last executing test programs: 2m40.380319074s ago: executing program 0 (id=3784): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r1, 0x40d, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2m37.573936275s ago: executing program 0 (id=3790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf0, 0x13, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xcd, 0x8, "9e62586d7994f98b9b7b9cc6436d732fbb5b0a2cb11a95ffb6efae48b18c3187e5ad1bfe8e65f5f93179ce32471b27f3daea37aea01c02c1e4ee67a1cffb26cf3f944233b980fc482388b6b721a61d010654fe4af0894e51c4d3a264f3a172c7a671360a491020fb459944e06d3e8ae09016801379a93b5833eb15bc96c439d20a188da1420ecb994981cf7c7a0bfba4b00233a64da39cce6c9f72196575aec0d542e7606c3ae30b52f588fb642ec7e898e288d00c27a9193adbf091c773b07c2cb95538ee9155a68d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x5) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r4) r5 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r5, 0x29, 0x24, 0x0, 0x2000005d) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1fc, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x3, 0x0, {0xa601, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x40f, 0x2, 0x9}}, @NL80211_ATTR_IE={0x14e, 0x2a, [@rann={0x7e, 0x15, {{}, 0x6, 0xf7, @device_b, 0x2, 0x5, 0x800}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x40, 0x7}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xeb, {0x9, 0x86, 0x3, "01a3c707aa459e3419cda06cdeb382370481b9628553ca6463d470cd8bcd868ec2df38c4c326075a5f90fc364b98b810624c84431eb725183e859f6ee1cf6222dc67be15b349cf1afc641f0d8018eaf9ef2570477e8a085ad1174d4c17b686327edd47cecc34fdfb954d2e54b4ea09eabdd7fe9035b7d6bd996618117e6d28e57635e592b3d815b46e99550b5d6b92fa9d2c1ed7e133b0e3c26d576fc4530ef907f33c8cb6176d6f1281ad132881d446c7d83bbfbc69ce3026c34898ef6ce77ca91893cb4142aad00d46dba50d9f54197f60f1afc7b7c92d65bea0f4ba5c04d7aeace7bec42ae0a2"}}, @erp={0x2a, 0x1}, @cf={0x4, 0x6, {0x5, 0x1, 0x38, 0x5}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x27, 0xa, 0x0, @broadcast, 0xfffffff7, @value=@device_b, 0xb35, 0xd0b, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0xffffff7f}]}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_FILS_KEK={0xf, 0xf2, "2ec194c6d77f5de2f7faac"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x802, 0x1, 0x6, 0x0, {0x7, 0xe2, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xfffeffff}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x3f, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8) socket(0x29, 0x802, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020007000000000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m37.311093219s ago: executing program 0 (id=3798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x2010, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r3, r0}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x2c040010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b800000019000100003305ef7b4745d3c400000000000000e000000200000000000000000000000000000000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) r9 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r8, 0x1, 0x70bd30, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) mmap(&(0x7f0000bd1000/0x2000)=nil, 0x2000, 0x1000005, 0x4012, r2, 0xffffe000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x3c6f, 0x7f}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 2m36.924991589s ago: executing program 0 (id=3803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r4, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) 2m36.677792629s ago: executing program 0 (id=3805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x9, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x200008d0) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x80000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'U'}]}], {0x14}}, 0x84}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r12 = socket$inet6(0xa, 0x80001, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x90) close(r9) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @broadcast}) socket$nl_generic(0x10, 0x3, 0x10) 2m34.6550868s ago: executing program 0 (id=3812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000900)={0x0, 0x1, 0x18}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0x36) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 2m28.162943137s ago: executing program 1 (id=3906): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000ff00000000000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2e, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x662}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffa89}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000000c0)=[{0x5, 0x2, 0xa}, {0x3, 0x1, 0xa, 0x8}, {0x0, 0x5, 0xb, 0x9}, {0x0, 0x3, 0x8, 0x8}], 0x10, 0xa}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2e, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x662}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffa89}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000000c0)=[{0x5, 0x2, 0xa}, {0x3, 0x1, 0xa, 0x8}, {0x0, 0x5, 0xb, 0x9}, {0x0, 0x3, 0x8, 0x8}], 0x10, 0xa}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="94dc3a698d73a8c041470fce00b51b911c0f5190f5998ba03276f6b4f8010025bd", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0x34, 0x1, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) r5 = socket(0x2c, 0x3, 0x0) socket(0x2, 0x0, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5}, 0x20) socket(0x2c, 0x3, 0x0) (async) r7 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r7}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r0, 0xffffffffffffffff, 0x1d, 0x12, r1, @void, @value, @void, @void, r4}, 0x20) socket$isdn(0x22, 0x3, 0x2) (async) r8 = socket$isdn(0x22, 0x3, 0x2) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000780)={@initdev, @local, 0x0}, &(0x7f00000007c0)=0xc) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2e8, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1, 0x75, 0x4, 0x6a, {0x4e24, 0x4e23, [0x0, 0x9, 0xfde, 0xaa], [0x5, 0x1ff, 0x7fffffff, 0x3], r9, [0x4, 0x7]}, 0x10000, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "8e4e1b616bfa98ff9a5bd3d4c0f479a52b0e2b345d59f2f0c4bc2f35304a5b8e6310cea426fbc3e62f1ee3bad49494e13f13a7ba7ce61a296896f7"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "d22bb905eeb4aa8f4d7d46fb3b04976f9b116f6c6937353818dfbbade28d595660cab1947fb277e2941277359b8362f07d1b36198b54f7460862d51860ed4faa290fe904399737ccc8d41ee1efc32c42bead20fa7f6960c9a98984b3297a0553e13b03593f0847c5d02583c78d7050449c345a3466c91d5a6d4c4d6bd0c131b7d981e25334dd804fe72bdb8c3080fafd920dc7558fb64a8d1333c45fce081266ef62cd3e56a535f62829c6b8c7de"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "a95a70aa9e62b923f487c846f46d3ba8dd2876b70dbcdb5f10295a628d37941f1b9632dc1713d7e1b61e037696751f6274ea2ee644d5b3d86522feed99de4fde9491c5584e2766c00c4fc45d0f277134e8de43fbab28b26240f2e9140fd7c273aeb33c8d73e7dac83163a2eadfacf34bbb95714def32e96d4d7089508932671e7f0049d5"}, @INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "2375589a623ffd36f801780630f5348aee97955119c3a12ee878c795e68630acd30d32e94bf829bca30760c3440d55af133ae251a06a1eaf58931da774cd2d040bef1aaceaa1bcb17b711e69220d1ef1f5ec516454dc71f37873f0ed11f1ef4f5d63af8758e543a1f8871c87febcb1e25840ae76c116958ec0534860fcd5b01755306fd88ea403a170f28790cf510fce965b3c1d9e7d2e7b1df46e473c76ac06f085390861939cacb22f895d3f0ccb207f83ab69aa4928980576061fd365ee"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "63128e2f5a1768a503ea9c521b2d28a7310c889c58d39615a4837c8138307042bc0bae4e986148a7cf42d78fb116130a4c3dab5a2d7c246334c8dcd4991e2e5962e2662f67b80b82c17f2ffe371c13174959279f8ff8"}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4c895}, 0x4) (async) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2e8, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1, 0x75, 0x4, 0x6a, {0x4e24, 0x4e23, [0x0, 0x9, 0xfde, 0xaa], [0x5, 0x1ff, 0x7fffffff, 0x3], r9, [0x4, 0x7]}, 0x10000, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "8e4e1b616bfa98ff9a5bd3d4c0f479a52b0e2b345d59f2f0c4bc2f35304a5b8e6310cea426fbc3e62f1ee3bad49494e13f13a7ba7ce61a296896f7"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "d22bb905eeb4aa8f4d7d46fb3b04976f9b116f6c6937353818dfbbade28d595660cab1947fb277e2941277359b8362f07d1b36198b54f7460862d51860ed4faa290fe904399737ccc8d41ee1efc32c42bead20fa7f6960c9a98984b3297a0553e13b03593f0847c5d02583c78d7050449c345a3466c91d5a6d4c4d6bd0c131b7d981e25334dd804fe72bdb8c3080fafd920dc7558fb64a8d1333c45fce081266ef62cd3e56a535f62829c6b8c7de"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "a95a70aa9e62b923f487c846f46d3ba8dd2876b70dbcdb5f10295a628d37941f1b9632dc1713d7e1b61e037696751f6274ea2ee644d5b3d86522feed99de4fde9491c5584e2766c00c4fc45d0f277134e8de43fbab28b26240f2e9140fd7c273aeb33c8d73e7dac83163a2eadfacf34bbb95714def32e96d4d7089508932671e7f0049d5"}, @INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "2375589a623ffd36f801780630f5348aee97955119c3a12ee878c795e68630acd30d32e94bf829bca30760c3440d55af133ae251a06a1eaf58931da774cd2d040bef1aaceaa1bcb17b711e69220d1ef1f5ec516454dc71f37873f0ed11f1ef4f5d63af8758e543a1f8871c87febcb1e25840ae76c116958ec0534860fcd5b01755306fd88ea403a170f28790cf510fce965b3c1d9e7d2e7b1df46e473c76ac06f085390861939cacb22f895d3f0ccb207f83ab69aa4928980576061fd365ee"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "63128e2f5a1768a503ea9c521b2d28a7310c889c58d39615a4837c8138307042bc0bae4e986148a7cf42d78fb116130a4c3dab5a2d7c246334c8dcd4991e2e5962e2662f67b80b82c17f2ffe371c13174959279f8ff8"}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4c895}, 0x4) getsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) getsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000000680)={&(0x7f0000000580)=""/253, 0xfd, 0xad, 0xb}) 2m27.846829281s ago: executing program 1 (id=3911): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x94) 2m27.801638507s ago: executing program 1 (id=3912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)=r0}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x30, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0x7a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x24, &(0x7f0000000440)=""/36, 0x40f00, 0x35, '\x00', r5, 0x1b, r6, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x5, 0x800, 0xff}, 0x10, 0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x2, 0x3, 0xd, 0x7}, {0x4, 0x4, 0xa}, {0x2, 0x3, 0x5, 0x2}, {0x1, 0x2, 0x7, 0x2}], 0x10, 0x3}, 0x94) 2m27.671642139s ago: executing program 1 (id=3914): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) (rerun: 64) 2m27.647232661s ago: executing program 1 (id=3917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r2, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "fccc63fafc6b3aa9"}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 2m27.585739999s ago: executing program 1 (id=3918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000017000000000000000000162e80000000000000019f33614c8c2bbd6bd69d563f4e5b9ddd6716e49af61ed2bfdbc4edc20077801547faf5369929c96aeaa99563c9a3360c0ca35a65a4e3979e25e9891c"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m19.608505067s ago: executing program 32 (id=3812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000900)={0x0, 0x1, 0x18}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0x36) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 2m12.531909967s ago: executing program 33 (id=3918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000017000000000000000000162e80000000000000019f33614c8c2bbd6bd69d563f4e5b9ddd6716e49af61ed2bfdbc4edc20077801547faf5369929c96aeaa99563c9a3360c0ca35a65a4e3979e25e9891c"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.082848046s ago: executing program 2 (id=5809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xd, 0x1, 0x6, 0x80, 0x0, 0x6, 0xfffb, 0x2, [{0xca, 0xe, 0xf}, {0xfff, 0x4, 0x7, 0x7}, {0xb, 0x5, 0x8c18}, {0xfffffffa, 0xa678, 0x4}, {0x5, 0x2, 0x9, 0x1}, {0x1, 0x8c1c, 0x907, 0x8001}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000100)='9', 0x1}], 0x2) 4.067614784s ago: executing program 3 (id=5810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r0, 0x1) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000125bd7000fbdbdf256600000008000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040004) (async) syz_emit_ethernet(0x2a0, &(0x7f0000000000)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "063841", 0x266, 0x21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@routing={0x11, 0x2, 0x1, 0x3, 0x0, [@empty]}, @dstopts={0x6c, 0x1f, '\x00', [@generic={0xd0, 0xe5, "25a9e3775714d1df8f07edcd7ea60f0ae8a94c1bbed87251b6188297378c21596df25cd264494bd58003feb83d85f9d9418fbae6d448427e953a192e761e453011f4d0e21bebb23a12359184242627e18f8213a0bd9e6a0fcb56a79cee10a644a87aa717ee9badd4ff8660688c954130b58520ea54633de2f828a541b5de978835c2d7323328f5c27c4f088691d974e14eccbe5094827639482c2431403fa55389c32b9262e50bd3a1dd15dec930fb2f4f7c32934e62ce06bd3b1348f53109f45980f8865e00315ef85f601ce3c36ec921d31e095cc7cee6d4305fa63bd6dc6b88f98ea274"}, @hao={0xc9, 0x10, @loopback}]}, @srh={0x0, 0x6, 0x4, 0x3, 0x4, 0x8, 0x3, [@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @empty]}, @dstopts={0x89, 0xa, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x2, 0xc, 0x6, 0x1, [0x401, 0x100000000, 0x149, 0x58, 0xa4ea, 0x6]}}, @enc_lim, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x9}]}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, "19a956", 0x8, "08f761"}, "624cff7771ef82d64f425eb4b0b6a4fc5443aea6be02729a97ae1eaedd52fd809e2a5cbfd6f5a4afae99551aa268675936735c604870944c98597d5dcb1ff62dbf75afd56b6ac6027b4b8dd0dbc6772ad239899e4392bdb9e63f3b7eac748feb28aaf615877b77e0060aa629bf27cd1562668f353ee69d4e5d60f3974417e920853600f92bfbc3d9bb2b3c1c0634f4466d4cf665149bb622bfceb3d89a31"}}}}}}, 0x0) 3.898418717s ago: executing program 3 (id=5814): ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendto$llc(r0, &(0x7f0000000000)="a9c42a942ff4f53bc93448b4cfad4970ec1a319e5e930b5078246d7e7c96ebf326", 0x21, 0x0, &(0x7f0000000040)={0x1a, 0x313, 0x5, 0x0, 0x20, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x8840) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_USERDATA={0xe, 0xd, 0x1, 0x0, "71580cdd43be8483a053"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) recvmsg$can_bcm(r1, &(0x7f00000017c0)={&(0x7f0000000340)=@ethernet, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/96, 0x60}, {&(0x7f0000001640)=""/39, 0x27}], 0x5, &(0x7f0000001700)=""/134, 0x86}, 0x100) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000001880)={&(0x7f0000001800)=""/76, 0x4c, 0xd, 0x4}) bind$isdn_base(r1, &(0x7f00000018c0)={0x22, 0x40, 0x5, 0x1, 0x8}, 0x6) bind$llc(r1, &(0x7f0000001900)={0x1a, 0x320, 0x0, 0x5, 0x30, 0x6a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000001940)={0x0, 0x3, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000001980), 0xc, &(0x7f0000003140)={&(0x7f0000001a00)={0x1718, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_IE={0x4d, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0xfa, @device_a, 0xf, @value=@device_b, 0x10, 0xbd5, @device_a, 0x7}}, @mesh_chsw={0x76, 0x6, {0x8, 0xf, 0x5, 0xa3cc}}, @mic={0x8c, 0x18, {0x2e3, "31b83ab6d788", @long="7fd909f406240abb092845544c319675"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "ae16609203b226b8"}, @NL80211_ATTR_FILS_ERP_RRK={0x83, 0xfc, "2331511d12ee5e9d885b4e45a7ff86347c18eed759e36b1098972a8f7cb0bef87ced0cbc0338d63786868ac26c585e4486b8ba28b06424483fe2d2500ed12d0f84c204901a695f855bf4efc20d58de9a06fff014ae4be86de6d7a74f46085fe77a7244f8c7abfdf5eef32f12e15f37f3ba76d62e54907b09cc26bdc495d9b8"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xdd}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffb}], @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x7}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x52, 0xfa, "20cca17d30cf8e291bb9c65bb65f7ca3b4dd72194bf43ee2d139307cd26b88a43ae9d45dc88066ad18e4797b483dfdeda60cdd78d5360ad64ae2e7ac9719b82c3bb3d999278e9c306e9efff778af"}, @NL80211_ATTR_FILS_ERP_REALM={0x8, 0xfa, "2b5cb9bd"}, @NL80211_ATTR_FILS_ERP_REALM={0x51, 0xfa, "df473959cafa5a7524d5e5a0e7ba0a72309d7e06faaa9c2fea61103fd14c84e23ab5ad9211ba2b48880c0ad2fce51ad087fd614f19e2aebb2ea02cf06b9ef096cb55515bce81387625e9ad752f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "077169ad3810279ad77e6c58"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "700f1b3332f1"}, @NL80211_ATTR_FILS_ERP_RRK={0xc3, 0xfc, "6d5faca38997c1afdf583b52275b59591e1ca80f01719660bc233a6b22c918413ac11770ce446870764dd0a8f70cd4926b041bfdd8c44bf7f15f8fe3c4dbddb9a52cfdbae1c31c1fdd4976fa32a02b8601d07852ab9046b246c8e8880539b4e0eeba4ca982414afcd578fed8a2df5404daefba0549762c23c37c8e72108a940035d8fc7424e07596a0a1654eadd94496e3caba94175ef8fefd3bd380e2c94498f5ce84b758ec3f426de85acd3b2b6b54558f7f99dafc693b1934d8718f9e43"}, @NL80211_ATTR_FILS_ERP_REALM={0xc5, 0xfa, "befb5fafc732325b78a5ab77b0ace561e1e74289eb1e1d6fb9fca66f6ebde0d5ff8038f31c2f9ccec71cc16f14ebdd7945d03bb617883c64d4ac0159d4c5af95f696a6f59f49085fe0cb57e71dc3d0ebc97a9400ee2a6961ab1e5dea388608955d658623ca7c180529c80856e80cffdeb51c10c0bc552f8f727e198b33af18f2c6b87a09d3bfc6d77e51b4e7f9bc79c3aee9d9e373232e8c17dde9b2d02c5e6e7ec01681ddf93d904b48a743ebccabc369793b404d469b3b4e9125e287ca55fff1"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "61a1b308cb024dfb2f5cfc57c4cb50"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "f92f322e7a0e3e09"}, @NL80211_ATTR_FILS_ERP_REALM={0x9b, 0xfa, "041e060424bbe83198ca28d17831ce64b6a4b0474c23c6ccf129bbd9f7b78d0dec88f22d9a5ea640e187657392317cdb089f1ed3a9b75f6c6bfdb7f255716ac93205aae42120ad27a2cc6c4523bc19b11bc7db55100c039c6b771a823e1213000e38a20168a2dbb919905c421b70cacc7eff8cf56bff9fdec134b7fc7a2c6c71fc2e7f0adab63864c61dd9c1830fc752b938eedcb7e73f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "6cb3ee18da733dbe13939d4611855ec9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "197f4e919d269c0db4"}, @NL80211_ATTR_FILS_ERP_REALM={0xcb, 0xfa, "bae36e00e1b7c3ce57350bc5f1e86f3bcec064e228a26205fe166934bb798f16f8d62174f36aae993e302202a46da58b61f49ec0d4d9d6692a2d4728e08d29143bc0286e35de156dc0881dce00aba2510920027687a60638ecb4536ca1312a51307094b628fab6c54c39523f1f7d1cb619962a2ca5a5ca6ee12ff88d8cd8d725cf9fd63ff1d2f2d9b15ad58b52a21e1f5a39231bc0db622359615ab4bdc95d724466a248de272ecde12930339c2797dafbfccb40758ea5ba7dbffc6260aeb36c79b73d15af0f63"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfb5d}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7d6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xaf, 0xfc, "702528d6898e129e3d113b3965828491586c0b6783c88ae8882b3c3703c1f384c4dc4d7d0060d5eda9f1d93d008ae01594784807e81e56b1c189769e4ae6c3cbbdb525fab32aa448d32b504e3c05f9cdb8e923d8044944dde3aa0269abdba0841ff39a539cf91b3bdd64d8a3e9a4e6f3115e91188090cdcd12995fc0cc390cc954c41e74b5b73cb7e5b1cb7c6b36fc4a2f8a7aef0eea19328dc33c32ec7d5c84aa75ea6be4f9a16d5d66ce"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "859128"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffc}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xf4, 0xfc, "8048f8cadb4a5cfa857fa8ef964ff545c888f3ce0e9b6e65124a331e2a594e6359be52cfd4971480ed78cd59c793facd19c2999641d564f695d6120f9ab0969068448338256b4f629edbd188d70a7dab9bb34482c81a30ba9973ff2abf4211d512afb76fc66d15500f1ec611d6c3ece8fc4480bb64d058e5944c4f6c462d21ab118f54e26e68cfd5c88cf63367bb548a6bdf86318da10e6dfb2772bd4c19dc813ce3c2f189a8bf0d234ca0a6634d860f967363902feac58947a2af5796edadff33035e5ca4d7b9e0258a3d2c710af6d12305f4a51d5512fac0b6d878f315eb9162bfe3aaf402c7a119ffb7d78367bc73"}]]}, 0x1718}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x44, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003440)={r1, &(0x7f0000003340)="23166470ea1bb9bbb33242445cd892d03965de7181060de604c55bb6eb4dacf776460afa18899799385f757e409da15e8960c2515e9568fffd8aa03144631b88de7a4bae859b8612bd41f93e59b96ab459fe1287481f8d0c76d879316ad7afba47def8ef6233f6a4c220835493990b85fd127fa40f3da405f1a2a17b695bcdd1e3b827021349baccfa9d9ab4a206e05e24e8c6a52f9bd6815e3fe7cf8194a729103ac4c3140665ab108f91f4eaf1385b0225479eca518327d693cfd444f80d7c", &(0x7f0000003400)=""/10, 0x4}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f00000035c0)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)={0x7c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x20004000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000003680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000003a80)={{r0}, 0x0, 0x4, @inherit={0x48, &(0x7f0000003600)={0x0, 0x0, 0x4, 0x7, {0x4, 0x2, 0x3, 0x100, 0x100}}}, @devid=r8}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000004b40)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004ac0)={0x2c, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000004c40)={'gre0\x00', &(0x7f0000004bc0)={'sit0\x00', 0x0, 0x8d6f76b0e15ae8ab, 0xb8, 0xfc3d, 0x7, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x65, 0x0, 0x49, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xdd, 0x3, 0x8, [{@multicast1, 0x4}]}, @timestamp={0x44, 0x1c, 0xd4, 0x0, 0x8, [0x80000001, 0xe8, 0x0, 0x8, 0x0, 0x4]}, @timestamp={0x44, 0x8, 0xf8, 0x0, 0x9, [0x8]}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000004d40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004c80)=@getchain={0x4c, 0x66, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x7, 0x5}, {0xffff, 0xe}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000801) syz_genetlink_get_family_id$nl80211(&(0x7f0000004d80), r3) connect$x25(r3, &(0x7f0000004dc0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000004e00)=@base={0x2, 0x6, 0x9, 0x2, 0x80, r3, 0x1e2, '\x00', 0x0, r3, 0x3, 0x1, 0x5}, 0x50) 3.738108591s ago: executing program 3 (id=5815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="10010000120000042dbd7000ffdbdf25647262675f70725f7368613531320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002400000000000000000000080001006d00000008000100930000ef070001000100000008000100c300000008000100080000000800010003000000"], 0x110}, 0x1, 0x0, 0x0, 0x40044}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002040)={0x3c, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x18, r9, 0x1, 0x0, 0xffffffff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x18}}, 0x0) 3.118784662s ago: executing program 6 (id=5824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000f13928fbe35899770000000000000000000", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e30000000000000000000000004001680"], 0x38}}, 0x0) 3.005767527s ago: executing program 6 (id=5826): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f00000000c0)={'veth1_vlan\x00', @ifru_settings={0xfffffeff, 0x9, @cisco=&(0x7f0000000040)={0x0, 0x1}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x1c0, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x66}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9c}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe53}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x550f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @remote, 0x7497}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe0bf}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36b3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5, 0x3, "8d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfc}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd68}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4880}, 0x100d1) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x264, 0x11, 0x800, 0x70bd29, 0x25dfdbfd, {0x20}, [@typed={0x5, 0x9a, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0xf4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="59c644e02b913adf78cce8e12a45fb43d24c3688477301a5f25220a8c53c1607eb47609a91bed2feee310fab31ac008db7a440dcc614c2c965465827c4dbffeb45fc2ba5abed9f2a38d80f756d7d2fa4cfd734f38589f9c57c56ca9f5ac7b37e8cddcde1749f57e782c0eb9b36b0287597a72f2c28112b9dfef651ea18e802f463b63218ec5ae07756d5de37f411acd6442150318e24edab593af5b6f8a62f892f3f3aa67fe30b0ba56b52", @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x3}, @generic="d4c265fa87f5208b651aa79a3eeb6e8fa3409d8bf31f9c3641bb18b2ff2becfca4d7434a82f9a42b20915732d277e0e260062c34d8b74c393addebd5c38c3009fce126b2689f288e1ca4e093f89eb49ec1bb935d96f16ee860aabf76ef1fc87e721f251166c7bcaedc9f27217d9a797644f25fe5ffadb8efdf41fc64722e96f5082b73d7b9bf7bf7ff8e42b1e1f14a5be7c492021f9ed5f2be76d6b5d9393d3168d0", @generic="1a6bc2694546e5dcc5fa5559d0a7afce9fd01d49d95a32bb09d8c19271167eb1d3886006fdb0e13d91454340fb8ee99f358f7841db80118239746bfefc0d0001be0d5c8e8802b128fc93b29ad3a477e5cb549c804708f72a5f089265cb623e6ef4b6368eade6a98b2b4d4c15a4a9857f708c88388d8d71cd029a0b290dee4c5aff13c8c2aedc9d2c28e7ea9e33c20a3a3e0b69feeb97da5993f020af76580cd3be6fefc5c7795689840fd521662dd1cfb37facd31d4794cb0e6dde6de2684ef141aaee99ffd0cfe0de79a571016b7a8c067e8f9e350aee92398f5b85"]}, 0x264}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.416352293s ago: executing program 5 (id=5827): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40c5) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'team_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x5e, "a2cab926a27d346c73365231f11c6c9479e8b7ee5c41e66ec9c280088e50cf0803c19918035dc0752c2a92153359abcd99cdec252bcd374d0792c5f46f7a83ed86b8645dcfe1d7d2e646732e6ab2d2c0e4be491b85cff711595901203f02"}, &(0x7f0000000540)=0x66) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000580)=r6, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x24008015) socketpair(0x1, 0x800, 0x4, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xdc, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20004891) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r7) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x238, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x72}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7d}]}, 0x30}}, 0x2404c094) socket$inet_udplite(0x2, 0x2, 0x88) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r11, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r12, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}]}, 0x44}}, 0x4c041) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r9, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x4000010) (async) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "2f2cdaa7f6af9c439bbe5ab61e652748bab552695b0c5318745e05"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40008c4}, 0x888) 1.372307908s ago: executing program 4 (id=5828): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010110}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000010000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r2, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0xffffe000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500004000e0ffffff00008509000000000000850000000500000095c21cdeae0e21922a7c5e51a10e60005a3b59f00aab9d9f73b0527c88aa97b39924039af8debbf957c5503f4794"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x56, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x16, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast2, @in=@loopback, 0x4e24, 0x0, 0x4e22, 0x5, 0x2, 0x20, 0xa0, 0x6, r5, r6}, {0x8, 0xe77e, 0x7, 0xd21, 0x9314, 0x5, 0x8, 0x1}, {0x2000000, 0x8, 0x7, 0x7a}, 0x81, 0x6e6bb8, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010102, 0x3502, 0x0, 0x2, 0x4, 0x5, 0x80000000}}, 0xe8) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r7, &(0x7f0000000280)="fecfb7b517b780835878f30291101821ca5e41d64b26b6975b6ac12160798816b6a80c09b979cae5377555d6592e84007503786ef37408146173c7e69e30e062da71ef1476002013efa6b9af1fc89e028dac557631b92d30d1c47cff61341ae465b7b2f13b6403de1ddb80cb5e8e04645a508eb7cfee0d0368e768c897c993488860229d", &(0x7f0000000340)=""/109, 0x4}, 0x20) 1.331538052s ago: executing program 3 (id=5829): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0xcc, 0x10, 0x2, 0x0, 0x0, {}, [@IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x371}, @IFLA_VFINFO_LIST={0x9c, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x36, 0x2, 0xb979}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x49, 0xb07, 0x0, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0xfffffffffffff669}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x9}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0xb}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7ff, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x9}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb, 0x2}}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4180}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)={[{0x2b, 'io'}, {0x6, 'pids'}, {0x2b, 'net_prio'}, {0x2b, 'cpu'}, {0x2d, 'io'}, {0x2b, 'devices'}]}, 0x26) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x292400, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.328651573s ago: executing program 2 (id=5830): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000480)="893bddaedccbffd6dc5815c5a13e4f3979e0f9e5ea6eef20d57e7892a575c50b67ae68537963a611bc2fbe6924211e82f4be1c5117cc62c44bb2c32acd6208ec801a1c5fb8de0b40c2631787863dae2f81b6a523f516788bc0ccb2b446a11bc421bf191db3e366635bf52686f25bdb0dcfd75da6cf13980c9003bb2da8c1cdd5a1a7eb53867592451b762a13dc415bfd964cb4ee7dbb2a92bd6adf8ccfa27156bf76886b8e104cb5da829a9a164f8458142bf617e3881983833f", 0xba}, {&(0x7f0000000540)="4879c734a418df8332260612d767b83ee14cb290f8cd8b3a42205844c80ebd5ab01c57894cad11e619ee80d17f8cea16412edc4836e5fff886652918cb30fe451225d93730206be06e72eaeae1eeedd0c386f7d213761d0a7348edf48723fd473ad989372f110ab95a55217eb46ce8967a89c1d426bcaad6b27d734dd8756e58ca3fff2a467719f8614930970d4a85a9ee8cde3b1e05e2852698749e8cf139ec5dd7cb66", 0xa4}, {&(0x7f0000000100)="8c539f0f3f709298878578437e2d899180d20154ade421270b88d505d7a0745688a3155570c530b6ccd16d2d30e0ee97a3c5fb864bef4cef468bfa3045db2ac47dc72bcc786df9ad36e42551a3a417cf83c35c6f1d32", 0x56}], 0x3, &(0x7f0000000600)="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", 0xfa, 0x4044010}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.183691245s ago: executing program 6 (id=5831): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xe8, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xa0, 0x1, [@m_gact={0x9c, 0x1f, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcc, 0x2, 0x0, 0x7fff, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd4e, 0x5}}]}, {0x4a, 0x6, "61b7cc74ca2dc81b36ce52f9620a829874912d5890b4b10088b2b693fb379e175abb4c951ba865e86b1389cb4e1950ae90cfa5bcb993c32bf41a7fd7e3d93c7db3e68b445b32"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008084) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r9, 0x0) (async) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.176484494s ago: executing program 4 (id=5832): syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb07a24f79ee3f86dd6020000000302f00fc000000000000000000000000000001ff0200000000000000000000000000010000883e0030907801000000aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874ec6f1308abec72de15237798823d355196caaeda436d3079e79653bc0385e0e16913468c04a4d00a053c013d9644568ea4bfe3f63f438ffd2195e50fbea59d7fd3cca683164524f9f0f399360144299"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x10) 1.137977759s ago: executing program 5 (id=5833): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 1.12869206s ago: executing program 4 (id=5834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x6010) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5e, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) close(r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, r4, 0xd10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8d64}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x75}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe547}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r2, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1a, 0xaf02, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20010000) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r8) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r10, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0xc}, {0x4}, {0x1b, 0x1}, {0x36, 0x1}, {0x9, 0x1}, {0x18}, {0x3}, {}, {0x48}, {0x6c}, {0x60, 0x1}, {0xc}, {0x6, 0x1}, {0x1}, {0x2}, {0x48}, {0x36, 0x1}, {0x6c}, {0x36, 0x1}, {0x18, 0x1}, {0x18, 0x1}, {0x60, 0x1}, {0x3, 0x1}, {0x30, 0x1}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000a80)=0x0) syz_open_procfs$namespace(r11, &(0x7f0000000ac0)='ns/mnt\x00') r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000b40)={'team_slave_0\x00'}) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r13, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x87}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xe8, r14, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8800}, 0x48011) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f80)='cpuacct.usage_user\x00', 0x0, 0x0) 972.33564ms ago: executing program 3 (id=5835): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10, 0x80000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000280)={r3, 0x8}, 0x8) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r8, 0xfff) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1e10, 0x4, 0x5, 0x30, 0x8, 0x8a}, &(0x7f00000004c0)=0x9c) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x1}, 0x1) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x5, 0x7fffffff, 0x6e, @empty, @dev={0xfe, 0x80, '\x00', 0x39}, 0x41, 0x80, 0x7fffffff, 0x7fffffff}}) setsockopt$inet6_mreq(r10, 0x29, 0x6, &(0x7f00000001c0)={@mcast2, r11}, 0x14) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="06000000", @ANYRES32, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x44}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x8, 0x4) 971.955744ms ago: executing program 5 (id=5836): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) 967.112003ms ago: executing program 2 (id=5837): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x18}, 0x851) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) (async) close(r0) 892.370604ms ago: executing program 2 (id=5838): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 875.225677ms ago: executing program 4 (id=5839): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x2c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) 831.861673ms ago: executing program 6 (id=5840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x0, 0x81, 0x8, 0xd40}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r0, 0xc252d000) (rerun: 64) 599.399745ms ago: executing program 6 (id=5841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f000000c300)={0xfd6, 0x100, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x26}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) poll(&(0x7f0000000280)=[{r6, 0x14c}, {r4, 0x50}], 0x2, 0x5) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0xa, 0xa, 0x203, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x820}, 0x10) 498.165569ms ago: executing program 5 (id=5842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 408.445744ms ago: executing program 4 (id=5843): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 408.038812ms ago: executing program 2 (id=5844): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5, r6}, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x6, 0x1a, 0x0, 0x20000000) (async) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r8) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000006c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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", @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES32=r1], 0x3c}}, 0x4000) 406.179138ms ago: executing program 6 (id=5845): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200080dc}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 258.235343ms ago: executing program 2 (id=5846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "118c5ab91b9f1f10d98a3a17ad3ba538b47cd4ceef303be12ce3a98f351feacb7ac35f8889fc75937437faeca6a048f53f28601add52f55a5b1915fefb81446ddce4c1c1ffd059e960175acc7015b08d7cc5f764ec31ff29914deaf2b713f5d4922fb05120536a3e1c384d937a70ede1cacd1532ccff5b84743b71d088713c68fc470f0d29c6cca43ce82ddff1ad19cb68f8ab7fe7fbc26eb28224ab92288d6e487692496e9d0f77c533b9fe4d886e592bec6d36838784c8686d812e92ed3040324efb6710322dfb176bcbba5a321e79dd6b91a157ffaba0fe00684482ba1c"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4008084}, 0x41) r2 = socket(0x2, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r4, &(0x7f00000028c0)={&(0x7f0000000280)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)="f9000989afbed018867799971fe90cb3d986f992096adea05d3c13ca7b6ff1f455541531de169b13147b936359f85a48eb9923f5083c5d4f8024e58748a38d6e624411f8d3007a156b022665dd2aa6f626f2579f84528ce87fed23ac0dcc605589ccb8926dfc6c", 0x67}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="22c0778bf42521b386b1826881b808fe89bb188429f57e5a88401d2a334f46c12fc40e2d602da39bab7d8405d3e19715485101cde2ea87915011e521eb5da02aa255ad188062e66481f2a488fca17fa769c880131993f599d6ccb9cae30fdcb9e204ac57f44def0f98d77f7739ba82aec9ca92bae3bfa24ed20b3a9ab78adb256c21ef0b5e88cd24da4e28e58fbc4977b5acdbdcb0074021c5ddfbbf8b9cd84f2b6bb3530bec7e9f52943c5f04dc87ad3b6d1f59aa5bd4153c3013032a50ff44b29d9326c70c86a91be412b56c32265ca31f41ef908feef2a31a84eced9165277754a3dc58d7133d5a7a2eae20d97f4e2e8605c91ee25bc570", 0xf9}, {&(0x7f0000001480)="c50f2f36d54bd11002010e9360d9e09ad6fa11a0fc9b7f2466a14d974cc39dcb5e0304843e2b8da875bdf889440ab378b18053b5645e1e6301e7275f3805f3250711c8e02b6a994c52", 0x49}, {&(0x7f0000001500)="b8708a650590e9506b2dba0e4927f7f90d346d8e6964dad0fa5d8a28de3399245da8110b10c36e01c098bac1a2c717ef7159be821c7adc313aaad4f590b8403eb4948c48f985d618c374bf1f9eab38cabb9d1fe089865f5eca9a0437ac202c5719b436f177630b1973ee31eb544028a02e29c6bb31ddd4123facdc2b24220efe1872dd80a15526c4af43410af15561b95027cb8ef58a64daa1afa94282a565136010aa91435f94c279b344d23fca6e320e315d63645802bb50ffeed09a", 0xbd}, {&(0x7f00000015c0)="d4e6cd09eb063c603d725e3960fbba2bc6ff5d7eb63d82db3f1009cc1b4c323b02c8e1b8a7d50b759b7bb1536951afd7d56241dd5efdffd8fb81cd6ba97231653fc1c4ac30c37e11ee11e650b351f49ced0aac6201aa8a0b11e3b8ae336bda7dab909cee467162648c12e2b41e5c8d21647ad2455a56859ec6cfc61aee4663c26df65e9164b48f24823b78b7e0174a90509ab578a699b0786e718c4082840fb9bc6026", 0xa3}], 0x6, &(0x7f0000001700)=[{0x18, 0x110, 0x2, "24d37f"}, {0x48, 0x118, 0x6, "434fc078ada0ff76b48c9ddcd267bfeac770e109520c950a7d7a93e59f4fa093be7a3b08790c5b4b3f011a867c8c5a4ac3c72af05cd0362e"}, {0x1010, 0xd, 0x19, "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"}, {0x20, 0x189, 0xee, "2e9a1a65aedc2226b5e5a284"}, {0xb0, 0x102, 0x7, "fe5a85bee9398038f90ee9b85427a5398292ccc31ac49adf23e6e010526d1c541394f0bfde8f64c7f8aa0922f05760aa0101dc8fe9fae6cfc14e370336833559d1d4276e11efc9c7adb8f9f0799cd3d1850814044a85782c57e9e515113d364e2e9aeb453ce5cc54ddac6179a31fbcec323bc48a5b7294ec3f30bfa0515d7db2bc32916a99d50d9337d5668ee3a07fae0840c6516b0f7b0ba23e96c6"}, {0x80, 0x3a, 0xd1, "fbaa02f0ca7be3c4218e5dc500f0b01686e16052484ac952401f940db06bd7e82f405cc0482d57b7727b134dd910b32301969a93a7b42019e1592d12fc20f2328b620f2ceb8ac45c4155254431a79e3b220765132369ea65d9ebfd6bd4f9458fb3225b58f7fce1010494"}], 0x11c0}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000002ac0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a80)={&(0x7f00000029c0)={0x8c, r5, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x40, 0xba10}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3d90a5bb9917"}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c0"}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xf, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0xb7}]}, @NL80211_ATTR_SSID={0x18, 0x34, @random="ff163400b31c4c5825769a1fa475203afb5a6150"}]}, 0x8c}}, 0x4040800) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002b00)='cpu.stat\x00', 0x0, 0x0) write$tun(r7, &(0x7f0000002b40)={@val={0x0, 0xe175}, @val={0x1, 0x0, 0x25dd, 0xfffe, 0x1, 0x12}, @ipv4=@icmp={{0x16, 0x4, 0x2, 0x4, 0x99, 0x64, 0x0, 0xcc, 0x1, 0x0, @rand_addr=0x64010100, @multicast2, {[@end, @noop, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x4, [{@multicast2, 0x33e5ed04}, {@private=0xa010101, 0xca}, {@local, 0x10000}]}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0x1b, 0x3, 0x0, [{@private=0xa010101, 0x10000}, {@broadcast, 0xb}, {@empty, 0x6}, {@broadcast, 0xff}]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0xe, 0x4, 0x0, 0xe, 0xfffd, 0x67, 0x9, 0xdf, 0x84, 0x5, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x23, 0x9a, [@multicast2, @empty, @broadcast, @private=0xa010100, @broadcast, @broadcast, @private=0xa010100, @rand_addr=0x64010101]}]}}, "1b"}}}, 0xa7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000002f00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002c40)={0x280, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x15c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xfc163e9693cd32cf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc5ec7e2268d22bc}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7144a1227b39628f}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x280}}, 0x1) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000030c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003080)={&(0x7f0000002f80)={0xd8, 0x1, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xc4, 0x6, "634ac770a70271d93319a1ac3c5bed0a6e74851ca04ecb2f998906ef321eca3e746ab57741c0356340cc6270698684df156fd3376670c5bfab3a71477ba3a94b290d7ef8538905bd983c2122595992be3d85be536f9fd8c67f8813ced197526cb344333d6399dc29005b383572e80adf381870218d18e1a2b964ffebfa9227859ba38fc9ee8fc3a6e904855ff32d05b5c1ac024bc0f4920cf96ee10e6aa6f0ef5f24f1a06377cf8c09085a24a036ac2eba5957500279a33f1f0d407733526ad4"}]}, 0xd8}}, 0x4c0c1) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x64, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "591b269f3f9eccc7abebf92343"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8bb5c027a2e126348de67b3a04"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2090655f9f"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x64}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) sendmsg$alg(r2, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="67f0431bd36357af55b55c3cc9e19a32acc6cb7770e13a924e8a4e65620959161084b6015c15e70b2053d0e78d2953fb226b5a17fd0a9c54e8dc58642ea320d3db8fc0dfecd6db97ef546c1fcef8166a84807ae47f676857ce3381893b60682549e5c8831985b2eefd7ea8bec073343d3f5e0fed552b5807918e67f9f26b95119bd32609", 0x84}], 0x1, &(0x7f0000003340)=[@iv={0xf0, 0x117, 0x2, 0xda, "3636e0740d9956cc19c664b29e31b56b72b3a1db49e088130f7afc2ae477f4ffa615ee63384896297f6c7c328b5d9ae28deffa5d7f857a0471ea16958d87d7255aae05f42fccccc14daa2bfb3ef2db7bc315f443657763e03aa706926f1cbce6ee398969de052cb7e59b46f97bf6c7510dd9e5f7c1a9987b9396ba32c5ca972091df4079c279dec08202595921ab1ff48d22bc51f469034419382ab51578f5e8677766be418e89f98e953a75850999383473a0f2293ef5b492e0b3a19a654377a0ff4e33287fc6089575a199d82757e3e778183dd925d42b7169"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x2}, @iv={0xc8, 0x117, 0x2, 0xb3, "ab7091c8e345257bee85e3d0313a503bb930b292e1a887ddffb3dcf39839270680bc18dbffbf0ab5034cfc01d425b3197e6a06ea0eeb6e535ec536d7c0c390f58def0eafc5c72d47f66b90b68156e2643ecd0f74e099ed78aa89a6958dae83ebf81026dc73496a990bb98767bd39371d6d5193a0a049924730445ec8146e16505a3f31f23b51c212e0269116a3a13b025bdefc2ede5bd161e9b26cf26c6d600927d97e7d09bb2e934fa3054e46814482b6da6d"}], 0x200, 0x800}, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000035c0), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000003680)={'tunl0\x00', &(0x7f0000003600)={'gre0\x00', r3, 0x8, 0x8, 0x6, 0x1, {{0x9, 0x4, 0x2, 0x5, 0x24, 0x65, 0x0, 0x8, 0x4, 0x0, @loopback, @local, {[@timestamp={0x44, 0x10, 0x66, 0x0, 0x5, [0x8001, 0x1, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000003740)={'syztnl1\x00', &(0x7f00000036c0)={'ip_vti0\x00', r3, 0x8000, 0x80, 0x6, 0xff, {{0x12, 0x4, 0x2, 0x6, 0x48, 0x67, 0x0, 0x74, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0xd, [{@broadcast, 0x2}, {@loopback, 0x7}, {@empty, 0x6}, {@multicast1, 0x1392}, {@loopback, 0x80}, {@broadcast}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004000)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003780)={0x814, r8, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x137b, 0xff, 0x3, 0x8}, {0xc, 0x7f, 0x8, 0x8}, {0x6, 0x6, 0x2, 0xfffffff7}, {0xe1a8, 0xfe, 0xe, 0x3}, {0x5, 0x9, 0x5, 0x7f}, {0x6, 0x0, 0xb0, 0x7e}, {0x1000, 0x7, 0x9, 0x1}]}}}]}}, {{0x8, 0x1, r3}, {0x1dc, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x38}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r3}, {0x118, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x81, 0x6, 0x7, 0x2}, {0x5, 0x3, 0x1, 0x1}, {0x4, 0x6, 0xff, 0x6}, {0x0, 0x40, 0xd, 0x6}, {0x9, 0x9, 0xfc, 0x81}]}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x6, 0x8a, 0x1}, {0x6, 0xf, 0x6, 0x1}, {0x5, 0x5a, 0x0, 0x2}, {0x9, 0x8, 0x0, 0x10000}, {0x8000, 0x3, 0xd, 0x2}, {0x3, 0x9, 0x8}, {0x2, 0x4, 0x8a, 0x10000}, {0x81, 0xf, 0x6b, 0x7}, {0x8, 0x9, 0x9, 0x40}]}}}]}}, {{0x8, 0x1, r3}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe56b}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}]}, 0x814}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$vsock_stream(r2, &(0x7f0000004040)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000004080)=@req3={0x1, 0xfffffffe, 0x1000, 0x2, 0x9, 0x9, 0x3}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000004340)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004300)={&(0x7f0000004100)={0x1cc, r8, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x1b0, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x1, 0x2, 0x6}, {0x6, 0x80, 0x1, 0x2}, {0x9, 0x8, 0x6, 0x8}, {0x1, 0x7, 0x5, 0x5}, {0x7146, 0xf1, 0x0, 0x3}, {0x7, 0x72, 0x40, 0x2}, {0x0, 0x2, 0x3, 0x5}, {0xffff, 0x8, 0xd}, {0xffff, 0x0, 0x0, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f94573d}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd1e}}, {0x8, 0x6, r3}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x40010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004540)={&(0x7f0000004380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x4}]}, @enum64={0x3, 0x4, 0x0, 0x13, 0x0, 0x8, [{0x7, 0x3, 0xd8}, {0xb, 0xfffffffd, 0x1}, {0x1, 0x6, 0x5}, {0x4, 0x9, 0x2}]}, @union={0x6, 0x1, 0x0, 0x5, 0x1, 0x40, [{0xd, 0x0, 0x7}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000004440)=""/243, 0x90, 0xf3, 0x0, 0x6, 0x10000, @value=r7}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000045c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000004680)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x3c, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "3a7840063e95c55ac43512e1c0c0abee"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000810) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000004780)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4009}, 0x4004) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f00000048c0)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004880)={&(0x7f0000004800)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5899}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000004900)=0xa, 0x4) 237.497739ms ago: executing program 5 (id=5847): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x400008, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x100000}}) 176.35056ms ago: executing program 4 (id=5848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) (async, rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 70.808056ms ago: executing program 5 (id=5849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20}, 0x1) 0s ago: executing program 3 (id=5850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000062726964676500001400029ba5002500000000000500260000000fe8574ce33f1f26e7634697d80000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) kernel console output (not intermixed with test programs): 408.608599][T19875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.624248][T19875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.730126][T19875] veth1_vlan: left allmulticast mode [ 408.744320][T19876] syz_tun: entered allmulticast mode [ 408.750093][T19876] syz_tun: left allmulticast mode [ 408.762269][T19877] dvmrp8: entered allmulticast mode [ 408.772860][T19878] dvmrp8: left allmulticast mode [ 408.815184][T19893] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 408.826077][T14367] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.850749][T14367] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.872307][T14367] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.895186][T14367] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.934041][T19896] netlink: 'syz.1.3708': attribute type 1 has an invalid length. [ 408.984873][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3708'. [ 408.996541][T19901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3708'. [ 409.009561][T19900] netlink: 'syz.2.3710': attribute type 11 has an invalid length. [ 409.019422][T19900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.433600][T19921] bond2: option xmit_hash_policy: invalid value (64) [ 409.449773][T19921] bond2 (unregistering): Released all slaves [ 409.514778][T19926] netlink: 'syz.0.3719': attribute type 2 has an invalid length. [ 409.547734][T19926] : entered promiscuous mode [ 409.876146][T19948] xt_cluster: node mask cannot exceed total number of nodes [ 409.993786][T19961] netlink: 'syz.0.3728': attribute type 2 has an invalid length. [ 410.117553][T19968] __nla_validate_parse: 4 callbacks suppressed [ 410.117574][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 410.501023][ T30] audit: type=1800 audit(1770322803.165:4): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3735" name="memory.events" dev="tmpfs" ino=691 res=0 errno=0 [ 410.546796][ T30] audit: type=1804 audit(1770322803.195:5): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3735" name="/newroot/132/memory.events" dev="tmpfs" ino=691 res=1 errno=0 [ 410.585398][T19989] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 410.632300][T19991] netlink: 'syz.3.3737': attribute type 11 has an invalid length. [ 410.686826][T19993] Cannot find set identified by id 65534 to match [ 410.740648][T19992] syzkaller0: entered promiscuous mode [ 410.748562][T19992] syzkaller0: entered allmulticast mode [ 410.960555][T20003] TCP: TCP_TX_DELAY enabled [ 411.787911][T20007] netlink: 'syz.3.3741': attribute type 2 has an invalid length. [ 411.795914][T20007] netlink: 'syz.3.3741': attribute type 11 has an invalid length. [ 411.804932][T20007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3741'. [ 411.848838][T20008] netlink: 'syz.3.3741': attribute type 1 has an invalid length. [ 412.557643][T20011] netlink: 'syz.2.3742': attribute type 2 has an invalid length. [ 412.596298][T20013] netlink: 'syz.0.3743': attribute type 2 has an invalid length. [ 412.618681][T20013] 9: entered promiscuous mode [ 412.721836][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3745'. [ 412.738890][T20015] bond4: option miimon: invalid value (18446744073709551585) [ 412.746602][T20015] bond4: option miimon: allowed values 0 - 2147483647 [ 412.765262][T20015] bond4 (unregistering): Released all slaves [ 412.771535][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3745'. [ 413.015172][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3748'. [ 413.065811][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3748'. [ 413.355504][T20049] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 413.379942][T20049] bond1: entered promiscuous mode [ 413.385405][T20049] bond1: entered allmulticast mode [ 413.391074][T20049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.522482][T20067] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3759'. [ 413.593164][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 413.615188][T20073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3762'. [ 413.634600][T20074] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3761'. [ 413.943128][T20093] validate_nla: 5 callbacks suppressed [ 413.943147][T20093] netlink: 'syz.3.3766': attribute type 5 has an invalid length. [ 413.947561][T20088] syzkaller0: entered promiscuous mode [ 413.979789][T20088] syzkaller0: entered allmulticast mode [ 413.991204][T20088] netlink: 'syz.4.3767': attribute type 4 has an invalid length. [ 414.026148][T20088] tipc: Started in network mode [ 414.031187][T20088] tipc: Node identity 82c8ec705b22, cluster identity 4711 [ 414.046331][T20088] tipc: Enabled bearer , priority 0 [ 414.057613][T20087] tipc: Resetting bearer [ 414.071105][T20098] netlink: 'syz.1.3770': attribute type 1 has an invalid length. [ 414.113969][T20087] tipc: Disabling bearer [ 414.145275][T20098] bond4: entered promiscuous mode [ 414.150475][T20098] bond4: entered allmulticast mode [ 414.156384][T20098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.192389][T20103] macvlan2: entered promiscuous mode [ 414.201802][T20103] macvlan2: entered allmulticast mode [ 414.208019][T20103] team0: Device macvlan2 is already an upper device of the team interface [ 414.288561][T20107] netlink: 'syz.3.3772': attribute type 7 has an invalid length. [ 414.299034][T20107] netlink: 'syz.3.3772': attribute type 8 has an invalid length. [ 414.340435][T20107] dummy0: entered promiscuous mode [ 414.347755][T20107] team0: entered promiscuous mode [ 414.357212][T20107] team_slave_0: entered promiscuous mode [ 414.385170][T20107] team_slave_1: entered promiscuous mode [ 414.416659][T20107] gretap0: entered promiscuous mode [ 414.433305][T20107] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 414.442637][T20110] netlink: 'syz.4.3773': attribute type 13 has an invalid length. [ 414.444934][T20107] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 414.466639][T20107] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 414.629487][T20123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.667572][T20123] bridge4: entered promiscuous mode [ 414.673170][T20123] bridge4: entered allmulticast mode [ 414.728698][T20130] x_tables: duplicate underflow at hook 1 [ 414.881847][T20125] syzkaller0: entered promiscuous mode [ 414.897846][T20125] syzkaller0: entered allmulticast mode [ 415.243823][T20158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.274064][T20158] bond5 (unregistering): Released all slaves [ 415.309591][T20160] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 415.347559][T20160] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 415.360270][T20160] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 415.370749][T20160] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 417.629708][T20132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.769098][T20168] __nla_validate_parse: 7 callbacks suppressed [ 417.769119][T20168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3792'. [ 417.828501][T20168] tipc: Invalid UDP bearer configuration [ 417.828559][T20168] tipc: Enabling of bearer rejected, failed to enable media [ 417.889045][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 417.899267][T20182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3790'. [ 418.889702][T20219] syzkaller0: entered promiscuous mode [ 418.896186][T20219] syzkaller0: entered allmulticast mode [ 420.520240][T20222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 420.533379][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 420.918517][T20256] xt_ecn: cannot match TCP bits for non-tcp packets [ 420.945851][T20256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3816'. [ 420.994557][T20253] netlink: set zone limit has 4 unknown bytes [ 421.063296][T20251] netlink: 'syz.2.3813': attribute type 10 has an invalid length. [ 421.161042][T20251] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 421.192765][T20266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3817'. [ 421.204034][T20249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.215384][T20266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3817'. [ 421.369171][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3821'. [ 421.390834][T20272] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3821'. [ 422.086079][T20301] syzkaller0: entered promiscuous mode [ 422.092151][T20301] syzkaller0: entered allmulticast mode [ 422.605056][T20309] : renamed from hsr0 [ 422.648891][T20308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.772309][T20313] netlink: 'syz.4.3832': attribute type 11 has an invalid length. [ 422.788948][T20313] netlink: 'syz.4.3832': attribute type 4 has an invalid length. [ 422.799132][T20313] netlink: 'syz.4.3832': attribute type 5 has an invalid length. [ 422.809790][T20313] netlink: 'syz.4.3832': attribute type 6 has an invalid length. [ 422.830016][T20313] __nla_validate_parse: 2 callbacks suppressed [ 422.830035][T20313] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.3832'. [ 423.509040][T20351] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3845'. [ 423.521522][T20353] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3847'. [ 423.538372][T20353] syzkaller0: entered promiscuous mode [ 423.552895][T20353] syzkaller0: entered allmulticast mode [ 423.684803][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3851'. [ 424.159423][T20394] netlink: 'syz.2.3861': attribute type 9 has an invalid length. [ 424.183247][T20394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3861'. [ 424.199832][T20394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3861'. [ 424.211485][T20390] xt_hashlimit: size too large, truncated to 1048576 [ 424.522046][ T9] IPVS: starting estimator thread 0... [ 424.600240][T20422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.612093][T20422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.622344][T20423] tc_dump_action: action bad kind [ 424.622860][T20412] IPVS: using max 24 ests per chain, 57600 per kthread [ 424.649662][T20423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.749093][T20428] geneve2: entered promiscuous mode [ 424.756728][T14361] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 424.780025][T14366] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 424.794390][T14366] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 424.803251][T14366] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 425.100757][T20444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.194008][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3873'. [ 425.203426][T20444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3873'. [ 425.660176][T20469] netlink: 'syz.1.3882': attribute type 6 has an invalid length. [ 426.427778][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'. [ 426.472632][T20501] vlan2: entered allmulticast mode [ 426.477856][T20501] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 426.529231][T20501] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 426.556521][T20501] syzkaller1: linktype set to 823 [ 426.711118][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3898'. [ 427.293315][T20543] bridge_slave_1: left allmulticast mode [ 427.317750][T20543] bridge_slave_1: left promiscuous mode [ 427.334285][T20543] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.365146][T20543] bridge_slave_0: left allmulticast mode [ 427.370856][T20543] bridge_slave_0: left promiscuous mode [ 427.389325][T20543] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.224337][T20581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.231686][T20581] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 430.250204][T20581] bond0: (slave gre0): Error -95 calling set_mac_address [ 430.411647][T20600] syzkaller0: entered promiscuous mode [ 430.427985][T20600] syzkaller0: entered allmulticast mode [ 430.541237][T20609] __nla_validate_parse: 2 callbacks suppressed [ 430.541257][T20609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3927'. [ 430.568471][T20610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3926'. [ 430.602275][T20610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3926'. [ 430.617095][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'. [ 430.700649][T20610] ipvlan2: entered promiscuous mode [ 430.709956][T20609] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3927'. [ 430.833636][T20624] netlink: 'syz.3.3930': attribute type 11 has an invalid length. [ 430.846270][T20624] netlink: 'syz.3.3930': attribute type 11 has an invalid length. [ 431.032861][T20638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3932'. [ 431.055094][T20634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3932'. [ 431.120196][T20634] netlink: 'syz.3.3932': attribute type 1 has an invalid length. [ 431.179025][T20645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 431.946961][T20689] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3941'. [ 432.004156][T20692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.041917][T20692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.049425][T20692] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 432.061194][T20692] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 432.445945][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3945'. [ 432.726851][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 433.061812][T20747] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 433.240027][T20733] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.248634][T20733] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.288422][T20760] netlink: 'syz.4.3957': attribute type 1 has an invalid length. [ 433.296583][T20760] netlink: 'syz.4.3957': attribute type 1 has an invalid length. [ 433.304885][T20760] netlink: 'syz.4.3957': attribute type 8 has an invalid length. [ 434.302718][T20760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 434.381303][ T6376] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.400678][ T6376] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.427264][ T6376] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.436689][ T6376] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.456092][T20775] vxcan2: entered allmulticast mode [ 434.468435][ T6376] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.477762][ T6376] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.494783][ T6376] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.504408][ T6376] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.583321][T20784] nbd: illegal input index -8454144 [ 434.675533][T20790] xt_policy: output policy not valid in PREROUTING and INPUT [ 435.282137][T20833] syzkaller1: entered promiscuous mode [ 435.289958][T20833] syzkaller1: entered allmulticast mode [ 435.548148][T20851] __nla_validate_parse: 8 callbacks suppressed [ 435.548178][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3981'. [ 435.958984][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 436.014105][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.026627][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.037559][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.051021][T20874] netlink: 'syz.3.3988': attribute type 8 has an invalid length. [ 436.059534][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.068486][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.146029][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3990'. [ 436.157027][T20872] lo speed is unknown, defaulting to 1000 [ 436.177732][T20872] wlan0 speed is unknown, defaulting to 1000 [ 436.367909][T20890] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 436.672831][T20872] chnl_net:caif_netlink_parms(): no params data found [ 436.808551][T20915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4000'. [ 436.860895][T20919] veth0_virt_wifi: renamed from macsec0 (while UP) [ 436.871423][T20919] veth1_macvtap: left promiscuous mode [ 437.009877][T20872] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.030199][T20872] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.040020][T20872] bridge_slave_0: entered allmulticast mode [ 437.050068][T20872] bridge_slave_0: entered promiscuous mode [ 437.062368][T20872] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.070153][T20872] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.090521][T20872] bridge_slave_1: entered allmulticast mode [ 437.098857][T20872] bridge_slave_1: entered promiscuous mode [ 437.159517][T20872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.177682][T20872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.198518][T20936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4004'. [ 437.268702][T20872] team0: Port device team_slave_0 added [ 437.295496][T20872] team0: Port device team_slave_1 added [ 437.382452][T20872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.410423][T20872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.450788][T20943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4007'. [ 437.469358][T20872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.516805][T20872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.525174][T20872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.556405][T20872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.592024][T20948] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 437.600348][T20948] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 437.621557][T20948] : entered promiscuous mode [ 437.691174][T20872] hsr_slave_0: entered promiscuous mode [ 437.700664][T20872] hsr_slave_1: entered promiscuous mode [ 437.709917][T20872] debugfs: 'hsr0' already exists in 'hsr' [ 437.722752][T20872] Cannot create hsr debugfs directory [ 437.758451][T20950] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4010'. [ 438.094570][ T5838] Bluetooth: hci4: command tx timeout [ 438.128695][T20872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.207977][T20872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.226479][T20872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.262686][T20972] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4018'. [ 438.279662][T20872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.459653][T20872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.489882][T20872] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.551785][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.559042][T14372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.636758][T14372] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.644027][T14372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.989052][T21005] netlink: 'syz.2.4027': attribute type 1 has an invalid length. [ 439.021119][T21005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.066817][T21001] netlink: 'syz.3.4025': attribute type 33 has an invalid length. [ 439.075251][T21001] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4025'. [ 439.108787][T21005] bond2: (slave veth55): Enslaving as an active interface with a down link [ 439.195183][T21015] veth0_to_bond: left allmulticast mode [ 439.205549][T21015] bond2: (slave veth0_to_bond): making interface the new active one [ 439.217594][T21015] veth0_to_bond: entered promiscuous mode [ 439.224507][T21015] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 439.251777][T21017] xt_hashlimit: size too large, truncated to 1048576 [ 439.262995][T21018] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4030'. [ 439.334396][T21005] bond2: (slave veth57): Enslaving as an active interface with a down link [ 439.398190][T20872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.959913][T20872] veth0_vlan: entered promiscuous mode [ 440.015941][T20872] veth1_vlan: entered promiscuous mode [ 440.166380][T20872] veth0_macvtap: entered promiscuous mode [ 440.175314][ T5838] Bluetooth: hci4: command tx timeout [ 440.219818][T20872] veth1_macvtap: entered promiscuous mode [ 440.259385][T20872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.276175][T20872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.306682][T14361] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.418865][T14361] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.431323][T14356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.479788][T14356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.612084][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.655657][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.730312][T14361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.744834][T14361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.790365][T21093] __nla_validate_parse: 6 callbacks suppressed [ 440.790385][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4052'. [ 440.873665][T21096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4053'. [ 441.293121][T21114] netlink: 'syz.5.4058': attribute type 2 has an invalid length. [ 441.302183][T21114] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4058'. [ 441.314381][T21112] syzkaller0: entered promiscuous mode [ 441.319977][T21112] syzkaller0: entered allmulticast mode [ 441.328071][T21115] netlink: 'syz.5.4058': attribute type 75 has an invalid length. [ 441.516451][T21121] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 441.734118][T21134] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4065'. [ 441.772332][T21134] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.779854][T21134] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.255441][ T5838] Bluetooth: hci4: command tx timeout [ 442.268071][T21169] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4076'. [ 442.313309][T21169] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4076'. [ 442.582857][T21180] netlink: 'syz.5.4080': attribute type 12 has an invalid length. [ 442.595623][T21180] netlink: 'syz.5.4080': attribute type 29 has an invalid length. [ 442.604091][T21180] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4080'. [ 442.613877][T21180] netlink: 'syz.5.4080': attribute type 2 has an invalid length. [ 442.623218][T21180] netlink: 23 bytes leftover after parsing attributes in process `syz.5.4080'. [ 443.070984][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 443.084259][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 443.095187][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 443.123152][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 443.134408][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 443.197231][T21201] lo speed is unknown, defaulting to 1000 [ 443.208264][T21201] wlan0 speed is unknown, defaulting to 1000 [ 443.252449][T21209] syz.4.4090: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 443.272874][T21209] CPU: 0 UID: 0 PID: 21209 Comm: syz.4.4090 Not tainted syzkaller #0 PREEMPT(full) [ 443.272909][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 443.272923][T21209] Call Trace: [ 443.272931][T21209] [ 443.272940][T21209] dump_stack_lvl+0xe8/0x150 [ 443.272972][T21209] warn_alloc+0x249/0x340 [ 443.272995][T21209] ? stack_trace_save+0xa9/0x100 [ 443.273024][T21209] ? __pfx_warn_alloc+0x10/0x10 [ 443.273052][T21209] ? kasan_save_track+0x4f/0x80 [ 443.273070][T21209] ? kasan_save_track+0x3e/0x80 [ 443.273087][T21209] ? __kasan_kmalloc+0x93/0xb0 [ 443.273105][T21209] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 443.273124][T21209] ? xskq_create+0x56/0x170 [ 443.273142][T21209] ? xsk_setsockopt+0x54c/0x990 [ 443.273169][T21209] ? do_sock_setsockopt+0x17c/0x1b0 [ 443.273199][T21209] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 443.273224][T21209] ? do_syscall_64+0xe2/0xf80 [ 443.273250][T21209] __vmalloc_node_range_noprof+0x132/0x1730 [ 443.273305][T21209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 443.273334][T21209] ? __kasan_kmalloc+0x93/0xb0 [ 443.273361][T21209] vmalloc_user_noprof+0xad/0xe0 [ 443.273381][T21209] ? xskq_create+0xbf/0x170 [ 443.273401][T21209] xskq_create+0xbf/0x170 [ 443.273424][T21209] xsk_init_queue+0xad/0x110 [ 443.273457][T21209] xsk_setsockopt+0x54c/0x990 [ 443.273490][T21209] ? __pfx_xsk_setsockopt+0x10/0x10 [ 443.273526][T21209] ? __pfx_aa_sk_perm+0x10/0x10 [ 443.273555][T21209] ? aa_sock_opt_perm+0xff/0x1a0 [ 443.273583][T21209] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 443.273605][T21209] ? __pfx_xsk_setsockopt+0x10/0x10 [ 443.273635][T21209] do_sock_setsockopt+0x17c/0x1b0 [ 443.273666][T21209] __x64_sys_setsockopt+0x13d/0x1b0 [ 443.273698][T21209] do_syscall_64+0xe2/0xf80 [ 443.273720][T21209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.273740][T21209] ? clear_bhb_loop+0x60/0xb0 [ 443.273765][T21209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.273785][T21209] RIP: 0033:0x7febae19aeb9 [ 443.273803][T21209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.273822][T21209] RSP: 002b:00007febaefd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.273844][T21209] RAX: ffffffffffffffda RBX: 00007febae415fa0 RCX: 00007febae19aeb9 [ 443.273859][T21209] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 443.273871][T21209] RBP: 00007febae208c1f R08: 0000000000000004 R09: 0000000000000000 [ 443.273884][T21209] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.273897][T21209] R13: 00007febae416038 R14: 00007febae415fa0 R15: 00007fffbcdc1978 [ 443.273932][T21209] [ 443.274048][T21209] Mem-Info: [ 443.532298][T21210] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4090'. [ 443.597274][T21209] active_anon:6493 inactive_anon:0 isolated_anon:0 [ 443.597274][T21209] active_file:3013 inactive_file:40083 isolated_file:0 [ 443.597274][T21209] unevictable:768 dirty:48 writeback:0 [ 443.597274][T21209] slab_reclaimable:12137 slab_unreclaimable:114943 [ 443.597274][T21209] mapped:39486 shmem:1389 pagetables:1196 [ 443.597274][T21209] sec_pagetables:0 bounce:0 [ 443.597274][T21209] kernel_misc_reclaimable:0 [ 443.597274][T21209] free:1281724 free_pcp:10428 free_cma:0 [ 443.654595][T21209] Node 0 active_anon:25972kB inactive_anon:0kB active_file:12052kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157944kB dirty:188kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14644kB pagetables:4644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 443.686822][T21209] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 443.717458][T21209] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.748822][T21209] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 443.758394][T21209] Node 0 DMA32 free:1218460kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25972kB inactive_anon:0kB active_file:12052kB inactive_file:160128kB unevictable:1536kB writepending:188kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:26708kB local_pcp:6024kB free_cma:0kB [ 443.794074][T21209] lowmem_reserve[]: 0 0 1 1 1 [ 443.799301][T21209] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.842056][T21209] lowmem_reserve[]: 0 0 0 0 0 [ 443.847249][T21209] Node 1 Normal free:3893076kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14976kB local_pcp:11360kB free_cma:0kB [ 443.883162][T21209] lowmem_reserve[]: 0 0 0 0 0 [ 443.890147][T21216] syzkaller0: entered promiscuous mode [ 443.896413][T21216] syzkaller0: entered allmulticast mode [ 443.908751][T21209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 443.922215][T21209] Node 0 DMA32: 2805*4kB (UM) 4403*8kB (UM) 2156*16kB (UME) 481*32kB (UM) 365*64kB (UM) 44*128kB (UME) 122*256kB (UM) 190*512kB (UME) 127*1024kB (UME) 49*2048kB (UME) 179*4096kB (M) = 1217420kB [ 443.942077][T21209] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 443.957294][T21217] veth0: entered promiscuous mode [ 443.963818][T21217] veth0: left promiscuous mode [ 443.970675][T21209] Node 1 Normal: 209*4kB (UE) 54*8kB (UME) 48*16kB (UME) 217*32kB (UME) 71*64kB (UME) 11*128kB (UME) 3*256kB (ME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3893076kB [ 444.038651][T21209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.070841][T21209] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.081022][T21209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.091223][T21209] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.113057][T21209] 44450 total pagecache pages [ 444.122587][T21209] 0 pages in swap cache [ 444.126921][T21209] Free swap = 124996kB [ 444.131197][T21209] Total swap = 124996kB [ 444.163374][T21209] 2097051 pages RAM [ 444.174653][T21209] 0 pages HighMem/MovableOnly [ 444.179413][T21209] 426622 pages reserved [ 444.184895][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4094'. [ 444.199312][T21209] 0 pages cma reserved [ 444.218986][T21201] chnl_net:caif_netlink_parms(): no params data found [ 444.332612][ T5838] Bluetooth: hci4: command tx timeout [ 444.400848][T21201] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.409446][T21201] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.418504][T21201] bridge_slave_0: entered allmulticast mode [ 444.426990][T21201] bridge_slave_0: entered promiscuous mode [ 444.436966][T21201] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.444607][T21201] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.452247][T21201] bridge_slave_1: entered allmulticast mode [ 444.460592][T21201] bridge_slave_1: entered promiscuous mode [ 444.504993][T21201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.522174][T21201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.602022][T21243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.693006][T21201] team0: Port device team_slave_0 added [ 444.702442][T21201] team0: Port device team_slave_1 added [ 444.832803][T21201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.844911][T21201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.872393][T21201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.896040][T21201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.903230][T21201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.930594][T21201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.026121][T21264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.125169][T21201] hsr_slave_0: entered promiscuous mode [ 445.132025][T21201] hsr_slave_1: entered promiscuous mode [ 445.142395][T21201] debugfs: 'hsr0' already exists in 'hsr' [ 445.148380][T21201] Cannot create hsr debugfs directory [ 445.213222][ T5838] Bluetooth: hci6: command tx timeout [ 445.394999][T21279] netlink: 'syz.2.4112': attribute type 2 has an invalid length. [ 445.413516][T21279] netlink: 'syz.2.4112': attribute type 2 has an invalid length. [ 445.432701][T21277] gre0: entered promiscuous mode [ 445.437731][T21277] gre0: entered allmulticast mode [ 445.579979][T21283] pimreg3: entered allmulticast mode [ 445.717932][T21292] openvswitch: netlink: Key type 31 is not supported [ 445.924658][T21201] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.964347][T21201] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 446.007103][T21201] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 446.020328][T21201] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.035267][T21306] __nla_validate_parse: 5 callbacks suppressed [ 446.035286][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4122'. [ 446.155750][T21312] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4123'. [ 446.165612][T21312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4123'. [ 446.364409][T21201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.416924][T21201] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.448225][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.455479][T14361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.484915][T14361] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.492208][T14361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.609114][T21336] syz_tun: entered allmulticast mode [ 446.762009][T21342] dvmrp6: entered allmulticast mode [ 446.824741][T21335] syz_tun: left allmulticast mode [ 447.020678][T21201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.115955][T21361] netlink: 'syz.2.4135': attribute type 21 has an invalid length. [ 447.140979][T21361] IPv6: NLM_F_CREATE should be specified when creating new route [ 447.298804][ T5146] Bluetooth: hci6: command tx timeout [ 447.376031][ T5146] Bluetooth: hci5: command 0x0406 tx timeout [ 447.396655][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4141'. [ 447.418674][T21371] xt_CT: No such helper "pptp" [ 447.451669][T21383] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4141'. [ 447.882164][T21201] veth0_vlan: entered promiscuous mode [ 447.897822][T21201] veth1_vlan: entered promiscuous mode [ 447.950397][T21201] veth0_macvtap: entered promiscuous mode [ 447.964987][T21201] veth1_macvtap: entered promiscuous mode [ 448.001461][T21201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.039039][T21407] sctp: [Deprecated]: syz.4.4147 (pid 21407) Use of int in maxseg socket option. [ 448.039039][T21407] Use struct sctp_assoc_value instead [ 448.059220][T21201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.067454][T21408] SET target dimension over the limit! [ 448.080798][ T6376] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.100656][ T6376] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.141304][ T6376] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.153074][ T6376] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.251156][T14364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.276304][T14364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.358681][ T6376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.401382][ T6376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.680832][T21435] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4083'. [ 449.373319][ T5838] Bluetooth: hci6: command tx timeout [ 449.842974][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4170'. [ 450.034734][T21512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.087710][T21512] lo speed is unknown, defaulting to 1000 [ 450.099223][T21512] wlan0 speed is unknown, defaulting to 1000 [ 450.391899][T14356] veth0_to_bond: left promiscuous mode [ 450.472616][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4177'. [ 450.510588][T21528] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 450.528720][T21528] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4177'. [ 450.594482][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 450.820264][T21539] bond4 (unregistering): Released all slaves [ 451.061001][T21553] netlink: 'syz.5.4185': attribute type 3 has an invalid length. [ 451.150892][T21558] __nla_validate_parse: 3 callbacks suppressed [ 451.150912][T21558] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4189'. [ 451.236672][T21571] IPv6: Can't replace route, no match found [ 451.336139][T21574] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4190'. [ 451.346301][T21574] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4190'. [ 451.462726][ T5838] Bluetooth: hci6: command tx timeout [ 454.088501][T21556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.290735][T21632] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4205'. [ 454.329637][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4205'. [ 454.347513][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4205'. [ 454.408137][T21638] netlink: 'syz.6.4207': attribute type 3 has an invalid length. [ 454.784939][T21660] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4214'. [ 454.802571][T21658] veth0: entered promiscuous mode [ 454.905843][T21655] veth0: left promiscuous mode [ 454.938559][T21666] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4216'. [ 455.151741][T21675] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 455.181604][T21675] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4219'. [ 455.238567][T21675] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4219'. [ 455.299168][T21626] lec:lec_atm_close: lec0: Shut down! [ 455.637846][T21691] openvswitch: netlink: Flow key attribute not present in set flow. [ 455.685650][T21691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.726144][T21695] tipc: Started in network mode [ 455.737080][T21695] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 455.751411][T21695] tipc: Enabled bearer , priority 10 [ 455.817102][T21703] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 455.869289][T21703] bond1 (unregistering): Released all slaves [ 456.192951][T21725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.300207][T21732] __nla_validate_parse: 7 callbacks suppressed [ 456.300227][T21732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4233'. [ 456.369063][T21729] netlink: 'syz.4.4232': attribute type 1 has an invalid length. [ 456.614230][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4236'. [ 456.703887][T21750] netlink: 'syz.6.4237': attribute type 13 has an invalid length. [ 456.722923][T21750] netlink: 'syz.6.4237': attribute type 58 has an invalid length. [ 456.749735][T21750] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4237'. [ 456.764612][ T5889] lec:lec_start_xmit: lec0:No lecd attached [ 456.862638][ T5903] tipc: Node number set to 10136234 [ 457.065278][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4243'. [ 457.114044][T21771] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 457.201458][T21783] netlink: 'syz.4.4245': attribute type 2 has an invalid length. [ 457.222675][T21783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4245'. [ 457.481123][T21785] syzkaller1: entered promiscuous mode [ 457.501165][T21785] syzkaller1: entered allmulticast mode [ 457.531454][T21797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.600051][T21797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.633944][T21804] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4250'. [ 457.656356][T21804] netlink: ct family unspecified [ 457.784927][T21808] netlink: 'syz.2.4250': attribute type 1 has an invalid length. [ 457.838811][T21808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4250'. [ 457.867573][T21812] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 457.887798][T21812] syzkaller1: Linktype set failed because interface is up [ 457.899026][ T5835] syzkaller1: tun_net_xmit 90 [ 457.990909][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4250'. [ 458.520242][T21850] netlink: 'syz.5.4258': attribute type 5 has an invalid length. [ 458.574821][T21853] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4260'. [ 458.785266][T21864] netlink: 'syz.5.4264': attribute type 29 has an invalid length. [ 458.807084][T21865] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4264'. [ 458.988113][ T6376] tipc: Subscription rejected, illegal request [ 459.086405][T21881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.425230][ T5835] IPVS: starting estimator thread 0... [ 459.552731][T21902] IPVS: using max 34 ests per chain, 81600 per kthread [ 459.597507][T21910] bond0: entered promiscuous mode [ 459.618130][T21910] bond_slave_0: entered promiscuous mode [ 459.633724][T21910] bond_slave_1: entered promiscuous mode [ 459.747742][T21918] sctp: [Deprecated]: syz.4.4284 (pid 21918) Use of int in max_burst socket option. [ 459.747742][T21918] Use struct sctp_assoc_value instead [ 459.854400][T21916] syzkaller1: entered promiscuous mode [ 459.874790][T21916] syzkaller1: entered allmulticast mode [ 460.162244][T21934] bond4: option all_slaves_active: invalid value (222) [ 460.193233][T21934] bond4 (unregistering): Released all slaves [ 460.237780][T21956] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 460.906973][T21997] sctp: [Deprecated]: syz.4.4302 (pid 21997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.906973][T21997] Use struct sctp_sack_info instead [ 461.075370][T22005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.281974][T22009] macvtap1: entered allmulticast mode [ 461.287678][T22009] veth0_macvtap: entered allmulticast mode [ 461.425671][T22009] syzkaller0: entered promiscuous mode [ 461.431289][T22009] syzkaller0: entered allmulticast mode [ 462.576190][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 462.584868][ C0] lec:lec_tx_timeout: lec0 [ 462.590593][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 462.735908][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 463.473320][T22046] : renamed from bond0 [ 463.645613][T22060] netlink: 'syz.5.4321': attribute type 10 has an invalid length. [ 463.653705][T22060] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 463.681507][T22060] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 463.705235][T22066] __nla_validate_parse: 7 callbacks suppressed [ 463.705255][T22066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4323'. [ 464.033278][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4330'. [ 464.043014][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 464.262013][T22103] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4334'. [ 464.411488][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4336'. [ 464.499968][T22115] gre1: entered promiscuous mode [ 464.507455][T22115] gre1: entered allmulticast mode [ 464.701524][T22128] syzkaller1: entered promiscuous mode [ 464.713357][T22128] syzkaller1: entered allmulticast mode [ 464.839287][T22138] netlink: 'syz.2.4343': attribute type 1 has an invalid length. [ 464.980061][T22147] x_tables: duplicate underflow at hook 2 [ 465.088295][T22141] bridge0: entered allmulticast mode [ 465.543949][T22166] ip6gre2: entered allmulticast mode [ 465.554597][T22166] netlink: 'syz.4.4350': attribute type 6 has an invalid length. [ 465.661881][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4352'. [ 465.706179][T22170] netlink: 'syz.5.4353': attribute type 1 has an invalid length. [ 465.956261][T22188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.969038][T22183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4357'. [ 465.992817][T22189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4357'. [ 466.084110][T22192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4360'. [ 466.151594][T22192] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4360'. [ 466.183839][T22197] netlink: 'syz.2.4362': attribute type 1 has an invalid length. [ 466.202538][T22197] netlink: 'syz.2.4362': attribute type 1 has an invalid length. [ 466.210418][T22197] netlink: 'syz.2.4362': attribute type 8 has an invalid length. [ 466.753165][T22239] netlink: 'syz.3.4375': attribute type 28 has an invalid length. [ 466.794757][T22239] netlink: 'syz.3.4375': attribute type 3 has an invalid length. [ 466.818455][T22239] netlink: 'syz.3.4375': attribute type 15 has an invalid length. [ 467.134099][T22260] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 467.341765][T22275] syzkaller1: entered promiscuous mode [ 467.359128][T22275] syzkaller1: entered allmulticast mode [ 467.502053][T22284] tipc: Started in network mode [ 467.507849][T22284] tipc: Node identity 121ce26405b2, cluster identity 4711 [ 467.519582][T22284] tipc: Enabled bearer , priority 11 [ 467.688414][T22291] SET target dimension over the limit! [ 468.332538][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 468.340828][ C0] lec:lec_tx_timeout: lec0 [ 468.347074][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 468.632718][ T5835] tipc: Node number set to 397337188 [ 468.871880][T22322] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 469.069738][T22348] __nla_validate_parse: 41 callbacks suppressed [ 469.069753][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4407'. [ 469.086046][T22348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4407'. [ 469.276400][T22353] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4408'. [ 470.092973][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 470.711090][T22296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.722013][T22312] validate_nla: 1 callbacks suppressed [ 470.722033][T22312] netlink: 'syz.2.4398': attribute type 1 has an invalid length. [ 470.742730][T22312] netlink: 'syz.2.4398': attribute type 1 has an invalid length. [ 470.750714][T22312] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.4398'. [ 470.948613][T22372] netlink: 'syz.3.4409': attribute type 3 has an invalid length. [ 470.982677][T22375] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 471.018003][T22381] netlink: 'syz.4.4412': attribute type 9 has an invalid length. [ 471.039908][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4413'. [ 471.050424][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4413'. [ 471.229122][T22390] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 471.281354][T22392] syzkaller1: entered promiscuous mode [ 471.300237][T22392] syzkaller1: entered allmulticast mode [ 471.321604][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4417'. [ 472.059726][T22443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4431'. [ 472.346442][T22458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4435'. [ 472.379129][T22458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4435'. [ 472.769295][T22481] syz.4.4444 uses old SIOCAX25GETINFO [ 472.912256][T22488] tipc: Enabled bearer , priority 0 [ 473.008721][T22488] syzkaller0: entered promiscuous mode [ 473.016700][T22488] syzkaller0: entered allmulticast mode [ 473.023723][T22488] tipc: Resetting bearer [ 473.104872][T22487] tipc: Resetting bearer [ 473.324793][T22514] xt_TCPMSS: Only works on TCP SYN packets [ 473.333681][T22514] netlink: 'syz.5.4451': attribute type 11 has an invalid length. [ 474.102556][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 474.110801][ C0] lec:lec_tx_timeout: lec0 [ 474.116100][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.886441][T22487] tipc: Disabling bearer [ 475.024731][T22520] netlink: 'syz.2.4454': attribute type 3 has an invalid length. [ 475.064136][T22521] : entered promiscuous mode [ 475.076432][T22520] __nla_validate_parse: 8 callbacks suppressed [ 475.076451][T22520] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4454'. [ 475.159655][T22523] vlan2: entered promiscuous mode [ 475.167705][T22526] netlink: 'syz.2.4454': attribute type 3 has an invalid length. [ 475.190143][T22523] geneve1: entered promiscuous mode [ 475.201684][T22523] vlan2: entered allmulticast mode [ 475.207419][T22523] geneve1: entered allmulticast mode [ 475.220195][T22530] lo: entered promiscuous mode [ 475.231163][T22530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.687990][T22551] syzkaller0: entered promiscuous mode [ 475.707857][T22551] syzkaller0: entered allmulticast mode [ 475.820893][T22556] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4467'. [ 475.833941][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4467'. [ 475.843727][T22556] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4467'. [ 475.859537][T22556] netlink: 'syz.5.4467': attribute type 2 has an invalid length. [ 475.869121][T22556] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4467'. [ 476.086590][T22565] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4470'. [ 476.105129][T22567] ipvlan2: entered promiscuous mode [ 476.107933][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4470'. [ 476.140538][T22565] netlink: 'syz.5.4470': attribute type 1 has an invalid length. [ 476.695708][T14356] tipc: Subscription rejected, illegal request [ 476.718388][T22599] netem: change failed [ 476.872998][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4486'. [ 476.928829][T22607] bond1: Invalid ad_actor_system MAC address. [ 476.935247][T22607] bond1: option ad_actor_system: invalid value (1) [ 476.945593][T22607] bond1 (unregistering): Released all slaves [ 477.093223][T22617] smc: net device wlan0 applied user defined pnetid SYZ0 [ 477.627677][T22647] syzkaller0: entered promiscuous mode [ 477.641015][T22647] syzkaller0: entered allmulticast mode [ 477.687399][T22652] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 477.725948][T22652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.735652][T22653] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 478.098255][ T5146] Bluetooth: hci0: command 0x0401 tx timeout [ 478.153101][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4506'. [ 478.222033][T22687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4506'. [ 478.369251][T22696] netlink: 'syz.5.4509': attribute type 1 has an invalid length. [ 478.439563][T22697] syzkaller1: entered promiscuous mode [ 478.445549][T22697] syzkaller1: entered allmulticast mode [ 478.528692][T22696] bond1: (slave gretap2): making interface the new active one [ 478.554800][T22696] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 478.600305][T22679] tipc: Started in network mode [ 478.616640][T22679] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 478.650476][T22679] tipc: Enabling of bearer rejected, failed to enable media [ 478.853641][T22718] netem: change failed [ 479.122553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 479.130984][ C0] lec:lec_tx_timeout: lec0 [ 479.136027][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 479.365934][T22752] xt_connbytes: Forcing CT accounting to be enabled [ 479.974376][T22795] netlink: 'syz.5.4540': attribute type 8 has an invalid length. [ 480.410435][T22823] __nla_validate_parse: 12 callbacks suppressed [ 480.410451][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4549'. [ 480.439315][T22816] bond0: Unable to set down delay as MII monitoring is disabled [ 480.449125][T22816] bond0 (unregistering): Released all slaves [ 480.455658][T22820] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4547'. [ 480.506240][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4549'. [ 480.528618][T22824] gretap0: entered promiscuous mode [ 480.573815][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4549'. [ 480.828566][T22845] x_tables: duplicate underflow at hook 2 [ 480.844756][T22845] x_tables: duplicate underflow at hook 1 [ 480.867147][T22847] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4554'. [ 480.895514][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4554'. [ 481.051869][T22860] netlink: 'syz.2.4558': attribute type 2 has an invalid length. [ 481.063938][T22860] netlink: 'syz.2.4558': attribute type 3 has an invalid length. [ 481.180716][T22862] syzkaller0: entered promiscuous mode [ 481.187768][T22862] syzkaller0: entered allmulticast mode [ 481.202862][T22865] veth0: entered promiscuous mode [ 481.254788][T22869] bond0: option lp_interval: invalid value (0) [ 481.261031][T22869] bond0: option lp_interval: allowed values 1 - 2147483647 [ 481.276890][T22869] bond0 (unregistering): Released all slaves [ 481.299268][T22875] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4563'. [ 481.636868][T22880] nbd0: detected capacity change from 0 to 127 [ 482.312318][ T5838] block nbd0: Receive control failed (result -104) [ 483.489000][T22874] veth0: left promiscuous mode [ 483.620615][T22907] netlink: 'syz.4.4570': attribute type 1 has an invalid length. [ 483.671228][T22907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4570'. [ 483.697193][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4573'. [ 483.786507][T22915] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 483.814688][T22915] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 483.842796][T22915] team0: Failed to send options change via netlink (err -105) [ 483.852173][T22915] team0: Port device batadv1 added [ 483.927046][T22923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 483.961211][T22933] openvswitch: netlink: IPv4 tunnel dst address is zero [ 484.064929][T22941] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 484.142772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 484.151129][ C0] lec:lec_tx_timeout: lec0 [ 484.156143][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 484.319739][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4583'. [ 484.377833][T22954] delete_channel: no stack [ 484.438810][T22963] netlink: 'syz.3.4588': attribute type 9 has an invalid length. [ 484.571103][T22967] openvswitch: netlink: IP tunnel dst address not specified [ 484.594009][T22971] openvswitch: netlink: IP tunnel dst address not specified [ 485.254965][T23018] xt_hashlimit: size too large, truncated to 1048576 [ 485.335875][T23024] geneve2: entered promiscuous mode [ 485.341365][T23024] geneve2: entered allmulticast mode [ 485.408609][T23025] netlink: 'syz.2.4603': attribute type 5 has an invalid length. [ 485.423816][T23025] __nla_validate_parse: 136 callbacks suppressed [ 485.423838][T23025] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4603'. [ 485.611924][T23031] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4605'. [ 485.637833][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 486.182617][T23055] IPv6: sit1: Disabled Multicast RS [ 486.392447][T23059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.751525][T23077] netlink: 496 bytes leftover after parsing attributes in process `syz.3.4622'. [ 486.964351][T23092] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4626'. [ 487.070615][T23098] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 487.160157][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4631'. [ 487.215235][T23106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4631'. [ 487.230205][T23106] syzkaller0: entered promiscuous mode [ 487.238231][T23106] syzkaller0: entered allmulticast mode [ 487.250335][T23106] tipc: Enabled bearer , priority 0 [ 487.267640][T23106] tipc: Enabling of bearer rejected, failed to enable media [ 487.283071][T23104] tipc: Resetting bearer [ 487.326409][T23104] tipc: Disabling bearer [ 487.583934][T23118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4634'. [ 487.609928][T23118] netlink: 'syz.3.4634': attribute type 3 has an invalid length. [ 487.923773][T23136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4640'. [ 488.023651][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4641'. [ 488.146469][T23148] netlink: 'syz.3.4642': attribute type 1 has an invalid length. [ 488.250557][T23151] lo speed is unknown, defaulting to 1000 [ 488.302107][T23151] wlan0 speed is unknown, defaulting to 1000 [ 488.334035][ T5146] Bluetooth: hci1: command 0x040f tx timeout [ 488.647743][T23177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.660687][T23177] netlink: 'syz.6.4651': attribute type 3 has an invalid length. [ 488.691299][T23177] syzkaller0: entered promiscuous mode [ 488.702593][T23177] syzkaller0: entered allmulticast mode [ 489.012179][T23189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.162828][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 489.171050][ C0] lec:lec_tx_timeout: lec0 [ 489.175765][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 489.500754][T23205] tun0: tun_chr_ioctl cmd 1074025675 [ 489.513344][T23205] tun0: persist disabled [ 489.532980][T23207] tipc: Enabling of bearer rejected, failed to enable media [ 489.546994][T23205] tun0: tun_chr_ioctl cmd 1074025675 [ 489.568710][T23205] tun0: persist disabled [ 489.582191][T23211] tun0: tun_chr_ioctl cmd 1074025673 [ 489.656580][T23214] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 489.693654][T23214] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 490.053455][T23238] xt_hashlimit: size too large, truncated to 1048576 [ 490.410097][T23266] netlink: 'syz.6.4680': attribute type 1 has an invalid length. [ 490.536407][T23276] __nla_validate_parse: 8 callbacks suppressed [ 490.536429][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4680'. [ 490.765816][T23287] syzkaller0: entered promiscuous mode [ 490.778467][T23287] syzkaller0: entered allmulticast mode [ 491.014902][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4689'. [ 491.099654][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4689'. [ 491.115856][T23301] openvswitch: netlink: IP tunnel dst address not specified [ 491.198498][T23311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.520087][T23328] netlink: 'syz.2.4696': attribute type 21 has an invalid length. [ 491.565819][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4696'. [ 491.658427][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4699'. [ 491.670190][T23331] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 492.068849][T23335] : left promiscuous mode [ 492.073626][T23335] bond_slave_0: left promiscuous mode [ 492.080805][T23335] bond_slave_1: left promiscuous mode [ 492.203990][T23337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4702'. [ 492.406427][T23357] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4705'. [ 492.459882][T23359] sch_fq: defrate 0 ignored. [ 492.687803][T23365] º: renamed from veth1_vlan (while UP) [ 492.863354][T23372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4711'. [ 492.951465][T23375] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4712'. [ 492.985217][T23381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.095650][T23388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4716'. [ 493.126710][T23387] delete_channel: no stack [ 493.599574][T23413] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 493.620260][T23413] bond3 (unregistering): Released all slaves [ 493.684987][T23416] netlink: 'syz.5.4725': attribute type 3 has an invalid length. [ 494.182542][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 494.190760][ C0] lec:lec_tx_timeout: lec0 [ 494.195785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 494.365869][T23466] netlink: 'syz.4.4740': attribute type 1 has an invalid length. [ 494.495346][T23472] netlink: 'syz.6.4742': attribute type 1 has an invalid length. [ 494.529236][T23472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.554655][T23472] bond3: entered promiscuous mode [ 494.561324][T23472] bond3: entered allmulticast mode [ 495.134234][T23510] syzkaller1: entered promiscuous mode [ 495.143627][T23510] syzkaller1: entered allmulticast mode [ 495.203470][T23507] lo speed is unknown, defaulting to 1000 [ 495.239147][T23507] wlan0 speed is unknown, defaulting to 1000 [ 495.383801][T23523] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 495.596308][T23534] netlink: 'syz.6.4763': attribute type 10 has an invalid length. [ 495.623530][T23534] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 495.894953][T23536] bond4: entered allmulticast mode [ 495.940525][T23554] netlink: 'syz.3.4768': attribute type 1 has an invalid length. [ 495.948611][T23554] __nla_validate_parse: 13 callbacks suppressed [ 495.948630][T23554] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4768'. [ 496.623329][T23601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.806488][T23609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4787'. [ 496.915326][T23618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4789'. [ 497.487429][T23653] netlink: 'syz.4.4800': attribute type 1 has an invalid length. [ 497.513256][T23653] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4800'. [ 497.533859][T23653] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4800'. [ 497.855320][T23674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4808'. [ 497.929101][T23661] bond3: Removing last arp target with arp_interval on [ 498.009403][T23684] netlink: 'syz.2.4811': attribute type 3 has an invalid length. [ 498.301729][T23699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4815'. [ 499.190712][T23757] vlan2: entered promiscuous mode [ 499.196066][T23757] geneve1: entered promiscuous mode [ 499.201840][T23757] vlan2: entered allmulticast mode [ 499.207558][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 499.207634][ C0] lec:lec_tx_timeout: lec0 [ 499.217091][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 499.230884][T23757] geneve1: entered allmulticast mode [ 499.296699][T23763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4835'. [ 499.364036][T23765] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4835'. [ 499.396967][T23765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4835'. [ 499.441860][T23770] netlink: 'syz.6.4836': attribute type 4 has an invalid length. [ 499.491182][T23770] netlink: 'syz.6.4836': attribute type 4 has an invalid length. [ 500.187873][T23815] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 500.359319][T23820] openvswitch: netlink: Flow key attr not present in new flow. [ 500.623925][T23850] netlink: 'syz.4.4850': attribute type 6 has an invalid length. [ 500.667789][T23852] netlink: 'syz.6.4860': attribute type 1 has an invalid length. [ 501.237611][T23882] __nla_validate_parse: 8 callbacks suppressed [ 501.237631][T23882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4870'. [ 501.400265][T23891] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 501.430909][T23894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4875'. [ 501.493110][T23898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4875'. [ 501.659400][T23912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.705347][T23912] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4880'. [ 501.819017][T23916] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 501.931945][T23924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.044546][T23928] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.4888'. [ 502.068315][T23931] netlink: 'syz.2.4888': attribute type 10 has an invalid length. [ 502.100809][T23928] netlink: 'syz.2.4888': attribute type 10 has an invalid length. [ 502.171675][T23931] dummy0: entered promiscuous mode [ 502.194924][T23931] team0: Port device dummy0 added [ 502.446582][T23956] batadv_slave_0: entered promiscuous mode [ 502.467800][T23961] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4897'. [ 502.486593][T23966] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4899'. [ 502.501556][T23961] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.509115][T23961] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.539352][T23966] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 502.559592][T23966] 0ªî{X¹¦: entered allmulticast mode [ 502.563688][T23969] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4899'. [ 502.570164][T23966] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 502.596210][T23961] openvswitch: netlink: Flow key attr not present in new flow. [ 502.604600][T23961] netlink: 'syz.5.4897': attribute type 1 has an invalid length. [ 502.614646][T23968] netlink: 312 bytes leftover after parsing attributes in process `syz.5.4897'. [ 502.641867][T23958] syzkaller0: entered promiscuous mode [ 502.649022][T23958] syzkaller0: entered allmulticast mode [ 502.657767][T23956] batadv_slave_0: left promiscuous mode [ 502.877341][T23981] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4903'. [ 503.288750][T23982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.593423][T24014] netlink: 'syz.6.4914': attribute type 4 has an invalid length. [ 503.613024][T24018] delete_channel: no stack [ 503.815924][T24027] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 503.991117][T24029] syzkaller0: entered promiscuous mode [ 504.002236][T24029] syzkaller0: entered allmulticast mode [ 504.030041][T24029] netlink: 'syz.4.4918': attribute type 13 has an invalid length. [ 504.053071][T24029] netlink: 'syz.4.4918': attribute type 58 has an invalid length. [ 504.222527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 504.230708][ C0] lec:lec_tx_timeout: lec0 [ 504.235611][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 504.363671][T24048] syzkaller1: entered promiscuous mode [ 504.369309][T24048] syzkaller1: entered allmulticast mode [ 504.384702][T24052] bridge: RTM_NEWNEIGH with invalid ether address [ 504.397475][T24052] bridge: RTM_NEWNEIGH with invalid ether address [ 505.068592][T24092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.120936][T24098] xt_policy: too many policy elements [ 505.137035][T24099] xt_policy: too many policy elements [ 505.177582][T24100] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 505.475292][T24108] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 505.521963][T24120] tipc: Started in network mode [ 505.530389][T24120] tipc: Node identity ac1414aa, cluster identity 4711 [ 505.541487][T24120] tipc: Enabled bearer , priority 10 [ 505.859882][T24141] bond0: (slave vxcan0): Device is not bonding slave [ 505.867292][T24141] bond0: option active_slave: invalid value (vxcan0) [ 505.886566][T24141] bond0 (unregistering): Released all slaves [ 506.094057][T24160] nftables ruleset with unbound chain [ 506.326691][T24173] __nla_validate_parse: 15 callbacks suppressed [ 506.326715][T24173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4966'. [ 506.365472][T24173] block nbd5: Unsupported socket: should be TCP or UNIX. [ 506.408896][T24175] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4964'. [ 506.472815][T24175] netlink: Conntrack attr has 3 unknown bytes [ 506.560671][T24182] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4968'. [ 506.613463][T24182] gre0: left promiscuous mode [ 506.618355][T24182] gre0: left allmulticast mode [ 506.666011][ T5903] tipc: Node number set to 2886997162 [ 506.797974][T24199] gtp0: entered promiscuous mode [ 506.803804][T24199] gtp0: entered allmulticast mode [ 506.809015][T24201] validate_nla: 1 callbacks suppressed [ 506.809032][T24201] netlink: 'syz.6.4975': attribute type 1 has an invalid length. [ 506.827863][T24200] tc_dump_action: action bad kind [ 506.834038][T24203] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4974'. [ 506.844724][T24200] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.4974'. [ 506.851250][T24201] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4975'. [ 506.864590][T24203] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.4974'. [ 506.959829][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4976'. [ 507.025831][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4976'. [ 507.052156][T24213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4978'. [ 507.085079][T24209] bond4: option xmit_hash_policy: invalid value (64) [ 507.095924][T24209] bond4 (unregistering): Released all slaves [ 507.120421][T24210] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 507.144205][T24218] sch_fq: defrate 0 ignored. [ 507.178719][T24228] xt_l2tp: missing protocol rule (udp|l2tpip) [ 507.342424][T24238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.356069][T24234] syzkaller0: entered promiscuous mode [ 507.392259][T24234] syzkaller0: entered allmulticast mode [ 507.660854][T24261] wireguard0: entered promiscuous mode [ 507.684936][T24261] wireguard0: entered allmulticast mode [ 507.722308][T24261] team0: Device wireguard0 is of different type [ 508.287071][T24234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 508.690895][T24321] netlink: 'syz.5.5007': attribute type 1 has an invalid length. [ 509.355403][T24368] macvlan0: entered promiscuous mode [ 509.455307][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 509.727718][T24398] "syz.6.5023" (24398) uses obsolete ecb(arc4) skcipher [ 510.043017][T24425] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 510.216336][T24433] IPv6: sit1: Disabled Multicast RS [ 510.262149][T24437] netlink: 'syz.3.5035': attribute type 13 has an invalid length. [ 510.274829][T24437] gretap0: refused to change device tx_queue_len [ 510.281353][T24437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 510.572963][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 510.581108][ C0] lec:lec_tx_timeout: lec0 [ 510.592663][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 510.780717][T24464] pim6reg1: entered promiscuous mode [ 510.794265][T24464] pim6reg1: entered allmulticast mode [ 511.217770][T24487] team1: entered promiscuous mode [ 511.233032][T24487] team1: entered allmulticast mode [ 511.244368][T24490] xt_hashlimit: size too large, truncated to 1048576 [ 511.449970][T24495] block nbd5: Unsupported socket: should be TCP or UNIX. [ 511.687797][T24504] __nla_validate_parse: 9 callbacks suppressed [ 511.687817][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5056'. [ 511.743802][T24507] IPv6: addrconf: prefix option has invalid lifetime [ 511.859165][ T56] block nbd0: Possible stuck request ffff888025b00000: control (read@0,1024B). Runtime 30 seconds [ 511.871127][ T56] block nbd0: Possible stuck request ffff888025b00200: control (read@1024,1024B). Runtime 30 seconds [ 511.883583][ T56] block nbd0: Possible stuck request ffff888025b00400: control (read@2048,1024B). Runtime 30 seconds [ 511.894826][ T56] block nbd0: Possible stuck request ffff888025b00600: control (read@3072,1024B). Runtime 30 seconds [ 512.379937][T24515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5059'. [ 512.389542][T24515] openvswitch: netlink: EtherType 50a is less than min 600 [ 512.459862][T24518] gre0: entered promiscuous mode [ 512.471394][T24522] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5062'. [ 512.486321][T24518] gre0: entered allmulticast mode [ 512.537195][T24520] pim6reg1: entered promiscuous mode [ 512.547767][T24520] pim6reg1: entered allmulticast mode [ 512.566456][T24517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.667099][T24529] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5063'. [ 512.826305][T24541] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5066'. [ 512.856238][T24544] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5068'. [ 513.060598][T24544] syzkaller0: entered promiscuous mode [ 513.069348][T24544] syzkaller0: entered allmulticast mode [ 513.107431][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'. [ 513.513766][T24583] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5078'. [ 513.562133][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5078'. [ 513.848578][T24602] netlink: 'syz.2.5085': attribute type 17 has an invalid length. [ 513.892665][T24602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5085'. [ 514.251202][T24627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.472773][T24637] netlink: 'syz.2.5095': attribute type 1 has an invalid length. [ 514.633146][T24642] netlink: 'syz.2.5095': attribute type 1 has an invalid length. [ 515.130136][T24667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.892207][T24686] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 516.211646][T24707] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 516.220032][T24707] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 516.332494][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 516.340684][ C0] lec:lec_tx_timeout: lec0 [ 516.346214][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 516.381383][T24715] netlink: 'syz.3.5127': attribute type 16 has an invalid length. [ 516.400170][T24715] netlink: 'syz.3.5127': attribute type 17 has an invalid length. [ 516.422277][T24715] lo: entered promiscuous mode [ 516.435942][T24715] lo: entered allmulticast mode [ 516.458450][T24715] tunl0: entered promiscuous mode [ 516.473920][T24715] tunl0: entered allmulticast mode [ 516.481779][T24715] gre0: entered promiscuous mode [ 516.488246][T24715] gre0: entered allmulticast mode [ 516.495586][T24715] gretap0: entered allmulticast mode [ 516.503670][T24715] erspan0: entered promiscuous mode [ 516.509163][T24715] erspan0: entered allmulticast mode [ 516.520035][T24715] ip_vti0: entered promiscuous mode [ 516.526003][T24715] ip_vti0: entered allmulticast mode [ 516.533449][T24715] ip6_vti0: entered promiscuous mode [ 516.551930][T24715] ip6_vti0: entered allmulticast mode [ 516.559324][T24715] sit0: entered promiscuous mode [ 516.565149][T24715] sit0: entered allmulticast mode [ 516.573279][T24715] ip6tnl0: entered promiscuous mode [ 516.589702][T24715] ip6tnl0: entered allmulticast mode [ 516.597189][T24715] ip6gre0: entered promiscuous mode [ 516.603580][T24715] ip6gre0: entered allmulticast mode [ 516.622949][T24715] syz_tun: entered promiscuous mode [ 516.632370][T24715] syz_tun: entered allmulticast mode [ 516.639442][T24715] ip6gretap0: entered promiscuous mode [ 516.645605][T24715] ip6gretap0: entered allmulticast mode [ 516.653632][T24715] bridge0: entered promiscuous mode [ 516.659069][T24715] bridge0: entered allmulticast mode [ 516.666456][T24715] vcan0: entered promiscuous mode [ 516.671884][T24715] vcan0: entered allmulticast mode [ 516.682074][T24715] bond0: entered promiscuous mode [ 516.703663][T24715] bond_slave_0: entered promiscuous mode [ 516.712997][T24715] bond_slave_1: entered promiscuous mode [ 516.721310][T24715] bond0: entered allmulticast mode [ 516.727221][T24715] bond_slave_0: entered allmulticast mode [ 516.734270][T24715] bond_slave_1: entered allmulticast mode [ 516.753062][T24715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.761442][T24715] team0: entered allmulticast mode [ 516.768010][T24715] team_slave_0: entered allmulticast mode [ 516.776596][T24715] team_slave_1: entered allmulticast mode [ 516.784470][T24715] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.793528][T24715] dummy0: entered allmulticast mode [ 516.800631][T24715] nlmon0: entered promiscuous mode [ 516.808897][T24715] nlmon0: entered allmulticast mode [ 516.843422][T24715] caif0: entered promiscuous mode [ 516.848740][T24715] caif0: entered allmulticast mode [ 516.858479][T24715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.894436][T14364] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 516.916630][T14364] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 516.939585][T14364] bond0: now running without any active interface! [ 517.043273][T24733] __nla_validate_parse: 12 callbacks suppressed [ 517.043294][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5136'. [ 517.201174][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5138'. [ 517.238856][T24740] syzkaller0: entered promiscuous mode [ 517.266481][T24740] syzkaller0: entered allmulticast mode [ 517.544918][T24752] bpq0: left allmulticast mode [ 518.075392][T24783] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5156'. [ 518.267423][T24795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5160'. [ 518.436844][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5165'. [ 518.858816][T24838] netlink: 'syz.4.5172': attribute type 29 has an invalid length. [ 519.521776][T24869] bond4: option resend_igmp: invalid value (32767) [ 519.528751][T24869] bond4: option resend_igmp: allowed values 0 - 255 [ 519.561430][T24869] bond4 (unregistering): Released all slaves [ 519.712150][ T5490] veth0_vlan: left promiscuous mode [ 519.748603][ T5490] veth0_vlan: entered promiscuous mode [ 520.123846][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5187'. [ 520.389569][T24916] xt_hashlimit: overflow, rate too high: 0 [ 520.624143][T24926] netlink: 'syz.5.5192': attribute type 1 has an invalid length. [ 520.691685][T24926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.828317][T24936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5194'. [ 520.855123][T24931] bond4: (slave veth3): Enslaving as an active interface with a down link [ 520.911247][T24937] bond4: (slave veth0_to_bond): making interface the new active one [ 520.994811][T24937] veth0_to_bond: entered promiscuous mode [ 521.001104][T24937] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 521.491425][T24967] netlink: 'syz.6.5200': attribute type 1 has an invalid length. [ 521.512388][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5201'. [ 521.538254][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5201'. [ 521.547347][T14364] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.562374][T14364] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.581792][T24978] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 521.634708][T24972] netlink: 'syz.3.5201': attribute type 1 has an invalid length. [ 521.647458][T24967] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 521.648192][T14364] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.660389][T24974] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.673387][T14364] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.741603][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5197'. [ 522.063321][T25003] netlink: 'syz.3.5209': attribute type 3 has an invalid length. [ 522.075775][T25003] netlink: 'syz.3.5209': attribute type 1 has an invalid length. [ 522.089108][T25004] __nla_validate_parse: 2 callbacks suppressed [ 522.089154][T25004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5208'. [ 522.105904][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 522.114027][ C0] lec:lec_tx_timeout: lec0 [ 522.115356][T25003] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5209'. [ 522.121066][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 522.396339][T25020] netem: change failed [ 522.478765][T25028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5216'. [ 522.505022][T25028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5216'. [ 522.566586][T25027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5216'. [ 522.648959][T25040] netlink: 'syz.2.5217': attribute type 9 has an invalid length. [ 523.024630][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5224'. [ 523.071123][T25060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5226'. [ 523.080935][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5224'. [ 523.092348][T25060] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 523.116895][T25060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5226'. [ 523.156949][T25060] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5226'. [ 523.739507][T25098] netlink: 'syz.6.5238': attribute type 11 has an invalid length. [ 523.893938][T25108] lo: left promiscuous mode [ 523.924676][T25108] tunl0: left promiscuous mode [ 523.932023][T25108] gre0: left promiscuous mode [ 523.974905][T25108] erspan0: left promiscuous mode [ 523.981883][T25108] ip_vti0: left promiscuous mode [ 524.001142][T25108] ip6_vti0: left promiscuous mode [ 524.019169][T25108] sit0: left promiscuous mode [ 524.033573][T25108] ip6tnl0: left promiscuous mode [ 524.041067][T25108] ip6gre0: left promiscuous mode [ 524.069166][T25108] syz_tun: left promiscuous mode [ 524.081642][T25108] ip6gretap0: left promiscuous mode [ 524.105909][T25108] bridge0: left promiscuous mode [ 524.123560][T25108] vcan0: left promiscuous mode [ 524.139986][T25108] bond0: left promiscuous mode [ 524.147740][T25111] IPVS: length: 236 != 24 [ 524.155607][T25108] bond_slave_0: left promiscuous mode [ 524.167264][T25108] bond_slave_1: left promiscuous mode [ 524.188247][T25108] nlmon0: left promiscuous mode [ 524.213933][T25108] caif0: left promiscuous mode [ 524.234120][T25108] bridge4: left promiscuous mode [ 524.245718][T25108] ipvlan2: left promiscuous mode [ 524.297700][T25108] veth0_macvtap: left allmulticast mode [ 524.319071][T25108] vlan2: left promiscuous mode [ 524.324056][T25108] geneve1: left promiscuous mode [ 524.371144][T14367] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.392692][T14367] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.404035][T14367] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.414117][T14367] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.570214][T25133] bond0: entered promiscuous mode [ 524.617113][T25133] bond0: entered allmulticast mode [ 524.626977][T25133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.784645][T25144] netlink: 'syz.2.5250': attribute type 2 has an invalid length. [ 524.820543][T25154] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 524.947690][T25154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.966310][T25158] bond4: (slave gretap2): making interface the new active one [ 524.975956][T25158] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 524.998614][T25151] netlink: 'syz.4.5252': attribute type 9 has an invalid length. [ 525.141939][T25155] lo speed is unknown, defaulting to 1000 [ 525.147104][T25176] bridge0: left allmulticast mode [ 525.195597][T25155] wlan0 speed is unknown, defaulting to 1000 [ 526.095325][T25226] netlink: 'syz.3.5271': attribute type 1 has an invalid length. [ 526.106859][T25226] netlink: 'syz.3.5271': attribute type 1 has an invalid length. [ 526.206332][T25232] can: request_module (can-proto-0) failed. [ 526.586026][T25263] sit2: entered promiscuous mode [ 526.602407][T25263] sit2: entered allmulticast mode [ 526.621697][T25269] netlink: 'syz.5.5285': attribute type 7 has an invalid length. [ 526.642833][T25269] netlink: 'syz.5.5285': attribute type 8 has an invalid length. [ 527.010591][T25297] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 527.103777][T25299] __nla_validate_parse: 28 callbacks suppressed [ 527.103798][T25299] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.5293'. [ 527.127037][T25300] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 527.142797][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 527.150950][ C0] lec:lec_tx_timeout: lec0 [ 527.155856][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 527.384594][T25315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5295'. [ 527.511128][T25320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.554669][T25329] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5301'. [ 527.673235][T25322] syzkaller0: entered promiscuous mode [ 527.678936][T25322] syzkaller0: entered allmulticast mode [ 527.692331][T25326] tipc: Enabled bearer , priority 0 [ 527.700613][T25334] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5303'. [ 527.717630][T25322] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5299'. [ 527.797732][T25321] tipc: Resetting bearer [ 527.829965][T25343] x_tables: duplicate underflow at hook 2 [ 528.152994][T25347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5305'. [ 528.330181][T25352] openvswitch: netlink: IPv4 tun info is not correct [ 529.715553][T25321] tipc: Disabling bearer [ 529.726228][T25347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.800102][T25360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5308'. [ 529.836871][T25347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.942328][T25362] x_tables: duplicate underflow at hook 2 [ 530.178281][T25368] gretap0: left promiscuous mode [ 530.178848][T25373] netlink: 'syz.6.5313': attribute type 3 has an invalid length. [ 530.218907][T25368] 8021q: adding VLAN 0 to HW filter on device  [ 530.226237][T25379] netlink: 'syz.3.5314': attribute type 11 has an invalid length. [ 530.236881][T25378] netlink: 'syz.3.5314': attribute type 11 has an invalid length. [ 530.251373][T25368] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.265291][T25368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.476338][T25389] bond0: entered promiscuous mode [ 530.492368][T25389] bond_slave_0: entered promiscuous mode [ 530.498916][T25389] bond_slave_1: entered promiscuous mode [ 530.534689][T25383] syzkaller0: entered promiscuous mode [ 530.543784][T25383] syzkaller0: entered allmulticast mode [ 530.904428][T25412] openvswitch: netlink: Flow key attr not present in new flow. [ 530.930047][T25416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5326'. [ 530.943898][T25412] netlink: 'syz.6.5324': attribute type 9 has an invalid length. [ 531.247755][T25438] netlink: 774 bytes leftover after parsing attributes in process `syz.2.5331'. [ 531.957486][T25472] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5338'. [ 532.162546][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 532.170842][ C0] lec:lec_tx_timeout: lec0 [ 532.175885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 532.185935][T14361] veth0_to_bond: left promiscuous mode [ 532.265746][T25482] __nla_validate_parse: 52 callbacks suppressed [ 532.265769][T25482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5345'. [ 532.292165][T25482] ipt_ECN: cannot use operation on non-tcp rule [ 532.310829][T25482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5345'. [ 532.350768][T25490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5346'. [ 532.367259][T25492] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5344'. [ 532.706582][T25510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5351'. [ 532.816776][T25514] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 532.843688][T25514] syzkaller1: linktype set to 823 [ 533.049348][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5356'. [ 533.267475][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5358'. [ 533.309171][T25533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5358'. [ 533.410441][T25533] netlink: 'syz.3.5358': attribute type 2 has an invalid length. [ 533.763536][T25565] netlink: 45 bytes leftover after parsing attributes in process `syz.4.5369'. [ 533.914512][T25575] : entered promiscuous mode [ 534.038604][T25585] delete_channel: no stack [ 534.199018][T25592] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5374'. [ 534.220526][T25592] 8021q: VLANs not supported on ip6_vti0 [ 535.010101][T25629] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 535.637795][T25673] netlink: 'syz.3.5400': attribute type 5 has an invalid length. [ 535.775692][T25677] lo speed is unknown, defaulting to 1000 [ 535.842923][T25677] wlan0 speed is unknown, defaulting to 1000 [ 535.862856][ T5838] Bluetooth: hci6: command tx timeout [ 536.067155][T25685] lo speed is unknown, defaulting to 1000 [ 536.106875][T25697] netlink: 'syz.6.5405': attribute type 1 has an invalid length. [ 536.286871][T25685] wlan0 speed is unknown, defaulting to 1000 [ 536.710985][T25732] syzkaller0: entered promiscuous mode [ 536.717227][T25732] syzkaller0: entered allmulticast mode [ 536.730794][T25732] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 536.920815][T25738] macvlan0: entered allmulticast mode [ 536.926780][T25738] veth1_vlan: entered allmulticast mode [ 536.937849][T25738] netlink: 'syz.6.5417': attribute type 6 has an invalid length. [ 536.945837][T25738] netlink: 'syz.6.5417': attribute type 5 has an invalid length. [ 537.192511][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 537.200680][ C0] lec:lec_tx_timeout: lec0 [ 537.205909][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 537.327844][ T129] wlan0 speed is unknown, defaulting to 1000 [ 537.357077][ T129] syz0: Port: 1 Link DOWN [ 537.781496][T25779] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001 [ 537.789699][T25774] syzkaller0: entered promiscuous mode [ 537.805878][T25774] syzkaller0: entered allmulticast mode [ 537.944597][T25785] __nla_validate_parse: 20 callbacks suppressed [ 537.944618][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5431'. [ 538.029133][T25792] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5433'. [ 538.066305][T25787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.254653][T25810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5438'. [ 538.265112][T25809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5438'. [ 538.411107][T25807] netlink: 'syz.5.5437': attribute type 83 has an invalid length. [ 538.510047][T25821] netlink: 'syz.5.5437': attribute type 83 has an invalid length. [ 538.676367][T25828] syzkaller0: entered promiscuous mode [ 538.682016][T25828] syzkaller0: entered allmulticast mode [ 538.751000][T25836] netlink: 'syz.3.5446': attribute type 1 has an invalid length. [ 538.897909][T25839] bond6: (slave ip6gretap1): making interface the new active one [ 538.907042][T25839] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 538.912991][T25846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5448'. [ 539.147891][T14366] tipc: Subscription rejected, illegal request [ 539.298289][T25858] erspan0: entered allmulticast mode [ 539.345755][T25859] syzkaller1: entered promiscuous mode [ 539.351835][T25859] syzkaller1: entered allmulticast mode [ 539.529648][T25859] syzkaller0: entered promiscuous mode [ 539.538394][T25859] syzkaller0: entered allmulticast mode [ 539.542992][ T5146] Bluetooth: hci3: command 0x041b tx timeout [ 539.579843][T25878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5458'. [ 541.587440][T25907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5460'. [ 541.622735][T25908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5460'. [ 541.889280][T25925] x_tables: duplicate underflow at hook 1 [ 541.934769][ T56] block nbd0: Possible stuck request ffff888025b00000: control (read@0,1024B). Runtime 60 seconds [ 541.945697][ T56] block nbd0: Possible stuck request ffff888025b00200: control (read@1024,1024B). Runtime 60 seconds [ 541.957316][ T56] block nbd0: Possible stuck request ffff888025b00400: control (read@2048,1024B). Runtime 60 seconds [ 541.968763][ T56] block nbd0: Possible stuck request ffff888025b00600: control (read@3072,1024B). Runtime 60 seconds [ 542.015507][T25922] syzkaller0: entered promiscuous mode [ 542.021040][T25922] syzkaller0: entered allmulticast mode [ 542.212657][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 542.220752][ C0] lec:lec_tx_timeout: lec0 [ 542.225732][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 542.246044][T25942] netlink: 'syz.3.5471': attribute type 10 has an invalid length. [ 542.337179][T25942] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 542.360136][T25942] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 542.674647][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5478'. [ 542.712555][T25971] netlink: 'syz.2.5478': attribute type 5 has an invalid length. [ 542.741026][T25971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5478'. [ 542.841383][T25971] geneve2: entered promiscuous mode [ 542.851150][T25971] geneve2: entered allmulticast mode [ 542.860297][T25981] netlink: 'syz.4.5482': attribute type 1 has an invalid length. [ 542.875637][T25981] netlink: 'syz.4.5482': attribute type 2 has an invalid length. [ 542.887131][T14372] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 542.905320][T14372] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 542.942742][T14356] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 542.952257][T14356] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 543.605486][T26016] __nla_validate_parse: 1 callbacks suppressed [ 543.605510][T26016] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5489'. [ 543.637057][T26016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5489'. [ 543.673088][T26020] netlink: 'syz.4.5490': attribute type 21 has an invalid length. [ 543.681220][T26020] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5490'. [ 543.705293][T26020] netlink: 'syz.4.5490': attribute type 4 has an invalid length. [ 543.715926][T26020] netlink: 'syz.4.5490': attribute type 5 has an invalid length. [ 543.724019][T26020] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5490'. [ 543.737319][T26023] netlink: 'syz.4.5490': attribute type 21 has an invalid length. [ 543.761927][T26023] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5490'. [ 543.791899][T26023] netlink: 'syz.4.5490': attribute type 4 has an invalid length. [ 543.812353][T26023] netlink: 'syz.4.5490': attribute type 5 has an invalid length. [ 543.845691][T26023] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5490'. [ 544.138883][T26034] macvtap0: entered promiscuous mode [ 544.144536][T26034] macvtap0: entered allmulticast mode [ 544.150305][T26034] veth1_vlan: entered allmulticast mode [ 544.237952][T26034] macvtap1: entered promiscuous mode [ 544.253313][T26034] macvtap1: entered allmulticast mode [ 544.768618][T26068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5499'. [ 544.914952][T26068] bond0: (slave wlan1): Releasing backup interface [ 545.429192][T26109] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5508'. [ 545.524103][T26116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5510'. [ 545.571420][T26121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5510'. [ 546.012085][T26133] team0: Port device team_slave_0 removed [ 546.289883][T26163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.333866][T26163] : entered promiscuous mode [ 546.359891][T26164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.573122][ T5835] page_pool_release_retry() stalled pool shutdown: id 116, 1 inflight 60 sec [ 546.978002][T26152] delete_channel: no stack [ 548.012527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 548.020657][ C0] lec:lec_tx_timeout: lec0 [ 548.025772][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.146944][T26153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.343496][T26190] validate_nla: 2 callbacks suppressed [ 549.343515][T26190] netlink: 'syz.5.5530': attribute type 18 has an invalid length. [ 549.421485][T26195] __nla_validate_parse: 8 callbacks suppressed [ 549.421505][T26195] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5528'. [ 549.469781][T26201] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 549.657941][T26213] netlink: 'syz.2.5534': attribute type 32 has an invalid length. [ 549.686910][T26213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5534'. [ 549.705881][T26211] netlink: 'syz.3.5535': attribute type 1 has an invalid length. [ 549.719400][T26214] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5536'. [ 549.732315][T26219] tipc: Enabling of bearer rejected, failed to enable media [ 549.741402][T26211] netlink: 'syz.3.5535': attribute type 2 has an invalid length. [ 549.749872][T26211] netlink: 'syz.3.5535': attribute type 1 has an invalid length. [ 549.773651][T26211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5535'. [ 549.852176][T26213] bond5: option coupled_control: invalid value (52) [ 549.900425][T26213] bond5 (unregistering): Released all slaves [ 550.075265][T26219] netlink: 'syz.5.5537': attribute type 1 has an invalid length. [ 550.088049][T26231] veth0: entered promiscuous mode [ 550.107853][T26228] veth0: left promiscuous mode [ 550.172340][T26233] netlink: 'syz.4.5540': attribute type 21 has an invalid length. [ 550.254919][T26235] netlink: 'syz.5.5541': attribute type 1 has an invalid length. [ 550.338312][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5542'. [ 550.370923][T26237] netlink: 'syz.4.5542': attribute type 11 has an invalid length. [ 550.394176][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5542'. [ 550.423518][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5544'. [ 550.503499][T26235] bond5: entered promiscuous mode [ 550.510379][T26235] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.522712][T26240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5544'. [ 550.546692][T26237] netlink: 'syz.4.5542': attribute type 11 has an invalid length. [ 550.555220][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5542'. [ 550.583050][T26254] bond5: (slave bridge4): making interface the new active one [ 550.590875][T26254] bridge4: entered promiscuous mode [ 550.598071][T26254] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 550.647087][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5544'. [ 551.180804][T26279] netlink: zone id is out of range [ 551.213362][T26279] netlink: zone id is out of range [ 551.218806][T26279] netlink: zone id is out of range [ 551.226969][T26248] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 551.242778][T26279] netlink: zone id is out of range [ 551.255973][T26281] ip6gre1: entered promiscuous mode [ 551.265497][T26279] netlink: zone id is out of range [ 551.278504][T26279] netlink: zone id is out of range [ 551.326787][T26279] netlink: zone id is out of range [ 551.332073][T26279] netlink: zone id is out of range [ 551.394170][T26279] netlink: zone id is out of range [ 551.399355][T26279] netlink: zone id is out of range [ 551.476352][T26279] netlink: zone id is out of range [ 551.481647][T26279] netlink: zone id is out of range [ 551.487144][T26279] netlink: zone id is out of range [ 551.493246][T26279] netlink: zone id is out of range [ 551.498649][T26279] netlink: zone id is out of range [ 551.504654][T26279] netlink: zone id is out of range [ 552.760404][T26371] bridge4: entered promiscuous mode [ 552.768916][T26371] bridge4: entered allmulticast mode [ 553.052521][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 553.060920][ C0] lec:lec_tx_timeout: lec0 [ 553.065612][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 553.321256][T26408] bridge_slave_1: left allmulticast mode [ 553.332074][T26408] bridge_slave_1: left promiscuous mode [ 553.338346][T26408] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.351006][T26408] bridge_slave_0: left allmulticast mode [ 553.363311][T26408] bridge_slave_0: left promiscuous mode [ 553.369383][T26408] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.493302][T26419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.501580][T26419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.788010][T26430] delete_channel: no stack [ 553.795693][T26434] siw: device registration error -23 [ 553.801472][T26434] siw: device registration error -23 [ 553.831959][T26434] siw: device registration error -23 [ 553.841111][T26434] siw: device registration error -23 [ 553.847412][T26434] siw: device registration error -23 [ 553.854101][T26434] siw: device registration error -23 [ 553.859954][T26434] siw: device registration error -23 [ 553.866290][T26434] siw: device registration error -23 [ 553.878451][T26434] siw: device registration error -23 [ 553.888043][T26434] siw: device registration error -23 [ 553.899486][T26434] siw: device registration error -23 [ 553.920189][T26434] siw: device registration error -23 [ 553.943289][T26434] siw: device registration error -23 [ 553.949026][T26434] siw: device registration error -23 [ 553.973175][T26434] siw: device registration error -23 [ 553.983720][T26434] siw: device registration error -23 [ 553.990990][T26434] siw: device registration error -23 [ 553.997650][T26434] siw: device registration error -23 [ 554.004506][T26434] siw: device registration error -23 [ 554.010308][T26434] siw: device registration error -23 [ 554.018113][T26434] siw: device registration error -23 [ 554.024172][T26434] siw: device registration error -23 [ 554.030021][T26434] siw: device registration error -23 [ 554.036672][T26434] siw: device registration error -23 [ 554.042905][T26434] siw: device registration error -23 [ 554.050245][T26434] siw: device registration error -23 [ 554.079462][T26434] siw: device registration error -23 [ 554.099672][T26434] siw: device registration error -23 [ 554.125812][T26434] siw: device registration error -23 [ 554.153932][T26434] siw: device registration error -23 [ 554.159680][T26434] siw: device registration error -23 [ 554.181194][T26434] siw: device registration error -23 [ 554.214568][T26434] siw: device registration error -23 [ 554.236242][T26434] siw: device registration error -23 [ 554.266706][T26434] siw: device registration error -23 [ 554.286198][T26434] siw: device registration error -23 [ 554.307306][T26434] siw: device registration error -23 [ 554.326461][T26434] siw: device registration error -23 [ 554.339719][T26434] siw: device registration error -23 [ 554.353361][T26434] siw: device registration error -23 [ 554.373025][T26434] siw: device registration error -23 [ 554.379081][T26434] siw: device registration error -23 [ 554.385405][T26434] siw: device registration error -23 [ 554.391285][T26434] siw: device registration error -23 [ 554.399437][T26434] siw: device registration error -23 [ 554.431041][T26434] siw: device registration error -23 [ 554.444115][T26434] siw: device registration error -23 [ 554.462952][T26434] siw: device registration error -23 [ 554.481976][T26434] siw: device registration error -23 [ 554.498379][T26434] siw: device registration error -23 [ 554.505320][T26434] siw: device registration error -23 [ 554.511047][T26434] siw: device registration error -23 [ 554.516995][T26434] siw: device registration error -23 [ 554.524488][T26434] siw: device registration error -23 [ 554.530397][T26434] siw: device registration error -23 [ 554.546027][T26434] siw: device registration error -23 [ 554.556768][T26434] siw: device registration error -23 [ 554.567426][T26434] siw: device registration error -23 [ 554.573764][T26434] siw: device registration error -23 [ 554.580064][T26434] siw: device registration error -23 [ 554.613506][T26434] siw: device registration error -23 [ 555.320712][T26511] syzkaller0: entered promiscuous mode [ 555.326774][T26511] syzkaller0: entered allmulticast mode [ 555.645349][T26524] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.725765][T26527] __nla_validate_parse: 27 callbacks suppressed [ 555.725785][T26527] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5622'. [ 555.752789][T26527] ip6_vti0: entered promiscuous mode [ 556.082673][T26547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5628'. [ 556.146060][T26551] validate_nla: 6 callbacks suppressed [ 556.146081][T26551] netlink: 'syz.5.5630': attribute type 19 has an invalid length. [ 556.189264][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5630'. [ 556.219947][T26551] netlink: 'syz.5.5630': attribute type 19 has an invalid length. [ 556.297820][T26554] xt_hashlimit: size too large, truncated to 1048576 [ 556.301042][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5630'. [ 556.384846][T26558] netlink: 'syz.6.5632': attribute type 83 has an invalid length. [ 556.534160][T26561] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5633'. [ 556.940766][T26578] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 556.981332][T26574] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 557.026459][T26574] bond7 (unregistering): Released all slaves [ 557.152751][T26590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5643'. [ 557.174296][T26592] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5644'. [ 557.314937][T26590] syzkaller0: entered promiscuous mode [ 557.320877][T26590] syzkaller0: entered allmulticast mode [ 557.356094][T26597] wg0: entered allmulticast mode [ 557.423677][T26590] net_ratelimit: 127 callbacks suppressed [ 557.423698][T26590] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 557.437793][T20770] IPVS: starting estimator thread 0... [ 557.447282][T26604] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5647'. [ 557.542706][T26610] IPVS: using max 39 ests per chain, 93600 per kthread [ 557.930872][T26638] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5657'. [ 558.072543][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 558.080766][ C0] lec:lec_tx_timeout: lec0 [ 558.085726][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.016384][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 560.266037][T26597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.547831][T26660] netlink: 'syz.4.5661': attribute type 1 has an invalid length. [ 560.556195][T26660] netlink: 'syz.4.5661': attribute type 2 has an invalid length. [ 560.595251][T26660] netlink: 'syz.4.5661': attribute type 1 has an invalid length. [ 560.605349][T26660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5661'. [ 560.814462][T26673] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 560.966068][T26683] __nla_validate_parse: 2 callbacks suppressed [ 560.966083][T26683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5670'. [ 561.119488][T26690] netlink: 'syz.6.5673': attribute type 1 has an invalid length. [ 561.132221][T26690] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 561.239193][T26695] netlink: 'syz.6.5676': attribute type 21 has an invalid length. [ 561.248866][T26695] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.261522][T26695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.268942][T26695] IPv6: NLM_F_CREATE should be set when creating new route [ 561.276292][T26695] IPv6: NLM_F_CREATE should be set when creating new route [ 561.283618][T26695] IPv6: NLM_F_CREATE should be set when creating new route [ 561.471709][T26707] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5677'. [ 561.626654][T26713] team0: Device gtp0 is up. Set it down before adding it as a team port [ 561.718834][T26720] netlink: 'syz.3.5682': attribute type 1 has an invalid length. [ 561.840659][T26720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 561.863182][T26716] bond7: (slave geneve2): making interface the new active one [ 561.873784][T26716] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 561.884155][T14372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.894711][T26729] delete_channel: no stack [ 561.922076][T14372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.006834][T14372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.053361][T14372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.076080][T26738] erspan0: entered promiscuous mode [ 562.117961][T26743] xt_l2tp: invalid flags combination: 0 [ 562.297835][T26755] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 562.626432][T26775] netlink: 'syz.3.5694': attribute type 1 has an invalid length. [ 562.869091][T26775] bond8: entered promiscuous mode [ 562.914414][T26775] bond8: entered allmulticast mode [ 562.930322][T26775] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.102773][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 563.110848][ C0] lec:lec_tx_timeout: lec0 [ 563.115797][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 563.170155][T26801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.223291][T26803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.307403][T26807] IPVS: length: 46 != 24 [ 563.454942][T26815] macvtap2: entered allmulticast mode [ 563.462423][T26815] veth0_macvtap: entered allmulticast mode [ 563.536503][T26826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5706'. [ 563.566431][T26827] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5704'. [ 563.616251][T26827] netlink: 'syz.3.5704': attribute type 1 has an invalid length. [ 563.663139][T26827] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5704'. [ 563.794758][T26838] netlink: 'syz.5.5710': attribute type 3 has an invalid length. [ 563.805839][T26838] netlink: 'syz.5.5710': attribute type 1 has an invalid length. [ 563.827907][T26838] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5710'. [ 563.878605][T26841] SET target dimension over the limit! [ 563.915068][T26844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5713'. [ 564.036787][T26848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5710'. [ 564.059249][T26839] ip6erspan1: entered allmulticast mode [ 564.071663][T26848] openvswitch: netlink: Flow key attr not present in new flow. [ 564.343679][T26867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 564.591340][T26884] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 564.611521][T26884] tipc: Enabled bearer , priority 10 [ 564.632202][T26883] tipc: Enabling of bearer rejected, already enabled [ 564.705091][T26884] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 564.719608][T26884] bond4 (unregistering): Released all slaves [ 564.894366][T26903] netlink: 'syz.5.5729': attribute type 3 has an invalid length. [ 564.909092][T26905] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5731'. [ 565.247465][T26925] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.320532][T26920] lo speed is unknown, defaulting to 1000 [ 565.357703][T26920] wlan0 speed is unknown, defaulting to 1000 [ 565.378086][T26930] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5736'. [ 565.763062][ T129] tipc: Node number set to 3656051824 [ 566.001824][T26964] tipc: Enabled bearer , priority 0 [ 566.005377][T26962] sctp: [Deprecated]: syz.2.5750 (pid 26962) Use of int in maxseg socket option. [ 566.005377][T26962] Use struct sctp_assoc_value instead [ 566.113692][T26967] netlink: 'syz.4.5751': attribute type 1 has an invalid length. [ 566.126371][T26971] __nla_validate_parse: 2 callbacks suppressed [ 566.126391][T26971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5752'. [ 566.177357][T26967] bond4: entered promiscuous mode [ 566.182962][T26967] bond4: entered allmulticast mode [ 566.189183][T26967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 566.219669][T26953] tipc: Disabling bearer [ 566.534879][T26990] set match dimension is over the limit! [ 566.558463][T14366] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.682938][T27000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.693588][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 566.750219][T27001] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 566.765348][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5763'. [ 566.792919][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 566.877193][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 566.895498][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 566.921515][T27010] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5764'. [ 566.977699][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 567.004611][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 567.032868][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 567.041056][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 567.079866][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 567.114645][T27001] netlink: 'syz.2.5761': attribute type 10 has an invalid length. [ 567.183045][T27019] geneve2: entered promiscuous mode [ 567.209376][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5769'. [ 568.100201][T27072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5785'. [ 568.132789][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 568.141168][ C0] lec:lec_tx_timeout: lec0 [ 568.147172][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 568.237554][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5787'. [ 568.330539][T27072] bond9: option xmit_hash_policy: invalid value (64) [ 568.498192][T27072] bond9 (unregistering): Released all slaves [ 568.720459][T27090] syzkaller0: entered promiscuous mode [ 568.749824][T27090] syzkaller0: entered allmulticast mode [ 568.775766][T27097] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 568.799052][T27090] x_tables: duplicate underflow at hook 1 [ 568.887343][T27118] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5795'. [ 569.399545][T27139] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5800'. [ 571.057603][T27156] vlan2: entered allmulticast mode [ 571.074720][T27158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5802'. [ 571.093697][T27162] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5802'. [ 571.465799][T27179] syzkaller0: entered promiscuous mode [ 571.472282][T27179] syzkaller0: entered allmulticast mode [ 571.487071][T27190] 8021q: VLANs not supported on lo [ 571.492614][T27191] 8021q: VLANs not supported on lo [ 571.869895][T27209] openvswitch: netlink: IP tunnel dst address not specified [ 572.024788][ T56] block nbd0: Possible stuck request ffff888025b00000: control (read@0,1024B). Runtime 90 seconds [ 572.037469][ T56] block nbd0: Possible stuck request ffff888025b00200: control (read@1024,1024B). Runtime 90 seconds [ 572.048970][ T56] block nbd0: Possible stuck request ffff888025b00400: control (read@2048,1024B). Runtime 90 seconds [ 572.060059][ T56] block nbd0: Possible stuck request ffff888025b00600: control (read@3072,1024B). Runtime 90 seconds [ 572.381811][T27224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5825'. [ 572.399028][T27225] validate_nla: 24 callbacks suppressed [ 572.399048][T27225] netlink: 'syz.6.5826': attribute type 4 has an invalid length. [ 572.455292][T27226] netlink: 'syz.6.5826': attribute type 4 has an invalid length. [ 573.172833][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 573.181016][ C0] lec:lec_tx_timeout: lec0 [ 573.185809][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 574.434033][T27265] netlink: 'syz.5.5836': attribute type 10 has an invalid length. [ 574.485424][T27271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5839'. [ 574.562945][T27265] veth0_vlan: left promiscuous mode [ 574.585318][T27265] veth0_vlan: entered promiscuous mode [ 574.609786][T27265] team0: Device veth0_vlan failed to register rx_handler [ 574.881529][T27288] netlink: 'syz.5.5842': attribute type 1 has an invalid length. [ 574.909115][T27288] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5842'. [ 574.921186][T27290] geneve3: entered promiscuous mode [ 574.926314][T27288] netlink: 658 bytes leftover after parsing attributes in process `syz.5.5842'. [ 574.935986][T27294] netlink: 'syz.5.5842': attribute type 3 has an invalid length. [ 574.936095][T27288] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5842'. [ 574.955058][T27290] geneve3: entered allmulticast mode [ 574.962169][T14363] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 575.022533][T14363] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 575.032242][T14363] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 575.061261][T14363] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 575.213653][ T31] INFO: task syz.1.3918:20575 blocked for more than 143 seconds. [ 575.232706][ T31] Not tainted syzkaller #0 [ 575.237732][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.282636][ T31] task:syz.1.3918 state:D stack:26048 pid:20575 tgid:20574 ppid:17233 task_flags:0x400140 flags:0x00080002 [ 575.314906][ T31] Call Trace: [ 575.321882][ T31] [ 575.328725][ T31] __schedule+0x14ea/0x5050 [ 575.335157][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 575.341083][ T31] ? __pfx___schedule+0x10/0x10 [ 575.346300][ T31] ? schedule+0x90/0x360 [ 575.350824][ T31] schedule+0x164/0x360 [ 575.355598][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.361364][ T31] __mutex_lock+0x7fe/0x1300 [ 575.366834][ T31] ? __mutex_lock+0x5ac/0x1300 [ 575.371903][ T31] ? nfsd_nl_listener_set_doit+0x141/0x16c0 [ 575.378336][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.383834][ T31] ? __asan_memset+0x22/0x50 [ 575.388676][ T31] ? do_syscall_64+0xe2/0xf80 [ 575.395354][T27316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5850'. [ 575.410189][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.417404][ T31] nfsd_nl_listener_set_doit+0x141/0x16c0 [ 575.423456][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 575.429447][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 575.435822][ T31] ? rcu_is_watching+0x15/0xb0 [ 575.440904][ T31] ? __nla_parse+0x40/0x60 [ 575.445863][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 575.452371][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 575.458319][ T31] ? __asan_memcpy+0x40/0x70 [ 575.463183][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 575.469336][ T31] ? bpf_lsm_capable+0x9/0x20 [ 575.474344][ T31] ? security_capable+0x7e/0x2c0 [ 575.479360][ T31] genl_rcv_msg+0x61c/0x7a0 [ 575.484242][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.489694][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 575.497117][ T31] netlink_rcv_skb+0x232/0x4b0 [ 575.501941][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.507213][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.512978][ T31] ? genl_rcv+0x19/0x40 [ 575.517226][ T31] ? down_read+0x272/0x2e0 [ 575.521760][ T31] ? genl_rcv+0xd/0x40 [ 575.526646][ T31] genl_rcv+0x28/0x40 [ 575.531061][ T31] netlink_unicast+0x80f/0x9b0 [ 575.536234][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 575.541792][ T31] ? __alloc_skb+0x193/0x390 [ 575.549312][ T31] ? netlink_sendmsg+0x650/0xb40 [ 575.554907][ T31] ? skb_put+0x11b/0x210 [ 575.559305][ T31] netlink_sendmsg+0x813/0xb40 [ 575.564553][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.569901][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.575332][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.580675][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.586523][ T31] ____sys_sendmsg+0xa68/0xad0 [ 575.591353][ T31] ? __might_fault+0xaf/0x130 [ 575.597520][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.603492][ T31] ? import_iovec+0x73/0xa0 [ 575.608148][ T31] ___sys_sendmsg+0x2a5/0x360 [ 575.613623][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 575.618705][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.624615][ T31] ? futex_wake+0x4ac/0x580 [ 575.629324][ T31] ? __fget_files+0x2a/0x420 [ 575.634220][ T31] ? __fget_files+0x3a0/0x420 [ 575.639242][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 575.644583][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.650244][ T31] ? rcu_is_watching+0x15/0xb0 [ 575.655889][ T31] do_syscall_64+0xe2/0xf80 [ 575.660480][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.667844][ T31] ? trace_irq_disable+0x37/0x100 [ 575.673148][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.677858][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.684291][ T31] RIP: 0033:0x7f375f79aeb9 [ 575.688770][ T31] RSP: 002b:00007f375d9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.698898][ T31] RAX: ffffffffffffffda RBX: 00007f375fa15fa0 RCX: 00007f375f79aeb9 [ 575.707104][ T31] RDX: 0000000004000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 575.715678][ T31] RBP: 00007f375f808c1f R08: 0000000000000000 R09: 0000000000000000 [ 575.723963][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.731994][ T31] R13: 00007f375fa16038 R14: 00007f375fa15fa0 R15: 00007ffe3c64da78 [ 575.740276][ T31] [ 575.743703][ T31] [ 575.743703][ T31] Showing all locks held in the system: [ 575.751614][ T31] 1 lock held by khungtaskd/31: [ 575.760458][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 575.770875][ T31] 2 locks held by getty/5586: [ 575.775895][ T31] #0: ffff88814df9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 575.786123][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 575.796661][ T31] 1 lock held by udevd/18060: [ 575.802183][ T31] #0: ffff888025a62358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 575.811913][ T31] 2 locks held by syz.0.3812/20247: [ 575.817336][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.825726][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 575.836110][ T31] 2 locks held by syz.1.3918/20575: [ 575.841370][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.850005][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 575.860992][ T31] 1 lock held by syz.6.5845/27299: [ 575.866320][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 575.876385][ T31] 2 locks held by syz.4.5848/27310: [ 575.881656][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 575.891343][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 575.904547][ T31] 1 lock held by syz.3.5850/27316: [ 575.909685][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 575.919204][ T31] [ 575.925569][ T31] ============================================= [ 575.925569][ T31] [ 575.945471][ T31] NMI backtrace for cpu 1 [ 575.945489][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 575.945511][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 575.945523][ T31] Call Trace: [ 575.945532][ T31] [ 575.945541][ T31] dump_stack_lvl+0xe8/0x150 [ 575.945571][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 575.945601][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.945635][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 575.945674][ T31] sys_info+0x135/0x170 [ 575.945696][ T31] watchdog+0xf90/0xfe0 [ 575.945724][ T31] ? watchdog+0x209/0xfe0 [ 575.945753][ T31] kthread+0x726/0x8b0 [ 575.945781][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.945801][ T31] ? __pfx_kthread+0x10/0x10 [ 575.945827][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.945857][ T31] ? __pfx_kthread+0x10/0x10 [ 575.945881][ T31] ret_from_fork+0x51b/0xa40 [ 575.945915][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.945945][ T31] ? __switch_to+0xc82/0x1410 [ 575.945979][ T31] ? __pfx_kthread+0x10/0x10 [ 575.946003][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.946047][ T31] [ 575.946055][ T31] Sending NMI from CPU 1 to CPUs 0: [ 576.069214][ C0] NMI backtrace for cpu 0 [ 576.069233][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 576.069252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 576.069264][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 576.069288][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 576.069304][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 576.069320][ C0] RAX: 00000000001b9fa9 RBX: ffffffff8199570d RCX: 0000000080000001 [ 576.069333][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9188 RDI: ffffffff8c073980 [ 576.069345][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 576.069358][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1a70 [ 576.069371][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 576.069382][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 576.069396][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.069417][ C0] CR2: 00007f78687e8600 CR3: 0000000024a58000 CR4: 00000000003526f0 [ 576.069433][ C0] Call Trace: [ 576.069440][ C0] [ 576.069446][ C0] default_idle+0x9/0x20 [ 576.069467][ C0] default_idle_call+0x72/0xb0 [ 576.069489][ C0] do_idle+0x1bd/0x500 [ 576.069504][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.069525][ C0] ? __pfx_do_idle+0x10/0x10 [ 576.069545][ C0] cpu_startup_entry+0x43/0x60 [ 576.069561][ C0] rest_init+0x2de/0x300 [ 576.069584][ C0] start_kernel+0x380/0x3d0 [ 576.069608][ C0] x86_64_start_reservations+0x24/0x30 [ 576.069627][ C0] x86_64_start_kernel+0x143/0x1c0 [ 576.069645][ C0] common_startup_64+0x13e/0x147 [ 576.069677][ C0] [ 576.258151][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 576.265152][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.274565][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 576.284657][ T31] Call Trace: [ 576.288062][ T31] [ 576.291057][ T31] vpanic+0x1e0/0x670 [ 576.295074][ T31] panic+0xc5/0xd0 [ 576.298992][ T31] ? __pfx_panic+0x10/0x10 [ 576.303461][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 576.308969][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 576.315636][ T31] watchdog+0xfda/0xfe0 [ 576.319861][ T31] ? watchdog+0x209/0xfe0 [ 576.324344][ T31] kthread+0x726/0x8b0 [ 576.328551][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.333457][ T31] ? __pfx_kthread+0x10/0x10 [ 576.338366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.343718][ T31] ? __pfx_kthread+0x10/0x10 [ 576.348339][ T31] ret_from_fork+0x51b/0xa40 [ 576.352969][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.358306][ T31] ? __switch_to+0xc82/0x1410 [ 576.363120][ T31] ? __pfx_kthread+0x10/0x10 [ 576.367837][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.372744][ T31] [ 576.376391][ T31] Kernel Offset: disabled [ 576.380734][ T31] Rebooting in 86400 seconds..