last executing test programs: 8.848934951s ago: executing program 0 (id=3132): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100040000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x90) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100040000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x90) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) 8.719123239s ago: executing program 0 (id=3133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x104, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x40000000211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010804) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.293956349s ago: executing program 0 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380df1d60c73010000100003ee2ab01f0000b507", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c0002800800030001000000"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}, {0x2, 0x7, 0x1}, {0x5, 0x9, 0x3}, {0x5, 0x2, 0x3}, {0x4, 0x78}, {0xc, 0xa, 0xd302}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x89e0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) socket(0x200000000000011, 0x2, 0x0) 8.15885513s ago: executing program 0 (id=3138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 7.96059993s ago: executing program 0 (id=3140): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40085}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x80000000, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.556677504s ago: executing program 0 (id=3143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r6, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 3.844280816s ago: executing program 1 (id=3174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81, 0x8}}, 0xe8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x800000}, 0x8}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000680)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x2004a001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0x3c, 0xb2, &(0x7f0000000180)="4362fcf141059e2a2f532f5d78c3ca4d8d964c78115a5dafa485c66d6654069fca6ea9b3b107ed43388d6f8735ad66ab786b334e15ba84554bda9ca7", &(0x7f00000003c0)=""/178, 0x2, 0x0, 0xd3, 0x49, &(0x7f0000000580)="abe7c92140176b6d43f327adb0c8d17501c9b5eaf455f7bbb856494f4dffb9e4a7ad9038f1cc94e96bd5ed596ebb1218d3a4767f9595a4a0b4d81eafff305a770467c9e35c7c4802a414576df715ae2e314e843b8d897f49668dc3e392613c230f4e5e65d3202a4c071f5217e6f49624e1cf3ac5ed5624e4b4442676da11ee19bbc3163279c1dc6f506c6ede1ad7f725252229251983b825dcb3c052cce03b32e480858571a2cab5cd1c9e539c52645b1362c18d0b8413615956bcd759bc2dd4eeb5a64f3675d6746ffbb4b92e507324764d59", &(0x7f00000001c0)="4eb3b8e690566cb6f04a72da061c75762a7e1a840c851929197915155cc34076b92a9f6dd9db383926c38f14f8930b8988f9d089894a98c0ba3246180a7d77787a9b508d1fca30efaa", 0x7, 0x0, 0xb}, 0x50) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) 3.391640458s ago: executing program 1 (id=3176): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) read$alg(r2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000380), &(0x7f0000000440)=0x4) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xa9, &(0x7f0000000200)=""/169, 0x41100, 0x0, '\x00', r1, 0x17, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0xe, 0xc}, 0x10, 0x124cb, r3, 0x0, &(0x7f0000000380)=[r5], 0x0, 0x10, 0x6}, 0x94) 2.868241983s ago: executing program 3 (id=3181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x0, 0xc, &(0x7f0000001a80)=ANY=[@ANYBLOB="ab5cb0eff5a54bf00fc15833cb89e5ccafc0d7a23cb7ad6c8a667c8c8bb2b812e74b542bb8249c9428b6a5ed9f8f6ef826e7a63938a8e53b3eebb11c775fb4f52029f7101f5a5f46be1624454b68fcf867168da11278d64fcca824a23b0e23bdb94e251b80d636aa0e69374e435d133d9143fba9bfb8f68e0d64983e4d50300fcfa7ed597f53aaaa63c6386385ad8f33c73280d9d708d0d75bf906cd", @ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db15b5663b0e825d7188b449de71d365395fbe9fd5e9e66a2fde0366ca912cc1744ac0ffdcb8fe0ce553b0a7c793ad14730a1dfa5f9ca6c8665579ac1a27bf89fd08769e1eda0ac905718e33c9daa3937b5fb8b10f2f1c546b8494e1f8f95d0ad6bfa87d2ecabd2d56a275410a41e71342396642059016aaf7e81e32853155e24d3389f6131f2a541ff7be7f8d7b04618021073b79f04e73352bbebf71dfa9eb1d921084b72a7280f8dbbe21f638dd0ae16afe6d1a338282ed804f57376cbf54677a9655f5f019acb63a756b5824d4db61e74db66bd328", @ANYRES8=0x0, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=0x0, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02830002130000002dbd7000ffdbdf2504000309000000000000000200000000000000050000000000000005000600000000000a0000000000000000000000000000000000000000000001fbffffff0000000002000100000000000400050c0000000005000500330000000a00000000000000fe88000000000000000000000000000107000000000000000100080000000000"], 0x98}, 0x1, 0x7}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x967d5ff001e83a6) (async) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x967d5ff001e83a6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x20044044) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0xdcf4d000) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r10}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r10}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f00000006c0)="73dc56d84ee5c1a3ab6b6dd40691944961f69903ee999eaafe25417677750fbec26ac7c0c656210df75e3d8717a95cd6267f5890a358507f4d66a02caf875838b23e8e61a5ecdaccefd4b1a14c22d110128613622d652403b7ab4f763017c3041398b9a032a0729452e6d041a2a2dbc042b9651b168fd958b57c219ecd48c884d4258561288683f630c54e95cbc857ad5a8a11b5ca601b01eb846dc5ab47b440aad72c08353e5c6da5058d22822603909f20c4c6dc15a90df756dc7527ca7f5eef6a9e146c", &(0x7f00000008c0)=""/4096, &(0x7f00000018c0)="d9a7b9310e26dcf2a2aeb740df6670d19af755ac257e6e6c61cd9d9d1c7fb247e7ea6f19b4a15f6c6505c3944f6886b1ff588c675cde3e5b9d319944852f59423442e5172fcc62d9dabdc6a0b6a36f0f36393686cba6e957fb0ae205fa8924ce926e42aededf3fd228ebf8924c7560dfcc53b38ee9ca7db37db7f0191b249982f7be8028cdac2c170bf270aeb14a53c8d7ef082249ef37ff7cb989826cefd1cfca895d33f3f140fc70d1d817bc6a45899519cacdfc8a86783e0606cba1d624cab52801b41aa70bbfeb355abf7ab98ca3cf51cc1a96548a63b6ef55d4a9af9c88f8630a3a3ced24fd6d5590c59401ee4e9c28651f98d8", &(0x7f0000000200)="63bef51bd5fcab7dff3af7e9ad08c334480f0842c2605689c917", 0x1, r10}, 0x38) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3d0000000206050000000000000000fa4136afc801151faa0bf8b25d3300000000001400078008001340000000000800124000000009050001000600000005000500020000000500040003000000090002007379689da5616605db565f8ded307a3100000000110003005c617368"], 0x60}}, 0x0) 2.821751492s ago: executing program 2 (id=3182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x2, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc8, &(0x7f0000000040)=""/200}, 0x94) 2.605100722s ago: executing program 2 (id=3183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond_slave_0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.60472761s ago: executing program 3 (id=3184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b9538000000000300060000000000020000000000000000090000000000000200010000000000000002fcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.396525868s ago: executing program 1 (id=3185): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x46) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2b, 0x80801, 0x1) shutdown(r4, 0x7ffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x200, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x32658) read(r7, 0x0, 0x0) 2.122773561s ago: executing program 2 (id=3186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071109600000000009500000000000000b22a7ce456bbbb66cba726860f716b6317085cd6a9ea4523f1c8d5e9b13cbb6f2682db7561b4f6324539dce5a6a0d84eaed29bddab61b7b0362ad25a5ffbc5fc88"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f00000003c0)=[{0x15, 0x1, 0x3, 0x6000}, {0x60, 0x8, 0xff}, {}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x6a}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80d74d17c6a69a74b2b1cdcb3ffc577a5e4528566631d4f91fdf70a496645a3ba23cdc", @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ff01000000000000"], 0x1fc}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002400000000808"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000280)={0x4, &(0x7f0000000180)=[{0x8, 0x7, 0x1, 0x2}, {0x3, 0xfa, 0x8, 0x3}, {0x62ec, 0x9, 0x4, 0xfffffffb}, {0x12, 0x40, 0x77, 0xf920}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000540)=0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, r8, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000002020102000000000000000002000005240002801400018008000100ffffffff08000200ac1414bb0c0002"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 1.965268197s ago: executing program 3 (id=3187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000003592dd773e9400"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x128, 0x128, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@remote, @local, [0xff, 0xff, 0xff000000], [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 'batadv_slave_0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x29, 0x0, 0x1, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0xd0, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x71bd3f17, 0x6}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x36}, [0xff000000, 0xad6ec7967b6fd43b], [0x0, 0xff, 0xffffffff, 0xff], 'vcan0\x00', 'xfrm0\x00', {}, {}, 0x3b, 0x7, 0x1, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0xf70, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 1.946013738s ago: executing program 4 (id=3188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000aee40389792e77b5307cdb00000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000340)={r2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x74, r5, 0x108, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4126}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008010}, 0x4044000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.793506216s ago: executing program 2 (id=3189): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) socket$inet(0x2, 0x3, 0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0x3}]}}}}}}, 0x3a) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2, 0x3, 0x400000, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffeffff, 0x1, 0x2e6f, 0x9}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x4, 0x0, 0x0, 0x0, "804024"}}) (async) socket$inet_icmp(0x2, 0x2, 0x1) 1.731902858s ago: executing program 4 (id=3190): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 32) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) 1.396974034s ago: executing program 1 (id=3191): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @random}, &(0x7f0000000080)=0x80) bind$isdn(r0, &(0x7f00000000c0)={0x22, 0xf7, 0x1, 0x8, 0x6}, 0x6) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r2, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5f}, @NL80211_ATTR_CSA_IES={0x30, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x800, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0xfff, 0x6, 0xfff, 0x1, 0x4, 0x6970]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2, 0x7f, 0x3, 0x2, 0x2, 0x3, 0x0]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x6, 0x58]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x5}, 0x20008000) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0xceea, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2772}, 0x1c) sendmsg(r0, &(0x7f0000000cc0)={&(0x7f00000003c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)="232da68cc2c77471210d85c60c5eff92417eaff1c13a2ee45bb1eb79601363cb9099622723290e4d7668800650e514a11ead6269d3201bbf60c39326db12f9542a5f72e8", 0x44}, {&(0x7f00000004c0)="5b6923def03e87ce6451a10a6b73d72ae41a2bcc3f9e96d1046c23476e3bba948b6badc3aaae81fbe766a605e713aa8e8507b9cc33e68839c324035581e4a028c0bc3b29dfa26feb1b59f24c93db473661a02603763ff69c15d7fadb0bac2df4e324fc358c1dc5cc373a5a2017c3960319eb2952155ce26961cf6e253380e29eafe3a7c69d69755775bea611bbf006935550d1d43cd6810149be1c72fd35d6f1e87aa991fedd244736db0523e7bc0b28016f261695a708554cafc5148ffbf58e54cef15c87f89816", 0xc8}, {&(0x7f00000005c0)="3f53c7399519fa29ae8b1c46fe8b8d1a044d85e87f2f79d6290fd547fc912a113667f4982b49dcc4c466f23ff1a1edb4e8424df422642f3c5b84d81527cd8f92dd430c6668d3f9bbede3a34ea9d10d52ccf48c102cf944ec66fd0a8323301ed24f0c85a74569910c6078fb5cb13e790827272666a055c7243d74d13d74c935400904e2ab1c69d32b45cd4b5317ccb78c4fe9ddaac365635ff1833e50527da363ee3df863df66733ace85a8f36fb86f2818d16687e9202d7a231bc3527541c2f04dae3d6f66c363855a142979c0913f18c1f665d613dcf9682acf4b50b7a3c6a68723f8b6b24db546843a40a9c036fc7ac076f0a0199bcd", 0xf7}], 0x3, &(0x7f0000000700)=[{0x98, 0x118, 0x9, "34e461163ca4a89490c3a0386831e9155c59d0e8cb60acf546d9171cd8a4c2a5b1f9fc7445e667a26892625e7eb0b922571de11fd45c99f1959b550ebf02f247657415358a9e58d7594afa351f9f0b80d88ae07f81fa42a3e1ea50bc438e2ebaf487ab2f65c7116e4fb3c981f9723694f4bbd11112b05d0ffed0ecdb72fa48422500"}, {0xf0, 0x110, 0x101, "f5aa07858cb11b84541ab8696dc2f7c2c0078fde902f9e8f191054bea1ebd129f78cee4b1436e47c07a3dbd65f740f2c7bf40cf1daf9ae0aa4fc1699441872314f653023ff8d65fc84159419838cac9d3d9c37b302fdde6ac6e7658f9ea1b23351ec99d74aead3a2ff0de1fb911c91840cf3ba04c420114a15343f91a352c01b44c932178b27b4a519000a4e6ab1f459377c6aac2ba424a2e2ad3e04f58a1a0e7ab38d2ba38d72230bafd8449785463abbe123c643f7b47c65ef3d45616a9ebaf8809c346671bd83366ef2f2423989e6d8a09ad2b38f0b9e41412f6e05"}, {0x50, 0x104, 0x1, "3a0e0d007ac500e8ed0b61ddd180967804f04eb1eb84d41ebfef6aa6553d74e0242eaf97213106eb34445d7d01417a95bfd3feebc5bc3ab684d3ec01d3ca"}, {0x108, 0x10d, 0x4, "56d03df6805874afe0d9b8e254df869c36921b4ad315186e7f4819c64bda4e1c54dd6bce034e445ab04f9ce14ca6d375894700019a12f3801dbb186509f28ddfaa9731530d1118707b966fc65023aaedf70bf614e87fe83cd59c8a760282f100fd8bab8d959de53bde1fda914a662ba7592f4a596414567470f2995104ab7dae12c52c01437227c8b3cdcbe5d4be58fb36dbd57df1c2312a7f5a27246ad1fcccc93c2c65fd4ba3166517c632922bab6b73fb35f96abb7ff0b893871a478bdef8cc6e27a6e6e2a4bca6dc779f62d944b0a110627ebff055f211f686ea06fa43d6100754dfbb8ac71238fb87fa925750a5f6b51ce75e81c3"}, {0xf8, 0x0, 0xa6, "3fc773ac022fbe3e1763f10bf48a632deac5f9c7926a240defd789ce305181e478b81c632f6131f64adab7eff2022c11ffe5f15bb56ac9afca08054f0e9e953590d7de92cab1839a2d0fd706f5c3b7d737857c6744f694781f714625c533d669ec18e7eee22ef2e0d1b224bb1bf4224f62bbce8c2302e1c0f3b3f315d612c8e5f667fe5c61f3c03b575828f0a65db1ffff5f044b2d45cac8c0aec777f14fdd082a96d94111d47b3fb49ab8c7bc911711936f44f024ff49306622159c431f04a2f066e1240fdf21d265d18c10d1a6ec7380fc53497455c7c755b5bb37e71f7f6c833428c2b6"}, {0xa8, 0x84, 0x100, "a489462d474b49a6ee7a3ccce1377e964fef9bee8d61b5199223ee908cc93e922935d182406acd4c17ddb70bdd786e8fc8977a5d0a6f155ca0c30da24e11704f1f0d59d70f855fa5e1fce9f5dd37706f7ce732d64a299cadb6cec289c522692191aaa98af75a97d76e8368f7ed1a87142d06d4dbf3d66e3101c625ac616a698536ebfd0651ad3af998fdfe09374800bb31"}, {0x60, 0x6, 0x3ff, "9b10e6f8011050e1107c53bd621a7d85084831526c15649ec0603887feea21df46e9fe3e7f59294ea917c92a9c3bb8bd8fa3bc2005e1d660dd680af76c7bc8ea7933ed4acbf67b8450146cb6"}, {0xd8, 0x29, 0x8, "713d0894933b89798fe3565b410125ebf3e1242c7f249e9c473d623afcf6a1d4e944ad6310d980a5e8375533b390baaa1ade45f53d33d9afcc89593866391018763ee74744eb79b6fbbc7f88d10e8787cf501b669b46a7be51795e18c42fdb9821e94881e69f74543a9bd3ed8d57db68f54b228c5096f250c151aa6230953eacd9493571fbc97978f25a1b054d0ef4983f0001c545bacff6762d46e221a1991b5e3747f815b187f001354947e5ac8d74879a2c7e3962240f377e812ce7c58accc1d47c3d8b"}], 0x5b8}, 0x8810) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) r5 = socket(0xb, 0x800, 0xc) bind$alg(r0, &(0x7f0000000d40)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) recvfrom(r3, &(0x7f0000000dc0)=""/148, 0x94, 0x10001, &(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}}, 0x80) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x3, 0x2, 0xa00, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x80) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000025c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002580)={&(0x7f0000001040)={0x1508, 0x1, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0xdde}, 0x7, 0x30, 0xfff, 0x0, 0x1e, 'syz0\x00', "add55ae7a3be916e15c31c6c53ac0f93bb44f9bc726cd48396a4e26748e197a3", "61cd69ece334b235572813c8ecefef78dbc8231ea87ea597e97da61c97f58e2a", [{0x4ab, 0x5, {0x1, 0x5}}, {0x2, 0xa8, {0x2, 0xc0}}, {0x3, 0x1000, {0x3, 0x1ff}}, {0x800, 0x401, {0x3}}, {0x0, 0x3, {0x2, 0x10}}, {0x0, 0x0, {0x2, 0x4d3e}}, {0x1000, 0x9, {0x7, 0x9}}, {0xf907, 0x8}, {0x8, 0x0, {0x3, 0xff}}, {0x6, 0x7, {0x1, 0x6}}, {0x9, 0x4, {0x3, 0x6}}, {0x0, 0x40, {0x3, 0x4}}, {0x1000, 0x5, {0x2, 0xfc3}}, {0x9, 0x200, {0x2, 0xc}}, {0x2, 0xcf9a, {0x1, 0xe}}, {0x16, 0x0, {0x2, 0x6110505c}}, {0x9, 0xe, {0x1, 0xe}}, {0x7, 0xc, {0x2, 0x8}}, {0x85b, 0x2, {0x1}}, {0xb2, 0x7, {0x2, 0x4}}, {0x9, 0x7fff, {0x2, 0x7ff}}, {0x6, 0x8, {0x0, 0x7}}, {0xf8, 0xc, {0x2, 0x5}}, {0x8, 0x400}, {0x4, 0x6, {0x0, 0x2}}, {0xffff, 0x1ff, {0x3, 0xe0000}}, {0x7, 0x8, {0x1, 0x1}}, {0x2, 0x3, {0x0, 0x5}}, {0x0, 0x380, {0x2, 0xd73}}, {0x18, 0x5, {0x0, 0x6}}, {0x3, 0x4, {0x0, 0x90d9}}, {0x1, 0x6, {0x2, 0x2}}, {0x3, 0x0, {0x1, 0x3}}, {0x1, 0x800, {0x1, 0x94}}, {0x400, 0xff09, {0x2, 0x2}}, {0x1000, 0x1, {0x1, 0x4}}, {0x8, 0x5, {0x0, 0x8}}, {0x9, 0x40, {0x0, 0x1}}, {0x0, 0x9, {0x0, 0x81}}, {0x8, 0x2a8, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0xc, 0x4, 0x4, 0x7, 0x26, 'syz0\x00', "1e52ab98a5f279503f6e3d9479dc9857afe0af4cf68f805e4db790d1b1ff44db", "126e5b4fb383a4f300e282d3b2fcaf09c06cfb29a7685f11b1f0857b0fedbd95", [{0xffff, 0x3, {0x2, 0xffffffff}}, {0x5, 0x400, {0x0, 0xf}}, {0x2, 0x5, {0x3, 0x6}}, {0x6, 0xf87e, {0x1, 0x2}}, {0x6a15, 0xfff, {0x2, 0x4}}, {0x5, 0x10, {0x0, 0x2}}, {0x4, 0x0, {0x3, 0x10000}}, {0x6, 0xf6, {0x2}}, {0x1c4, 0x5, {0x1, 0x3}}, {0xd, 0x8, {0x3, 0x8}}, {0x1ce1, 0x5, {0x3, 0xb}}, {0x8, 0x4, {0x1, 0x8}}, {0xaeb, 0xf, {0x0, 0x3421d83}}, {0x2991, 0x9d, {0x1}}, {0x5a9, 0x0, {0x2, 0x3}}, {0x9, 0x7ff, {0x3, 0x5}}, {0x1, 0x10, {0x1, 0xb78}}, {0x6, 0x0, {0x3, 0x400}}, {0x5, 0x3, {0x2, 0x7fffffff}}, {0x9, 0x3, {0x3, 0xf5}}, {0xfff, 0x58, {0x0, 0x63}}, {0x8, 0x3, {0x1, 0x5}}, {0x0, 0x4, {0x1, 0xfffff368}}, {0x6, 0x4, {0x2, 0x9}}, {0x8, 0xffff, {0x2, 0xe}}, {0x8, 0x2, {0x0, 0x1}}, {0x9, 0x8, {0x1, 0x9}}, {0x2, 0x7, {0x2, 0x7}}, {0x8, 0x8, {0x2, 0x1}}, {0x3, 0x5, {0x3, 0x7fffffff}}, {0x1, 0x8000, {0x0, 0x8}}, {0x6, 0x36a8, {0x0, 0x2}}, {0x7b, 0x5, {0x1, 0x1}}, {0x400, 0x5, {0x3, 0xa}}, {0xc4, 0x8, {0x2, 0xfffffff7}}, {0x74a, 0x0, {0x0, 0x1}}, {0x7c, 0x5, {0x2, 0x6}}, {0x6, 0xc820, {0x0, 0x2}}, {0x1, 0x0, {0x3, 0x7}}, {0x81, 0x4, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x3}, 0x7, 0xd, 0xfff9, 0x8, 0x16, 'syz0\x00', "a8b0b9be359a11d45eec912ef8060897ceffb0f49caf392f36a313139ad19665", "eb6dd435b781866e7336d4046ae35586aa20bf5346a0a6f6a53920eaf6bf23b2", [{0x3, 0x0, {0x1, 0x3}}, {0x5, 0x6, {0x0, 0x1ff}}, {0x1, 0x800, {0x0, 0x3}}, {0xfff7, 0x3, {0x3, 0x3}}, {0x1, 0x101, {0x3, 0x9}}, {0x3, 0xfff, {0x1, 0x9}}, {0x81, 0x4, {0x0, 0x8001}}, {0x6f73, 0x9, {0x0, 0xffffffff}}, {0x1, 0x800, {0x3, 0x3}}, {0x800, 0x29, {0x0, 0x2}}, {0x6c4, 0x9, {0x3, 0x7ff}}, {0x7, 0x7fff, {0x2, 0x2}}, {0x2, 0x1, {0x2, 0x8}}, {0xff, 0xf, {0x2, 0x70}}, {0xf5c, 0x4, {0x1, 0xf}}, {0x0, 0x1ff, {0x2, 0x4}}, {0x76, 0x8000, {0x3, 0xd}}, {0x2, 0xfffe, {0x3, 0x8}}, {0x101, 0x0, {0x2, 0x5d80}}, {0x3, 0x9, {0x2}}, {0xe2, 0x8, {0x1, 0xe}}, {0x8001, 0x9, {0x1, 0x6}}, {0x1, 0x401, {0x3, 0x5}}, {0x8, 0x4, {0x3, 0xffe}}, {0x6, 0x4, {0x3, 0x5}}, {0x7, 0x5, {0x3, 0x21c9}}, {0xcfd, 0x5, {0x0, 0x3ff}}, {0x6, 0x5, {0x3, 0x7654}}, {0x2, 0x9, {0x3}}, {0x3, 0x8, {0x3, 0x2}}, {0x80, 0x28, {0x2, 0x7}}, {0x9, 0x1, {0x0, 0x400}}, {0x19fa, 0x8, {0x3, 0x8}}, {0x6, 0x0, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x1}}, {0x2300, 0x9, {0x2, 0x10}}, {0x3, 0x2, {0x0, 0xffff}}, {0x4, 0x4, {0x0, 0x6}}, {0x100, 0x3, {0x1, 0x3}}, {0x9, 0x1000, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x26, 0x3, 0x6, 0x5, 0x1f, 'syz0\x00', "1875faaa49e5b0fe4b1308fb594dc2a8686360c38a0c2ae77de93cd4f37ec76c", "985a5a706bd53aaa66af6ca1ac049a9e0cd374f305b0a0fba3578b9eb5443a24", [{0x3, 0x2aac, {0x1, 0x5}}, {0x0, 0x2, {0x2, 0xcd}}, {0x1, 0xaf95, {0x3, 0x2}}, {0x5, 0x80, {0x0, 0x7}}, {0x1, 0x6, {0x2, 0x3e9}}, {0x10, 0xd70a, {0x2}}, {0x9, 0x9, {0x1, 0xfffffffc}}, {0x0, 0x1, {0x3, 0xf}}, {0x5, 0x9, {0x3, 0x15b}}, {0x8, 0x0, {0x3}}, {0x4, 0x0, {0x0, 0x9}}, {0x5, 0x3, {0x1, 0x8}}, {0x2, 0x6, {0x1, 0xfffffffe}}, {0x101, 0x7, {0x2, 0x5}}, {0x8, 0x1}, {0x78a, 0x2, {0x1, 0x4}}, {0x6, 0x100, {0x1, 0x8}}, {0x9, 0x9, {0x3, 0x5}}, {0x0, 0xffff, {0x3, 0x9}}, {0x9, 0x1000, {0x2, 0x1e6e}}, {0x1, 0x2, {0x0, 0x4}}, {0x6, 0x2, {0x2, 0x3}}, {0x81f4, 0x401, {0x3, 0xc}}, {0x5, 0xbe, {0x3, 0x1}}, {0x0, 0x0, {0x3, 0x5b2}}, {0x1476, 0x2, {0x2, 0x7}}, {0x5, 0x7, {0x1, 0x7b}}, {0x1ff, 0x5, {0x3, 0x6}}, {0x200, 0x1, {0x2, 0x7}}, {0x8000, 0x3, {0x3, 0x72e2}}, {0x8001, 0x1, {0x2, 0x3}}, {0x101, 0x100, {0x3, 0x3}}, {0x14, 0xb7, {0x2, 0x7}}, {0xff, 0x2, {0x2, 0x8}}, {0x3, 0x5, {0x3, 0x2}}, {0x65db, 0x5, {0x2, 0x1000}}, {0x2a4, 0xf, {0x3}}, {0x5, 0x6, {0x2, 0x52}}, {0x9, 0x8, {0x0, 0x80000001}}, {0x5, 0x401, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{}, 0xfc, 0x2, 0x0, 0xb9, 0x25, 'syz0\x00', "3977cb3803720d6ac74c30e0970c4f3303e13ee60ad7768ebe640fc6836e897c", "73924c689fffe46d2a8865ad41f93dbfc583d6548677e26ba8ad3750ef747793", [{0xe, 0x0, {0x272ac0c5efce5ba6, 0x9}}, {0x3, 0xff, {0x1}}, {0x5d, 0x3, {0x3, 0x7}}, {0xfff7, 0x5, {0x3, 0x1}}, {0x9, 0x6, {0x1, 0xb}}, {0x9, 0x8}, {0x1, 0x7, {0x2, 0x3}}, {0xa2, 0x1, {0x1, 0x4}}, {0xfb1, 0x6a78, {0x2, 0xd1cf}}, {0x9, 0x8, {0x0, 0x52c}}, {0x0, 0xff, {0x2, 0xa}}, {0x3, 0xe000, {0x1, 0xc32}}, {0x1ff, 0x6, {0x2, 0x9}}, {0x3e, 0x6, {0x3, 0xc7}}, {0x5, 0x8, {0x2, 0x5}}, {0xf5c, 0xffc0, {0x2, 0xf53}}, {0xd994, 0x6, {0x3, 0xe5e}}, {0x26, 0xa, {0x1, 0x8c}}, {0x8, 0x6, {0x3, 0x7}}, {0xc, 0xf6a9, {0x1, 0xfffffffc}}, {0x1, 0x7, {0x1, 0x4}}, {0xc03d, 0x1, {0x0, 0x1}}, {0x2, 0xffff, {0x1, 0xf3a}}, {0x9, 0x9, {0x2, 0x2d7d}}, {0x7, 0x2, {0x1, 0x2}}, {0x800, 0x1, {0x0, 0x100}}, {0x80ac, 0xff81, {0x3, 0x2}}, {0x8, 0x6, {0x3, 0x9}}, {0x4, 0xd, {0x2}}, {0x8001, 0x4, {0x2, 0x6}}, {0x8, 0x7, {0x3, 0x7}}, {0x1, 0x101, {0x1}}, {0x9, 0xa, {0x3, 0x4}}, {0x1, 0x10, {0x3, 0x250}}, {0x7, 0xe, {0x1, 0x10}}, {0xe7f, 0x6, {0x0, 0x7}}, {0x0, 0x2, {0x0, 0x2}}, {0xfffc, 0x0, {0x2, 0x93f}}, {0x8, 0x1, {0x1}}, {0x0, 0x3, {0x1, 0x8b7}}]}}}, {{0x254, 0x1, {{0x2, 0x40}, 0x2, 0x9, 0x4, 0x8, 0xc, 'syz1\x00', "006d23746300544851f07591a5f7e4263c5e05c5a33551232cf6fe682a415c90", "2dd321548f342fa520a21d86f2b27d67a4caacc0eaa2b8d0d0dacacafe5b2061", [{0x3781, 0x7, {0x0, 0x1}}, {0xf3c, 0x1, {0x0, 0x7}}, {0x8, 0x1, {0x1, 0x5}}, {0xcea, 0x2, {0x3, 0x3}}, {0x1, 0x200, {0x2, 0x10001}}, {0x1, 0x4, {0x3, 0x9}}, {0x9, 0xfffd, {0x0, 0x5b7}}, {0x94f, 0x6, {0x1, 0xf}}, {0x3ff, 0x76fd, {0x1, 0xa000000}}, {0x6, 0x4, {0x0, 0x8}}, {0x56d3, 0xd, {0x3, 0x7}}, {0x2, 0x2, {0x2, 0x5}}, {0x4, 0x2761, {0x2, 0xa335}}, {0x0, 0xa259, {0x3, 0x6}}, {0xe5d0, 0x6, {0x3}}, {0x1d6, 0x6, {0x2, 0x7}}, {0x4, 0x8d6, {0x2, 0x6}}, {0x7, 0x400, {0x0, 0x6}}, {0x7, 0x9b2, {0x3, 0x1}}, {0x5, 0x5, {0x1, 0x7}}, {0xc94, 0x4, {0x2, 0x1}}, {0x8, 0x5, {0x0, 0x10}}, {0x4, 0x7, {0x3, 0x10}}, {0x7fff, 0x8, {0x3, 0x9}}, {0x1, 0x5, {0x2, 0x2}}, {0x0, 0x9, {0x0, 0x1000}}, {0x7, 0x81, {0x2, 0x3}}, {0x8001, 0x5, {0x1, 0x5}}, {0x8, 0xfff, {0x0, 0xd}}, {0x1, 0x3, {0x2, 0x85}}, {0x2, 0x2, {0x3, 0x5}}, {0xff, 0xd5d, {0x2, 0x8}}, {0x800, 0x81, {0x2, 0x8}}, {0x800, 0x2, {0x1, 0x4}}, {0x9, 0x8, {0x3, 0x800}}, {0x800, 0xe, {0x0, 0xff}}, {0x5, 0x57, {0x0, 0xfd7}}, {0x3, 0x8001, {0x0, 0x5}}, {0x3, 0x9, {0x2, 0xc2}}, {0x6, 0x0, {0x0, 0xfffff6a8}}]}}}, {{0x254, 0x1, {{0x3, 0x10000}, 0x1, 0x7, 0x0, 0x58, 0x22, 'syz1\x00', "da98efca4a02a0f8d83a84d52f6559b341844bb38def5e77fac3618cc946b94b", "30f554f4c980642638162b7428faa5f8db5fd7ed29f43d9f16c203172ace67ee", [{0xf6, 0x2, {0x0, 0xfff}}, {0x3, 0x2, {0x1, 0x4}}, {0x80, 0x3, {0x1, 0x200}}, {0x5, 0xc, {0x2, 0x4}}, {0x6, 0x7e2, {0x2, 0x401}}, {0x0, 0x8, {0x2, 0x5}}, {0x1, 0x33d}, {0x3, 0x1, {0x2, 0x8}}, {0x7, 0xb9, {0x2, 0x9}}, {0x6, 0x9, {0x1, 0xd}}, {0x9dc5, 0xd14f, {0x1, 0x8}}, {0x8, 0x7, {0x3, 0x1}}, {0x1ff, 0x1, {0x2, 0xfffffffc}}, {0x7, 0x1000, {0x6}}, {0x8714, 0x2ed, {0x2, 0x6}}, {0x3, 0x40e, {0x0, 0x6}}, {0x8, 0xefbc, {0x0, 0xc5}}, {0x0, 0xfff, {0x3, 0x8}}, {0x101, 0xbabb, {0x2, 0x9}}, {0x0, 0x7, {0x5ce2437f1d873cd1, 0x3}}, {0x7fff, 0x0, {0x2, 0x6fe6}}, {0x3, 0x9, {0x0, 0x1}}, {0x2, 0x1ff, {0x3, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x3}}, {0x7, 0x7ff, {0x3, 0x88b}}, {0xd842, 0x28f7, {0x2, 0x8001}}, {0x6, 0x1, {0x0, 0x3}}, {0x187, 0x1, {0x2, 0x6}}, {0x6, 0xfffd, {0x3, 0x1}}, {0x1c, 0xffff, {0x1, 0xffff0001}}, {0x1, 0x1000, {0x3, 0x8a1c}}, {0x5, 0x3, {0x0, 0x49e345aa}}, {0x8, 0x0, {0x1, 0x1}}, {0x7, 0x4, {0x3, 0xd}}, {0x3, 0x3, {0x0, 0x3}}, {0x2, 0x4, {0x3, 0x3}}, {0xa0cb, 0x8, {0x3, 0x1}}, {0x101, 0x1, {0x3, 0x4}}, {0x9, 0xe, {0x0, 0x9}}, {0x7, 0x8, {0x1, 0x68}}]}}}, {{0x254, 0x1, {{0x2}, 0x8, 0x5c, 0x5, 0xa0ab, 0x1d, 'syz1\x00', "63e4e5a81e486f597483425be8d8e55b1050a17b1af05ad27de24967a0f69613", "f127472f221bcfbf59a3c5e1b0bbf31901ea16932d7d09ae8a97b924d33b9c59", [{0x8, 0x3, {0x0, 0x5}}, {0x7, 0x4, {0x3, 0x40}}, {0xf7, 0xc4, {0x3, 0x407}}, {0xe41a, 0x200, {0x0, 0x7}}, {0x2, 0x869, {0x2, 0x698b}}, {0x7, 0x0, {0x3, 0xaa4f}}, {0xd, 0x4, {0x0, 0xd}}, {0x81, 0x2, {0x1, 0x74}}, {0x1, 0xe13, {0x0, 0x3}}, {0x4, 0xff, {0x1, 0x80000000}}, {0x9, 0xc, {0x1, 0x5a}}, {0x7, 0x4, {0x2, 0x1dfe}}, {0x10, 0x3, {0x1, 0x1ff}}, {0xc329, 0xfc2, {0x2}}, {0x7, 0x1, {0x1, 0x8}}, {0x9, 0xd, {0x0, 0x10000}}, {0x8, 0x0, {0x2, 0x94}}, {0x0, 0x4, {0x0, 0x3}}, {0x80, 0x6, {0x1, 0xa10f}}, {0xe, 0x200, {0x3, 0xffffffff}}, {0x2, 0x65, {0x3}}, {0x7, 0x3, {0x2, 0x1}}, {0xb, 0x1cb, {0x1, 0x2}}, {0x8, 0x2, {0x0, 0x9}}, {0x7d, 0x6, {0x3, 0x80}}, {0x1, 0xf, {0x3, 0xd}}, {0x3, 0x8001}, {0x0, 0x4, {0x2, 0x2}}, {0x7fff, 0x9, {0x0, 0x9}}, {0xe, 0x8001, {0x0, 0x401}}, {0x1, 0x7, {0x3, 0xfe42}}, {0x80, 0xe5, {0x0, 0x401}}, {0x800, 0x4c4, {0x0, 0x8}}, {0xc40, 0x330b, {0x3, 0x86}}, {0x3, 0xfffc, {0x3, 0x9}}, {0xfffa, 0x0, {0x3, 0x800}}, {0x8ad, 0x5, {0x1, 0x7}}, {0x7, 0xf000, {0x1, 0xc}}, {0x3, 0x7}, {0x0, 0xfff, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0xa1}, 0x5, 0xe1, 0x6, 0x0, 0xd, 'syz1\x00', "98de456424ad38105f63359f47796eac86d2b08b0f413cf1bfc4d737dec1a86b", "998875d5d68cd971d5100a7201c5f475f63c30fc44067e65398a753a04b4819a", [{0x53a, 0x308, {0x3, 0x5}}, {0x1, 0x6, {0x2, 0x8}}, {0xaadc, 0x1, {0x1}}, {0x6ee, 0x4ccc, {0x0, 0x1}}, {0x6, 0x6fc, {0x1, 0xf}}, {0xaf1, 0x60, {0x2, 0xac8}}, {0x8d, 0x7ff, {0x3, 0x8}}, {0x1, 0x3, {0x1, 0x4}}, {0xf03, 0x100, {0x0, 0x7}}, {0x80, 0x9, {0x0, 0x9}}, {0x98, 0x1, {0x0, 0x6}}, {0x80, 0xe, {0x3, 0x53a}}, {0x2, 0x7fff, {0x3, 0x63}}, {0x4, 0xe68, {0x2, 0x2}}, {0xfff8, 0x1, {0x1, 0x2}}, {0x9, 0x0, {0x0, 0x324}}, {0xfffc, 0x7, {0x1, 0x8}}, {0xfffd, 0x4, {0x0, 0x6}}, {0x4, 0x1, {0x2, 0x5}}, {0xbf2, 0xfc01, {0x0, 0x6}}, {0x7, 0x800, {0x1, 0x4}}, {0x401, 0xfff2, {0x0, 0x5}}, {0x0, 0x3, {0x1, 0x400}}, {0x7, 0xce5, {0x1, 0x3ff}}, {0x1, 0xfffc, {0x2, 0x6}}, {0x7f, 0x2, {0x2, 0xffff}}, {0x82, 0xec, {0x3, 0x7}}, {0x9, 0xffff, {0x1, 0xe3}}, {0x1000, 0xffff, {0x2, 0x7fffffff}}, {0x2, 0x7, {0x3, 0xc9}}, {0x9, 0x100, {0x0, 0x4}}, {0x8, 0x5acd, {0x3, 0x8}}, {0x7, 0x85, {0x0, 0x529}}, {0x40, 0x129e, {0x3, 0x80}}, {0x4, 0x8, {0x2, 0x3}}, {0x5c05, 0xa6d, {0x2, 0x5}}, {0x5, 0x8000, {0x3, 0x9}}, {0x9, 0x4, {0x2, 0x8c}}, {0xe, 0x3de7}, {0x81, 0x401, {0x2, 0x90e}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x20040858}, 0x0) socket$inet(0x2, 0x4, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002680)={'dvmrp0\x00', &(0x7f0000002600)=@ethtool_regs={0x4, 0x101, 0x61, "521c1e5eaa4b85a851d4ed2ba2cdca998909a6b92f5eafe4c2b6ca07865d513e7f15fcc926148291fd1fcca2a45293cc78b6c3cd76ff7bb407bcf2e633777ac31bcb8bffbe8b02f51fc14a5f91f505942cbe39a0f2aa1e3e0ce6ba514ee2e3d1d9"}}) bind$inet6(r0, &(0x7f00000026c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r5) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4010) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000002880), &(0x7f00000028c0)=0x4) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x5c, r7, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x60}, @NL80211_ATTR_PMK={0x14, 0xfe, "35fa40d2400e013c108e66cc4a7ceb73"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_SSID={0xe, 0x34, @random="f2d7b747e90f0ae307fc"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) bind$netlink(r5, &(0x7f0000002a40)={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc1, 0x74}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002bc0), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x3c, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5f343a8f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x200488c0) shutdown(r1, 0x1) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000002cc0)={0x77359400}, 0x10) 1.328729993s ago: executing program 4 (id=3192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.263277889s ago: executing program 4 (id=3193): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x2, 0xa, 0xf, 0x2, 0x0, 0x5, 0x7ff}}], 0x30, 0x20000001}, 0x20008000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x67, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x6}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$6lowpan_control(r1, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 1.208302684s ago: executing program 2 (id=3194): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x3}, &(0x7f0000000140)=0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000086ce0e44222e08004510001c00260000070f000000000001e000000111fe907864010102"], 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x8, 0x5, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x9, 0x3}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x5, 0x226, 0x9, 0x2, 0x86aa, 0x100000001, 0x31e8, 0xab2, 0x401, 0x1, 0xb078, 0x7fffffff, 0x1]}, &(0x7f0000000340)=0x100) 844.217133ms ago: executing program 1 (id=3195): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x201, 0x40, 0x8, r2}, &(0x7f00000000c0)=0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xb, 0x1, 0x0, r3}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xffb, &(0x7f00000004c0)=""/4091}, 0x94) 835.657006ms ago: executing program 2 (id=3196): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x3) unshare(0x12000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x18da, 0x1, [0x8]}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/150, 0x96, 0x0, 0x5}) 806.166039ms ago: executing program 1 (id=3197): unshare(0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x8095) r1 = epoll_create1(0x80000) sendfile(r0, r1, &(0x7f00000000c0), 0x9) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x1407, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x88840}, 0x20000844) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r3}, &(0x7f0000000b80), &(0x7f0000000bc0)='%-5lx \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x21, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x0, 0x0, 0x400}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) 299.129945ms ago: executing program 3 (id=3198): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000005c0)={0xf84, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="44400000100003042bbd88000000000000000400", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="a9efd109aadf7350bf3f403c3d4b77c8325a19eeacb92a191c656b434563"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 140.229198ms ago: executing program 4 (id=3199): openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100000000000000003e0a00000a28000000000a050000000000000000000700000a0900010073797a3000000000080002400000000228000000000a010800000000000000000700000a08000240000af4000900010073797a30"], 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x40c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000038000880340000800600098024000100975c9d81c962c8209ee781254b899f8ed925ae9f0923bcdd454d6153e0cf691c060005000600000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e140002007767300000000000000000000000000092227d4e578f519db3f51bcf8db38d984eacafbf7d5026d73d7aafe1a9a1871e6dd4a309590a1e41a4fee348cd76e0be05e9850e3e81421f8b265712497e1cbeaba270ce342a56ce70eaa8f626ed8d24952a82645b30b8c123b4f396c6e37b57b1e660a1352621ba9459af7c0ac0be684a090a79c98bd378ab7c78e6b608"], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xc5}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x2a}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xc5}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="08000500000000001400020077673200"/28, @ANYRES8=r3, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES16=r4, @ANYRES16=r4], 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x40040) ppoll(&(0x7f0000000140)=[{r0, 0x41}], 0x1, &(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x36}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="28000e0080000000ffffffffffff06021100000008021100000000000000a98e1a369bbf5a4b3a00000000000064000100080026006c09000008000c006400000008000d00000000000a0034dc997fc1703047cd9ba9ad6c783c250ce7082521b25d36adef10917da5cbe9ce1640cb47ac095ac07b98e8a8"], 0x68}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r11], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='neigh_update\x00', r13}, 0x18) sendto$inet6(r14, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000000, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$netlink(0x10, 0x3, 0x4) 139.604557ms ago: executing program 3 (id=3200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x22030f00) (async) socket(0x10, 0x3, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES8=r0], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x20044001) (async) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f00000000c0)) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_emit_ethernet(0x33c, &(0x7f0000000c00)=ANY=[@ANYBLOB="f7a7cd00000000000000000086dd66d2359503062f01fe88000000000000000000000000000120010000000000000000000000000000000b0000000000000502ffff05020008040105010400000000c91000000000000000000000000000000000000100050200050730000000010a0206000800000000000000030000000000000006000000000000000800000000000000fdffffffffffffff000000002f0200000000000000010005020005050005020004010300000000010000000088000201000000002106000300000000fe80000000000000000000000000002afe8000000000000000008f48f270003bfe8000000000000000000000000000190420880b00560002000600049c9912aa8dbf644eaf7e9c4e8b51b8c424b4c3e1a780765e412c4a8ba04e058e604e98d1bebea1754e3ad605ffe93be57a90fe9e176199700f63da6e80d4b850f95d426654fc406a724f84067e74a71f247971be7d990c000800c23c2c0b360219277a9b175572a61da95f089472a09e92dcfb3f236875cf5c9e93c4b8994620a75ff286ccba1ff352c2c5fd4a22f5ef1d82e4cdc3263f786d61efaa6661e9c1e84cc4e88adda0ad58fe165025b7f3c1dafa7878e45943faf47bf094394c88505e8fb734ea39857a06ae2662120c48a615a2dd61ff578c4a692c8e3f92f51838987cd50339cf10f51c03f993663676346d6930f2a8de77e89a51db08ddb50ee3957f03a48bd850561d984ea919b5425d99424dfdf325485782b5d850a9e2cd439c8c22a4298fc6458c96827c35fc0c0086dd000846c3c1b4d27b5cf35df29d46ac3e94000000fffffffb080022eb000000042a8052040200000000000fda0003f9120800655800000004444dff6004efdb062de6f231c28e713f2f9bc401c2cf89a6cd03ab670655de1cb71fba26d12739b281c73e5339e9b8035bed7825ea7dffb5cf32729db0f1ea8adcbfd884428c36472aee10587e3d305113aaa783336ab702e669d1f9a3570ebe364f31ecf57533c858defe1518506b8e06811c56ebf52bdae3fd9082c5cefc5904319a7f9eb99f1613a5e0defd0a662dda8aa5cfaaf44a6b5e40a99b74c7a330b343304960043ea476aacfe8ee2f48ab4b5bb4e067e5b88700"/828], 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @loopback}}}}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r9, 0x7800, 0x1, 0x4, 0xe1b5, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x2, 0xea, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ssrr={0x89, 0x7, 0x2f, [@multicast2]}]}}}}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8032, r3, 0xc72f9000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 30.237682ms ago: executing program 3 (id=3201): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@gettaction={0xa4, 0x32, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x50de}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x29d13d5af140f602}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xa4}}, 0x0) (async) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) 0s ago: executing program 4 (id=3202): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) (async) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) recvmmsg(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400008000", @ANYRES16=r2, @ANYBLOB="100028bd7000fcdbdf256b00000008000300", @ANYRES32=r12, @ANYBLOB="0c00990003000000730000000a0006000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYRES16=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x4) write(r14, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27) (async) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x1004c014) kernel console output (not intermixed with test programs): etlink: 'syz.0.1368': attribute type 3 has an invalid length. [ 540.876151][T11396] netlink: 'syz.0.1368': attribute type 3 has an invalid length. [ 540.885261][T11399] syzkaller0: delete flow: hash 880804140 index 1 [ 541.099013][T11425] netlink: 'syz.1.1373': attribute type 6 has an invalid length. [ 541.114680][T11425] netlink: 'syz.1.1373': attribute type 6 has an invalid length. [ 541.401562][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 542.490527][T11433] wg1 speed is unknown, defaulting to 1000 [ 542.687533][T11440] macsec1: entered promiscuous mode [ 542.704017][T11440] dummy0: entered promiscuous mode [ 542.709681][T11440] macsec1: entered allmulticast mode [ 542.731635][T11440] dummy0: entered allmulticast mode [ 542.743963][T11440] dummy0: left allmulticast mode [ 542.753296][T11440] dummy0: left promiscuous mode [ 542.790788][T11441] macsec1: entered promiscuous mode [ 542.797744][T11441] dummy0: entered promiscuous mode [ 542.805637][T11441] macsec1: entered allmulticast mode [ 542.815956][T11441] dummy0: entered allmulticast mode [ 542.825806][T11441] dummy0: left allmulticast mode [ 542.830776][T11441] dummy0: left promiscuous mode [ 543.429910][T11486] __nla_validate_parse: 16 callbacks suppressed [ 543.430046][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1392'. [ 543.632282][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 543.641592][T11492] openvswitch: netlink: Message has 8 unknown bytes. [ 543.955333][T11518] tipc: Enabling of bearer rejected, failed to enable media [ 544.081906][T11521] tipc: Enabled bearer , priority 0 [ 544.103651][T11521] syzkaller0: entered promiscuous mode [ 544.113481][T11521] syzkaller0: entered allmulticast mode [ 544.154461][T11521] tipc: Resetting bearer [ 544.174678][T11521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1405'. [ 544.187740][T11520] tipc: Resetting bearer [ 544.257438][T11520] tipc: Disabling bearer [ 544.444635][T11542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.544033][T11545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 544.563700][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1414'. [ 544.583278][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1414'. [ 544.592746][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1414'. [ 544.603095][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1414'. [ 544.655044][T11552] wg1 speed is unknown, defaulting to 1000 [ 544.661103][T11556] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 545.084994][ T9692] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 545.145805][T11570] wg1 speed is unknown, defaulting to 1000 [ 545.185169][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 545.200548][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1420'. [ 545.768806][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 546.364042][T11631] netlink: 'syz.4.1436': attribute type 12 has an invalid length. [ 546.381072][T11631] netlink: 'syz.4.1436': attribute type 4 has an invalid length. [ 546.417237][T11634] syz_tun: entered allmulticast mode [ 546.438219][T11634] x_tables: duplicate entry at hook 2 [ 546.499835][T11639] tipc: Enabled bearer , priority 0 [ 546.523883][T11639] syzkaller0: entered promiscuous mode [ 546.529531][T11639] syzkaller0: entered allmulticast mode [ 546.607061][T11648] netlink: 'syz.2.1439': attribute type 13 has an invalid length. [ 547.345400][T11639] tipc: Resetting bearer [ 547.351700][T11633] syz_tun: left allmulticast mode [ 547.390553][T11638] tipc: Resetting bearer [ 547.433367][T11638] tipc: Disabling bearer [ 547.634005][T11668] wg1 speed is unknown, defaulting to 1000 [ 547.720103][T11671] wg1 speed is unknown, defaulting to 1000 [ 547.830534][T11679] netlink: 'syz.0.1450': attribute type 32 has an invalid length. [ 548.239884][T11704] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 548.383962][T11704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 548.429431][T11711] vlan4: entered allmulticast mode [ 548.435571][T11711] bond5: entered allmulticast mode [ 548.452206][T11704] bond5: (slave gretap1): making interface the new active one [ 548.460221][T11704] gretap1: entered allmulticast mode [ 548.471576][T11704] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 548.641687][T11728] __nla_validate_parse: 23 callbacks suppressed [ 548.641705][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 548.718595][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 548.902554][T11733] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1462'. [ 548.919711][T11750] netlink: 'syz.0.1465': attribute type 10 has an invalid length. [ 548.957388][T11753] netlink: 'syz.3.1466': attribute type 29 has an invalid length. [ 548.966471][T11753] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 549.031010][T11756] netlink: 'syz.3.1466': attribute type 29 has an invalid length. [ 549.380342][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1463'. [ 549.505156][T11764] syz_tun: entered allmulticast mode [ 549.527235][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1470'. [ 549.753950][T11770] tipc: New replicast peer: 255.255.255.255 [ 549.760812][T11770] tipc: Enabled bearer , priority 10 [ 549.822454][T11790] syzkaller0: entered promiscuous mode [ 549.841801][T11790] syzkaller0: entered allmulticast mode [ 549.854474][T11770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.297212][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 550.321850][T11763] syz_tun: left allmulticast mode [ 550.409064][T11828] vlan2: entered allmulticast mode [ 550.420340][T11828] bridge_slave_0: entered allmulticast mode [ 550.732470][T11841] syzkaller0: entered promiscuous mode [ 550.738144][T11841] syzkaller0: entered allmulticast mode [ 550.863835][T11856] netlink: 'syz.4.1491': attribute type 2 has an invalid length. [ 550.917312][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.958773][ T5896] tipc: Node number set to 2672117216 [ 550.975275][T11856] : entered promiscuous mode [ 551.695607][T11887] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1500'. [ 551.717249][T11885] syzkaller0: entered promiscuous mode [ 551.739269][T11885] syzkaller0: entered allmulticast mode [ 551.819040][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1503'. [ 551.858310][T11900] vlan5: entered promiscuous mode [ 551.871724][T11900] gretap0: entered promiscuous mode [ 552.043638][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1505'. [ 552.091840][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 552.159778][T11914] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 552.209211][T11914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.254281][T11914] bond6: entered promiscuous mode [ 553.780995][T11940] batman_adv: batadv0: Interface deactivated: macsec1 [ 553.842930][T11939] geneve2: entered promiscuous mode [ 553.873924][ T9695] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 553.899890][ T9695] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 553.928571][ T9695] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 553.960378][ T9695] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 554.055401][T11961] __nla_validate_parse: 1 callbacks suppressed [ 554.055420][T11961] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1520'. [ 554.076799][T11969] netlink: 'syz.0.1517': attribute type 4 has an invalid length. [ 554.186102][T11978] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1522'. [ 554.195730][T11978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1522'. [ 554.265014][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 554.900427][T12016] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1535'. [ 555.078137][T12027] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1538'. [ 555.107297][T12027] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 555.330933][ T11] block nbd3: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 210 seconds [ 555.345710][ T11] block nbd3: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 210 seconds [ 555.356976][ T11] block nbd3: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 210 seconds [ 555.368215][ T11] block nbd3: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 210 seconds [ 555.542805][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 556.253570][T12072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1550'. [ 556.254247][T12076] wg1 speed is unknown, defaulting to 1000 [ 556.503096][T12094] bond0: Caught tx_queue_len zero misconfig [ 556.593214][T12098] netlink: 'syz.4.1557': attribute type 10 has an invalid length. [ 556.698079][T12098] team0: Port device dummy0 added [ 556.919942][T12118] bond0: (slave rose0): Enslaving as an active interface with an up link [ 556.920130][T12120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1563'. [ 557.069846][T12130] tipc: Enabled bearer , priority 0 [ 557.078739][T12124] syzkaller0: entered promiscuous mode [ 557.088076][T12124] syzkaller0: entered allmulticast mode [ 557.134706][T12124] tipc: Resetting bearer [ 557.182369][T12124] bridge0: entered promiscuous mode [ 557.200733][T12122] tipc: Resetting bearer [ 557.258672][T12122] tipc: Disabling bearer [ 557.585169][T12158] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1574'. [ 558.024409][T12168] syzkaller0: entered promiscuous mode [ 558.029927][T12168] syzkaller0: entered allmulticast mode [ 558.253169][T12178] Unsupported ieee802154 address type: 0 [ 558.509189][T12185] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 558.660311][T12197] xt_hashlimit: invalid rate [ 559.088212][T12231] __nla_validate_parse: 6 callbacks suppressed [ 559.088229][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 559.113237][T12234] xt_limit: Overflow, try lower: 271964/0 [ 559.120195][T12234] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1592'. [ 559.148443][T12234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'. [ 559.274312][T12239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1595'. [ 559.634048][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 559.653401][T12259] netlink: 'syz.3.1600': attribute type 21 has an invalid length. [ 559.671789][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 559.743243][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 559.752570][T12259] netlink: 'syz.3.1600': attribute type 21 has an invalid length. [ 559.761175][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 559.965298][T12275] netlink: 'syz.1.1604': attribute type 2 has an invalid length. [ 559.973770][T12275] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 560.005306][T12275] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 560.082223][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 560.498514][T12300] wg1 speed is unknown, defaulting to 1000 [ 560.614367][T12305] netlink: 'syz.2.1612': attribute type 11 has an invalid length. [ 561.223843][T12337] netlink: 'syz.3.1620': attribute type 83 has an invalid length. [ 561.261572][T12330] wg1 speed is unknown, defaulting to 1000 [ 561.512925][T12352] IPVS: length: 132 != 8 [ 561.538840][T12353] pimreg: entered allmulticast mode [ 561.560383][T12353] pimreg: left allmulticast mode [ 561.839112][T12364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1628'. [ 561.878559][T12368] tipc: Enabled bearer , priority 0 [ 561.891940][T12368] syzkaller0: entered promiscuous mode [ 561.897561][T12368] syzkaller0: entered allmulticast mode [ 561.915043][T12373] bond0: Caught tx_queue_len zero misconfig [ 561.933681][T12373] netlink: 'syz.4.1631': attribute type 2 has an invalid length. [ 561.955085][T12368] tipc: Resetting bearer [ 561.975840][T12367] tipc: Resetting bearer [ 562.030254][T12367] tipc: Disabling bearer [ 562.067606][T12373] !: entered promiscuous mode [ 562.305214][T12395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.880547][T12418] wg1 speed is unknown, defaulting to 1000 [ 562.889128][T12422] wg1 speed is unknown, defaulting to 1000 [ 563.404373][T12433] wg1 speed is unknown, defaulting to 1000 [ 563.510233][T12441] syzkaller1: entered promiscuous mode [ 563.521824][T12441] syzkaller1: entered allmulticast mode [ 564.164836][T12470] __nla_validate_parse: 2 callbacks suppressed [ 564.164856][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 564.208140][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 564.448378][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 564.673174][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 564.954732][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 564.982958][T12493] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 565.030360][T12493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 565.215390][T12512] netlink: 211792 bytes leftover after parsing attributes in process `syz.2.1663'. [ 565.490110][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 565.630316][T12547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1673'. [ 565.652860][T12547] batadv_slave_0: entered promiscuous mode [ 565.658725][T12547] batadv_slave_0: entered allmulticast mode [ 565.864622][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 565.877000][T12558] openvswitch: netlink: Flow key attr not present in new flow. [ 566.769285][T12579] netlink: 'syz.0.1682': attribute type 1 has an invalid length. [ 566.853509][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 566.948089][T12587] wg1 speed is unknown, defaulting to 1000 [ 567.114338][T12596] netlink: 'syz.3.1685': attribute type 5 has an invalid length. [ 567.154174][T12596] geneve3: entered promiscuous mode [ 567.159422][T12596] geneve3: entered allmulticast mode [ 567.229347][T12599] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 567.248983][T12608] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 567.257213][T12608] netlink: 'syz.4.1686': attribute type 2 has an invalid length. [ 567.265956][T12608] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 567.274859][T12598] syzkaller0: entered promiscuous mode [ 567.284429][T12598] syzkaller0: entered allmulticast mode [ 567.291824][ T60] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 567.301112][T12599] dummy0: entered promiscuous mode [ 567.322846][T12599] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 567.393599][ T60] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 567.409316][T12607] pim6reg1: entered promiscuous mode [ 567.415418][T12607] pim6reg1: entered allmulticast mode [ 567.423472][ T60] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 567.441851][ T60] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 569.108123][T12625] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:848b:7bff:fe5d:78f3 error=-28 [ 569.377199][T12671] wg1 speed is unknown, defaulting to 1000 [ 569.433923][T12677] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 569.440309][T12674] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 569.491302][T12677] __nla_validate_parse: 9 callbacks suppressed [ 569.491321][T12677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1705'. [ 569.728612][T12625] infiniband !yz!: set down [ 569.762521][T12625] infiniband !yz!: added team_slave_0 [ 569.794922][T12625] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 569.826705][T12625] infiniband !yz!: Couldn't open port 1 [ 569.872445][T12625] RDS/IB: !yz!: added [ 569.877097][T12625] smc: adding ib device !yz! with port count 1 [ 569.893834][T12696] tipc: Enabled bearer , priority 0 [ 569.902115][T12696] syzkaller0: entered promiscuous mode [ 569.907610][T12696] syzkaller0: entered allmulticast mode [ 569.911654][T12625] smc: ib device !yz! port 1 has no pnetid [ 569.967754][T12696] tipc: Resetting bearer [ 569.978157][T12695] tipc: Resetting bearer [ 569.994349][T12695] tipc: Disabling bearer [ 570.274261][T12704] syzkaller1: entered promiscuous mode [ 570.279910][T12704] syzkaller1: entered allmulticast mode [ 570.991197][T12709] netlink: 'syz.3.1714': attribute type 12 has an invalid length. [ 571.033349][T12711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1716'. [ 571.048703][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 571.206120][T12725] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1719'. [ 571.218830][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1720'. [ 571.237654][T12725] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1719'. [ 571.338396][T12737] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1718'. [ 571.810875][T12740] syzkaller0: entered promiscuous mode [ 571.835464][T12740] syzkaller0: entered allmulticast mode [ 572.117176][T12768] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1726'. [ 572.176378][T12769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1726'. [ 572.196010][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 573.468787][T12752] wg1 speed is unknown, defaulting to 1000 [ 573.475252][T12774] tipc: Enabling of bearer rejected, failed to enable media [ 574.097091][T12798] xt_ecn: cannot match TCP bits for non-tcp packets [ 574.267519][T12801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.277457][T12801] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 574.561975][T12803] netlink: 'syz.3.1737': attribute type 4 has an invalid length. [ 574.824717][T12816] block nbd0: Unsupported socket: should be TCP or UNIX. [ 575.064344][T12833] __nla_validate_parse: 2 callbacks suppressed [ 575.064364][T12833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1745'. [ 575.091437][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1745'. [ 575.099602][T12831] pim6reg1: entered promiscuous mode [ 575.101028][T12833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1745'. [ 575.127398][T12831] pim6reg1: entered allmulticast mode [ 575.132947][T12833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1745'. [ 575.257053][T12834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1746'. [ 576.443281][ T9695] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.552799][T12852] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1750'. [ 576.583872][T12853] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1750'. [ 576.598801][T12855] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 576.676996][T12855] bond7: entered promiscuous mode [ 576.690525][T12855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 576.777689][T12862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1753'. [ 576.982564][T12886] netlink: 'syz.0.1758': attribute type 15 has an invalid length. [ 577.024013][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 577.237108][T12907] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1762'. [ 577.653559][T12933] wg1 speed is unknown, defaulting to 1000 [ 578.507998][T12950] wg1 speed is unknown, defaulting to 1000 [ 580.082501][T13032] x_tables: duplicate underflow at hook 1 [ 580.109333][T13032] No such timeout policy "syz1" [ 580.161113][T13027] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 580.545231][T13054] syzkaller1: entered promiscuous mode [ 580.550748][T13054] syzkaller1: entered allmulticast mode [ 580.761961][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 580.909562][T13075] xt_l2tp: v2 sid > 0xffff: 16776960 [ 581.064409][T13082] __nla_validate_parse: 9 callbacks suppressed [ 581.064427][T13082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1794'. [ 582.930815][T13061] veth9: entered promiscuous mode [ 582.950418][T13078] tipc: Enabled bearer , priority 0 [ 582.983678][T13083] syzkaller0: entered promiscuous mode [ 582.989200][T13083] syzkaller0: entered allmulticast mode [ 583.028324][T13087] tipc: Resetting bearer [ 583.055719][T13104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.074964][T13071] tipc: Resetting bearer [ 583.113378][T13071] tipc: Disabling bearer [ 583.192855][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 583.249624][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1808'. [ 583.529345][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'. [ 583.559506][T13134] netlink: 'syz.2.1812': attribute type 7 has an invalid length. [ 583.601638][T13134] netlink: 'syz.2.1812': attribute type 8 has an invalid length. [ 583.630809][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 583.662320][T13148] netlink: 'syz.0.1816': attribute type 3 has an invalid length. [ 583.662514][T13108] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1805'. [ 583.670125][T13148] netlink: 'syz.0.1816': attribute type 7 has an invalid length. [ 583.695321][T13148] netlink: 'syz.0.1816': attribute type 8 has an invalid length. [ 583.703399][T13148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1816'. [ 583.852755][ T30] audit: type=1800 audit(1766862576.336:5): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1817" name="memory.events" dev="tmpfs" ino=1927 res=0 errno=0 [ 583.887587][T13157] bond5: left promiscuous mode [ 583.892967][T13157] bond6: left promiscuous mode [ 583.955984][T13157] geneve2: left promiscuous mode [ 583.980445][T13157] geneve3: left promiscuous mode [ 584.005669][T13163] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 584.045053][T12979] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 584.054412][T12979] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 584.063313][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 584.096482][T12979] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 584.112055][T12979] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 584.128220][T13166] nbd: device at index 0 is going down [ 584.134484][ T148] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 584.149387][ T148] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 584.228042][ T148] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 584.298218][ T148] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 584.397392][T13175] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 584.443768][ T7963] udevd[7963]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 584.464311][T13178] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 584.606302][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 584.698690][T13189] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1826'. [ 584.790382][T13198] tun0: tun_chr_ioctl cmd 1074025675 [ 584.830389][T13198] tun0: persist enabled [ 584.835266][T13198] tun0: tun_chr_ioctl cmd 1074025675 [ 584.840575][T13198] tun0: persist disabled [ 584.936077][T13203] veth1_vlan: left allmulticast mode [ 584.974213][T13207] netlink: 'syz.2.1832': attribute type 29 has an invalid length. [ 585.002670][T13207] netlink: 'syz.2.1832': attribute type 29 has an invalid length. [ 585.110573][T13216] tipc: Enabled bearer , priority 0 [ 585.132691][T13216] syzkaller0: entered promiscuous mode [ 585.138393][T13216] syzkaller0: entered allmulticast mode [ 585.159236][T13219] bond0: Caught tx_queue_len zero misconfig [ 585.211908][T13222] ip6tnl3: entered allmulticast mode [ 585.251082][T13216] tipc: Resetting bearer [ 585.266444][T13215] tipc: Resetting bearer [ 585.304225][T13215] tipc: Disabling bearer [ 585.417928][ T11] block nbd3: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 240 seconds [ 585.429202][ T11] block nbd3: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 240 seconds [ 585.440464][ T11] block nbd3: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 240 seconds [ 585.451626][ T11] block nbd3: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 240 seconds [ 585.479838][T13239] openvswitch: netlink: Invalid VLAN frame [ 585.622832][ T30] audit: type=1800 audit(1766862578.106:6): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1842" name="memory.events" dev="tmpfs" ino=1934 res=0 errno=0 [ 585.676291][ T30] audit: type=1107 audit(1766862578.106:7): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 585.714649][T13249] bond4: option miimon: invalid value (18446744073709551607) [ 585.722367][T13249] bond4: option miimon: allowed values 0 - 2147483647 [ 585.732501][T13249] bond4 (unregistering): Released all slaves [ 585.943549][T13269] netlink: 'syz.1.1849': attribute type 6 has an invalid length. [ 586.143589][T13286] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20003 [ 586.236595][T13288] __nla_validate_parse: 11 callbacks suppressed [ 586.236614][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 586.306829][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 586.337641][T13291] wg1 speed is unknown, defaulting to 1000 [ 587.115144][T13314] team0: No ports can be present during mode change [ 587.181112][T13319] tipc: Enabling of bearer rejected, failed to enable media [ 587.216436][T13291] netlink: 'syz.1.1856': attribute type 6 has an invalid length. [ 587.420663][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1862'. [ 587.512988][T13327] netlink: 'syz.4.1863': attribute type 10 has an invalid length. [ 587.521837][T13327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1863'. [ 587.552753][T13327] team0: Port device geneve0 added [ 587.706912][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'. [ 587.944194][T13352] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1869'. [ 588.156979][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1874'. [ 588.167121][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 588.411553][T13375] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 588.437300][T13375] bond4 (unregistering): Released all slaves [ 588.517739][T13392] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1880'. [ 588.539235][T13394] syzkaller0: entered promiscuous mode [ 588.545236][T13394] syzkaller0: entered allmulticast mode [ 588.629090][T13394] tipc: Enabled bearer , priority 0 [ 588.650687][T13390] tipc: Resetting bearer [ 588.696364][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 588.710321][T13390] tipc: Disabling bearer [ 588.845668][T13408] team0: Caught tx_queue_len zero misconfig [ 589.538030][T13460] netlink: 'syz.1.1895': attribute type 3 has an invalid length. [ 589.861791][T13476] netlink: 'syz.4.1902': attribute type 2 has an invalid length. [ 589.869838][T13476] netlink: 'syz.4.1902': attribute type 3 has an invalid length. [ 589.921497][T12989] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.930706][ T847] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 589.942316][T12989] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.951413][T12989] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.960314][T12989] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.111630][ T847] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 590.585633][T13513] wg1 speed is unknown, defaulting to 1000 [ 590.594919][T12992] nci: nci_rx_work: unknown MT 0x7 [ 590.689884][T13518] sctp: [Deprecated]: syz.0.1915 (pid 13518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.689884][T13518] Use struct sctp_sack_info instead [ 590.844391][T12979] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 591.334963][T13507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.590751][T13542] __nla_validate_parse: 5 callbacks suppressed [ 591.590770][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 591.812746][T13555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 591.828156][T13542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.869642][T13546] tipc: Enabled bearer , priority 0 [ 591.914152][T13540] syzkaller0: entered promiscuous mode [ 591.919668][T13540] syzkaller0: entered allmulticast mode [ 592.147464][T13550] vxcan3: entered allmulticast mode [ 592.512626][T13561] tipc: Resetting bearer [ 592.519170][T12992] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 592.529955][T12992] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 592.567093][T13559] wg1 speed is unknown, defaulting to 1000 [ 592.613725][T13547] wg1 speed is unknown, defaulting to 1000 [ 592.632590][T13545] wg1 speed is unknown, defaulting to 1000 [ 592.805511][T13574] wg1 speed is unknown, defaulting to 1000 [ 592.841570][ T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 592.943537][ T24] tipc: Node number set to 2535779698 [ 593.411406][T13545] tipc: Resetting bearer [ 593.430186][T13545] tipc: Disabling bearer [ 595.122544][T13628] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1939'. [ 595.470922][T13647] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 595.473589][T13648] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1944'. [ 595.511467][T13647] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 595.512186][T13648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1944'. [ 596.101990][T13663] syzkaller1: entered promiscuous mode [ 596.107684][T13663] syzkaller1: entered allmulticast mode [ 596.228281][T13666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1950'. [ 596.282563][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 596.316855][T13670] smc: net device hsr0 applied user defined pnetid SYZ2 [ 596.460777][T13679] gre2: entered promiscuous mode [ 596.842478][T13706] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 596.844166][T13708] ip6_vti0: Caught tx_queue_len zero misconfig [ 596.863082][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 596.890488][T13706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1960'. [ 597.023431][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'. [ 597.037566][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 597.228532][T13724] bridge8: entered promiscuous mode [ 597.242833][T13724] bridge8: entered allmulticast mode [ 597.667865][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 597.700709][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1971'. [ 597.794221][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 597.816030][T13755] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1975'. [ 598.120369][T13766] wg1 speed is unknown, defaulting to 1000 [ 598.121461][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 598.386292][T13787] wg1 speed is unknown, defaulting to 1000 [ 598.461298][T13791] wg1 speed is unknown, defaulting to 1000 [ 598.847681][T13802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.318393][T13826] netlink: 'syz.2.1995': attribute type 10 has an invalid length. [ 599.347056][T13826] veth0_macvtap: left promiscuous mode [ 599.389506][T13826] team0: Device veth0_macvtap failed to register rx_handler [ 599.599250][T13843] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1999'. [ 599.752543][T13853] tipc: Enabling of bearer rejected, failed to enable media [ 599.795875][T13848] wg1 speed is unknown, defaulting to 1000 [ 600.155891][T13857] wg1 speed is unknown, defaulting to 1000 [ 600.476717][T13841] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 600.501821][T13841] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 600.669947][T13875] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2004'. [ 601.241570][T13907] sock: sock_timestamping_bind_phc: sock not bind to device [ 601.529088][T13911] C: renamed from lo [ 601.545823][T13911] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 601.591786][T13921] nbd: socks must be embedded in a SOCK_ITEM attr [ 601.611971][ T7963] block nbd64: NBD_DISCONNECT [ 602.049526][ T7963] udevd[7963]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 602.886331][T13956] wg1 speed is unknown, defaulting to 1000 [ 603.488832][T13980] __nla_validate_parse: 1 callbacks suppressed [ 603.488850][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 603.524540][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 603.534552][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'. [ 603.577809][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2029'. [ 604.008055][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 604.095885][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 604.106295][T14004] tipc: Enabled bearer , priority 0 [ 604.132938][T14003] netlink: 'syz.1.2036': attribute type 20 has an invalid length. [ 604.211386][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'. [ 604.237552][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 604.295956][T13997] tipc: Disabling bearer [ 604.601422][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 604.728214][ T6536] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.774450][ T6536] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.806239][T14017] netlink: 'syz.1.2039': attribute type 11 has an invalid length. [ 604.821473][ T6536] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.860291][ T6536] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.259194][T14044] netlink: 'syz.0.2046': attribute type 4 has an invalid length. [ 605.280651][T14044] netlink: 'syz.0.2046': attribute type 4 has an invalid length. [ 605.725470][T14066] team0: No ports can be present during mode change [ 605.915558][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 606.242996][T14073] Bluetooth: MGMT ver 1.23 [ 606.409893][T14086] xt_cgroup: invalid path, errno=-2 [ 606.672756][T14096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.743051][T14099] wg1 speed is unknown, defaulting to 1000 [ 606.959424][T14114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2063'. [ 606.977642][T14105] wg1 speed is unknown, defaulting to 1000 [ 607.048634][T14114] ip6tnl0: Caught tx_queue_len zero misconfig [ 607.217654][T14122] sctp: [Deprecated]: syz.3.2066 (pid 14122) Use of int in maxseg socket option. [ 607.217654][T14122] Use struct sctp_assoc_value instead [ 607.467788][T14137] wg1 speed is unknown, defaulting to 1000 [ 608.230793][T14172] netlink: 'syz.4.2075': attribute type 33 has an invalid length. [ 608.249904][T14172] `: renamed from team0 [ 608.950998][T14184] __nla_validate_parse: 5 callbacks suppressed [ 608.951016][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 609.350433][T14199] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 609.439315][T14203] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2085'. [ 609.458171][T14203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2085'. [ 609.512748][T14195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.530686][T14195] bond5: (slave bond6): making interface the new active one [ 609.539817][T14195] bond5: (slave bond6): Enslaving as an active interface with an up link [ 609.617116][T14203] syzkaller0: entered promiscuous mode [ 609.622841][T14203] syzkaller0: entered allmulticast mode [ 609.770820][T14228] tipc: Enabled bearer , priority 0 [ 609.801748][T14218] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 611.270036][T14216] syzkaller0: entered promiscuous mode [ 611.275712][T14216] syzkaller0: entered allmulticast mode [ 611.363464][T14215] tipc: Resetting bearer [ 611.395797][T14215] tipc: Disabling bearer [ 611.430211][ T9] tipc: Node number set to 3694655214 [ 611.537275][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 611.704071][T14274] syzkaller0: entered promiscuous mode [ 611.721901][T14274] syzkaller0: entered allmulticast mode [ 611.908874][T14297] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 612.163640][T14309] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 612.167150][T14312] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 612.184638][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 612.211954][T14309] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2114'. [ 612.272388][T14315] netlink: 'syz.3.2118': attribute type 39 has an invalid length. [ 612.427086][T14318] wg1 speed is unknown, defaulting to 1000 [ 612.439548][T14325] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 612.446914][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2123'. [ 612.480379][T14327] vlan4: entered promiscuous mode [ 612.493239][T14327] vlan4: entered allmulticast mode [ 612.531853][T14327] hsr_slave_1: entered allmulticast mode [ 612.556835][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2121'. [ 612.569378][T14335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2121'. [ 612.582569][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2121'. [ 612.625492][T14338] netlink: 'syz.4.2124': attribute type 2 has an invalid length. [ 612.664257][T14322] wg1 speed is unknown, defaulting to 1000 [ 612.675963][T14340] tipc: Enabled bearer , priority 0 [ 612.703714][T14340] netlink: 'syz.3.2125': attribute type 1 has an invalid length. [ 612.716255][T14340] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 612.737882][T14339] tipc: Disabling bearer [ 613.126376][T14356] wg1 speed is unknown, defaulting to 1000 [ 614.373304][T14390] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 614.462553][T14392] __nla_validate_parse: 5 callbacks suppressed [ 614.462571][T14392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2139'. [ 614.531764][T14392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2139'. [ 614.567252][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'. [ 614.757394][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 614.825236][T14415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2145'. [ 614.871510][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'. [ 615.009298][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 615.021528][T14434] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2151'. [ 615.055109][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 615.427904][T14448] wg1 speed is unknown, defaulting to 1000 [ 615.486464][T14458] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20003 [ 615.487635][ T11] block nbd3: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 270 seconds [ 615.504291][ T11] block nbd3: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 270 seconds [ 615.515620][ T11] block nbd3: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 270 seconds [ 615.518571][T14452] netlink: zone id is out of range [ 615.527185][ T11] block nbd3: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 270 seconds [ 615.537964][T14459] netlink: 'syz.3.2156': attribute type 33 has an invalid length. [ 615.566285][T14452] netlink: zone id is out of range [ 615.571461][T14459] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2156'. [ 615.571497][T14459] `: renamed from team0 [ 615.586026][T14452] netlink: zone id is out of range [ 615.650612][T14452] netlink: set zone limit has 8 unknown bytes [ 615.723433][T14463] netlink: 'syz.4.2158': attribute type 3 has an invalid length. [ 615.858711][T14465] wg1 speed is unknown, defaulting to 1000 [ 616.621514][T14492] tipc: Enabled bearer , priority 0 [ 616.642676][T14492] syzkaller0: entered promiscuous mode [ 616.648192][T14492] syzkaller0: entered allmulticast mode [ 616.723521][T14500] geneve2: entered promiscuous mode [ 616.756695][T12992] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.787885][T12992] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.826355][T12992] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.842655][T12992] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.978331][T14497] tipc: Resetting bearer [ 616.988554][T14491] tipc: Resetting bearer [ 617.042119][T14491] tipc: Disabling bearer [ 617.775212][T14548] syzkaller0: entered promiscuous mode [ 617.780848][T14548] syzkaller0: entered allmulticast mode [ 617.816089][T14551] netlink: 'syz.0.2184': attribute type 11 has an invalid length. [ 619.535246][T14595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 619.624230][T14599] __nla_validate_parse: 5 callbacks suppressed [ 619.624249][T14599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2197'. [ 619.971434][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 620.071016][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'. [ 620.112800][T14609] batadv_slave_0: left allmulticast mode [ 620.195742][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 620.238904][T14611] nbd: nbd3 already in use [ 620.300030][T14625] bridge0: port 1(macvtap0) entered blocking state [ 620.314950][T14625] bridge0: port 1(macvtap0) entered disabled state [ 620.321802][T14625] macvtap0: entered allmulticast mode [ 620.327200][T14625] bridge0: entered allmulticast mode [ 620.336710][T14625] macvtap0: left allmulticast mode [ 620.342009][T14625] bridge0: left allmulticast mode [ 620.461310][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 620.475265][T14632] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2206'. [ 620.669995][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 620.827629][T14660] wg1 speed is unknown, defaulting to 1000 [ 621.338410][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2216'. [ 621.415043][T14690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 621.465529][T14690] wg1 speed is unknown, defaulting to 1000 [ 622.138524][T14709] tipc: Enabled bearer , priority 0 [ 622.287156][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 622.324796][T14716] syzkaller0: entered promiscuous mode [ 622.342478][T14716] syzkaller0: entered allmulticast mode [ 622.356748][T14716] tipc: Resetting bearer [ 622.528162][T14744] tipc: Failed to remove unknown binding: 66,1,1/2535779698:1869012802/1869012804 [ 622.576968][T14707] tipc: Resetting bearer [ 622.581961][T14743] tipc: Failed to remove unknown binding: 66,1,1/2535779698:1869012802/1869012804 [ 622.608686][T14743] tipc: Failed to remove unknown binding: 66,1,1/2535779698:1869012802/1869012804 [ 622.933863][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 623.897530][T14707] tipc: Disabling bearer [ 623.907031][T14748] xfrm0: Caught tx_queue_len zero misconfig [ 624.012685][ T5896] tipc: Node number set to 1247149449 [ 624.196303][T14767] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2227'. [ 624.454113][T14778] sctp: [Deprecated]: syz.4.2231 (pid 14778) Use of int in max_burst socket option. [ 624.454113][T14778] Use struct sctp_assoc_value instead [ 624.640563][T14782] wg1 speed is unknown, defaulting to 1000 [ 624.745498][T14789] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 624.966419][T14796] syzkaller0: entered promiscuous mode [ 624.973045][T14796] syzkaller0: entered allmulticast mode [ 625.098163][T14796] tipc: Enabled bearer , priority 0 [ 625.212808][T14795] tipc: Resetting bearer [ 625.243508][T14795] tipc: Disabling bearer [ 625.421848][T14814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2241'. [ 625.743804][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2245'. [ 625.787564][T14828] wg1 speed is unknown, defaulting to 1000 [ 626.089966][T14833] tipc: Enabling of bearer rejected, failed to enable media [ 626.290638][T14841] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 626.515344][T14860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2253'. [ 626.525284][T14862] x_tables: duplicate underflow at hook 1 [ 627.137256][T14893] dvmrp12: entered allmulticast mode [ 627.149264][T14892] dvmrp12: left allmulticast mode [ 627.194828][T14891] wg1 speed is unknown, defaulting to 1000 [ 627.523154][T14909] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2267'. [ 627.532403][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2267'. [ 627.541539][T14909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2267'. [ 627.681106][T14913] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 627.711349][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2271'. [ 627.933543][T14934] netlink: 'syz.0.2273': attribute type 3 has an invalid length. [ 627.970125][T14934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2273'. [ 628.184146][T14945] openvswitch: netlink: Flow actions attr not present in new flow. [ 628.236174][T14948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2276'. [ 628.236576][T14945] openvswitch: netlink: Message has 4 unknown bytes. [ 628.254449][T14948] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2276'. [ 628.989329][T14994] tunl0: Caught tx_queue_len zero misconfig [ 629.067316][T14996] netlink: 'syz.4.2289': attribute type 3 has an invalid length. [ 629.080603][T14996] netlink: 'syz.4.2289': attribute type 1 has an invalid length. [ 629.496483][T15034] netlink: 'syz.1.2299': attribute type 29 has an invalid length. [ 629.525113][T15034] netlink: 'syz.1.2299': attribute type 29 has an invalid length. [ 629.617332][T15037] netlink: 'syz.4.2300': attribute type 11 has an invalid length. [ 629.626873][T15037] netlink: 'syz.4.2300': attribute type 11 has an invalid length. [ 629.685980][T15042] can: request_module (can-proto-0) failed. [ 629.714182][T15042] openvswitch: netlink: Message has -2 unknown bytes. [ 629.722078][T15042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.809494][T15042] wg1 speed is unknown, defaulting to 1000 [ 629.811138][T15050] syzkaller0: entered promiscuous mode [ 629.822262][T15050] syzkaller0: entered allmulticast mode [ 629.906951][T15053] macsec2: entered promiscuous mode [ 630.259002][T15068] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 630.310476][T15068] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.355527][T15073] x_tables: unsorted underflow at hook 3 [ 630.425488][T15070] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.441005][T15070] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 630.489140][T15070] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 631.031473][T15116] __nla_validate_parse: 17 callbacks suppressed [ 631.031491][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 631.058053][T15112] wg1 speed is unknown, defaulting to 1000 [ 631.177074][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 631.188754][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2322'. [ 631.328237][T15120] wg1 speed is unknown, defaulting to 1000 [ 631.755940][T15143] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 631.967124][T15160] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2330'. [ 632.053821][T15166] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2334'. [ 632.352053][T15182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2336'. [ 632.380105][T15181] x_tables: unsorted entry at hook 1 [ 632.996785][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2345'. [ 633.155566][T15211] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 633.225793][T15204] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 633.248481][T15216] syzkaller0: entered promiscuous mode [ 633.291657][T15216] syzkaller0: entered allmulticast mode [ 633.302014][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 633.363990][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'. [ 633.538804][T15233] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2351'. [ 633.602890][T15236] bridge0: port 1(batadv1) entered blocking state [ 633.609873][T15236] bridge0: port 1(batadv1) entered disabled state [ 633.650432][T15236] batadv1: entered allmulticast mode [ 633.670520][T15236] batadv1: entered promiscuous mode [ 633.775063][T15245] xt_hashlimit: overflow, try lower: 0/0 [ 633.956434][T15258] netlink: 'syz.4.2357': attribute type 10 has an invalid length. [ 634.091319][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 634.100921][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 634.261997][T15276] netlink: 'syz.2.2362': attribute type 8 has an invalid length. [ 635.022942][T15322] wg1 speed is unknown, defaulting to 1000 [ 635.126357][T15319] wg1 speed is unknown, defaulting to 1000 [ 636.351805][T15383] bond8: option min_links: invalid value (18446744073709551612) [ 636.370426][T15383] bond8: option min_links: allowed values 0 - 2147483647 [ 636.388519][T15383] bond8 (unregistering): Released all slaves [ 636.574631][T15395] __nla_validate_parse: 9 callbacks suppressed [ 636.574649][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'. [ 636.836354][T15414] netlink: 'syz.1.2399': attribute type 33 has an invalid length. [ 636.870985][T15414] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2399'. [ 636.883170][T15414] `: renamed from team0 [ 637.117063][T15427] netlink: 'syz.2.2402': attribute type 1 has an invalid length. [ 637.157408][T15427] bond7: entered promiscuous mode [ 637.165938][T15427] bond7: entered allmulticast mode [ 637.171784][T15427] 8021q: adding VLAN 0 to HW filter on device bond7 [ 637.189619][T15429] macvlan2: entered promiscuous mode [ 637.195164][T15429] macvlan2: entered allmulticast mode [ 637.203138][T15429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 637.307163][T15431] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2403'. [ 637.402253][T15437] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2405'. [ 637.411421][T15437] nbd: couldn't find a device at index 0 [ 637.550588][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 637.822826][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2413'. [ 637.835619][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 637.882144][T15463] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 637.895605][T15463] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2413'. [ 638.057710][T15471] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2413'. [ 638.070383][T15476] netlink: 'syz.1.2415': attribute type 6 has an invalid length. [ 638.088584][T15476] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2415'. [ 638.105206][T15474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.143304][T15478] openvswitch: netlink: Flow key attr not present in new flow. [ 638.215215][T15471] bond8 (unregistering): Released all slaves [ 638.267769][T15474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.400473][T15474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.487373][T15474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.655524][T12975] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.695394][T12975] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.740215][ T9692] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.805580][ T9692] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.939585][T15514] netlink: 'syz.3.2424': attribute type 1 has an invalid length. [ 638.992396][T15514] 8021q: adding VLAN 0 to HW filter on device bond8 [ 639.019615][T15516] bond8: (slave geneve4): making interface the new active one [ 639.084187][T15516] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 639.094611][T12975] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.119659][T15514] bond8: entered promiscuous mode [ 639.125287][T15514] geneve4: entered promiscuous mode [ 639.133919][T15497] tipc: Enabled bearer , priority 0 [ 639.141064][T12975] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.160980][T12975] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.196219][T15506] syzkaller0: entered promiscuous mode [ 639.209127][T15506] syzkaller0: entered allmulticast mode [ 639.222403][T12975] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.406577][T15535] IPVS: Error connecting to the multicast addr [ 639.439962][T15537] IPVS: Error connecting to the multicast addr [ 639.487423][T15540] tipc: Enabled bearer , priority 0 [ 639.501834][T15540] syzkaller0: entered promiscuous mode [ 639.507492][T15540] syzkaller0: entered allmulticast mode [ 639.578095][T15538] tipc: Resetting bearer [ 639.745409][T15538] tipc: Disabling bearer [ 639.839869][T15496] tipc: Resetting bearer [ 639.980280][T15496] tipc: Disabling bearer [ 640.206259][T15536] bond4: option miimon: invalid value (18446744073709551607) [ 640.214372][T15536] bond4: option miimon: allowed values 0 - 2147483647 [ 640.228559][T15536] bond4 (unregistering): Released all slaves [ 640.320376][T15564] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 640.384006][T15564] syz_tun: entered promiscuous mode [ 640.389832][T15564] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 640.445050][T15566] wg1 speed is unknown, defaulting to 1000 [ 640.488123][T15568] vlan0: entered promiscuous mode [ 640.496413][T15568] bond0: entered promiscuous mode [ 640.503197][T15570] lo: Caught tx_queue_len zero misconfig [ 640.509301][T15570] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 640.558342][T15571] wg1 speed is unknown, defaulting to 1000 [ 640.827384][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.836132][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.883437][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.893148][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.903615][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.916736][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.967612][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.981388][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.015389][T15593] tipc: Enabled bearer , priority 0 [ 641.029789][T15593] syzkaller0: entered promiscuous mode [ 641.041350][T15593] syzkaller0: entered allmulticast mode [ 641.083297][T15593] syzkaller0: mtu less than device minimum [ 641.107806][T15592] tipc: Resetting bearer [ 641.127759][T15592] tipc: Disabling bearer [ 641.332623][T15604] netlink: 'syz.1.2451': attribute type 3 has an invalid length. [ 641.343046][T15605] netlink: 'syz.1.2451': attribute type 3 has an invalid length. [ 641.637524][T15617] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 641.680337][T15617] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 641.907392][T15621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 641.965220][T15621] __nla_validate_parse: 10 callbacks suppressed [ 641.965239][T15621] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2457'. [ 642.022624][T15638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2461'. [ 642.040189][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 642.055317][T15637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2461'. [ 642.076397][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2460'. [ 642.138288][T15640] syzkaller0: entered promiscuous mode [ 642.258283][T13970] udevd[13970]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 642.270607][T15656] syzkaller0: entered promiscuous mode [ 642.276654][T15656] syzkaller0: entered allmulticast mode [ 642.354948][T15655] xfrm0: Caught tx_queue_len zero misconfig [ 642.506136][T15662] tipc: Enabled bearer , priority 0 [ 642.513870][T15667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2468'. [ 642.528481][T15656] wg1 speed is unknown, defaulting to 1000 [ 642.746190][T15680] syzkaller0: entered promiscuous mode [ 642.762235][T15680] syzkaller0: entered allmulticast mode [ 643.173225][T15654] tipc: Resetting bearer [ 643.239774][T15654] tipc: Disabling bearer [ 644.158877][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2484'. [ 644.377608][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2489'. [ 644.399653][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2489'. [ 644.659888][T15749] wg1 speed is unknown, defaulting to 1000 [ 644.933689][T15759] wg1 speed is unknown, defaulting to 1000 [ 644.953253][T15763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2494'. [ 645.533099][T15777] bond10: Unable to set down delay as MII monitoring is disabled [ 645.542462][T15777] bond10 (unregistering): Released all slaves [ 645.573320][T15782] netlink: 'syz.1.2498': attribute type 32 has an invalid length. [ 645.589721][ T11] block nbd3: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 300 seconds [ 645.600660][ T11] block nbd3: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 300 seconds [ 645.612257][ T11] block nbd3: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 300 seconds [ 645.623407][ T11] block nbd3: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 300 seconds [ 646.016009][T15796] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 646.503635][T15803] wg1 speed is unknown, defaulting to 1000 [ 646.581071][T15804] wg1 speed is unknown, defaulting to 1000 [ 647.379656][T15826] wg1 speed is unknown, defaulting to 1000 [ 647.620505][T15833] wg1 speed is unknown, defaulting to 1000 [ 649.403525][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 650.409856][ T5200] udevd[5200]: worker [9074] /devices/virtual/block/nbd3 timeout; kill it [ 650.469562][ T5200] udevd[5200]: seq 15379 '/devices/virtual/block/nbd3' killed [ 651.020893][T15844] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 651.040525][T15843] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 653.468411][T15847] veth9: entered promiscuous mode [ 655.869048][T15875] tipc: Enabled bearer , priority 10 [ 655.878042][T15875] tipc: Enabled bearer , priority 0 [ 656.177788][T15881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.201812][T15881] 8021q: adding VLAN 0 to HW filter on device ` [ 656.226545][T15881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.270005][T15885] syzkaller0: entered promiscuous mode [ 656.334320][T15885] syzkaller0: entered allmulticast mode [ 656.755427][T15920] __nla_validate_parse: 12 callbacks suppressed [ 656.755447][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 656.906656][T15931] netlink: 'syz.3.2532': attribute type 12 has an invalid length. [ 657.074315][T15946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2538'. [ 657.088288][T15946] netlink: 'syz.3.2538': attribute type 33 has an invalid length. [ 657.096924][T15946] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2538'. [ 657.294737][T15962] syzkaller0: entered promiscuous mode [ 657.306422][T15962] syzkaller0: entered allmulticast mode [ 657.786871][T15988] wg1 speed is unknown, defaulting to 1000 [ 657.879262][T15990] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 657.997111][T15990] 8021q: adding VLAN 0 to HW filter on device bond8 [ 658.051882][T15989] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 658.056649][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'. [ 658.396728][T16020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2557'. [ 658.396962][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2558'. [ 658.508269][T16033] netlink: 'syz.1.2561': attribute type 3 has an invalid length. [ 658.512775][T16035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2562'. [ 658.578161][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2562'. [ 658.582675][T16033] syz_tun: entered allmulticast mode [ 658.609339][T16033] siw: device registration error -23 [ 658.705977][T16033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.724776][T16033] 8021q: adding VLAN 0 to HW filter on device ` [ 658.758246][T16033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.840863][T16031] syz_tun: left allmulticast mode [ 659.197069][T16040] wg1 speed is unknown, defaulting to 1000 [ 659.739365][T16060] bond8: option arp_validate: invalid value (18446744073491447809) [ 659.754750][T16064] netlink: 'syz.4.2568': attribute type 13 has an invalid length. [ 659.794789][T16060] bond8 (unregistering): Released all slaves [ 659.972380][T16076] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2571'. [ 660.343959][T12989] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.382100][T12989] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.456779][T12989] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.476149][T12989] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.545859][T16082] wg1 speed is unknown, defaulting to 1000 [ 660.821682][T16100] syzkaller0: entered promiscuous mode [ 660.831311][T16100] syzkaller0: entered allmulticast mode [ 662.900311][T16114] netlink: 'syz.3.2581': attribute type 58 has an invalid length. [ 662.910493][T16114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2581'. [ 663.119997][T16122] netlink: 'syz.2.2584': attribute type 4 has an invalid length. [ 663.232923][T16130] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2585'. [ 663.442534][T16122] 8021q: adding VLAN 0 to HW filter on device bond8 [ 663.528863][T16146] syz_tun: entered allmulticast mode [ 663.580578][T16146] dvmrp8: entered allmulticast mode [ 663.612318][T16142] syzkaller0: entered promiscuous mode [ 663.629262][T16142] syzkaller0: entered allmulticast mode [ 663.693950][T16146] syz_tun: left allmulticast mode [ 663.775662][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2591'. [ 664.163271][T16166] wg1 speed is unknown, defaulting to 1000 [ 664.646498][T16181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.729120][T16190] batadv1: entered promiscuous mode [ 664.894642][T16199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2601'. [ 665.740092][T16236] netlink: 'syz.0.2610': attribute type 6 has an invalid length. [ 665.753681][T16236] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2610'. [ 665.780189][T16220] syzkaller0: entered promiscuous mode [ 665.791365][T16220] syzkaller0: entered allmulticast mode [ 665.997134][T16247] netlink: 'syz.2.2613': attribute type 1 has an invalid length. [ 666.071060][T16251] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2613'. [ 666.328149][T16247] bond9: entered promiscuous mode [ 666.356785][T16247] 8021q: adding VLAN 0 to HW filter on device bond9 [ 666.387512][T16261] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2615'. [ 666.621770][T16250] wg1 speed is unknown, defaulting to 1000 [ 666.822183][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 666.922922][T16276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.091892][T16274] wg1 speed is unknown, defaulting to 1000 [ 667.604530][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 667.622616][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'. [ 667.641919][T16309] netlink: 'syz.3.2628': attribute type 14 has an invalid length. [ 667.670291][T16309] netlink: 'syz.3.2628': attribute type 11 has an invalid length. [ 669.288653][T16316] pim6reg: entered allmulticast mode [ 669.311345][T16313] batman_adv: batadv0: Adding interface: ip6gretap4 [ 669.317989][T16313] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.345292][T16313] batman_adv: batadv0: Not using interface ip6gretap4 (retrying later): interface not active [ 669.460251][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 669.667182][T16330] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2635'. [ 669.758749][T16336] tipc: Enabled bearer , priority 0 [ 669.771577][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2638'. [ 669.777796][T16336] syzkaller0: entered promiscuous mode [ 669.788995][T16336] syzkaller0: entered allmulticast mode [ 669.798423][T16328] wg1 speed is unknown, defaulting to 1000 [ 669.811606][T16340] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2638'. [ 669.821022][T16336] tipc: Resetting bearer [ 669.829498][T16334] delete_channel: no stack [ 669.868540][T16334] tipc: Resetting bearer [ 669.911910][T16334] tipc: Disabling bearer [ 669.979960][T16346] wg1 speed is unknown, defaulting to 1000 [ 670.267926][T16352] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 670.673125][T16367] netlink: 'syz.2.2645': attribute type 10 has an invalid length. [ 670.690336][T16367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2645'. [ 670.737733][T16367] team0: Port device geneve0 added [ 670.739003][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 670.752831][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.789684][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.805407][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2644'. [ 670.815695][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.824908][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.222469][T16394] netlink: 'syz.0.2654': attribute type 8 has an invalid length. [ 671.371803][T16394] sch_fq: defrate 0 ignored. [ 671.405083][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'. [ 671.409228][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2653'. [ 671.464396][T16401] team0: Port device bond0 removed [ 671.579897][T16408] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2658'. [ 671.818371][T16388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.844273][T16430] netlink: 'syz.4.2660': attribute type 10 has an invalid length. [ 672.715051][T16482] syzkaller1: entered promiscuous mode [ 672.720583][T16482] syzkaller1: entered allmulticast mode [ 672.790696][T16485] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 672.914677][T16489] vxcan4: entered allmulticast mode [ 672.953046][T16488] wg1 speed is unknown, defaulting to 1000 [ 672.988806][T16482] wg1 speed is unknown, defaulting to 1000 [ 673.066012][T16502] geneve3: left promiscuous mode [ 673.078237][T16502] ip6gre1: left promiscuous mode [ 673.091905][T16502] vlan4: left allmulticast mode [ 673.100175][T16502] bond5: left allmulticast mode [ 673.121336][T16502] gretap1: left allmulticast mode [ 673.140963][T16502] bond7: left promiscuous mode [ 673.171798][T16490] wg1 speed is unknown, defaulting to 1000 [ 673.253162][T16512] netlink: 'syz.1.2682': attribute type 4 has an invalid length. [ 673.496217][T16518] netlink: 'syz.1.2684': attribute type 13 has an invalid length. [ 673.504594][T16518] netlink: 'syz.1.2684': attribute type 17 has an invalid length. [ 673.616667][T16519] vlan1: entered allmulticast mode [ 673.632176][T16519] bridge_slave_0: entered allmulticast mode [ 673.661702][T16519] bridge0: port 1(vlan1) entered blocking state [ 673.678384][T16519] bridge0: port 1(vlan1) entered disabled state [ 674.025707][T16524] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002 [ 674.162030][T16524] bridge10: entered promiscuous mode [ 674.167686][T16524] bridge10: entered allmulticast mode [ 674.582291][T16541] netlink: 'syz.1.2689': attribute type 23 has an invalid length. [ 675.164623][T16574] __nla_validate_parse: 10 callbacks suppressed [ 675.164642][T16574] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2697'. [ 675.185331][T16575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.275336][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 675.564177][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 675.646307][ T11] block nbd3: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 330 seconds [ 675.657273][ T11] block nbd3: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 330 seconds [ 675.668183][T16591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2702'. [ 675.668577][ T11] block nbd3: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 330 seconds [ 675.688396][ T11] block nbd3: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 330 seconds [ 676.117403][T16615] sctp: [Deprecated]: syz.3.2705 (pid 16615) Use of int in maxseg socket option. [ 676.117403][T16615] Use struct sctp_assoc_value instead [ 677.294636][T16597] veth0_to_team: Caught tx_queue_len zero misconfig [ 677.438685][T16632] netlink: 'syz.0.2707': attribute type 22 has an invalid length. [ 677.499652][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'. [ 677.545122][ T9692] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.579578][ T9692] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.601490][ T9692] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.638687][ T9692] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.684417][T16655] netlink: 'syz.3.2712': attribute type 1 has an invalid length. [ 677.787234][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 677.806359][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2715'. [ 677.816481][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 678.057399][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 678.070700][T16676] netlink: 'syz.1.2718': attribute type 30 has an invalid length. [ 678.090811][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 678.090806][ T3537] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.090850][ T3537] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.116484][T16676] netlink: 'syz.1.2718': attribute type 30 has an invalid length. [ 678.167561][ T3537] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.194602][ T3537] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.391040][T16695] netlink: 'syz.2.2725': attribute type 33 has an invalid length. [ 678.444721][T16695] `: renamed from team0 [ 678.641828][T16710] bond0: (slave syz_tun): Releasing backup interface [ 678.661954][T16710] syz_tun (unregistering): left promiscuous mode [ 679.065388][T16735] wg1 speed is unknown, defaulting to 1000 [ 679.328345][T16738] bond4: option lacp_active: invalid value (9) [ 679.385055][T16738] bond4 (unregistering): Released all slaves [ 679.499339][T16744] netlink: 'syz.4.2738': attribute type 3 has an invalid length. [ 679.618084][T16747] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 679.643862][T16747] syzkaller0: entered promiscuous mode [ 679.651093][T16747] syzkaller0: entered allmulticast mode [ 679.897219][T16761] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 679.899955][T16755] wg1 speed is unknown, defaulting to 1000 [ 680.038048][T16769] netlink: 'syz.2.2741': attribute type 10 has an invalid length. [ 680.047359][T16769] netlink: 'syz.2.2741': attribute type 32 has an invalid length. [ 680.199287][T16774] __nla_validate_parse: 6 callbacks suppressed [ 680.199307][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 680.222616][T16774] hsr_slave_0: left promiscuous mode [ 680.264394][T16774] hsr_slave_1: left promiscuous mode [ 680.321523][T16778] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2744'. [ 680.389546][T16774] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 680.440998][T16782] batadv_slave_0: Caught tx_queue_len zero misconfig [ 680.744586][T16800] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 680.750352][T16801] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 680.808931][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 681.030923][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2753'. [ 681.413273][T16831] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2756'. [ 681.598808][T16835] wg1 speed is unknown, defaulting to 1000 [ 682.147444][T16854] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2762'. [ 682.182064][T16859] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2762'. [ 682.270173][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 682.611156][T16873] wg1 speed is unknown, defaulting to 1000 [ 683.257420][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 683.463972][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2774'. [ 683.789154][T16931] Bluetooth: MGMT ver 1.23 [ 684.040248][T16938] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 684.068460][T16938] syzkaller0: entered promiscuous mode [ 684.074428][T16938] syzkaller0: entered allmulticast mode [ 684.734325][T16985] netlink: 'syz.0.2792': attribute type 13 has an invalid length. [ 684.761497][T16985] macvtap0: entered promiscuous mode [ 684.793102][T16985] macvtap0: refused to change device tx_queue_len [ 685.004126][T16992] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 685.053790][T16992] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 685.060889][T16993] wg1 speed is unknown, defaulting to 1000 [ 685.294621][T17003] macsec2: entered promiscuous mode [ 685.299883][T17003] hsr0: entered promiscuous mode [ 685.454238][T17003] hsr0: left promiscuous mode [ 685.916344][T17015] __nla_validate_parse: 3 callbacks suppressed [ 685.916365][T17015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2801'. [ 685.947601][T17017] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 686.088142][T16989] wg1 speed is unknown, defaulting to 1000 [ 686.246504][T17031] wg1 speed is unknown, defaulting to 1000 [ 686.507900][T17036] wg1 speed is unknown, defaulting to 1000 [ 686.886698][T17044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2805'. [ 687.036464][T17050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2806'. [ 688.507038][T17088] wg1 speed is unknown, defaulting to 1000 [ 689.227413][T17120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 689.233448][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 689.337491][T17122] syzkaller0: entered promiscuous mode [ 689.343357][T17122] syzkaller0: entered allmulticast mode [ 689.562128][ T9692] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.651930][T17120] wg1 speed is unknown, defaulting to 1000 [ 689.685613][ T9692] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.776361][T17125] wg1 speed is unknown, defaulting to 1000 [ 689.776381][ T9692] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.881602][ T9692] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.768701][T17177] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2836'. [ 691.801602][T17177] 0{X: renamed from gretap0 [ 691.827928][T17177] 0{X: entered allmulticast mode [ 691.842279][T17177] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 691.994163][T17186] netlink: 'syz.4.2839': attribute type 4 has an invalid length. [ 692.024938][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 692.031688][T17186] netlink: 15538 bytes leftover after parsing attributes in process `syz.4.2839'. [ 692.035242][T17188] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 692.112358][T17190] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2841'. [ 692.224490][T17186] wg1 speed is unknown, defaulting to 1000 [ 692.236926][T17196] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 692.575609][T17216] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2846'. [ 692.875039][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'. [ 692.924504][T17231] wg1 speed is unknown, defaulting to 1000 [ 693.258086][T17238] netlink: 'syz.3.2850': attribute type 29 has an invalid length. [ 693.271121][T17238] netlink: 'syz.3.2850': attribute type 29 has an invalid length. [ 693.290880][T17238] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2850'. [ 693.595899][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 693.672076][T17247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2852'. [ 693.788805][T17253] syzkaller0: entered promiscuous mode [ 693.795419][T17253] syzkaller0: entered allmulticast mode [ 694.037273][T17245] syzkaller0: entered promiscuous mode [ 694.049439][T17245] syzkaller0: entered allmulticast mode [ 694.086050][T17245] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 694.497937][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 694.507261][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 694.515649][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 694.525363][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 694.534274][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 694.685546][T17283] wg1 speed is unknown, defaulting to 1000 [ 694.708098][T17273] wg1 speed is unknown, defaulting to 1000 [ 695.206891][T17299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2868'. [ 695.610169][T17318] wg1 speed is unknown, defaulting to 1000 [ 696.089884][T17329] syzkaller0: entered promiscuous mode [ 696.095555][T17329] syzkaller0: entered allmulticast mode [ 696.142136][T17319] wg1 speed is unknown, defaulting to 1000 [ 696.601786][ T52] Bluetooth: hci5: command tx timeout [ 698.139119][T17351] __nla_validate_parse: 2 callbacks suppressed [ 698.139136][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 698.184275][T17273] chnl_net:caif_netlink_parms(): no params data found [ 698.691442][ T52] Bluetooth: hci5: command tx timeout [ 699.507251][T17397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2890'. [ 699.536727][T17273] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.549376][T17273] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.560823][T17400] IPv6: Can't replace route, no match found [ 699.561433][T17273] bridge_slave_0: entered allmulticast mode [ 699.575328][T17273] bridge_slave_0: entered promiscuous mode [ 699.589837][T17273] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.597359][T17273] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.604801][T17273] bridge_slave_1: entered allmulticast mode [ 699.612854][T17273] bridge_slave_1: entered promiscuous mode [ 699.753292][T17273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.796852][T17273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.961128][T17273] team0: Port device team_slave_0 added [ 699.984218][T17273] team0: Port device team_slave_1 added [ 700.143892][T17273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.150878][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.222814][T17273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.287183][T17273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.307359][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.344218][T17273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.423794][T17273] hsr_slave_0: entered promiscuous mode [ 700.430191][T17273] hsr_slave_1: entered promiscuous mode [ 700.437250][T17273] debugfs: 'hsr0' already exists in 'hsr' [ 700.444448][T17273] Cannot create hsr debugfs directory [ 700.568465][T17450] wg1 speed is unknown, defaulting to 1000 [ 700.649143][T17273] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.732356][T17273] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.761301][ T52] Bluetooth: hci5: command tx timeout [ 700.803203][T17273] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.898475][T17273] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.977244][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 701.114648][T17465] netlink: 'syz.1.2906': attribute type 2 has an invalid length. [ 701.175376][T17471] netlink: 'syz.1.2906': attribute type 2 has an invalid length. [ 701.182054][T17472] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2908'. [ 701.195330][T17465] !9: entered promiscuous mode [ 701.278044][T17467] wg1 speed is unknown, defaulting to 1000 [ 701.296901][T17273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 701.328440][T17273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 701.346882][T17273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 701.424354][T17273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 701.480928][T17475] syzkaller1: entered promiscuous mode [ 701.490276][T17475] syzkaller1: entered allmulticast mode [ 701.747030][T17483] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2910'. [ 701.756668][T17483] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 701.782552][T17487] `: Port device dummy0 removed [ 701.788651][T17487] bond0: (slave bond_slave_0): Releasing backup interface [ 701.815227][T17487] bond0: (slave bond_slave_1): Releasing backup interface [ 701.837703][T17487] `: Port device team_slave_0 removed [ 701.856007][T17487] `: Port device team_slave_1 removed [ 701.862248][T17487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.870993][T17487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.882166][T17487] `: Port device geneve0 removed [ 701.890495][T17487] bond5: (slave gretap1): Releasing active interface [ 701.903102][T17487] batadv1: left allmulticast mode [ 701.908275][T17487] batadv1: left promiscuous mode [ 701.914343][T17487] bridge0: port 1(batadv1) entered disabled state [ 701.987129][T17273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.076172][T17273] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.109843][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.117331][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.268617][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.275880][ T9689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.300944][T17496] tipc: Enabled bearer , priority 0 [ 702.317843][T17496] syzkaller0: entered promiscuous mode [ 702.324072][T17496] syzkaller0: entered allmulticast mode [ 702.343215][T17495] tipc: Resetting bearer [ 702.376814][T17495] tipc: Disabling bearer [ 702.709455][T17520] netlink: 'syz.4.2919': attribute type 3 has an invalid length. [ 702.717801][T17520] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 702.738022][T17520] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2919'. [ 702.786437][T17273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.823244][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'. [ 702.845723][ T52] Bluetooth: hci5: command tx timeout [ 702.941668][T17273] veth0_vlan: entered promiscuous mode [ 702.975662][T17273] veth1_vlan: entered promiscuous mode [ 703.079835][T17273] veth0_macvtap: entered promiscuous mode [ 703.100075][T17273] veth1_macvtap: entered promiscuous mode [ 703.147326][T17273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.178937][T17273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.214522][T12975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.229569][T12975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.245694][T12975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.271875][T12975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.499211][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.529317][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.548526][T17557] wg1 speed is unknown, defaulting to 1000 [ 703.614739][ T9689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.644306][ T9689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.027535][T17584] wg1 speed is unknown, defaulting to 1000 [ 704.619119][T17600] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2939'. [ 705.202292][T17609] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 705.553113][T17616] ip6gretap2: entered promiscuous mode [ 705.578009][T17613] tipc: Started in network mode [ 705.594830][T17613] tipc: Node identity aecf2f71cf57, cluster identity 4711 [ 705.602270][T17613] tipc: Enabled bearer , priority 0 [ 705.609162][T17618] syzkaller0: entered promiscuous mode [ 705.616535][T17618] syzkaller0: entered allmulticast mode [ 705.649107][T17613] tipc: Resetting bearer [ 705.657118][T17612] tipc: Resetting bearer [ 705.682074][T17612] tipc: Disabling bearer [ 705.735590][ T11] block nbd3: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 360 seconds [ 705.751365][ T11] block nbd3: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 360 seconds [ 705.762519][ T11] block nbd3: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 360 seconds [ 705.774188][ T11] block nbd3: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 360 seconds [ 705.882368][T17625] wg1 speed is unknown, defaulting to 1000 [ 706.620550][T17645] 0{X: left allmulticast mode [ 706.647761][T17645] bridge10: left promiscuous mode [ 706.656921][T17645] bridge10: left allmulticast mode [ 706.896021][T17661] syzkaller0: entered promiscuous mode [ 706.911557][T17661] syzkaller0: entered allmulticast mode [ 706.927790][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2952'. [ 706.954794][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2952'. [ 707.264289][T17684] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2958'. [ 707.307028][T17683] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2959'. [ 707.476965][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 707.490234][T17692] wg1 speed is unknown, defaulting to 1000 [ 707.626617][T17707] bridge0: port 1(macvtap1) entered blocking state [ 707.638526][ T24] IPVS: starting estimator thread 0... [ 707.647011][T17711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2968'. [ 707.651992][T17707] bridge0: port 1(macvtap1) entered disabled state [ 707.660077][T17711] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 707.685324][T17707] macvtap1: entered allmulticast mode [ 707.690825][T17707] bridge0: entered allmulticast mode [ 707.699632][T17707] macvtap1: left allmulticast mode [ 707.705183][T17707] bridge0: left allmulticast mode [ 707.742340][T17713] IPVS: using max 35 ests per chain, 84000 per kthread [ 707.841130][T17720] wg1 speed is unknown, defaulting to 1000 [ 708.256543][T17739] netlink: 'syz.3.2974': attribute type 13 has an invalid length. [ 708.734576][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2978'. [ 708.766178][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2978'. [ 708.935045][T17762] tap0: tun_chr_ioctl cmd 1074025676 [ 708.948454][T17762] tap0: owner set to 0 [ 708.958457][T17759] wg1 speed is unknown, defaulting to 1000 [ 708.991835][T17760] wg1 speed is unknown, defaulting to 1000 [ 709.175767][T17768] macsec2: entered promiscuous mode [ 709.212215][T17768] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 709.309769][T17773] wg1 speed is unknown, defaulting to 1000 [ 709.437632][T17770] wg1 speed is unknown, defaulting to 1000 [ 709.466551][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 709.477477][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 709.489415][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 709.498844][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 709.518698][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 709.637564][T17778] wg1 speed is unknown, defaulting to 1000 [ 709.869190][T17791] netlink: 'syz.1.2987': attribute type 1 has an invalid length. [ 709.898443][T17791] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2987'. [ 710.009203][T17798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2989'. [ 710.027037][T12989] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.041511][T12989] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.081959][T17798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2989'. [ 710.126880][T12989] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.137378][T12989] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.185765][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 710.202948][T12989] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.214189][T12989] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.336425][T12989] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.360675][T12989] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.575737][T17811] syzkaller0: entered promiscuous mode [ 710.588680][T17811] syzkaller0: entered allmulticast mode [ 710.709707][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 711.515447][T12989] batman_adv: batadv0: Removing interface: ip6gretap4 [ 711.564497][ T5837] Bluetooth: hci2: command tx timeout [ 711.900086][T12989] bond2 (unregistering): (slave gretap2): Releasing active interface [ 711.913935][T12989] gretap2 (unregistering): left allmulticast mode [ 711.999768][T12989] `: Port device geneve0 removed [ 712.242531][T12989] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 712.424744][T12989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.433843][T12989] bond_slave_0: left promiscuous mode [ 712.440415][T12989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.450423][T12989] bond_slave_1: left promiscuous mode [ 712.456632][T12989] bond0 (unregistering): Released all slaves [ 712.469480][T12989] bond1 (unregistering): Released all slaves [ 712.574958][T12989] bond2 (unregistering): Released all slaves [ 712.587253][T12989] bond3 (unregistering): Released all slaves [ 712.690849][T12989] bond4 (unregistering): Released all slaves [ 712.795407][T12989] bond5 (unregistering): Released all slaves [ 712.807883][T12989] bond6 (unregistering): Released all slaves [ 712.918770][T12989] bond7 (unregistering): Released all slaves [ 713.023673][T12989] bond8 (unregistering): Released all slaves [ 713.133011][T12989] bond9 (unregistering): Released all slaves [ 713.151902][T17821] wg1 speed is unknown, defaulting to 1000 [ 713.309101][T17835] wg1 speed is unknown, defaulting to 1000 [ 713.619737][T17846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2999'. [ 713.629731][T17778] chnl_net:caif_netlink_parms(): no params data found [ 713.642751][ T5837] Bluetooth: hci2: command tx timeout [ 713.776650][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3002'. [ 713.899726][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 713.994055][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3003'. [ 714.015247][T17778] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.032322][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.039686][T17778] bridge_slave_0: entered allmulticast mode [ 714.058299][T17778] bridge_slave_0: entered promiscuous mode [ 714.068621][T17778] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.087135][T17778] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.107558][T17778] bridge_slave_1: entered allmulticast mode [ 714.119463][T17778] bridge_slave_1: entered promiscuous mode [ 714.471701][T17778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.542678][T17778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.872932][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'. [ 715.055378][T12989] : left promiscuous mode [ 715.088777][T17778] team0: Port device team_slave_0 added [ 715.098034][T17778] team0: Port device team_slave_1 added [ 715.158043][T12989] : left promiscuous mode [ 715.246001][T17778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.265416][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.310155][T17778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.332934][T12989] : left promiscuous mode [ 715.354653][T17778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.384930][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.440301][T17895] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 715.447876][T17778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.518644][T12989] tipc: Disabling bearer [ 715.544948][T12989] tipc: Left network mode [ 715.721389][ T5837] Bluetooth: hci2: command tx timeout [ 715.842962][T17778] hsr_slave_0: entered promiscuous mode [ 715.849488][T17778] hsr_slave_1: entered promiscuous mode [ 715.857069][T17778] debugfs: 'hsr0' already exists in 'hsr' [ 715.863264][T17778] Cannot create hsr debugfs directory [ 716.810454][T17932] wg1 speed is unknown, defaulting to 1000 [ 716.959397][T17941] netlink: 'syz.0.3022': attribute type 1 has an invalid length. [ 717.022237][T17941] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 717.163474][T12989] hsr_slave_0: left promiscuous mode [ 717.192551][T12989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.302829][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 717.811497][ T5837] Bluetooth: hci2: command tx timeout [ 717.867388][T12989] ` (unregistering): Port device team_slave_1 removed [ 717.912731][T12989] ` (unregistering): Port device team_slave_0 removed [ 718.303599][T17962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3026'. [ 718.330776][T17965] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3026'. [ 718.496569][T17778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 718.508080][T17979] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 718.593356][T17778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 718.623154][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3033'. [ 718.635937][T17778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 718.645802][T17978] tipc: Invalid UDP bearer configuration [ 718.645868][T17978] tipc: Enabling of bearer rejected, failed to enable media [ 718.785865][T17778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 718.899707][T17988] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 718.910231][T18000] tipc: Failed to remove unknown binding: 66,1,1/1672776184:1957429133/1957429135 [ 718.923175][T17988] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 718.940854][T18000] tipc: Failed to remove unknown binding: 66,1,1/1672776184:1957429133/1957429135 [ 718.955229][T18000] tipc: Failed to remove unknown binding: 66,1,1/1672776184:1957429133/1957429135 [ 718.966449][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'. [ 718.975411][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 718.984471][T18002] netlink: 'syz.3.3037': attribute type 18 has an invalid length. [ 718.992537][T17994] macvlan3: entered promiscuous mode [ 718.998147][T17994] macvlan3: entered allmulticast mode [ 719.004126][T17994] bond9: (slave macvlan3): Error -98 calling set_mac_address [ 719.215937][T12989] IPVS: stop unused estimator thread 0... [ 719.311103][T17778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.349803][T17778] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.365311][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.372553][ T9689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.440136][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.440197][T18022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.457231][ T9689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.470330][T18020] wg1 speed is unknown, defaulting to 1000 [ 719.638637][T18028] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 719.850360][T17778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.926040][T18036] netlink: 'syz.4.3044': attribute type 15 has an invalid length. [ 719.982809][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3044'. [ 720.018681][T17778] veth0_vlan: entered promiscuous mode [ 720.109206][T17778] veth1_vlan: entered promiscuous mode [ 720.135295][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3045'. [ 720.145221][T18042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3045'. [ 720.160901][T18044] netlink: 'syz.4.3046': attribute type 6 has an invalid length. [ 720.170682][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'. [ 720.202455][T18044] nbd: must specify at least one socket [ 720.208911][T18044] block nbd4: not configured, cannot reconfigure [ 720.284691][T17778] veth0_macvtap: entered promiscuous mode [ 720.323033][T17778] veth1_macvtap: entered promiscuous mode [ 720.385191][T17778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.449225][T17778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.511710][T12989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.520467][T12989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.552441][T12989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.586369][T12989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.715302][T18063] netlink: 'syz.4.3052': attribute type 10 has an invalid length. [ 720.741881][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.775958][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.846804][T12975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.859609][T12975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.215162][T18078] netlink: 'syz.2.2984': attribute type 5 has an invalid length. [ 721.366276][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 721.378271][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 721.387930][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 721.396635][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 721.405979][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 721.549105][T18093] wg1 speed is unknown, defaulting to 1000 [ 721.565077][T18089] wg1 speed is unknown, defaulting to 1000 [ 722.520073][T18141] netlink: 'syz.3.3070': attribute type 13 has an invalid length. [ 722.529834][T18141] netlink: 'syz.3.3070': attribute type 17 has an invalid length. [ 722.679667][T18141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 722.759777][T18142] wg1 speed is unknown, defaulting to 1000 [ 722.793699][T18146] __nla_validate_parse: 4 callbacks suppressed [ 722.793712][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3071'. [ 723.084691][T18089] chnl_net:caif_netlink_parms(): no params data found [ 723.143444][T18154] tipc: Enabling of bearer rejected, failed to enable media [ 723.193332][T18163] IPVS: Error connecting to the multicast addr [ 723.327038][T18174] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3077'. [ 723.376265][T18174] openvswitch: netlink: Message has 4 unknown bytes. [ 723.379658][T18180] syzkaller0: mtu less than device minimum [ 723.383574][T18174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.389725][T18177] tipc: Enabled bearer , priority 0 [ 723.418456][T18180] syzkaller0: entered promiscuous mode [ 723.431547][T18180] syzkaller0: entered allmulticast mode [ 723.440679][T18089] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.455169][T18089] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.467093][T18089] bridge_slave_0: entered allmulticast mode [ 723.478398][T18089] bridge_slave_0: entered promiscuous mode [ 723.488897][T18174] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 723.495570][ T5837] Bluetooth: hci4: command tx timeout [ 723.512427][T18174] syzkaller0: linktype set to 780 [ 723.547600][T18089] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.557018][T18089] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.569699][T18089] bridge_slave_1: entered allmulticast mode [ 723.583101][T18089] bridge_slave_1: entered promiscuous mode [ 723.598919][T18181] tipc: Resetting bearer [ 723.619803][T18176] tipc: Resetting bearer [ 723.667987][T18176] tipc: Disabling bearer [ 723.875056][T18089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.907099][T18205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3086'. [ 723.946254][T18201] wg1 speed is unknown, defaulting to 1000 [ 723.969519][T18089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.063955][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 724.078011][T18216] tipc: Enabling of bearer rejected, failed to enable media [ 724.335829][T18216] syzkaller0: entered promiscuous mode [ 724.341923][T18216] syzkaller0: entered allmulticast mode [ 724.376666][T18089] team0: Port device team_slave_0 added [ 724.422567][T18089] team0: Port device team_slave_1 added [ 724.557340][T18089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.576776][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.672171][T18089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.714229][T18089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.721907][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.751314][T18089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.762960][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3090'. [ 724.956043][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 725.027288][T18246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3095'. [ 725.152395][T18244] team0 (unregistering): Port device team_slave_0 removed [ 725.174873][T18244] team0 (unregistering): Port device team_slave_1 removed [ 725.229180][T18089] hsr_slave_0: entered promiscuous mode [ 725.243087][T18089] hsr_slave_1: entered promiscuous mode [ 725.563438][ T5837] Bluetooth: hci4: command tx timeout [ 726.034162][T18278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.048872][T18278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.099817][T18280] geneve2: entered promiscuous mode [ 726.565745][T18306] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3114'. [ 726.599463][T18089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 726.622121][T18089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 726.650061][T18089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 726.730552][T18313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.738572][T18089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 726.795684][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3118'. [ 726.798433][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'. [ 726.940289][T18334] netlink: 'syz.2.3122': attribute type 4 has an invalid length. [ 726.994841][T18089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.047221][T18089] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.114176][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.121399][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.133475][T18341] netlink: 'syz.2.3125': attribute type 3 has an invalid length. [ 727.193193][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.200362][T13632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.233959][T18351] syz_tun: entered allmulticast mode [ 727.317238][T18351] syz_tun: left allmulticast mode [ 727.485982][T18357] wg1 speed is unknown, defaulting to 1000 [ 727.509978][T18364] netlink: 'syz.2.3129': attribute type 2 has an invalid length. [ 727.607357][T18363] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.614963][T18363] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.651293][ T52] Bluetooth: hci4: command tx timeout [ 727.706527][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.728017][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.920781][T18367] netlink: 'syz.3.3130': attribute type 3 has an invalid length. [ 727.927959][T18375] __nla_validate_parse: 2 callbacks suppressed [ 727.927977][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 727.947317][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'. [ 727.964395][T12989] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.975277][T12989] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.986010][T12989] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.995815][T12989] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.129856][T18089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.203522][T18379] nbd: must specify at least one socket [ 728.222724][T18381] nbd: must specify at least one socket [ 728.428161][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 728.454732][T18395] netlink: 'syz.3.3135': attribute type 3 has an invalid length. [ 728.473770][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 728.486282][T18387] tipc: Enabled bearer , priority 0 [ 728.500347][T18387] syzkaller0: entered promiscuous mode [ 728.509434][T18387] syzkaller0: entered allmulticast mode [ 728.556973][T18387] tipc: Resetting bearer [ 728.582974][T18383] tipc: Resetting bearer [ 728.601097][T18383] tipc: Disabling bearer [ 728.668198][T18089] veth0_vlan: entered promiscuous mode [ 728.705359][T18089] veth1_vlan: entered promiscuous mode [ 728.796360][T18089] veth0_macvtap: entered promiscuous mode [ 728.809020][T18089] veth1_macvtap: entered promiscuous mode [ 728.849643][T18089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.872222][T18089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.890125][ T3537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.917576][ T3537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.950269][ T3537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.967207][ T3537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.246625][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.259461][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.298751][T18416] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3141'. [ 729.366495][T12975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.391745][T12975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.542631][T18430] netlink: 'syz.3.3145': attribute type 2 has an invalid length. [ 729.553141][T18434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3144'. [ 729.598113][T18430] : entered promiscuous mode [ 729.723309][ T52] Bluetooth: hci4: command 0x0419 tx timeout [ 729.815875][T18443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.877140][T18446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3148'. [ 730.189711][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 730.200556][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 730.209665][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 730.217134][T18459] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3149'. [ 730.227362][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 730.236015][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 730.279586][T18458] wg1 speed is unknown, defaulting to 1000 [ 730.453180][T18466] tipc: Enabling of bearer rejected, failed to enable media [ 731.024698][T18478] netlink: 'syz.4.3153': attribute type 1 has an invalid length. [ 731.032755][T18478] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3153'. [ 731.042216][T18478] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3153'. [ 731.154398][T18493] vlan5: entered promiscuous mode [ 731.159521][T18493] hsr_slave_1: entered promiscuous mode [ 731.199302][T18493] vlan5: entered allmulticast mode [ 731.211280][T18493] hsr_slave_1: entered allmulticast mode [ 731.643640][T18494] wg1 speed is unknown, defaulting to 1000 [ 731.802931][ T5837] Bluetooth: hci4: command 0x0419 tx timeout [ 731.861239][T18510] wg1 speed is unknown, defaulting to 1000 [ 732.079004][T18458] chnl_net:caif_netlink_parms(): no params data found [ 732.281652][ T5837] Bluetooth: hci1: command tx timeout [ 732.421829][T18521] syzkaller1: entered promiscuous mode [ 732.433483][T18521] syzkaller1: entered allmulticast mode [ 732.467259][T18527] syzkaller1: left promiscuous mode [ 732.490819][T18527] syzkaller1: left allmulticast mode [ 732.733736][T18458] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.744777][T18458] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.753186][T18458] bridge_slave_0: entered allmulticast mode [ 732.764574][T18458] bridge_slave_0: entered promiscuous mode [ 732.800725][T18458] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.809271][T18458] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.823389][T18458] bridge_slave_1: entered allmulticast mode [ 732.831639][T18458] bridge_slave_1: entered promiscuous mode [ 732.966090][T18458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.991934][T18458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.154362][T18458] team0: Port device team_slave_0 added [ 733.193502][T18458] team0: Port device team_slave_1 added [ 733.398701][T18558] __nla_validate_parse: 6 callbacks suppressed [ 733.398720][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 733.423636][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3175'. [ 733.426746][T18458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.468258][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.519633][T18458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.556094][T18458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.569728][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.599453][T18458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.687425][T18458] hsr_slave_0: entered promiscuous mode [ 733.695551][T18458] hsr_slave_1: entered promiscuous mode [ 733.702924][T18458] debugfs: 'hsr0' already exists in 'hsr' [ 733.708865][T18458] Cannot create hsr debugfs directory [ 733.952545][T18458] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.067219][T18458] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.155898][T18458] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.183872][T18558] xt_hashlimit: size too large, truncated to 1048576 [ 734.206561][T18558] xt_hashlimit: max too large, truncated to 1048576 [ 734.229041][T18584] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3181'. [ 734.287784][T18558] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 734.294539][T18458] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.362251][ T5837] Bluetooth: hci1: command tx timeout [ 734.814435][T18458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 734.851931][T18458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 734.894857][T18458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 734.913914][T18458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 734.994651][T18610] tipc: Enabling of bearer rejected, failed to enable media [ 735.126218][T18621] sctp: [Deprecated]: syz.4.3188 (pid 18621) Use of int in max_burst socket option deprecated. [ 735.126218][T18621] Use struct sctp_assoc_value instead [ 735.176178][T18619] wg1 speed is unknown, defaulting to 1000 [ 735.279533][T18458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.352455][T18458] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.397460][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.405088][T12975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.419433][T18634] sctp: [Deprecated]: syz.4.3190 (pid 18634) Use of int in max_burst socket option. [ 735.419433][T18634] Use struct sctp_assoc_value instead [ 735.649507][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.659985][T13632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.810884][ T11] block nbd3: Possible stuck request ffff8880254c8000: control (read@0,1024B). Runtime 390 seconds [ 735.822916][ T11] block nbd3: Possible stuck request ffff8880254c8200: control (read@1024,1024B). Runtime 390 seconds [ 735.837483][ T11] block nbd3: Possible stuck request ffff8880254c8400: control (read@2048,1024B). Runtime 390 seconds [ 735.852213][ T11] block nbd3: Possible stuck request ffff8880254c8600: control (read@3072,1024B). Runtime 390 seconds [ 736.334820][T18658] wg1 speed is unknown, defaulting to 1000 [ 736.441343][ T5837] Bluetooth: hci1: command tx timeout [ 736.444824][T18458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.620854][T18458] veth0_vlan: entered promiscuous mode [ 736.650988][T18458] veth1_vlan: entered promiscuous mode [ 736.727122][T18458] veth0_macvtap: entered promiscuous mode [ 736.747303][T18458] veth1_macvtap: entered promiscuous mode [ 736.790529][T18458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.837551][T18458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.884279][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.903109][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.915813][T18669] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3199'. [ 736.935140][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.971419][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.083884][ C1] ------------[ cut here ]------------ [ 737.089918][ C1] ODEBUG: free active (active state 0) object: ffff88804fb4ec90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 737.104121][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.4.3202/18678 [ 737.117771][ C1] Modules linked in: [ 737.122438][ C1] CPU: 1 UID: 0 PID: 18678 Comm: syz.4.3202 Not tainted syzkaller #0 PREEMPT(full) [ 737.132087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 737.143037][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 737.150734][ C1] Code: 89 44 24 20 e8 87 04 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 89 c0 8b 48 c7 c2 c0 8e c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 737.172551][ C1] RSP: 0018:ffffc90000a08a70 EFLAGS: 00010246 [ 737.178741][ C1] RAX: ffffffff8a4c8560 RBX: ffffffff99ab8998 RCX: 0000000000000000 [ 737.187071][ C1] RDX: ffffffff8bc08ec0 RSI: ffffffff8bc089a0 RDI: ffffffff8f8c80f0 [ 737.196433][ C1] RBP: ffffffff8b6d2440 R08: ffff88804fb4ec90 R09: ffffffff8b6d35a0 [ 737.205125][ C1] R10: dffffc0000000000 R11: ffffffff81aeb860 R12: ffff88804fb4ee00 [ 737.214987][ C1] R13: ffffffff8f8c80f0 R14: ffff88804fb4e000 R15: ffff88804fb4ec90 [ 737.225491][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 737.234579][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.241551][ C1] CR2: 00007f8cdc04bf98 CR3: 0000000051996000 CR4: 00000000003526f0 [ 737.250764][ C1] Call Trace: [ 737.254253][ C1] [ 737.257187][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 737.263010][ C1] ? do_raw_spin_lock+0x121/0x290 [ 737.268517][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 737.273779][ C1] kfree+0x13b/0x660 [ 737.277764][ C1] rose_timer_expiry+0x4cb/0x600 [ 737.282746][ C1] ? call_timer_fn+0x159/0x590 [ 737.287508][ C1] call_timer_fn+0x16e/0x590 [ 737.292122][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 737.297577][ C1] ? call_timer_fn+0xbe/0x590 [ 737.302301][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 737.307532][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.312774][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 737.318156][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 737.323753][ C1] __run_timer_base+0x61a/0x860 [ 737.329059][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 737.335273][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 737.341958][ C1] run_timer_softirq+0xb7/0x180 [ 737.347662][ C1] handle_softirqs+0x27d/0x850 [ 737.352871][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 737.357743][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 737.363758][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 737.369405][ C1] __irq_exit_rcu+0xca/0x1f0 [ 737.374573][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 737.380850][ C1] irq_exit_rcu+0x9/0x30 [ 737.385250][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 737.393367][ C1] [ 737.396394][ C1] [ 737.400201][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.407099][ C1] RIP: 0010:smp_call_function_many_cond+0xccf/0x12b0 [ 737.415415][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4a 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 f5 95 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 d9 95 [ 737.436425][ C1] RSP: 0018:ffffc9000b337460 EFLAGS: 00000293 [ 737.442802][ C1] RAX: ffffffff81b61c77 RBX: 1ffff110170c856d RCX: ffff88802a393d00 [ 737.451948][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 737.460567][ C1] RBP: ffffc9000b3375e0 R08: ffff88802f2479c7 R09: 1ffff11005e48f38 [ 737.469333][ C1] R10: dffffc0000000000 R11: ffffed1005e48f39 R12: ffff8880b8642b68 [ 737.480024][ C1] R13: dffffc0000000000 R14: ffff8880b873bb00 R15: 0000000000000000 [ 737.489318][ C1] ? smp_call_function_many_cond+0xce7/0x12b0 [ 737.496032][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 737.502651][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 737.509112][ C1] ? free_pgd_range+0x144b/0x14c0 [ 737.514381][ C1] ? rcu_is_watching+0x15/0xb0 [ 737.519886][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 737.525292][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 737.532779][ C1] flush_tlb_mm_range+0x6b1/0x1280 [ 737.538291][ C1] ? free_pgtables+0x8ea/0x9d0 [ 737.543474][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 737.552117][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 737.560238][ C1] tlb_flush_mmu+0x1a7/0x680 [ 737.565515][ C1] ? __pfx_down_write+0x10/0x10 [ 737.572440][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 737.577071][ C1] exit_mmap+0x439/0xb10 [ 737.582348][ C1] ? uprobe_clear_state+0x20f/0x290 [ 737.587925][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 737.593025][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 737.600509][ C1] ? __pfx_exit_aio+0x10/0x10 [ 737.606734][ C1] ? uprobe_clear_state+0x27c/0x290 [ 737.613743][ C1] __mmput+0x118/0x430 [ 737.619568][ C1] exit_mm+0x1da/0x2c0 [ 737.624428][ C1] ? __pfx_exit_mm+0x10/0x10 [ 737.629512][ C1] do_exit+0x658/0x2310 [ 737.635133][ C1] ? do_raw_spin_lock+0x121/0x290 [ 737.640451][ C1] ? __pfx_do_exit+0x10/0x10 [ 737.645274][ C1] do_group_exit+0x21c/0x2d0 [ 737.651181][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 737.657075][ C1] get_signal+0x1285/0x1340 [ 737.664281][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 737.672080][ C1] ? fput+0xa0/0xd0 [ 737.676037][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 737.683206][ C1] ? __x64_sys_sendmsg+0x230/0x260 [ 737.689201][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 737.697537][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 737.704023][ C1] ? rcu_is_watching+0x15/0xb0 [ 737.710196][ C1] do_syscall_64+0x2d0/0xf80 [ 737.715674][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.723309][ C1] ? clear_bhb_loop+0x60/0xb0 [ 737.728599][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.736455][ C1] RIP: 0033:0x7f523a98f749 [ 737.741580][ C1] Code: Unable to access opcode bytes at 0x7f523a98f71f. [ 737.750135][ C1] RSP: 002b:00007f523b8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.761689][ C1] RAX: 000000000000003c RBX: 00007f523abe5fa0 RCX: 00007f523a98f749 [ 737.772048][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 737.781556][ C1] RBP: 00007f523aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 737.792044][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.800458][ C1] R13: 00007f523abe6038 R14: 00007f523abe5fa0 R15: 00007ffdb8ad36c8 [ 737.810573][ C1] [ 737.813743][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 737.823103][ C1] CPU: 1 UID: 0 PID: 18678 Comm: syz.4.3202 Not tainted syzkaller #0 PREEMPT(full) [ 737.835130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 737.848191][ C1] Call Trace: [ 737.855152][ C1] [ 737.861381][ C1] dump_stack_lvl+0x99/0x250 [ 737.867633][ C1] ? __asan_memcpy+0x40/0x70 [ 737.872381][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.877795][ C1] ? __pfx__printk+0x10/0x10 [ 737.882815][ C1] vpanic+0x237/0x6d0 [ 737.887859][ C1] ? __pfx_vpanic+0x10/0x10 [ 737.894109][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 737.899577][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 737.906072][ C1] panic+0xb9/0xc0 [ 737.909939][ C1] ? __pfx_panic+0x10/0x10 [ 737.915620][ C1] __warn+0x317/0x4b0 [ 737.920589][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 737.926453][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 737.932458][ C1] __report_bug+0x288/0x500 [ 737.937144][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 737.945102][ C1] ? __pfx___report_bug+0x10/0x10 [ 737.951938][ C1] ? do_raw_spin_lock+0x121/0x290 [ 737.958660][ C1] report_bug_entry+0x19a/0x290 [ 737.964852][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 737.970892][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 737.978247][ C1] handle_bug+0xca/0x200 [ 737.984118][ C1] exc_invalid_op+0x1a/0x50 [ 737.988840][ C1] asm_exc_invalid_op+0x1a/0x20 [ 737.995549][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 738.004650][ C1] Code: 89 44 24 20 e8 87 04 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 89 c0 8b 48 c7 c2 c0 8e c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 738.030666][ C1] RSP: 0018:ffffc90000a08a70 EFLAGS: 00010246 [ 738.037507][ C1] RAX: ffffffff8a4c8560 RBX: ffffffff99ab8998 RCX: 0000000000000000 [ 738.047072][ C1] RDX: ffffffff8bc08ec0 RSI: ffffffff8bc089a0 RDI: ffffffff8f8c80f0 [ 738.057326][ C1] RBP: ffffffff8b6d2440 R08: ffff88804fb4ec90 R09: ffffffff8b6d35a0 [ 738.066514][ C1] R10: dffffc0000000000 R11: ffffffff81aeb860 R12: ffff88804fb4ee00 [ 738.074927][ C1] R13: ffffffff8f8c80f0 R14: ffff88804fb4e000 R15: ffff88804fb4ec90 [ 738.083995][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 738.089672][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 738.096488][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 738.102322][ C1] ? do_raw_spin_lock+0x121/0x290 [ 738.107381][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 738.112936][ C1] kfree+0x13b/0x660 [ 738.117598][ C1] rose_timer_expiry+0x4cb/0x600 [ 738.123186][ C1] ? call_timer_fn+0x159/0x590 [ 738.129383][ C1] call_timer_fn+0x16e/0x590 [ 738.135920][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 738.142265][ C1] ? call_timer_fn+0xbe/0x590 [ 738.148506][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 738.154867][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 738.160189][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 738.166180][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 738.172446][ C1] __run_timer_base+0x61a/0x860 [ 738.179259][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 738.185001][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 738.192055][ C1] run_timer_softirq+0xb7/0x180 [ 738.197078][ C1] handle_softirqs+0x27d/0x850 [ 738.201856][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 738.206812][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 738.214381][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 738.220224][ C1] __irq_exit_rcu+0xca/0x1f0 [ 738.225085][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 738.233614][ C1] irq_exit_rcu+0x9/0x30 [ 738.237981][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 738.244083][ C1] [ 738.249203][ C1] [ 738.252787][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 738.259220][ C1] RIP: 0010:smp_call_function_many_cond+0xccf/0x12b0 [ 738.266457][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4a 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 f5 95 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 d9 95 [ 738.290344][ C1] RSP: 0018:ffffc9000b337460 EFLAGS: 00000293 [ 738.296919][ C1] RAX: ffffffff81b61c77 RBX: 1ffff110170c856d RCX: ffff88802a393d00 [ 738.305109][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 738.314326][ C1] RBP: ffffc9000b3375e0 R08: ffff88802f2479c7 R09: 1ffff11005e48f38 [ 738.322710][ C1] R10: dffffc0000000000 R11: ffffed1005e48f39 R12: ffff8880b8642b68 [ 738.332214][ C1] R13: dffffc0000000000 R14: ffff8880b873bb00 R15: 0000000000000000 [ 738.340966][ C1] ? smp_call_function_many_cond+0xce7/0x12b0 [ 738.348208][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 738.353714][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 738.361348][ C1] ? free_pgd_range+0x144b/0x14c0 [ 738.370140][ C1] ? rcu_is_watching+0x15/0xb0 [ 738.375472][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 738.382049][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 738.388043][ C1] flush_tlb_mm_range+0x6b1/0x1280 [ 738.394153][ C1] ? free_pgtables+0x8ea/0x9d0 [ 738.400792][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 738.408729][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 738.415019][ C1] tlb_flush_mmu+0x1a7/0x680 [ 738.421257][ C1] ? __pfx_down_write+0x10/0x10 [ 738.426937][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 738.432909][ C1] exit_mmap+0x439/0xb10 [ 738.437356][ C1] ? uprobe_clear_state+0x20f/0x290 [ 738.443149][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 738.448695][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 738.454857][ C1] ? __pfx_exit_aio+0x10/0x10 [ 738.459587][ C1] ? uprobe_clear_state+0x27c/0x290 [ 738.465082][ C1] __mmput+0x118/0x430 [ 738.469210][ C1] exit_mm+0x1da/0x2c0 [ 738.474209][ C1] ? __pfx_exit_mm+0x10/0x10 [ 738.480529][ C1] do_exit+0x658/0x2310 [ 738.485176][ C1] ? do_raw_spin_lock+0x121/0x290 [ 738.490221][ C1] ? __pfx_do_exit+0x10/0x10 [ 738.495171][ C1] do_group_exit+0x21c/0x2d0 [ 738.499868][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 738.505605][ C1] get_signal+0x1285/0x1340 [ 738.510413][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 738.516168][ C1] ? fput+0xa0/0xd0 [ 738.519997][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 738.526599][ C1] ? __x64_sys_sendmsg+0x230/0x260 [ 738.532343][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 738.537925][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 738.544008][ C1] ? rcu_is_watching+0x15/0xb0 [ 738.548848][ C1] do_syscall_64+0x2d0/0xf80 [ 738.553456][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.559519][ C1] ? clear_bhb_loop+0x60/0xb0 [ 738.564285][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.570705][ C1] RIP: 0033:0x7f523a98f749 [ 738.575208][ C1] Code: Unable to access opcode bytes at 0x7f523a98f71f. [ 738.582305][ C1] RSP: 002b:00007f523b8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.590888][ C1] RAX: 000000000000003c RBX: 00007f523abe5fa0 RCX: 00007f523a98f749 [ 738.599029][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 738.607647][ C1] RBP: 00007f523aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 738.616516][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.626619][ C1] R13: 00007f523abe6038 R14: 00007f523abe5fa0 R15: 00007ffdb8ad36c8 [ 738.635322][ C1] [ 738.639105][ C1] Kernel Offset: disabled [ 738.644710][ C1] Rebooting in 86400 seconds..