] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.316754][T18748] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.468104][T18748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.484049][T18776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.498630][T18748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.574311][T18733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.594425][T18770] hmac(sha224): entered promiscuous mode [ 394.625629][T18774] syzkaller1: entered promiscuous mode [ 394.653360][T18774] syzkaller1: entered allmulticast mode [ 394.680135][T16270] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.712213][T16270] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.739017][T18733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.783697][T16270] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.797576][ T979] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.823535][T18733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.842649][T18790] syzkaller1: entered promiscuous mode [ 394.852111][T18792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3408'. [ 394.861542][T18790] syzkaller1: entered allmulticast mode [ 394.873778][T16268] IPVS: stop unused estimator thread 0... [ 394.874946][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 394.920293][T18793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3408'. [ 394.950936][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3408'. [ 394.974975][ T979] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.995336][ T979] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.025042][ T979] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.055088][ T979] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.158500][T18805] lo speed is unknown, defaulting to 1000 [ 395.192729][T18807] syzkaller1: entered promiscuous mode [ 395.201554][T18807] syzkaller1: entered allmulticast mode [ 395.222564][T18810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.244452][T18810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.267097][T18810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.279867][T18810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.911583][T18833] lo: entered allmulticast mode [ 395.933295][T18833] lo: left allmulticast mode [ 395.940732][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3418'. [ 395.972428][T18838] x_tables: duplicate underflow at hook 2 [ 396.218158][T18853] bridge_slave_0: left allmulticast mode [ 396.224841][T18853] bridge_slave_0: left promiscuous mode [ 396.243585][T18853] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.253952][T18853] bridge_slave_1: left allmulticast mode [ 396.260015][T18853] bridge_slave_1: left promiscuous mode [ 396.267054][T18853] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.278167][T18853] bond0: (slave bond_slave_0): Releasing backup interface [ 396.300725][T18853] bond0: (slave bond_slave_1): Releasing backup interface [ 396.356473][T18853] team0: Port device team_slave_0 removed [ 396.383090][T18853] team0: Port device team_slave_1 removed [ 396.404445][T18853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.417534][T18853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.425452][T18853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 396.733829][T18885] bond4: option xmit_hash_policy: invalid value (10) [ 396.758053][T18885] bond4 (unregistering): Released all slaves [ 396.818169][T18899] netlink: 'syz.2.3433': attribute type 61 has an invalid length. [ 397.017355][T16268] wlan1: Trigger new scan to find an IBSS to join [ 397.151018][T18917] syzkaller1: entered promiscuous mode [ 397.171815][T18917] syzkaller1: entered allmulticast mode [ 397.182592][T18917] __nla_validate_parse: 11 callbacks suppressed [ 397.182614][T18917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3443'. [ 397.272900][T18928] veth1_to_hsr: entered promiscuous mode [ 397.281038][T18928] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3445'. [ 397.290581][T18928] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 397.319606][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 397.648264][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'. [ 397.683503][T18946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.744633][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 397.890214][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3456'. [ 397.918407][T18961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.991851][T18966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3453'. [ 398.003182][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'. [ 398.019105][T18969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3457'. [ 398.028521][T18970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3457'. [ 398.054714][ T979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.449225][T18993] openvswitch: netlink: Duplicate key (type 21). [ 398.495156][T10116] IPVS: starting estimator thread 0... [ 398.597301][T18998] IPVS: using max 38 ests per chain, 91200 per kthread [ 398.646572][T19004] netlink: 'syz.1.3468': attribute type 13 has an invalid length. [ 398.779829][T19013] netlink: 'syz.3.3471': attribute type 5 has an invalid length. [ 399.147667][T19022] netlink: 'syz.0.3472': attribute type 13 has an invalid length. [ 399.484119][T19012] bridge0: port 3(dummy0) entered blocking state [ 399.491762][T19012] bridge0: port 3(dummy0) entered disabled state [ 399.501486][T19012] dummy0: entered allmulticast mode [ 399.511144][T19012] dummy0: entered promiscuous mode [ 399.519099][T19012] bridge0: port 3(dummy0) entered blocking state [ 399.525589][T19012] bridge0: port 3(dummy0) entered forwarding state [ 399.537432][T19022] gretap0: refused to change device tx_queue_len [ 399.550884][T19022] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 399.590961][T19014] dummy0: left allmulticast mode [ 399.601163][T19014] dummy0: left promiscuous mode [ 399.623537][T19014] bridge0: port 3(dummy0) entered disabled state [ 399.776114][T19034] mac80211_hwsim hwsim45 syzkaller0: Caught tx_queue_len zero misconfig [ 399.811239][T19034] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 399.847975][T19034] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 399.880950][T19041] tipc: Started in network mode [ 399.902458][T19041] tipc: Node identity 080211000001, cluster identity 4711 [ 399.932762][T19041] tipc: Enabled bearer , priority 0 [ 399.964196][T19046] sctp: [Deprecated]: syz.0.3479 (pid 19046) Use of int in max_burst socket option. [ 399.964196][T19046] Use struct sctp_assoc_value instead [ 399.996441][T19034] tipc: Resetting bearer [ 400.164171][T19058] lo speed is unknown, defaulting to 1000 [ 400.413638][T19078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.654906][ T5727] IPVS: starting estimator thread 0... [ 400.745752][T19092] IPVS: using max 39 ests per chain, 93600 per kthread [ 400.933137][T19111] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 401.045139][T19111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.092668][T19120] vlan3: entered allmulticast mode [ 401.099189][T19120] bond2: entered allmulticast mode [ 401.104721][T10100] tipc: Node number set to 134418688 [ 401.198548][T19111] bond2: (slave geneve2): making interface the new active one [ 401.214835][T19111] geneve2: entered allmulticast mode [ 401.224296][T19111] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 401.444361][T19146] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 401.516518][T19146] bond2: entered promiscuous mode [ 401.536638][T19146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.567999][T19149] syzkaller1: entered allmulticast mode [ 401.673345][T19159] --map-set only usable from mangle table [ 401.705739][T19161] tipc: Started in network mode [ 401.712139][T19161] tipc: Node identity 36aa9a737bed, cluster identity 4711 [ 401.721035][T19161] tipc: Enabled bearer , priority 0 [ 401.777787][T19161] syzkaller0: entered promiscuous mode [ 401.784194][T19161] syzkaller0: entered allmulticast mode [ 401.817211][T19161] tipc: Resetting bearer [ 401.831905][T19158] tipc: Resetting bearer [ 401.840749][T19158] tipc: Disabling bearer [ 402.779731][T19209] __nla_validate_parse: 10 callbacks suppressed [ 402.779754][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 402.801381][T19212] netlink: zone id is out of range [ 402.808619][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3525'. [ 402.830635][T19212] netlink: zone id is out of range [ 402.845877][T19212] netlink: zone id is out of range [ 402.871647][T19212] netlink: zone id is out of range [ 402.928636][T19212] netlink: zone id is out of range [ 402.943841][T19212] netlink: zone id is out of range [ 402.949917][T19212] netlink: zone id is out of range [ 402.955152][T19212] netlink: zone id is out of range [ 403.100513][T19227] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3528'. [ 403.669596][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3531'. [ 403.694754][T19257] netlink: 'syz.1.3532': attribute type 2 has an invalid length. [ 403.718860][T19258] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 403.763580][T19261] netlink: 'syz.1.3534': attribute type 1 has an invalid length. [ 403.774191][T19261] netlink: 'syz.1.3534': attribute type 1 has an invalid length. [ 403.783206][T19261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3534'. [ 403.792930][T19261] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3534'. [ 403.907372][T19276] netlink: 'syz.1.3536': attribute type 1 has an invalid length. [ 403.917913][T19233] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.925430][T19233] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.137642][T19233] net_ratelimit: 305 callbacks suppressed [ 404.137664][T19233] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 404.177124][T19253] ip6gre1: entered promiscuous mode [ 404.182599][T19253] ip6gre1: entered allmulticast mode [ 404.195607][T19276] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 404.253541][T19255] lo speed is unknown, defaulting to 1000 [ 404.680008][T19319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3546'. [ 404.746418][T19321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.793914][T19328] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3549'. [ 404.952871][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3553'. [ 405.026188][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 405.235227][T19358] openvswitch: netlink: Flow key attr not present in new flow. [ 405.292809][T19362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.751317][T19399] netlink: 'syz.0.3569': attribute type 2 has an invalid length. [ 405.883866][T19404] hsr_slave_0: left promiscuous mode [ 405.903646][T19404] hsr_slave_1: left promiscuous mode [ 406.694886][T19424] netlink: 'syz.4.3577': attribute type 4 has an invalid length. [ 406.703441][T19425] netlink: 'syz.4.3577': attribute type 4 has an invalid length. [ 406.890323][T19434] lo speed is unknown, defaulting to 1000 [ 407.005394][T19454] tipc: Enabled bearer , priority 0 [ 407.023467][T19454] syzkaller0: entered promiscuous mode [ 407.035256][T19454] syzkaller0: entered allmulticast mode [ 407.062843][T19454] tipc: Resetting bearer [ 407.076905][T19454] tipc: Disabling bearer [ 407.253160][T19473] bond1: entered promiscuous mode [ 407.260042][T19473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.412046][T19469] x_tables: duplicate underflow at hook 2 [ 407.503935][T19493] xt_CONNSECMARK: invalid mode: 254 [ 407.827760][T19511] ip6gre2: entered promiscuous mode [ 407.833110][T19511] ip6gre2: entered allmulticast mode [ 407.841144][ T979] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 407.862460][ T979] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 407.870525][T19265] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 407.901143][T19517] __nla_validate_parse: 12 callbacks suppressed [ 407.901163][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 407.991427][T19523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3603'. [ 408.014537][T19525] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3602'. [ 408.079585][T19530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3604'. [ 408.131683][T19532] netlink: 'syz.2.3604': attribute type 62 has an invalid length. [ 408.211873][T19520] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.219096][T19520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.232723][T19520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.246001][T19266] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 408.260809][T19520] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.274158][T19520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.363095][T19546] openvswitch: netlink: Missing key (keys=40, expected=80) [ 408.412529][T19520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.420803][T19520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.430656][T19520] veth0_to_team: entered promiscuous mode [ 408.466575][T19266] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 408.508838][T19529] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 408.528918][ T979] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.536140][ T979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.553265][ T1020] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.571466][T19545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.606623][T19555] bond3: (slave tunl0): Device is not bonding slave [ 408.615863][T19555] bond3: option active_slave: invalid value (tunl0) [ 408.624111][T19555] bond3 (unregistering): Released all slaves [ 408.643498][ T1020] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.652851][ T1020] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.672446][ T1020] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.710069][T19560] netlink: 'syz.3.3611': attribute type 13 has an invalid length. [ 408.742124][T19560] netlink: 'syz.3.3611': attribute type 17 has an invalid length. [ 408.776024][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 408.813570][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 408.947230][T19576] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3613'. [ 408.982886][T19576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3613'. [ 409.018404][T19576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3613'. [ 409.287445][T19605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3621'. [ 409.318752][T19607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3620'. [ 409.349400][T19560] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 409.358746][T19560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.453190][T19560] geneve2: left promiscuous mode [ 409.464773][T19560] geneve2: left allmulticast mode [ 409.499215][T19560] gretap1: left allmulticast mode [ 409.512181][T19560] bond2: left allmulticast mode [ 409.521455][T19560] vlan2: left promiscuous mode [ 409.528866][T19560] bridge0: left promiscuous mode [ 409.869415][T19651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 410.028264][T19666] netlink: 'syz.1.3633': attribute type 4 has an invalid length. [ 410.044622][T19668] netlink: 'syz.0.3634': attribute type 1 has an invalid length. [ 410.083637][T19666] netlink: 'syz.1.3633': attribute type 4 has an invalid length. [ 410.091643][T19675] netlink: 'syz.0.3634': attribute type 1 has an invalid length. [ 410.117983][T19675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.131584][T19673] xt_hashlimit: size too large, truncated to 1048576 [ 410.153993][T19672] netlink: 'syz.2.3635': attribute type 13 has an invalid length. [ 410.164005][T19668] macvlan2: entered promiscuous mode [ 410.174254][T19668] macvlan2: entered allmulticast mode [ 410.185429][T19668] bond3: entered allmulticast mode [ 410.199795][T19668] bond3: entered promiscuous mode [ 410.205630][T19668] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 410.218249][T19668] team0: Port device macvlan2 added [ 410.300603][T19675] bond3: (slave ip6gretap1): making interface the new active one [ 410.318425][T19675] ip6gretap1: entered promiscuous mode [ 410.324521][T19675] ip6gretap1: entered allmulticast mode [ 410.334013][T19675] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 410.350161][T19672] netlink: 'syz.2.3635': attribute type 2 has an invalid length. [ 410.608696][T19701] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 410.713563][T19696] lo speed is unknown, defaulting to 1000 [ 411.421788][T19758] lo speed is unknown, defaulting to 1000 [ 411.547842][T19765] lo speed is unknown, defaulting to 1000 [ 411.655980][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.264729][T19807] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 412.667899][T19833] tipc: Started in network mode [ 412.673244][T19833] tipc: Node identity ac14140f, cluster identity 4711 [ 412.683481][T19833] tipc: New replicast peer: 255.255.255.255 [ 412.690641][T19833] tipc: Enabled bearer , priority 26 [ 412.922825][T19847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.929265][T19848] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 412.952705][T19848] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 412.960585][T19847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.091271][T19853] netlink: 'syz.2.3684': attribute type 8 has an invalid length. [ 413.199059][T19860] __nla_validate_parse: 16 callbacks suppressed [ 413.199079][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3686'. [ 413.802707][T19898] tipc: Enabling of bearer rejected, already enabled [ 413.813745][T19245] tipc: Node number set to 2886997007 [ 414.094514][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3700'. [ 414.357350][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'. [ 414.382702][T19930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3705'. [ 414.396792][T19930] veth0_macvtap: Caught tx_queue_len zero misconfig [ 414.417642][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3707'. [ 414.442829][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3707'. [ 414.459772][T19936] netlink: 'syz.3.3707': attribute type 30 has an invalid length. [ 414.592915][T19944] netlink: 'syz.3.3711': attribute type 89 has an invalid length. [ 414.620499][T19939] netlink: 'syz.2.3708': attribute type 7 has an invalid length. [ 414.669401][T19948] syzkaller1: entered promiscuous mode [ 414.683109][T19948] syzkaller1: entered allmulticast mode [ 415.001125][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3717'. [ 415.280359][T19984] netlink: 'syz.0.3720': attribute type 2 has an invalid length. [ 415.575336][T19990] syzkaller1: entered promiscuous mode [ 415.597358][T19990] syzkaller1: entered allmulticast mode [ 415.630988][T20000] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.690505][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 415.766082][T20000] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.870802][T20000] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.961130][T20000] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.121141][T16268] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.165030][T16269] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.209311][T16269] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.240761][T16268] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.450407][T20038] lo speed is unknown, defaulting to 1000 [ 416.550278][T20042] netlink: 'syz.3.3735': attribute type 5 has an invalid length. [ 419.015923][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 433.095978][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.019680][ T1020] bond7: left allmulticast mode [ 435.024717][ T1020] bond7: left promiscuous mode [ 435.029810][ T1020] bridge0: port 2(bond7) entered disabled state [ 435.037442][ T1020] team0: left allmulticast mode [ 435.042334][ T1020] team0: left promiscuous mode [ 435.047894][ T1020] bridge0: port 1(team0) entered disabled state [ 435.059191][ T1020] veth0_to_bond: left allmulticast mode [ 435.064823][ T1020] veth0_to_bond: left promiscuous mode [ 435.070542][ T1020] bridge4: port 1(veth0_to_bond) entered disabled state [ 435.137608][ T1020] bond5 (unregistering): (slave ipip1): Releasing backup interface [ 435.145615][ T1020] ipip1 (unregistering): left promiscuous mode [ 435.162844][ T1020] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 435.196695][ T1020] bond12 (unregistering): (slave bridge5): Releasing backup interface [ 435.204951][ T1020] bridge5 (unregistering): left promiscuous mode [ 435.211812][ T1020] bridge5 (unregistering): left allmulticast mode [ 435.226996][ T1020] bond0 (unregistering): Released all slaves [ 435.235454][ T1020] bond1 (unregistering): Released all slaves [ 435.253132][ T1020] bond2 (unregistering): (slave veth7): Releasing active interface [ 435.262870][ T1020] bond2 (unregistering): (slave veth9): Releasing active interface [ 435.273353][ T1020] bond2 (unregistering): Released all slaves [ 435.283989][ T1020] bond3 (unregistering): Released all slaves [ 435.294962][ T1020] bond4 (unregistering): Released all slaves [ 435.305437][ T1020] bond5 (unregistering): Released all slaves [ 435.317891][ T1020] bond6 (unregistering): Released all slaves [ 435.330773][ T1020] bond7 (unregistering): Released all slaves [ 435.347674][ T1020] bond8 (unregistering): Released all slaves [ 435.357930][ T1020] bond9 (unregistering): Released all slaves [ 435.369332][ T1020] bond10 (unregistering): Released all slaves [ 435.381984][ T1020] bond11 (unregistering): Released all slaves [ 435.397738][ T1020] bond12 (unregistering): Released all slaves [ 435.408239][ T1020] bond13 (unregistering): Released all slaves [ 435.462456][ T1020] hmac(sha224: left promiscuous mode [ 435.489656][ T1020] tipc: Disabling bearer [ 435.495119][ T1020] tipc: Left network mode [ 435.817678][ T1020] hsr_slave_0: left promiscuous mode [ 435.824389][ T1020] hsr_slave_1: left promiscuous mode [ 436.206298][ T1020] IPVS: stop unused estimator thread 0... [ 436.352769][T20075] syzkaller0: entered promiscuous mode [ 436.384194][T20075] syzkaller0: entered allmulticast mode [ 436.436761][T20086] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 436.457658][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3744'. [ 436.469379][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3744'. [ 436.479241][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3744'. [ 436.500656][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3744'. [ 436.518110][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3744'. [ 436.654161][T20103] openvswitch: netlink: IP tunnel TTL not specified. [ 436.713531][T20086] bond3: entered promiscuous mode [ 436.724980][T20107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3748'. [ 436.735232][T20086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.793026][T20086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3743'. [ 436.830715][T20107] No such timeout policy "syz0" [ 436.852625][T20113] geneve0: Caught tx_queue_len zero misconfig [ 437.047878][T20133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3754'. [ 437.068075][T20136] syz_tun: entered allmulticast mode [ 437.078553][T20133] netlink: 'syz.1.3754': attribute type 10 has an invalid length. [ 437.104127][T20133] veth0_macvtap (unregistering): left allmulticast mode [ 437.139121][T20141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.367802][T20148] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3758'. [ 437.378944][T20148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3758'. [ 437.423867][T20152] openvswitch: netlink: IP tunnel dst address not specified [ 437.433690][T20154] openvswitch: netlink: IP tunnel dst address not specified [ 437.511174][T20162] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20004 [ 437.520735][T20159] tipc: Started in network mode [ 437.527402][T20159] tipc: Node identity 7effc78b028f, cluster identity 4711 [ 437.534835][T20159] tipc: Enabled bearer , priority 0 [ 437.542795][T20162] nbd: must specify a size in bytes for the device [ 437.563853][T20159] tipc: Disabling bearer [ 437.633299][T20165] syzkaller1: entered promiscuous mode [ 437.641680][T20165] syzkaller1: entered allmulticast mode [ 437.886402][T20180] batadv_slave_1: entered promiscuous mode [ 438.164619][T20192] lo speed is unknown, defaulting to 1000 [ 438.191611][T20199] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 438.251368][T20202] Bluetooth: MGMT ver 1.23 [ 438.313064][T20206] 8021q: adding VLAN 0 to HW filter on device bond6 [ 438.364984][T20212] syzkaller0: entered promiscuous mode [ 438.384619][T20212] syzkaller0: entered allmulticast mode [ 438.726603][T20176] batadv_slave_1: left promiscuous mode [ 440.014906][T20291] syzkaller0: entered promiscuous mode [ 440.020585][T20291] syzkaller0: entered allmulticast mode [ 440.029013][T20291] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 441.418181][T20219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.549952][T20295] __nla_validate_parse: 3 callbacks suppressed [ 441.549975][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3803'. [ 441.580084][T20300] netlink: 'syz.2.3805': attribute type 13 has an invalid length. [ 441.794036][T20318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3809'. [ 441.806677][T20319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.818160][T20318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3809'. [ 441.901951][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3807'. [ 441.930691][T20330] netlink: 'syz.0.3813': attribute type 6 has an invalid length. [ 442.044205][T20338] tipc: Enabled bearer , priority 26 [ 442.058037][T20338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3817'. [ 442.464973][T20373] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode [ 442.472815][T20373] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode [ 442.749721][T20394] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 442.758797][T20394] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 442.953335][T20412] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3838'. [ 442.995037][T20412] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 443.040353][T20412] bond3 (unregistering): Released all slaves [ 443.108530][T20415] bond3: option lacp_rate: invalid value (128) [ 443.129163][T20415] bond3 (unregistering): Released all slaves [ 443.222876][T20429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.230242][T20429] IPv6: NLM_F_CREATE should be set when creating new route [ 443.237547][T20429] IPv6: NLM_F_CREATE should be set when creating new route [ 443.425377][T20439] can: request_module (can-proto-0) failed. [ 443.578614][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3849'. [ 443.608066][T20396] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 443.628188][T20396] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 443.658263][T20450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.669096][T20450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.685412][T20454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3850'. [ 443.696924][T20396] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 443.707223][T20396] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 443.710122][T20452] syzkaller1: entered promiscuous mode [ 443.724315][T20452] syzkaller1: entered allmulticast mode [ 443.732381][T20452] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 443.767237][T20452] xt_CONNSECMARK: invalid mode: 254 [ 443.775028][T20450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.789262][T20450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.823049][T20452] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3851'. [ 443.875601][T20396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.882181][T20396] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 443.919687][T20450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.937157][T20450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.957256][T20396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.972449][T20396] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 444.004992][T20396] tipc: Resetting bearer [ 444.038227][T20396] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 444.053819][T20396] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 444.083064][T20450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.106121][T20450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.289813][T20476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.302522][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3857'. [ 444.321903][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.341028][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.383663][T16268] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.401015][T16268] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.461097][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.469613][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.493184][T20476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.517078][T20476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.551964][T20216] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.569560][T20216] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.912782][T20521] lo speed is unknown, defaulting to 1000 [ 444.949335][T20524] netlink: 'syz.3.3869': attribute type 2 has an invalid length. [ 445.112939][T20529] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.120495][T20529] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.300890][T20529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.313317][T20529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.367721][T20545] netlink: 'syz.2.3872': attribute type 1 has an invalid length. [ 445.382835][T20545] netlink: 'syz.2.3872': attribute type 1 has an invalid length. [ 445.442952][T20543] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 445.459663][T20543] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 445.477179][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.535489][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.579318][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.647649][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.835578][T20574] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 445.862521][T20574] netlink: 'syz.3.3878': attribute type 2 has an invalid length. [ 446.040846][ T30] audit: type=1804 audit(1782044023.995:10): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3881" name="/newroot/133/memory.events" dev="tmpfs" ino=710 res=1 errno=0 [ 446.113192][ T30] audit: type=1800 audit(1782044024.015:11): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3881" name="memory.events" dev="tmpfs" ino=710 res=0 errno=0 [ 446.190010][ T30] audit: type=1804 audit(1782044024.015:12): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3881" name="/newroot/133/memory.events" dev="tmpfs" ino=710 res=1 errno=0 [ 446.242733][T20594] netlink: 'syz.3.3882': attribute type 13 has an invalid length. [ 446.264187][T20594] netlink: 'syz.3.3882': attribute type 17 has an invalid length. [ 446.409615][T20588] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.417279][T20588] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.808995][T20588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.824541][T20588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.138700][T20594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.155106][T20622] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 447.163560][T20594] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.175147][T20594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.200738][T20594] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.207969][T20594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.230407][T20594] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.237646][T20594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.258699][T20594] veth0_to_team: left promiscuous mode [ 447.275506][T20594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.289986][T20594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.308426][T20594] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 447.344638][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.354186][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.390134][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.419151][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.436292][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.448686][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.485902][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.503984][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.532825][T20632] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 447.587941][T20634] veth0_to_batadv: entered allmulticast mode [ 447.631929][T20637] syzkaller0: entered promiscuous mode [ 447.647003][T20639] netlink: 'syz.2.3893': attribute type 1 has an invalid length. [ 447.656973][T20637] syzkaller0: entered allmulticast mode [ 447.665279][T20639] netlink: 'syz.2.3893': attribute type 2 has an invalid length. [ 447.732659][T20646] netlink: 'syz.0.3894': attribute type 1 has an invalid length. [ 447.742297][T20652] __nla_validate_parse: 12 callbacks suppressed [ 447.742317][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3896'. [ 447.758534][T20652] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 447.799980][T20655] geneve3: entered promiscuous mode [ 447.810741][T20660] xt_policy: output policy not valid in PREROUTING and INPUT [ 447.838378][T20214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.877890][T20214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.911432][T20214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.920513][T20214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.043805][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3902'. [ 448.088408][T20683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 448.107048][T20676] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3902'. [ 448.146537][T20676] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3902'. [ 448.161647][T20676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3902'. [ 448.300698][T20706] netlink: 'syz.2.3910': attribute type 10 has an invalid length. [ 448.312265][T20706] team0: Port device bridge0 added [ 448.359618][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3909'. [ 448.411784][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3909'. [ 448.518314][T20729] veth1_to_bond: Caught tx_queue_len zero misconfig [ 448.555830][T20731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3917'. [ 448.606321][T20733] syzkaller0: entered promiscuous mode [ 448.618709][T20733] syzkaller0: entered allmulticast mode [ 448.844014][T20752] lo speed is unknown, defaulting to 1000 [ 449.287386][T20784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3926'. [ 449.595171][T20791] veth7: entered allmulticast mode [ 449.624592][T20797] netlink: 'syz.4.3929': attribute type 6 has an invalid length. [ 449.632745][T20797] netlink: 'syz.4.3929': attribute type 5 has an invalid length. [ 450.184236][T20840] netlink: 'syz.3.3942': attribute type 8 has an invalid length. [ 450.416765][T20856] tipc: Resetting bearer [ 450.444465][T20862] ip6gre3: entered allmulticast mode [ 450.587890][T20873] bond3: option arp_interval: invalid value (18446744073709551615) [ 450.596546][T20873] bond3: option arp_interval: allowed values 0 - 2147483647 [ 450.605474][T20873] bond3 (unregistering): Released all slaves [ 450.623314][T20875] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 450.631032][T20875] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 450.901189][T20896] netlink: 'syz.2.3958': attribute type 1 has an invalid length. [ 451.138665][T20909] bond2: left promiscuous mode [ 451.571123][T20928] bridge0: port 3(batadv1) entered blocking state [ 451.579734][T20928] bridge0: port 3(batadv1) entered disabled state [ 451.589405][T20928] batadv1: entered allmulticast mode [ 451.605159][T20928] batadv1: entered promiscuous mode [ 451.644335][T20940] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 452.066044][ T48] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 452.075371][ T48] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 452.152903][T20982] geneve2: entered promiscuous mode [ 452.163113][T20982] netlink: 'syz.4.3980': attribute type 8 has an invalid length. [ 452.528290][T20997] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 452.561318][T20997] bond4: (slave bridge2): making interface the new active one [ 452.569874][T20997] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 452.585263][T20998] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 453.212360][T21039] __nla_validate_parse: 74 callbacks suppressed [ 453.212381][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'. [ 453.233280][T21039] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 453.235490][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3993'. [ 453.261716][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3994'. [ 453.270465][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3993'. [ 453.283446][T21041] syzkaller0: entered promiscuous mode [ 453.295958][T21041] syzkaller0: entered allmulticast mode [ 453.303861][T21038] netlink: 58 bytes leftover after parsing attributes in process `syz.3.3993'. [ 453.393337][T21046] team0 (unregistering): Port device team_slave_0 removed [ 453.423051][T21046] team0 (unregistering): Port device team_slave_1 removed [ 453.452463][T21049] netlink: 'syz.2.3997': attribute type 33 has an invalid length. [ 453.567501][T21064] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.609296][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'. [ 453.839499][T21094] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 453.848609][T21094] netlink: 1784 bytes leftover after parsing attributes in process `syz.4.4011'. [ 453.864407][T21089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4009'. [ 453.940389][T21096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4012'. [ 453.957696][T21099] dummy0: Caught tx_queue_len zero misconfig [ 453.992224][T21096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4012'. [ 454.011471][T21096] nbd: nbd64 already in use [ 454.102373][T20196] udevd[20196]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 454.118062][T21106] netlink: 'syz.2.4015': attribute type 1 has an invalid length. [ 454.196207][T21113] syzkaller1: entered promiscuous mode [ 454.220209][T21113] syzkaller1: entered allmulticast mode [ 454.337461][T21122] bond4: option lacp_rate: invalid value (128) [ 454.354966][T21122] bond4 (unregistering): Released all slaves [ 454.429009][T21137] syzkaller1: entered promiscuous mode [ 454.438768][T21137] syzkaller1: entered allmulticast mode [ 454.878026][T21177] netlink: 'syz.0.4037': attribute type 89 has an invalid length. [ 454.902999][T21174] 8021q: VLANs not supported on sit0 [ 454.988542][T10120] IPVS: starting estimator thread 0... [ 455.106231][T21192] IPVS: using max 35 ests per chain, 84000 per kthread [ 455.896588][T21213] syzkaller0: entered promiscuous mode [ 455.902932][T21213] syzkaller0: entered allmulticast mode [ 456.620091][T21264] netlink: 'syz.3.4064': attribute type 1 has an invalid length. [ 456.752019][T21270] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.759580][T21270] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.901162][T21270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.918331][T21270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.047781][T21270] bond3: left allmulticast mode [ 457.052874][T21270] ip6gretap1: left allmulticast mode [ 457.058800][T21270] bond3: left promiscuous mode [ 457.063780][T21270] ip6gretap1: left promiscuous mode [ 457.084241][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.099260][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.111426][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.120988][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.140092][T21238] Set syz1 is full, maxelem 65536 reached [ 457.298341][T21285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.376216][T21285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.447779][T21302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.578999][T21307] lo speed is unknown, defaulting to 1000 [ 458.028360][T21337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.397025][T21356] tap0: tun_chr_ioctl cmd 1074025676 [ 458.404783][T21356] tap0: owner set to 0 [ 458.663945][T21373] __nla_validate_parse: 15 callbacks suppressed [ 458.663961][T21373] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4092'. [ 458.898954][T21393] vlan0: entered promiscuous mode [ 458.988583][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'. [ 459.092596][T21410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4103'. [ 459.428140][T21425] sctp: [Deprecated]: syz.4.4108 (pid 21425) Use of int in maxseg socket option. [ 459.428140][T21425] Use struct sctp_assoc_value instead [ 459.449596][T21425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4108'. [ 459.460172][T21425] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4108'. [ 459.603913][T21435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4112'. [ 459.694052][T21440] bond3: entered promiscuous mode [ 459.699923][T21440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.721845][T21439] bond4: entered promiscuous mode [ 459.727443][T21439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.752787][T21449] syzkaller0: entered promiscuous mode [ 459.759085][T21449] syzkaller0: entered allmulticast mode [ 459.800625][T21451] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4117'. [ 459.811280][T21451] bond_slave_0: invalid flags given to default FDB implementation [ 459.856170][T21454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4118'. [ 459.876824][T21454] bond7 (unregistering): Released all slaves [ 460.023332][T21462] : entered promiscuous mode [ 460.069394][T21465] netlink: 'syz.2.4121': attribute type 39 has an invalid length. [ 460.095183][T21464] syzkaller0: entered promiscuous mode [ 460.101200][T21464] syzkaller0: entered allmulticast mode [ 460.377632][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 460.386719][T21470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4123'. [ 460.397775][T21470] netlink: 'syz.1.4123': attribute type 12 has an invalid length. [ 460.424465][ T1020] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.424574][T21470] netlink: 'syz.1.4123': attribute type 12 has an invalid length. [ 460.443644][ T1020] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.463375][ T1020] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.477361][ T1020] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.570914][T21487] syzkaller0: entered promiscuous mode [ 460.604434][T21487] syzkaller0: entered allmulticast mode [ 460.619776][T21484] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 460.838039][T21513] openvswitch: : Dropping previously announced user features [ 460.922919][T21521] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 461.136526][T21537] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.146571][T21534] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 461.160668][T21534] syzkaller1: linktype set to 780 [ 461.178715][T21534] netlink: 'syz.3.4144': attribute type 1 has an invalid length. [ 461.197373][T21534] netlink: 'syz.3.4144': attribute type 2 has an invalid length. [ 461.242013][T21547] lo speed is unknown, defaulting to 1000 [ 461.299194][T21552] netlink: 'syz.1.4149': attribute type 7 has an invalid length. [ 461.333471][T21552] : entered promiscuous mode [ 461.453381][T21545] lo speed is unknown, defaulting to 1000 [ 462.102618][T21620] netlink: 'syz.3.4163': attribute type 21 has an invalid length. [ 462.143625][T21620] netlink: 'syz.3.4163': attribute type 5 has an invalid length. [ 462.189624][T21620] netlink: 'syz.3.4163': attribute type 6 has an invalid length. [ 462.364672][T21631] tipc: Enabled bearer , priority 0 [ 462.419750][T21636] netlink: 'syz.1.4170': attribute type 4 has an invalid length. [ 462.459145][T21637] syzkaller0: mtu less than device minimum [ 463.332228][T21698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.404584][T21698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.460394][T21698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.530170][T21698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.815373][T21729] __nla_validate_parse: 20 callbacks suppressed [ 463.815419][T21729] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4192'. [ 463.843467][T21732] netlink: 380 bytes leftover after parsing attributes in process `syz.0.4193'. [ 463.863380][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4193'. [ 463.888201][T21732] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4193'. [ 463.921538][T16265] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.970626][T20216] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.017116][T20216] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.048564][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.111700][T21796] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4208'. [ 465.131844][T21798] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.147526][T21796] validate_nla: 6 callbacks suppressed [ 465.147544][T21796] netlink: 'syz.4.4208': attribute type 1 has an invalid length. [ 465.190374][T21796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4208'. [ 465.776909][T21846] x_tables: ip_tables: osf match: only valid for protocol 6 [ 466.066374][T21872] netlink: 'syz.4.4229': attribute type 1 has an invalid length. [ 466.130541][T21872] bond6: entered promiscuous mode [ 466.147689][T21872] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.201340][T21872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4229'. [ 466.221216][T21872] bond6: entered allmulticast mode [ 466.335436][T21879] bond6: (slave bridge1): making interface the new active one [ 466.357112][T21879] bridge1: entered promiscuous mode [ 466.362670][T21879] bridge1: entered allmulticast mode [ 466.370032][T21879] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 466.511135][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4236'. [ 466.525493][T21904] netlink: 'syz.0.4236': attribute type 13 has an invalid length. [ 466.546106][T21904] netlink: 'syz.0.4236': attribute type 17 has an invalid length. [ 466.652077][T21904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.661318][T21904] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.673315][T21904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.702859][T21904] veth1_to_team: left allmulticast mode [ 466.714889][T21904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.726353][T21904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.740592][T21904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.751406][T21904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.765099][T21904] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 466.832439][T21906] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.893794][T21906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.909595][T21906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.966998][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.974210][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.008556][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.015758][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.277582][T21933] lo speed is unknown, defaulting to 1000 [ 467.314243][T21936] bond0: Caught tx_queue_len zero misconfig [ 467.660636][T21963] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4255'. [ 467.714231][T21963] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4255'. [ 468.000289][T21984] netlink: 'syz.4.4263': attribute type 46 has an invalid length. [ 468.118406][T21988] netlink: 'syz.3.4265': attribute type 1 has an invalid length. [ 468.192107][T21999] sctp_setsockopt_maxburst: 23 callbacks suppressed [ 468.192129][T21999] sctp: [Deprecated]: syz.4.4267 (pid 21999) Use of int in max_burst socket option deprecated. [ 468.192129][T21999] Use struct sctp_assoc_value instead [ 468.227794][T21988] bond7: entered promiscuous mode [ 468.233314][T21988] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.404357][T22013] netlink: 'syz.1.4273': attribute type 1 has an invalid length. [ 468.414114][T22008] bond0: (slave wlan0): Opening slave failed [ 468.485046][T22013] bond4: entered promiscuous mode [ 468.491358][T22013] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.503891][T22018] bond4: entered allmulticast mode [ 468.592487][T22013] bond4: (slave bridge3): making interface the new active one [ 468.601709][T22013] bridge3: entered promiscuous mode [ 468.610941][T22013] bridge3: entered allmulticast mode [ 468.618357][T22013] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 468.629942][T22018] netlink: 'syz.1.4273': attribute type 1 has an invalid length. [ 468.921202][T22057] __nla_validate_parse: 4 callbacks suppressed [ 468.921223][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4285'. [ 468.963332][T22062] netlink: 'syz.4.4287': attribute type 1 has an invalid length. [ 468.978425][T22062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4287'. [ 469.070190][T22066] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4288'. [ 469.079622][T22071] netlink: 'syz.4.4290': attribute type 32 has an invalid length. [ 469.090752][T22066] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4288'. [ 469.117795][T22069] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.176909][T22069] bond6: (slave ip6gretap1): making interface the new active one [ 469.195166][T22069] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 469.338261][T22093] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 469.422647][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4296'. [ 469.451096][T22100] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4297'. [ 469.454568][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 469.554788][T22108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4299'. [ 469.582651][T22108] 8021q: adding VLAN 0 to HW filter on device bond8 [ 469.608088][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4299'. [ 469.625163][T22108] bond8 (unregistering): Released all slaves [ 469.671305][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 470.214963][T22145] 8021q: adding VLAN 0 to HW filter on device bond8 [ 470.224355][T22145] bond7: (slave bond8): making interface the new active one [ 470.241249][T22145] bond7: (slave bond8): Enslaving as an active interface with an up link [ 470.286432][T22152] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 470.336047][T22145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 470.511107][T22173] lo speed is unknown, defaulting to 1000 [ 470.768444][T22192] dvmrp0: entered allmulticast mode [ 470.809639][T22198] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 470.845572][T22198] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 470.860488][T22198] bond7 (unregistering): Released all slaves [ 471.113025][T22212] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode [ 471.625847][T22242] tipc: Enabling of bearer rejected, already enabled [ 471.642849][T22242] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 471.871865][T22256] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20000 [ 471.884581][T22257] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20000 [ 472.275625][T22281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.490280][ T5714] IPVS: starting estimator thread 0... [ 472.579642][T22311] lo speed is unknown, defaulting to 1000 [ 472.587049][T22306] IPVS: using max 40 ests per chain, 96000 per kthread [ 472.611839][T22310] xt_hashlimit: size too large, truncated to 1048576 [ 472.733233][T22323] validate_nla: 3 callbacks suppressed [ 472.733254][T22323] netlink: 'syz.2.4357': attribute type 1 has an invalid length. [ 473.121163][T22341] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 473.291203][T22351] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 473.342944][T22348] 8021q: adding VLAN 0 to HW filter on device bond8 [ 473.436145][T22341] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.457474][T22341] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.882452][T22361] tipc: Enabling of bearer rejected, failed to enable media [ 474.029721][T22364] lo: entered promiscuous mode [ 474.047252][T22367] netlink: 'syz.0.4371': attribute type 2 has an invalid length. [ 474.055228][T22364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.358605][T22398] __nla_validate_parse: 19 callbacks suppressed [ 474.358628][T22398] netlink: 13908 bytes leftover after parsing attributes in process `syz.0.4380'. [ 474.393611][T22395] xt_CT: No such helper "syz0" [ 474.405332][T22398] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4380'. [ 474.421818][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 474.433885][T22398] netlink: 'syz.0.4380': attribute type 3 has an invalid length. [ 474.476333][T22407] netlink: 'syz.3.4382': attribute type 2 has an invalid length. [ 474.535849][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4378'. [ 474.578585][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.603153][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.615374][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.627577][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.638498][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.649732][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.660703][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.672165][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.683056][T22407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.730260][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4385'. [ 474.755215][T22422] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.828158][T22425] sctp: [Deprecated]: syz.2.4386 (pid 22425) Use of int in max_burst socket option deprecated. [ 474.828158][T22425] Use struct sctp_assoc_value instead [ 475.268025][T22451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4394'. [ 475.493092][T22470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.561985][T22477] openvswitch: netlink: Flow actions attr not present in new flow. [ 475.577643][T22479] netlink: 'syz.3.4401': attribute type 1 has an invalid length. [ 475.633995][T22479] bond9: entered promiscuous mode [ 475.641808][T22479] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.717252][T22479] bond9: (slave bridge6): making interface the new active one [ 475.744470][T22479] bridge6: entered promiscuous mode [ 475.759114][T22479] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 475.976271][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.050546][T22501] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 494.151789][T22511] netlink: 'syz.0.4411': attribute type 1 has an invalid length. [ 494.229083][T22512] netlink: 'syz.0.4411': attribute type 1 has an invalid length. [ 494.238148][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.240977][T22518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4410'. [ 494.244824][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.260850][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.290183][T22516] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 494.323092][T22516] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 494.356477][T22515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4409'. [ 494.372111][T22516] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 494.411618][T22516] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 494.425371][T22524] netlink: 'syz.2.4412': attribute type 21 has an invalid length. [ 494.446004][T22516] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 494.459835][T22524] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4412'. [ 494.469796][T22525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4413'. [ 494.493095][T22529] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 494.502863][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.524553][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.541505][T22525] netlink: 'syz.3.4413': attribute type 5 has an invalid length. [ 494.551683][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4413'. [ 494.561371][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.569080][T22525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4413'. [ 494.569695][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.586411][T22529] netlink: 'syz.2.4412': attribute type 8 has an invalid length. [ 494.594294][T22529] sch_fq: defrate 0 ignored. [ 494.606762][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.617000][T22534] ip6tnl0: Caught tx_queue_len zero misconfig [ 494.623426][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.641580][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.662431][T22516] xfrm0 speed is unknown, defaulting to 1000 [ 494.734978][T22540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4418'. [ 494.755370][T22540] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4418'. [ 494.785053][T22544] bridge0: entered promiscuous mode [ 494.799126][T22544] bridge0: entered allmulticast mode [ 494.851517][T22548] batadv0: entered promiscuous mode [ 494.865076][T22548] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 494.975295][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4421'. [ 494.997846][T22555] 8021q: adding VLAN 0 to HW filter on device bond10 [ 495.021231][T22555] macvlan4: entered promiscuous mode [ 495.026760][T22555] macvlan4: entered allmulticast mode [ 495.033438][T22555] bond10: entered promiscuous mode [ 495.039525][T22555] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 495.050464][T22555] bond10: left promiscuous mode [ 495.090800][T22560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4422'. [ 495.441723][T22588] xt_hashlimit: size too large, truncated to 1048576 [ 495.556801][T22597] syzkaller1: entered promiscuous mode [ 496.084974][T22627] lo speed is unknown, defaulting to 1000 [ 496.180386][T22639] netlink: 'syz.3.4446': attribute type 1 has an invalid length. [ 496.330490][T22648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.372806][T22648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.580072][T22674] netlink: 'syz.3.4453': attribute type 13 has an invalid length. [ 496.736999][T22678] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 496.751533][T22627] xfrm0 speed is unknown, defaulting to 1000 [ 496.763299][T22648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.773883][T22648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.847012][T22648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.885195][T22648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.973569][T22691] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 497.032568][T22648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.112205][T22648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.204511][T22706] 8021q: adding VLAN 0 to HW filter on device bond11 [ 497.343385][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.366091][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.406597][T22713] netlink: 'syz.3.4461': attribute type 3 has an invalid length. [ 497.420453][ T1020] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.450168][ T1020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.492716][ T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.515389][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.556100][ T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.585237][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.811685][T22721] syzkaller0: entered promiscuous mode [ 497.825923][T22721] syzkaller0: entered allmulticast mode [ 498.063119][T22752] netlink: 'syz.2.4469': attribute type 15 has an invalid length. [ 499.595371][T22781] __nla_validate_parse: 17 callbacks suppressed [ 499.595393][T22781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4473'. [ 500.017522][T22804] block nbd0: server does not support multiple connections per device. [ 500.105041][T22804] block nbd0: shutting down sockets [ 500.451289][T22815] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4481'. [ 500.482772][T22815] validate_nla: 1 callbacks suppressed [ 500.482795][T22815] netlink: 'syz.2.4481': attribute type 2 has an invalid length. [ 500.528346][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4481'. [ 500.565325][T22820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4481'. [ 500.643954][T22820] netlink: 'syz.2.4481': attribute type 12 has an invalid length. [ 500.849721][T22835] xt_TCPMSS: Only works on TCP SYN packets [ 501.537973][T22862] netlink: 'syz.2.4495': attribute type 29 has an invalid length. [ 501.548215][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4495'. [ 501.922750][T22875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.265521][T19242] xfrm0 speed is unknown, defaulting to 1000 [ 502.316243][T22886] netlink: 'syz.4.4500': attribute type 1 has an invalid length. [ 502.344531][T22886] netlink: 'syz.4.4500': attribute type 2 has an invalid length. [ 502.386454][T22887] netlink: 'syz.4.4500': attribute type 1 has an invalid length. [ 502.470955][T20217] tipc: Subscription rejected, illegal request [ 502.503002][T22892] xt_hl: Unknown TTL match mode: 237 [ 502.656465][T22904] syzkaller1: entered promiscuous mode [ 502.681459][T22904] syzkaller1: entered allmulticast mode [ 502.850172][T22907] openvswitch: netlink: Message has 4 unknown bytes. [ 502.897095][T22911] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 503.037313][T22911] bond7: entered promiscuous mode [ 503.050869][T22916] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 503.063649][T22911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.174836][T22920] ipip0: entered promiscuous mode [ 503.199796][T22920] ipip0: entered allmulticast mode [ 503.237668][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4510'. [ 503.260082][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 503.351198][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4511'. [ 503.450862][T22932] netlink: 'syz.2.4512': attribute type 1 has an invalid length. [ 503.493341][T22932] netlink: 'syz.2.4512': attribute type 2 has an invalid length. [ 503.819405][T22954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4518'. [ 503.849645][T22955] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4517'. [ 503.902986][T22955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.056991][T23007] netlink: 'syz.2.4531': attribute type 4 has an invalid length. [ 505.138195][T23015] __nla_validate_parse: 1 callbacks suppressed [ 505.138215][T23015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4533'. [ 505.515364][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4538'. [ 505.532425][T23026] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4537'. [ 505.589280][T23027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4538'. [ 505.857521][T23037] lo speed is unknown, defaulting to 1000 [ 506.209052][T23037] xfrm0 speed is unknown, defaulting to 1000 [ 506.885899][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'. [ 507.093422][T23077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4550'. [ 507.146686][T23077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4550'. [ 508.061897][T23118] netlink: 'syz.3.4560': attribute type 1 has an invalid length. [ 508.889523][T23143] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4567'. [ 509.283469][T23156] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 509.581912][T23176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 509.704058][T23180] netlink: 'syz.4.4577': attribute type 2 has an invalid length. [ 509.742745][T23180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4577'. [ 510.171854][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4581'. [ 510.233269][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4582'. [ 510.286954][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4582'. [ 510.381949][T23207] team0: entered promiscuous mode [ 510.406983][T23207] team0: entered allmulticast mode [ 510.430637][T23207] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.561274][T23210] team1: entered promiscuous mode [ 510.587397][T23210] team1: entered allmulticast mode [ 510.609104][T23210] 8021q: adding VLAN 0 to HW filter on device team1 [ 510.637775][T23220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4587'. [ 510.678443][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 510.768045][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 510.882543][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 510.894232][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 510.904206][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 510.913091][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 510.929738][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 510.951844][T23226] netlink: 'syz.4.4586': attribute type 1 has an invalid length. [ 511.019732][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'. [ 511.032787][T23228] team0: left allmulticast mode [ 511.068677][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4591'. [ 511.119998][T23236] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 511.162780][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4589'. [ 511.299238][T23247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4594'. [ 511.504085][T23247] vlan2: entered promiscuous mode [ 511.548061][T23247] bridge0: entered promiscuous mode [ 511.857753][T23252] bridge8: entered allmulticast mode [ 512.734964][T23279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.901407][T23292] erspan0: entered promiscuous mode [ 512.924164][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4600'. [ 513.030893][T23291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4603'. [ 513.114764][T23302] xt_TCPMSS: Only works on TCP SYN packets [ 513.305589][T23313] validate_nla: 26 callbacks suppressed [ 513.305610][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.440631][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.482404][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.528533][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.581006][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.651024][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.714721][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.758315][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.785503][T23333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.795990][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 513.807279][T23326] lo speed is unknown, defaulting to 1000 [ 513.891559][T23313] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 514.084787][T23337] syzkaller0: entered promiscuous mode [ 514.131475][T23337] syzkaller0: entered allmulticast mode [ 514.199318][T23339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.381838][T23326] xfrm0 speed is unknown, defaulting to 1000 [ 516.128988][T23401] syzkaller0: entered promiscuous mode [ 516.176441][T23401] syzkaller0: entered allmulticast mode [ 518.782599][T23393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.045463][T23429] validate_nla: 51 callbacks suppressed [ 519.045483][T23429] netlink: 'syz.1.4639': attribute type 1 has an invalid length. [ 519.087056][T23435] netlink: 'syz.3.4642': attribute type 1 has an invalid length. [ 519.125597][T23434] netlink: 'syz.3.4642': attribute type 1 has an invalid length. [ 519.133809][T23429] netlink: 'syz.1.4639': attribute type 2 has an invalid length. [ 519.246834][T23441] __nla_validate_parse: 10 callbacks suppressed [ 519.246855][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4644'. [ 519.302194][T23435] bond13: entered promiscuous mode [ 519.332158][T23435] 8021q: adding VLAN 0 to HW filter on device bond13 [ 519.653357][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4646'. [ 520.349078][T23463] tipc: Enabling of bearer rejected, already enabled [ 520.462365][T23470] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4649'. [ 520.544544][T23470] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4649'. [ 520.977733][T23482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4654'. [ 521.133923][T23482] syzkaller0: entered promiscuous mode [ 521.164117][T23482] syzkaller0: entered allmulticast mode [ 521.205015][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'. [ 521.235392][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'. [ 521.246048][T23489] netlink: 'syz.1.4657': attribute type 20 has an invalid length. [ 521.253945][T23489] netlink: 'syz.1.4657': attribute type 21 has an invalid length. [ 521.462741][T23496] tipc: Enabling of bearer rejected, failed to enable media [ 522.460015][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 522.575293][T23534] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4669'. [ 527.004545][ C1] sched: DL replenish lagged too much [ 614.219508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.135597][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 652.142603][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23550/1:b..l [ 652.150643][ C0] rcu: (detected by 0, t=10503 jiffies, g=103637, q=3102 ncpus=2) [ 652.158583][ C0] task:syz.0.4669 state:R running task stack:24632 pid:23550 tgid:23531 ppid:17493 task_flags:0x40054c flags:0x00080000 [ 652.172132][ C0] Call Trace: [ 652.175448][ C0] [ 652.178409][ C0] __schedule+0x17d9/0x56c0 [ 652.183077][ C0] ? __kernel_text_address+0xd/0x30 [ 652.188438][ C0] ? unwind_get_return_address+0x4d/0x90 [ 652.194159][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 652.200405][ C0] ? __pfx___schedule+0x10/0x10 [ 652.205303][ C0] ? stack_trace_save+0xa9/0x100 [ 652.210288][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 652.215714][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.220538][ C0] preempt_schedule_irq+0x4d/0xa0 [ 652.225603][ C0] irqentry_exit+0x14f/0x8f0 [ 652.230318][ C0] ? trace_irq_disable+0x3b/0x140 [ 652.235418][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 652.241467][ C0] RIP: 0010:unwind_next_frame+0x19d8/0x2550 [ 652.247397][ C0] Code: 49 8d 56 40 4c 89 f7 4c 89 c6 e8 33 0e 00 00 84 c0 0f 84 4e 01 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b 44 24 10 0f b6 04 18 <84> c0 0f 85 7b 08 00 00 40 b5 01 8b 44 24 5c 41 39 06 4c 8b 6c 24 [ 652.267042][ C0] RSP: 0018:ffffc90006ca72c0 EFLAGS: 00000202 [ 652.273149][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 652.281155][ C0] RDX: ffffc90006ca73a8 RSI: dffffc0000000000 RDI: ffffc90006ca7c78 [ 652.289173][ C0] RBP: 1ffffffff218cca0 R08: ffffc90006ca7c78 R09: 0000000000000000 [ 652.297180][ C0] R10: ffffc90006ca73b8 R11: fffff52000d94e79 R12: dffffc0000000000 [ 652.305507][ C0] R13: ffffffff90c664ff R14: ffffc90006ca7368 R15: ffffc90006ca73b0 [ 652.313539][ C0] ? do_group_exit+0x22d/0x2f0 [ 652.318381][ C0] ? unwind_next_frame+0x8f/0x2550 [ 652.323567][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 652.329767][ C0] arch_stack_walk+0x11b/0x150 [ 652.334616][ C0] ? get_signal+0x121b/0x12c0 [ 652.339340][ C0] stack_trace_save+0xa9/0x100 [ 652.344149][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 652.349574][ C0] kasan_save_stack+0x3e/0x60 [ 652.354353][ C0] ? kasan_save_stack+0x3e/0x60 [ 652.359257][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 652.364665][ C0] ? call_rcu+0xee/0x8b0 [ 652.368943][ C0] ? kmem_cache_free+0x462/0x650 [ 652.373954][ C0] ? tear_down_vmas+0x312/0x520 [ 652.378864][ C0] ? exit_mmap+0x4ca/0x9f0 [ 652.383321][ C0] ? __mmput+0x118/0x420 [ 652.387599][ C0] ? exit_mm+0x221/0x2d0 [ 652.391879][ C0] ? do_exit+0x6cd/0x2360 [ 652.396247][ C0] ? do_group_exit+0x22d/0x2f0 [ 652.401070][ C0] ? tear_down_vmas+0x312/0x520 [ 652.405961][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 652.411202][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 652.417420][ C0] call_rcu+0xee/0x8b0 [ 652.421537][ C0] ? tear_down_vmas+0x312/0x520 [ 652.426424][ C0] kmem_cache_free+0x462/0x650 [ 652.431230][ C0] tear_down_vmas+0x312/0x520 [ 652.435958][ C0] exit_mmap+0x4ca/0x9f0 [ 652.440250][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 652.445072][ C0] ? __pfx_exit_aio+0x10/0x10 [ 652.449835][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 652.455501][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 652.460779][ C0] __mmput+0x118/0x420 [ 652.464893][ C0] exit_mm+0x221/0x2d0 [ 652.469000][ C0] do_exit+0x6cd/0x2360 [ 652.473190][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.477998][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.482806][ C0] ? __pfx_do_exit+0x10/0x10 [ 652.487436][ C0] ? lock_release+0x4b/0x3c0 [ 652.492120][ C0] ? cgroup1_freezing+0x20/0x350 [ 652.497132][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.501941][ C0] do_group_exit+0x22d/0x2f0 [ 652.506566][ C0] ? trace_irq_enable+0x3b/0x140 [ 652.511557][ C0] get_signal+0x121b/0x12c0 [ 652.516110][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 652.521706][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 652.527916][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.532727][ C0] exit_to_user_mode_loop+0x104/0x730 [ 652.538155][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.542957][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.549062][ C0] do_syscall_64+0x353/0x580 [ 652.553816][ C0] ? trace_irq_disable+0x3b/0x140 [ 652.558899][ C0] ? clear_bhb_loop+0x40/0x90 [ 652.563621][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.569548][ C0] RIP: 0033:0x7feba579ce59 [ 652.573996][ C0] RSP: 002b:00007feba66c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 652.582443][ C0] RAX: fffffffffffffe00 RBX: 00007feba5a16090 RCX: 00007feba579ce59 [ 652.590449][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 652.598452][ C0] RBP: 00007feba5832e6f R08: 0000200000b63fe4 R09: 000000000000001c [ 652.606457][ C0] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000000 [ 652.614468][ C0] R13: 00007feba5a16128 R14: 00007feba5a16090 R15: 00007ffc7c2651e8 [ 652.622488][ C0] [ 652.625545][ C0] rcu: rcu_preempt kthread starved for 5160 jiffies! g103637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 652.636813][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 652.646817][ C0] rcu: RCU grace-period kthread stack dump: [ 652.652734][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 652.666286][ C0] Call Trace: [ 652.669624][ C0] [ 652.672591][ C0] __schedule+0x17d9/0x56c0 [ 652.677139][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.681953][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.686807][ C0] ? __pfx___schedule+0x10/0x10 [ 652.691694][ C0] ? schedule+0x90/0x360 [ 652.695985][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.700788][ C0] ? lock_release+0x4b/0x3c0 [ 652.705430][ C0] schedule+0x164/0x360 [ 652.709633][ C0] schedule_timeout+0x152/0x2c0 [ 652.714720][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 652.720229][ C0] ? __pfx_process_timeout+0x10/0x10 [ 652.725559][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 652.731398][ C0] ? prepare_to_swait_event+0x322/0x350 [ 652.736984][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 652.741882][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 652.747728][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 652.753924][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 652.759249][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 652.764486][ C0] ? trace_irq_enable+0x3b/0x140 [ 652.769466][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 652.774102][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 652.779551][ C0] ? __kthread_parkme+0x71/0x1f0 [ 652.784537][ C0] ? __kthread_parkme+0x196/0x1f0 [ 652.789612][ C0] kthread+0x388/0x470 [ 652.793713][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 652.798960][ C0] ? __pfx_kthread+0x10/0x10 [ 652.803581][ C0] ret_from_fork+0x514/0xb70 [ 652.808205][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 652.813346][ C0] ? __switch_to+0xc89/0x1420 [ 652.818065][ C0] ? __pfx_kthread+0x10/0x10 [ 652.822690][ C0] ret_from_fork_asm+0x1a/0x30 [ 652.827548][ C0] [ 652.830588][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 652.836949][ C0] Sending NMI from CPU 0 to CPUs 1: [ 652.842194][ C1] NMI backtrace for cpu 1 [ 652.842220][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 652.842240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 652.842258][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 652.842385][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 652.842414][ C1] Code: f0 5b 41 5e 5d e9 90 be f9 09 cc e8 ca bd f6 09 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 [ 652.842429][ C1] RSP: 0018:ffffc90000a07fe0 EFLAGS: 00000282 [ 652.842443][ C1] RAX: ffffffff8a50548f RBX: ffffc90000a080a0 RCX: 0000000080000100 [ 652.842457][ C1] RDX: ffffc90000a08001 RSI: ffffffff8a50548f RDI: ffffc90000a080a0 [ 652.842470][ C1] RBP: ffffc90000a08070 R08: ffffc90000a089b0 R09: 0000000000000000 [ 652.842482][ C1] R10: ffffc90000a08038 R11: ffffffff81b10630 R12: ffff88801b3a5d00 [ 652.842495][ C1] R13: 0000000000000000 R14: ffffffff81b10630 R15: ffffc90000a07fe8 [ 652.842508][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 652.842522][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.842534][ C1] CR2: 00007f9c77a7ee9c CR3: 000000002b0fc000 CR4: 00000000003526f0 [ 652.842550][ C1] Call Trace: [ 652.842557][ C1] [ 652.842563][ C1] arch_stack_walk+0x10f/0x150 [ 652.842588][ C1] ? NF_HOOK+0x21f/0x3c0 [ 652.842657][ C1] stack_trace_save+0xa9/0x100 [ 652.842680][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 652.842702][ C1] ? kfree+0x1c5/0x640 [ 652.842722][ C1] ? nft_synproxy_do_eval+0x3d1/0x550 [ 652.842782][ C1] ? nft_do_chain+0x48d/0x1b10 [ 652.842826][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 652.842865][ C1] ? nf_hook_slow+0xc5/0x220 [ 652.842921][ C1] ? NF_HOOK+0x21f/0x3c0 [ 652.842940][ C1] ? ip6_input+0x16a/0x270 [ 652.842959][ C1] ? NF_HOOK+0x336/0x3c0 [ 652.842978][ C1] ? process_backlog+0x774/0x1860 [ 652.843020][ C1] ? net_rx_action+0x61d/0xf50 [ 652.843040][ C1] ? handle_softirqs+0x225/0x840 [ 652.843062][ C1] kasan_save_track+0x3e/0x80 [ 652.843084][ C1] ? kasan_save_track+0x3e/0x80 [ 652.843105][ C1] ? kasan_save_free_info+0x40/0x50 [ 652.843123][ C1] ? __kasan_slab_free+0x5c/0x80 [ 652.843145][ C1] ? kmem_cache_free+0x182/0x650 [ 652.843167][ C1] ? nft_synproxy_eval_v6+0x383/0x530 [ 652.843186][ C1] ? nft_synproxy_do_eval+0x3d1/0x550 [ 652.843206][ C1] ? nft_do_chain+0x48d/0x1b10 [ 652.843226][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 652.843245][ C1] ? nf_hook_slow+0xc5/0x220 [ 652.843289][ C1] ? nft_synproxy_eval_v6+0x383/0x530 [ 652.843309][ C1] kasan_save_free_info+0x40/0x50 [ 652.843327][ C1] __kasan_slab_free+0x5c/0x80 [ 652.843350][ C1] kmem_cache_free+0x182/0x650 [ 652.843376][ C1] nft_synproxy_eval_v6+0x383/0x530 [ 652.843399][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 652.843421][ C1] ? nf_ip_checksum+0x13c/0x510 [ 652.843444][ C1] nft_synproxy_do_eval+0x3d1/0x550 [ 652.843466][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 652.843486][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 652.843509][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.843533][ C1] nft_do_chain+0x48d/0x1b10 [ 652.843553][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 652.843591][ C1] ? trace_irq_enable+0x3b/0x140 [ 652.843621][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 652.843660][ C1] nft_do_chain_inet+0x360/0x4b0 [ 652.843682][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 652.843711][ C1] ? nf_nat_ipv6_local_in+0x157/0x660 [ 652.843759][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 652.843785][ C1] ? NF_HOOK+0x9e/0x3c0 [ 652.843804][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.843822][ C1] ? lock_acquire+0x5f/0x350 [ 652.843847][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 652.843868][ C1] nf_hook_slow+0xc5/0x220 [ 652.843888][ C1] NF_HOOK+0x21f/0x3c0 [ 652.843909][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 652.843941][ C1] ? NF_HOOK+0x9e/0x3c0 [ 652.843961][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 652.843980][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.843998][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 652.844022][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.844041][ C1] ip6_input+0x16a/0x270 [ 652.844069][ C1] ? ip6_input+0x23/0x270 [ 652.844092][ C1] NF_HOOK+0x336/0x3c0 [ 652.844112][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 652.844133][ C1] ? NF_HOOK+0x9e/0x3c0 [ 652.844158][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 652.844180][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 652.844207][ C1] process_backlog+0x774/0x1860 [ 652.844230][ C1] ? process_backlog+0x3c3/0x1860 [ 652.844281][ C1] __napi_poll+0xaa/0x330 [ 652.844302][ C1] net_rx_action+0x61d/0xf50 [ 652.844335][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 652.844369][ C1] handle_softirqs+0x225/0x840 [ 652.844392][ C1] ? do_softirq+0x76/0xd0 [ 652.844416][ C1] ? kernel_fpu_end+0x62/0x80 [ 652.844444][ C1] do_softirq+0x76/0xd0 [ 652.844464][ C1] [ 652.844469][ C1] [ 652.844476][ C1] __local_bh_enable_ip+0xf8/0x130 [ 652.844497][ C1] blake2s_compress+0xfa/0x1c00 [ 652.844547][ C1] ? kasan_save_track+0x4f/0x80 [ 652.844568][ C1] ? kasan_save_track+0x3e/0x80 [ 652.844589][ C1] ? kasan_save_free_info+0x40/0x50 [ 652.844618][ C1] ? __kasan_slab_free+0x5c/0x80 [ 652.844641][ C1] ? kmem_cache_free+0x182/0x650 [ 652.844662][ C1] ? __tcf_kfree_skb_list+0x14b/0x300 [ 652.844713][ C1] ? __dev_queue_xmit+0x2058/0x37f0 [ 652.844750][ C1] ? ip6_output+0x337/0x540 [ 652.844767][ C1] ? udp_tunnel6_xmit_skb+0x6c1/0xd40 [ 652.844831][ C1] ? send6+0x5ce/0x920 [ 652.844855][ C1] ? wg_packet_handshake_send_worker+0x204/0x370 [ 652.844878][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 652.844900][ C1] ? kthread+0x388/0x470 [ 652.844914][ C1] ? ret_from_fork+0x514/0xb70 [ 652.844932][ C1] ? __asan_memset+0x22/0x50 [ 652.844952][ C1] ? kernel_fpu_begin_mask+0x2b8/0x380 [ 652.844975][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 652.844999][ C1] ? kernel_fpu_end+0x62/0x80 [ 652.845019][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845036][ C1] ? kernel_fpu_end+0x62/0x80 [ 652.845056][ C1] ? trace_irq_enable+0x3b/0x140 [ 652.845079][ C1] ? kernel_fpu_end+0x62/0x80 [ 652.845099][ C1] ? kernel_fpu_end+0x62/0x80 [ 652.845119][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 652.845140][ C1] ? blake2s_compress+0x1b4d/0x1c00 [ 652.845168][ C1] blake2s_update+0x140/0x450 [ 652.845194][ C1] hmac+0x1f4/0x3b0 [ 652.845213][ C1] ? __pfx_hmac+0x10/0x10 [ 652.845237][ C1] ? curve25519_generate_public+0x2fed/0x3050 [ 652.845296][ C1] ? __asan_memset+0x22/0x50 [ 652.845318][ C1] message_ephemeral+0x233/0x310 [ 652.845340][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 652.845374][ C1] ? down_read+0x2be/0x330 [ 652.845401][ C1] wg_noise_handshake_create_initiation+0x24f/0x810 [ 652.845424][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 652.845446][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.845466][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845484][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845503][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 652.845525][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845544][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845564][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 652.845589][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845607][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845624][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 652.845649][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845666][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 652.845691][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 652.845716][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 652.845743][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 652.845770][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 652.845794][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.845821][ C1] ? lock_acquire+0x5f/0x350 [ 652.845847][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.845866][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 652.845887][ C1] process_scheduled_works+0xa8e/0x14e0 [ 652.845922][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.845943][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.845966][ C1] ? assign_work+0x3cf/0x5d0 [ 652.845989][ C1] worker_thread+0xa47/0xfb0 [ 652.846024][ C1] kthread+0x388/0x470 [ 652.846039][ C1] ? __pfx_worker_thread+0x10/0x10 [ 652.846060][ C1] ? __pfx_kthread+0x10/0x10 [ 652.846076][ C1] ret_from_fork+0x514/0xb70 [ 652.846093][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 652.846109][ C1] ? __switch_to+0xc89/0x1420 [ 652.846134][ C1] ? __pfx_kthread+0x10/0x10 [ 652.846150][ C1] ret_from_fork_asm+0x1a/0x30 [ 652.846178][ C1]