last executing test programs: 3m58.893997675s ago: executing program 3 (id=2533): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0xc7a8}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 3m58.57139456s ago: executing program 3 (id=2539): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x2, 0x675d, @remote, 0xffffff7a}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000080)="51a2cfbbe9bb916c0a79217c760fbbce08e8b0545d2b9c15169f01d3cf5dcd53b479ea6276baa4692370000a093fcc0516c45612bb1f6d3263f4c82168b446c9c32d1dcfacc2674ae53b4f1fb3d0ba1518d5bc5da70887f3fa5bdc92535bfafacd4b67dc0db2ea354ce656f3e676c83301d32e6c381be5d05d76e62d67008a890a2de01324e2a442bddd6707361e02a1a00c4662d708fee12b67028bf456355f5b86ab4337180bb850bbfdac64c0c6c81bab6c76ac", 0xb5}, {&(0x7f0000000140)}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="fc12bc2e7b08e0d02459a982ea0a638826d83e912336c6dca25960d9cc43a52d9ce3ddff157d9ca44e14d4ec3ab83599ad13", 0x32}, {&(0x7f00000011c0)="7817947a82e955eab9344c33ec9cf2d42b117e254cf69bb42c612e4722c3e90212a055601f6bed5388f621bb4e1aafb96a06f519a702ae59aec7a63b6adc7610dbd0a7d904b57d6b8198c42fb61cbccbeeb2b4180b9536b581e020e785bb30fcdad0a6628a48c2f3bec31304626eb3d4a77b228fedc4a9270ca121619e1948e947c284a46aa4079db1e62119b65a36d3c795f1051a81f6", 0x97}], 0x5, &(0x7f0000001300)=[@tclass={{0x14, 0x29, 0x43, 0xff}}], 0x18}, 0x44000) 3m58.401502984s ago: executing program 3 (id=2542): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'batadv_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) 3m58.105919489s ago: executing program 3 (id=2546): r0 = socket(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socket$igmp(0x2, 0x3, 0x2) 3m57.97965996s ago: executing program 3 (id=2549): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x34008041) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x7, 0x5, 0x0, @mcast1, @mcast2, 0x0, 0x8, 0x3, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x1b, 0xe, 0xb, 0x101, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0x7f, 0xc, 0x8, 0xfff7}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @alu={0x7, 0x0, 0x9, 0x1, 0x4, 0xfffffffffffffff8, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', r8, @fallback=0x2d, r5, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, r5, 0x3, &(0x7f0000000680), &(0x7f0000000480)=[{0x2, 0x1, 0x6, 0x6}, {0x0, 0x2, 0x40000004, 0xa}, {0x2, 0x1, 0x9, 0x5}], 0x10, 0x2fb}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 3m57.775646818s ago: executing program 3 (id=2552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 3m42.755220785s ago: executing program 32 (id=2552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m27.12348539s ago: executing program 2 (id=3439): r0 = socket(0x1, 0x803, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/115, 0x73, 0x0, &(0x7f00000001c0)=""/160, 0xa0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f}, {}, {}, [@ldst={0x2, 0x0, 0x2, 0x7, 0x7, 0x2}, @alu={0x4, 0x1, 0x8, 0x6, 0x8, 0xffffffffffffff10, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}}, @jmp={0x5, 0x0, 0x6, 0x0, 0xa, 0xffffffffffffffe0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x2bc7e0cf3cd4bb4b, 0x23, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0x1, 0x4, 0x5, 0x8}, {0x2, 0x1, 0x2, 0xc}, {0x4, 0x5, 0x7, 0xc}], 0x10, 0x9}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) 2m26.992714225s ago: executing program 2 (id=3441): r0 = socket(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="230000000400000007000000000000001d1f6594ed0f9fc0ea7aa11d2e2491ca991114edd36642dd5d031ab30f0982e78612a884454c32b7b0d54346f5f61422752ec58334d74349efbdabe6e6bcc3ebb9f83c345b2bc2e2443542284cc72cab4941825551336319966cd58c1d6cb8f53d5916ad1194324ad36b39ee518c501e8354f97454dcbe8595ee2307598fc4e5686156c908e2e6ddaab5a5709467f63bc31bb0b20a1ad69337c6272b9152b8e7072fb90f809a4139cf8a170d3145de29d8817b166b90530b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000001880)=@gcm_256={{0x304}, "e1a8375b6f203410", "88f8e480a74417a80f7404e3d15f0249400522bb3e39a720b4775071312959c9", "81e850ca", "a555464693bd1103"}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x9, 0x5, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0xc35, 0x5, 0x2, 0x0, 0xe, 0x6, 0xcec3]}, &(0x7f0000000140)=0x100) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xa, 0xc}, {0x0, 0xfff1}, {0x3, 0x1c}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000380)='G', 0x0}, 0x20) r9 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000100)="9f8686ebf7b66581c9a173cb376baa72fce7b5bffd3b99f252e78515011985fbe4ced2a043031396ce97ceb51ebf569ac5b033910d1abd727b658ec7c6ea7cdf4157a7cea336b83fc450a5bd70388dcbd2d96bfef5a9b966fab7336b7e2a029f4b79d493e1f6c0ab11ede844aec09fb07317acdc5a44f5b93c7f31687cfd83bf3864dba9d0d09bb164efe7fbb0d7fbfd1f1298544357ff6e6bffa6e41cc795b4843d8ee2fb3c72e450d65097562a3c18023f093656532fe84f629d6f4e86dfea526b9e9f81293e85b371e3a1c32297cb6b271c894a0748eac1bf157a78102af3437739c859ea", &(0x7f0000000040)=@udp=r9, 0x2}, 0x20) 2m26.772625983s ago: executing program 2 (id=3444): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x801}, 0x4004040) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r0, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xfffffffffffffd66, 0x0, 0x0, 0x0) 2m26.554970658s ago: executing program 2 (id=3449): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900ace7d412f299a838f36e48f5fd010076657468000000"], 0x3c}}, 0x0) 2m26.235914525s ago: executing program 2 (id=3455): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) close(0x3) 2m26.047075418s ago: executing program 2 (id=3458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fd0007000010000004fe000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000100)) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2000fc342cffffff000000001e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 2m14.061107097s ago: executing program 1 (id=3632): r0 = socket(0x40000000015, 0x805, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000000000002d10103b621ee179a452b0c6cd69cd920f096a12a000"/41, @ANYRES32=0x0, @ANYRES16=0x0], 0x4c}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 2m13.964429717s ago: executing program 1 (id=3634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000200)="1a00000002000000", 0x8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r2, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b", 0x44, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000100)) 2m13.781115387s ago: executing program 1 (id=3637): syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7fff}, @device_b, @broadcast, @from_mac, {0x3, 0x9}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x8}, 0x36, {0xbd, 0x6, @device_b}}}}, 0x2a) 2m13.093745019s ago: executing program 1 (id=3649): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @nl=@unspec, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @generic={0x11, "58bf0c3286445b427f7011cae7d0"}, 0x4, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1800}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r3, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x86080, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe002, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) 2m12.974860803s ago: executing program 5 (id=3651): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000003c0)={0x0, 'veth0_vlan\x00', {}, 0x200}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r3, 0x0, &(0x7f0000000400)=""/55}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf256a00000008000300", @ANYRES32=r5, @ANYBLOB="0500d2"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 2m12.8015178s ago: executing program 1 (id=3655): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r6}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x2e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x0, 0x0, 0x6, 0x7, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffc}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x3, 0x1, 0x1, 0x3, 0x4, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e21, 0x1, @private2, 0x3b5d1a97}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x4d}, 0x28) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r9, 0x100, 0x70bd28, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x20000000) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) write(r0, &(0x7f00000002c0)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c905774c44cb2bc91021afc803dedba2961f36224f99f38fe24", 0x40) 2m12.788273014s ago: executing program 5 (id=3656): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000052c0)={0x0, @default, @netrom={'nr', 0x0}, 0x743, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 2m12.642850858s ago: executing program 5 (id=3657): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r3, @ANYBLOB="08000200e4"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf2512000b0008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20004811}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x9c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x25dfdbff, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m12.54835855s ago: executing program 1 (id=3660): syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0x3, 0x1, 0x40020, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x3, 0x3, 0xb}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000003060102000000000000000000"], 0x14}}, 0x8081) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$FIBMAP(r3, 0x1, &(0x7f00000001c0)=0xe) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m12.323867659s ago: executing program 5 (id=3663): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51}, [@ldst={0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) write(0xffffffffffffffff, &(0x7f0000000080)="08008edf773c8000", 0xfd) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) close(0xffffffffffffffff) 2m12.197954227s ago: executing program 5 (id=3665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000003c0)={r6, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000180)={r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f0000000500)={0xc42, 0x4f9a, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) close(r4) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c009b7108000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r5, 0xf6}, &(0x7f00000002c0)=0x8) 2m11.21092051s ago: executing program 5 (id=3676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xf}}}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/237, 0xed}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2m11.040985062s ago: executing program 33 (id=3458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fd0007000010000004fe000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000100)) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2000fc342cffffff000000001e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 1m57.484366261s ago: executing program 34 (id=3660): syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0x3, 0x1, 0x40020, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x3, 0x3, 0xb}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000003060102000000000000000000"], 0x14}}, 0x8081) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$FIBMAP(r3, 0x1, &(0x7f00000001c0)=0xe) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m56.147480055s ago: executing program 35 (id=3676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xf}}}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/237, 0xed}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2.308767023s ago: executing program 6 (id=4921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60}, 0x50) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0xfffffffffffffec2}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a300200000014000000020a0108000000000000000000000005140000001100010000000000000000000100000a"], 0x68}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x2, [0x0, 0x0]}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r6}, &(0x7f0000000480)=0x8) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0xf400) 2.037538351s ago: executing program 6 (id=4926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000096040a000200aaaaaaaaaa0c000006000500000000005b49e37509d54e94bbcc48444bf1a3b4ac465de05aab"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0xfa, 0x3ff, 0x4, @private2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7800, 0x7, 0x0, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'erspan0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x20, 0x700, 0x1, 0xe3, {{0x1d, 0x4, 0x0, 0x1, 0x74, 0x67, 0x0, 0x5, 0x4, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x1c, 0xde, 0x0, 0xd, [0x431, 0x0, 0x0, 0xe0f, 0x1, 0x7]}, @timestamp_prespec={0x44, 0x2c, 0x9e, 0x3, 0xa, [{@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9dca}, {@empty}, {@remote, 0x3}, {@remote, 0x7}]}, @rr={0x7, 0x13, 0x1c, [@dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @remote, @private=0xa010101]}, @ra={0x94, 0x4}]}}}}}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r9}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x7, 0x6, 0x5e, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x8, 0x700, 0x8b000000, 0x8}}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400100010673acf0928298896d2d18bc8a92923892288f36f1842b12241a4d082002ea8be3841c21ade9c42c4451ff844b3822f5ce7cd897343d40ac37a27", @ANYRES32=0x0, @ANYBLOB="20020400061000001c0012800b00010062726964676500000c000280060006000180000008000a00", @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'pim6reg\x00', 0x0}) r15 = socket$inet6(0xa, 0x2, 0x0) r16 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r16) getsockname$packet(r16, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00000001000370400"/20, @ANYRES32=r17, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300fc0100000000000000000000000000010500090004000000080008003e"], 0xb0}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r15, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)={0x840, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x38}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4d7f99c2}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x94c2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x268}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0xfffffffffffffe76}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xac6}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r17}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x840}}, 0x20000804) 1.867122187s ago: executing program 0 (id=4928): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008042) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)=""/4112, 0x1010}], 0x1}}], 0x1, 0x10000, 0x0) 1.707813563s ago: executing program 4 (id=4932): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000240)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xff05, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000e00000a30000001010000000000000000050000091a00060009d85d70f5af523146faba56918f5bb4a00ec55553df000014000000030a0500000000000000000005000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x0, 0x8001, 0xfffffff7]}, &(0x7f0000000100)=0x44) 1.68516243s ago: executing program 7 (id=4933): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x0, r2, 0x80, 0xbf}}, 0x1c}}, 0x0) 1.635737046s ago: executing program 0 (id=4934): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3a}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x84) 1.635230068s ago: executing program 8 (id=4935): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x68) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}, 0x40000000}], 0x6c00, 0x48) 1.516102198s ago: executing program 0 (id=4936): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x58, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8811) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.498491029s ago: executing program 6 (id=4937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003700000000000000a6a000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 1.495257618s ago: executing program 8 (id=4938): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @dev}}]}, 0x190) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 1.403564945s ago: executing program 7 (id=4939): r0 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2000400) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000040)={0x2c}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x24, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4, 0x4}]}]}, 0x24}}, 0x2400c090) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) 1.401905027s ago: executing program 4 (id=4940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5}}}}]}, 0x38}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x478, 0x1b0, 0x0, 0x1b0, 0x478, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x401, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="53194e748cdc0e3fbd823802317c98d641e56d8951db5efa76a8fd2e7da8d75ed96d9d8b5793642e"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x20, 0x80, 0xc9, 0x3, 0x0, 0x0, 0x0, 0x18004}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x0) 1.381011845s ago: executing program 8 (id=4941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000007000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="90207b383f86697e00000000053282b877f81b8100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[], 0xfe33) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000009c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x58, &(0x7f00000002c0)}, 0x10) 1.343883093s ago: executing program 6 (id=4942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x5f) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2, 0xffffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newchain={0x1d4c, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x4, 0xd}, {0xc, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x428, 0x2, [@TCA_FW_ACT={0x408, 0x4, [@m_gact={0xd4, 0x1a, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x8c, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x1, 0x2, 0x200, 0xfffffff7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x2, 0x0, 0xa7, 0x100}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb3f, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xe94, 0x8, 0x9, 0x1ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd0a}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x7ff, 0x4, 0x1000, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23e8, 0x2}}]}, {0x18, 0x6, "65b23ba34ca8f1e8c764cfeadfce41fbf5436b04"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x9c, 0x6, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x400000, 0x0, 0x8, 0x1, 0x8}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, {0x23, 0x6, "aefc4b559d2df38b5b05f2ed2d816471b2a08e43cc009249a814c15245ec73"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x15c, 0x16, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x8, 0x92, 0x3}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x0, 0x80, 0x800000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6f1, 0x1, 0x6, 0x3, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="8746dc0b41b3"}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="91a2d11867de"}]}, {0xad, 0x6, "2c7d45c030be584190b22eb8ee7ce01cc4836031c9caba529f0e1bb03b8a528c054bb824907712a0035f1ef58ca4a958190e1b88f8089753d7bfc34ea21f2622f28a2df71322920455efca98622f8e7d03052b4342ec0502ed0184806d247052a17d1b0d899d64cde7c57f0b6950ae4ba6fef6f78b6d6fe43465306ccdcab5e169e9e25f628c09cce0e158ddd6c9cb79a61f7d897a5fa54ae9d4d40a4953f22663f7556215986b1f97"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x138, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xc, 0x7, 0xffffffffffffffff, 0x3, 0xfffffd4a}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0xe2, 0x6, "4ac2012f424385ac1606e1ceec97819d50261ab10607454948209d3f94185f23c1a2e9de3157bfed7d45aa7b05173ea025111a51609645255cdd4318ab0fae0fc22eb06a88657bdc33f4449b97077ab16f3fbf9c866aceca4bf6b76e4889380351cfffcfbb319e197f510d5fa468e3baa43347226a81b605996c8f12e6c4ec1226a3f73a2e5ea76dc9f100ea2f4f46598f5e8db2eb8fdea33274f6be0501257077a8e10abb9c74624e155384700c0c16b45a85de1d6bf76b5798fa7158a766326e911518b62e58d6094eec730534fd39619d5f23ab819b2b5510e79386ec"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0xffffffff}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x18f0, 0x2, [@TCA_U32_ACT={0x15b8, 0x7, [@m_ife={0x1070, 0x1c, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1ff}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x4}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x13c, 0x4, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9, 0x0, 0xa5, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x5, 0x10000000, 0x7fff, 0x8}}]}, {0xdd, 0x6, "f40a5ad2842c7bd81f1d01f9b937133bfaac04c983ecfbe87d74c6fb6173426011a0fbe445645c2cad9872d0a3313bf0151604e747a7a7b454903504439759b2952cb8632c0bd191aa7766e612e88aeeb3d55cd071f82acab0310f63d02b3753042455f3217ad62269fbbd10cd1cf36b74db2507791bda5ef80b0b6ecd5dea21cb7365aefeb5b1dfc43e0e2f185cb1ba605c4a6eb924433930b6bb088b33d54e892e96fff6951d417068fb356c2e42dc2f73a0c62f021fb9a9a9697276850c5bcedc249bfd689eea47e1662ebb2cce003d2a2142ccbd3325a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x114, 0xc, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x67}, @TCA_IFE_TYPE={0x6, 0x5, 0x32}, @TCA_IFE_SMAC={0xa, 0x4, @random="d7242f652f8f"}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @random="f4518d2df075"}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="8804b44dabdf"}, @TCA_IFE_SMAC={0xa, 0x4, @random="472fd9947ef0"}, @TCA_IFE_DMAC={0xa, 0x3, @random="2779b1eb6767"}]}, {0x80, 0x6, "16f25b0a8d7b87562e320c7c4625211f62f9d1117afb986d3edf3c3db0b6816883f76e1301040d16f85ffcc928c86babe962d19e3025b3cb5c1bc68fdbf57d3df67911946bc87ecfa3704ad7398c2966a89919ab8b0de1e9d8df9bb99858ee528c1f181a8faca0e83b78e763988f0170a850e5ff63a40dd52f1f1661"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x104, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xe62}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x731, 0x4, 0x3, 0x6, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}]}, {0x95, 0x6, "5d2a096709a086660b319cb1d638eed2dd6fe5948ec8ffbe796bf329e0eaeb7dfe243c1de28c9b4f6234179c87531993004b715f715033fd67858e9cc064b54c14b231dfc47477a497194fb636cabc850bbd9c5141d1f8decdbbcf009829a2c3f5da702acd941e2f1a60156063f465eb48276ac04ce1f38f75d102e666fc656106c697ce87f2aa2d251206e43dbfcd32a7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x130, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0xb9, 0x6, "a89be92fbf54d2aa952279f2362b5f3cee0fe5ea5cb5cd06c97187a35915102e980deae4f1de6c4984ef2fd3445c3e87b6ca25517a5fbda51c7c6163bb7bddaf85bdb4c0a83dabdb6d34142ab1d6ee733d04582ff3737a7307734194bf55d2fdece3b42ffd62526a2fa1c4d2fb6cc544e2e6bd3126f2d05b69861de4d2e04cbb0d447472303e35f28a6d6e30e7337eb80e0eebe680f7572520fa94ae1a9fd5b484cb90b21f1020cdcf6f6e7336ce1d4e0bda3dad30"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xc0, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x69, 0xd, 0xffffffffffffffff, 0xffffff61, 0x3}, 0x92e5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xffffff4c, 0x8, 0x400, 0x6}, 0x7}}]}, {0x58, 0x6, "536339199388cdb849c82d8a3fdcb14333039dddb8142da6ce0805769b1eca373cf9a4dab62e67e24658e3ec07cf5cbe144c68e00c9519e9df508f6bbfa75f97bb2779fa8244854085d1a6dae58e3505deb3419b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x72}, @TCA_U32_HASH={0x8, 0x2, 0x200}, @TCA_U32_SEL={0x324, 0x5, {0xb, 0x4, 0x3, 0x2, 0x5c, 0x7, 0x3, 0xf, [{0x7, 0x4, 0x5}, {0xb, 0x2, 0x4, 0x5}, {0x8b, 0xd, 0xb, 0x7}, {0xfffffffe, 0x3, 0x5, 0x5d}, {0x8f38, 0x2, 0x2, 0x5}, {0xe, 0x81, 0xfff, 0x7fff}, {0x6b18, 0xc, 0x9, 0x1}, {0x0, 0x5, 0x9, 0x9}, {0x3ff, 0x8001, 0x2, 0x9}, {0xf787, 0xffff, 0x1, 0x8}, {0xf1, 0x6, 0xf, 0x9}, {0x1, 0x3ff, 0xf, 0xca}, {0x3, 0x2, 0x6, 0x1}, {0x80, 0x4, 0xd, 0xe}, {0xffff0001, 0xfffffffa, 0x7, 0x7}, {0x6, 0x0, 0x6dfa8e58, 0x3}, {0x6, 0x8, 0x2, 0x6}, {0x7, 0x6, 0xffffffff, 0x4}, {0x5, 0x1, 0x1000, 0x8000}, {0x10000, 0x797, 0x3}, {0x2, 0x39cd, 0x1, 0x4}, {0x9, 0x8, 0x7fffffff, 0x1}, {0x100, 0x1, 0xe75e, 0x9}, {0x800, 0x5, 0x80000, 0x1ff}, {0x1ff, 0x3, 0x1ff, 0x6}, {0xfffffff8, 0x80, 0x8, 0x4}, {0xfffffff8, 0x2, 0x2ac8, 0x2}, {0x6ed, 0x4, 0x9c89, 0x9}, {0x8, 0x3, 0xfffffff1, 0x4}, {0x9c8a, 0x4, 0x4, 0xb}, {0x1, 0x3, 0x5, 0x80000000}, {0x4f, 0x541b, 0x9, 0x3}, {0x3, 0x7, 0x5, 0x6}, {0x10001, 0x0, 0x7, 0x1}, {0xffffffff, 0x1, 0x2d, 0x200}, {0x0, 0x400, 0x5, 0x5}, {0x5, 0x5, 0x3, 0xfffffffa}, {0x1, 0x2, 0x6, 0xa}, {0x5, 0x9, 0x2, 0x2}, {0x2, 0x0, 0x1ff, 0x2}, {0x4, 0x300000, 0x40, 0x10001}, {0xc, 0x80000001, 0x5}, {0xca54, 0x4, 0x7, 0x4}, {0xdf6c, 0x401, 0x1, 0x9}, {0x9, 0x8, 0x0, 0x6}, {0x2, 0x7, 0xffffffff, 0x3}, {0x0, 0x0, 0x5, 0x40}, {0xfffffffc, 0x3, 0x1, 0xf}, {0x4, 0x2, 0x7fff, 0x3}]}}]}}]}, 0x1d4c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) (rerun: 64) 1.219646504s ago: executing program 8 (id=4943): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f00000001c0)) close(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.193859995s ago: executing program 4 (id=4944): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) close(0x3) close(0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000055a65ac144f8bc000000000000000000009500"/39], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.124084341s ago: executing program 0 (id=4945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @empty, 0x0}, &(0x7f0000000040)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r2, 0x25, 0x10, @void}, 0x10) 1.023774849s ago: executing program 7 (id=4946): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3a}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x84) 1.021175608s ago: executing program 6 (id=4947): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x7}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x188, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8800}, 0x8800) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x3, 0x7, 0x5, 0x0, 0x0, {0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000016c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000000580)=@delchain={0x10ec, 0x65, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff1, 0x5}, {0xfff1, 0x5b5580bffcdff0bf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0x5e}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1078, 0x2, [@TCA_CGROUP_ACT={0x768, 0x1, [@m_mpls={0x130, 0x17, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xf3, 0x6, "7f4e725f5bd08ed50a70badd8f79938d5da4eba7b6105076a6512e7f7c9bae6a2daeae55408c51ab68732d944976d16db0435565c2b2abf12a9451287a187cf2a1b023d0e5849a390c92d89f0da5f9c41675a35a6a8dac1f42e3ed6e11f3ea46703ef3f025c03038742a37f12745b299c32edd7d0b5d737fb14d853e6b08bd0f20496e657861a49d84ac7aaa642867fc11d177b04cafe07a40a2ea4e1292af1eaea57bfa84b704e921c71889a6fe34ae885d3e0bcf574ea021349e5c9672d4a5c2db45c9f1bab9f00633f7c2a519f34d0e8380e9a073af3ad122fc2f1d3189a705c64a9c276e06cfa4793a16f60be8"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x164, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7ff}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xf5, 0x6, "bb876d2913990509b571533116b013bec367b01b9546d559fdb3726d2b59388b001bd83937a1c3dad2c28a886406202fcb3bd37436260357c682b7369fcda0af2763fd933ad61131873b762575724814166f145b7c582b75d981f375f44148f906585ac6ad30fbbd0bc292ee7cc3f7055a0f355b72ac41e1684083e2b8f8fa0b365442a0ae1c0cc3ca4f886b729b92d019826d7d2a919ebc0890faddfce752fce31e709a10c161f77b4249accda0cdc33821b11376ae0307839edcf777583b5f5f61df69f4f0675df920446a6b9c16c5dfab23df4f87922795130f75d5b88a82870f03ed0e03b2f27e862a277b63f92542"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x78, 0x1d, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x46, 0x6, "017e7989c7516840660b655e6cb5f18ab095b4ab2b132fd9b182d2a5decf40a884e48bedd4edb19a1c8e06e0809272ea526a2640f1297347fa4415c0c3aadbb9670e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x458, 0x1, 0x0, 0x0, {{0x7}, {0x338, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xd8, 0x6, {0x8, 'filter\x00', 0xb6, 0xf2eb, "7eb34f264da15c5d66f1cfdd131082de6179e49e44ebec1f2b4216e73002e703a4b52657e3890e5699458dfef9ffcfdf67fe8cf4bef0a9342a93e0a939df35d2bb75e507ecd89473dc7b1fb285c9167bc8334643ffcc7f31f6ad3a412a016ec31a9314555ae7d5ff9c6102791beeb6772c09dc8a167e15361a64948af8dafa9b1e32e68c30bb53710b9ce79b9c02c41bd7af934094d99a959fac985462b6b1d4db397e46e4587ec35ecbf1444b80"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_TARG={0x115, 0x6, {0x8, 'raw\x00', 0x8, 0x904, "c3b70e76161bdfb1a0417c786bbcd57b32bc6c458413fd8c07bc10966259907bef9dc5ebfeae326e84573ff969e2c8380d986b4e222b98e28c82b13a2846872c5ed9ba427d9eaeb913f7ef370a524a913b147d1e82749821e8d47227263558cb13a8659c3068a18f57af235c7eaeb00d757ee26f812bd1b668016f89f24288a3d32539186f064c5643318aa25acbd564199e0ef0c95a5274a137bb78344945171071750c119b80826339f9c1a3c55fba18ebc460355014b90f6a7a0debca37b508d7a2a97311a7c452b7fe0d7fcdb65b5352cd5aabea620cdb96ca4ca3694fec7154c0aa58926ffa2014aa"}}, @TCA_IPT_TARG={0xc7, 0x6, {0x4, 'raw\x00', 0x0, 0x9, "cd556be09e61fba8dddce8baa267515e2cbe6996ddb7bea0c43d8e15692905d86381123dffb86f6667b248ad3a09a954d591af6170c7b715405784d23be8e5b8151c2643e1dd13c959cf14d2fae680cf6829a3679bac09c97ded774d3cf82a08afd10bc00f28988713e9852f745edb76c595429b503bb17135d84bbef6ef5b489c38e238cd8381ff5a6d96f361ce7ef2455152d9883ebda8a8b3a9225a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xf9, 0x6, "258fd8fc7f87bf9dc42f9980e95054f441bdee39fd5ab724aa6c88c34d88b160e93c382f331ebf0596cdd71c86149daab6e13ed143048ece6abdaf8be7d400b37945fabc75adbc9221fa8854825711d256841ad5bb70e58f609769749dc62a92b6fb4ee784a13d0453234796182a1e4c973b59dc3aadbe8cbb89385d4cbb459cc7e42a11139e7f552a85bb6a49f7dd2df9e25560b41872aad5c5890497b5d8253a06e85e4c4aa7906c932038197eb68cbb6abf6aefb8f8cda53a6b3d51452325258fcff91b91ceee5765625b2e99fe6e20f58d184528d9b7935634a3305af91b638cdd1ed01ba756aa501f0b955627ed76bba0a3e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x424, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x7ff, 0xfffffffb, 0x8, 0x1, 0x1000, 0x5, 0x6, 0x1, 0x7, 0x7f, 0x7, 0x4, 0x0, 0x1, 0xc, 0x8001, 0x10000, 0x3, 0x1, 0x7, 0x8, 0x43, 0x4, 0x8, 0x6, 0x5, 0x8, 0x5, 0x8, 0x9, 0x7ff, 0x800, 0x3c92, 0x1000000, 0x1dbcf23e, 0x1000, 0xfffffff8, 0x7ff, 0x6, 0x5, 0xfffffffb, 0x2, 0x0, 0x8, 0x2e134a16, 0x7fffffff, 0x6, 0xbc1e9cb4, 0x401, 0x0, 0x0, 0x4, 0x6fa, 0x7, 0x0, 0x200, 0x10, 0xfffffff7, 0x8, 0x2, 0x0, 0xfffffffd, 0x9, 0x2, 0x5, 0x1, 0xfffffff7, 0x66f0, 0x3, 0x7, 0x5f09, 0x5, 0x6, 0x11f, 0x4, 0x6, 0x9, 0x8, 0xb52, 0x1e, 0xff, 0x4, 0x5, 0x85, 0x69, 0xc, 0x9, 0xd, 0x5, 0x2, 0x5, 0x5c, 0xfffffff9, 0x9, 0x80000001, 0x5, 0x401, 0x2, 0x1, 0x2, 0x55, 0xd1, 0x5, 0x7154, 0x1, 0x7, 0x1000, 0x200, 0x3, 0x200, 0x8, 0x8, 0x7813, 0xb98, 0x7ff, 0xf, 0x1, 0x4, 0x7a3, 0xd18, 0x9, 0x2aab, 0x3, 0x401, 0x8, 0xfffffffe, 0x10, 0xde3, 0x1, 0x101, 0x5, 0x8, 0x9, 0x2, 0x7, 0xb, 0x1000, 0x7ff, 0x2, 0x2, 0x491, 0x7fffffff, 0xf, 0x2, 0x1000, 0x3, 0x3, 0xa, 0x8, 0x1, 0x7, 0x2, 0x10000, 0x81, 0x3, 0x5, 0x80000000, 0x5, 0x5, 0x5, 0x4, 0x5, 0x3, 0x0, 0x1, 0x400, 0xa04, 0x5, 0xe87c, 0x2, 0x1, 0x7f, 0xe, 0x0, 0x82a, 0xffff, 0x6, 0x0, 0x5, 0x8, 0xfffffffa, 0x7, 0x7, 0x800, 0x3, 0xa, 0x4, 0x9, 0x100, 0x2, 0x3ff, 0x45d, 0x2, 0x7, 0x4, 0x8, 0xa, 0x5, 0x1, 0xc, 0x2, 0x9, 0x2, 0xe5, 0x7, 0x2, 0x8, 0xe5, 0x80000001, 0x5, 0x1, 0xe000, 0x4, 0x5, 0x3, 0x0, 0x1, 0x6, 0x7f, 0x7ff, 0x7f, 0x4, 0xc, 0x9, 0x5, 0x8, 0xa9f4, 0xb3, 0x9, 0x6, 0x8, 0x9, 0x8000, 0x3, 0x2, 0x1c4, 0xfffff11e, 0x9, 0x7, 0xfffffffd, 0x6, 0x59a3, 0x9, 0x9, 0x482, 0x40dd07a1, 0x2, 0x4, 0x0, 0x9, 0x7, 0x0, 0x5, 0xffffffff]}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_CGROUP_POLICE={0x4cc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x10000000, 0x0, 0x2, 0x3ff, {0x1, 0x1, 0x5, 0x3, 0x6, 0x5}, {0x3, 0x2, 0x7, 0xf, 0x9}, 0x7, 0x10001, 0xffffffff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x6, 0x0, 0x7ff, 0x7, {0xc1, 0x2, 0x2, 0x9, 0x6, 0x5}, {0x4, 0x0, 0x2, 0x10, 0x3, 0x284}, 0x642a, 0x3, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6000, 0x2, 0x5cba, 0xc0000000, 0x958, 0xfff, 0x4, 0xa818, 0x5e45bbd9, 0x9, 0x30, 0x8, 0xe, 0x1, 0x5, 0xfffffffb, 0x1, 0x0, 0x2c7, 0x81, 0x38, 0x5, 0x4, 0x401, 0x7, 0x60d1, 0x7, 0x1, 0x7, 0x8, 0xffff, 0xfffffffc, 0xc2a5, 0x4, 0xf6f0, 0x0, 0x1000, 0x9, 0x263, 0x6, 0x1, 0x0, 0x10, 0x1, 0x8000, 0x3ff, 0x6, 0x8, 0xa7, 0xffffffff, 0x8, 0x8, 0xb, 0x4, 0x1ff, 0xc1f5, 0x6, 0x5, 0x101, 0x0, 0x9, 0x8, 0x9, 0x3, 0x7, 0x200, 0xffffffff, 0x1, 0x7, 0x0, 0x7, 0xffffffff, 0x2, 0x7, 0xfffffffa, 0x2, 0x7, 0x98, 0x2, 0x8, 0x4, 0x3, 0xffffffc0, 0x7, 0x9, 0x5, 0x400, 0x10000000, 0xc, 0x5, 0x9, 0x353f619a, 0x52a5, 0x81, 0x9, 0x6, 0xdc4, 0x4d, 0x7, 0x80000001, 0x3, 0x3, 0x43e, 0xfffffffb, 0x0, 0x40, 0x10000, 0x3, 0x9, 0x4, 0x800, 0xadbb, 0x3e, 0x5, 0x80, 0x8, 0x8, 0x452, 0x5, 0xc151, 0x6d87, 0x80000000, 0x6, 0x3, 0x2, 0xc, 0x8, 0x31, 0x2, 0x6, 0x3, 0x6, 0x40, 0x40000000, 0xffffffff, 0x2, 0x0, 0x1000, 0x9, 0x8d, 0x8, 0x4, 0x600, 0x1, 0xfff, 0x1, 0x7, 0x6, 0x8001, 0xfffff5d7, 0x3, 0x1000, 0x3, 0x2, 0xcb2a, 0x184, 0x2, 0x1, 0x7fff, 0x7, 0x2, 0xff, 0x2, 0x8, 0x6c, 0xfffffffd, 0x0, 0x7, 0x400, 0x8, 0x48, 0x0, 0x6, 0x9, 0x1, 0x2, 0x5, 0xff, 0x7, 0x0, 0x1, 0x3, 0x9, 0x0, 0x0, 0x401, 0x9, 0x401, 0x80, 0x2, 0xcfaf, 0x20000000, 0x4, 0x6, 0x4, 0x9, 0x1, 0x1, 0x9d7, 0x8, 0xffff, 0x1000, 0x9, 0x10000, 0x5, 0x5, 0x1, 0x1, 0x9, 0x8, 0x4, 0x2, 0x2d247617, 0x7, 0x59, 0x8001, 0x9, 0xcfb9, 0x9, 0x1af3800, 0x1, 0x0, 0xdd, 0xa, 0x7, 0x2, 0x7fff, 0x8, 0x0, 0x9, 0x1ff, 0x7, 0x9, 0x0, 0x0, 0x4, 0x9, 0x9, 0x5b55, 0xb7, 0xf0, 0x6, 0x9, 0x4, 0x9, 0xb52f, 0x4, 0x6, 0x4, 0x7, 0x9, 0x200, 0x6, 0x4, 0xffffffff, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x49, 0x1, 0x9, 0x101, 0xa26, {0x0, 0x0, 0x3, 0x7f, 0x3, 0x80000001}, {0x7, 0x1, 0x2, 0x81, 0xdd03, 0x8}, 0x21, 0x80000001, 0x7}}]}]}}]}, 0x10ec}, 0x1, 0x0, 0x0, 0x7a218b84f7be6b65}, 0x20000000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x84, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa300, 0x52}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "3fac7a20ac6de0cf"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x8, 0x6}, {0x6, 0x1}, {0x1}, {0x6, 0x2}, {0x85}, {0x5, 0x7}, {0x13, 0x7}, {0x7f, 0x3}, {0xd, 0x1}, {0xe9, 0x4}, {0x5b, 0x2}, {0x8, 0x2}, {0x8, 0x6}, {0x1, 0x4}, {0x8, 0x2}, {0x6, 0x4}, {0x4f, 0x2}], "eb5579a4b7d46d6a"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xc, 0x6}, {0xc, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x5}, {0xc, 0x1}, {0x9, 0x5}, {0x40, 0x7}, {0xf4, 0x3}, {0x16, 0x6}, {0xa}, {0x4, 0x3}, {0x5, 0x4}, {0xc, 0x1}], "65ec64af332f8404"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008810) r4 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f00000018c0)="523a633b29cb5e03ef44e6db093635669e7483b964d9f9bc8dfbbdc8916eb24f9b309d241a4c7bc3fbab7df01b1b53879378006a6d8f6d5e1e6ebafcf51dbc995355f68559bc3f43abb345b3a25fe26e4b90e368e619221ce1749171124fad2f70f2396de773df2954ab95548a0b3273f5f0d736d2e609f4b135a308e0a3569d8a72d567fb4cd4b67f", 0x89) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001980)={0x0, 0x200, 0x5, 0x5, 0x80, 0x10000}, &(0x7f00000019c0)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001a00)={r5, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000001ac0)=0x84) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000056) (async, rerun: 64) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001cc0), r2) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x48, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240080c0}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e40), r0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001e80)={'batadv_slave_1\x00', 0x0}) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002080)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f0000001ec0)={0x180, r8, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x180}}, 0x4000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000020c0)) (async) getsockopt(r2, 0xffffffff, 0x37f7, &(0x7f0000002100)=""/209, &(0x7f0000002200)=0xd1) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000002240)) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x8006) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000023c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r10, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80400c0}, 0x20000085) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000024c0)={0x3, 'team_slave_0\x00', {0xa}, 0x9}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r0) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) 1.009250016s ago: executing program 8 (id=4948): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x80000001, 0x0, 0xce03d4}, 0x9c) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x89, 0x2, 0x8, 0xed02}, {0x1, 0x7, 0x9, 0x6}]}) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r7 = epoll_create(0x6) close(r7) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000280)=@ipv6_delrule={0x9c, 0x21, 0x20, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x8, 0x4, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'batadv_slave_1\x00'}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040054}, 0x1) ioctl$sock_netrom_SIOCDELRT(r8, 0x890c, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xaba4, 'syz1\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 895.054375ms ago: executing program 7 (id=4949): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x4, @private2, 0x9}}, 0x80000001, 0x1, 0x5, 0x5c, 0x100}, &(0x7f00000001c0)=0x98) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x8000, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)='!~%', 0x3}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000013c0)="b7579c6e5b5b9700a0179c8f72f467c78c6c3d0595cfc37fb195e039eb54a25a91d7f4dfea053fc5718ea0c0c3c25a49d80a2f70058da8d55124f448c14f351c43f1b2875457dcaf4c35752b6dff4460b9c4e4151371a3cb2cc990aa9f1d2dd3a79027c1fef314b343751223cf398ec450d2862033bc342be0f54b4d158cf54b4c36b6d95034a9e254c446723c24bf7bec805023ece5ff11d65c5b13e1602305c2ed254796182826cd2f03adc330b9b3f3f701206b8374af7da9691643549e1e4d14d3b98cf364626abf0dd9c402a43ee142bca15d42c0ecb4b7ef7787ddee3c0f6323f4fcbb0f564597cc3d72604addab555806ca98a034c25ef0b4dde6161d2ac0292106ac42769c6afb71f1165468245e5f2cb19a140d8155038425d1bd80c4226e49201c13b46f85f4a710db75009e331597121d7834700a19ad1363be2e5e7d4469c08adcb222ba6115e8f97e53d9e902ba03ef89b7d0523911ab12d8300b09593bdca6096b00de9c737d2738d41818d3b3c6597df3a021e86c7738da32771d17fce832a12ec17dd2b41db28cddeee74ff21d289b25d2643d689e2e038494033b010095802bc1c15e1b3cdfcacfee53c0c28a38a91fe9b5a3830854d2a761a2e1667afa1242b637a105487b3f4c7767f925d82faf70a4dd430cdcb20a69e042d254887343e1cbfa124943f50d22ab5263342c64e74069016e4fbf63f4514e30bae5792c7891b8e916fbd93e53b39a8c548a600d71ef4d4cdf0d8da66cdfbcac69e10876325077bf271c36dc50e0c11098ba47a4c29b1e72a673cd125701b39339c4b864aa9080250f5fbf238667d95a4cf3610b3b1a07ce15b7bbfec936ab76575d169bef2ace6ce1ac0612da659c490fee0aa026ba01e01787c71f82caac0df8bdb8061fee8141e2ab2fd182b33ca68e1d8a9108f352b6c6930453ced0cea16ea44af9d7e85b478fab68e38ebc4978194f72a361acf4516cfd386ab2715f1614bfb59feced94fcd872bd97192279e8c21423af25f2380184b6923ec68c832e41495981110434eb5080319c2df7ea3166bf3a8785193e270ef3aa67fbcf10d099fa4c548bb4706caf31807917e8484f512568eddcf53a21005a4f775da1c76e45e07ec46fdbae5a25a41032e44e21784ec724c963e6086736aefa24185f43e405947656fa0832eaaf18d317f002560c9a035c59986def71d9ec45d540b027027c53a0a482d785033f07cd1067ed940ba308f82aa8717fd1f0067ec4939e870a922f0a1e55953ff58727633d2020fdc2a40bdb303a8ff99aeff60fed00e031810f4fa767432aaeb3cbaf8d82a6a8b9d05b7293d3b1a73a95593abd40139ac6a2b4f6f67b0f618b91c5e925713fcb8933c9db1932938c0e7c694fab98c9903f90e5ab47c5dde7700ab6a1691f1bb473d3205e72f4a7e4687253efae3421c2fa26336755bab346db9c434ad27436e923d0922432f673756913f0b7865220798b2ab6cc207a30922cdb2749d68fc4d408c0941d102e3414b8f26702571a9cc591f4cdd63a68aa2ee11ab179a40746c4b2a71931f95d97640aa13a6f7cc8683e3311f11330d4ea5057066cb22b9889db3c7c8ddc611193cf236410cdad3aef239afeedab7e2a7a2030a7ee27e3cea554af1fc5dad4cdb97407e568543aba3ed4b437865c6f86c0bab508faaf199554d93a7e75715ae2824bf9c36b87ad56b8521e102e720d83fe7f131b41604d98a5afe3d591be961c361041a3198d09a73cebd882f181e2382114cdf12898212d4b0637ceae6f3c4fb8309e369ebaf538efea55e2776a5849dc032bf71dbbd23cf16a3b1375a60bb667a898479a7bb484e596ff388f48c41ee308714286ad4fa07499614e3eda7b466d6894b092b9879c1b48024a0aed9f223269ff0872989e851286f6f7b3085ec081e956ef0d5be09fd757954ba16586841207d0b9d3bae894b1b18e843759010dc924725760bc2a89395149825c0ba1d0ec422a490920ff9188119ce8c51175e11183886756e94bfc2de939b4b33c30ced6ec5eb7fe3c6b2bbd95e04f3ae2b508f4af2b8ff53f8459467cdcb7d11516ddb9074e39ca389714444d5dc118269cb6f57e510422c024e0372cba76059cddebb17506c8cb7cca29c839ad7c8dcdb21cc81bafbce73785220d7c88471d55d7807a67e46ae62b3d9ce0a8bbb1540a3e0af116988532dafce5d6b70def0a6c221b18f3395d31bfedf34f6fc9c813a97b57aaf284da9231451831b42a46f9859f592ede724b52fbd8a3518e1b23a97ce247069bdb53f821cdbf470cad2a5f08c212065d85993adfd01789fb272870d35cfaf97c1bc1715a0c090d3cdb455157d431a0f60099a0374bef5d4212dda06d3ad5e5a535924b603b9b561a0569bf0079200ff29d39e0fbf092c0df9052e6ad99c732e08d99277a05d46af0a7d2626bb7a0594bb5984121d70e3483f869943327a9acdd6c5f0677738738de4c4a6d965117d72525402b058ec934e64b8050d9699760b95b6f1d063609fe7c7033d8fd5372d67d23a96b00cdd9fb48fafdb9783859cb732b4ff19382f6eeffb9e923628e3d8a0532dae57f73a194ba8c9eaea088582b599653eb3a6629de27f1bb4af6e19d6c77e3ad72b45f911f6882d8b636d5588acc1410064833c78da770938e01c6bf4a3193f80fca5dbe29832023d06abf2aba9ea51f15ee64b5ad8933b77034f140026bbea16ec0fa81a36f8a191fcc9d419a34a7925328d36637608c1ccb408f6c3ee5aea72be9e64d224d11b9711ec0fb0965e2aa95c19bc8e9552b31b86d32abcf039a6153100fb785f875de2c647881c5cba316546cab115f7e065575350413ecd727757f0609fb98d4c7125ce278629a5f8d7c297701bcb36d9bffbc80a84083bf7159ac8831f39fdecbab158e054722020c19e9f05a1356d700cc13cf55f1601aadf58889a8c7434cc0d110c01883bbdc09559a0960aacd4f30923a8b8c3acd322261cfb6642e638ca47f88fc12a9b81c34cae5f7d66c0ea7b0a02e8db64fbf6e36fb3c43e413704858c59ecd0cb7d6e3b6c5d30baf347536722a8ff285d71df4fcd6de02e2b32576514760ec8c9b32874550d3b4d92c35cdb6849fbf26cb1f0c80f98d2bcb25f553843599ae8895081a38a6c9f8a82d5acf7771c23430c7588eff1c8a65d824c3117d9b0414672b28eac40cbb5f191df3613dc63500961977c565444da05b0953715ca6c2af0ae9b9216973d6bba260169e3d8612d603885538996e771a0ac29c43c082ad5548db20115898d4b15c9be446b12e17cd2f5f93d89a4e3bc0fe8e974e4194003a7902cfcd79b36dfb10e0a590962e6861d8efa9e11c355b29d3959019cf806ba423ecf428a13f6806bf62abd4bf7d7cdc6fe927dcc6a0cbb3d1d2b509a5691966e781c3eabd278ebf3ad31329327c272c0a96bc09bd9b4546ac44ee02d521cb184ab131b447e811452cc1db17329c3d4289f9131634b7043246f995b8a66dba7417b097341d8642c0f359cc65e613375f6ed3c79b12487026b6d2b17bf248db815fea66fdad140bee1b86adf7c9edd0f6546a96e68c33cdb6e1bc8c7e7b5d93d242304d1e57b86c21069369e08e27e7511c49cf67c8955cbc08c4ad2757afa5d3d10cee37e22f2f12e3f417c77578efdf0118debb72aba9e368e2945a25dd93904ef42b36efefbbe6d25e0d9da4b6c9044e65daf743f8ba77f7a9b46da2f311e0c3734f365d45ad5de586032c198b0114e4a6ab65824ec899fa5f417680d50c822492eb33f5af9025c727aab5d6b8386f58479b70e045b137867e1fd4fb423d3fafc672c65e58a5a5f07a931e9410ad585218e35316169e7673904d7f96ba994fec411648e11aafdb9f54a14559d4fb70c4d71fce2f5aca26d464a2252a84e0431644b67e60e553205b2c0923a6813a61597ddf63d48c17eda241fdff3e2ad95d9286f1dc375fe8a6e2168a43021b1cba9e623dce18e5e43847fbe6ee1527d56fe72463070d918d05ea6393259919e4d59a2a9aed546d940837a60694637a8c560b2a02a3c72e0bc3005c44d1215ade29a9c5ba907a3d8f16ef25cf69436666d4ee0786446a19b35cd70d47f2f4b4c9146818abe8a4d460b71f81cac3aec7e14aef05b803fe56ff2435dea6f3a598a23be2b76b868231708fb45e76eb49d6f3b272271414244e41c1182c0eb60263a3152e58a78efbba81793a8194639f00b5d044474185937e1c5dd91e650cfc13960938131ddce8accd81ad545e47ae723ae2f287c2dcf6be1a04f9e88ed4a251b1ebdad34d741aa62c00644a2ede45729985128a31264be6d143ae7e582f9c7b6d6357a69d26943c912ea077cf31b1bd8f336a36975a545aa6d8911461cc014c874443aebf76507eb843d89cde866d749b44c0012748015f5cb08fe59dcf823470e0c1a2108ed694e4ec808ddbbf2eb42d2059f7e41249e75e96a959055d902bb8821ebd6e4fd9c7d6bc2085359fa299889b2056508e17d4e743ac36493f3b9da6e362cec02aafa73a6807c938cbd03828f0300ded5a763d1742edc1fb1ba213da41174c1e580ddec6386acd99b0a9134467887d8f04d4a91767003eaeaeefa0149a77f0acc3d35b1816bd1b95e6e20896ba9c2447138c78d194a9580934ffe7e2922a8ef7a322a7f6a08219bc8917df9160b14c99accdbf4b1d7af868c3eff2caec9df6de483de95c44d4fcfdefe935cb59a46dee7e404317308341bc2805ac2e530b8904c7b51f817b3c34398b51e2909d88f92c205ba39e1470e1c08508a7d5f4c19f64fcd4184dfef18ce4dcfa5c920267b27e47eebf3bc6030ad1deda4a6ecb8397c5fcf72e1fa5928f471b85669ba0a682c57ce166ccc120b4abceb8876f23c5bb44a4fbacdd1eeab2cbacb9c8f4b10d65718759ba6a3ac54b9b5925ae62d1b6eb9e689705530768bd2a3f8208e7c8499d908871c13a9d45b2bf8e657327ad80336633d9356136e9cb015c75d1ea039f2ff4ab1ad3804df5630e3a7e8544797207aac944fc0886f21f43530af39954ba3fa31bf163690ecd91cfbeedbaf5bfb959db95664e39869e0f5c08c3a4c20f33de7c71c6594735633908fa03803f036cc249d62a0ec4c584e1886b9b3f8f21dbce66fb85cf237b63ca08dcdd03ce6a71d66e47c688a3025e9ec005f7a12ce87ef3c6afe2a65cfc7d4abb815767bfe9a805d912837feedb3ed33b829b6a7ed9021af21a579e06b1b9f35c49680caade4e66f815fa9aaaa45dff3a184254cb2f24ed044504585c6c0388814ee12aa8b5531ef3481c3da7eac8a00bc90e53cfbbc89afde84ff69cfd606e1bbb6b3a8a0685b7ec6a4f487e5b237a516227ed0e4804d1c27e07c0780d6d320a3cfa1bb54dd2605aa352543c87172e2ede73a67574865f6121065c3ff547ee3ae666e535b1a0d897b1fab79cd4db674179d231227d3d485db03e7eb639c44dbd4ba8d83e39ffe0a250ccde700451f920eb03993bdb28b3d6d54ffca26d1d8e1688537dd2b9afd27189a27b70a6941f531fbc6e6380b60a833b0712a51efbc762aff7c28ecadf5c3b03983eeb30f87a39a5b722c0645697831a569bb0711dfafc412ec9be8a6206e1a739d81943e5f37fae2cf8aa33d87b8654b898ae1a861d8442c018488ccf88e9d95d52574ef8e8647cab732d1068d266e2075704aaf5997fe6147d1f52538d97f5166e9c2f8da88aa02206db31884b34ced01c0a9e10ce480ae99611d3044875be2ae5df63bf39dfc405efcdc3b243e8b35dbd8e02d3b28854", 0x1000}], 0x1, &(0x7f0000000400)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffff9}}, @hopopts={{0x40, 0x29, 0x36, {0x14, 0x4, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x80}, @enc_lim, @pad1, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x16, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x90}}], 0x2, 0x20000000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xc63d}]}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0x6, 0x20, 0x80, 0x3ff}, &(0x7f0000000240)=0x18) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) 791.141666ms ago: executing program 8 (id=4950): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000080)=[{r2}, {r2}], 0x2, 0xf45) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000240), 0x4) shutdown(r1, 0x0) write(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@routing={0x84}]}}}}}, 0x0) 684.935626ms ago: executing program 6 (id=4951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x40, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) accept$netrom(r2, 0x0, &(0x7f0000000080)) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000000080045f000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbfe0900000000000000000000000c7923a7a94b4ff940f79f24ecc0d72d406ca1774f511c41d05fc9cd021d1c48e8ec1539a993c7c35515bc117df04d7629adcc6bfb8bf60436"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b00)={0x28, r4, 0xd66771a5e8224ded, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0x6, 0x15}}}}}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 540.818253ms ago: executing program 4 (id=4952): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) (async) 426.851525ms ago: executing program 7 (id=4953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x77}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4000840) getsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r8, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) close(r11) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r13}}], 0x20, 0x2400e044}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x20, r1, 0x300, 0xfffffffc, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x24000010) 401.727599ms ago: executing program 0 (id=4954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50080}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x270, 0x0, 0x1, 0xf55ec2dc42592ce2, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x700}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x863}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x51}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x202}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0xe4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x33d1e423}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xacf}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb53}]}, @CTA_TUPLE_MASTER={0xd4, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x270}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) 392.480597ms ago: executing program 4 (id=4955): unshare(0xc000680) bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x88d5) 135.632136ms ago: executing program 0 (id=4956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8054}, 0x80) r4 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000040)={0x80000017}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdc00, {0xa, 0x14, 0x18650a77759debaa, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @mcast1}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40610b4467890e90}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, r6, 0x521, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) 85.646773ms ago: executing program 4 (id=4957): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @local}, &(0x7f00000002c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@multicast1, @multicast2, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100440c6}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_newroute={0x40, 0x18, 0x20, 0x70bd25, 0x25dfdbfe, {0xa, 0x20, 0x14, 0x7, 0x0, 0x1, 0xc8, 0x1, 0x800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_UID={0x8, 0x19, r2}, @RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x28, 0x4, r4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x800) 0s ago: executing program 7 (id=4958): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, 0x42, 0x1, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) kernel console output (not intermixed with test programs): d to enable media [ 416.926012][T17315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.086563][T17315] veth0_vlan: entered promiscuous mode [ 417.114959][T17315] veth1_vlan: entered promiscuous mode [ 417.227791][T17315] veth0_macvtap: entered promiscuous mode [ 417.245225][T17315] veth1_macvtap: entered promiscuous mode [ 417.270399][T17315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.334954][T17315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.364840][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.386571][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.403698][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.439263][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.654929][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.689804][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.799989][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.827543][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.927374][T17832] netlink: 'syz.5.3163': attribute type 1 has an invalid length. [ 417.948182][T17828] netlink: 'syz.5.3163': attribute type 33 has an invalid length. [ 417.980524][T17828] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3163'. [ 418.029940][T17835] vcan0: tx address claim with different name [ 418.112732][T17841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3038'. [ 418.416104][T17316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.433385][T17316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.441591][T17316] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.460216][T17316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.468745][T17316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.682110][T17856] lo speed is unknown, defaulting to 1000 [ 419.287157][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.298065][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 419.309270][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.340886][T17856] chnl_net:caif_netlink_parms(): no params data found [ 419.407463][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.419367][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 419.445641][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.473269][T17896] IPv6: Can't replace route, no match found [ 419.482009][T17896] __nla_validate_parse: 2 callbacks suppressed [ 419.482028][T17896] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3177'. [ 419.504203][T17896] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3177'. [ 419.578210][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.591702][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 419.617548][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.619988][T17901] delete_channel: no stack [ 419.634525][T17856] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.642677][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.650257][T17856] bridge_slave_0: entered allmulticast mode [ 419.658908][T17856] bridge_slave_0: entered promiscuous mode [ 419.670515][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.689790][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.703065][T17856] bridge_slave_1: entered allmulticast mode [ 419.721572][T17856] bridge_slave_1: entered promiscuous mode [ 419.743511][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.754075][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 419.765138][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.826594][T17856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.854093][T17856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.918578][T17856] team0: Port device team_slave_0 added [ 419.930036][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 419.930092][T17856] team0: Port device team_slave_1 added [ 419.944158][ C1] lec:lec_tx_timeout: lec0 [ 419.949973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.957832][T17856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.966626][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.993975][T17856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.007120][T17856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.014341][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.040975][T17856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.140553][T17856] hsr_slave_0: entered promiscuous mode [ 420.146926][T17856] hsr_slave_1: entered promiscuous mode [ 420.153741][T17856] debugfs: 'hsr0' already exists in 'hsr' [ 420.160449][T17856] Cannot create hsr debugfs directory [ 420.168891][ T5948] team0: left allmulticast mode [ 420.175235][ T5948] team_slave_0: left allmulticast mode [ 420.181531][ T5948] team_slave_1: left allmulticast mode [ 420.187138][ T5948] team0: left promiscuous mode [ 420.192375][ T5948] team_slave_0: left promiscuous mode [ 420.198499][ T5948] team_slave_1: left promiscuous mode [ 420.204492][ T5948] bridge0: port 3(team0) entered disabled state [ 420.214309][ T5948] bridge_slave_1: left allmulticast mode [ 420.220692][ T5948] bridge_slave_1: left promiscuous mode [ 420.226377][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.235113][ T5948] bridge_slave_0: left allmulticast mode [ 420.243946][ T5948] bridge_slave_0: left promiscuous mode [ 420.251420][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.286865][ T5948] veth0_to_bond: left promiscuous mode [ 420.511256][ T5948] bond1 (unregistering): (slave gretap1): Releasing active interface [ 420.537141][ T5948] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 420.573483][ T5145] Bluetooth: hci1: command tx timeout [ 420.913737][ T5948] bond9 (unregistering): (slave bridge3): Releasing backup interface [ 420.922332][ T5948] bridge3 (unregistering): left promiscuous mode [ 421.086919][T17862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.227712][T17911] netlink: 'syz.0.3183': attribute type 1 has an invalid length. [ 421.408285][T17929] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 421.489920][ T5948]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.511806][ T5948]  (unregistering): (slave c@0Ù): Releasing backup interface [ 421.521936][ T5948]  (unregistering): Released all slaves [ 421.536822][ T5948] bond1 (unregistering): Released all slaves [ 421.551323][ T5948] bond2 (unregistering): (slave macvlan2): Releasing active interface [ 421.562302][ T5948] bond2 (unregistering): Released all slaves [ 421.604826][ T5948] bond0 (unregistering): (slave veth5): Releasing active interface [ 421.615181][ T5948] veth0_to_bond: entered promiscuous mode [ 421.624328][ T5948] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 421.637433][ T5948] bond0 (unregistering): (slave veth7): Releasing active interface [ 421.652683][ T5948] bond0 (unregistering): Released all slaves [ 421.666322][ T5948] bond3 (unregistering): Released all slaves [ 421.683563][ T5948] bond4 (unregistering): (slave bond5): Releasing backup interface [ 421.698714][ T5948] bond4 (unregistering): Released all slaves [ 421.808927][ T5948] bond5 (unregistering): Released all slaves [ 421.823154][ T5948] bond6 (unregistering): (slave bond7): Releasing backup interface [ 421.831839][ T5948] bond6 (unregistering): Released all slaves [ 421.945066][ T5948] bond7 (unregistering): Released all slaves [ 421.958477][ T5948] bond8 (unregistering): Released all slaves [ 422.062984][ T5948] bond9 (unregistering): Released all slaves [ 422.190331][ T5948] bond10 (unregistering): Released all slaves [ 422.206086][ T5948] bond11 (unregistering): Released all slaves [ 422.240491][ T9] page_pool_release_retry() stalled pool shutdown: id 68, 1 inflight 60 sec [ 422.267305][T17932] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 422.282033][T17932] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 422.357895][T17933] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 422.369300][T17933] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 422.449538][ T5948] : left promiscuous mode [ 422.539338][ T5948] tipc: Left network mode [ 422.560539][T17938] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 422.568510][T17938] netlink: 'syz.0.3187': attribute type 3 has an invalid length. [ 422.577722][T17938] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3187'. [ 422.587917][T17938] NCSI netlink: No device for ifindex 813332851 [ 422.648289][ T5145] Bluetooth: hci1: command tx timeout [ 422.865808][T17955] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3191'. [ 423.093758][T17964] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 423.357356][T17981] syzkaller1: entered allmulticast mode [ 424.259604][ T5948] hsr_slave_0: left promiscuous mode [ 424.295644][T18013] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 424.312301][ T5948] hsr_slave_1: left promiscuous mode [ 424.328178][T18013] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 424.422135][ T5948] veth0_macvtap: left allmulticast mode [ 424.427986][ T5948] veth0_macvtap: left promiscuous mode [ 424.436492][ T5948] veth1_vlan: left promiscuous mode [ 424.443445][ T5948] veth0_vlan: left promiscuous mode [ 424.737254][T17316] Bluetooth: hci1: command tx timeout [ 424.751275][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'. [ 424.887949][T18038] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3208'. [ 424.959792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.967890][ C1] lec:lec_tx_timeout: lec0 [ 424.972836][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 425.148513][T18044] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3209'. [ 425.415279][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 425.460102][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 425.785792][T18027] dvmrp0: entered allmulticast mode [ 425.845948][T17856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.953965][T17856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.964523][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3211'. [ 425.995132][T17856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.072385][T17856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.168634][T18059] wireguard0: entered promiscuous mode [ 426.180898][T18059] wireguard0: entered allmulticast mode [ 426.198924][T18059] team0: Device wireguard0 is of different type [ 426.392836][T18079] syzkaller1: entered promiscuous mode [ 426.399359][T18079] syzkaller1: entered allmulticast mode [ 426.529257][ T5948] IPVS: stop unused estimator thread 0... [ 426.550805][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 426.588994][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 426.648417][T17856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.663538][T18089] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3220'. [ 426.680891][T18089] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3220'. [ 426.705196][T17856] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.754603][T13035] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.761965][T13035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.798972][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.806206][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.809828][ T5145] Bluetooth: hci1: command tx timeout [ 426.948884][T18101] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3223'. [ 427.004494][T18101] nbd: socks must be embedded in a SOCK_ITEM attr [ 427.065300][T18106] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 427.142412][T18108] netlink: 'syz.5.3224': attribute type 1 has an invalid length. [ 427.262111][T18108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.411254][T18115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.422279][T18115] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 427.435777][T18115] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 427.488070][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'. [ 427.517793][T18108] veth3: entered promiscuous mode [ 427.529335][T18108] bond2: (slave veth3): Enslaving as an active interface with a down link [ 427.578431][ T6115] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.661011][T18129] xt_TPROXY: Can be used only with -p tcp or -p udp [ 427.673784][ T6115] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.726512][ T6115] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.739365][ T6115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.766028][T18132] netlink: 'syz.0.3230': attribute type 13 has an invalid length. [ 427.947388][T18151] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 428.041343][T17856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.240951][T17856] veth0_vlan: entered promiscuous mode [ 428.293408][T17856] veth1_vlan: entered promiscuous mode [ 429.273468][T17856] veth0_macvtap: entered promiscuous mode [ 429.308990][T17856] veth1_macvtap: entered promiscuous mode [ 429.357533][T18180] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 429.434337][T17856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.506208][T17856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.562021][ T1154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.594926][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.616587][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.648159][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.949963][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.974466][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.981985][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 429.982017][ C1] lec:lec_tx_timeout: lec0 [ 429.990695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.097261][T18209] __nla_validate_parse: 8 callbacks suppressed [ 430.097281][T18209] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3250'. [ 430.118408][T18209] netlink: 'syz.5.3250': attribute type 21 has an invalid length. [ 430.134231][T18209] netlink: 5524 bytes leftover after parsing attributes in process `syz.5.3250'. [ 430.146335][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.154834][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.168756][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3251'. [ 430.418487][T18221] tipc: Started in network mode [ 430.438178][T18221] tipc: Node identity e0000001, cluster identity 4711 [ 430.478665][T18221] tipc: Enabling of bearer rejected, failed to enable media [ 430.801023][T15183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.905697][T18242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3257'. [ 430.972216][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.031334][T18248] xt_l2tp: unknown flags: 10 [ 431.251888][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3263'. [ 431.256204][T18260] netlink: 'syz.1.3260': attribute type 11 has an invalid length. [ 431.277606][T18260] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3260'. [ 431.430578][T18267] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3266'. [ 431.840114][T15183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.931027][T18306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3272'. [ 431.976177][T18299] lo speed is unknown, defaulting to 1000 [ 432.185254][ T1154] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.203560][ T1154] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.240447][ T1154] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.257086][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3275'. [ 432.266934][ T1154] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.384543][T18327] macvlan3: entered promiscuous mode [ 432.422351][T18327] macvlan3: entered allmulticast mode [ 432.466783][T18329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 432.519311][T18336] netlink: 'syz.1.3280': attribute type 1 has an invalid length. [ 432.709740][T18344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3282'. [ 432.715599][T18343] gtp0: entered promiscuous mode [ 432.752718][T18343] gtp0: entered allmulticast mode [ 433.487913][T18370] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.503745][T18370] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.511030][T18370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.377446][T18415] syzkaller1: entered promiscuous mode [ 434.401104][T18415] syzkaller1: entered allmulticast mode [ 434.625323][T18424] syzkaller0: entered promiscuous mode [ 434.659236][T18424] syzkaller0: entered allmulticast mode [ 434.999522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 435.007605][ C1] lec:lec_tx_timeout: lec0 [ 435.012963][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 435.184672][T18449] netlink: 'syz.2.3305': attribute type 15 has an invalid length. [ 435.194907][T18449] __nla_validate_parse: 7 callbacks suppressed [ 435.194927][T18449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3305'. [ 435.235560][T18451] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 435.334015][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3307'. [ 435.407002][T18451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.644127][T18455] bond1: (slave veth3): Enslaving as an active interface with a down link [ 435.664342][T18478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3311'. [ 435.756490][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'. [ 435.861079][T18485] tipc: Resetting bearer [ 435.938219][T18494] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 436.141578][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3319'. [ 436.194699][T18512] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 436.206899][T18512] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 436.453888][T18485] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 436.460911][T18485] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 436.592403][T18485] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 436.598377][T18485] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 436.811068][T18485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.824275][T18485] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 436.950141][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'. [ 437.117914][T18485] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.136632][T18485] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 437.262863][T18559] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3331'. [ 437.288403][T18485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.307028][T18485] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 437.804346][T18580] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 437.886372][T18583] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 437.926411][T18583] netlink: 'syz.2.3335': attribute type 2 has an invalid length. [ 438.137200][T18591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3336'. [ 438.394202][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 438.411325][T18611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3340'. [ 438.424494][T18610] wg1: entered promiscuous mode [ 438.429397][T18610] wg1: entered allmulticast mode [ 438.540867][T18615] mac80211_hwsim hwsim52 ÿ: renamed from wlan1 [ 438.701742][T18626] netlink: 'syz.4.3345': attribute type 1 has an invalid length. [ 438.775475][T18630] Cannot find set identified by id 0 to match [ 438.849716][T18626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.936292][T18632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.976972][T18632] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 439.009101][T18632] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 439.064431][T18634] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.107111][T18636] veth5: entered promiscuous mode [ 439.138984][T18636] bond2: (slave veth5): Enslaving as an active interface with a down link [ 439.158802][T18643] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.227832][T18626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.406952][T18665] sctp: [Deprecated]: syz.5.3351 (pid 18665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.406952][T18665] Use struct sctp_sack_info instead [ 439.794997][ T6115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.019487][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 440.027611][ C1] lec:lec_tx_timeout: lec0 [ 440.032648][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 440.093727][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103335][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.231600][T18714] __nla_validate_parse: 8 callbacks suppressed [ 440.231621][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3368'. [ 440.256985][T18714] netlink: 'syz.1.3368': attribute type 1 has an invalid length. [ 440.315094][T18714] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3368'. [ 440.328952][T18714] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3368'. [ 440.372931][T18718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3366'. [ 440.543939][ T9] IPVS: starting estimator thread 0... [ 440.549277][T18732] geneve3: entered promiscuous mode [ 440.631893][T18740] syzkaller1: entered promiscuous mode [ 440.641750][T18738] IPVS: using max 24 ests per chain, 57600 per kthread [ 440.661148][T18740] syzkaller1: entered allmulticast mode [ 440.754063][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3373'. [ 440.763887][T18751] syzkaller1: left promiscuous mode [ 440.769128][T18751] syzkaller1: left allmulticast mode [ 440.775872][T18751] netlink: 'syz.5.3373': attribute type 10 has an invalid length. [ 440.788346][T18751] bridge0: port 3(team0) entered blocking state [ 440.804926][T18751] bridge0: port 3(team0) entered disabled state [ 440.812214][T18751] team0: entered allmulticast mode [ 440.817493][T18751] team_slave_0: entered allmulticast mode [ 440.823850][T18751] team_slave_1: entered allmulticast mode [ 440.833408][T18753] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004 [ 440.849213][T18751] team0: entered promiscuous mode [ 440.856670][T18751] team_slave_0: entered promiscuous mode [ 440.862836][T18751] team_slave_1: entered promiscuous mode [ 440.883660][T18751] bridge0: port 3(team0) entered blocking state [ 440.890154][T18751] bridge0: port 3(team0) entered forwarding state [ 441.123637][T18766] sctp: [Deprecated]: syz.4.3378 (pid 18766) Use of int in max_burst socket option. [ 441.123637][T18766] Use struct sctp_assoc_value instead [ 441.162331][T18764] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 441.397415][T18775] vlan2: entered allmulticast mode [ 441.403660][T18775] geneve1: entered allmulticast mode [ 441.412814][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 441.542503][T18780] x_tables: duplicate underflow at hook 3 [ 441.720224][T18784] nbd1: detected capacity change from 0 to 127 [ 441.799227][T17316] block nbd1: Receive control failed (result -104) [ 441.845374][T18806] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 441.887881][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 442.045579][T18809] vcan0: entered allmulticast mode [ 442.118605][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3390'. [ 442.143873][T18817] openvswitch: netlink: nsh attr 14023 is out of range max 3 [ 442.293632][T18816] bond2 (unregistering): Released all slaves [ 442.321484][T18825] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3393'. [ 442.535972][T18830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.834072][T18850] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 443.056300][T18866] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3402'. [ 443.267133][T18877] openvswitch: netlink: Multiple metadata blocks provided [ 443.304742][T18883] netlink: 'syz.4.3405': attribute type 16 has an invalid length. [ 443.337996][T18883] netlink: 'syz.4.3405': attribute type 17 has an invalid length. [ 443.348570][T18878] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.444852][T18878] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.733559][T18883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.778398][T18898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.902100][T18898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.312624][T18930] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 444.912792][T18963] lo: Caught tx_queue_len zero misconfig [ 445.049560][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 445.057625][ C1] lec:lec_tx_timeout: lec0 [ 445.062699][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.183484][T18979] netlink: 'syz.2.3427': attribute type 10 has an invalid length. [ 445.240340][T18979] veth0_macvtap: left promiscuous mode [ 445.425040][T18987] syzkaller0: entered promiscuous mode [ 445.440398][T18987] syzkaller0: entered allmulticast mode [ 446.169961][T19031] __nla_validate_parse: 5 callbacks suppressed [ 446.169983][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 446.215793][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 446.231027][T19037] Unsupported ieee802154 address type: 0 [ 446.576513][T19049] IPVS: length: 8 != 1152 [ 446.593425][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 446.611324][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 446.699973][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3450'. [ 446.804163][T19065] .: renamed from bridge_slave_1 (while UP) [ 446.890637][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3453'. [ 446.972770][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 447.224799][T19099] xt_TCPMSS: Only works on TCP SYN packets [ 447.253535][T19099] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3460'. [ 447.551586][T19120] netlink: 'syz.1.3468': attribute type 5 has an invalid length. [ 447.560513][T19120] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3468'. [ 447.663116][T19126] netlink: 'syz.0.3469': attribute type 9 has an invalid length. [ 447.856067][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3474'. [ 447.888119][T19138] geneve2: entered promiscuous mode [ 447.898446][T19138] geneve2: entered allmulticast mode [ 448.063808][T19146] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 448.732005][T19180] netlink: 'syz.4.3488': attribute type 1 has an invalid length. [ 448.746300][T19180] netlink: 'syz.4.3488': attribute type 2 has an invalid length. [ 448.766259][T19180] netlink: 'syz.4.3488': attribute type 1 has an invalid length. [ 448.796716][T19180] netlink: 'syz.4.3488': attribute type 10 has an invalid length. [ 448.809693][T19180] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 448.823148][T19180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.380763][T19221] Cannot find del_set index 0 as target [ 449.733724][T19245] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 449.877161][T19255] netlink: 'syz.5.3512': attribute type 32 has an invalid length. [ 449.886477][T19249] team0: Port device team_slave_0 removed [ 449.943422][T19255] bond4: option coupled_control: invalid value (73) [ 449.954366][T19255] bond4 (unregistering): Released all slaves [ 450.069518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 450.077597][ C1] lec:lec_tx_timeout: lec0 [ 450.087587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.093957][T19297] __nla_validate_parse: 14 callbacks suppressed [ 452.093980][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 452.114633][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3524'. [ 452.158285][T19297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.177508][T19299] macsec1: entered promiscuous mode [ 452.184634][T19303] tipc: Started in network mode [ 452.200053][T19303] tipc: Node identity ac14140f, cluster identity 4711 [ 452.208138][T19303] tipc: New replicast peer: 255.255.255.255 [ 452.217088][T19303] tipc: Enabled bearer , priority 10 [ 452.549221][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 452.898490][T19345] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 453.329561][T15192] tipc: Node number set to 2886997007 [ 453.387013][T19383] netlink: 'syz.0.3546': attribute type 1 has an invalid length. [ 453.487581][T19388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 453.505427][T19388] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 453.515123][T19388] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 453.530645][T19390] netlink: 'syz.0.3547': attribute type 2 has an invalid length. [ 453.621458][T19397] syzkaller1: entered promiscuous mode [ 453.638670][T19397] syzkaller1: entered allmulticast mode [ 453.676161][T19398] syzkaller0: entered promiscuous mode [ 453.699604][T19398] syzkaller0: entered allmulticast mode [ 453.706844][T19402] tipc: Started in network mode [ 453.725651][T19402] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 453.733966][T19402] tipc: Enabled bearer , priority 0 [ 454.158230][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3554'. [ 454.806140][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3563'. [ 454.869369][T19449] : entered promiscuous mode [ 454.904169][T17047] tipc: Node number set to 11905706 [ 454.999344][T19463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 455.045084][T19462] netlink: 'syz.0.3567': attribute type 21 has an invalid length. [ 455.056011][T19463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 455.076596][T19462] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3567'. [ 455.095762][T19462] netlink: 'syz.0.3567': attribute type 5 has an invalid length. [ 455.103863][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 455.103894][ C1] lec:lec_tx_timeout: lec0 [ 455.112109][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 455.124580][T19462] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3567'. [ 455.176691][T19474] vlan3: entered promiscuous mode [ 455.186855][T19474] vlan3: entered allmulticast mode [ 455.192406][T19474] hsr_slave_1: entered allmulticast mode [ 455.239333][T19474] syzkaller0: entered promiscuous mode [ 455.247527][T19474] syzkaller0: entered allmulticast mode [ 455.264501][T19474] 0: reclassify loop, rule prio 0, protocol 800 [ 455.736481][T19494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3577'. [ 455.757319][T19494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3577'. [ 455.925032][T19497] netlink: zone id is out of range [ 455.939645][T19497] netlink: zone id is out of range [ 455.949896][T19497] netlink: zone id is out of range [ 455.965464][T19497] netlink: zone id is out of range [ 455.975632][T19497] netlink: zone id is out of range [ 455.993825][T19497] netlink: zone id is out of range [ 456.001263][T19497] netlink: zone id is out of range [ 456.156763][T19506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3581'. [ 456.392151][T19517] netlink: 'syz.1.3584': attribute type 10 has an invalid length. [ 456.462820][T19521] netlink: 'syz.0.3587': attribute type 11 has an invalid length. [ 456.559251][T19519] tipc: Enabling of bearer rejected, failed to enable media [ 456.652543][T19517] veth0_vlan: left promiscuous mode [ 456.684829][T19517] veth0_vlan: entered promiscuous mode [ 456.695547][T19517] team0: Device veth0_vlan failed to register rx_handler [ 456.785986][T19528] bridge0: port 3(syz_tun) entered blocking state [ 456.793605][T19528] bridge0: port 3(syz_tun) entered disabled state [ 456.810532][T19528] syz_tun: entered allmulticast mode [ 456.833028][T19528] syz_tun: entered promiscuous mode [ 456.853534][T19528] bridge0: port 3(syz_tun) entered blocking state [ 456.860153][T19528] bridge0: port 3(syz_tun) entered forwarding state [ 456.907255][T19534] syzkaller1: entered promiscuous mode [ 456.915403][T19534] syzkaller1: entered allmulticast mode [ 457.124095][T19543] __nla_validate_parse: 5 callbacks suppressed [ 457.124116][T19543] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3595'. [ 457.227247][T19543] bond3: (slave ip6_vti0): Device is not bonding slave [ 457.234685][T19543] bond3: option active_slave: invalid value (ip6_vti0) [ 457.243257][T19543] bond3 (unregistering): Released all slaves [ 457.273494][T19550] syzkaller0: entered promiscuous mode [ 457.279018][T19550] syzkaller0: entered allmulticast mode [ 457.318800][T19550] tipc: Enabled bearer , priority 0 [ 457.341140][T19549] tipc: Resetting bearer [ 457.373800][T19549] tipc: Disabling bearer [ 457.574672][T19562] ip6gre1: entered allmulticast mode [ 457.620661][T19562] ipt_REJECT: TCP_RESET invalid for non-tcp [ 457.825464][T19576] IPVS: set_ctl: invalid protocol: 51 172.30.1.6:20002 [ 457.857849][T19576] pimreg: entered allmulticast mode [ 458.143585][T19594] netlink: 'syz.5.3613': attribute type 1 has an invalid length. [ 458.250034][T19598] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3615'. [ 458.376943][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3619'. [ 458.396216][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 458.507474][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 458.524530][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 458.534190][T19620] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 458.551384][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'. [ 458.719256][T19631] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.842900][T19638] netlink: 'syz.0.3628': attribute type 2 has an invalid length. [ 458.868384][T19638] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3628'. [ 459.033324][T19649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3632'. [ 459.156213][T19658] netlink: 'syz.1.3634': attribute type 6 has an invalid length. [ 459.181113][T19658] netlink: 'syz.1.3634': attribute type 6 has an invalid length. [ 459.333651][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.403457][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 459.416640][T19670] netlink: 'syz.0.3638': attribute type 1 has an invalid length. [ 460.177313][T19707] netlink: 'syz.0.3652': attribute type 2 has an invalid length. [ 460.305845][T19712] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.441218][T19721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.486144][T19721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.522129][T19725] netlink: 'syz.4.3659': attribute type 3 has an invalid length. [ 460.530964][T19725] netlink: 'syz.4.3659': attribute type 1 has an invalid length. [ 460.562082][ T30] audit: type=1800 audit(1770360276.382:3): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3660" name="memory.events" dev="tmpfs" ino=919 res=0 errno=0 [ 460.590441][ T30] audit: type=1800 audit(1770360276.392:4): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3660" name="memory.events" dev="tmpfs" ino=919 res=0 errno=0 [ 461.187845][T19766] netlink: 'syz.4.3670': attribute type 9 has an invalid length. [ 461.209466][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6100 ms [ 461.217561][ C1] lec:lec_tx_timeout: lec0 [ 461.223463][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 462.169976][T15192] IPVS: starting estimator thread 0... [ 462.188102][T19799] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 462.259939][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.268986][T19800] IPVS: using max 23 ests per chain, 55200 per kthread [ 462.281511][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.290025][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.306833][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.316671][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.337874][T17316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.351207][T17316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.360239][T17316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.368243][T17316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.379995][T17316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.475860][T19803] lo speed is unknown, defaulting to 1000 [ 462.638889][T19817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.645397][T19819] net_ratelimit: 138 callbacks suppressed [ 462.645425][T19819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.796764][T19803] chnl_net:caif_netlink_parms(): no params data found [ 462.918315][T19803] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.925842][T19803] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.933292][T19803] bridge_slave_0: entered allmulticast mode [ 462.934869][T19833] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 462.941818][T19803] bridge_slave_0: entered promiscuous mode [ 462.958372][T19803] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.966882][T19803] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.974644][T19803] bridge_slave_1: entered allmulticast mode [ 462.982755][T19803] bridge_slave_1: entered promiscuous mode [ 463.023449][T19803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.036930][T19803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.087720][T19803] team0: Port device team_slave_0 added [ 463.094026][T19837] __nla_validate_parse: 13 callbacks suppressed [ 463.094043][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3695'. [ 463.096998][T19803] team0: Port device team_slave_1 added [ 463.175300][T19803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.182465][T19803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.209815][T19803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.227887][T19803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.235562][T19803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.273086][T19803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.349228][T19803] hsr_slave_0: entered promiscuous mode [ 463.356495][T19803] hsr_slave_1: entered promiscuous mode [ 463.364201][T19803] debugfs: 'hsr0' already exists in 'hsr' [ 463.370642][T19803] Cannot create hsr debugfs directory [ 463.466691][T19846] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3698'. [ 463.554995][T19848] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3699'. [ 463.685594][T19803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 463.698774][T19803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.715876][T19803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.732145][T19803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 463.810009][T19861] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 463.820728][T19860] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 463.850270][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'. [ 463.870724][T19860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.878966][T19860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.986216][T19803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.021323][T19803] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.062732][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.069998][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.101556][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.108843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.401823][ T5145] Bluetooth: hci3: command tx timeout [ 464.485961][T19873] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3704'. [ 464.523449][T19874] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3704'. [ 464.533058][T19803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.726966][T19883] netlink: 'syz.4.3705': attribute type 2 has an invalid length. [ 464.765957][T19883] netlink: 'syz.4.3705': attribute type 8 has an invalid length. [ 464.779949][T19883] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3705'. [ 465.105433][T19803] veth0_vlan: entered promiscuous mode [ 465.128528][T19803] veth1_vlan: entered promiscuous mode [ 465.186104][T19803] veth0_macvtap: entered promiscuous mode [ 465.222338][T19803] veth1_macvtap: entered promiscuous mode [ 465.244586][T19803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.276135][T19803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.325077][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.358337][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.407268][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.461304][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.537390][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.561202][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.643565][T19921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3713'. [ 465.671707][T19921] openvswitch: netlink: Flow key attr not present in new flow. [ 465.681522][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3714'. [ 465.706303][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.715681][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.900048][T19933] netlink: 'syz.6.3680': attribute type 7 has an invalid length. [ 465.926976][T19937] IPVS: Unknown mcast interface: pimreg0 [ 466.029945][T19941] openvswitch: netlink: Key 10 has unexpected len 4864 expected 4 [ 466.052191][T19942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3717'. [ 466.226407][T19947] syzkaller0: entered promiscuous mode [ 466.233816][T19947] syzkaller0: entered allmulticast mode [ 466.484066][ T5145] Bluetooth: hci3: command tx timeout [ 466.554177][T19972] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 466.590620][T19971] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 466.713585][T19980] bond0: (slave rose0): Enslaving as an active interface with an up link [ 466.959461][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 466.967526][ C1] lec:lec_tx_timeout: lec0 [ 466.972615][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 467.069695][T20000] x_tables: duplicate underflow at hook 1 [ 467.128338][T19999] lo speed is unknown, defaulting to 1000 [ 467.622830][T20026] bpq0: left allmulticast mode [ 467.948476][T20045] syz_tun: entered allmulticast mode [ 468.199278][T20066] __nla_validate_parse: 5 callbacks suppressed [ 468.199300][T20066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3749'. [ 468.333852][T20074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.395662][T20076] netlink: 'syz.0.3751': attribute type 1 has an invalid length. [ 468.559757][ T5145] Bluetooth: hci3: command tx timeout [ 468.745285][T20086] netlink: 'syz.0.3753': attribute type 1 has an invalid length. [ 468.835023][T20088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3755'. [ 468.860027][T20088] tipc: Invalid UDP bearer configuration [ 468.860095][T20088] tipc: Enabling of bearer rejected, failed to enable media [ 468.884365][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3755'. [ 469.353067][T20116] syzkaller0: entered promiscuous mode [ 469.358734][T20116] syzkaller0: entered allmulticast mode [ 469.747422][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3769'. [ 470.155310][T20163] netlink: 'syz.4.3771': attribute type 30 has an invalid length. [ 470.297934][T20171] netlink: 'syz.6.3773': attribute type 12 has an invalid length. [ 470.337565][T20171] bond1: option primary_reselect: invalid value (254) [ 470.361581][T20171] bond1 (unregistering): Released all slaves [ 470.520538][T20185] netlink: 'syz.0.3775': attribute type 1 has an invalid length. [ 470.535323][T20179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3775'. [ 470.645337][ T5145] Bluetooth: hci3: command tx timeout [ 470.746759][T20200] openvswitch: netlink: Actions may not be safe on all matching packets [ 470.824541][T20191] bond1: option min_links: invalid value (18446744073709551614) [ 470.837868][T20191] bond1: option min_links: allowed values 0 - 2147483647 [ 470.852995][T20191] bond1 (unregistering): Released all slaves [ 470.891068][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 471.051560][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 471.060841][T20214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3785'. [ 471.073943][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 471.083468][T20214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3785'. [ 471.120655][T20213] geneve2: entered promiscuous mode [ 471.125925][T20213] geneve2: entered allmulticast mode [ 471.246409][T20222] netlink: 'syz.0.3789': attribute type 2 has an invalid length. [ 471.254369][T20222] netlink: 'syz.0.3789': attribute type 8 has an invalid length. [ 471.314674][T20224] netlink: 'syz.4.3790': attribute type 1 has an invalid length. [ 471.341219][T20224] bond3: entered promiscuous mode [ 471.346601][T20224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.979459][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 471.987545][ C1] lec:lec_tx_timeout: lec0 [ 471.992388][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 472.082196][ T51] block nbd1: Possible stuck request ffff888025260000: control (read@0,1024B). Runtime 30 seconds [ 472.095853][ T51] block nbd1: Possible stuck request ffff888025260200: control (read@1024,1024B). Runtime 30 seconds [ 472.106935][ T51] block nbd1: Possible stuck request ffff888025260400: control (read@2048,1024B). Runtime 30 seconds [ 472.115557][T20270] syzkaller0: entered promiscuous mode [ 472.119034][ T51] block nbd1: Possible stuck request ffff888025260600: control (read@3072,1024B). Runtime 30 seconds [ 472.150050][T20270] syzkaller0: entered allmulticast mode [ 472.384606][T20283] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 472.393145][T20283] netlink: 'syz.4.3808': attribute type 3 has an invalid length. [ 472.411000][T20283] NCSI netlink: No device for ifindex 813332851 [ 472.633660][T20294] lo speed is unknown, defaulting to 1000 [ 472.644997][T20294] lo speed is unknown, defaulting to 1000 [ 472.654334][T20294] lo speed is unknown, defaulting to 1000 [ 472.713790][T20297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.724174][T20299] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 472.832390][ T30] audit: type=1800 audit(1770360288.602:5): pid=20301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3816" name="memory.events" dev="tmpfs" ino=1033 res=0 errno=0 [ 472.875097][ T30] audit: type=1804 audit(1770360288.602:6): pid=20301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3816" name="/newroot/201/memory.events" dev="tmpfs" ino=1033 res=1 errno=0 [ 472.940642][T20294] infiniband syz0: set active [ 472.945723][T20294] infiniband syz0: added lo [ 472.958467][ T5934] lo speed is unknown, defaulting to 1000 [ 473.017218][T20294] RDS/IB: syz0: added [ 473.024486][T20294] smc: adding ib device syz0 with port count 1 [ 473.031062][T20294] smc: ib device syz0 port 1 has no pnetid [ 473.040560][ T9] lo speed is unknown, defaulting to 1000 [ 473.051898][T20294] lo speed is unknown, defaulting to 1000 [ 473.309739][T20317] __nla_validate_parse: 17 callbacks suppressed [ 473.309760][T20317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3821'. [ 473.398535][T20321] syzkaller0: entered promiscuous mode [ 473.404146][T20321] syzkaller0: entered allmulticast mode [ 473.418927][T20294] lo speed is unknown, defaulting to 1000 [ 473.885584][T20294] lo speed is unknown, defaulting to 1000 [ 473.902622][ T6115] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 473.920843][T20345] netlink: 'syz.0.3829': attribute type 29 has an invalid length. [ 473.931985][T20344] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 473.932633][T20337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.958949][T20345] netlink: 'syz.0.3829': attribute type 29 has an invalid length. [ 474.088728][T20350] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3830'. [ 474.250344][T20294] lo speed is unknown, defaulting to 1000 [ 474.376965][T20363] netlink: 'syz.0.3835': attribute type 2 has an invalid length. [ 474.386264][T20363] netlink: 'syz.0.3835': attribute type 1 has an invalid length. [ 474.413004][T20363] syzkaller0: entered promiscuous mode [ 474.418615][T20363] syzkaller0: entered allmulticast mode [ 474.588100][T20294] lo speed is unknown, defaulting to 1000 [ 474.654651][T20374] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 474.920211][T20384] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3843'. [ 474.936514][T20294] lo speed is unknown, defaulting to 1000 [ 474.950545][T20383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3842'. [ 474.960762][T20383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3842'. [ 474.971137][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 474.983258][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 475.127921][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3846'. [ 475.238219][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3847'. [ 475.250275][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'. [ 475.332662][T20294] lo speed is unknown, defaulting to 1000 [ 475.374143][T20401] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 475.681316][T20294] lo speed is unknown, defaulting to 1000 [ 475.836651][T17316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 475.847427][T17316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 475.858424][T17316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 475.870230][T17316] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 475.878097][T17316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 475.978928][T20418] lo speed is unknown, defaulting to 1000 [ 476.005189][T20421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.043081][T20418] lo speed is unknown, defaulting to 1000 [ 476.348489][T20433] netlink: 'syz.4.3856': attribute type 1 has an invalid length. [ 476.493370][T20438] 8021q: VLANs not supported on ip6_vti0 [ 476.675305][T20418] chnl_net:caif_netlink_parms(): no params data found [ 476.940699][T20418] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.952515][T20418] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.967057][T20418] bridge_slave_0: entered allmulticast mode [ 476.999476][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 477.007654][ C1] lec:lec_tx_timeout: lec0 [ 477.010261][T20418] bridge_slave_0: entered promiscuous mode [ 477.012470][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 477.083449][T17316] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 477.094715][T17316] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 477.104467][T17316] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 477.121435][T20418] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.128610][T20418] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.154136][T17316] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 477.164695][T17316] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 477.166550][T20418] bridge_slave_1: entered allmulticast mode [ 477.220988][T20478] netlink: 'syz.4.3869': attribute type 9 has an invalid length. [ 477.228385][T20418] bridge_slave_1: entered promiscuous mode [ 477.289381][T20418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.304668][T20418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.360576][T20418] team0: Port device team_slave_0 added [ 477.383546][T20418] team0: Port device team_slave_1 added [ 477.402956][T20471] lo speed is unknown, defaulting to 1000 [ 477.440813][T20471] lo speed is unknown, defaulting to 1000 [ 477.505315][T20418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.526185][T20418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.563258][T20418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.631792][T20497] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 477.645364][T20497] bond4 (unregistering): Released all slaves [ 477.694783][T20418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.706186][T20418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.757308][T20418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.901293][T20418] hsr_slave_0: entered promiscuous mode [ 477.908600][T20418] hsr_slave_1: entered promiscuous mode [ 477.915921][T20418] debugfs: 'hsr0' already exists in 'hsr' [ 477.922521][ T5145] Bluetooth: hci7: command tx timeout [ 477.929347][T20418] Cannot create hsr debugfs directory [ 478.348806][T20522] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 478.755731][T20471] chnl_net:caif_netlink_parms(): no params data found [ 478.786609][T20546] __nla_validate_parse: 11 callbacks suppressed [ 478.786629][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3884'. [ 478.923346][T20418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.977011][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3887'. [ 478.988810][T20418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 479.078423][T20418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 479.126040][T20418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 479.279297][T20471] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.287152][ T5145] Bluetooth: hci8: command tx timeout [ 479.303459][T20471] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.351004][T20471] bridge_slave_0: entered allmulticast mode [ 479.373951][T20471] bridge_slave_0: entered promiscuous mode [ 479.407069][T20471] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.417195][T20471] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.425984][T20471] bridge_slave_1: entered allmulticast mode [ 479.437965][T20471] bridge_slave_1: entered promiscuous mode [ 479.539075][T20471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.568295][T20471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.569775][T20600] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3892'. [ 479.643142][T20471] team0: Port device team_slave_0 added [ 479.658624][T20471] team0: Port device team_slave_1 added [ 479.745852][T20605] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3894'. [ 479.765711][T20605] netlink: 'syz.0.3894': attribute type 12 has an invalid length. [ 479.776671][T20471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.784001][T20471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.813451][T20471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.888676][T20605] bond4: option primary_reselect: invalid value (255) [ 479.899287][T20605] bond4 (unregistering): Released all slaves [ 479.933563][T20471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.946964][T20471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.995579][T20471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.012749][ T5145] Bluetooth: hci7: command tx timeout [ 480.213506][T20471] hsr_slave_0: entered promiscuous mode [ 480.221766][T20471] hsr_slave_1: entered promiscuous mode [ 480.241935][T20471] debugfs: 'hsr0' already exists in 'hsr' [ 480.257937][T20471] Cannot create hsr debugfs directory [ 480.299169][T20418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.427481][T20635] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 480.453394][T20418] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.486920][T13033] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.494257][T13033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.601352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.608590][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.826844][T20651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3904'. [ 481.077991][T20471] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 481.102640][T20471] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 481.135637][T20471] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 481.162195][T20471] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 481.277868][T20660] can: request_module (can-proto-0) failed. [ 481.357413][T20418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.359780][T17316] Bluetooth: hci8: command tx timeout [ 481.476969][T20471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.544470][T20471] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.581090][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.588275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.646948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.654697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.029486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 482.037558][ C1] lec:lec_tx_timeout: lec0 [ 482.042329][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 482.080018][T17316] Bluetooth: hci7: command tx timeout [ 482.208522][T20418] veth0_vlan: entered promiscuous mode [ 482.257914][T20418] veth1_vlan: entered promiscuous mode [ 482.344589][T20418] veth0_macvtap: entered promiscuous mode [ 482.368624][T20418] veth1_macvtap: entered promiscuous mode [ 482.410435][T20471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.445279][T20418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.497755][T20418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.544810][ T1154] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.588859][ T1154] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.611026][ T1154] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.644461][ T1154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.810190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.842928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.931317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.949524][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.304324][T20723] bond4: ARP target 1.0.0.0 is already present [ 483.318117][ T30] audit: type=1800 audit(1770360299.142:7): pid=20725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3917" name="memory.events" dev="tmpfs" ino=1122 res=0 errno=0 [ 483.356690][T20723] bond4: option arp_ip_target: invalid value (1) [ 483.369582][ T30] audit: type=1804 audit(1770360299.182:8): pid=20725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3917" name="/newroot/216/memory.events" dev="tmpfs" ino=1122 res=1 errno=0 [ 483.379894][T20723] bond4 (unregistering): Released all slaves [ 483.438082][T20731] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 483.446096][T17316] Bluetooth: hci8: command 0x040f tx timeout [ 483.457873][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 483.494212][T20731] bond4: option coupled_control: invalid value (52) [ 483.513603][T20731] bond4 (unregistering): Released all slaves [ 483.615733][T20471] veth0_vlan: entered promiscuous mode [ 483.698462][T20471] veth1_vlan: entered promiscuous mode [ 483.855477][T20471] veth0_macvtap: entered promiscuous mode [ 483.922981][T20471] veth1_macvtap: entered promiscuous mode [ 484.008609][T20471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.052325][T20471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.098388][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.146310][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.159847][ T5145] Bluetooth: hci7: command tx timeout [ 484.204860][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.226786][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.353264][T20759] ip6tnl0: Caught tx_queue_len zero misconfig [ 484.456279][T20765] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3930'. [ 484.468943][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.494215][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.632945][ T6115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.660059][ T6115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.968624][T20784] netlink: 'syz.0.3935': attribute type 10 has an invalid length. [ 484.977347][T20784] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3935'. [ 485.230369][T20793] tipc: Started in network mode [ 485.259614][T20793] tipc: Node identity 0000000000000000ffff, cluster identity 4711 [ 485.324794][T20798] : entered promiscuous mode [ 485.526029][ T5145] Bluetooth: hci8: command 0x040f tx timeout [ 485.932857][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 485.989970][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 486.030170][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 486.060048][T20828] netlink: 'syz.0.3946': attribute type 12 has an invalid length. [ 486.087552][T20828] netlink: 'syz.0.3946': attribute type 11 has an invalid length. [ 486.123015][T20831] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3947'. [ 486.156813][T20831] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3947'. [ 486.225477][T20831] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3947'. [ 486.283099][T20831] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3947'. [ 486.288841][T20842] openvswitch: netlink: IP tunnel dst address not specified [ 486.329384][T20831] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3947'. [ 486.820593][T20855] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.828486][T20855] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.924802][T20855] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 487.049481][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 487.057624][ C1] lec:lec_tx_timeout: lec0 [ 487.062301][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 487.474473][T20885] º: renamed from veth1_vlan (while UP) [ 487.599948][ T5145] Bluetooth: hci8: command 0x040f tx timeout [ 487.607821][T20891] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 487.644332][T20891] syzkaller0: entered promiscuous mode [ 487.655134][T20891] syzkaller0: entered allmulticast mode [ 487.832833][T20896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.203808][T20924] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 488.731304][T20947] siw: device registration error -23 [ 488.773152][T20947] tipc: Started in network mode [ 488.778083][T20947] tipc: Node identity 0000000000000000ffff, cluster identity 4711 [ 488.908163][T20955] netlink: 'syz.0.3984': attribute type 24 has an invalid length. [ 489.199036][T20965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.265574][T20978] syzkaller0: entered promiscuous mode [ 489.279384][T20978] syzkaller0: entered allmulticast mode [ 489.367067][T20981] netlink: 'syz.8.3990': attribute type 21 has an invalid length. [ 489.518591][T20989] __nla_validate_parse: 38 callbacks suppressed [ 489.518612][T20989] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3993'. [ 489.631108][T20993] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 490.055886][T21010] netlink: 'syz.8.3999': attribute type 12 has an invalid length. [ 490.069308][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3999'. [ 490.161509][T21010] netlink: 'syz.8.3999': attribute type 12 has an invalid length. [ 490.173535][ T6115] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.188800][ T6115] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.200156][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3999'. [ 490.208266][ T6115] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.258593][ T6115] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.452299][T21041] tap0: tun_chr_ioctl cmd 1074025678 [ 490.475165][T21041] tap0: group set to 0 [ 490.487268][T21038] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4008'. [ 490.557781][ T5948] tipc: Subscription rejected, illegal request [ 490.633097][T21049] macvlan0: entered promiscuous mode [ 490.815035][T21060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4015'. [ 490.836313][T21060] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 490.848572][T21060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4015'. [ 491.324045][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4023'. [ 491.338558][T21098] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4021'. [ 491.564482][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4025'. [ 491.664938][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4027'. [ 492.025883][T21126] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 492.069466][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 492.077592][ C1] lec:lec_tx_timeout: lec0 [ 492.082476][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 492.457999][T21144] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 492.721698][T21157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.024126][T21170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.075181][T21170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.155162][T21170] bond0 (unregistering): Released all slaves [ 493.223187][T21190] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 493.585394][T21214] netlink: 'syz.4.4056': attribute type 1 has an invalid length. [ 493.625558][T21213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.705901][T21213] netlink: 'syz.8.4057': attribute type 21 has an invalid length. [ 494.176534][T21243] xt_policy: neither incoming nor outgoing policy selected [ 494.642827][T21271] x_tables: duplicate underflow at hook 2 [ 494.656161][T21274] netlink: 'syz.0.4079': attribute type 2 has an invalid length. [ 494.812189][T21278] __nla_validate_parse: 6 callbacks suppressed [ 494.812210][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4081'. [ 495.051697][T21287] netlink: 'syz.4.4084': attribute type 2 has an invalid length. [ 495.275786][T21299] netlink: 236 bytes leftover after parsing attributes in process `syz.6.4089'. [ 495.605671][T21317] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 495.705050][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4095'. [ 495.828234][T21332] netlink: 'syz.0.4100': attribute type 39 has an invalid length. [ 495.856901][T21322] bridge_slave_1: left allmulticast mode [ 495.865437][T21322] bridge_slave_1: left promiscuous mode [ 495.872624][T21322] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.883068][T21322] bridge_slave_0: left allmulticast mode [ 495.890318][T21322] bridge_slave_0: left promiscuous mode [ 495.896312][T21322] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.996394][T21330] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 496.016007][T21332] bridge0: port 3(syz_tun) entered disabled state [ 496.052652][T21332] syz_tun (unregistering): left allmulticast mode [ 496.059311][T21332] syz_tun (unregistering): left promiscuous mode [ 496.079064][T21332] bridge0: port 3(syz_tun) entered disabled state [ 496.102939][T21336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4101'. [ 496.112273][T21336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.147984][T21336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.275523][T21340] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 496.301581][T21341] xt_hashlimit: size too large, truncated to 1048576 [ 496.415731][T21344] netlink: 'syz.6.4105': attribute type 39 has an invalid length. [ 496.445700][T21349] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 496.488976][T21351] netlink: 'syz.6.4105': attribute type 6 has an invalid length. [ 496.546970][T21349] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 496.850912][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4111'. [ 496.856559][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4112'. [ 497.089531][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 497.097636][ C1] lec:lec_tx_timeout: lec0 [ 497.104052][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 497.147033][T21377] bond0: Removing last arp target with arp_interval on [ 497.204408][T21381] geneve3: entered promiscuous mode [ 497.392709][T21395] netlink: 'syz.0.4118': attribute type 21 has an invalid length. [ 497.429855][T21395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4118'. [ 497.445100][T21397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4120'. [ 497.505549][T21402] netlink: 'syz.7.4122': attribute type 1 has an invalid length. [ 497.624646][T21415] netlink: 'syz.4.4125': attribute type 21 has an invalid length. [ 497.698395][T21418] netlink: 'syz.0.4124': attribute type 9 has an invalid length. [ 497.708945][T21402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.841271][T21425] syzkaller0: entered promiscuous mode [ 497.857228][T21425] syzkaller0: entered allmulticast mode [ 497.984193][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4129'. [ 498.003457][T21432] openvswitch: netlink: Duplicate key (type 32). [ 498.205992][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4132'. [ 498.276426][T21439] bond3: (slave veth3): Enslaving as an active interface with a down link [ 498.330922][T21451] openvswitch: netlink: IPv4 tun info is not correct [ 498.890386][T21484] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode [ 498.922763][T21488] erspan0: entered promiscuous mode [ 499.145187][T21501] ieee802154 phy0 wpan0: encryption failed: -126 [ 499.159344][T21492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.867704][T21536] __nla_validate_parse: 7 callbacks suppressed [ 499.867725][T21536] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4160'. [ 499.960966][T21536] vlan2: entered allmulticast mode [ 500.009016][T21536] vlan1: entered allmulticast mode [ 500.019191][T21536] veth0_vlan: entered allmulticast mode [ 500.094963][T21538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4161'. [ 500.107787][T21538] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4161'. [ 500.156233][T21546] bond1: entered promiscuous mode [ 500.162237][T21546] bond1: entered allmulticast mode [ 500.167986][T21546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.250202][T21554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4166'. [ 500.696103][T21592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4174'. [ 500.757519][T21591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.769890][T21596] syz_tun: left allmulticast mode [ 500.963084][T21604] validate_nla: 6 callbacks suppressed [ 500.963106][T21604] netlink: 'syz.8.4177': attribute type 1 has an invalid length. [ 500.980924][T21604] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4177'. [ 501.050431][T21614] netlink: 'syz.8.4177': attribute type 1 has an invalid length. [ 501.080246][T21614] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4177'. [ 501.103317][T21614] netlink: 658 bytes leftover after parsing attributes in process `syz.8.4177'. [ 501.131352][T21614] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4177'. [ 501.147687][T21616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4181'. [ 501.208513][T21622] netem: incorrect gi model size [ 501.223580][T21622] netem: change failed [ 501.283307][T21628] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 501.353606][T21632] netlink: 'syz.8.4186': attribute type 29 has an invalid length. [ 501.364414][T21632] netlink: 'syz.8.4186': attribute type 29 has an invalid length. [ 501.420042][T21632] unsupported nla_type 58 [ 501.533221][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.548862][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.890292][T21651] bond4: entered allmulticast mode [ 501.922977][T21651] bridge0: entered promiscuous mode [ 501.953564][T21651] bridge0: entered allmulticast mode [ 501.973164][T21662] netlink: 'syz.8.4194': attribute type 1 has an invalid length. [ 502.012628][T21662] netlink: 'syz.8.4194': attribute type 1 has an invalid length. [ 502.033616][T21662] netlink: 'syz.8.4194': attribute type 8 has an invalid length. [ 502.137302][T21672] openvswitch: netlink: Flow key attr not present in new flow. [ 502.159868][ T51] block nbd1: Possible stuck request ffff888025260000: control (read@0,1024B). Runtime 60 seconds [ 502.171092][ T51] block nbd1: Possible stuck request ffff888025260200: control (read@1024,1024B). Runtime 60 seconds [ 502.182834][ T51] block nbd1: Possible stuck request ffff888025260400: control (read@2048,1024B). Runtime 60 seconds [ 502.193924][ T51] block nbd1: Possible stuck request ffff888025260600: control (read@3072,1024B). Runtime 60 seconds [ 502.308580][T21674] tipc: Enabled bearer , priority 0 [ 502.360878][T21674] syzkaller0: entered promiscuous mode [ 502.375051][T21678] netlink: 'syz.6.4198': attribute type 10 has an invalid length. [ 502.386533][T21674] syzkaller0: entered allmulticast mode [ 502.448362][T21678] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 502.470572][T21683] can: request_module (can-proto-4) failed. [ 502.476800][T21676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 502.486408][T21677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.514429][T21683] syzkaller0: entered promiscuous mode [ 502.520258][T21683] syzkaller0: entered allmulticast mode [ 502.531097][T21674] tipc: Resetting bearer [ 502.556499][T21673] tipc: Resetting bearer [ 502.586534][T21673] tipc: Disabling bearer [ 502.879469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 502.886979][T21695] syzkaller0: entered promiscuous mode [ 502.887920][ C1] lec:lec_tx_timeout: lec0 [ 502.894155][T21695] syzkaller0: entered allmulticast mode [ 502.898102][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 505.510120][T21761] bond5 (unregistering): Released all slaves [ 505.526135][T21770] __nla_validate_parse: 14 callbacks suppressed [ 505.526163][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4221'. [ 506.044343][T21796] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4230'. [ 506.090889][T21796] gretap0: entered promiscuous mode [ 506.121296][T21799] netlink: 'syz.6.4232': attribute type 39 has an invalid length. [ 506.129922][T21796] netlink: 'syz.4.4230': attribute type 1 has an invalid length. [ 506.152589][T21796] netlink: 'syz.4.4230': attribute type 1 has an invalid length. [ 506.248206][T21803] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.4233'. [ 506.290503][T21803] openvswitch: netlink: Message has 6 unknown bytes. [ 506.473381][T21812] syzkaller0: entered promiscuous mode [ 506.495694][T21812] syzkaller0: entered allmulticast mode [ 506.775956][T21836] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4243'. [ 506.877490][T21839] syz.6.4244 (21839) used obsolete PPPIOCDETACH ioctl [ 506.963866][T21843] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4246'. [ 506.975448][T21841] syzkaller0: entered promiscuous mode [ 506.981399][T21841] syzkaller0: entered allmulticast mode [ 507.176548][T21852] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.4249'. [ 507.253650][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4250'. [ 507.308602][T21860] netlink: 'syz.7.4250': attribute type 1 has an invalid length. [ 507.333207][T21860] netlink: 'syz.7.4250': attribute type 2 has an invalid length. [ 507.510997][T21867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4252'. [ 507.717059][T21880] bond4: option resend_igmp: invalid value (32767) [ 507.739729][T21880] bond4: option resend_igmp: allowed values 0 - 255 [ 507.781472][T21880] bond4 (unregistering): Released all slaves [ 507.919918][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 507.928028][ C1] lec:lec_tx_timeout: lec0 [ 507.933400][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 507.977299][T21894] IPv6: sit1: Disabled Multicast RS [ 507.991116][T21894] sit1: entered allmulticast mode [ 508.344870][T21916] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4268'. [ 508.392620][T21918] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4269'. [ 508.693418][T21936] netlink: 'syz.4.4273': attribute type 1 has an invalid length. [ 508.715618][T21940] veth3: entered promiscuous mode [ 508.785989][T21944] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:32785 [ 508.846623][T21943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.875459][T21943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.908272][T21943] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 508.930942][T21943] bond0 (unregistering): Released all slaves [ 509.309797][T21963] netlink: 'syz.8.4282': attribute type 5 has an invalid length. [ 509.490105][T21969] netlink: 'syz.7.4285': attribute type 23 has an invalid length. [ 509.573486][T21979] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.744573][T21990] netlink: 'syz.4.4288': attribute type 39 has an invalid length. [ 510.475918][T22000] bond2: option lp_interval: invalid value (0) [ 510.486632][T22000] bond2: option lp_interval: allowed values 1 - 2147483647 [ 510.535808][T22000] bond2 (unregistering): Released all slaves [ 510.633977][T22018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.686985][T22016] __nla_validate_parse: 8 callbacks suppressed [ 510.687008][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4295'. [ 510.743190][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4295'. [ 510.752456][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4295'. [ 510.974032][T22026] netlink: 'syz.8.4299': attribute type 83 has an invalid length. [ 510.983714][T22026] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4299'. [ 511.243796][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4304'. [ 511.289269][T22043] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4304'. [ 511.454179][T22054] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 511.518999][T22061] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4311'. [ 511.539598][T22060] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4312'. [ 511.565832][T22060] ieee802154 phy0 wpan0: encryption failed: -126 [ 511.659153][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4313'. [ 511.777599][T22073] syz_tun: entered allmulticast mode [ 511.785239][T22072] syz_tun: left allmulticast mode [ 511.906350][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4317'. [ 512.023593][T22088] syz_tun: entered allmulticast mode [ 512.073685][T22087] dvmrp8: entered allmulticast mode [ 512.144420][T22095] tipc: Enabled bearer , priority 0 [ 512.209234][T22095] tipc: Disabling bearer [ 512.234098][T22087] syz_tun: left allmulticast mode [ 512.241297][T22087] dvmrp8: left allmulticast mode [ 512.351998][T22100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.493438][T22110] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 512.526393][T22110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.661628][T22112] netlink: 'syz.4.4327': attribute type 83 has an invalid length. [ 512.771128][T22116] netlink: 'syz.6.4329': attribute type 4 has an invalid length. [ 512.854852][T22124] team1: entered promiscuous mode [ 512.910568][T22124] team1: entered allmulticast mode [ 512.949692][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 512.957793][ C1] lec:lec_tx_timeout: lec0 [ 512.960115][T22128] dvmrp6: entered allmulticast mode [ 512.963259][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 513.237149][T22143] : entered promiscuous mode [ 513.662875][T22156] siw: device registration error -23 [ 513.668378][T22164] openvswitch: netlink: IP tunnel TTL not specified. [ 513.674435][T22156] Unsupported ieee802154 address type: 0 [ 513.690051][T22167] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 513.710311][T15192] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 513.890092][T15192] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 514.104694][T22189] ip6gre1: entered promiscuous mode [ 514.137552][T22189] ip6gre1: entered allmulticast mode [ 514.733576][T22218] syzkaller0: entered promiscuous mode [ 514.739228][T22218] syzkaller0: entered allmulticast mode [ 515.048525][T22238] syzkaller0: entered promiscuous mode [ 515.059253][T22238] syzkaller0: entered allmulticast mode [ 515.738621][T22273] __nla_validate_parse: 19 callbacks suppressed [ 515.738643][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4374'. [ 516.033758][T22290] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4376'. [ 516.215754][T22296] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 516.492378][T22310] macvtap1: entered promiscuous mode [ 516.497943][T22310] macvtap1: entered allmulticast mode [ 516.540981][T22310] º: entered allmulticast mode [ 516.609779][T22313] netlink: 'syz.8.4387': attribute type 1 has an invalid length. [ 516.613713][T22311] macvtap2: entered promiscuous mode [ 516.623410][T22311] macvtap2: entered allmulticast mode [ 516.631365][T22313] netlink: 'syz.8.4387': attribute type 2 has an invalid length. [ 516.641066][T22313] netlink: 'syz.8.4387': attribute type 1 has an invalid length. [ 516.648949][T22313] netlink: 'syz.8.4387': attribute type 2 has an invalid length. [ 516.666731][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 516.692373][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'. [ 516.784492][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 516.796600][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'. [ 516.823097][T22326] xt_NFQUEUE: number of total queues is 0 [ 516.895960][T22326] xt_NFQUEUE: number of total queues is 0 [ 517.030002][T22337] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4393'. [ 517.360108][T22357] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4399'. [ 517.404134][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4398'. [ 517.436444][T22360] IPv6: sit1: Disabled Multicast RS [ 517.437862][T22366] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4399'. [ 517.450547][T22360] sit1: entered allmulticast mode [ 517.518904][T22368] xt_hashlimit: size too large, truncated to 1048576 [ 517.979712][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 517.987808][ C1] lec:lec_tx_timeout: lec0 [ 517.993282][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 518.244920][T22391] syzkaller0: entered promiscuous mode [ 518.265809][T22391] syzkaller0: entered allmulticast mode [ 518.358755][T22406] openvswitch: netlink: Flow key attr not present in new flow. [ 518.947197][T22435] Cannot find map_set index 65533 as target [ 519.103342][T22445] netlink: 'syz.8.4421': attribute type 21 has an invalid length. [ 519.112181][T22443] netlink: 'syz.6.4422': attribute type 7 has an invalid length. [ 519.246404][T22441] netlink: 'syz.8.4421': attribute type 1 has an invalid length. [ 520.623388][T22410] pimreg: entered allmulticast mode [ 520.651671][T22445] netlink: 'syz.8.4421': attribute type 1 has an invalid length. [ 520.691439][T22441] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 520.753868][T22450] __nla_validate_parse: 4 callbacks suppressed [ 520.753890][T22450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4423'. [ 520.796942][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.817650][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.854905][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.875264][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.453262][T22495] openvswitch: netlink: IP tunnel dst address not specified [ 521.808596][T22508] openvswitch: netlink: Key type 48 is out of range max 32 [ 521.854987][T22507] IPv6: Can't replace route, no match found [ 521.862082][T22507] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4438'. [ 522.005548][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 522.294051][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4447'. [ 522.324329][T22531] openvswitch: netlink: Flow actions attr not present in new flow. [ 522.468495][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4448'. [ 522.671422][T22549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4453'. [ 522.709197][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4456'. [ 522.723064][T22552] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4455'. [ 522.750103][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4454'. [ 522.765518][T22554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.787307][T22554] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 522.829850][T22554] team0: Failed to send options change via netlink (err -105) [ 522.830434][T22563] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4457'. [ 522.884486][T22563] openvswitch: netlink: Flow key attr not present in new flow. [ 522.956076][T22554] team0: Port device batadv0 added [ 523.000511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 523.008646][ C1] lec:lec_tx_timeout: lec0 [ 523.013783][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 523.242248][T22585] netlink: 564 bytes leftover after parsing attributes in process `syz.4.4463'. [ 523.670447][T22600] bridge_slave_0: entered promiscuous mode [ 523.791761][T22600] netlink: 'syz.7.4470': attribute type 6 has an invalid length. [ 523.824484][T22600] netlink: 'syz.7.4470': attribute type 5 has an invalid length. [ 524.087419][T22612] syzkaller0: entered promiscuous mode [ 524.124116][T22612] syzkaller0: entered allmulticast mode [ 524.232277][T22612] tipc: Started in network mode [ 524.274093][T22612] tipc: Node identity 024b99634c09, cluster identity 4711 [ 524.305271][T22612] tipc: Enabled bearer , priority 0 [ 524.356874][T22612] tipc: Resetting bearer [ 524.433671][T22612] tipc: Disabling bearer [ 524.782920][T22646] bridge0: entered promiscuous mode [ 524.788344][T22646] bridge0: entered allmulticast mode [ 524.855314][T22649] tipc: Enabling of bearer rejected, failed to enable media [ 525.228277][T22675] openvswitch: netlink: Missing valid actions attribute. [ 525.259245][T22675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.105926][T22707] syzkaller0: entered allmulticast mode [ 526.296434][T22703] syzkaller0: left allmulticast mode [ 526.544827][T22721] __nla_validate_parse: 15 callbacks suppressed [ 526.544849][T22721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4503'. [ 526.553795][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4504'. [ 526.605828][T22723] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4504'. [ 526.807452][T22738] netlink: 'syz.6.4508': attribute type 11 has an invalid length. [ 526.816577][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4508'. [ 526.826773][T22738] netlink: 'syz.6.4508': attribute type 11 has an invalid length. [ 526.835181][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4508'. [ 526.928247][T22740] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4509'. [ 526.942714][T22740] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4509'. [ 527.327228][T22759] bridge2: entered promiscuous mode [ 527.332877][T22759] bridge2: entered allmulticast mode [ 527.442388][T22762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.458266][T15192] lo speed is unknown, defaulting to 1000 [ 527.627173][T22764] lo speed is unknown, defaulting to 1000 [ 527.634681][T22764] lo speed is unknown, defaulting to 1000 [ 528.029475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 528.037542][ C1] lec:lec_tx_timeout: lec0 [ 528.042399][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 528.511571][T22788] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4521'. [ 529.496488][T22728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.786835][T22831] lo speed is unknown, defaulting to 1000 [ 529.876371][T22831] lo speed is unknown, defaulting to 1000 [ 530.684853][T22877] pim6reg: entered allmulticast mode [ 530.706449][ T13] nci: nci_rx_work: unknown MT 0x7 [ 530.828219][T22884] netlink: 'syz.7.4534': attribute type 5 has an invalid length. [ 531.050694][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4537'. [ 531.225503][T22903] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4539'. [ 531.376702][T22907] netlink: 'syz.4.4539': attribute type 2 has an invalid length. [ 531.405555][T22907] netlink: 'syz.4.4539': attribute type 2 has an invalid length. [ 532.246996][ T51] block nbd1: Possible stuck request ffff888025260000: control (read@0,1024B). Runtime 90 seconds [ 532.257996][ T51] block nbd1: Possible stuck request ffff888025260200: control (read@1024,1024B). Runtime 90 seconds [ 532.268995][ T51] block nbd1: Possible stuck request ffff888025260400: control (read@2048,1024B). Runtime 90 seconds [ 532.280802][ T51] block nbd1: Possible stuck request ffff888025260600: control (read@3072,1024B). Runtime 90 seconds [ 533.049943][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 533.058095][ C1] lec:lec_tx_timeout: lec0 [ 533.063042][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 533.484994][T22867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.652074][T22934] netlink: 'syz.0.4540': attribute type 11 has an invalid length. [ 533.681398][T22934] netlink: 'syz.0.4540': attribute type 11 has an invalid length. [ 533.698550][T22934] __nla_validate_parse: 2 callbacks suppressed [ 533.698570][T22934] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4540'. [ 533.715487][T22941] netlink: 'syz.7.4541': attribute type 33 has an invalid length. [ 533.781449][T22941] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4541'. [ 533.952117][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4545'. [ 534.078025][T22958] xt_TCPMSS: Only works on TCP SYN packets [ 534.088144][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 534.130767][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4547'. [ 534.156770][T22960] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 534.198700][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4550'. [ 534.211290][T22964] openvswitch: netlink: Unknown nsh attribute 0 [ 534.221924][T22960] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4547'. [ 534.301414][T22967] netlink: 'syz.0.4547': attribute type 39 has an invalid length. [ 534.328112][T22974] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4551'. [ 534.415567][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4551'. [ 534.446030][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4551'. [ 535.361717][T23033] netlink: 'syz.4.4564': attribute type 2 has an invalid length. [ 535.506340][T23038] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 535.636603][T23046] netlink: 'syz.4.4570': attribute type 1 has an invalid length. [ 535.662160][T23049] netlink: 'syz.8.4571': attribute type 1 has an invalid length. [ 535.701804][T23052] netlink: 'syz.8.4571': attribute type 1 has an invalid length. [ 535.745935][T23046] bond4: entered promiscuous mode [ 535.758576][T23046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.766900][T23057] openvswitch: netlink: Multiple metadata blocks provided [ 535.879326][T23052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.944891][T23056] bond5: (slave veth1): Enslaving as an active interface with a down link [ 535.972128][T23058] bond4: (slave bridge2): making interface the new active one [ 535.983899][T23058] bridge2: entered promiscuous mode [ 536.019097][T23058] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 536.192106][T23073] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 536.690625][T23089] syzkaller0: entered promiscuous mode [ 536.696313][T23089] syzkaller0: entered allmulticast mode [ 536.791457][T23105] veth1_macvtap: left promiscuous mode [ 536.910604][T23111] ieee802154 phy0 wpan0: encryption failed: -22 [ 538.069766][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 538.077981][ C1] lec:lec_tx_timeout: lec0 [ 538.082768][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 538.825558][T23124] 8021q: VLANs not supported on syzkaller1 [ 539.131212][T23147] netlink: 'syz.4.4590': attribute type 13 has an invalid length. [ 539.160625][T23147] veth0_macvtap: left promiscuous mode [ 539.179562][T23147] macvtap0: entered allmulticast mode [ 539.232398][T23147] macvtap0: refused to change device tx_queue_len [ 539.267015][T23147] __nla_validate_parse: 8 callbacks suppressed [ 539.267038][T23147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 539.314131][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4595'. [ 539.345040][T23137] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4590'. [ 539.422774][T23160] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4595'. [ 540.021410][T23196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4607'. [ 540.197797][T23197] syzkaller0: entered promiscuous mode [ 540.215830][T23197] syzkaller0: entered allmulticast mode [ 540.260060][T23207] netlink: 'syz.7.4610': attribute type 21 has an invalid length. [ 540.368015][T23207] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4610'. [ 540.649333][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4616'. [ 540.657705][T23231] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4615'. [ 542.344734][T23228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.977661][T15192] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 542.997623][T15192] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 543.015157][T15192] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 543.024869][T15192] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 543.033384][T15192] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 543.062137][T15192] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 543.081770][T15192] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 543.092177][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 543.092211][ C1] lec:lec_tx_timeout: lec0 [ 543.100986][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.183951][T23276] syzkaller0: entered promiscuous mode [ 543.189636][T23276] syzkaller0: entered allmulticast mode [ 543.435763][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4630'. [ 543.446693][T23289] bridge_slave_1: left allmulticast mode [ 543.452938][T23289] bridge_slave_1: left promiscuous mode [ 543.459182][T23289] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.530572][T23289] bridge_slave_0: left allmulticast mode [ 543.545735][T23289] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.574877][T23297] SET target dimension over the limit! [ 543.730898][T23301] x_tables: duplicate underflow at hook 2 [ 543.818436][T23304] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4635'. [ 544.042171][T23306] netlink: 'syz.4.4636': attribute type 3 has an invalid length. [ 544.073786][T23309] netlink: 'syz.7.4637': attribute type 1 has an invalid length. [ 544.097149][T23311] netem: change failed [ 544.148073][T23309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.157590][T23310] netem: change failed [ 544.265765][T23321] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 544.482376][T23339] netlink: 'syz.0.4642': attribute type 1 has an invalid length. [ 544.530575][T23339] __nla_validate_parse: 1 callbacks suppressed [ 544.530593][T23339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4642'. [ 544.590983][T23339] workqueue: Failed to create a rescuer kthread for wq "phy5-mac-cmds": -EINTR [ 544.614133][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4645'. [ 544.666017][T23351] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.782283][T23358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.911894][T23372] netlink: 'syz.7.4648': attribute type 29 has an invalid length. [ 544.936269][T23376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4648'. [ 545.173044][T23386] netlink: 10 bytes leftover after parsing attributes in process `syz.8.4653'. [ 545.233841][T23393] netlink: 'syz.4.4652': attribute type 11 has an invalid length. [ 545.282873][T23393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4652'. [ 545.476954][T23403] openvswitch: netlink: Duplicate or invalid key (type 0). [ 545.487149][T23403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.505939][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'. [ 545.516749][T23404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4658'. [ 545.625806][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4661'. [ 545.731235][T23417] netlink: 'syz.4.4663': attribute type 1 has an invalid length. [ 545.804750][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4663'. [ 545.906445][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'. [ 546.425618][T23446] netlink: 'syz.4.4672': attribute type 13 has an invalid length. [ 546.622096][T15192] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 546.897667][T23475] pimreg3: entered allmulticast mode [ 547.520349][T15192] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 548.299354][T23522] netlink: 'syz.4.4691': attribute type 1 has an invalid length. [ 548.307864][T23523] netlink: 'syz.4.4691': attribute type 1 has an invalid length. [ 548.427020][T23523] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 548.761997][T23539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 548.880661][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 548.896845][ C1] lec:lec_tx_timeout: lec0 [ 548.902972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 549.391745][T23570] nbd7: detected capacity change from 0 to 63 [ 549.444857][T23581] netlink: 'syz.8.4711': attribute type 1 has an invalid length. [ 549.463710][T23568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.476331][T23571] block nbd7: NBD_DISCONNECT [ 549.497246][T23586] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 549.497929][T23571] block nbd7: Disconnected due to user request. [ 549.514900][T23571] block nbd7: shutting down sockets [ 549.532531][T23586] syzkaller1: entered promiscuous mode [ 549.538042][T23586] syzkaller1: entered allmulticast mode [ 549.542377][ C0] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.554133][ C0] Buffer I/O error on dev nbd7, logical block 0, async page read [ 549.564504][ C0] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.574003][T23586] __nla_validate_parse: 4 callbacks suppressed [ 549.574021][T23586] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4709'. [ 549.576543][ C1] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.580292][ C0] Buffer I/O error on dev nbd7, logical block 1, async page read [ 549.600300][ C0] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.600337][ C0] Buffer I/O error on dev nbd7, logical block 3, async page read [ 549.608051][ C1] Buffer I/O error on dev nbd7, logical block 2, async page read [ 549.614364][T23567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.618440][T11621] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.686358][T11621] Buffer I/O error on dev nbd7, logical block 0, async page read [ 549.730858][T11621] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.772602][T11621] Buffer I/O error on dev nbd7, logical block 1, async page read [ 549.794186][T11621] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.833191][T23592] netlink: 'syz.0.4714': attribute type 8 has an invalid length. [ 549.859701][T11621] Buffer I/O error on dev nbd7, logical block 2, async page read [ 549.885397][T11621] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 549.925754][T11621] Buffer I/O error on dev nbd7, logical block 3, async page read [ 549.996253][T11621] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.029682][T11621] Buffer I/O error on dev nbd7, logical block 0, async page read [ 550.037926][T11621] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.092591][T11621] Buffer I/O error on dev nbd7, logical block 1, async page read [ 550.112334][T11621] ldm_validate_partition_table(): Disk read failed. [ 550.131282][T11621] Dev nbd7: unable to read RDB block 0 [ 550.147782][T11621] nbd7: unable to read partition table [ 550.156517][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4717'. [ 550.194529][T11621] ldm_validate_partition_table(): Disk read failed. [ 550.206973][T11621] Dev nbd7: unable to read RDB block 0 [ 550.231528][T11621] nbd7: unable to read partition table [ 550.377947][T23607] xfrm1: entered promiscuous mode [ 550.455971][T23607] xfrm1: entered allmulticast mode [ 550.489903][T23621] netlink: 'syz.0.4721': attribute type 7 has an invalid length. [ 550.497751][T23623] SET target dimension over the limit! [ 550.498210][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4722'. [ 550.565787][T23628] netlink: 'syz.4.4723': attribute type 1 has an invalid length. [ 550.588820][T23628] netlink: 'syz.4.4723': attribute type 1 has an invalid length. [ 550.793346][T23639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4726'. [ 550.849790][T23639] macvlan0: entered promiscuous mode [ 550.941388][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'. [ 551.024164][T23645] openvswitch: netlink: IP tunnel dst address not specified [ 551.073225][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4727'. [ 551.193252][T23657] team1: entered promiscuous mode [ 551.204946][T23664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4731'. [ 551.219708][T23657] team1: entered allmulticast mode [ 551.347596][T23670] netlink: 'syz.4.4733': attribute type 1 has an invalid length. [ 551.448359][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4733'. [ 551.977398][T23708] netlink: 'syz.4.4739': attribute type 83 has an invalid length. [ 552.042257][T23711] netlink: 'syz.0.4742': attribute type 1 has an invalid length. [ 552.073093][T23712] netlink: 'syz.0.4742': attribute type 1 has an invalid length. [ 552.273611][T23711] bond5: entered promiscuous mode [ 552.309093][T23711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.309824][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4746'. [ 552.326430][T23725] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4746'. [ 552.338796][T23725] netlink: 'syz.6.4746': attribute type 5 has an invalid length. [ 552.677228][T23737] bond0: option min_links: invalid value (18446744073709551614) [ 552.685769][T23737] bond0: option min_links: allowed values 0 - 2147483647 [ 552.725088][T23737] bond0 (unregistering): Released all slaves [ 552.753138][T23733] syzkaller0: left promiscuous mode [ 552.758417][T23733] syzkaller0: left allmulticast mode [ 553.919701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 553.928085][ C1] lec:lec_tx_timeout: lec0 [ 553.933015][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 556.480756][ T5194] udevd[5194]: worker [10404] /devices/virtual/block/nbd1 is taking a long time [ 558.939664][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 558.947691][ C1] lec:lec_tx_timeout: lec0 [ 558.952396][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.320284][ T51] block nbd1: Possible stuck request ffff888025260000: control (read@0,1024B). Runtime 120 seconds [ 562.331287][ T51] block nbd1: Possible stuck request ffff888025260200: control (read@1024,1024B). Runtime 120 seconds [ 562.342786][ T51] block nbd1: Possible stuck request ffff888025260400: control (read@2048,1024B). Runtime 120 seconds [ 562.354025][ T51] block nbd1: Possible stuck request ffff888025260600: control (read@3072,1024B). Runtime 120 seconds [ 562.970521][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.978322][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.959520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 563.967571][ C1] lec:lec_tx_timeout: lec0 [ 563.972417][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.979483][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.987574][ C1] lec:lec_tx_timeout: lec0 [ 568.992478][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 574.009716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 574.018078][ C1] lec:lec_tx_timeout: lec0 [ 574.022989][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 578.274726][T23770] __nla_validate_parse: 4 callbacks suppressed [ 578.274749][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4759'. [ 578.495792][T23785] netem: incorrect gi model size [ 578.554907][T23785] netem: change failed [ 578.603573][T23787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4763'. [ 578.653801][T23789] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4764'. [ 578.702334][T23789] delete_channel: no stack [ 578.867507][T23803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.029457][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 579.037574][ C1] lec:lec_tx_timeout: lec0 [ 579.043260][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 579.287412][T23822] batman_adv: batadv0: Adding interface: dummy0 [ 579.293998][T23822] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.360263][T23822] batman_adv: batadv0: Interface activated: dummy0 [ 579.630240][T23830] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4773'. [ 579.777630][T23836] netlink: 'syz.4.4774': attribute type 21 has an invalid length. [ 579.822359][T23837] IPv6: sit1: Disabled Multicast RS [ 580.015909][T23848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4780'. [ 580.104580][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4779'. [ 580.122397][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4779'. [ 580.169072][T23858] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4783'. [ 580.192580][T23858] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 580.372413][T23870] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4786'. [ 580.412888][T23873] syzkaller1: entered promiscuous mode [ 580.418673][T23873] syzkaller1: entered allmulticast mode [ 580.757409][T23893] lo speed is unknown, defaulting to 1000 [ 580.772677][T23893] lo speed is unknown, defaulting to 1000 [ 580.882062][T17316] Bluetooth: hci8: command 0x040f tx timeout [ 581.460424][T23912] syzkaller0: entered promiscuous mode [ 581.465970][T23912] syzkaller0: entered allmulticast mode [ 581.936990][T23919] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4801'. [ 582.167467][T23933] vlan3: entered promiscuous mode [ 582.189794][T23933] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 582.233738][ T5934] IPVS: starting estimator thread 0... [ 582.240175][T23944] IPVS: ip_vs_edit_dest(): server weight less than zero [ 582.266346][T23940] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 582.308250][T23943] veth0: entered promiscuous mode [ 582.329562][T23945] IPVS: using max 28 ests per chain, 67200 per kthread [ 582.436019][T23951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.558367][T23951] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 582.746114][T23959] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 583.570364][T23999] __nla_validate_parse: 5 callbacks suppressed [ 583.570407][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4822'. [ 584.030625][T24014] lo speed is unknown, defaulting to 1000 [ 584.049449][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 584.057618][ C1] lec:lec_tx_timeout: lec0 [ 584.062272][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 584.120026][T24014] lo speed is unknown, defaulting to 1000 [ 584.255629][T24037] sctp: [Deprecated]: syz.8.4832 (pid 24037) Use of int in maxseg socket option. [ 584.255629][T24037] Use struct sctp_assoc_value instead [ 584.357202][T24042] netlink: 'syz.4.4834': attribute type 1 has an invalid length. [ 584.431901][T24035] bond6: Unable to set up delay as MII monitoring is disabled [ 584.467537][T24035] bond6 (unregistering): Released all slaves [ 584.842763][T24061] netlink: 'syz.8.4838': attribute type 24 has an invalid length. [ 584.888849][T24063] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4840'. [ 584.919758][T24061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.933743][T24068] netlink: 'syz.4.4841': attribute type 18 has an invalid length. [ 584.942577][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4841'. [ 585.101704][T24072] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4842'. [ 585.121661][T24069] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 585.144492][T24069] bond7 (unregistering): Released all slaves [ 585.312525][T24074] bond0: entered promiscuous mode [ 585.627408][T24091] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4846'. [ 585.861573][T24101] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.4849'. [ 585.871166][T24101] netlink: Unknown conntrack attr (0) [ 585.876807][T24102] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 585.891163][T24102] bond6: entered promiscuous mode [ 585.896989][T24102] bond6: entered allmulticast mode [ 585.942729][T24102] 8021q: adding VLAN 0 to HW filter on device bond6 [ 586.390665][T24122] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4854'. [ 586.627448][T24132] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4858'. [ 587.288225][T24169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4868'. [ 587.363872][T24172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4870'. [ 587.652048][T24188] netlink: 'syz.0.4876': attribute type 2 has an invalid length. [ 588.237924][T24219] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 588.615706][T24238] __nla_validate_parse: 5 callbacks suppressed [ 588.615727][T24238] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4892'. [ 588.634194][T24238] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4892'. [ 588.697134][T24241] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4891'. [ 588.850979][T24247] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4894'. [ 588.886318][T24249] syzkaller0: entered promiscuous mode [ 588.895282][T24249] syzkaller0: entered allmulticast mode [ 589.069790][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 589.077880][ C1] lec:lec_tx_timeout: lec0 [ 589.082559][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 589.241135][T24265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4901'. [ 589.878514][T24297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'. [ 589.891016][T24292] team0: Port device team_slave_0 removed [ 589.907490][T24265] SET target dimension over the limit! [ 589.928837][T24292] team0: Port device team_slave_1 removed [ 589.968138][T24292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.988635][T24292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.003613][T24292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.008266][T24301] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4909'. [ 590.011571][T24292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.044349][T24292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 590.251109][T24310] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4911'. [ 590.311547][T24312] netlink: 'syz.4.4912': attribute type 10 has an invalid length. [ 590.339325][T24312] team0: Device veth1_macvtap failed to register rx_handler [ 590.431900][T24316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4914'. [ 590.582757][T24322] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 590.640702][T17316] Bluetooth: hci3: command 0x0406 tx timeout [ 590.647514][T24329] netlink: 'syz.0.4917': attribute type 2 has an invalid length. [ 590.659278][T24336] xt_l2tp: v2 doesn't support IP mode [ 590.697653][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4917'. [ 590.710638][T24337] netlink: 'syz.0.4917': attribute type 2 has an invalid length. [ 590.898056][T24346] netlink: 'syz.0.4923': attribute type 1 has an invalid length. [ 590.980327][T24344] xt_l2tp: unknown flags: 10 [ 591.276388][T24364] netlink: 'syz.6.4926': attribute type 1 has an invalid length. [ 591.722866][T24387] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 591.813185][T24387] 8021q: adding VLAN 0 to HW filter on device bond6 [ 591.869241][T24396] bond6: (slave geneve4): making interface the new active one [ 591.881337][T24396] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 591.956578][T24402] netlink: 'syz.8.4943': attribute type 15 has an invalid length. [ 591.964972][T24402] netlink: 'syz.8.4943': attribute type 15 has an invalid length. [ 592.115796][T24407] bond7: option lp_interval: invalid value (0) [ 592.156593][T24407] bond7: option lp_interval: allowed values 1 - 2147483647 [ 592.172559][T24407] bond7 (unregistering): Released all slaves [ 592.337018][T24408] bond7: option all_slaves_active: invalid value (222) [ 592.376832][T24408] bond7 (unregistering): Released all slaves [ 592.413456][ T51] block nbd1: Possible stuck request ffff888025260000: control (read@0,1024B). Runtime 150 seconds [ 592.424724][ T51] block nbd1: Possible stuck request ffff888025260200: control (read@1024,1024B). Runtime 150 seconds [ 592.438736][ T51] block nbd1: Possible stuck request ffff888025260400: control (read@2048,1024B). Runtime 150 seconds [ 592.450233][ T51] block nbd1: Possible stuck request ffff888025260600: control (read@3072,1024B). Runtime 150 seconds [ 593.040034][ T31] INFO: task syz.2.3458:19089 blocked for more than 143 seconds. [ 593.047938][ T31] Not tainted syzkaller #0 [ 593.083913][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 593.109567][ T31] task:syz.2.3458 state:D stack:26584 pid:19089 tgid:19088 ppid:17856 task_flags:0x400140 flags:0x00080002 [ 593.133734][ T31] Call Trace: [ 593.138685][ T31] [ 593.145860][ T31] __schedule+0x14ea/0x5050 [ 593.151614][ T31] ? __pfx___schedule+0x10/0x10 [ 593.156825][ T31] ? schedule+0x90/0x360 [ 593.161799][ T31] schedule+0x164/0x360 [ 593.166015][ T31] schedule_preempt_disabled+0x13/0x30 [ 593.176716][ T31] __mutex_lock+0x7fe/0x1300 [ 593.190353][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 593.195638][ T31] ? __mutex_lock+0x5ac/0x1300 [ 593.212035][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 593.217751][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 593.223029][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 593.228613][ T31] ? rcu_is_watching+0x15/0xb0 [ 593.233632][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 593.240112][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 593.246500][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 593.254337][ T31] ? __asan_memcpy+0x40/0x70 [ 593.258997][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 593.265192][ T31] ? bpf_lsm_capable+0x9/0x20 [ 593.270385][ T31] ? security_capable+0x7e/0x2c0 [ 593.275337][ T31] genl_rcv_msg+0x61c/0x7a0 [ 593.282427][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.287492][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 593.293642][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 593.299047][ T31] netlink_rcv_skb+0x232/0x4b0 [ 593.304505][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.309617][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.314921][ T31] ? genl_rcv+0x19/0x40 [ 593.319093][ T31] ? down_read+0x272/0x2e0 [ 593.323847][ T31] ? genl_rcv+0xd/0x40 [ 593.328111][ T31] genl_rcv+0x28/0x40 [ 593.332941][ T31] netlink_unicast+0x80f/0x9b0 [ 593.337731][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 593.343121][ T31] ? __alloc_skb+0x193/0x390 [ 593.347735][ T31] ? netlink_sendmsg+0x650/0xb40 [ 593.352773][ T31] ? skb_put+0x11b/0x210 [ 593.357047][ T31] netlink_sendmsg+0x813/0xb40 [ 593.362508][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.367833][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 593.373208][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.378632][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.384289][ T31] ____sys_sendmsg+0xa68/0xad0 [ 593.389197][ T31] ? __might_fault+0xaf/0x130 [ 593.394715][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.400157][ T31] ? import_iovec+0x73/0xa0 [ 593.404716][ T31] ___sys_sendmsg+0x2a5/0x360 [ 593.409712][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 593.414696][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.420550][ T31] ? futex_wake+0x4ac/0x580 [ 593.425201][ T31] ? __fget_files+0x2a/0x420 [ 593.430208][ T31] ? __fget_files+0x3a0/0x420 [ 593.434933][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 593.440834][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.446339][ T31] ? rcu_is_watching+0x15/0xb0 [ 593.451693][ T31] do_syscall_64+0xe2/0xf80 [ 593.456219][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.462712][ T31] ? trace_irq_disable+0x37/0x100 [ 593.467767][ T31] ? clear_bhb_loop+0x60/0xb0 [ 593.472598][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.478528][ T31] RIP: 0033:0x7f554b39aeb9 [ 593.483631][ T31] RSP: 002b:00007f554c2bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.492450][ T31] RAX: ffffffffffffffda RBX: 00007f554b615fa0 RCX: 00007f554b39aeb9 [ 593.500647][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000007 [ 593.508648][ T31] RBP: 00007f554b408c1f R08: 0000000000000000 R09: 0000000000000000 [ 593.517440][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.526576][ T31] R13: 00007f554b616038 R14: 00007f554b615fa0 R15: 00007ffd36e742a8 [ 593.534678][ T31] [ 593.537767][ T31] [ 593.537767][ T31] Showing all locks held in the system: [ 593.609639][ T31] 1 lock held by khungtaskd/31: [ 593.628808][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 593.649268][ T31] 2 locks held by getty/5583: [ 593.654187][ T31] #0: ffff888034f7d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 593.664698][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 593.675303][ T31] 3 locks held by kworker/u8:9/6382: [ 593.687168][ T31] #0: ffff88802fd2e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 593.701428][ T31] #1: ffffc9000e2bfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 593.714707][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 593.724922][ T31] 1 lock held by udevd/10404: [ 593.730458][ T31] #0: ffff888142798358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 593.742798][ T31] 2 locks held by syz.3.2552/15393: [ 593.748028][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 593.757079][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 593.768081][ T31] 2 locks held by syz.2.3458/19089: [ 593.773331][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 593.782029][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 593.797564][ T31] 2 locks held by syz.1.3660/19728: [ 593.802939][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 593.811577][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 593.821804][ T31] 2 locks held by syz.5.3676/19789: [ 593.827104][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 593.835453][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 593.846114][ T31] 2 locks held by syz.4.4957/24463: [ 593.851924][ T31] #0: ffffffff8ff0f298 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 593.861668][ T31] #1: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 593.872745][ T31] 2 locks held by syz.7.4958/24473: [ 593.877961][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 593.887900][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 593.899102][ T31] [ 593.903318][ T31] ============================================= [ 593.903318][ T31] [ 593.912239][ T31] NMI backtrace for cpu 0 [ 593.912261][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 593.912279][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 593.912288][ T31] Call Trace: [ 593.912295][ T31] [ 593.912302][ T31] dump_stack_lvl+0xe8/0x150 [ 593.912332][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 593.912355][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 593.912381][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 593.912407][ T31] sys_info+0x135/0x170 [ 593.912436][ T31] watchdog+0xf90/0xfe0 [ 593.912460][ T31] ? watchdog+0x209/0xfe0 [ 593.912486][ T31] kthread+0x726/0x8b0 [ 593.912507][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.912523][ T31] ? __pfx_kthread+0x10/0x10 [ 593.912547][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.912563][ T31] ? __pfx_kthread+0x10/0x10 [ 593.912585][ T31] ret_from_fork+0x51b/0xa40 [ 593.912605][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.912621][ T31] ? __switch_to+0xc82/0x1410 [ 593.912649][ T31] ? __pfx_kthread+0x10/0x10 [ 593.912669][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.912708][ T31] [ 593.912715][ T31] Sending NMI from CPU 0 to CPUs 1: [ 594.035455][ C1] NMI backtrace for cpu 1 [ 594.035475][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 594.035493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 594.035502][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 594.035525][ C1] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 594.035539][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 594.035554][ C1] RAX: 000000000014dedb RBX: ffffffff8199570d RCX: 0000000080000001 [ 594.035566][ C1] RDX: 0000000000000001 RSI: ffffffff8dcc99be RDI: ffffffff8c073a00 [ 594.035576][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 594.035587][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1b70 [ 594.035599][ C1] R13: 1ffff11003a53b70 R14: 0000000000000001 R15: 0000000000000001 [ 594.035610][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 594.035623][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.035634][ C1] CR2: 00007fec6b5e4198 CR3: 0000000078d0e000 CR4: 00000000003526f0 [ 594.035651][ C1] Call Trace: [ 594.035658][ C1] [ 594.035664][ C1] default_idle+0x9/0x20 [ 594.035682][ C1] default_idle_call+0x72/0xb0 [ 594.035702][ C1] do_idle+0x1bd/0x500 [ 594.035716][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.035734][ C1] ? __pfx_do_idle+0x10/0x10 [ 594.035752][ C1] cpu_startup_entry+0x43/0x60 [ 594.035767][ C1] start_secondary+0x101/0x110 [ 594.035787][ C1] common_startup_64+0x13e/0x147 [ 594.035813][ C1] [ 594.099690][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 594.101285][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 594.101305][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 594.101326][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 594.101338][ T31] Call Trace: [ 594.101347][ T31] [ 594.101356][ T31] vpanic+0x1e0/0x670 [ 594.101387][ T31] panic+0xc5/0xd0 [ 594.101407][ T31] ? __pfx_panic+0x10/0x10 [ 594.101437][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 594.101469][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 594.101498][ T31] watchdog+0xfda/0xfe0 [ 594.101521][ T31] ? watchdog+0x209/0xfe0 [ 594.101547][ T31] kthread+0x726/0x8b0 [ 594.101570][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.101587][ T31] ? __pfx_kthread+0x10/0x10 [ 594.101611][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.101628][ T31] ? __pfx_kthread+0x10/0x10 [ 594.101648][ T31] ret_from_fork+0x51b/0xa40 [ 594.101668][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 594.101684][ T31] ? __switch_to+0xc82/0x1410 [ 594.101709][ T31] ? __pfx_kthread+0x10/0x10 [ 594.101729][ T31] ret_from_fork_asm+0x1a/0x30 [ 594.101766][ T31] [ 594.108971][ T31] Kernel Offset: disabled